VIRY.CZ

Dobrý Den
prosím o kontrolu , po restartu PC se mi nenačte žádná stránka, po vypnutí avastu (štítů) vše ok ,ale avast hlásí Pc nechráněn díky.


Logfile of random's system information tool 1.09 (written by random/random)
Run by Hanes at 2013-10-20 14:45:13
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 78 GB (65%) free of 120 GB
Total RAM: 4024 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:45:18, on 20.10.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16720)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Windows\vsnp325.exe
C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Windows\FixCamera.exe
C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Hanes.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [FixCamera] C:\Windows\FixCamera.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SPIRunE] Rundll32 SPIRunE.dll,RunDLLEntry
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe" Minimum
O4 - HKCU\..\Run: [DAEMON Tools Lite] "F:\Instalace\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [LiveSupport] "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3610317745-1078608998-3150650337-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3610317745-1078608998-3150650337-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Global Startup: AVer HID Receiver.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
O4 - Global Startup: AVerQuick.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
O4 - Global Startup: Qualcomm Atheros Killer Network Manager.lnk = C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs:
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AVerRemote - AVerMedia - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: AVerUpdateServer - AVerMedia TECHNOLOGIES, Inc. - C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Qualcomm Atheros Killer Service - Unknown owner - C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10684 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe"
"taskhost.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
"C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe"
"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Logitech Gaming Software\LCore.exe" /minimized
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "172945785815383152919208408132121256934-14912443778661600651476881646756799735
"C:\Program Files\Logitech\Gaming Software\LWEMon.exe" /noui
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\vsnp325.exe"
"C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe" Minimum
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Windows\FixCamera.exe"
"C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Windows\System32\rundll32.exe" SPIRunE.dll,RunDLLEntry
"C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe" -minimized
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2384.0.990245821\419820037" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,18,21,24,26 --gpu-vendor-id=0x10de --gpu-device-id=0x06cd --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.2723 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R1/CookieRetentionPriorityStudy/ExperimentOn/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_63/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --instant-process --enable-threaded-compositing --disable-html-notifications --channel="2384.1.795627168\338529170" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R1/CookieRetentionPriorityStudy/ExperimentOn/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/NewMenuStyle/Compact2/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_63/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="2384.3.1892304046\1116432118" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Hanes\Downloads\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-10-15 1567016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-10-15 606544]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-10-15 1567016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-10-15 606544]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-08-27 1028896]
"Launch LCore"=C:\Program Files\Logitech Gaming Software\LCore.exe [2013-08-01 8290584]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2010-06-14 190536]
"snp325"=C:\Windows\vsnp325.exe [2006-10-10 827392]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-07-26 7194840]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Overwolf"=C:\Program Files (x86)\Overwolf\Overwolf.exe -silent []
"OscarEditor"=C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe [2010-07-22 2636800]
"DAEMON Tools Lite"=F:\Instalace\DAEMON Tools Lite\DTLite.exe [2013-07-03 3673184]
"LiveSupport"=C:\Program Files (x86)\LiveSupport\LiveSupport.exe /noshow /log []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2013-04-26 292848]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-10-18 3567800]
"FixCamera"=C:\Windows\FixCamera.exe [2007-02-12 20480]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"SPIRunE"=Rundll32 SPIRunE.dll,RunDLLEntry []
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AVer HID Receiver.lnk - C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
AVerQuick.lnk - C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
Qualcomm Atheros Killer Network Manager.lnk - C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux2"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-10-20 14:45:14 ----D---- C:\Program Files\trend micro
2013-10-20 14:45:13 ----D---- C:\rsit
2013-10-18 22:01:30 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-10-18 22:01:30 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-10-18 22:01:29 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-10-18 22:01:29 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-10-18 22:01:28 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-10-18 22:01:28 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-10-18 22:01:27 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-10-18 22:01:27 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2013-10-18 22:01:27 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-10-18 22:01:27 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-10-18 22:01:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-10-18 22:01:27 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-10-18 22:01:27 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-10-18 22:01:27 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-10-18 22:01:27 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-10-18 22:01:27 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-10-18 22:01:26 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-10-18 22:01:26 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-10-18 22:01:26 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-10-18 22:01:26 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-10-18 22:01:26 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-10-18 22:01:26 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-10-18 22:01:26 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-10-18 22:01:26 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-10-18 22:01:25 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-10-18 22:01:25 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2013-10-18 22:01:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2013-10-18 22:01:25 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-10-18 22:01:25 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-10-18 22:01:25 ----A---- C:\Windows\system32\d3dx10_42.dll
2013-10-18 22:01:25 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-10-18 22:01:25 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-10-18 22:01:24 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-10-18 22:01:24 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2013-10-18 22:01:24 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-10-18 22:01:24 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-10-18 22:01:24 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-10-18 22:01:24 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-10-18 22:01:24 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-10-18 17:56:44 ----SHD---- C:\ProgramData\DSS
2013-10-18 17:56:44 ----D---- C:\ProgramData\Codemasters
2013-10-18 17:40:46 ----A---- C:\Windows\SYSWOW64\rapture3d_oal.dll
2013-10-18 17:40:46 ----A---- C:\Windows\SYSWOW64\mkl_blueripple.dll
2013-10-18 17:40:45 ----D---- C:\Program Files (x86)\BRS
2013-10-18 17:40:44 ----D---- C:\Program Files (x86)\OpenAL
2013-10-18 17:40:43 ----RA---- C:\Windows\SYSWOW64\tmp2C80.tmp
2013-10-18 17:40:35 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-10-18 17:40:35 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2013-10-18 17:39:56 ----D---- C:\Windows\SYSWOW64\xlive
2013-10-18 17:39:56 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-10-18 17:39:45 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2013-10-18 17:39:45 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2013-10-18 17:39:44 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-10-18 17:39:44 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2013-10-18 17:39:44 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-10-18 17:39:44 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2013-10-18 17:35:28 ----D---- C:\ProgramData\TEMP
2013-10-18 17:30:33 ----A---- C:\Users\Hanes\AppData\Roaming\LiveSupport.exe_log.txt
2013-10-18 17:30:32 ----A---- C:\Users\Hanes\AppData\Roaming\regsvr32.exe_log.txt
2013-10-18 17:29:58 ----D---- C:\Program Files (x86)\Seznam.cz
2013-10-18 17:29:16 ----D---- C:\Users\Hanes\AppData\Roaming\Seznam.cz
2013-10-18 17:28:58 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2013-10-18 17:28:57 ----D---- C:\Users\Hanes\AppData\Roaming\DAEMON Tools Lite
2013-10-18 17:25:19 ----D---- C:\ProgramData\DAEMON Tools Lite
2013-10-17 20:35:40 ----D---- C:\Users\Hanes\AppData\Roaming\Malwarebytes
2013-10-17 20:35:26 ----D---- C:\ProgramData\Malwarebytes
2013-10-17 20:35:23 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-17 20:35:23 ----A---- C:\Windows\system32\drivers\mbam.sys
2013-10-17 19:14:51 ----A---- C:\autoexec.bat
2013-10-17 19:08:43 ----D---- C:\sh4ldr
2013-10-17 19:08:43 ----D---- C:\Program Files\Enigma Software Group
2013-10-17 19:08:14 ----D---- C:\Windows\86CA3695A4124BAE92B649A60C2AC663.TMP
2013-10-17 15:54:24 ----D---- C:\Windows\system32\appmgmt
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\url.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\wininet.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\wextract.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\webcheck.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\vbscript.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\urlmon.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\url.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\pngfilt.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\occache.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\msrating.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\msls31.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\mshtmler.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\mshtmled.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\mshtml.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\mshta.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\msfeedssync.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\msfeeds.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\licmgr10.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\jsproxy.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\jscript9.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\jscript.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\inseng.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\imgutil.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\iexpress.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\ieUnatt.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\ieui.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\iesysprep.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\iesetup.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\iertutil.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\iernonce.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\iepeers.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\ieframe.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\iedkcs32.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\ieapfltr.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\ieapfltr.dat
2013-10-17 15:49:28 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\ie4uinit.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\icardie.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\elshyph.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\dxtrans.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\dxtmsft.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\XpsPrint.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\WMPhoto.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\UIAnimation.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\FntCache.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\dxgi.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\DWrite.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\d3d10warp.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\d3d10level9.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\d3d10core.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\d3d10_1.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\d3d10.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\d2d1.dll
2013-10-17 15:46:53 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-10-17 15:46:53 ----A---- C:\Windows\system32\d3d11.dll
2013-10-17 15:31:41 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2013-10-17 15:31:41 ----A---- C:\Windows\system32\comctl32.dll
2013-10-17 15:31:35 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-10-17 15:31:35 ----A---- C:\Windows\system32\crypt32.dll
2013-10-17 15:31:34 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-10-17 15:31:34 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-10-17 15:31:34 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-10-17 15:31:34 ----A---- C:\Windows\system32\wintrust.dll
2013-10-17 15:31:34 ----A---- C:\Windows\system32\cryptsvc.dll
2013-10-17 15:31:34 ----A---- C:\Windows\system32\cryptnet.dll
2013-10-17 15:31:26 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-10-17 15:31:26 ----A---- C:\Windows\system32\consent.exe
2013-10-17 15:31:26 ----A---- C:\Windows\system32\authui.dll
2013-10-17 15:31:26 ----A---- C:\Windows\system32\appinfo.dll
2013-10-17 15:31:16 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-10-17 15:31:16 ----A---- C:\Windows\system32\tzres.dll
2013-10-17 15:31:13 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2013-10-17 15:31:13 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-10-17 15:31:13 ----A---- C:\Windows\system32\lpk.dll
2013-10-17 15:31:13 ----A---- C:\Windows\system32\dciman32.dll
2013-10-17 15:31:13 ----A---- C:\Windows\system32\atmfd.dll
2013-10-17 15:31:12 ----A---- C:\Windows\SYSWOW64\lpk.dll
2013-10-17 15:31:12 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2013-10-17 15:31:12 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-10-17 15:31:12 ----A---- C:\Windows\system32\fontsub.dll
2013-10-17 15:31:12 ----A---- C:\Windows\system32\atmlib.dll
2013-10-17 15:31:11 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-10-17 15:31:11 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-10-17 15:31:11 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-10-17 15:31:11 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-10-17 15:31:11 ----A---- C:\Windows\system32\ntdll.dll
2013-10-17 15:31:11 ----A---- C:\Windows\system32\KernelBase.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-17 15:31:10 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-10-17 15:31:10 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\wow64win.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\wow64cpu.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\wow64.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\winsrv.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\smss.exe
2013-10-17 15:31:10 ----A---- C:\Windows\system32\ntvdm64.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\kernel32.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\csrsrv.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\conhost.exe
2013-10-17 15:31:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-10-17 15:31:09 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-10-17 15:31:08 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-10-17 15:31:08 ----A---- C:\Windows\SYSWOW64\user.exe
2013-10-17 15:31:08 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-10-17 15:31:08 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-10-17 15:31:08 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-10-17 15:31:08 ----A---- C:\Windows\system32\apisetschema.dll
2013-10-17 15:31:07 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-10-17 15:31:07 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-10-17 15:31:06 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2013-10-17 15:31:06 ----A---- C:\Windows\system32\Wdfres.dll
2013-10-17 15:31:06 ----A---- C:\Windows\system32\rpcrt4.dll
2013-10-17 15:31:06 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-10-17 15:31:06 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-10-17 15:31:05 ----A---- C:\Windows\system32\drivers\usbcir.sys
2013-10-17 15:31:05 ----A---- C:\Windows\system32\drivers\USBAUDIO.sys
2013-10-17 15:31:04 ----A---- C:\Windows\SYSWOW64\qedit.dll
2013-10-17 15:31:04 ----A---- C:\Windows\system32\qedit.dll
2013-10-17 15:31:04 ----A---- C:\Windows\system32\drivers\hidparse.sys
2013-10-17 15:31:04 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-10-17 15:30:35 ----A---- C:\Windows\system32\rdpcorets.dll
2013-10-17 15:30:34 ----A---- C:\Windows\system32\win32k.sys
2013-10-17 15:30:34 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2013-10-17 15:29:36 ----A---- C:\Windows\system32\shell32.dll
2013-10-17 15:29:35 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-10-17 15:29:35 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-10-17 15:29:35 ----A---- C:\Windows\system32\shdocvw.dll
2013-10-17 15:29:32 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-10-17 15:29:32 ----A---- C:\Windows\system32\win32spl.dll
2013-10-17 15:29:32 ----A---- C:\Windows\system32\taskhost.exe
2013-10-17 15:29:27 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-17 15:29:26 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-17 15:29:26 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-10-17 15:29:20 ----A---- C:\Windows\SYSWOW64\certutil.exe
2013-10-17 15:29:20 ----A---- C:\Windows\system32\certutil.exe
2013-10-17 15:29:19 ----A---- C:\Windows\SYSWOW64\certenc.dll
2013-10-17 15:29:19 ----A---- C:\Windows\system32\certenc.dll
2013-10-17 15:29:14 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-10-17 15:29:14 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-10-17 15:29:14 ----A---- C:\Windows\system32\cdd.dll
2013-10-17 15:04:54 ----N---- C:\Windows\Ctregrun.exe
2013-10-17 15:04:44 ----N---- C:\Windows\SYSWOW64\AudioDrv.ini
2013-10-17 15:04:30 ----RA---- C:\Windows\system32\ctzapxx.ini
2013-10-17 15:04:17 ----A---- C:\Windows\SYSWOW64\SET2A9A.tmp
2013-10-17 15:04:17 ----A---- C:\Windows\system32\drivers\t3.sys
2013-10-17 15:04:17 ----A---- C:\Windows\system32\CtDvInst.dll
2013-10-17 15:04:08 ----D---- C:\Program Files\Creative
2013-10-17 15:04:06 ----RA---- C:\Windows\SYSWOW64\CTAPO32.dll
2013-10-17 15:04:06 ----RA---- C:\Windows\system32\ctppld.dll
2013-10-17 15:04:05 ----RA---- C:\Windows\system32\CTAPO64.dll
2013-10-17 14:50:30 ----D---- C:\Program Files (x86)\Anti-Vibrate Oscar Editor
2013-10-17 14:49:35 ----D---- C:\Program Files (x86)\OscarX7H
2013-10-17 13:47:14 ----D---- C:\Windows\Minidump
2013-10-17 09:34:05 ----A---- C:\Windows\SYSWOW64\javaws.exe
2013-10-17 09:34:00 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-10-17 09:34:00 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-10-17 09:34:00 ----A---- C:\Windows\SYSWOW64\java.exe
2013-10-17 01:57:35 ----D---- C:\Windows\system32\SPReview
2013-10-17 01:56:39 ----D---- C:\Windows\system32\EventProviders
2013-10-17 00:19:12 ----D---- C:\Users\Hanes\AppData\Roaming\vlc
2013-10-17 00:11:43 ----D---- C:\Program Files\VideoLAN
2013-10-16 18:08:00 ----A---- C:\Windows\system32\netfxperf.dll
2013-10-16 18:08:00 ----A---- C:\Windows\system32\dfshim.dll
2013-10-16 18:07:56 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2013-10-16 18:07:54 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-10-16 18:07:54 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-10-16 18:07:48 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2013-10-16 18:07:48 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2013-10-16 18:07:48 ----A---- C:\Windows\system32\tssrvlic.dll
2013-10-16 18:07:48 ----A---- C:\Windows\system32\sysmain.dll
2013-10-16 18:07:47 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll
2013-10-16 18:07:47 ----A---- C:\Windows\system32\RDVGHelper.exe
2013-10-16 18:07:46 ----A---- C:\Windows\system32\MSVidCtl.dll
2013-10-16 18:07:45 ----A---- C:\Windows\system32\wmp.dll
2013-10-16 18:07:45 ----A---- C:\Windows\system32\tquery.dll
2013-10-16 18:07:45 ----A---- C:\Windows\system32\mssrch.dll
2013-10-16 18:07:45 ----A---- C:\Windows\system32\mscoree.dll
2013-10-16 18:07:44 ----A---- C:\Windows\system32\secproc_isv.dll
2013-10-16 18:07:44 ----A---- C:\Windows\system32\mmcndmgr.dll
2013-10-16 18:07:43 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2013-10-16 18:07:43 ----A---- C:\Windows\system32\xpsservices.dll
2013-10-16 18:07:43 ----A---- C:\Windows\system32\secproc.dll
2013-10-16 18:07:43 ----A---- C:\Windows\system32\RMActivate_isv.exe
2013-10-16 18:07:43 ----A---- C:\Windows\system32\RMActivate.exe
2013-10-16 18:07:43 ----A---- C:\Windows\system32\mf.dll
2013-10-16 18:07:42 ----A---- C:\Windows\SYSWOW64\secproc.dll
2013-10-16 18:07:42 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2013-10-16 18:07:41 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2013-10-16 18:07:41 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe
2013-10-16 18:07:41 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll
2013-10-16 18:07:41 ----A---- C:\Windows\system32\schedsvc.dll
2013-10-16 18:07:41 ----A---- C:\Windows\system32\ole32.dll
2013-10-16 18:07:40 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2013-10-16 18:07:40 ----A---- C:\Windows\system32\taskschd.dll
2013-10-16 18:07:40 ----A---- C:\Windows\system32\spwizui.dll
2013-10-16 18:07:40 ----A---- C:\Windows\system32\esent.dll
2013-10-16 18:07:39 ----A---- C:\Windows\SYSWOW64\mf.dll
2013-10-16 18:07:39 ----A---- C:\Windows\system32\wevtsvc.dll
2013-10-16 18:07:39 ----A---- C:\Windows\system32\vssapi.dll
2013-10-16 18:07:39 ----A---- C:\Windows\system32\RacEngn.dll
2013-10-16 18:07:39 ----A---- C:\Windows\system32\ExplorerFrame.dll
2013-10-16 18:07:39 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2013-10-16 18:07:39 ----A---- C:\Windows\system32\diagperf.dll
2013-10-16 18:07:38 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-10-16 18:07:38 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2013-10-16 18:07:38 ----A---- C:\Windows\system32\UIRibbon.dll
2013-10-16 18:07:38 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2013-10-16 18:07:38 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2013-10-16 18:07:37 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-10-16 18:07:37 ----A---- C:\Windows\SYSWOW64\esent.dll
2013-10-16 18:07:37 ----A---- C:\Windows\explorer.exe
2013-10-16 18:07:36 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2013-10-16 18:07:36 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2013-10-16 18:07:36 ----A---- C:\Windows\system32\WsmSvc.dll
2013-10-16 18:07:36 ----A---- C:\Windows\system32\WMVCORE.DLL
2013-10-16 18:07:36 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2013-10-16 18:07:36 ----A---- C:\Windows\system32\PresentationHost.exe
2013-10-16 18:07:35 ----A---- C:\Windows\system32\spreview.exe
2013-10-16 18:07:35 ----A---- C:\Windows\system32\spinstall.exe
2013-10-16 18:07:35 ----A---- C:\Windows\system32\rdpdd.dll
2013-10-16 18:07:35 ----A---- C:\Windows\system32\MPSSVC.dll
2013-10-16 18:07:35 ----A---- C:\Windows\system32\CertEnroll.dll
2013-10-16 18:07:34 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-10-16 18:07:34 ----A---- C:\Windows\system32\WinSAT.exe
2013-10-16 18:07:33 ----A---- C:\Windows\system32\d3d9.dll
2013-10-16 18:07:32 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2013-10-16 18:07:32 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2013-10-16 18:07:32 ----A---- C:\Windows\system32\SearchFolder.dll
2013-10-16 18:07:32 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-10-16 18:07:32 ----A---- C:\Windows\system32\gpsvc.dll
2013-10-16 18:07:32 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2013-10-16 18:07:31 ----A---- C:\Windows\SYSWOW64\rdvgumd32.dll
2013-10-16 18:07:31 ----A---- C:\Windows\system32\VSSVC.exe
2013-10-16 18:07:31 ----A---- C:\Windows\system32\dwmcore.dll
2013-10-16 18:07:31 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-10-16 18:07:31 ----A---- C:\Windows\system32\drivers\http.sys
2013-10-16 18:07:31 ----A---- C:\Windows\system32\dbgeng.dll
2013-10-16 18:07:30 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2013-10-16 18:07:30 ----A---- C:\Windows\system32\actxprxy.dll
2013-10-16 18:07:29 ----A---- C:\Windows\SYSWOW64\ole32.dll
2013-10-16 18:07:29 ----A---- C:\Windows\system32\TSWorkspace.dll
2013-10-16 18:07:29 ----A---- C:\Windows\system32\termsrv.dll
2013-10-16 18:07:29 ----A---- C:\Windows\system32\qmgr.dll
2013-10-16 18:07:29 ----A---- C:\Windows\system32\gpprefcl.dll
2013-10-16 18:07:29 ----A---- C:\Windows\system32\audiosrv.dll
2013-10-16 18:07:28 ----A---- C:\Windows\system32\netlogon.dll
2013-10-16 18:07:28 ----A---- C:\Windows\system32\mstsc.exe
2013-10-16 18:07:28 ----A---- C:\Windows\system32\imapi2fs.dll
2013-10-16 18:07:27 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2013-10-16 18:07:27 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2013-10-16 18:07:27 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-10-16 18:07:27 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2013-10-16 18:07:27 ----A---- C:\Windows\system32\winhttp.dll
2013-10-16 18:07:27 ----A---- C:\Windows\system32\setupapi.dll
2013-10-16 18:07:27 ----A---- C:\Windows\system32\rpcss.dll
2013-10-16 18:07:27 ----A---- C:\Windows\system32\QAGENTRT.DLL
2013-10-16 18:07:27 ----A---- C:\Windows\system32\propsys.dll
2013-10-16 18:07:27 ----A---- C:\Windows\system32\msv1_0.dll
2013-10-16 18:07:26 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2013-10-16 18:07:26 ----A---- C:\Windows\system32\werconcpl.dll
2013-10-16 18:07:26 ----A---- C:\Windows\system32\wbengine.exe
2013-10-16 18:07:26 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2013-10-16 18:07:25 ----A---- C:\Windows\system32\taskeng.exe
2013-10-16 18:07:25 ----A---- C:\Windows\system32\odbc32.dll
2013-10-16 18:07:24 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-10-16 18:07:24 ----A---- C:\Windows\system32\WSDApi.dll
2013-10-16 18:07:24 ----A---- C:\Windows\system32\user32.dll
2013-10-16 18:07:24 ----A---- C:\Windows\system32\drivers\nvstor.sys
2013-10-16 18:07:23 ----A---- C:\Windows\system32\umrdp.dll
2013-10-16 18:07:23 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2013-10-16 18:07:23 ----A---- C:\Windows\system32\drivers\tdx.sys
2013-10-16 18:07:23 ----A---- C:\Windows\system32\dhcpcore.dll
2013-10-16 18:07:23 ----A---- C:\Windows\system32\certmgr.dll
2013-10-16 18:07:22 ----A---- C:\Windows\SYSWOW64\wer.dll
2013-10-16 18:07:22 ----A---- C:\Windows\system32\scavengeui.dll
2013-10-16 18:07:22 ----A---- C:\Windows\system32\drivers\netbt.sys
2013-10-16 18:07:21 ----A---- C:\Windows\SYSWOW64\certcli.dll
2013-10-16 18:07:21 ----A---- C:\Windows\system32\tsmf.dll
2013-10-16 18:07:21 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2013-10-16 18:07:21 ----A---- C:\Windows\system32\ncsi.dll
2013-10-16 18:07:20 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2013-10-16 18:07:20 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2013-10-16 18:07:20 ----A---- C:\Windows\system32\shlwapi.dll
2013-10-16 18:07:20 ----A---- C:\Windows\system32\rdpshell.exe
2013-10-16 18:07:20 ----A---- C:\Windows\system32\netshell.dll
2013-10-16 18:07:20 ----A---- C:\Windows\system32\msdtctm.dll
2013-10-16 18:07:20 ----A---- C:\Windows\system32\msdrm.dll
2013-10-16 18:07:20 ----A---- C:\Windows\system32\framedynos.dll
2013-10-16 18:07:20 ----A---- C:\Windows\system32\drivers\nvraid.sys
2013-10-16 18:07:19 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2013-10-16 18:07:19 ----A---- C:\Windows\system32\ws2_32.dll
2013-10-16 18:07:19 ----A---- C:\Windows\system32\wmicmiplugin.dll
2013-10-16 18:07:19 ----A---- C:\Windows\system32\winlogon.exe
2013-10-16 18:07:19 ----A---- C:\Windows\system32\usp10.dll
2013-10-16 18:07:19 ----A---- C:\Windows\system32\nlasvc.dll
2013-10-16 18:07:19 ----A---- C:\Windows\system32\netcfgx.dll
2013-10-16 18:07:19 ----A---- C:\Windows\system32\lsm.exe
2013-10-16 18:07:19 ----A---- C:\Windows\system32\comdlg32.dll
2013-10-16 18:07:19 ----A---- C:\Windows\system32\appmgr.dll
2013-10-16 18:07:18 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2013-10-16 18:07:18 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2013-10-16 18:07:18 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2013-10-16 18:07:18 ----A---- C:\Windows\system32\wmpps.dll
2013-10-16 18:07:18 ----A---- C:\Windows\system32\Query.dll
2013-10-16 18:07:18 ----A---- C:\Windows\system32\mswsock.dll
2013-10-16 18:07:18 ----A---- C:\Windows\system32\drvstore.dll
2013-10-16 18:07:18 ----A---- C:\Windows\system32\drivers\csc.sys
2013-10-16 18:07:18 ----A---- C:\Windows\system32\drivers\amdsata.sys
2013-10-16 18:07:18 ----A---- C:\Windows\system32\apphelp.dll
2013-10-16 18:07:17 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2013-10-16 18:07:17 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2013-10-16 18:07:17 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2013-10-16 18:07:17 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2013-10-16 18:07:17 ----A---- C:\Windows\system32\wpdshext.dll
2013-10-16 18:07:17 ----A---- C:\Windows\system32\Vault.dll
2013-10-16 18:07:17 ----A---- C:\Windows\system32\samsrv.dll
2013-10-16 18:07:17 ----A---- C:\Windows\system32\QAGENT.DLL
2013-10-16 18:07:17 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2013-10-16 18:07:17 ----A---- C:\Windows\system32\cmd.exe
2013-10-16 18:07:17 ----A---- C:\Windows\system32\BFE.DLL
2013-10-16 18:07:17 ----A---- C:\Windows\system32\azroles.dll
2013-10-16 18:07:16 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2013-10-16 18:07:16 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2013-10-16 18:07:16 ----A---- C:\Windows\system32\mssvp.dll
2013-10-16 18:07:16 ----A---- C:\Windows\system32\lpksetup.exe
2013-10-16 18:07:16 ----A---- C:\Windows\system32\cscsvc.dll
2013-10-16 18:07:15 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2013-10-16 18:07:15 ----A---- C:\Windows\SYSWOW64\Query.dll
2013-10-16 18:07:15 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2013-10-16 18:07:15 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2013-10-16 18:07:15 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2013-10-16 18:07:15 ----A---- C:\Windows\system32\Wldap32.dll
2013-10-16 18:07:15 ----A---- C:\Windows\system32\WebClnt.dll
2013-10-16 18:07:15 ----A---- C:\Windows\system32\taskcomp.dll
2013-10-16 18:07:15 ----A---- C:\Windows\system32\sxs.dll
2013-10-16 18:07:15 ----A---- C:\Windows\system32\rdpclip.exe
2013-10-16 18:07:15 ----A---- C:\Windows\system32\mfds.dll
2013-10-16 18:07:15 ----A---- C:\Windows\system32\mcbuilder.exe
2013-10-16 18:07:15 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2013-10-16 18:07:15 ----A---- C:\Windows\system32\cscobj.dll
2013-10-16 18:07:14 ----A---- C:\Windows\SYSWOW64\upnp.dll
2013-10-16 18:07:14 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2013-10-16 18:07:14 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2013-10-16 18:07:14 ----A---- C:\Windows\system32\webservices.dll
2013-10-16 18:07:14 ----A---- C:\Windows\system32\pnidui.dll
2013-10-16 18:07:14 ----A---- C:\Windows\system32\ipsmsnap.dll
2013-10-16 18:07:14 ----A---- C:\Windows\system32\hgprint.dll
2013-10-16 18:07:14 ----A---- C:\Windows\system32\drivers\storport.sys
2013-10-16 18:07:13 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2013-10-16 18:07:13 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2013-10-16 18:07:13 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2013-10-16 18:07:13 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2013-10-16 18:07:13 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2013-10-16 18:07:13 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2013-10-16 18:07:13 ----A---- C:\Windows\system32\winsta.dll
2013-10-16 18:07:13 ----A---- C:\Windows\system32\sqlsrv32.dll
2013-10-16 18:07:13 ----A---- C:\Windows\system32\spoolsv.exe
2013-10-16 18:07:13 ----A---- C:\Windows\system32\SessEnv.dll
2013-10-16 18:07:13 ----A---- C:\Windows\system32\rdpendp.dll
2013-10-16 18:07:13 ----A---- C:\Windows\system32\fveapi.dll
2013-10-16 18:07:13 ----A---- C:\Windows\system32\dot3api.dll
2013-10-16 18:07:12 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-10-16 18:07:12 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2013-10-16 18:07:12 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2013-10-16 18:07:12 ----A---- C:\Windows\system32\prncache.dll
2013-10-16 18:07:12 ----A---- C:\Windows\system32\mcmde.dll
2013-10-16 18:07:12 ----A---- C:\Windows\system32\gdi32.dll
2013-10-16 18:07:12 ----A---- C:\Windows\system32\drivers\volsnap.sys
2013-10-16 18:07:12 ----A---- C:\Windows\system32\drivers\msrpc.sys
2013-10-16 18:07:11 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2013-10-16 18:07:11 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2013-10-16 18:07:11 ----A---- C:\Windows\SYSWOW64\userenv.dll
2013-10-16 18:07:11 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2013-10-16 18:07:11 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2013-10-16 18:07:11 ----A---- C:\Windows\system32\WMNetMgr.dll
2013-10-16 18:07:11 ----A---- C:\Windows\system32\wlanpref.dll
2013-10-16 18:07:11 ----A---- C:\Windows\system32\vpnike.dll
2013-10-16 18:07:11 ----A---- C:\Windows\system32\userenv.dll
2013-10-16 18:07:11 ----A---- C:\Windows\system32\tspubwmi.dll
2013-10-16 18:07:11 ----A---- C:\Windows\system32\schtasks.exe
2013-10-16 18:07:11 ----A---- C:\Windows\system32\evr.dll
2013-10-16 18:07:11 ----A---- C:\Windows\system32\drivers\rdbss.sys
2013-10-16 18:07:11 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2013-10-16 18:07:10 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2013-10-16 18:07:10 ----A---- C:\Windows\system32\wmpmde.dll
2013-10-16 18:07:10 ----A---- C:\Windows\system32\photowiz.dll
2013-10-16 18:07:10 ----A---- C:\Windows\system32\IPSECSVC.DLL
2013-10-16 18:07:10 ----A---- C:\Windows\system32\FXSSVC.exe
2013-10-16 18:07:10 ----A---- C:\Windows\system32\framedyn.dll
2013-10-16 18:07:10 ----A---- C:\Windows\system32\AudioSes.dll
2013-10-16 18:07:10 ----A---- C:\Windows\system32\aepdu.dll
2013-10-16 18:07:09 ----A---- C:\Windows\SYSWOW64\cmd.exe
2013-10-16 18:07:09 ----A---- C:\Windows\system32\WMPEncEn.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\wmpeffects.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\tscfgwmi.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\SyncCenter.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\srvsvc.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\sppobjs.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\shsvcs.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\rdpinit.exe
2013-10-16 18:07:09 ----A---- C:\Windows\system32\mfreadwrite.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\aeinv.dll
2013-10-16 18:07:08 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2013-10-16 18:07:08 ----A---- C:\Windows\SYSWOW64\propsys.dll
2013-10-16 18:07:08 ----A---- C:\Windows\SYSWOW64\mfds.dll
2013-10-16 18:07:08 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2013-10-16 18:07:08 ----A---- C:\Windows\system32\WinSATAPI.dll
2013-10-16 18:07:08 ----A---- C:\Windows\system32\vmicsvc.exe
2013-10-16 18:07:08 ----A---- C:\Windows\system32\stobject.dll
2013-10-16 18:07:08 ----A---- C:\Windows\system32\fde.dll
2013-10-16 18:07:07 ----A---- C:\Windows\SYSWOW64\user32.dll
2013-10-16 18:07:07 ----A---- C:\Windows\SYSWOW64\rdpendp.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\tcpipcfg.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\QSHVHOST.DLL
2013-10-16 18:07:07 ----A---- C:\Windows\system32\netid.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\netdiagfx.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\localsec.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\inetpp.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\imapi2.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\drivers\vmbus.sys
2013-10-16 18:07:07 ----A---- C:\Windows\system32\drivers\udfs.sys
2013-10-16 18:07:07 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2013-10-16 18:07:07 ----A---- C:\Windows\system32\davclnt.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\credui.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\bcryptprimitives.dll
2013-10-16 18:07:06 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-10-16 18:07:06 ----A---- C:\Windows\SYSWOW64\azroles.dll
2013-10-16 18:07:06 ----A---- C:\Windows\SYSWOW64\appmgr.dll
2013-10-16 18:07:06 ----A---- C:\Windows\system32\spp.dll
2013-10-16 18:07:06 ----A---- C:\Windows\system32\profsvc.dll
2013-10-16 18:07:06 ----A---- C:\Windows\system32\msinfo32.exe
2013-10-16 18:07:06 ----A---- C:\Windows\system32\gameux.dll
2013-10-16 18:07:06 ----A---- C:\Windows\system32\cscui.dll
2013-10-16 18:07:06 ----A---- C:\Windows\system32\biocpl.dll
2013-10-16 18:07:05 ----A---- C:\Windows\SYSWOW64\themeui.dll
2013-10-16 18:07:05 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2013-10-16 18:07:05 ----A---- C:\Windows\SYSWOW64\spp.dll
2013-10-16 18:07:05 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2013-10-16 18:07:05 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2013-10-16 18:07:05 ----A---- C:\Windows\SYSWOW64\credui.dll
2013-10-16 18:07:05 ----A---- C:\Windows\system32\wusa.exe
2013-10-16 18:07:05 ----A---- C:\Windows\system32\scansetting.dll
2013-10-16 18:07:05 ----A---- C:\Windows\system32\printui.dll
2013-10-16 18:07:05 ----A---- C:\Windows\system32\pla.dll
2013-10-16 18:07:05 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2013-10-16 18:07:05 ----A---- C:\Windows\system32\mspbda.dll
2013-10-16 18:07:05 ----A---- C:\Windows\system32\msdri.dll
2013-10-16 18:07:05 ----A---- C:\Windows\system32\aitagent.exe
2013-10-16 18:07:05 ----A---- C:\Windows\splwow64.exe
2013-10-16 18:07:04 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2013-10-16 18:07:04 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2013-10-16 18:07:04 ----A---- C:\Windows\system32\wiaservc.dll
2013-10-16 18:07:04 ----A---- C:\Windows\system32\vds.exe
2013-10-16 18:07:04 ----A---- C:\Windows\system32\rpchttp.dll
2013-10-16 18:07:04 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2013-10-16 18:07:04 ----A---- C:\Windows\system32\drivers\pci.sys
2013-10-16 18:07:04 ----A---- C:\Windows\system32\AdmTmpl.dll
2013-10-16 18:07:03 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2013-10-16 18:07:03 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2013-10-16 18:07:03 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2013-10-16 18:07:03 ----A---- C:\Windows\system32\XpsRasterService.dll
2013-10-16 18:07:03 ----A---- C:\Windows\system32\wisptis.exe
2013-10-16 18:07:03 ----A---- C:\Windows\system32\PkgMgr.exe
2013-10-16 18:07:03 ----A---- C:\Windows\system32\ocsetup.exe
2013-10-16 18:07:03 ----A---- C:\Windows\system32\msi.dll
2013-10-16 18:07:03 ----A---- C:\Windows\system32\mscms.dll
2013-10-16 18:07:03 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2013-10-16 18:07:03 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2013-10-16 18:07:02 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2013-10-16 18:07:02 ----A---- C:\Windows\SYSWOW64\evr.dll
2013-10-16 18:07:02 ----A---- C:\Windows\SYSWOW64\calc.exe
2013-10-16 18:07:02 ----A---- C:\Windows\system32\sppwinob.dll
2013-10-16 18:07:02 ----A---- C:\Windows\system32\ocsetapi.dll
2013-10-16 18:07:02 ----A---- C:\Windows\system32\DXP.dll
2013-10-16 18:07:02 ----A---- C:\Windows\system32\drivers\volmgr.sys
2013-10-16 18:07:02 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2013-10-16 18:07:01 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\wpdbusenum.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\wcncsvc.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\upnp.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\Robocopy.exe
2013-10-16 18:07:01 ----A---- C:\Windows\system32\ntshrui.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\mprapi.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\eapphost.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\eapp3hst.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\drivers\msdsm.sys
2013-10-16 18:07:01 ----A---- C:\Windows\system32\ci.dll
2013-10-16 18:07:00 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2013-10-16 18:07:00 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2013-10-16 18:07:00 ----A---- C:\Windows\SYSWOW64\sxs.dll
2013-10-16 18:07:00 ----A---- C:\Windows\SYSWOW64\netshell.dll
2013-10-16 18:07:00 ----A---- C:\Windows\system32\thumbcache.dll
2013-10-16 18:07:00 ----A---- C:\Windows\system32\t2embed.dll
2013-10-16 18:07:00 ----A---- C:\Windows\system32\hal.dll
2013-10-16 18:07:00 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2013-10-16 18:06:59 ----A---- C:\Windows\SYSWOW64\stobject.dll
2013-10-16 18:06:59 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\scecli.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\puiobj.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2013-10-16 18:06:59 ----A---- C:\Windows\system32\msasn1.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\iasrad.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\DxpTaskSync.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\dwmredir.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-10-16 18:06:59 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2013-10-16 18:06:58 ----A---- C:\Windows\SYSWOW64\prncache.dll
2013-10-16 18:06:58 ----A---- C:\Windows\SYSWOW64\printui.dll
2013-10-16 18:06:58 ----A---- C:\Windows\SYSWOW64\msi.dll
2013-10-16 18:06:58 ----A---- C:\Windows\system32\themeui.dll
2013-10-16 18:06:58 ----A---- C:\Windows\system32\scrptadm.dll
2013-10-16 18:06:58 ----A---- C:\Windows\system32\onex.dll
2013-10-16 18:06:58 ----A---- C:\Windows\system32\nlaapi.dll
2013-10-16 18:06:58 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2013-10-16 18:06:58 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2013-10-16 18:06:58 ----A---- C:\Windows\system32\drivers\amdxata.sys
2013-10-16 18:06:57 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2013-10-16 18:06:57 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2013-10-16 18:06:57 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2013-10-16 18:06:57 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2013-10-16 18:06:57 ----A---- C:\Windows\SYSWOW64\net1.exe
2013-10-16 18:06:57 ----A---- C:\Windows\system32\wdc.dll
2013-10-16 18:06:56 ----A---- C:\Windows\system32\wlangpui.dll
2013-10-16 18:06:56 ----A---- C:\Windows\system32\StructuredQuery.dll
2013-10-16 18:06:56 ----A---- C:\Windows\system32\sdengin2.dll
2013-10-16 18:06:56 ----A---- C:\Windows\system32\scesrv.dll
2013-10-16 18:06:56 ----A---- C:\Windows\system32\rasmans.dll
2013-10-16 18:06:56 ----A---- C:\Windows\system32\msftedit.dll
2013-10-16 18:06:56 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-10-16 18:06:55 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2013-10-16 18:06:55 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2013-10-16 18:06:55 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2013-10-16 18:06:55 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2013-10-16 18:06:55 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\wscapi.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\wiadefui.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\VAN.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\SndVol.exe
2013-10-16 18:06:55 ----A---- C:\Windows\system32\samcli.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\regapi.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\netcenter.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\iasacct.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\dskquoui.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\drivers\termdd.sys
2013-10-16 18:06:55 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2013-10-16 18:06:54 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2013-10-16 18:06:54 ----A---- C:\Windows\SYSWOW64\webservices.dll
2013-10-16 18:06:54 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2013-10-16 18:06:54 ----A---- C:\Windows\SYSWOW64\scrptadm.dll
2013-10-16 18:06:54 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2013-10-16 18:06:54 ----A---- C:\Windows\SYSWOW64\fde.dll
2013-10-16 18:06:54 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-10-16 18:06:54 ----A---- C:\Windows\system32\wksprt.exe
2013-10-16 18:06:54 ----A---- C:\Windows\system32\TabSvc.dll
2013-10-16 18:06:54 ----A---- C:\Windows\system32\srchadmin.dll
2013-10-16 18:06:54 ----A---- C:\Windows\system32\setupcl.exe
2013-10-16 18:06:54 ----A---- C:\Windows\system32\QUTIL.DLL
2013-10-16 18:06:54 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2013-10-16 18:06:54 ----A---- C:\Windows\system32\drivers\msahci.sys
2013-10-16 18:06:53 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2013-10-16 18:06:53 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2013-10-16 18:06:53 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2013-10-16 18:06:53 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2013-10-16 18:06:53 ----A---- C:\Windows\system32\tapisrv.dll
2013-10-16 18:06:53 ----A---- C:\Windows\system32\rastls.dll
2013-10-16 18:06:53 ----A---- C:\Windows\system32\netiohlp.dll
2013-10-16 18:06:53 ----A---- C:\Windows\system32\drivers\acpi.sys
2013-10-16 18:06:52 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2013-10-16 18:06:52 ----A---- C:\Windows\SYSWOW64\pla.dll
2013-10-16 18:06:52 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2013-10-16 18:06:52 ----A---- C:\Windows\SYSWOW64\cscobj.dll
2013-10-16 18:06:52 ----A---- C:\Windows\system32\msconfig.exe
2013-10-16 18:06:52 ----A---- C:\Windows\system32\mimefilt.dll
2013-10-16 18:06:52 ----A---- C:\Windows\system32\lsmproxy.dll
2013-10-16 18:06:52 ----A---- C:\Windows\system32\ListSvc.dll
2013-10-16 18:06:52 ----A---- C:\Windows\system32\hgcpl.dll
2013-10-16 18:06:52 ----A---- C:\Windows\system32\drivers\raspptp.sys
2013-10-16 18:06:52 ----A---- C:\Windows\system32\drivers\ks.sys
2013-10-16 18:06:52 ----A---- C:\Windows\system32\basecsp.dll
2013-10-16 18:06:51 ----A---- C:\Windows\SYSWOW64\winsta.dll
2013-10-16 18:06:51 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2013-10-16 18:06:51 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-10-16 18:06:51 ----A---- C:\Windows\system32\mtxclu.dll
2013-10-16 18:06:51 ----A---- C:\Windows\system32\fdeploy.dll
2013-10-16 18:06:51 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2013-10-16 18:06:51 ----A---- C:\Windows\system32\clusapi.dll
2013-10-16 18:06:51 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2013-10-16 18:06:50 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2013-10-16 18:06:50 ----A---- C:\Windows\system32\riched20.dll
2013-10-16 18:06:50 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2013-10-16 18:06:50 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-10-16 18:06:49 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2013-10-16 18:06:49 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-10-16 18:06:49 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2013-10-16 18:06:49 ----A---- C:\Windows\system32\RpcRtRemote.dll
2013-10-16 18:06:49 ----A---- C:\Windows\system32\powercpl.dll
2013-10-16 18:06:49 ----A---- C:\Windows\system32\logoncli.dll
2013-10-16 18:06:49 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-10-16 18:06:49 ----A---- C:\Windows\system32\dnscmmc.dll
2013-10-16 18:06:48 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2013-10-16 18:06:48 ----A---- C:\Windows\SYSWOW64\winmm.dll
2013-10-16 18:06:48 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2013-10-16 18:06:48 ----A---- C:\Windows\SYSWOW64\onex.dll
2013-10-16 18:06:48 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-10-16 18:06:48 ----A---- C:\Windows\system32\sharemediacpl.dll
2013-10-16 18:06:48 ----A---- C:\Windows\system32\nci.dll
2013-10-16 18:06:47 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2013-10-16 18:06:47 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2013-10-16 18:06:47 ----A---- C:\Windows\system32\themecpl.dll
2013-10-16 18:06:47 ----A---- C:\Windows\system32\SensorsCpl.dll
2013-10-16 18:06:47 ----A---- C:\Windows\system32\netjoin.dll
2013-10-16 18:06:47 ----A---- C:\Windows\system32\Narrator.exe
2013-10-16 18:06:47 ----A---- C:\Windows\system32\Faultrep.dll
2013-10-16 18:06:47 ----A---- C:\Windows\system32\eudcedit.exe
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\samcli.dll
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\proquota.exe
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\msutb.dll
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\autochk.exe
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2013-10-16 18:06:46 ----A---- C:\Windows\system32\wkssvc.dll
2013-10-16 18:06:46 ----A---- C:\Windows\system32\vpnikeapi.dll
2013-10-16 18:06:46 ----A---- C:\Windows\system32\sppcomapi.dll
2013-10-16 18:06:46 ----A---- C:\Windows\system32\cabview.dll
2013-10-16 18:06:46 ----A---- C:\Windows\system32\autochk.exe
2013-10-16 18:06:46 ----A---- C:\Windows\system32\autofmt.exe
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\regapi.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\wwanconn.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\wpd_ci.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\shsetup.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\sdclt.exe
2013-10-16 18:06:45 ----A---- C:\Windows\system32\prntvpt.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\nshipsec.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\fms.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\drivers\wanarp.sys
2013-10-16 18:06:45 ----A---- C:\Windows\system32\bcdsrv.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\autoconv.exe
2013-10-16 18:06:45 ----A---- C:\Windows\system32\audiodg.exe
2013-10-16 18:06:44 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2013-10-16 18:06:44 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2013-10-16 18:06:44 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2013-10-16 18:06:44 ----A---- C:\Windows\system32\wlanui.dll
2013-10-16 18:06:44 ----A---- C:\Windows\system32\SmiEngine.dll
2013-10-16 18:06:44 ----A---- C:\Windows\system32\rdpsign.exe
2013-10-16 18:06:44 ----A---- C:\Windows\system32\mscorier.dll
2013-10-16 18:06:44 ----A---- C:\Windows\system32\fontext.dll
2013-10-16 18:06:44 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2013-10-16 18:06:44 ----A---- C:\Windows\system32\drivers\scsiport.sys
2013-10-16 18:06:44 ----A---- C:\Windows\system32\dps.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\wdc.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\untfs.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\rastls.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\netid.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\nci.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2013-10-16 18:06:43 ----A---- C:\Windows\system32\wmpsrcwp.dll
2013-10-16 18:06:43 ----A---- C:\Windows\system32\mprddm.dll
2013-10-16 18:06:43 ----A---- C:\Windows\system32\mblctr.exe
2013-10-16 18:06:43 ----A---- C:\Windows\system32\Display.dll
2013-10-16 18:06:43 ----A---- C:\Windows\system32\credssp.dll
2013-10-16 18:06:43 ----A---- C:\Windows\system32\batmeter.dll
2013-10-16 18:06:43 ----A---- C:\Windows\system32\AxInstSv.dll
2013-10-16 18:06:42 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2013-10-16 18:06:42 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2013-10-16 18:06:42 ----A---- C:\Windows\SYSWOW64\Vault.dll
2013-10-16 18:06:42 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2013-10-16 18:06:42 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2013-10-16 18:06:42 ----A---- C:\Windows\system32\usercpl.dll
2013-10-16 18:06:42 ----A---- C:\Windows\system32\rtutils.dll
2013-10-16 18:06:42 ----A---- C:\Windows\system32\DiagCpl.dll
2013-10-16 18:06:42 ----A---- C:\Windows\system32\bootres.dll
2013-10-16 18:06:41 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2013-10-16 18:06:41 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2013-10-16 18:06:41 ----A---- C:\Windows\system32\wpccpl.dll
2013-10-16 18:06:41 ----A---- C:\Windows\system32\sppsvc.exe
2013-10-16 18:06:41 ----A---- C:\Windows\system32\SndVolSSO.dll
2013-10-16 18:06:41 ----A---- C:\Windows\system32\rasppp.dll
2013-10-16 18:06:41 ----A---- C:\Windows\system32\provsvc.dll
2013-10-16 18:06:41 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2013-10-16 18:06:41 ----A---- C:\Windows\system32\drivers\winhv.sys
2013-10-16 18:06:41 ----A---- C:\Windows\system32\dot3cfg.dll
2013-10-16 18:06:40 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2013-10-16 18:06:40 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-10-16 18:06:40 ----A---- C:\Windows\SYSWOW64\Display.dll
2013-10-16 18:06:40 ----A---- C:\Windows\system32\hbaapi.dll
2013-10-16 18:06:40 ----A---- C:\Windows\system32\dxdiagn.dll
2013-10-16 18:06:40 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2013-10-16 18:06:39 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2013-10-16 18:06:39 ----A---- C:\Windows\SYSWOW64\userinit.exe
2013-10-16 18:06:39 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2013-10-16 18:06:39 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2013-10-16 18:06:39 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2013-10-16 18:06:39 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2013-10-16 18:06:39 ----A---- C:\Windows\system32\taskmgr.exe
2013-10-16 18:06:39 ----A---- C:\Windows\system32\proquota.exe
2013-10-16 18:06:39 ----A---- C:\Windows\system32\prnfldr.dll
2013-10-16 18:06:39 ----A---- C:\Windows\system32\pdh.dll
2013-10-16 18:06:39 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2013-10-16 18:06:39 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2013-10-16 18:06:39 ----A---- C:\Windows\system32\drivers\ataport.sys
2013-10-16 18:06:38 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2013-10-16 18:06:38 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2013-10-16 18:06:38 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2013-10-16 18:06:38 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2013-10-16 18:06:38 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2013-10-16 18:06:38 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2013-10-16 18:06:38 ----A---- C:\Windows\SYSWOW64\cabview.dll
2013-10-16 18:06:38 ----A---- C:\Windows\system32\userinit.exe
2013-10-16 18:06:38 ----A---- C:\Windows\system32\untfs.dll
2013-10-16 18:06:38 ----A---- C:\Windows\system32\accessibilitycpl.dll
2013-10-16 18:06:37 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2013-10-16 18:06:37 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2013-10-16 18:06:36 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2013-10-16 18:06:36 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2013-10-16 18:06:36 ----A---- C:\Windows\system32\zipfldr.dll
2013-10-16 18:06:36 ----A---- C:\Windows\system32\slui.exe
2013-10-16 18:06:36 ----A---- C:\Windows\system32\msieftp.dll
2013-10-16 18:06:36 ----A---- C:\Windows\system32\drivers\storvsc.sys
2013-10-16 18:06:36 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\scecli.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\mscories.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\mscms.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\localsec.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\fontext.dll
2013-10-16 18:06:35 ----A---- C:\Windows\system32\sud.dll
2013-10-16 18:06:35 ----A---- C:\Windows\system32\dot3svc.dll
2013-10-16 18:06:35 ----A---- C:\Windows\system32\DeviceCenter.dll
2013-10-16 18:06:34 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2013-10-16 18:06:34 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2013-10-16 18:06:34 ----A---- C:\Windows\system32\taskbarcpl.dll
2013-10-16 18:06:34 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2013-10-16 18:06:34 ----A---- C:\Windows\system32\networkmap.dll
2013-10-16 18:06:34 ----A---- C:\Windows\system32\cryptui.dll
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\VAN.dll
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2013-10-16 18:06:33 ----A---- C:\Windows\system32\uxlib.dll
2013-10-16 18:06:33 ----A---- C:\Windows\system32\twext.dll
2013-10-16 18:06:33 ----A---- C:\Windows\system32\srcore.dll
2013-10-16 18:06:33 ----A---- C:\Windows\system32\recovery.dll
2013-10-16 18:06:33 ----A---- C:\Windows\system32\OobeFldr.dll
2013-10-16 18:06:33 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-10-16 18:06:33 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2013-10-16 18:06:33 ----A---- C:\Windows\system32\bcdedit.exe
2013-10-16 18:06:33 ----A---- C:\Windows\system32\azroleui.dll
2013-10-16 18:06:33 ----A---- C:\Windows\system32\ActionCenter.dll
2013-10-16 18:06:32 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2013-10-16 18:06:32 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2013-10-16 18:06:32 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2013-10-16 18:06:32 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2013-10-16 18:06:32 ----A---- C:\Windows\system32\tzutil.exe
2013-10-16 18:06:32 ----A---- C:\Windows\system32\sisbkup.dll
2013-10-16 18:06:32 ----A---- C:\Windows\system32\sdcpl.dll
2013-10-16 18:06:32 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2013-10-16 18:06:32 ----A---- C:\Windows\system32\isoburn.exe
2013-10-16 18:06:32 ----A---- C:\Windows\system32\efscore.dll
2013-10-16 18:06:32 ----A---- C:\Windows\system32\dsuiext.dll
2013-10-16 18:06:32 ----A---- C:\Windows\system32\cca.dll
2013-10-16 18:06:32 ----A---- C:\Windows\system32\asycfilt.dll
2013-10-16 18:06:31 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2013-10-16 18:06:31 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2013-10-16 18:06:31 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2013-10-16 18:06:31 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2013-10-16 18:06:31 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\systemcpl.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\syncui.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\shwebsvc.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\recdisc.exe
2013-10-16 18:06:31 ----A---- C:\Windows\system32\netplwiz.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\httpapi.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\fvecpl.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\drivers\mpio.sys
2013-10-16 18:06:31 ----A---- C:\Windows\system32\certcli.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\autoplay.dll
2013-10-16 18:06:30 ----A---- C:\Windows\SYSWOW64\wusa.exe
2013-10-16 18:06:30 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2013-10-16 18:06:30 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2013-10-16 18:06:30 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2013-10-16 18:06:30 ----A---- C:\Windows\system32\wlanmsm.dll
2013-10-16 18:06:30 ----A---- C:\Windows\system32\sysclass.dll
2013-10-16 18:06:30 ----A---- C:\Windows\system32\sdrsvc.dll
2013-10-16 18:06:30 ----A---- C:\Windows\system32\ncryptui.dll
2013-10-16 18:06:30 ----A---- C:\Windows\system32\msvidc32.dll
2013-10-16 18:06:30 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2013-10-16 18:06:30 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2013-10-16 18:06:30 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\sud.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\credssp.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2013-10-16 18:06:29 ----A---- C:\Windows\system32\vdsutil.dll
2013-10-16 18:06:29 ----A---- C:\Windows\system32\termmgr.dll
2013-10-16 18:06:29 ----A---- C:\Windows\system32\spwizeng.dll
2013-10-16 18:06:29 ----A---- C:\Windows\system32\msscp.dll
2013-10-16 18:06:29 ----A---- C:\Windows\system32\MFPlay.dll
2013-10-16 18:06:28 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2013-10-16 18:06:28 ----A---- C:\Windows\SYSWOW64\ftp.exe
2013-10-16 18:06:28 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2013-10-16 18:06:28 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2013-10-16 18:06:28 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-10-16 18:06:28 ----A---- C:\Windows\system32\sethc.exe
2013-10-16 18:06:28 ----A---- C:\Windows\system32\rstrui.exe
2013-10-16 18:06:28 ----A---- C:\Windows\system32\ReAgent.dll

-----------------EOF-----------------

2013-10-16 18:06:28 ----A---- C:\Windows\system32\ntlanman.dll
2013-10-16 18:06:27 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2013-10-16 18:06:27 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2013-10-16 18:06:27 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2013-10-16 18:06:27 ----A---- C:\Windows\SYSWOW64\efscore.dll
2013-10-16 18:06:27 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2013-10-16 18:06:27 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-10-16 18:06:27 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2013-10-16 18:06:27 ----A---- C:\Windows\system32\ssText3d.scr
2013-10-16 18:06:27 ----A---- C:\Windows\system32\sqlcese30.dll
2013-10-16 18:06:27 ----A---- C:\Windows\system32\rdpd3d.dll
2013-10-16 18:06:27 ----A---- C:\Windows\system32\iTVData.dll
2013-10-16 18:06:27 ----A---- C:\Windows\system32\iprtrmgr.dll
2013-10-16 18:06:27 ----A---- C:\Windows\system32\drivers\vmstorfl.sys
2013-10-16 18:06:27 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2013-10-16 18:06:26 ----A---- C:\Windows\SYSWOW64\syncui.dll
2013-10-16 18:06:26 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2013-10-16 18:06:26 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2013-10-16 18:06:26 ----A---- C:\Windows\system32\wmdrmsdk.dll
2013-10-16 18:06:26 ----A---- C:\Windows\system32\srvcli.dll
2013-10-16 18:06:26 ----A---- C:\Windows\system32\slwga.dll
2013-10-16 18:06:26 ----A---- C:\Windows\system32\iyuv_32.dll
2013-10-16 18:06:26 ----A---- C:\Windows\system32\drmmgrtn.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2013-10-16 18:06:25 ----A---- C:\Windows\system32\wavemsp.dll
2013-10-16 18:06:25 ----A---- C:\Windows\system32\ntprint.dll
2013-10-16 18:06:25 ----A---- C:\Windows\system32\nslookup.exe
2013-10-16 18:06:25 ----A---- C:\Windows\system32\NAPHLPR.DLL
2013-10-16 18:06:25 ----A---- C:\Windows\system32\msiexec.exe
2013-10-16 18:06:25 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2013-10-16 18:06:25 ----A---- C:\Windows\system32\acppage.dll
2013-10-16 18:06:24 ----A---- C:\Windows\SYSWOW64\sethc.exe
2013-10-16 18:06:24 ----A---- C:\Windows\SYSWOW64\riched20.dll
2013-10-16 18:06:24 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2013-10-16 18:06:24 ----A---- C:\Windows\system32\srrstr.dll
2013-10-16 18:06:24 ----A---- C:\Windows\system32\bcdboot.exe
2013-10-16 18:06:23 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2013-10-16 18:06:23 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2013-10-16 18:06:23 ----A---- C:\Windows\system32\sppnp.dll
2013-10-16 18:06:22 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2013-10-16 18:06:22 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2013-10-16 18:06:22 ----A---- C:\Windows\SYSWOW64\migisol.dll
2013-10-16 18:06:22 ----A---- C:\Windows\SYSWOW64\fms.dll
2013-10-16 18:06:22 ----A---- C:\Windows\SYSWOW64\dpx.dll
2013-10-16 18:06:22 ----A---- C:\Windows\SYSWOW64\activeds.dll
2013-10-16 18:06:22 ----A---- C:\Windows\system32\TSpkg.dll
2013-10-16 18:06:22 ----A---- C:\Windows\system32\remotepg.dll
2013-10-16 18:06:22 ----A---- C:\Windows\system32\networkexplorer.dll
2013-10-16 18:06:22 ----A---- C:\Windows\system32\certprop.dll
2013-10-16 18:06:22 ----A---- C:\Windows\system32\cabinet.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2013-10-16 18:06:21 ----A---- C:\Windows\system32\wmpdxm.dll
2013-10-16 18:06:21 ----A---- C:\Windows\system32\wkscli.dll
2013-10-16 18:06:21 ----A---- C:\Windows\system32\WinSCard.dll
2013-10-16 18:06:21 ----A---- C:\Windows\system32\PresentationSettings.exe
2013-10-16 18:06:21 ----A---- C:\Windows\system32\ftp.exe
2013-10-16 18:06:21 ----A---- C:\Windows\system32\dfrgui.exe
2013-10-16 18:06:20 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2013-10-16 18:06:20 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2013-10-16 18:06:20 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2013-10-16 18:06:20 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2013-10-16 18:06:20 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2013-10-16 18:06:20 ----A---- C:\Windows\system32\wvc.dll
2013-10-16 18:06:20 ----A---- C:\Windows\system32\wsqmcons.exe
2013-10-16 18:06:20 ----A---- C:\Windows\system32\wsnmp32.dll
2013-10-16 18:06:20 ----A---- C:\Windows\system32\wmdrmdev.dll
2013-10-16 18:06:20 ----A---- C:\Windows\system32\WerFaultSecure.exe
2013-10-16 18:06:20 ----A---- C:\Windows\system32\net1.exe
2013-10-16 18:06:20 ----A---- C:\Windows\system32\blackbox.dll
2013-10-16 18:06:19 ----A---- C:\Windows\SYSWOW64\wvc.dll
2013-10-16 18:06:19 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2013-10-16 18:06:19 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2013-10-16 18:06:19 ----A---- C:\Windows\SYSWOW64\twext.dll
2013-10-16 18:06:19 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2013-10-16 18:06:19 ----A---- C:\Windows\SYSWOW64\mstask.dll
2013-10-16 18:06:19 ----A---- C:\Windows\SYSWOW64\AdmTmpl.dll
2013-10-16 18:06:19 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-10-16 18:06:19 ----A---- C:\Windows\system32\msyuv.dll
2013-10-16 18:06:19 ----A---- C:\Windows\system32\mfps.dll
2013-10-16 18:06:19 ----A---- C:\Windows\system32\mapistub.dll
2013-10-16 18:06:19 ----A---- C:\Windows\system32\mapi32.dll
2013-10-16 18:06:19 ----A---- C:\Windows\system32\Bubbles.scr
2013-10-16 18:06:18 ----A---- C:\Windows\twain_32.dll
2013-10-16 18:06:18 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2013-10-16 18:06:18 ----A---- C:\Windows\SYSWOW64\qcap.dll
2013-10-16 18:06:18 ----A---- C:\Windows\SYSWOW64\qasf.dll
2013-10-16 18:06:18 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-10-16 18:06:18 ----A---- C:\Windows\system32\unimdmat.dll
2013-10-16 18:06:18 ----A---- C:\Windows\system32\OpcServices.dll
2013-10-16 18:06:18 ----A---- C:\Windows\system32\msrle32.dll
2013-10-16 18:06:18 ----A---- C:\Windows\system32\iscsium.dll
2013-10-16 18:06:17 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2013-10-16 18:06:17 ----A---- C:\Windows\SYSWOW64\ssText3d.scr
2013-10-16 18:06:17 ----A---- C:\Windows\SYSWOW64\slwga.dll
2013-10-16 18:06:17 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2013-10-16 18:06:17 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2013-10-16 18:06:17 ----A---- C:\Windows\system32\tsbyuv.dll
2013-10-16 18:06:17 ----A---- C:\Windows\system32\seclogon.dll
2013-10-16 18:06:17 ----A---- C:\Windows\system32\Ribbons.scr
2013-10-16 18:06:17 ----A---- C:\Windows\system32\Mystify.scr
2013-10-16 18:06:17 ----A---- C:\Windows\system32\ifsutil.dll
2013-10-16 18:06:17 ----A---- C:\Windows\system32\drivers\umbus.sys
2013-10-16 18:06:17 ----A---- C:\Windows\system32\diskraid.exe
2013-10-16 18:06:16 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2013-10-16 18:06:16 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2013-10-16 18:06:16 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2013-10-16 18:06:16 ----A---- C:\Windows\SYSWOW64\msscp.dll
2013-10-16 18:06:16 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2013-10-16 18:06:16 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2013-10-16 18:06:16 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2013-10-16 18:06:16 ----A---- C:\Windows\system32\wmpshell.dll
2013-10-16 18:06:16 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2013-10-16 18:06:16 ----A---- C:\Windows\system32\rdpencom.dll
2013-10-16 18:06:16 ----A---- C:\Windows\system32\perfmon.exe
2013-10-16 18:06:16 ----A---- C:\Windows\system32\muifontsetup.dll
2013-10-16 18:06:16 ----A---- C:\Windows\system32\AzSqlExt.dll
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\raschap.dll
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\acppage.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\umb.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\tlscsp.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\runonce.exe
2013-10-16 18:06:15 ----A---- C:\Windows\system32\raschap.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\qasf.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\netutils.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2013-10-16 18:06:15 ----A---- C:\Windows\system32\FXSAPI.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\dbghelp.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\ActionQueue.dll
2013-10-16 18:06:15 ----A---- C:\Windows\bfsvc.exe
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\input.dll
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2013-10-16 18:06:14 ----A---- C:\Windows\system32\wpdwcn.dll
2013-10-16 18:06:14 ----A---- C:\Windows\system32\WMADMOD.DLL
2013-10-16 18:06:14 ----A---- C:\Windows\system32\wiavideo.dll
2013-10-16 18:06:14 ----A---- C:\Windows\system32\syssetup.dll
2013-10-16 18:06:14 ----A---- C:\Windows\system32\MdSched.exe
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\runonce.exe
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\onexui.dll
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2013-10-16 18:06:13 ----A---- C:\Windows\system32\WMVSDECD.DLL
2013-10-16 18:06:13 ----A---- C:\Windows\system32\vdsbas.dll
2013-10-16 18:06:13 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2013-10-16 18:06:13 ----A---- C:\Windows\system32\nltest.exe
2013-10-16 18:06:13 ----A---- C:\Windows\system32\mstask.dll
2013-10-16 18:06:13 ----A---- C:\Windows\system32\Mcx2Svc.dll
2013-10-16 18:06:13 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-10-16 18:06:13 ----A---- C:\Windows\system32\drivers\rmcast.sys
2013-10-16 18:06:12 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2013-10-16 18:06:12 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2013-10-16 18:06:12 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2013-10-16 18:06:12 ----A---- C:\Windows\SYSWOW64\logagent.exe
2013-10-16 18:06:12 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2013-10-16 18:06:12 ----A---- C:\Windows\system32\vss_ps.dll
2013-10-16 18:06:12 ----A---- C:\Windows\system32\tabcal.exe
2013-10-16 18:06:12 ----A---- C:\Windows\system32\shacct.dll
2013-10-16 18:06:12 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2013-10-16 18:06:12 ----A---- C:\Windows\system32\cscapi.dll
2013-10-16 18:06:12 ----A---- C:\Windows\system32\bitsadmin.exe
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\shacct.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2013-10-16 18:06:11 ----A---- C:\Windows\system32\WPDSp.dll
2013-10-16 18:06:11 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2013-10-16 18:06:11 ----A---- C:\Windows\system32\wmdrmnet.dll
2013-10-16 18:06:11 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2013-10-16 18:06:11 ----A---- C:\Windows\system32\qcap.dll
2013-10-16 18:06:11 ----A---- C:\Windows\system32\mssphtb.dll
2013-10-16 18:06:11 ----A---- C:\Windows\system32\msnetobj.dll
2013-10-16 18:06:11 ----A---- C:\Windows\system32\logman.exe
2013-10-16 18:06:11 ----A---- C:\Windows\system32\CscMig.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\pdh.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\logman.exe
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\Bubbles.scr
2013-10-16 18:06:10 ----A---- C:\Windows\system32\vmictimeprovider.dll
2013-10-16 18:06:10 ----A---- C:\Windows\system32\spbcd.dll
2013-10-16 18:06:10 ----A---- C:\Windows\system32\secproc_ssp.dll
2013-10-16 18:06:10 ----A---- C:\Windows\system32\qdv.dll
2013-10-16 18:06:10 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2013-10-16 18:06:10 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2013-10-16 18:06:09 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2013-10-16 18:06:09 ----A---- C:\Windows\SYSWOW64\Ribbons.scr
2013-10-16 18:06:09 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2013-10-16 18:06:09 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2013-10-16 18:06:09 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2013-10-16 18:06:09 ----A---- C:\Windows\SYSWOW64\Mystify.scr
2013-10-16 18:06:09 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2013-10-16 18:06:09 ----A---- C:\Windows\system32\takeown.exe
2013-10-16 18:06:09 ----A---- C:\Windows\system32\PnPUnattend.exe
2013-10-16 18:06:09 ----A---- C:\Windows\system32\fphc.dll
2013-10-16 18:06:09 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2013-10-16 18:06:09 ----A---- C:\Windows\system32\dot3ui.dll
2013-10-16 18:06:08 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2013-10-16 18:06:08 ----A---- C:\Windows\SYSWOW64\utildll.dll
2013-10-16 18:06:08 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2013-10-16 18:06:08 ----A---- C:\Windows\SYSWOW64\fphc.dll
2013-10-16 18:06:08 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2013-10-16 18:06:08 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2013-10-16 18:06:08 ----A---- C:\Windows\system32\amstream.dll
2013-10-16 18:06:07 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2013-10-16 18:06:07 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2013-10-16 18:06:07 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2013-10-16 18:06:07 ----A---- C:\Windows\SYSWOW64\takeown.exe
2013-10-16 18:06:07 ----A---- C:\Windows\SYSWOW64\qdv.dll
2013-10-16 18:06:07 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2013-10-16 18:06:07 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2013-10-16 18:06:07 ----A---- C:\Windows\system32\vfwwdm32.dll
2013-10-16 18:06:07 ----A---- C:\Windows\system32\shimgvw.dll
2013-10-16 18:06:07 ----A---- C:\Windows\system32\QCLIPROV.DLL
2013-10-16 18:06:07 ----A---- C:\Windows\system32\nrpsrv.dll
2013-10-16 18:06:07 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2013-10-16 18:06:07 ----A---- C:\Windows\system32\EhStorAPI.dll
2013-10-16 18:06:07 ----A---- C:\Windows\system32\djoin.exe
2013-10-16 18:06:07 ----A---- C:\Windows\system32\cmstp.exe
2013-10-16 18:06:07 ----A---- C:\Windows\system32\CertPolEng.dll
2013-10-16 18:06:06 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2013-10-16 18:06:06 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2013-10-16 18:06:06 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2013-10-16 18:06:06 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2013-10-16 18:06:06 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2013-10-16 18:06:06 ----A---- C:\Windows\SYSWOW64\cca.dll
2013-10-16 18:06:06 ----A---- C:\Windows\system32\WUDFx.dll
2013-10-16 18:06:06 ----A---- C:\Windows\system32\WUDFHost.exe
2013-10-16 18:06:06 ----A---- C:\Windows\system32\WavDest.dll
2013-10-16 18:06:06 ----A---- C:\Windows\system32\iasrecst.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2013-10-16 18:06:05 ----A---- C:\Windows\system32\sscore.dll
2013-10-16 18:06:05 ----A---- C:\Windows\system32\relog.exe
2013-10-16 18:06:05 ----A---- C:\Windows\system32\mydocs.dll
2013-10-16 18:06:05 ----A---- C:\Windows\system32\MultiDigiMon.exe
2013-10-16 18:06:05 ----A---- C:\Windows\system32\KMSVC.DLL
2013-10-16 18:06:05 ----A---- C:\Windows\system32\iscsicli.exe
2013-10-16 18:06:05 ----A---- C:\Windows\system32\fdProxy.dll
2013-10-16 18:06:05 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-10-16 18:06:05 ----A---- C:\Windows\system32\drivers\pacer.sys
2013-10-16 18:06:05 ----A---- C:\Windows\system32\diskpart.exe
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\relog.exe
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\amstream.dll
2013-10-16 18:06:04 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2013-10-16 18:06:04 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2013-10-16 18:06:04 ----A---- C:\Windows\system32\msdmo.dll
2013-10-16 18:06:04 ----A---- C:\Windows\system32\mobsync.exe
2013-10-16 18:06:04 ----A---- C:\Windows\system32\itircl.dll
2013-10-16 18:06:04 ----A---- C:\Windows\system32\dot3msm.dll
2013-10-16 18:06:04 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2013-10-16 18:06:04 ----A---- C:\Windows\system32\BdeHdCfg.exe
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\resutils.dll
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\itircl.dll
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2013-10-16 18:06:03 ----A---- C:\Windows\system32\qprocess.exe
2013-10-16 18:06:03 ----A---- C:\Windows\system32\prevhost.exe
2013-10-16 18:06:03 ----A---- C:\Windows\system32\mciqtz32.dll
2013-10-16 18:06:03 ----A---- C:\Windows\system32\choice.exe
2013-10-16 18:06:03 ----A---- C:\Windows\system32\FXSTIFF.dll
2013-10-16 18:06:03 ----A---- C:\Windows\system32\findstr.exe
2013-10-16 18:06:03 ----A---- C:\Windows\system32\eappgnui.dll
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\netutils.dll
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\findstr.exe
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2013-10-16 18:06:02 ----A---- C:\Windows\system32\sppc.dll
2013-10-16 18:06:02 ----A---- C:\Windows\system32\schedcli.dll
2013-10-16 18:06:02 ----A---- C:\Windows\system32\onexui.dll
2013-10-16 18:06:02 ----A---- C:\Windows\system32\luainstall.dll
2013-10-16 18:06:02 ----A---- C:\Windows\system32\chglogon.exe
2013-10-16 18:06:02 ----A---- C:\Windows\system32\drivers\tunnel.sys
2013-10-16 18:06:02 ----A---- C:\Windows\system32\drivers\dfsc.sys
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\sppc.dll
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\spopk.dll
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2013-10-16 18:06:01 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-10-16 18:06:01 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2013-10-16 18:06:01 ----A---- C:\Windows\system32\spopk.dll
2013-10-16 18:06:01 ----A---- C:\Windows\system32\repair-bde.exe
2013-10-16 18:06:01 ----A---- C:\Windows\system32\RDPENCDD.dll
2013-10-16 18:06:01 ----A---- C:\Windows\system32\qappsrv.exe
2013-10-16 18:06:01 ----A---- C:\Windows\system32\profprov.dll
2013-10-16 18:06:01 ----A---- C:\Windows\system32\manage-bde.exe
2013-10-16 18:06:01 ----A---- C:\Windows\system32\inetmib1.dll
2013-10-16 18:06:01 ----A---- C:\Windows\system32\chgport.exe
2013-10-16 18:06:00 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2013-10-16 18:06:00 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2013-10-16 18:06:00 ----A---- C:\Windows\system32\vmstorfltres.dll
2013-10-16 18:06:00 ----A---- C:\Windows\system32\vmicres.dll
2013-10-16 18:06:00 ----A---- C:\Windows\system32\tskill.exe
2013-10-16 18:06:00 ----A---- C:\Windows\system32\tsdiscon.exe
2013-10-16 18:06:00 ----A---- C:\Windows\system32\tscon.exe
2013-10-16 18:06:00 ----A---- C:\Windows\system32\rwinsta.exe
2013-10-16 18:06:00 ----A---- C:\Windows\system32\odbcconf.dll
2013-10-16 18:06:00 ----A---- C:\Windows\system32\logoff.exe
2013-10-16 18:06:00 ----A---- C:\Windows\system32\chgusr.exe
2013-10-16 18:06:00 ----A---- C:\Windows\system32\fixmapi.exe
2013-10-16 18:05:59 ----A---- C:\Windows\SYSWOW64\wups.dll
2013-10-16 18:05:59 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2013-10-16 18:05:59 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2013-10-16 18:05:59 ----A---- C:\Windows\system32\vmbusres.dll
2013-10-16 18:05:59 ----A---- C:\Windows\system32\UIRibbonRes.dll
2013-10-16 18:05:59 ----A---- C:\Windows\system32\TRAPI.dll
2013-10-16 18:05:59 ----A---- C:\Windows\system32\shadow.exe
2013-10-16 18:05:59 ----A---- C:\Windows\system32\FXSMON.dll
2013-10-16 18:05:59 ----A---- C:\Windows\system32\elsTrans.dll
2013-10-16 18:05:59 ----A---- C:\Windows\system32\drivers\tdi.sys
2013-10-16 18:05:58 ----A---- C:\Windows\SYSWOW64\perfts.dll
2013-10-16 18:05:58 ----A---- C:\Windows\SYSWOW64\imm32.dll
2013-10-16 18:05:58 ----A---- C:\Windows\system32\wshbth.dll
2013-10-16 18:05:58 ----A---- C:\Windows\system32\reset.exe
2013-10-16 18:05:58 ----A---- C:\Windows\system32\LogonUI.exe
2013-10-16 18:05:58 ----A---- C:\Windows\system32\change.exe
2013-10-16 18:05:58 ----A---- C:\Windows\system32\dsauth.dll
2013-10-16 18:05:57 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2013-10-16 18:05:57 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2013-10-16 18:05:57 ----A---- C:\Windows\system32\query.exe
2013-10-16 18:05:57 ----A---- C:\Windows\system32\napdsnap.dll
2013-10-16 18:05:57 ----A---- C:\Windows\system32\FXSUNATD.exe
2013-10-16 18:05:56 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2013-10-16 18:05:56 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2013-10-16 18:05:56 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2013-10-16 18:05:56 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2013-10-16 18:05:56 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2013-10-16 18:05:56 ----A---- C:\Windows\system32\cscdll.dll
2013-10-16 18:05:56 ----A---- C:\Windows\system32\bitsperf.dll
2013-10-16 18:05:55 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2013-10-16 18:05:55 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2013-10-16 18:05:55 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2013-10-16 18:05:55 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2013-10-16 18:05:54 ----A---- C:\Windows\system32\wsdchngr.dll
2013-10-16 18:05:53 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2013-10-16 18:05:53 ----A---- C:\Windows\SYSWOW64\sscore.dll
2013-10-16 18:05:53 ----A---- C:\Windows\SYSWOW64\shgina.dll
2013-10-16 18:05:53 ----A---- C:\Windows\SYSWOW64\riched32.dll
2013-10-16 18:05:53 ----A---- C:\Windows\system32\shgina.dll
2013-10-16 18:05:52 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2013-10-16 18:05:52 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2013-10-16 18:05:51 ----A---- C:\Windows\system32\wshirda.dll
2013-10-16 18:05:49 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2013-10-16 18:05:49 ----A---- C:\Windows\system32\vmbuspipe.dll
2013-10-16 18:05:49 ----A---- C:\Windows\system32\riched32.dll
2013-10-16 18:05:49 ----A---- C:\Windows\system32\rdpcfgex.dll
2013-10-16 18:05:49 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2013-10-16 18:05:49 ----A---- C:\Windows\system32\drivers\hidusb.sys
2013-10-16 18:05:49 ----A---- C:\Windows\system32\drivers\appid.sys
2013-10-16 18:05:48 ----A---- C:\Windows\SYSWOW64\browseui.dll
2013-10-16 18:05:48 ----A---- C:\Windows\system32\VmbusCoinstaller.dll
2013-10-16 18:05:48 ----A---- C:\Windows\system32\spwmp.dll
2013-10-16 18:05:48 ----A---- C:\Windows\system32\IcCoinstall.dll
2013-10-16 18:05:48 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2013-10-16 18:05:48 ----A---- C:\Windows\system32\C_ISCII.DLL
2013-10-16 18:05:48 ----A---- C:\Windows\system32\browseui.dll
2013-10-16 18:05:47 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2013-10-16 18:05:47 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2013-10-16 18:05:47 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2013-10-16 18:05:47 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2013-10-16 18:05:47 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2013-10-16 18:05:47 ----A---- C:\Windows\system32\VmdCoinstall.dll
2013-10-16 18:05:47 ----A---- C:\Windows\system32\shunimpl.dll
2013-10-16 18:05:47 ----A---- C:\Windows\system32\dxmasf.dll
2013-10-16 18:05:47 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-10-16 18:05:47 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-10-16 18:05:47 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2013-10-16 18:05:47 ----A---- C:\Windows\system32\drivers\scfilter.sys
2013-10-16 18:05:47 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2013-10-16 18:05:47 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2013-10-16 18:05:47 ----A---- C:\Windows\system32\drivers\cdrom.sys
2013-10-16 18:05:46 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2013-10-16 18:05:46 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDTUQ.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDTUF.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDSG.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDSF.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDPO.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDNEPR.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\kbdlk41a.dll
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDINTAM.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDINBEN.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\wmploc.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDUS.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDMON.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDGR1.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDGKL.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDGEO.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDCZ1.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\drivers\vms3cap.sys
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\spwizres.dll
2013-10-16 18:05:44 ----A---- C:\Windows\system32\pifmgr.dll
2013-10-16 18:05:44 ----A---- C:\Windows\system32\nlsbres.dll
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDTURME.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDMAORI.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDLT1.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDINTEL.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDINORI.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDINMAR.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDINKAN.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDINHIN.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDBULG.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDBLR.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDBASH.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\drivers\VMBusHID.sys
2013-10-16 18:05:44 ----A---- C:\Windows\system32\BlbEvents.dll
2013-10-16 18:05:32 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2013-10-16 18:05:32 ----A---- C:\Windows\system32\dpx.dll
2013-10-16 18:05:28 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2013-10-16 18:05:28 ----A---- C:\Windows\SYSWOW64\printmanagement.msc
2013-10-16 18:05:24 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2013-10-16 18:04:41 ----A---- C:\Windows\system32\wbemcomn.dll
2013-10-16 18:04:39 ----A---- C:\Windows\system32\sqmapi.dll
2013-10-16 17:54:18 ----A---- C:\Windows\SYSWOW64\RichardBurnsRally.ini
2013-10-16 17:34:02 ----D---- C:\Users\Hanes\AppData\Roaming\ParetoLogic
2013-10-16 17:34:02 ----D---- C:\Users\Hanes\AppData\Roaming\DriverCure
2013-10-16 17:33:56 ----D---- C:\ProgramData\ParetoLogic
2013-10-16 17:20:28 ----D---- C:\Windows\SYSWOW64\RTCOM
2013-10-16 17:20:28 ----D---- C:\Program Files\Realtek
2013-10-16 17:20:16 ----A---- C:\Windows\system32\WavesGUILib64.dll
2013-10-16 17:20:16 ----A---- C:\Windows\system32\SRSWOW64.dll
2013-10-16 17:20:16 ----A---- C:\Windows\system32\SRSTSX64.dll
2013-10-16 17:20:16 ----A---- C:\Windows\system32\SRSTSH64.dll
2013-10-16 17:20:16 ----A---- C:\Windows\system32\SRSHP64.dll
2013-10-16 17:20:16 ----A---- C:\Windows\system32\RtPgEx64.dll
2013-10-16 17:20:16 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2013-10-16 17:20:16 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2013-10-16 17:20:15 ----A---- C:\Windows\SYSWOW64\MBAPO232.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RtkCfg64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RtkAPO64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RtkApi64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RTEEP64A.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RTEEL64A.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RTEEG64A.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RTEED64A.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RtDataProc64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RTCOM64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RP3DHT64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RP3DAA64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RCoInstII64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\MBWrp64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\MBAPO264.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2013-10-16 17:20:15 ----A---- C:\Windows\system32\drivers\MBfilt64.sys
2013-10-16 17:20:14 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2013-10-16 17:20:14 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2013-10-16 17:20:14 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2013-10-16 17:20:13 ----D---- C:\Program Files (x86)\Realtek
2013-10-16 17:20:13 ----A---- C:\Windows\system32\FMAPO64.dll
2013-10-16 17:20:13 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2013-10-16 17:20:13 ----A---- C:\Windows\system32\AERTAR64.dll
2013-10-16 17:20:13 ----A---- C:\Windows\system32\AERTAC64.dll
2013-10-16 17:20:11 ----HD---- C:\Program Files (x86)\Temp
2013-10-16 17:20:11 ----A---- C:\Windows\RtlExUpd.dll
2013-10-16 15:44:30 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2013-10-16 13:32:29 ----D---- C:\Windows\SYSWOW64\Wat
2013-10-16 13:32:29 ----D---- C:\Windows\system32\Wat
2013-10-16 12:25:42 ----A---- C:\Windows\system32\browserchoice.exe
2013-10-16 12:08:44 ----D---- C:\Windows\system32\MRT
2013-10-16 12:08:43 ----A---- C:\Windows\system32\MRT.exe
2013-10-16 12:08:09 ----A---- C:\Windows\SYSWOW64\wmi.dll
2013-10-16 12:08:09 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-10-16 12:08:09 ----A---- C:\Windows\system32\wmi.dll
2013-10-16 12:08:09 ----A---- C:\Windows\system32\imagehlp.dll
2013-10-16 12:08:09 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2013-10-16 11:03:13 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2013-10-16 11:03:13 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2013-10-16 11:03:13 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2013-10-16 11:03:13 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2013-10-16 11:03:13 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2013-10-16 11:03:13 ----A---- C:\Windows\system32\odbctrac.dll
2013-10-16 11:03:13 ----A---- C:\Windows\system32\odbccu32.dll
2013-10-16 11:03:13 ----A---- C:\Windows\system32\odbccr32.dll
2013-10-16 11:03:13 ----A---- C:\Windows\system32\odbccp32.dll
2013-10-16 11:02:53 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2013-10-16 11:02:53 ----A---- C:\Windows\system32\poqexec.exe
2013-10-16 11:02:51 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-10-16 11:02:51 ----A---- C:\Windows\system32\mstscax.dll
2013-10-16 11:02:50 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-10-16 11:02:50 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-10-16 11:02:50 ----A---- C:\Windows\system32\tsgqec.dll
2013-10-16 11:02:50 ----A---- C:\Windows\system32\aaclient.dll
2013-10-16 11:02:39 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2013-10-16 11:02:39 ----A---- C:\Windows\system32\CPFilters.dll
2013-10-16 11:02:38 ----A---- C:\Windows\SYSWOW64\sbe.dll
2013-10-16 11:02:38 ----A---- C:\Windows\system32\sbe.dll
2013-10-16 11:02:13 ----A---- C:\Windows\SYSWOW64\quartz.dll
2013-10-16 11:02:13 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-10-16 11:02:13 ----A---- C:\Windows\system32\quartz.dll
2013-10-16 11:02:13 ----A---- C:\Windows\system32\qdvd.dll
2013-10-16 11:02:04 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2013-10-16 11:02:04 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2013-10-16 11:02:04 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2013-10-16 11:02:02 ----A---- C:\Windows\SYSWOW64\webio.dll
2013-10-16 11:02:02 ----A---- C:\Windows\system32\webio.dll
2013-10-16 11:01:31 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-10-16 11:01:18 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2013-10-16 11:01:18 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2013-10-16 11:01:18 ----A---- C:\Windows\system32\mfc42u.dll
2013-10-16 11:01:18 ----A---- C:\Windows\system32\mfc42.dll
2013-10-16 11:01:12 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-10-16 11:01:11 ----A---- C:\Windows\system32\schannel.dll
2013-10-16 11:01:11 ----A---- C:\Windows\system32\rdrmemptylst.exe
2013-10-16 11:01:11 ----A---- C:\Windows\system32\rdpwsx.dll
2013-10-16 11:01:11 ----A---- C:\Windows\system32\rdpcorekmts.dll
2013-10-16 11:01:10 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-10-16 11:01:10 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-10-16 11:01:10 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-10-16 11:01:10 ----A---- C:\Windows\system32\sspisrv.dll
2013-10-16 11:01:10 ----A---- C:\Windows\system32\sspicli.dll
2013-10-16 11:01:10 ----A---- C:\Windows\system32\secur32.dll
2013-10-16 11:01:10 ----A---- C:\Windows\system32\lsass.exe
2013-10-16 11:01:10 ----A---- C:\Windows\system32\lsasrv.dll
2013-10-16 11:01:10 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-10-16 11:01:10 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-10-16 11:01:10 ----A---- C:\Windows\system32\drivers\cng.sys
2013-10-16 11:01:03 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-10-16 11:01:03 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2013-10-16 11:01:03 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-10-16 11:01:03 ----A---- C:\Windows\system32\msxml6.dll
2013-10-16 11:01:03 ----A---- C:\Windows\system32\msxml3r.dll
2013-10-16 11:01:03 ----A---- C:\Windows\system32\msxml3.dll
2013-10-16 11:00:51 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2013-10-16 11:00:51 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2013-10-16 11:00:51 ----A---- C:\Windows\system32\dnsrslvr.dll
2013-10-16 11:00:51 ----A---- C:\Windows\system32\dnscacheugc.exe
2013-10-16 11:00:51 ----A---- C:\Windows\system32\dnsapi.dll
2013-10-16 11:00:22 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2013-10-16 11:00:22 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2013-10-16 11:00:22 ----A---- C:\Windows\system32\dpnet.dll
2013-10-16 11:00:22 ----A---- C:\Windows\system32\dpnaddr.dll
2013-10-16 11:00:21 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-10-16 11:00:21 ----A---- C:\Windows\system32\ncrypt.dll
2013-10-16 10:59:58 ----A---- C:\Windows\system32\drivers\srvnet.sys
2013-10-16 10:59:58 ----A---- C:\Windows\system32\drivers\srv2.sys
2013-10-16 10:59:58 ----A---- C:\Windows\system32\drivers\srv.sys
2013-10-16 10:59:54 ----A---- C:\Windows\system32\drivers\netio.sys
2013-10-16 10:59:54 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-10-16 10:59:51 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2013-10-16 10:59:51 ----A---- C:\Windows\system32\psisdecd.dll
2013-10-16 10:59:48 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2013-10-16 10:59:36 ----A---- C:\Windows\system32\drivers\afd.sys
2013-10-16 10:59:35 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2013-10-16 10:59:35 ----A---- C:\Windows\system32\kerberos.dll
2013-10-16 10:59:35 ----A---- C:\Windows\system32\drivers\partmgr.sys
2013-10-16 10:59:19 ----A---- C:\Windows\SYSWOW64\synceng.dll
2013-10-16 10:59:19 ----A---- C:\Windows\system32\synceng.dll
2013-10-16 10:59:18 ----A---- C:\Windows\system32\winresume.exe
2013-10-16 10:59:18 ----A---- C:\Windows\system32\winload.exe
2013-10-16 10:59:17 ----A---- C:\Windows\system32\setbcdlocale.dll
2013-10-16 10:59:17 ----A---- C:\Windows\system32\kdusb.dll
2013-10-16 10:59:17 ----A---- C:\Windows\system32\kdcom.dll
2013-10-16 10:59:17 ----A---- C:\Windows\system32\kd1394.dll
2013-10-16 10:58:46 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2013-10-16 10:58:46 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2013-10-16 10:58:46 ----A---- C:\Windows\SYSWOW64\devobj.dll
2013-10-16 10:58:46 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2013-10-16 10:58:46 ----A---- C:\Windows\system32\umpnpmgr.dll
2013-10-16 10:58:46 ----A---- C:\Windows\system32\cfgmgr32.dll
2013-10-16 10:58:42 ----A---- C:\Windows\system32\netapi32.dll
2013-10-16 10:58:42 ----A---- C:\Windows\system32\browser.dll
2013-10-16 10:58:42 ----A---- C:\Windows\system32\browcli.dll
2013-10-16 10:58:41 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2013-10-16 10:58:41 ----A---- C:\Windows\SYSWOW64\browcli.dll
2013-10-16 10:58:06 ----A---- C:\Windows\system32\WFS.exe
2013-10-16 10:58:06 ----A---- C:\Windows\system32\FXSCOVER.exe
2013-10-16 10:58:05 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2013-10-16 10:58:05 ----A---- C:\Windows\system32\msvcrt.dll
2013-10-16 10:58:05 ----A---- C:\Windows\system32\inetcomm.dll
2013-10-16 10:58:04 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2013-10-16 10:58:03 ----A---- C:\Windows\system32\localspl.dll
2013-10-16 10:58:02 ----A---- C:\Windows\system32\drivers\bowser.sys
2013-10-16 10:58:01 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2013-10-16 10:58:01 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2013-10-16 10:58:01 ----A---- C:\Windows\system32\oleaut32.dll
2013-10-16 10:58:01 ----A---- C:\Windows\system32\oleacc.dll
2013-10-16 10:58:00 ----A---- C:\Windows\system32\EncDec.dll
2013-10-16 10:57:59 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2013-10-16 10:57:49 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2013-10-16 10:57:49 ----A---- C:\Windows\system32\cdosys.dll
2013-10-16 10:46:49 ----A---- C:\Windows\SYSWOW64\packager.dll
2013-10-16 10:46:49 ----A---- C:\Windows\system32\packager.dll
2013-10-16 10:30:28 ----D---- C:\Users\Hanes\AppData\Roaming\Adobe
2013-10-15 17:27:38 ----D---- C:\Users\Hanes\AppData\Roaming\Wargaming.net
2013-10-15 17:23:34 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-10-15 17:23:14 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-10-15 17:18:23 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-10-15 17:18:01 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2013-10-15 17:01:08 ----D---- C:\Users\Hanes\AppData\Roaming\TS3Client
2013-10-15 16:57:05 ----D---- C:\ProgramData\boost_interprocess
2013-10-15 16:55:50 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2013-10-15 16:55:50 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2013-10-15 16:55:50 ----A---- C:\Windows\system32\wrap_oal.dll
2013-10-15 16:55:50 ----A---- C:\Windows\system32\OpenAL32.dll
2013-10-15 16:55:49 ----N---- C:\Windows\SYSWOW64\Sens_oal.dll
2013-10-15 16:55:49 ----N---- C:\Windows\system32\Sens_oal.dll
2013-10-15 16:55:29 ----HD---- C:\Program Files (x86)\Creative Installation Information
2013-10-15 16:55:09 ----D---- C:\Program Files (x86)\Creative
2013-10-15 16:54:56 ----D---- C:\ProgramData\Creative
2013-10-15 16:54:32 ----A---- C:\Windows\SYSWOW64\CmdRtr.DLL
2013-10-15 16:54:32 ----A---- C:\Windows\SYSWOW64\APOMngr.DLL
2013-10-15 16:54:32 ----A---- C:\Windows\system32\CmdRtr64.DLL
2013-10-15 16:54:32 ----A---- C:\Windows\system32\APOMgr64.DLL
2013-10-15 16:54:30 ----RA---- C:\Windows\SYSWOW64\SpiRunE.dll
2013-10-15 16:54:30 ----RA---- C:\Windows\SYSWOW64\OemSpiE.dll
2013-10-15 16:54:30 ----RA---- C:\Windows\CfgHPSp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\CfgHPRMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\CfgHPRLI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\CfgHPHp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\CfgHPFMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\CfgHPDO.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\CfgHPDI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg05Sp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg05RMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg05RLI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg05Hp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg05FMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg05DO.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg05DI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg04Sp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg04RMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg04RLI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg04Hp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg04FMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg04DO.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg04DI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg03Sp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg03RMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg03RLI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg03Hp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg03FMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg03DO.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg03DI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg02Sp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg02RMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg02RLI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg02Hp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg02FMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg02DO.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg02DI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg01Sp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg01Mic.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg01LI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg01Hp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg01DO.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg01DI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg01APR.ini
2013-10-15 16:54:30 ----A---- C:\Windows\t3RDefE.exe
2013-10-15 16:54:30 ----A---- C:\Windows\SYSWOW64\t3apstp.exe
2013-10-15 16:54:30 ----A---- C:\Windows\SYSWOW64\T3APO32.dll
2013-10-15 16:54:30 ----A---- C:\Windows\SYSWOW64\t3aim64.exe
2013-10-15 16:54:30 ----A---- C:\Windows\SYSWOW64\AddCat.exe
2013-10-15 16:54:30 ----A---- C:\Windows\system32\t3ppld64.dll
2013-10-15 16:54:30 ----A---- C:\Windows\system32\T3APO64.dll
2013-10-15 16:51:09 ----D---- C:\ProgramData\Oracle
2013-10-15 16:51:07 ----D---- C:\ProgramData\Sun
2013-10-15 16:50:49 ----D---- C:\Program Files (x86)\Java
2013-10-15 16:27:10 ----D---- C:\Program Files\Logitech
2013-10-15 16:27:10 ----D---- C:\Program Files\Common Files\Logitech
2013-10-15 16:26:08 ----D---- C:\ProgramData\LogiShrd
2013-10-15 16:25:57 ----D---- C:\Users\Hanes\AppData\Roaming\NVIDIA
2013-10-15 16:25:25 ----D---- C:\Program Files\Logitech Gaming Software
2013-10-15 16:24:35 ----D---- C:\Users\Hanes\AppData\Roaming\Logitech
2013-10-15 16:24:35 ----D---- C:\Users\Hanes\AppData\Roaming\Logishrd
2013-10-15 16:21:03 ----D---- C:\Users\Hanes\AppData\Roaming\WinRAR
2013-10-15 16:21:01 ----D---- C:\Program Files\WinRAR
2013-10-15 16:15:01 ----D---- C:\ProgramData\AVerTV 3D
2013-10-15 16:14:52 ----D---- C:\Windows\Driver Cache
2013-10-15 16:14:52 ----A---- C:\Windows\system32\drivers\AVerAF35.sys
2013-10-15 16:14:19 ----A---- C:\Windows\SYSWOW64\CardID.dll
2013-10-15 16:14:19 ----A---- C:\Windows\SYSWOW64\AVerIO.sys
2013-10-15 16:14:19 ----A---- C:\Windows\SYSWOW64\AVerIO.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\sptlib22.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\sptlib21.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\sptlib12.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\sptlib11.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\sptlib03.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\sptlib02.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\sptlib01.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\pthreadVC.dll
2013-10-15 16:14:11 ----D---- C:\Program Files (x86)\AVerMedia
2013-10-15 16:12:56 ----A---- C:\Windows\FixCamera.exe
2013-10-15 16:12:56 ----A---- C:\Windows\amcap.exe
2013-10-15 16:12:55 ----A---- C:\Windows\vsnp325.exe
2013-10-15 16:12:55 ----A---- C:\Windows\system32\vsnp325.dll
2013-10-15 16:12:55 ----A---- C:\Windows\system32\drivers\snp325.sys
2013-10-15 16:12:55 ----A---- C:\Windows\system32\csnp325.dll
2013-10-15 16:12:55 ----A---- C:\Windows\snp325.src
2013-10-15 16:12:55 ----A---- C:\Windows\snp325.ini
2013-10-15 16:12:54 ----A---- C:\Windows\SYSWOW64\vsnp325.dll
2013-10-15 16:12:54 ----A---- C:\Windows\SYSWOW64\rsnp325.dll
2013-10-15 16:12:05 ----D---- C:\Users\Hanes\AppData\Roaming\InstallShield
2013-10-15 16:08:54 ----A---- C:\Windows\SYSWOW64\csnp325.dll
2013-10-15 16:05:23 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-10-15 16:05:22 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-10-15 16:05:22 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-10-15 16:05:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-10-15 16:05:22 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-10-15 16:05:22 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-10-15 16:05:22 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-10-15 16:05:21 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-10-15 16:05:21 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-10-15 16:05:21 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-10-15 16:05:21 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-10-15 16:05:20 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-10-15 16:05:20 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-10-15 16:05:20 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-10-15 16:05:20 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-10-15 16:05:19 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-10-15 16:05:19 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-10-15 16:05:19 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-10-15 16:05:19 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-10-15 16:05:18 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-10-15 16:05:18 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-10-15 16:05:18 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-10-15 16:05:18 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-10-15 16:05:18 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-10-15 16:05:18 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-10-15 16:05:17 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-10-15 16:05:17 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-10-15 16:05:16 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-10-15 16:05:16 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-10-15 16:05:16 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-10-15 16:05:16 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-10-15 16:05:16 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-10-15 16:05:16 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-10-15 16:05:15 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-10-15 16:05:15 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-10-15 16:05:14 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-10-15 16:05:14 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-10-15 16:05:14 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-10-15 16:05:14 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-10-15 16:05:14 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-10-15 16:05:14 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-10-15 16:05:13 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-10-15 16:05:13 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-10-15 16:05:12 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-10-15 16:05:12 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-10-15 16:05:11 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-10-15 16:05:11 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-10-15 16:05:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-10-15 16:05:11 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-10-15 16:05:11 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-10-15 16:05:11 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-10-15 16:05:10 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-10-15 16:05:10 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-10-15 16:05:09 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-10-15 16:05:09 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-10-15 16:05:07 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-10-15 16:05:07 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-10-15 16:05:07 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-10-15 16:05:07 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-10-15 16:05:06 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-10-15 16:05:06 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-10-15 16:05:05 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-10-15 16:05:05 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-10-15 16:05:04 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-10-15 16:05:04 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-10-15 16:05:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-10-15 16:05:04 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-10-15 16:05:04 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-10-15 16:05:04 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-10-15 16:05:03 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-10-15 16:05:03 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-10-15 16:05:03 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-10-15 16:05:03 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-10-15 16:05:02 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-10-15 16:05:02 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-10-15 16:05:02 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-10-15 16:05:02 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-10-15 16:05:02 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-10-15 16:05:02 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-10-15 16:05:00 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-10-15 16:05:00 ----A---- C:\Windows\system32\xinput1_3.dll
2013-10-15 16:04:59 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-10-15 16:04:59 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-10-15 16:04:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-10-15 16:04:59 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-10-15 16:04:59 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-10-15 16:04:59 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-10-15 16:04:58 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-10-15 16:04:58 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-10-15 16:04:58 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-10-15 16:04:58 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-10-15 16:04:57 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-10-15 16:04:57 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-10-15 16:04:56 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2013-10-15 16:04:56 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-10-15 16:04:56 ----A---- C:\Windows\system32\d3dx9_32.dll
2013-10-15 16:04:56 ----A---- C:\Windows\system32\d3dx10.dll
2013-10-15 16:04:55 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-10-15 16:04:55 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-10-15 16:04:55 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-10-15 16:04:55 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-10-15 16:04:54 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-10-15 16:04:54 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-10-15 16:04:53 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-10-15 16:04:53 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-10-15 16:04:53 ----A---- C:\Windows\system32\xinput1_2.dll
2013-10-15 16:04:53 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-10-15 16:04:50 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-10-15 16:04:50 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-10-15 16:04:49 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-10-15 16:04:49 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-10-15 16:04:49 ----A---- C:\Windows\system32\xinput1_1.dll
2013-10-15 16:04:49 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-10-15 16:04:47 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-10-15 16:04:47 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-10-15 16:04:46 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-10-15 16:04:46 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-10-15 16:04:46 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-10-15 16:04:46 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-10-15 16:04:45 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-10-15 16:04:45 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-10-15 16:04:44 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-10-15 16:04:44 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-10-15 16:04:43 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-10-15 16:04:43 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-10-15 16:04:43 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-10-15 16:04:43 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-10-15 16:04:42 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-10-15 16:04:42 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-10-15 16:04:41 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-10-15 16:04:41 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-10-15 16:02:49 ----D---- C:\Users\Hanes\AppData\Roaming\Skype
2013-10-15 16:02:45 ----D---- C:\Windows\SYSWOW64\directx
2013-10-15 16:02:43 ----RD---- C:\Program Files (x86)\Skype
2013-10-15 16:02:37 ----D---- C:\ProgramData\Skype
2013-10-15 15:59:30 ----N---- C:\Windows\system32\MpSigStub.exe
2013-10-15 15:58:29 ----D---- C:\Windows\Panther
2013-10-15 15:58:17 ----RASH---- C:\BOOTSECT.BAK
2013-10-15 15:58:16 ----SHD---- C:\Boot
2013-10-15 15:57:03 ----D---- C:\Users\Hanes\AppData\Roaming\AVAST Software
2013-10-15 15:56:41 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2013-10-15 15:56:41 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2013-10-15 15:56:40 ----A---- C:\Windows\system32\drivers\aswSP.sys
2013-10-15 15:56:40 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2013-10-15 15:56:40 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2013-10-15 15:56:39 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2013-10-15 15:56:39 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2013-10-15 15:56:38 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2013-10-15 15:56:37 ----A---- C:\Windows\system32\aswBoot.exe
2013-10-15 15:56:36 ----A---- C:\Windows\avastSS.scr
2013-10-15 15:56:28 ----D---- C:\Program Files\AVAST Software
2013-10-15 15:55:51 ----D---- C:\ProgramData\AVAST Software
2013-10-15 15:49:58 ----D---- C:\Program Files (x86)\Google
2013-10-15 15:31:48 ----D---- C:\Program Files (x86)\AGEIA Technologies
2013-10-15 15:31:04 ----D---- C:\ProgramData\NVIDIA
2013-10-15 15:31:02 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2013-10-15 15:31:02 ----A---- C:\Windows\system32\rdpudd.dll
2013-10-15 15:31:02 ----A---- C:\Windows\system32\rdpcore.dll
2013-10-15 15:31:02 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2013-10-15 15:31:02 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2013-10-15 15:30:46 ----A---- C:\Windows\system32\nvvsvc.exe
2013-10-15 15:30:46 ----A---- C:\Windows\system32\nvsvc64.dll
2013-10-15 15:30:46 ----A---- C:\Windows\system32\nvshext.dll
2013-10-15 15:30:46 ----A---- C:\Windows\system32\nvmctray.dll
2013-10-15 15:30:46 ----A---- C:\Windows\system32\nvcpl.dll
2013-10-15 15:30:37 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2013-10-15 15:30:37 ----A---- C:\Windows\system32\OpenCL.dll
2013-10-15 15:30:30 ----D---- C:\ProgramData\NVIDIA Corporation
2013-10-15 15:30:28 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-10-15 15:29:15 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-10-15 15:28:06 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-10-15 15:27:09 ----A---- C:\Windows\system32\wups2.dll
2013-10-15 15:27:09 ----A---- C:\Windows\system32\wucltux.dll
2013-10-15 15:27:09 ----A---- C:\Windows\system32\wuaueng.dll
2013-10-15 15:27:09 ----A---- C:\Windows\system32\wuauclt.exe
2013-10-15 15:27:00 ----A---- C:\Windows\system32\wups.dll
2013-10-15 15:27:00 ----A---- C:\Windows\system32\wudriver.dll
2013-10-15 15:27:00 ----A---- C:\Windows\system32\wuapi.dll
2013-10-15 15:26:56 ----A---- C:\Windows\system32\wuwebv.dll
2013-10-15 15:26:56 ----A---- C:\Windows\system32\wuapp.exe
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvumdshimx.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvopencl.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvoglv64.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvoglshim64.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvinitx.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\NvIFR64.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvhdap64.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\NvFBC64.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvdispgenco6432723.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvdispco6432723.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvcuvid.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvcuda.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvcompiler.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvaudcap64v.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvapi64.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2013-10-15 15:26:03 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-10-15 15:26:03 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2013-10-15 15:25:30 ----D---- C:\Program Files\NVIDIA Corporation
2013-10-15 15:25:15 ----D---- C:\NVIDIA
2013-10-15 15:22:46 ----A---- C:\Windows\system32\drivers\iusb3hcs.sys
2013-10-15 15:22:38 ----A---- C:\Windows\system32\drivers\iusb3xhc.sys
2013-10-15 15:22:37 ----A---- C:\Windows\system32\drivers\iusb3hub.sys
2013-10-15 15:19:51 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-10-15 15:19:32 ----D---- C:\ProgramData\Bigfoot Networks
2013-10-15 15:19:32 ----D---- C:\Program Files\Qualcomm Atheros
2013-10-15 15:19:02 ----SHD---- C:\Windows\Installer
2013-10-15 15:09:50 ----D---- C:\Program Files (x86)\Intel
2013-10-15 15:09:50 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2013-10-15 15:09:39 ----D---- C:\Intel
2013-10-15 15:09:24 ----D---- C:\MSI
2013-10-15 15:05:53 ----D---- C:\Users\Hanes\AppData\Roaming\Identities
2013-10-15 15:05:37 ----SD---- C:\Users\Hanes\AppData\Roaming\Microsoft
2013-10-15 15:05:37 ----D---- C:\Users\Hanes\AppData\Roaming\Media Center Programs
2013-10-15 15:04:31 ----SHD---- C:\Recovery
2013-10-15 15:04:31 ----SHD---- C:\ProgramData\Šablony
2013-10-15 15:04:31 ----SHD---- C:\ProgramData\Plocha
2013-10-15 15:04:31 ----SHD---- C:\ProgramData\Oblíbené položky
2013-10-15 15:04:31 ----SHD---- C:\ProgramData\Nabídka Start
2013-10-15 15:04:31 ----SHD---- C:\ProgramData\Dokumenty
2013-10-15 15:04:31 ----SHD---- C:\ProgramData\Data aplikací
2013-10-15 15:04:28 ----D---- C:\Windows\SoftwareDistribution
2013-10-15 14:59:21 ----D---- C:\Windows\Prefetch
2013-10-15 14:59:01 ----ASH---- C:\pagefile.sys
2013-10-15 14:59:00 ----SHD---- C:\System Volume Information
2013-10-15 14:59:00 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 month======

2013-10-20 14:45:15 ----D---- C:\Windows\Temp
2013-10-20 14:45:14 ----RD---- C:\Program Files
2013-10-20 14:42:05 ----D---- C:\Windows\System32
2013-10-20 14:42:05 ----D---- C:\Windows\inf
2013-10-20 14:42:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-10-20 14:36:07 ----D---- C:\Windows\system32\config
2013-10-19 19:00:01 ----HD---- C:\ProgramData
2013-10-19 13:10:17 ----SD---- C:\ProgramData\Microsoft
2013-10-19 13:10:17 ----D---- C:\Windows\system32\drivers
2013-10-19 13:10:15 ----D---- C:\Windows\system32\drivers\UMDF
2013-10-19 11:01:07 ----D---- C:\Windows\system32\wdi
2013-10-18 22:01:27 ----D---- C:\Windows\SysWOW64
2013-10-18 22:00:50 ----RSD---- C:\Windows\assembly
2013-10-18 18:28:27 ----D---- C:\Windows\system32\Tasks
2013-10-18 17:55:33 ----RD---- C:\Program Files (x86)
2013-10-18 17:52:38 ----D---- C:\Windows\Microsoft.NET
2013-10-18 17:41:12 ----D---- C:\Windows\winsxs
2013-10-18 17:29:44 ----D---- C:\Windows\system32\catroot
2013-10-18 17:29:42 ----D---- C:\Windows\system32\DriverStore
2013-10-17 19:08:14 ----D---- C:\Windows
2013-10-17 19:08:13 ----D---- C:\Program Files (x86)\Common Files
2013-10-17 17:24:05 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-10-17 17:24:05 ----D---- C:\Windows\system32\cs-CZ
2013-10-17 17:24:05 ----D---- C:\Program Files\Windows Defender
2013-10-17 17:24:05 ----D---- C:\Program Files\Internet Explorer
2013-10-17 17:24:05 ----D---- C:\Program Files (x86)\Windows Defender
2013-10-17 17:24:05 ----D---- C:\Program Files (x86)\Internet Explorer
2013-10-17 17:24:04 ----D---- C:\Windows\SYSWOW64\migration
2013-10-17 17:24:04 ----D---- C:\Windows\SYSWOW64\en-US
2013-10-17 17:24:04 ----D---- C:\Windows\system32\migration
2013-10-17 17:24:04 ----D---- C:\Windows\system32\en-US
2013-10-17 17:24:04 ----D---- C:\Windows\PolicyDefinitions
2013-10-17 17:24:02 ----RSD---- C:\Windows\Fonts
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\it-IT
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\es-ES
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\el-GR
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\de-DE
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\da-DK
2013-10-17 17:24:02 ----D---- C:\Windows\system32\zh-HK
2013-10-17 17:24:02 ----D---- C:\Windows\system32\tr-TR
2013-10-17 17:24:02 ----D---- C:\Windows\system32\sv-SE
2013-10-17 17:24:02 ----D---- C:\Windows\system32\pt-PT
2013-10-17 17:24:02 ----D---- C:\Windows\system32\pt-BR
2013-10-17 17:24:02 ----D---- C:\Windows\system32\pl-PL
2013-10-17 17:24:02 ----D---- C:\Windows\system32\nl-NL
2013-10-17 17:24:02 ----D---- C:\Windows\system32\ko-KR
2013-10-17 17:24:02 ----D---- C:\Windows\system32\it-IT
2013-10-17 17:24:02 ----D---- C:\Windows\system32\hu-HU
2013-10-17 17:24:02 ----D---- C:\Windows\system32\fr-FR
2013-10-17 17:24:02 ----D---- C:\Windows\system32\fi-FI
2013-10-17 17:24:02 ----D---- C:\Windows\system32\es-ES
2013-10-17 17:24:02 ----D---- C:\Windows\system32\el-GR
2013-10-17 17:24:01 ----D---- C:\Windows\system32\zh-TW
2013-10-17 17:24:01 ----D---- C:\Windows\system32\zh-CN
2013-10-17 17:24:01 ----D---- C:\Windows\system32\ru-RU
2013-10-17 17:24:01 ----D---- C:\Windows\system32\nb-NO
2013-10-17 17:24:01 ----D---- C:\Windows\system32\ja-JP
2013-10-17 17:24:01 ----D---- C:\Windows\system32\de-DE
2013-10-17 17:24:01 ----D---- C:\Windows\system32\da-DK
2013-10-17 17:24:00 ----D---- C:\Windows\AppPatch
2013-10-17 17:23:59 ----D---- C:\Windows\system32\wbem
2013-10-17 17:23:55 ----D---- C:\Program Files\Windows Journal
2013-10-17 15:53:35 ----D---- C:\Windows\Logs
2013-10-17 15:53:07 ----D---- C:\Windows\system32\catroot2
2013-10-17 08:28:40 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-10-17 08:28:40 ----D---- C:\Program Files (x86)\Windows Portable Devices
2013-10-17 08:28:40 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2013-10-17 08:28:40 ----D---- C:\Program Files (x86)\Windows Media Player
2013-10-17 08:28:40 ----D---- C:\Program Files (x86)\Windows Mail
2013-10-17 08:28:39 ----D---- C:\Windows\servicing
2013-10-17 08:28:39 ----D---- C:\Program Files\Windows Sidebar
2013-10-17 08:28:39 ----D---- C:\Program Files\Windows Portable Devices
2013-10-17 08:28:39 ----D---- C:\Program Files\Windows Photo Viewer
2013-10-17 08:28:39 ----D---- C:\Program Files\Windows Media Player
2013-10-17 08:28:39 ----D---- C:\Program Files\Windows Mail
2013-10-17 08:28:39 ----D---- C:\Program Files\DVD Maker
2013-10-17 08:28:39 ----D---- C:\Program Files\Common Files\System
2013-10-17 08:28:38 ----D---- C:\Windows\ehome
2013-10-17 08:28:34 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents
2013-10-17 08:28:34 ----D---- C:\Windows\SYSWOW64\wbem
2013-10-17 08:28:34 ----D---- C:\Windows\SYSWOW64\sppui
2013-10-17 08:28:34 ----D---- C:\Windows\SYSWOW64\Setup
2013-10-17 08:28:34 ----D---- C:\Windows\SYSWOW64\oobe
2013-10-17 08:28:34 ----D---- C:\Windows\SYSWOW64\manifeststore
2013-10-17 08:28:34 ----D---- C:\Windows\SYSWOW64\cs
2013-10-17 08:28:34 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2013-10-17 08:28:33 ----D---- C:\Windows\SYSWOW64\migwiz
2013-10-17 08:28:33 ----D---- C:\Windows\SYSWOW64\Dism
2013-10-17 08:28:25 ----D---- C:\Windows\system32\Setup
2013-10-17 08:28:25 ----D---- C:\Windows\system32\oobe
2013-10-17 08:28:25 ----D---- C:\Windows\system32\cs
2013-10-17 08:28:25 ----D---- C:\Windows\system32\AdvancedInstallers
2013-10-17 08:28:24 ----D---- C:\Windows\system32\sppui
2013-10-17 08:28:24 ----D---- C:\Windows\system32\migwiz
2013-10-17 08:28:24 ----D---- C:\Windows\system32\manifeststore
2013-10-17 08:28:24 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-10-17 08:28:24 ----D---- C:\Windows\system32\Dism
2013-10-17 08:28:03 ----D---- C:\Windows\system32\Boot
2013-10-17 08:25:53 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2013-10-17 08:25:52 ----A---- C:\Windows\system32\msclmd.dll
2013-10-16 17:35:49 ----D---- C:\Windows\Tasks
2013-10-16 12:08:44 ----D---- C:\Windows\debug
2013-10-15 17:24:02 ----D---- C:\Windows\Downloaded Program Files
2013-10-15 16:27:10 ----D---- C:\Program Files\Common Files
2013-10-15 16:25:03 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-10-15 16:12:56 ----A---- C:\Windows\win.ini
2013-10-15 16:12:55 ----D---- C:\Windows\twain_32
2013-10-15 16:12:55 ----D---- C:\Windows\SYSWOW64\drivers
2013-10-15 15:58:01 ----D---- C:\Windows\Setup
2013-10-15 15:51:34 ----D---- C:\Windows\system32\CodeIntegrity
2013-10-15 15:31:01 ----RD---- C:\Users
2013-10-15 15:30:42 ----D---- C:\Windows\Help
2013-10-15 15:19:15 ----D---- C:\Windows\system32\restore
2013-10-15 15:05:51 ----SHD---- C:\$Recycle.Bin
2013-10-15 15:04:31 ----D---- C:\Program Files\Windows NT
2013-10-15 15:04:24 ----D---- C:\Windows\rescache
2013-10-15 15:02:02 ----D---- C:\Windows\system32\sysprep
2013-10-15 14:59:37 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-10-15 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2013-10-15 205320]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2013-04-26 20464]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-10-15 92544]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2013-10-15 1032416]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2013-10-15 409832]
R1 aswTdi;aswTdi; \??\C:\Windows\system32\drivers\aswTdi.sys [2013-10-15 65264]
R1 BfLwf;Qualcomm Atheros Bandwidth Control; C:\Windows\system32\DRIVERS\bflwfx64.sys [2013-05-07 66928]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-10-18 283064]
R2 aswFsBlk;aswFsBlk; \??\C:\Windows\system32\drivers\aswFsBlk.sys [2013-10-15 38984]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-10-15 84328]
R3 AVerAF35;AVerMedia A835 USB DVB-T; C:\Windows\System32\Drivers\AVerAF35.sys [2012-11-29 804736]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2013-04-26 368112]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2013-04-26 786416]
R3 Ke2200;NDIS Miniport Driver for the Killer e2200 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\e22w7x64.sys [2013-05-07 165824]
R3 LADF_CaptureOnly;LADF Capture Filter Driver; C:\Windows\system32\DRIVERS\ladfGSCamd64.sys [2013-04-15 410008]
R3 LADF_RenderOnly;LADF Render Filter Driver; C:\Windows\system32\DRIVERS\ladfGSRamd64.sys [2013-04-15 102808]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\LGBusEnum.sys [2009-11-24 22408]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver; C:\Windows\system32\drivers\LGVirHid.sys [2009-11-24 16008]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2013-04-04 25928]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2013-01-11 64624]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-06-16 196384]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2013-08-20 39200]
R3 t3;Sound Blaster X-Fi Xtreme Audio (Vista); C:\Windows\system32\drivers\t3.sys [2007-06-19 629760]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2010-04-27 26440]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2010-04-27 16200]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2010-04-27 77512]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [2011-03-02 13088]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-07-30 3564376]
S3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
S3 MSICDSetup;MSICDSetup; \??\G:\CDriver64.sys []
S3 NTIOLib_1_0_C;NTIOLib_1_0_C; \??\G:\NTIOLib_X64.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 SNP325;USB PC Camera (SNPSTD325); C:\Windows\system32\DRIVERS\snp325.sys [2007-03-07 10555264]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2010-04-27 43976]
S3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2010-04-27 36936]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-10-15 50344]
R2 AVerRemote;AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [2013-05-20 368640]
R2 AVerScheduleService;AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [2011-04-01 403456]
R2 AVerUpdateServer;AVerUpdateServer; C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe [2011-10-31 167936]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-08-27 14997280]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-09-12 920864]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-08-27 2155296]
R2 Qualcomm Atheros Killer Service;Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [2013-05-07 503296]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-09-12 414496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-15 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2013-10-15 79360]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-15 116648]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-10-16 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

Zdravim

Vidim tam MBAM. Nasel neco pri uplne kontrole?


Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

Mbam ještě běží zatím log z OTL


OTL logfile created on: 20.10.2013 20:40:59 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Hanes\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16721)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,93 Gb Total Physical Memory | 2,07 Gb Available Physical Memory | 52,75% Memory free
7,86 Gb Paging File | 5,17 Gb Available in Paging File | 65,79% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 117,09 Gb Total Space | 74,06 Gb Free Space | 63,25% Space Free | Partition Type: NTFS
Drive D: | 931,51 Gb Total Space | 177,89 Gb Free Space | 19,10% Space Free | Partition Type: NTFS
Drive E: | 100,00 Mb Total Space | 86,24 Mb Free Space | 86,25% Space Free | Partition Type: NTFS
Drive F: | 115,70 Gb Total Space | 90,29 Gb Free Space | 78,04% Space Free | Partition Type: NTFS

Computer Name: HANES-PC | User Name: Hanes | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013.10.20 20:37:18 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Hanes\Desktop\OTL.exe
PRC - [2013.10.18 14:27:27 | 003,567,800 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe
PRC - [2013.10.15 15:56:35 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013.10.09 02:02:45 | 000,844,752 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2013.09.12 01:17:46 | 000,414,496 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2013.08.27 23:16:14 | 001,028,896 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
PRC - [2013.08.27 23:15:38 | 002,155,296 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2013.05.31 19:30:28 | 000,675,840 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) -- C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
PRC - [2013.05.20 22:13:37 | 000,368,640 | ---- | M] (AVerMedia) -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
PRC - [2013.04.26 04:25:54 | 000,292,848 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
PRC - [2013.04.04 14:50:32 | 000,887,432 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
PRC - [2013.04.04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013.04.04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013.01.10 00:05:54 | 000,163,840 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
PRC - [2011.10.31 19:30:00 | 000,167,936 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) -- C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe
PRC - [2011.04.01 22:52:24 | 000,403,456 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
PRC - [2010.07.22 14:18:32 | 002,636,800 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe
PRC - [2007.02.12 14:50:40 | 000,020,480 | ---- | M] () -- C:\Windows\FixCamera.exe
PRC - [2006.10.10 14:11:08 | 000,827,392 | ---- | M] () -- C:\Windows\vsnp325.exe


========== Modules (No Company Name) ==========

MOD - [2013.10.15 15:56:36 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2013.10.09 02:02:43 | 000,415,184 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppgooglenaclpluginchrome.dll
MOD - [2013.10.09 02:02:41 | 004,055,504 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll
MOD - [2013.10.09 02:01:50 | 000,698,832 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libglesv2.dll
MOD - [2013.10.09 02:01:49 | 000,099,792 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libegl.dll
MOD - [2013.10.09 02:01:47 | 001,604,560 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ffmpegsumo.dll
MOD - [2013.01.10 00:05:54 | 000,163,840 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
MOD - [2010.07.22 14:18:32 | 002,636,800 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe
MOD - [2010.06.01 11:41:38 | 000,098,816 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\dll\DLL_MouseDeviceManager.dll
MOD - [2010.05.07 23:05:57 | 000,042,496 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\Data\X7H\Forms\OSD_Text\OSD_Text.dll
MOD - [2010.04.03 11:37:14 | 000,127,488 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\dll\DLL_Wheel4D.dll
MOD - [2010.04.03 11:37:09 | 000,094,208 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\dll\DLL_ZoomControl.dll
MOD - [2010.04.03 11:37:07 | 000,062,976 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\dll\DLL_ScrollbarControl.dll
MOD - [2010.04.03 11:37:02 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\dll\DLL_AnalyzeGesturesInRight.dll
MOD - [2010.04.03 11:36:58 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\dll\DLL_AnalyzeGesturesInOne.dll
MOD - [2009.03.26 14:46:42 | 000,148,480 | ---- | M] () -- C:\Windows\SysWOW64\APOMngr.DLL
MOD - [2009.02.06 18:52:24 | 000,073,728 | ---- | M] () -- C:\Windows\SysWOW64\CmdRtr.DLL
MOD - [2007.06.26 10:03:42 | 000,150,016 | R--- | M] () -- C:\Windows\SysWOW64\OemSpiE.dll
MOD - [2007.02.12 14:50:40 | 000,020,480 | ---- | M] () -- C:\Windows\FixCamera.exe
MOD - [2006.10.10 14:11:08 | 000,827,392 | ---- | M] () -- C:\Windows\vsnp325.exe


========== Services (SafeList) ==========

SRV:64bit: - [2013.10.15 15:56:35 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2013.08.27 23:17:13 | 014,997,280 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc)
SRV:64bit: - [2013.05.27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2013.05.07 11:43:10 | 000,503,296 | ---- | M] () [Auto | Running] -- C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe -- (Qualcomm Atheros Killer Service)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2013.10.15 16:55:23 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2013.09.12 01:17:46 | 000,414,496 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2013.09.05 10:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013.08.27 23:15:38 | 002,155,296 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013.05.20 22:13:37 | 000,368,640 | ---- | M] (AVerMedia) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe -- (AVerRemote)
SRV - [2013.04.04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2011.10.31 19:30:00 | 000,167,936 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Auto | Running] -- C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe -- (AVerUpdateServer)
SRV - [2011.04.01 22:52:24 | 000,403,456 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe -- (AVerScheduleService)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2013.10.18 17:29:09 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2013.10.15 15:56:36 | 001,032,416 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2013.10.15 15:56:36 | 000,409,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2013.10.15 15:56:36 | 000,205,320 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:64bit: - [2013.10.15 15:56:36 | 000,092,544 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2013.10.15 15:56:36 | 000,084,328 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2013.10.15 15:56:36 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:64bit: - [2013.10.15 15:56:36 | 000,065,264 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2013.10.15 15:56:36 | 000,038,984 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2013.08.20 15:33:40 | 000,039,200 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
DRV:64bit: - [2013.06.16 14:38:15 | 000,196,384 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2013.05.07 11:44:08 | 000,066,928 | ---- | M] (Qualcomm Atheros, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\bflwfx64.sys -- (BfLwf)
DRV:64bit: - [2013.05.07 11:44:06 | 000,165,824 | ---- | M] (Qualcomm Atheros, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\e22W7x64.sys -- (Ke2200)
DRV:64bit: - [2013.04.26 04:24:58 | 000,020,464 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
DRV:64bit: - [2013.04.26 04:24:56 | 000,786,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
DRV:64bit: - [2013.04.26 04:24:56 | 000,368,112 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
DRV:64bit: - [2013.04.15 20:51:58 | 000,102,808 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ladfGSRamd64.sys -- (LADF_RenderOnly)
DRV:64bit: - [2013.04.15 20:51:52 | 000,410,008 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ladfGSCamd64.sys -- (LADF_CaptureOnly)
DRV:64bit: - [2013.04.04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2013.01.11 19:02:34 | 000,064,624 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2012.11.29 08:03:24 | 000,804,736 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AVerAF35.sys -- (AVerAF35)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.03.02 18:17:20 | 000,013,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 15:32:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 15:32:46 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.20 13:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2010.04.27 16:57:20 | 000,016,200 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid)
DRV:64bit: - [2010.04.27 16:57:14 | 000,036,936 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmHidLo.sys -- (WmHidLo)
DRV:64bit: - [2010.04.27 16:57:12 | 000,026,440 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum)
DRV:64bit: - [2010.04.27 14:03:12 | 000,077,512 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore)
DRV:64bit: - [2010.04.27 14:02:42 | 000,043,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmFilter.sys -- (WmFilter)
DRV:64bit: - [2009.11.24 02:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid)
DRV:64bit: - [2009.11.24 02:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV:64bit: - [2009.11.18 07:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2007.06.19 07:42:30 | 000,629,760 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\t3.sys -- (t3)
DRV:64bit: - [2007.03.07 16:59:22 | 010,555,264 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\snp325.sys -- (SNP325)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000\..\SearchScopes\{DDCE6BCA-FA3B-42E0-83B3-45DA7AE901AF}: "URL" = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
IE - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)



========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.seznam.cz/
CHR - Extension: Dokumenty Google = C:\Users\Hanes\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Disk Google = C:\Users\Hanes\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Hanes\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Users\Hanes\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Chrome In-App Payments service = C:\Users\Hanes\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\
CHR - Extension: Gmail = C:\Users\Hanes\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4:64bit: - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [snp325] C:\Windows\vsnp325.exe ()
O4:64bit: - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [FixCamera] C:\Windows\FixCamera.exe ()
O4 - HKLM..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate File not found
O4 - HKLM..\Run: [SPIRunE] C:\Windows\SysWow64\SpiRunE.dll (Creative Technology Ltd.)
O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000..\Run: [DAEMON Tools Lite] F:\Instalace\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000..\Run: [LiveSupport] "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log File not found
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000..\Run: [OscarEditor] C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe ()
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\Overwolf.exe -silent File not found
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001..\Run: [OscarEditor] C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe ()
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\Overwolf.exe -silent File not found
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001..\RunOnce: [CTAutoUpdate] C:\Program Files (x86)\Creative\Shared Files\Software Update\AutoUpdate.exe (Creative Technology Ltd)
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001..\RunOnce: [InetReg] C:\Program Files (x86)\Creative\Product Registration\English\InetReg.exe (Creative Technology Ltd)
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\BfLLR.dll (Bigfoot Networks, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\BfLLR.dll (Bigfoot Networks, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\BfLLR.dll (Bigfoot Networks, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\BfLLR.dll (Bigfoot Networks, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000015 - C:\Windows\SysNative\BfLLR.dll (Bigfoot Networks, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\BfLLR.dll (Bigfoot Networks, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\BfLLR.dll (Bigfoot Networks, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\BfLLR.dll (Bigfoot Networks, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\BfLLR.dll (Bigfoot Networks, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\SysWOW64\BfLLR.dll (Bigfoot Networks, Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000\..Trusted Domains: localhost ([]http in Internet)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwar ... /CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E83397A8-755D-4273-9AF1-7B2D19E181D5}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013.10.17 19:14:51 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2013.02.28 18:11:29 | 000,000,000 | ---D | M] - D:\Automatovky -- [ NTFS ]
O33 - MountPoints2\{beb4bdcc-3670-11e3-82ea-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{beb4bdcc-3670-11e3-82ea-806e6f6e6963}\Shell\AutoRun\command - "" = G:\Ctrun\Start.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2013.10.20 20:36:59 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Hanes\Desktop\OTL.exe
[2013.10.20 19:38:02 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\PunkBuster
[2013.10.20 19:37:58 | 000,000,000 | ---D | C] -- C:\Users\Hanes\Documents\MOHW
[2013.10.20 15:21:31 | 000,000,000 | ---D | C] -- C:\Program Files\PlayReady
[2013.10.20 14:45:14 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2013.10.20 14:45:13 | 000,000,000 | ---D | C] -- C:\rsit
[2013.10.19 09:19:06 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\NFS Underground 2
[2013.10.18 22:49:58 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2013.10.18 22:01:30 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_7.dll
[2013.10.18 22:01:30 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_5.dll
[2013.10.18 22:01:29 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_43.dll
[2013.10.18 22:01:29 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_7.dll
[2013.10.18 22:01:28 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_43.dll
[2013.10.18 22:01:28 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll
[2013.10.18 22:01:27 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll
[2013.10.18 22:01:27 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll
[2013.10.18 22:01:27 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll
[2013.10.18 22:01:27 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll
[2013.10.18 22:01:27 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll
[2013.10.18 22:01:27 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll
[2013.10.18 22:01:27 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll
[2013.10.18 22:01:27 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll
[2013.10.18 22:01:27 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll
[2013.10.18 22:01:27 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll
[2013.10.18 22:01:26 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll
[2013.10.18 22:01:26 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll
[2013.10.18 22:01:26 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll
[2013.10.18 22:01:26 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll
[2013.10.18 22:01:26 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll
[2013.10.18 22:01:26 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll
[2013.10.18 22:01:26 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll
[2013.10.18 22:01:26 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll
[2013.10.18 22:01:25 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll
[2013.10.18 22:01:25 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll
[2013.10.18 22:01:25 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll
[2013.10.18 22:01:25 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll
[2013.10.18 22:01:25 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll
[2013.10.18 22:01:25 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll
[2013.10.18 22:01:25 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll
[2013.10.18 22:01:25 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll
[2013.10.18 22:01:24 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll
[2013.10.18 22:01:24 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll
[2013.10.18 22:01:24 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll
[2013.10.18 22:01:24 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll
[2013.10.18 22:01:24 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll
[2013.10.18 22:01:24 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll
[2013.10.18 22:01:24 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll
[2013.10.18 17:56:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\DSS
[2013.10.18 17:56:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Codemasters
[2013.10.18 17:56:41 | 000,000,000 | ---D | C] -- C:\Users\Hanes\Documents\My Games
[2013.10.18 17:56:37 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft
[2013.10.18 17:40:46 | 019,087,360 | ---- | C] (Intel Corporation / Blue Ripple Sound Limited) -- C:\Windows\SysWow64\mkl_blueripple.dll
[2013.10.18 17:40:46 | 001,417,216 | ---- | C] (Blue Ripple Sound Limited) -- C:\Windows\SysWow64\rapture3d_oal.dll
[2013.10.18 17:40:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Ripple Sound
[2013.10.18 17:40:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BRS
[2013.10.18 17:40:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenAL
[2013.10.18 17:40:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows - LIVE
[2013.10.18 17:40:35 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll
[2013.10.18 17:40:35 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll
[2013.10.18 17:39:56 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\xlive
[2013.10.18 17:39:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
[2013.10.18 17:39:45 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll
[2013.10.18 17:39:45 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll
[2013.10.18 17:39:44 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll
[2013.10.18 17:39:44 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll
[2013.10.18 17:39:44 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll
[2013.10.18 17:39:44 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_7.dll
[2013.10.18 17:35:30 | 000,000,000 | ---D | C] -- C:\Users\Hanes\Documents\Optimizer Pro
[2013.10.18 17:35:28 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2013.10.18 17:30:19 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Application Data
[2013.10.18 17:29:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Seznam.cz
[2013.10.18 17:29:16 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Seznam.cz
[2013.10.18 17:28:58 | 000,283,064 | ---- | C] (Disc Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2013.10.18 17:28:57 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\DAEMON Tools Lite
[2013.10.18 17:25:19 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2013.10.17 20:35:40 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Malwarebytes
[2013.10.17 20:35:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.10.17 20:35:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.10.17 20:35:23 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2013.10.17 20:35:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013.10.17 20:35:10 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Programs
[2013.10.17 19:08:44 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
[2013.10.17 19:08:43 | 000,000,000 | ---D | C] -- C:\sh4ldr
[2013.10.17 19:08:43 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group
[2013.10.17 19:08:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2013.10.17 15:54:24 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2013.10.17 15:49:28 | 003,959,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013.10.17 15:49:28 | 001,509,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2013.10.17 15:49:28 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013.10.17 15:49:28 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2013.10.17 15:49:28 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2013.10.17 15:49:28 | 001,054,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2013.10.17 15:49:28 | 000,905,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2013.10.17 15:49:28 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013.10.17 15:49:28 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2013.10.17 15:49:28 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2013.10.17 15:49:28 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013.10.17 15:49:28 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2013.10.17 15:49:28 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013.10.17 15:49:28 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2013.10.17 15:49:28 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013.10.17 15:49:28 | 000,452,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2013.10.17 15:49:28 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2013.10.17 15:49:28 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013.10.17 15:49:28 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2013.10.17 15:49:28 | 000,281,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2013.10.17 15:49:28 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2013.10.17 15:49:28 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2013.10.17 15:49:28 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
[2013.10.17 15:49:28 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2013.10.17 15:49:28 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2013.10.17 15:49:28 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
[2013.10.17 15:49:28 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2013.10.17 15:49:28 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2013.10.17 15:49:28 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2013.10.17 15:49:28 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2013.10.17 15:49:28 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2013.10.17 15:49:28 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2013.10.17 15:49:28 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2013.10.17 15:49:28 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2013.10.17 15:49:28 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013.10.17 15:49:28 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2013.10.17 15:49:28 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2013.10.17 15:49:28 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2013.10.17 15:49:28 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2013.10.17 15:49:28 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2013.10.17 15:49:28 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013.10.17 15:49:28 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2013.10.17 15:49:28 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2013.10.17 15:49:28 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2013.10.17 15:49:28 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013.10.17 15:49:28 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2013.10.17 15:49:28 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2013.10.17 15:49:28 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2013.10.17 15:49:28 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2013.10.17 15:49:28 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2013.10.17 15:49:28 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013.10.17 15:49:28 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2013.10.17 15:49:28 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013.10.17 15:49:28 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2013.10.17 15:49:28 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2013.10.17 15:49:28 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013.10.17 15:49:28 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2013.10.17 15:49:28 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013.10.17 15:49:28 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2013.10.17 15:49:28 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2013.10.17 15:49:28 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2013.10.17 15:49:28 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013.10.17 15:49:28 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013.10.17 15:49:28 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2013.10.17 15:49:28 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2013.10.17 15:49:28 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2013.10.17 15:49:28 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2013.10.17 15:49:28 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2013.10.17 15:48:06 | 003,928,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2013.10.17 15:48:06 | 002,776,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll
[2013.10.17 15:48:06 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2013.10.17 15:48:06 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll
[2013.10.17 15:48:06 | 001,682,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2013.10.17 15:48:06 | 001,643,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2013.10.17 15:48:06 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
[2013.10.17 15:48:06 | 001,238,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll
[2013.10.17 15:48:06 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2013.10.17 15:48:06 | 000,648,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
[2013.10.17 15:48:06 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2013.10.17 15:48:06 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2013.10.17 15:48:06 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2013.10.17 15:48:06 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2013.10.17 15:48:06 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
[2013.10.17 15:48:06 | 000,333,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2013.10.17 15:48:06 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll
[2013.10.17 15:48:06 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll
[2013.10.17 15:48:06 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll
[2013.10.17 15:48:06 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
[2013.10.17 15:48:06 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll
[2013.10.17 15:48:06 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.10.17 15:48:06 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.10.17 15:48:06 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.10.17 15:48:06 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.10.17 15:46:53 | 001,887,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
[2013.10.17 15:46:53 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
[2013.10.17 15:31:41 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2013.10.17 15:31:35 | 001,472,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2013.10.17 15:31:34 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2013.10.17 15:31:34 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2013.10.17 15:31:26 | 001,930,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
[2013.10.17 15:31:26 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
[2013.10.17 15:31:26 | 000,111,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2013.10.17 15:31:13 | 000,368,128 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2013.10.17 15:31:13 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2013.10.17 15:31:13 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll
[2013.10.17 15:31:13 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll
[2013.10.17 15:31:12 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2013.10.17 15:31:12 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2013.10.17 15:31:12 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2013.10.17 15:31:12 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2013.10.17 15:31:11 | 005,550,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2013.10.17 15:31:11 | 003,968,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2013.10.17 15:31:11 | 003,913,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2013.10.17 15:31:11 | 001,732,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2013.10.17 15:31:11 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2013.10.17 15:31:10 | 001,161,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2013.10.17 15:31:10 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2013.10.17 15:31:10 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2013.10.17 15:31:10 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2013.10.17 15:31:10 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2013.10.17 15:31:10 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2013.10.17 15:31:10 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2013.10.17 15:31:10 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2013.10.17 15:31:10 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2013.10.17 15:31:10 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2013.10.17 15:31:10 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2013.10.17 15:31:10 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2013.10.17 15:31:10 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2013.10.17 15:31:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2013.10.17 15:31:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2013.10.17 15:31:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2013.10.17 15:31:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2013.10.17 15:31:09 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2013.10.17 15:31:09 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2013.10.17 15:31:09 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2013.10.17 15:31:09 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2013.10.17 15:31:09 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2013.10.17 15:31:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2013.10.17 15:31:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2013.10.17 15:31:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2013.10.17 15:31:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2013.10.17 15:31:08 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2013.10.17 15:31:08 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2013.10.17 15:31:08 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
[2013.10.17 15:31:08 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
[2013.10.17 15:31:08 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2013.10.17 15:31:08 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2013.10.17 15:31:08 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2013.10.17 15:31:07 | 001,888,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
[2013.10.17 15:31:07 | 001,620,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
[2013.10.17 15:31:06 | 001,217,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
[2013.10.17 15:31:06 | 000,054,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfLdr.sys
[2013.10.17 15:31:06 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wdfres.dll
[2013.10.17 15:31:04 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
[2013.10.17 15:31:04 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
[2013.10.17 15:31:04 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys
[2013.10.17 15:31:04 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidparse.sys
[2013.10.17 15:30:35 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll
[2013.10.17 15:29:35 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll
[2013.10.17 15:29:32 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
[2013.10.17 15:29:32 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll
[2013.10.17 15:29:32 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe
[2013.10.17 15:29:27 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2013.10.17 15:29:26 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2013.10.17 15:29:20 | 001,192,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe
[2013.10.17 15:29:20 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe
[2013.10.17 15:29:19 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certenc.dll
[2013.10.17 15:29:19 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certenc.dll
[2013.10.17 15:29:14 | 000,265,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2013.10.17 15:29:14 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2013.10.17 15:04:54 | 000,647,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mscomct2.ocx
[2013.10.17 15:04:54 | 000,053,248 | ---- | C] (Creative Technology Ltd ) -- C:\Windows\Ctregrun.exe
[2013.10.17 15:04:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
[2013.10.17 15:04:17 | 000,629,760 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\t3.sys
[2013.10.17 15:04:17 | 000,194,048 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysNative\CtDvInst.dll
[2013.10.17 15:04:08 | 000,000,000 | ---D | C] -- C:\Program Files\Creative
[2013.10.17 15:04:06 | 000,512,512 | R--- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\CTAPO32.dll
[2013.10.17 15:04:06 | 000,057,856 | R--- | C] (Creative Technology Ltd) -- C:\Windows\SysNative\ctppld.dll
[2013.10.17 15:04:05 | 000,599,552 | R--- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\CTAPO64.dll
[2013.10.17 14:50:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\A4TECH Software
[2013.10.17 14:50:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor
[2013.10.17 14:49:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OscarX7H
[2013.10.17 13:47:14 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2013.10.17 09:34:05 | 000,264,616 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2013.10.17 09:34:00 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2013.10.17 09:34:00 | 000,174,504 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2013.10.17 09:34:00 | 000,096,168 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2013.10.17 09:34:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2013.10.17 01:57:35 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SPReview
[2013.10.17 01:56:39 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\EventProviders
[2013.10.17 00:19:12 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\vlc
[2013.10.17 00:12:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2013.10.17 00:11:43 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2013.10.16 22:22:59 | 000,905,728 | ---- | C] (Share-rapid.com) -- C:\Users\Hanes\Desktop\SRDownloader.exe
[2013.10.16 18:08:00 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll
[2013.10.16 18:08:00 | 000,048,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll
[2013.10.16 18:07:56 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll
[2013.10.16 18:07:54 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys
[2013.10.16 18:07:54 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
[2013.10.16 18:07:48 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll
[2013.10.16 18:07:48 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll
[2013.10.16 18:07:48 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tssrvlic.dll
[2013.10.16 18:07:47 | 000,629,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pmcsnap.dll
[2013.10.16 18:07:45 | 014,633,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2013.10.16 18:07:45 | 002,314,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll
[2013.10.16 18:07:45 | 002,223,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll
[2013.10.16 18:07:44 | 003,205,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmcndmgr.dll
[2013.10.16 18:07:44 | 000,485,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll
[2013.10.16 18:07:43 | 004,120,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll
[2013.10.16 18:07:43 | 003,008,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xpsservices.dll
[2013.10.16 18:07:43 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll
[2013.10.16 18:07:43 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll
[2013.10.16 18:07:43 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe
[2013.10.16 18:07:43 | 000,359,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe
[2013.10.16 18:07:42 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll
[2013.10.16 18:07:42 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe
[2013.10.16 18:07:41 | 002,086,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2013.10.16 18:07:41 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe
[2013.10.16 18:07:41 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ppcsnap.dll
[2013.10.16 18:07:41 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PushPrinterConnections.exe
[2013.10.16 18:07:40 | 002,565,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\esent.dll
[2013.10.16 18:07:40 | 001,197,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll
[2013.10.16 18:07:40 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizui.dll
[2013.10.16 18:07:39 | 003,207,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll
[2013.10.16 18:07:39 | 001,866,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll
[2013.10.16 18:07:39 | 001,753,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vssapi.dll
[2013.10.16 18:07:39 | 001,556,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RacEngn.dll
[2013.10.16 18:07:39 | 001,340,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diagperf.dll
[2013.10.16 18:07:38 | 003,860,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbon.dll
[2013.10.16 18:07:38 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll
[2013.10.16 18:07:38 | 001,334,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll
[2013.10.16 18:07:38 | 001,326,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NaturalLanguage6.dll
[2013.10.16 18:07:38 | 000,299,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2013.10.16 18:07:37 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2013.10.16 18:07:37 | 002,872,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2013.10.16 18:07:37 | 001,698,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\esent.dll
[2013.10.16 18:07:36 | 003,027,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVCORE.DLL
[2013.10.16 18:07:36 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe
[2013.10.16 18:07:36 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe
[2013.10.16 18:07:36 | 000,109,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll
[2013.10.16 18:07:36 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll
[2013.10.16 18:07:35 | 001,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll
[2013.10.16 18:07:35 | 000,598,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spinstall.exe
[2013.10.16 18:07:35 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spreview.exe
[2013.10.16 18:07:35 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpdd.dll
[2013.10.16 18:07:34 | 003,957,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSAT.exe
[2013.10.16 18:07:34 | 001,548,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll
[2013.10.16 18:07:33 | 002,067,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d9.dll
[2013.10.16 18:07:32 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuthFWSnapin.dll
[2013.10.16 18:07:32 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthFWSnapin.dll
[2013.10.16 18:07:32 | 001,115,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RacEngn.dll
[2013.10.16 18:07:32 | 000,867,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFolder.dll
[2013.10.16 18:07:31 | 003,391,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbgeng.dll
[2013.10.16 18:07:31 | 001,632,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmcore.dll
[2013.10.16 18:07:31 | 000,079,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdvgumd32.dll
[2013.10.16 18:07:30 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll
[2013.10.16 18:07:30 | 000,958,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\actxprxy.dll
[2013.10.16 18:07:29 | 000,784,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gpprefcl.dll
[2013.10.16 18:07:29 | 000,750,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWorkspace.dll
[2013.10.16 18:07:28 | 001,244,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imapi2fs.dll
[2013.10.16 18:07:28 | 001,116,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstsc.exe
[2013.10.16 18:07:28 | 000,695,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netlogon.dll
[2013.10.16 18:07:27 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2013.10.16 18:07:27 | 001,900,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupapi.dll
[2013.10.16 18:07:27 | 001,212,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\propsys.dll
[2013.10.16 18:07:26 | 001,281,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werconcpl.dll
[2013.10.16 18:07:26 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll
[2013.10.16 18:07:26 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PushPrinterConnections.exe
[2013.10.16 18:07:25 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll
[2013.10.16 18:07:25 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe
[2013.10.16 18:07:24 | 001,049,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstsc.exe
[2013.10.16 18:07:24 | 001,008,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\user32.dll
[2013.10.16 18:07:23 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certmgr.dll
[2013.10.16 18:07:23 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LSCSHostPolicy.dll
[2013.10.16 18:07:22 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wer.dll
[2013.10.16 18:07:22 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scavengeui.dll
[2013.10.16 18:07:21 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceApi.dll
[2013.10.16 18:07:21 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll
[2013.10.16 18:07:21 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsmf.dll
[2013.10.16 18:07:21 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncsi.dll
[2013.10.16 18:07:20 | 002,652,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netshell.dll
[2013.10.16 18:07:20 | 001,509,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdtctm.dll
[2013.10.16 18:07:20 | 001,371,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dwmcore.dll
[2013.10.16 18:07:20 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll
[2013.10.16 18:07:20 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdrm.dll
[2013.10.16 18:07:20 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shlwapi.dll
[2013.10.16 18:07:20 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpshell.exe
[2013.10.16 18:07:20 | 000,295,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\framedynos.dll
[2013.10.16 18:07:19 | 000,800,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll
[2013.10.16 18:07:19 | 000,594,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comdlg32.dll
[2013.10.16 18:07:19 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll
[2013.10.16 18:07:19 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcfgx.dll
[2013.10.16 18:07:19 | 000,479,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appmgr.dll
[2013.10.16 18:07:19 | 000,390,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
[2013.10.16 18:07:19 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsm.exe
[2013.10.16 18:07:19 | 000,297,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ws2_32.dll
[2013.10.16 18:07:19 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tcpmonui.dll
[2013.10.16 18:07:18 | 002,055,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Query.dll
[2013.10.16 18:07:18 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TSWorkspace.dll
[2013.10.16 18:07:18 | 000,481,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpps.dll
[2013.10.16 18:07:18 | 000,422,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drvstore.dll
[2013.10.16 18:07:18 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apphelp.dll
[2013.10.16 18:07:18 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsmf.dll
[2013.10.16 18:07:18 | 000,107,904 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdsata.sys
[2013.10.16 18:07:18 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3api.dll
[2013.10.16 18:07:17 | 002,543,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdshext.dll
[2013.10.16 18:07:17 | 001,098,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Vault.dll
[2013.10.16 18:07:17 | 000,897,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\azroles.dll
[2013.10.16 18:07:17 | 000,758,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samsrv.dll
[2013.10.16 18:07:17 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmd.exe
[2013.10.16 18:07:17 | 000,281,600 | ---- | C] (Microsoft) -- C:\Windows\SysNative\DShowRdpFilter.dll
[2013.10.16 18:07:17 | 000,266,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QAGENT.DLL
[2013.10.16 18:07:16 | 002,522,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbgeng.dll
[2013.10.16 18:07:16 | 000,778,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll
[2013.10.16 18:07:16 | 000,653,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpksetup.exe
[2013.10.16 18:07:15 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gpprefcl.dll
[2013.10.16 18:07:15 | 000,582,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sxs.dll
[2013.10.16 18:07:15 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll
[2013.10.16 18:07:15 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcfgx.dll
[2013.10.16 18:07:15 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfds.dll
[2013.10.16 18:07:15 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wldap32.dll
[2013.10.16 18:07:15 | 000,272,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcbuilder.exe
[2013.10.16 18:07:15 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscobj.dll
[2013.10.16 18:07:15 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpclip.exe
[2013.10.16 18:07:14 | 002,151,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcndmgr.dll
[2013.10.16 18:07:14 | 001,808,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pnidui.dll
[2013.10.16 18:07:14 | 001,158,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webservices.dll
[2013.10.16 18:07:14 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ipsmsnap.dll
[2013.10.16 18:07:14 | 000,252,928 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\DShowRdpFilter.dll
[2013.10.16 18:07:14 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hgprint.dll
[2013.10.16 18:07:14 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll
[2013.10.16 18:07:14 | 000,189,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys
[2013.10.16 18:07:13 | 000,933,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlsrv32.dll
[2013.10.16 18:07:13 | 000,732,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imapi2fs.dll
[2013.10.16 18:07:13 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveapi.dll
[2013.10.16 18:07:13 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsta.dll
[2013.10.16 18:07:13 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpendp.dll
[2013.10.16 18:07:13 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3api.dll
[2013.10.16 18:07:13 | 000,049,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll
[2013.10.16 18:07:12 | 001,009,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcmde.dll
[2013.10.16 18:07:12 | 000,403,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
[2013.10.16 18:07:12 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mcbuilder.exe
[2013.10.16 18:07:12 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prncache.dll
[2013.10.16 18:07:11 | 001,712,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xpsservices.dll
[2013.10.16 18:07:11 | 001,555,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certmgr.dll
[2013.10.16 18:07:11 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanpref.dll
[2013.10.16 18:07:11 | 001,243,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMNetMgr.dll
[2013.10.16 18:07:11 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\evr.dll
[2013.10.16 18:07:11 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvstore.dll
[2013.10.16 18:07:11 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe
[2013.10.16 18:07:11 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpnike.dll
[2013.10.16 18:07:11 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tspubwmi.dll

[2013.10.16 18:07:11 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\userenv.dll
[2013.10.16 18:07:10 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll
[2013.10.16 18:07:10 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
[2013.10.16 18:07:10 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\photowiz.dll
[2013.10.16 18:07:10 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioSes.dll
[2013.10.16 18:07:10 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\framedyn.dll
[2013.10.16 18:07:09 | 002,262,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SyncCenter.dll
[2013.10.16 18:07:09 | 002,072,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPEncEn.dll
[2013.10.16 18:07:09 | 001,082,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppobjs.dll
[2013.10.16 18:07:09 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpeffects.dll
[2013.10.16 18:07:09 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
[2013.10.16 18:07:09 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmd.exe
[2013.10.16 18:07:09 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll
[2013.10.16 18:07:09 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tscfgwmi.dll
[2013.10.16 18:07:09 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpinit.exe
[2013.10.16 18:07:08 | 000,501,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSATAPI.dll
[2013.10.16 18:07:08 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfds.dll
[2013.10.16 18:07:08 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\stobject.dll
[2013.10.16 18:07:08 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmicsvc.exe
[2013.10.16 18:07:08 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\framedynos.dll
[2013.10.16 18:07:08 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fde.dll
[2013.10.16 18:07:07 | 000,551,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localsec.dll
[2013.10.16 18:07:07 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imapi2.dll
[2013.10.16 18:07:07 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netdiagfx.dll
[2013.10.16 18:07:07 | 000,298,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcryptprimitives.dll
[2013.10.16 18:07:07 | 000,253,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tcpipcfg.dll
[2013.10.16 18:07:07 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QSHVHOST.DLL
[2013.10.16 18:07:07 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\credui.dll
[2013.10.16 18:07:07 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetpp.dll
[2013.10.16 18:07:07 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netid.dll
[2013.10.16 18:07:07 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpendp.dll
[2013.10.16 18:07:07 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2013.10.16 18:07:06 | 002,746,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gameux.dll
[2013.10.16 18:07:06 | 000,762,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\azroles.dll
[2013.10.16 18:07:06 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\biocpl.dll
[2013.10.16 18:07:06 | 000,498,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscui.dll
[2013.10.16 18:07:06 | 000,378,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msinfo32.exe
[2013.10.16 18:07:06 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appmgr.dll
[2013.10.16 18:07:06 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spp.dll
[2013.10.16 18:07:06 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncsi.dll
[2013.10.16 18:07:05 | 002,755,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themeui.dll
[2013.10.16 18:07:05 | 001,050,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\printui.dll
[2013.10.16 18:07:05 | 000,571,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mspbda.dll
[2013.10.16 18:07:05 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll
[2013.10.16 18:07:05 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PhotoScreensaver.scr
[2013.10.16 18:07:05 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wusa.exe
[2013.10.16 18:07:05 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scansetting.dll
[2013.10.16 18:07:05 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aitagent.exe
[2013.10.16 18:07:05 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\splwow64.exe
[2013.10.16 18:07:04 | 000,577,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AdmTmpl.dll
[2013.10.16 18:07:04 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll
[2013.10.16 18:07:04 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpchttp.dll
[2013.10.16 18:07:04 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IPHLPAPI.DLL
[2013.10.16 18:07:04 | 000,144,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\basecsp.dll
[2013.10.16 18:07:03 | 003,211,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
[2013.10.16 18:07:03 | 000,934,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FirewallControlPanel.dll
[2013.10.16 18:07:03 | 000,854,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbghelp.dll
[2013.10.16 18:07:03 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscms.dll
[2013.10.16 18:07:03 | 000,442,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winspool.drv
[2013.10.16 18:07:03 | 000,405,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wisptis.exe
[2013.10.16 18:07:03 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2013.10.16 18:07:03 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsRasterService.dll
[2013.10.16 18:07:03 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PkgMgr.exe
[2013.10.16 18:07:03 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ocsetup.exe
[2013.10.16 18:07:02 | 000,776,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\calc.exe
[2013.10.16 18:07:02 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\evr.dll
[2013.10.16 18:07:02 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DXP.dll
[2013.10.16 18:07:02 | 000,418,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppwinob.dll
[2013.10.16 18:07:02 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinSATAPI.dll
[2013.10.16 18:07:02 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ocsetapi.dll
[2013.10.16 18:07:01 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmsys.cpl
[2013.10.16 18:07:01 | 000,780,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ci.dll
[2013.10.16 18:07:01 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqlsrv32.dll
[2013.10.16 18:07:01 | 000,509,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntshrui.dll
[2013.10.16 18:07:01 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eapp3hst.dll
[2013.10.16 18:07:01 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eapphost.dll
[2013.10.16 18:07:01 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll
[2013.10.16 18:07:01 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mprapi.dll
[2013.10.16 18:07:01 | 000,128,000 | ---- | C] (Microsoft) -- C:\Windows\SysNative\Robocopy.exe
[2013.10.16 18:07:00 | 002,983,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbon.dll
[2013.10.16 18:07:00 | 002,494,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netshell.dll
[2013.10.16 18:07:00 | 000,263,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hal.dll
[2013.10.16 18:07:00 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2013.10.16 18:07:00 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\thumbcache.dll
[2013.10.16 18:07:00 | 000,078,720 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\drivers\HpSAMD.sys
[2013.10.16 18:06:59 | 001,457,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DxpTaskSync.dll
[2013.10.16 18:06:59 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSMPEG2ENC.DLL
[2013.10.16 18:06:59 | 000,658,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PerfCenterCPL.dll
[2013.10.16 18:06:59 | 000,429,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\puiobj.dll
[2013.10.16 18:06:59 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scecli.dll
[2013.10.16 18:06:59 | 000,179,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Classpnp.sys
[2013.10.16 18:06:59 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmredir.dll
[2013.10.16 18:06:59 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll
[2013.10.16 18:06:58 | 002,851,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll
[2013.10.16 18:06:58 | 000,932,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\printui.dll
[2013.10.16 18:06:58 | 000,675,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DXPTaskRingtone.dll
[2013.10.16 18:06:58 | 000,568,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrptadm.dll
[2013.10.16 18:06:58 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\onex.dll
[2013.10.16 18:06:58 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prncache.dll
[2013.10.16 18:06:58 | 000,027,008 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdxata.sys
[2013.10.16 18:06:57 | 001,363,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdc.dll
[2013.10.16 18:06:57 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpeffects.dll
[2013.10.16 18:06:57 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scansetting.dll
[2013.10.16 18:06:57 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\net1.exe
[2013.10.16 18:06:57 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rpchttp.dll
[2013.10.16 18:06:56 | 001,120,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdengin2.dll
[2013.10.16 18:06:56 | 000,799,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msftedit.dll
[2013.10.16 18:06:56 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll
[2013.10.16 18:06:56 | 000,475,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlangpui.dll
[2013.10.16 18:06:56 | 000,406,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scesrv.dll
[2013.10.16 18:06:56 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys
[2013.10.16 18:06:55 | 001,689,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcenter.dll
[2013.10.16 18:06:55 | 000,691,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VAN.dll
[2013.10.16 18:06:55 | 000,462,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiadefui.dll
[2013.10.16 18:06:55 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlangpui.dll
[2013.10.16 18:06:55 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVol.exe
[2013.10.16 18:06:55 | 000,239,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dskquoui.dll
[2013.10.16 18:06:55 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QSHVHOST.DLL
[2013.10.16 18:06:55 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\regapi.dll
[2013.10.16 18:06:55 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samcli.dll
[2013.10.16 18:06:55 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll
[2013.10.16 18:06:54 | 001,750,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pnidui.dll
[2013.10.16 18:06:54 | 000,782,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webservices.dll
[2013.10.16 18:06:54 | 000,515,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\timedate.cpl
[2013.10.16 18:06:54 | 000,464,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrptadm.dll
[2013.10.16 18:06:54 | 000,340,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srchadmin.dll
[2013.10.16 18:06:54 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wksprt.exe
[2013.10.16 18:06:54 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fde.dll
[2013.10.16 18:06:54 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2013.10.16 18:06:54 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QUTIL.DLL
[2013.10.16 18:06:54 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupcl.exe
[2013.10.16 18:06:53 | 002,146,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SyncCenter.dll
[2013.10.16 18:06:53 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appwiz.cpl
[2013.10.16 18:06:53 | 000,684,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TabletPC.cpl
[2013.10.16 18:06:53 | 000,560,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2013.10.16 18:06:53 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rastls.dll
[2013.10.16 18:06:53 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netdiagfx.dll
[2013.10.16 18:06:53 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netiohlp.dll
[2013.10.16 18:06:53 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll
[2013.10.16 18:06:52 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hgcpl.dll
[2013.10.16 18:06:52 | 000,300,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msconfig.exe
[2013.10.16 18:06:52 | 000,166,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\basecsp.dll
[2013.10.16 18:06:52 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscobj.dll
[2013.10.16 18:06:52 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsmproxy.dll
[2013.10.16 18:06:52 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mimefilt.dll
[2013.10.16 18:06:51 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2013.10.16 18:06:51 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuxiliaryDisplayCpl.dll
[2013.10.16 18:06:51 | 000,372,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mtxclu.dll
[2013.10.16 18:06:51 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clusapi.dll
[2013.10.16 18:06:51 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdeploy.dll
[2013.10.16 18:06:51 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbGDCoInstaller.dll
[2013.10.16 18:06:50 | 000,633,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\riched20.dll
[2013.10.16 18:06:50 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imapi2.dll
[2013.10.16 18:06:50 | 000,027,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys
[2013.10.16 18:06:49 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gameux.dll
[2013.10.16 18:06:49 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DXPTaskRingtone.dll
[2013.10.16 18:06:49 | 000,486,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercpl.dll
[2013.10.16 18:06:49 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logoncli.dll
[2013.10.16 18:06:49 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscmmc.dll
[2013.10.16 18:06:49 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RpcRtRemote.dll
[2013.10.16 18:06:48 | 001,624,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPEncEn.dll
[2013.10.16 18:06:48 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll
[2013.10.16 18:06:48 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sharemediacpl.dll
[2013.10.16 18:06:48 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\onex.dll
[2013.10.16 18:06:48 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nci.dll
[2013.10.16 18:06:47 | 002,250,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SensorsCpl.dll
[2013.10.16 18:06:47 | 002,193,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themecpl.dll
[2013.10.16 18:06:47 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Narrator.exe
[2013.10.16 18:06:47 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autofmt.exe
[2013.10.16 18:06:47 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eudcedit.exe
[2013.10.16 18:06:47 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Faultrep.dll
[2013.10.16 18:06:47 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netjoin.dll
[2013.10.16 18:06:47 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hbaapi.dll
[2013.10.16 18:06:46 | 000,777,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autochk.exe
[2013.10.16 18:06:46 | 000,763,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autofmt.exe
[2013.10.16 18:06:46 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autoconv.exe
[2013.10.16 18:06:46 | 000,668,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autochk.exe
[2013.10.16 18:06:46 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppcomapi.dll
[2013.10.16 18:06:46 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msutb.dll
[2013.10.16 18:06:46 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netiohlp.dll
[2013.10.16 18:06:46 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll
[2013.10.16 18:06:46 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpnikeapi.dll
[2013.10.16 18:06:46 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\proquota.exe
[2013.10.16 18:06:45 | 001,264,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdclt.exe
[2013.10.16 18:06:45 | 000,793,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autoconv.exe
[2013.10.16 18:06:45 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpd_ci.dll
[2013.10.16 18:06:45 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshipsec.dll
[2013.10.16 18:06:45 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercpl.dll
[2013.10.16 18:06:45 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ipsmsnap.dll
[2013.10.16 18:06:45 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msihnd.dll
[2013.10.16 18:06:45 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msinfo32.exe
[2013.10.16 18:06:45 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srchadmin.dll
[2013.10.16 18:06:45 | 000,222,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanconn.dll
[2013.10.16 18:06:45 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eapphost.dll
[2013.10.16 18:06:45 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\framedyn.dll
[2013.10.16 18:06:45 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tcpipcfg.dll
[2013.10.16 18:06:45 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe
[2013.10.16 18:06:45 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdsrv.dll
[2013.10.16 18:06:45 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prntvpt.dll
[2013.10.16 18:06:45 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shsetup.dll
[2013.10.16 18:06:45 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\audiodg.exe
[2013.10.16 18:06:45 | 000,116,224 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysNative\fms.dll
[2013.10.16 18:06:45 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\regapi.dll
[2013.10.16 18:06:45 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mimefilt.dll
[2013.10.16 18:06:44 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmiEngine.dll
[2013.10.16 18:06:44 | 000,905,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmsys.cpl
[2013.10.16 18:06:44 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontext.dll
[2013.10.16 18:06:44 | 000,665,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuxiliaryDisplayCpl.dll
[2013.10.16 18:06:44 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\timedate.cpl
[2013.10.16 18:06:44 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanui.dll
[2013.10.16 18:06:44 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QAGENT.DLL
[2013.10.16 18:06:44 | 000,171,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\scsiport.sys
[2013.10.16 18:06:44 | 000,155,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscorier.dll
[2013.10.16 18:06:44 | 000,154,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscorier.dll
[2013.10.16 18:06:44 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpsign.exe
[2013.10.16 18:06:43 | 001,227,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdc.dll
[2013.10.16 18:06:43 | 001,066,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Display.dll
[2013.10.16 18:06:43 | 000,957,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mblctr.exe
[2013.10.16 18:06:43 | 000,749,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\batmeter.dll
[2013.10.16 18:06:43 | 000,372,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastls.dll
[2013.10.16 18:06:43 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\untfs.dll
[2013.10.16 18:06:43 | 000,307,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scesrv.dll
[2013.10.16 18:06:43 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpsrcwp.dll
[2013.10.16 18:06:43 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mprddm.dll
[2013.10.16 18:06:43 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netid.dll
[2013.10.16 18:06:43 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nci.dll
[2013.10.16 18:06:42 | 002,217,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bootres.dll
[2013.10.16 18:06:42 | 001,326,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanpref.dll
[2013.10.16 18:06:42 | 001,202,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DiagCpl.dll
[2013.10.16 18:06:42 | 001,003,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMNetMgr.dll
[2013.10.16 18:06:42 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Vault.dll
[2013.10.16 18:06:42 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usercpl.dll
[2013.10.16 18:06:42 | 000,098,816 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\Robocopy.exe
[2013.10.16 18:06:42 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll
[2013.10.16 18:06:41 | 001,400,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DxpTaskSync.dll
[2013.10.16 18:06:41 | 000,812,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpccpl.dll
[2013.10.16 18:06:41 | 000,433,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MCEWMDRMNDBootstrap.dll
[2013.10.16 18:06:41 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ksproxy.ax
[2013.10.16 18:06:41 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskmgr.exe
[2013.10.16 18:06:41 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVolSSO.dll
[2013.10.16 18:06:41 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasppp.dll
[2013.10.16 18:06:41 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSTPager.ax
[2013.10.16 18:06:41 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3cfg.dll
[2013.10.16 18:06:41 | 000,052,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\winhv.sys
[2013.10.16 18:06:40 | 001,040,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Display.dll
[2013.10.16 18:06:40 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mtxclu.dll
[2013.10.16 18:06:40 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxdiagn.dll
[2013.10.16 18:06:40 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hbaapi.dll
[2013.10.16 18:06:39 | 000,416,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prnfldr.dll
[2013.10.16 18:06:39 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\termmgr.dll
[2013.10.16 18:06:39 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\puiobj.dll
[2013.10.16 18:06:39 | 000,300,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pdh.dll
[2013.10.16 18:06:39 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eudcedit.exe
[2013.10.16 18:06:39 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSAC3ENC.DLL
[2013.10.16 18:06:39 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskmgr.exe
[2013.10.16 18:06:39 | 000,155,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ataport.sys
[2013.10.16 18:06:39 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsRasterService.dll
[2013.10.16 18:06:39 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDShServiceObj.dll
[2013.10.16 18:06:39 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\proquota.exe
[2013.10.16 18:06:39 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\userinit.exe
[2013.10.16 18:06:38 | 003,745,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\accessibilitycpl.dll
[2013.10.16 18:06:38 | 000,856,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FirewallControlPanel.dll
[2013.10.16 18:06:38 | 000,649,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appwiz.cpl
[2013.10.16 18:06:38 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiadefui.dll
[2013.10.16 18:06:38 | 000,403,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\untfs.dll
[2013.10.16 18:06:38 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppcomapi.dll
[2013.10.16 18:06:38 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasppp.dll
[2013.10.16 18:06:38 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll
[2013.10.16 18:06:38 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logoncli.dll
[2013.10.16 18:06:38 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shsetup.dll
[2013.10.16 18:06:38 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\userinit.exe
[2013.10.16 18:06:37 | 002,202,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SensorsCpl.dll
[2013.10.16 18:06:37 | 002,157,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themecpl.dll
[2013.10.16 18:06:36 | 000,366,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\zipfldr.dll
[2013.10.16 18:06:36 | 000,349,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slui.exe
[2013.10.16 18:06:36 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll
[2013.10.16 18:06:36 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\defaultlocationcpl.dll
[2013.10.16 18:06:36 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FWPUCLNT.DLL
[2013.10.16 18:06:36 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscmmc.dll
[2013.10.16 18:06:35 | 000,828,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontext.dll
[2013.10.16 18:06:35 | 000,769,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sud.dll
[2013.10.16 18:06:35 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceCenter.dll
[2013.10.16 18:06:35 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\localsec.dll
[2013.10.16 18:06:35 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PhotoScreensaver.scr
[2013.10.16 18:06:35 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hgcpl.dll
[2013.10.16 18:06:35 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mprddm.dll
[2013.10.16 18:06:35 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scecli.dll
[2013.10.16 18:06:35 | 000,080,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscories.dll
[2013.10.16 18:06:34 | 002,146,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\networkmap.dll
[2013.10.16 18:06:34 | 001,065,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptui.dll
[2013.10.16 18:06:34 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskbarcpl.dll
[2013.10.16 18:06:34 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OnLineIDCpl.dll
[2013.10.16 18:06:34 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVolSSO.dll
[2013.10.16 18:06:33 | 001,644,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcenter.dll
[2013.10.16 18:06:33 | 000,898,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OobeFldr.dll
[2013.10.16 18:06:33 | 000,780,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionCenter.dll
[2013.10.16 18:06:33 | 000,740,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\batmeter.dll
[2013.10.16 18:06:33 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VAN.dll
[2013.10.16 18:06:33 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PerfCenterCPL.dll
[2013.10.16 18:06:33 | 000,600,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\usercpl.dll
[2013.10.16 18:06:33 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2013.10.16 18:06:33 | 000,472,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\azroleui.dll
[2013.10.16 18:06:33 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanui.dll
[2013.10.16 18:06:33 | 000,373,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\intl.cpl
[2013.10.16 18:06:33 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdedit.exe
[2013.10.16 18:06:33 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVol.exe
[2013.10.16 18:06:33 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twext.dll
[2013.10.16 18:06:33 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxlib.dll
[2013.10.16 18:06:33 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recovery.dll
[2013.10.16 18:06:33 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prntvpt.dll
[2013.10.16 18:06:33 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\w32tm.exe
[2013.10.16 18:06:32 | 003,727,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\accessibilitycpl.dll
[2013.10.16 18:06:32 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdcpl.dll
[2013.10.16 18:06:32 | 000,721,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bthprops.cpl
[2013.10.16 18:06:32 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsuiext.dll
[2013.10.16 18:06:32 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwizeng.dll
[2013.10.16 18:06:32 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MediaMetadataHandler.dll
[2013.10.16 18:06:32 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\azroleui.dll
[2013.10.16 18:06:32 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\efscore.dll
[2013.10.16 18:06:32 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VBICodec.ax
[2013.10.16 18:06:32 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cca.dll
[2013.10.16 18:06:32 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\isoburn.exe
[2013.10.16 18:06:32 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tzutil.exe
[2013.10.16 18:06:32 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sisbkup.dll
[2013.10.16 18:06:31 | 001,003,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptui.dll
[2013.10.16 18:06:31 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\main.cpl
[2013.10.16 18:06:31 | 000,460,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certcli.dll
[2013.10.16 18:06:31 | 000,451,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shwebsvc.dll
[2013.10.16 18:06:31 | 000,419,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\systemcpl.dll
[2013.10.16 18:06:31 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recdisc.exe
[2013.10.16 18:06:31 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSAC3ENC.DLL
[2013.10.16 18:06:31 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\syncui.dll
[2013.10.16 18:06:31 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netplwiz.dll
[2013.10.16 18:06:31 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adsldp.dll
[2013.10.16 18:06:31 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fvecpl.dll
[2013.10.16 18:06:31 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netjoin.dll
[2013.10.16 18:06:31 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autoplay.dll
[2013.10.16 18:06:31 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fdeploy.dll
[2013.10.16 18:06:31 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\httpapi.dll
[2013.10.16 18:06:30 | 002,130,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\networkmap.dll
[2013.10.16 18:06:30 | 000,549,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionCenterCPL.dll
[2013.10.16 18:06:30 | 000,414,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanmsm.dll
[2013.10.16 18:06:30 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Faultrep.dll
[2013.10.16 18:06:30 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wusa.exe
[2013.10.16 18:06:30 | 000,312,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MCEWMDRMNDBootstrap.dll
[2013.10.16 18:06:30 | 000,207,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysclass.dll
[2013.10.16 18:06:30 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuxiliaryDisplayServices.dll
[2013.10.16 18:06:30 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncryptui.dll
[2013.10.16 18:06:30 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ksxbar.ax
[2013.10.16 18:06:29 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sud.dll
[2013.10.16 18:06:29 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ActionCenter.dll
[2013.10.16 18:06:29 | 000,641,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscp.dll
[2013.10.16 18:06:29 | 000,474,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysmon.ocx
[2013.10.16 18:06:29 | 000,445,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizeng.dll
[2013.10.16 18:06:29 | 000,421,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\termmgr.dll
[2013.10.16 18:06:29 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prnfldr.dll
[2013.10.16 18:06:29 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sysmon.ocx
[2013.10.16 18:06:29 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll
[2013.10.16 18:06:29 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\photowiz.dll
[2013.10.16 18:06:29 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MediaMetadataHandler.dll
[2013.10.16 18:06:29 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFPlay.dll
[2013.10.16 18:06:29 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OnLineIDCpl.dll
[2013.10.16 18:06:29 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsutil.dll
[2013.10.16 18:06:28 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bthprops.cpl
[2013.10.16 18:06:28 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\intl.cpl
[2013.10.16 18:06:28 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReAgent.dll
[2013.10.16 18:06:28 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2013.10.16 18:06:28 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sethc.exe
[2013.10.16 18:06:28 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iprtrmgr.dll
[2013.10.16 18:06:28 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\defaultlocationcpl.dll
[2013.10.16 18:06:28 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2013.10.16 18:06:28 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntlanman.dll
[2013.10.16 18:06:28 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3cfg.dll
[2013.10.16 18:06:28 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ftp.exe
[2013.10.16 18:06:27 | 000,537,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ActionCenterCPL.dll
[2013.10.16 18:06:27 | 000,446,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlcese30.dll
[2013.10.16 18:06:27 | 000,428,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shwebsvc.dll
[2013.10.16 18:06:27 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ssText3d.scr
[2013.10.16 18:06:27 | 000,321,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unimdm.tsp
[2013.10.16 18:06:27 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iTVData.dll
[2013.10.16 18:06:27 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iprtrmgr.dll
[2013.10.16 18:06:27 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\efscore.dll
[2013.10.16 18:06:27 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ifsutil.dll
[2013.10.16 18:06:27 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UserAccountControlSettings.dll
[2013.10.16 18:06:27 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpd3d.dll
[2013.10.16 18:06:27 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanprotdim.dll
[2013.10.16 18:06:27 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sisbkup.dll
[2013.10.16 18:06:26 | 000,781,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmsdk.dll
[2013.10.16 18:06:26 | 000,495,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmmgrtn.dll
[2013.10.16 18:06:26 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DeviceCenter.dll
[2013.10.16 18:06:26 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\syncui.dll
[2013.10.16 18:06:26 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autoplay.dll
[2013.10.16 18:06:26 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srvcli.dll
[2013.10.16 18:06:26 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll
[2013.10.16 18:06:25 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OobeFldr.dll
[2013.10.16 18:06:25 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll
[2013.10.16 18:06:25 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\systemcpl.dll
[2013.10.16 18:06:25 | 000,344,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntprint.dll
[2013.10.16 18:06:25 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntprint.dll
[2013.10.16 18:06:25 | 000,255,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wavemsp.dll
[2013.10.16 18:06:25 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevicePairingFolder.dll
[2013.10.16 18:06:25 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dskquoui.dll
[2013.10.16 18:06:25 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercfg.cpl
[2013.10.16 18:06:25 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2013.10.16 18:06:25 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NAPHLPR.DLL
[2013.10.16 18:06:25 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nslookup.exe
[2013.10.16 18:06:25 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSTPager.ax
[2013.10.16 18:06:25 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acppage.dll
[2013.10.16 18:06:24 | 000,656,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshwfp.dll
[2013.10.16 18:06:24 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srrstr.dll
[2013.10.16 18:06:24 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sethc.exe
[2013.10.16 18:06:24 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdboot.exe
[2013.10.16 18:06:23 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\blackbox.dll
[2013.10.16 18:06:23 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ksproxy.ax
[2013.10.16 18:06:23 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NAPHLPR.DLL
[2013.10.16 18:06:23 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppnp.dll
[2013.10.16 18:06:22 | 001,672,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\networkexplorer.dll
[2013.10.16 18:06:22 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpx.dll
[2013.10.16 18:06:22 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\activeds.dll
[2013.10.16 18:06:22 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpsrcwp.dll
[2013.10.16 18:06:22 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netplwiz.dll
[2013.10.16 18:06:22 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\remotepg.dll
[2013.10.16 18:06:22 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\migisol.dll
[2013.10.16 18:06:22 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabinet.dll
[2013.10.16 18:06:22 | 000,093,696 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysWow64\fms.dll
[2013.10.16 18:06:21 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfrgui.exe
[2013.10.16 18:06:21 | 000,592,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msftedit.dll
[2013.10.16 18:06:21 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanmsm.dll
[2013.10.16 18:06:21 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpdxm.dll
[2013.10.16 18:06:21 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshipsec.dll
[2013.10.16 18:06:21 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgent.dll
[2013.10.16 18:06:21 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wavemsp.dll
[2013.10.16 18:06:21 | 000,217,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSCard.dll
[2013.10.16 18:06:21 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationSettings.exe
[2013.10.16 18:06:21 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
[2013.10.16 18:06:21 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kstvtune.ax
[2013.10.16 18:06:21 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\isoburn.exe
[2013.10.16 18:06:21 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wkscli.dll
[2013.10.16 18:06:21 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ftp.exe
[2013.10.16 18:06:21 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\httpapi.dll
[2013.10.16 18:06:20 | 000,840,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\blackbox.dll
[2013.10.16 18:06:20 | 000,685,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsuiext.dll
[2013.10.16 18:06:20 | 000,636,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmdev.dll
[2013.10.16 18:06:20 | 000,594,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wvc.dll
[2013.10.16 18:06:20 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfrgui.exe
[2013.10.16 18:06:20 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3ui.dll
[2013.10.16 18:06:20 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsqmcons.exe
[2013.10.16 18:06:20 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ocsetup.exe
[2013.10.16 18:06:20 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\net1.exe
[2013.10.16 18:06:20 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsnmp32.dll
[2013.10.16 18:06:20 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tzutil.exe
[2013.10.16 18:06:20 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WerFaultSecure.exe
[2013.10.16 18:06:19 | 000,899,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Bubbles.scr
[2013.10.16 18:06:19 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wvc.dll
[2013.10.16 18:06:19 | 000,438,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AdmTmpl.dll
[2013.10.16 18:06:19 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wimgapi.dll
[2013.10.16 18:06:19 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unimdm.tsp
[2013.10.16 18:06:19 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PkgMgr.exe
[2013.10.16 18:06:19 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstask.dll
[2013.10.16 18:06:19 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll
[2013.10.16 18:06:19 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twext.dll
[2013.10.16 18:06:19 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mapistub.dll
[2013.10.16 18:06:19 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mapi32.dll
[2013.10.16 18:06:19 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
[2013.10.16 18:06:18 | 001,911,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OpcServices.dll
[2013.10.16 18:06:18 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\main.cpl
[2013.10.16 18:06:18 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qasf.dll
[2013.10.16 18:06:18 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qcap.dll
[2013.10.16 18:06:18 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFPlatform.dll
[2013.10.16 18:06:18 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupugc.exe
[2013.10.16 18:06:18 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unimdmat.dll
[2013.10.16 18:06:18 | 000,051,200 | ---- | C] (Twain Working Group) -- C:\Windows\twain_32.dll
[2013.10.16 18:06:18 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsium.dll
[2013.10.16 18:06:17 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskraid.exe
[2013.10.16 18:06:17 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ssText3d.scr
[2013.10.16 18:06:17 | 000,242,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mystify.scr
[2013.10.16 18:06:17 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Ribbons.scr
[2013.10.16 18:06:17 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ifsutil.dll
[2013.10.16 18:06:17 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvfw32.dll
[2013.10.16 18:06:17 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\uxlib.dll
[2013.10.16 18:06:17 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll
[2013.10.16 18:06:17 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll
[2013.10.16 18:06:16 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmsdk.dll
[2013.10.16 18:06:16 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscp.dll
[2013.10.16 18:06:16 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe
[2013.10.16 18:06:16 | 000,230,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clusapi.dll
[2013.10.16 18:06:16 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpencom.dll
[2013.10.16 18:06:16 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DevicePairingFolder.dll
[2013.10.16 18:06:16 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perfmon.exe
[2013.10.16 18:06:16 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpshell.dll
[2013.10.16 18:06:16 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nslookup.exe
[2013.10.16 18:06:16 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AzSqlExt.dll
[2013.10.16 18:06:16 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\muifontsetup.dll
[2013.10.16 18:06:15 | 001,087,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbghelp.dll
[2013.10.16 18:06:15 | 000,623,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSAPI.dll
[2013.10.16 18:06:15 | 000,337,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\raschap.dll
[2013.10.16 18:06:15 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wimserv.exe
[2013.10.16 18:06:15 | 000,318,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\raschap.dll
[2013.10.16 18:06:15 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskraid.exe
[2013.10.16 18:06:15 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qasf.dll
[2013.10.16 18:06:15 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionQueue.dll
[2013.10.16 18:06:15 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpencom.dll
[2013.10.16 18:06:15 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfmon.exe
[2013.10.16 18:06:15 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\remotepg.dll
[2013.10.16 18:06:15 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tlscsp.dll
[2013.10.16 18:06:15 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\bfsvc.exe
[2013.10.16 18:06:15 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\umb.dll
[2013.10.16 18:06:15 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\runonce.exe
[2013.10.16 18:06:15 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NAPCRYPT.DLL
[2013.10.16 18:06:15 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\acppage.dll
[2013.10.16 18:06:15 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netutils.dll
[2013.10.16 18:06:14 | 001,232,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMADMOD.DLL
[2013.10.16 18:06:14 | 000,402,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmmgrtn.dll
[2013.10.16 18:06:14 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdwcn.dll
[2013.10.16 18:06:14 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\input.dll
[2013.10.16 18:06:14 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ocsetapi.dll
[2013.10.16 18:06:14 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MdSched.exe
[2013.10.16 18:06:14 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiavideo.dll
[2013.10.16 18:06:14 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QUTIL.DLL
[2013.10.16 18:06:14 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UserAccountControlSettings.dll
[2013.10.16 18:06:14 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NAPCRYPT.DLL
[2013.10.16 18:06:14 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\syssetup.dll
[2013.10.16 18:06:13 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\onexui.dll
[2013.10.16 18:06:13 | 000,666,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVSDECD.DLL
[2013.10.16 18:06:13 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nltest.exe
[2013.10.16 18:06:13 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpdxm.dll
[2013.10.16 18:06:13 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstask.dll
[2013.10.16 18:06:13 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iTVData.dll
[2013.10.16 18:06:13 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxdiagn.dll
[2013.10.16 18:06:13 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wpdwcn.dll
[2013.10.16 18:06:13 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsbas.dll
[2013.10.16 18:06:13 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vdsbas.dll
[2013.10.16 18:06:13 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rmcast.sys
[2013.10.16 18:06:13 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Kswdmcap.ax
[2013.10.16 18:06:13 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\runonce.exe
[2013.10.16 18:06:13 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PrintIsolationProxy.dll
[2013.10.16 18:06:13 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vpnikeapi.dll
[2013.10.16 18:06:12 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eapp3hst.dll
[2013.10.16 18:06:12 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsadmin.exe
[2013.10.16 18:06:12 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFPlay.dll
[2013.10.16 18:06:12 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shacct.dll
[2013.10.16 18:06:12 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QSVRMGMT.DLL
[2013.10.16 18:06:12 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logagent.exe
[2013.10.16 18:06:12 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tabcal.exe
[2013.10.16 18:06:12 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vss_ps.dll
[2013.10.16 18:06:12 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscapi.dll
[2013.10.16 18:06:11 | 000,978,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMSPDMOD.DLL
[2013.10.16 18:06:11 | 000,527,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmnet.dll
[2013.10.16 18:06:11 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmdev.dll
[2013.10.16 18:06:11 | 000,431,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDSp.dll
[2013.10.16 18:06:11 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msnetobj.dll
[2013.10.16 18:06:11 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqlcese30.dll
[2013.10.16 18:06:11 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssphtb.dll
[2013.10.16 18:06:11 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsadmin.exe
[2013.10.16 18:06:11 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qcap.dll
[2013.10.16 18:06:11 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CscMig.dll
[2013.10.16 18:06:11 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll
[2013.10.16 18:06:11 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shacct.dll
[2013.10.16 18:06:11 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpshell.dll
[2013.10.16 18:06:11 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logman.exe
[2013.10.16 18:06:11 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2013.10.16 18:06:11 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unimdmat.dll
[2013.10.16 18:06:11 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsium.dll
[2013.10.16 18:06:11 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\lsmproxy.dll
[2013.10.16 18:06:10 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OpcServices.dll
[2013.10.16 18:06:10 | 000,878,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Bubbles.scr
[2013.10.16 18:06:10 | 000,435,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceStatus.dll
[2013.10.16 18:06:10 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdv.dll
[2013.10.16 18:06:10 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdh.dll
[2013.10.16 18:06:10 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceSyncProvider.dll
[2013.10.16 18:06:10 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceSyncProvider.dll
[2013.10.16 18:06:10 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mprapi.dll
[2013.10.16 18:06:10 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll
[2013.10.16 18:06:10 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\kstvtune.ax
[2013.10.16 18:06:10 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logman.exe
[2013.10.16 18:06:10 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spbcd.dll
[2013.10.16 18:06:10 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncryptui.dll
[2013.10.16 18:06:10 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpd3d.dll
[2013.10.16 18:06:10 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmictimeprovider.dll
[2013.10.16 18:06:09 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceStatus.dll
[2013.10.16 18:06:09 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WPDSp.dll
[2013.10.16 18:06:09 | 000,313,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3ui.dll
[2013.10.16 18:06:09 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mystify.scr
[2013.10.16 18:06:09 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Ribbons.scr
[2013.10.16 18:06:09 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercfg.cpl
[2013.10.16 18:06:09 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\desk.cpl
[2013.10.16 18:06:09 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fphc.dll
[2013.10.16 18:06:09 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QSVRMGMT.DLL
[2013.10.16 18:06:09 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\olethk32.dll
[2013.10.16 18:06:09 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\takeown.exe
[2013.10.16 18:06:09 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PnPUnattend.exe
[2013.10.16 18:06:08 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMADMOD.DLL
[2013.10.16 18:06:08 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3msm.dll
[2013.10.16 18:06:08 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fphc.dll
[2013.10.16 18:06:08 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll
[2013.10.16 18:06:08 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\amstream.dll
[2013.10.16 18:06:08 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mapistub.dll
[2013.10.16 18:06:08 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\utildll.dll
[2013.10.16 18:06:07 | 001,148,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IMJP10.IME
[2013.10.16 18:06:07 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVSDECD.DLL
[2013.10.16 18:06:07 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmnet.dll
[2013.10.16 18:06:07 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdv.dll
[2013.10.16 18:06:07 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VBICodec.ax
[2013.10.16 18:06:07 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EhStorAPI.dll
[2013.10.16 18:06:07 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiavideo.dll
[2013.10.16 18:06:07 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Kswdmcap.ax
[2013.10.16 18:06:07 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmstp.exe
[2013.10.16 18:06:07 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QCLIPROV.DLL
[2013.10.16 18:06:07 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertPolEng.dll
[2013.10.16 18:06:07 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\djoin.exe
[2013.10.16 18:06:07 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\takeown.exe
[2013.10.16 18:06:07 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shimgvw.dll
[2013.10.16 18:06:07 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\HotStartUserAgent.dll
[2013.10.16 18:06:07 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nrpsrv.dll
[2013.10.16 18:06:06 | 000,681,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFx.dll
[2013.10.16 18:06:06 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msnetobj.dll
[2013.10.16 18:06:06 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFHost.exe
[2013.10.16 18:06:06 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppinst.dll
[2013.10.16 18:06:06 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QCLIPROV.DLL
[2013.10.16 18:06:06 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cca.dll
[2013.10.16 18:06:06 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WavDest.dll
[2013.10.16 18:06:05 | 000,739,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMSPDMOD.DLL
[2013.10.16 18:06:05 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msorcl32.dll
[2013.10.16 18:06:05 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskpart.exe
[2013.10.16 18:06:05 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsicli.exe
[2013.10.16 18:06:05 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mydocs.dll
[2013.10.16 18:06:05 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupcln.dll
[2013.10.16 18:06:05 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmstp.exe
[2013.10.16 18:06:05 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdProxy.dll
[2013.10.16 18:06:05 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MuiUnattend.exe
[2013.10.16 18:06:05 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\g711codc.ax
[2013.10.16 18:06:05 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vfwwdm32.dll
[2013.10.16 18:06:05 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsnmp32.dll
[2013.10.16 18:06:05 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MultiDigiMon.exe
[2013.10.16 18:06:05 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdhui.dll
[2013.10.16 18:06:05 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\relog.exe
[2013.10.16 18:06:05 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AzSqlExt.dll
[2013.10.16 18:06:05 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sscore.dll
[2013.10.16 18:06:04 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe
[2013.10.16 18:06:04 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2013.10.16 18:06:04 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\itircl.dll
[2013.10.16 18:06:04 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsicli.exe
[2013.10.16 18:06:04 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mydocs.dll
[2013.10.16 18:06:04 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskpart.exe
[2013.10.16 18:06:04 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BdeHdCfg.exe
[2013.10.16 18:06:04 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\desk.cpl
[2013.10.16 18:06:04 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3msm.dll
[2013.10.16 18:06:04 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mobsync.exe
[2013.10.16 18:06:04 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\amstream.dll
[2013.10.16 18:06:04 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastapi.dll
[2013.10.16 18:06:04 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spbcd.dll
[2013.10.16 18:06:04 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wkscli.dll
[2013.10.16 18:06:04 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbisurf.ax
[2013.10.16 18:06:04 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\relog.exe
[2013.10.16 18:06:04 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdmo.dll
[2013.10.16 18:06:04 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netiougc.exe
[2013.10.16 18:06:04 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netbtugc.exe
[2013.10.16 18:06:04 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BWUnpairElevated.dll
[2013.10.16 18:06:03 | 001,027,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IMJP10.IME
[2013.10.16 18:06:03 | 000,434,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSTIFF.dll
[2013.10.16 18:06:03 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\itircl.dll
[2013.10.16 18:06:03 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpps.dll
[2013.10.16 18:06:03 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eappgnui.dll
[2013.10.16 18:06:03 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll
[2013.10.16 18:06:03 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll
[2013.10.16 18:06:03 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\resutils.dll
[2013.10.16 18:06:03 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\findstr.exe
[2013.10.16 18:06:03 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertPolEng.dll
[2013.10.16 18:06:03 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ksxbar.ax
[2013.10.16 18:06:03 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mciqtz32.dll
[2013.10.16 18:06:03 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\choice.exe
[2013.10.16 18:06:03 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
[2013.10.16 18:06:03 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prevhost.exe
[2013.10.16 18:06:03 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WerFaultSecure.exe
[2013.10.16 18:06:03 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qprocess.exe
[2013.10.16 18:06:03 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\syssetup.dll
[2013.10.16 18:06:02 | 001,080,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\onexui.dll
[2013.10.16 18:06:02 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe
[2013.10.16 18:06:02 | 000,278,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2013.10.16 18:06:02 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppc.dll
[2013.10.16 18:06:02 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mobsync.exe
[2013.10.16 18:06:02 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eappgnui.dll
[2013.10.16 18:06:02 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tlscsp.dll
[2013.10.16 18:06:02 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\findstr.exe
[2013.10.16 18:06:02 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\luainstall.dll
[2013.10.16 18:06:02 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciqtz32.dll
[2013.10.16 18:06:02 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schedcli.dll
[2013.10.16 18:06:02 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chglogon.exe
[2013.10.16 18:06:02 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgentc.exe
[2013.10.16 18:06:01 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RDPENCDD.dll
[2013.10.16 18:06:01 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppc.dll
[2013.10.16 18:06:01 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll
[2013.10.16 18:06:01 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\manage-bde.exe
[2013.10.16 18:06:01 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetmib1.dll
[2013.10.16 18:06:01 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\repair-bde.exe
[2013.10.16 18:06:01 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFCoinstaller.dll
[2013.10.16 18:06:01 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\luainstall.dll
[2013.10.16 18:06:01 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdiasqmmodule.dll
[2013.10.16 18:06:01 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shimgvw.dll
[2013.10.16 18:06:01 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unlodctr.exe
[2013.10.16 18:06:01 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vbisurf.ax
[2013.10.16 18:06:01 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\profprov.dll
[2013.10.16 18:06:01 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prevhost.exe
[2013.10.16 18:06:01 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdmo.dll
[2013.10.16 18:06:01 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chgport.exe
[2013.10.16 18:06:01 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qappsrv.exe
[2013.10.16 18:06:01 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spopk.dll
[2013.10.16 18:06:01 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spopk.dll
[2013.10.16 18:06:01 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\muifontsetup.dll
[2013.10.16 18:06:00 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmicres.dll
[2013.10.16 18:06:00 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbcconf.dll
[2013.10.16 18:06:00 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetmib1.dll
[2013.10.16 18:06:00 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\g711codc.ax
[2013.10.16 18:06:00 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmstorfltres.dll
[2013.10.16 18:06:00 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tskill.exe
[2013.10.16 18:06:00 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tscon.exe
[2013.10.16 18:06:00 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsdiscon.exe
[2013.10.16 18:06:00 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rwinsta.exe
[2013.10.16 18:06:00 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdprefdrvapi.dll
[2013.10.16 18:06:00 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logoff.exe
[2013.10.16 18:06:00 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chgusr.exe
[2013.10.16 18:06:00 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fixmapi.exe
[2013.10.16 18:05:59 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbonRes.dll
[2013.10.16 18:05:59 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbonRes.dll
[2013.10.16 18:05:59 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmbusres.dll
[2013.10.16 18:05:59 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSMON.dll
[2013.10.16 18:05:59 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcconf.dll
[2013.10.16 18:05:59 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
[2013.10.16 18:05:59 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tdi.sys
[2013.10.16 18:05:59 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elsTrans.dll
[2013.10.16 18:05:59 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TRAPI.dll
[2013.10.16 18:05:59 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shadow.exe
[2013.10.16 18:05:58 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsauth.dll
[2013.10.16 18:05:58 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LogonUI.exe
[2013.10.16 18:05:58 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfts.dll
[2013.10.16 18:05:58 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\reset.exe
[2013.10.16 18:05:58 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\change.exe
[2013.10.16 18:05:57 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\napdsnap.dll
[2013.10.16 18:05:57 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdprefdrvapi.dll
[2013.10.16 18:05:57 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elsTrans.dll
[2013.10.16 18:05:57 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSUNATD.exe
[2013.10.16 18:05:57 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\query.exe
[2013.10.16 18:05:56 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbrpm.sys
[2013.10.16 18:05:56 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscdll.dll
[2013.10.16 18:05:56 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsperf.dll
[2013.10.16 18:05:56 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TRAPI.dll
[2013.10.16 18:05:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsperf.dll
[2013.10.16 18:05:56 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schedcli.dll
[2013.10.16 18:05:55 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imkr80.ime
[2013.10.16 18:05:55 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\napdsnap.dll
[2013.10.16 18:05:55 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsauth.dll
[2013.10.16 18:05:54 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsdchngr.dll
[2013.10.16 18:05:53 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imkr80.ime
[2013.10.16 18:05:53 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shgina.dll
[2013.10.16 18:05:53 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsdchngr.dll
[2013.10.16 18:05:53 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shgina.dll
[2013.10.16 18:05:53 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll
[2013.10.16 18:05:53 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\riched32.dll
[2013.10.16 18:05:52 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBCAMD2.sys
[2013.10.16 18:05:51 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshirda.dll
[2013.10.16 18:05:49 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmbuspipe.dll
[2013.10.16 18:05:49 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshirda.dll
[2013.10.16 18:05:49 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\riched32.dll
[2013.10.16 18:05:49 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcfgex.dll
[2013.10.16 18:05:48 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VmbusCoinstaller.dll
[2013.10.16 18:05:48 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IcCoinstall.dll
[2013.10.16 18:05:48 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\C_ISCII.DLL
[2013.10.16 18:05:48 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwmp.dll
[2013.10.16 18:05:47 | 000,129,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VmdCoinstall.dll
[2013.10.16 18:05:47 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shunimpl.dll
[2013.10.16 18:05:47 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\C_ISCII.DLL
[2013.10.16 18:05:47 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwmp.dll
[2013.10.16 18:05:47 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.ocx
[2013.10.16 18:05:47 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxmasf.dll
[2013.10.16 18:05:47 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdxm.ocx
[2013.10.16 18:05:47 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxmasf.dll
[2013.10.16 18:05:47 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-ums-l1-1-0.dll
[2013.10.16 18:05:46 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTUQ.DLL
[2013.10.16 18:05:46 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTUF.DLL
[2013.10.16 18:05:46 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDSG.DLL
[2013.10.16 18:05:46 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kbdlk41a.dll
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTUQ.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTUF.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDSG.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDSF.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDPO.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDNEPR.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\kbdlk41a.dll
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINTAM.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINBEN.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDGR1.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDGKL.DLL
[2013.10.16 18:05:45 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2013.10.16 18:05:45 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2013.10.16 18:05:45 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDGKL.DLL
[2013.10.16 18:05:45 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDCZ1.DLL
[2013.10.16 18:05:45 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDGR1.DLL
[2013.10.16 18:05:45 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDCZ1.DLL
[2013.10.16 18:05:45 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDUS.DLL
[2013.10.16 18:05:45 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDUGHR1.DLL
[2013.10.16 18:05:45 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTAJIK.DLL
[2013.10.16 18:05:45 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDMON.DLL
[2013.10.16 18:05:45 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINHIN.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDUS.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDUGHR1.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTURME.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTAJIK.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDMON.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINTEL.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDGEO.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDGEO.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBLR.DLL
[2013.10.16 18:05:44 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nlsbres.dll
[2013.10.16 18:05:44 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nlsbres.dll
[2013.10.16 18:05:44 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BlbEvents.dll
[2013.10.16 18:05:44 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pifmgr.dll
[2013.10.16 18:05:44 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pifmgr.dll
[2013.10.16 18:05:44 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwizres.dll
[2013.10.16 18:05:44 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizres.dll
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTURME.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDSF.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDPO.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDNEPR.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDMAORI.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDLT1.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINTEL.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINTAM.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINORI.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINORI.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINMAR.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINMAR.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINKAN.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINKAN.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINHIN.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINBEN.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBULG.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBLR.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBASH.DLL
[2013.10.16 18:05:44 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDMAORI.DLL
[2013.10.16 18:05:44 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDLT1.DLL
[2013.10.16 18:05:44 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBULG.DLL
[2013.10.16 18:05:44 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBASH.DLL
[2013.10.16 18:05:32 | 000,399,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpx.dll
[2013.10.16 18:05:32 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdscore.dll
[2013.10.16 18:05:28 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqmapi.dll
[2013.10.16 18:04:41 | 000,529,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wbemcomn.dll
[2013.10.16 18:04:39 | 000,244,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqmapi.dll
[2013.10.16 17:54:55 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Diagnostics
[2013.10.16 17:34:02 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\ParetoLogic
[2013.10.16 17:34:02 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\DriverCure
[2013.10.16 17:33:56 | 000,000,000 | ---D | C] -- C:\ProgramData\ParetoLogic
[2013.10.16 17:32:40 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\ElevatedDiagnostics
[2013.10.16 17:20:28 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2013.10.16 17:20:28 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2013.10.16 17:20:16 | 002,795,224 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll
[2013.10.16 17:20:16 | 002,103,040 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib64.dll
[2013.10.16 17:20:16 | 001,662,024 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl
[2013.10.16 17:20:16 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2013.10.16 17:20:16 | 000,331,880 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll
[2013.10.16 17:20:16 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2013.10.16 17:20:16 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2013.10.16 17:20:16 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2013.10.16 17:20:15 | 002,585,304 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll
[2013.10.16 17:20:15 | 001,994,008 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\MBAPO264.dll
[2013.10.16 17:20:15 | 001,725,720 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\MBAPO232.dll
[2013.10.16 17:20:15 | 001,284,680 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll
[2013.10.16 17:20:15 | 001,004,248 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll
[2013.10.16 17:20:15 | 000,617,176 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtDataProc64.dll
[2013.10.16 17:20:15 | 000,397,080 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\MBWrp64.dll
[2013.10.16 17:20:15 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2013.10.16 17:20:15 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2013.10.16 17:20:15 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2013.10.16 17:20:15 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2013.10.16 17:20:15 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll
[2013.10.16 17:20:15 | 000,147,672 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInstII64.dll
[2013.10.16 17:20:15 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2013.10.16 17:20:15 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2013.10.16 17:20:15 | 000,032,344 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\MBfilt64.sys
[2013.10.16 17:20:15 | 000,014,952 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCoLDR64.dll
[2013.10.16 17:20:14 | 002,032,896 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ64.dll
[2013.10.16 17:20:14 | 000,920,832 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPOShell64.dll
[2013.10.16 17:20:14 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2013.10.16 17:20:13 | 002,743,328 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2013.10.16 17:20:13 | 000,208,072 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll
[2013.10.16 17:20:13 | 000,110,592 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\SysNative\CONEQMSAPOGUILibrary.dll
[2013.10.16 17:20:13 | 000,108,640 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll
[2013.10.16 17:20:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2013.10.16 17:20:11 | 002,080,472 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2013.10.16 17:20:11 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2013.10.16 15:44:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SystemRequirementsLab
[2013.10.16 15:44:24 | 000,000,000 | ---D | C] -- C:\Users\Hanes\SystemRequirementsLab
[2013.10.16 13:32:29 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat
[2013.10.16 13:32:29 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat
[2013.10.16 12:25:42 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe
[2013.10.16 12:16:39 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\CrashDumps
[2013.10.16 12:08:44 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT

[2013.10.16 12:08:09 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll
[2013.10.16 12:08:09 | 000,023,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fs_rec.sys
[2013.10.16 11:03:13 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcjt32.dll
[2013.10.16 11:03:13 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbctrac.dll
[2013.10.16 11:03:13 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbctrac.dll
[2013.10.16 11:03:13 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccp32.dll
[2013.10.16 11:03:13 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccp32.dll
[2013.10.16 11:03:13 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccu32.dll
[2013.10.16 11:03:13 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccr32.dll
[2013.10.16 11:03:13 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccu32.dll
[2013.10.16 11:03:13 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccr32.dll
[2013.10.16 11:02:53 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2013.10.16 11:02:53 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2013.10.16 11:02:51 | 003,717,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
[2013.10.16 11:02:51 | 003,217,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
[2013.10.16 11:02:50 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aaclient.dll
[2013.10.16 11:02:50 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aaclient.dll
[2013.10.16 11:02:50 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll
[2013.10.16 11:02:50 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll
[2013.10.16 11:02:39 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
[2013.10.16 11:02:39 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
[2013.10.16 11:02:38 | 001,118,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sbe.dll
[2013.10.16 11:02:38 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sbe.dll
[2013.10.16 11:02:38 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax
[2013.10.16 11:02:38 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2013.10.16 11:02:13 | 001,572,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll
[2013.10.16 11:02:13 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll
[2013.10.16 11:02:13 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
[2013.10.16 11:02:13 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2013.10.16 11:02:02 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2013.10.16 11:02:02 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2013.10.16 11:01:18 | 001,395,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42.dll
[2013.10.16 11:01:18 | 001,359,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42u.dll
[2013.10.16 11:01:18 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42u.dll
[2013.10.16 11:01:18 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42.dll
[2013.10.16 11:01:12 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb8023.sys
[2013.10.16 11:01:11 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll
[2013.10.16 11:01:11 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll
[2013.10.16 11:01:11 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe
[2013.10.16 11:01:10 | 001,447,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2013.10.16 11:01:10 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2013.10.16 11:01:10 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2013.10.16 11:01:10 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2013.10.16 11:01:03 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
[2013.10.16 11:01:03 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
[2013.10.16 11:00:51 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnsapi.dll
[2013.10.16 11:00:51 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscacheugc.exe
[2013.10.16 11:00:51 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscacheugc.exe
[2013.10.16 11:00:22 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpnet.dll
[2013.10.16 11:00:22 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpnet.dll
[2013.10.16 11:00:22 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpnaddr.dll
[2013.10.16 11:00:22 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpnaddr.dll
[2013.10.16 11:00:21 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2013.10.16 10:59:54 | 000,376,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2013.10.16 10:59:54 | 000,288,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2013.10.16 10:59:51 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll
[2013.10.16 10:59:51 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll
[2013.10.16 10:59:51 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax
[2013.10.16 10:59:51 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax
[2013.10.16 10:59:51 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisrndr.ax
[2013.10.16 10:59:51 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mpeg2Data.ax
[2013.10.16 10:59:51 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisrndr.ax
[2013.10.16 10:59:51 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSDvbNP.ax
[2013.10.16 10:59:51 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mpeg2Data.ax
[2013.10.16 10:59:51 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSDvbNP.ax
[2013.10.16 10:59:19 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\synceng.dll
[2013.10.16 10:59:19 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\synceng.dll
[2013.10.16 10:59:18 | 000,642,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
[2013.10.16 10:59:18 | 000,605,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe
[2013.10.16 10:59:18 | 000,566,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
[2013.10.16 10:59:18 | 000,518,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe
[2013.10.16 10:59:17 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll
[2013.10.16 10:59:17 | 000,020,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdusb.dll
[2013.10.16 10:59:17 | 000,019,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kd1394.dll
[2013.10.16 10:59:17 | 000,017,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdcom.dll
[2013.10.16 10:58:46 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvinst.exe
[2013.10.16 10:58:46 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cfgmgr32.dll
[2013.10.16 10:58:46 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\devrtl.dll
[2013.10.16 10:58:42 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll
[2013.10.16 10:58:42 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll
[2013.10.16 10:58:41 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll
[2013.10.16 10:58:06 | 000,974,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WFS.exe
[2013.10.16 10:58:06 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSCOVER.exe
[2013.10.16 10:58:05 | 000,634,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcrt.dll
[2013.10.16 10:58:03 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll
[2013.10.16 10:58:01 | 000,861,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll
[2013.10.16 10:58:01 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleacc.dll
[2013.10.16 10:58:00 | 000,723,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll
[2013.10.16 10:57:59 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll
[2013.10.16 10:57:49 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll
[2013.10.16 10:57:49 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll
[2013.10.16 10:46:49 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll
[2013.10.16 10:46:49 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll
[2013.10.16 10:30:34 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Adobe
[2013.10.16 10:30:28 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Adobe
[2013.10.16 10:30:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2013.10.15 17:27:38 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Wargaming.net
[2013.10.15 17:23:34 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_43.dll
[2013.10.15 17:23:14 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll
[2013.10.15 17:18:23 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_43.dll
[2013.10.15 17:18:01 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll
[2013.10.15 17:01:08 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\TS3Client
[2013.10.15 17:00:59 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Overwolf
[2013.10.15 17:00:57 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
[2013.10.15 16:57:05 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
[2013.10.15 16:55:50 | 000,466,520 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2013.10.15 16:55:50 | 000,445,016 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2013.10.15 16:55:50 | 000,123,480 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2013.10.15 16:55:50 | 000,109,144 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2013.10.15 16:55:49 | 002,906,586 | ---- | C] (Creative) -- C:\Windows\SysWow64\Sens_oal.dll
[2013.10.15 16:55:49 | 001,944,064 | ---- | C] (Creative) -- C:\Windows\SysNative\Sens_oal.dll
[2013.10.15 16:55:29 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Creative Installation Information
[2013.10.15 16:55:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative Labs Shared
[2013.10.15 16:55:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Creative
[2013.10.15 16:54:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative
[2013.10.15 16:54:30 | 033,929,248 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\t3apstp.exe
[2013.10.15 16:54:30 | 000,651,776 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\T3APO64.dll
[2013.10.15 16:54:30 | 000,600,211 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\t3aim64.exe
[2013.10.15 16:54:30 | 000,511,488 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\T3APO32.dll
[2013.10.15 16:54:30 | 000,057,856 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\t3ppld64.dll
[2013.10.15 16:54:30 | 000,048,400 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\AddCat.exe
[2013.10.15 16:54:30 | 000,018,432 | R--- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\SpiRunE.dll
[2013.10.15 16:54:30 | 000,008,704 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\t3RDefE.exe
[2013.10.15 16:51:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2013.10.15 16:51:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2013.10.15 16:51:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2013.10.15 16:50:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2013.10.15 16:44:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SCi Games
[2013.10.15 16:43:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2013.10.15 16:27:10 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech
[2013.10.15 16:27:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Logitech
[2013.10.15 16:26:08 | 000,000,000 | ---D | C] -- C:\ProgramData\LogiShrd
[2013.10.15 16:25:57 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\NVIDIA
[2013.10.15 16:25:57 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Logitech
[2013.10.15 16:25:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
[2013.10.15 16:25:25 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech Gaming Software
[2013.10.15 16:24:35 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Logitech
[2013.10.15 16:24:35 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Logishrd
[2013.10.15 16:21:03 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\WinRAR
[2013.10.15 16:21:03 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013.10.15 16:21:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013.10.15 16:21:01 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2013.10.15 16:15:01 | 000,000,000 | ---D | C] -- C:\ProgramData\AVerTV 3D
[2013.10.15 16:14:52 | 000,804,736 | ---- | C] (AVerMedia TECHNOLOGIES, Inc.) -- C:\Windows\SysNative\drivers\AVerAF35.sys
[2013.10.15 16:14:52 | 000,000,000 | ---D | C] -- C:\Windows\Driver Cache
[2013.10.15 16:14:43 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\AVerMedia
[2013.10.15 16:14:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVerMedia
[2013.10.15 16:14:19 | 000,114,688 | ---- | C] (AVerMedia Technologies, Inc.) -- C:\Windows\SysWow64\CardID.dll
[2013.10.15 16:14:18 | 000,045,056 | ---- | C] (Open Source Software community project) -- C:\Windows\SysWow64\pthreadVC.dll
[2013.10.15 16:14:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVerMedia
[2013.10.15 16:14:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVerMedia
[2013.10.15 16:12:56 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\amcap.exe
[2013.10.15 16:12:55 | 010,555,264 | ---- | C] (Sonix Co. Ltd.) -- C:\Windows\SysNative\drivers\snp325.sys
[2013.10.15 16:12:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\snp325
[2013.10.15 16:12:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\325 USB PC Camera _beta
[2013.10.15 16:12:05 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\InstallShield
[2013.10.15 16:05:23 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll
[2013.10.15 16:05:22 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll
[2013.10.15 16:05:22 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll
[2013.10.15 16:05:22 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll
[2013.10.15 16:05:22 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll
[2013.10.15 16:05:22 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll
[2013.10.15 16:05:22 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll
[2013.10.15 16:05:21 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll
[2013.10.15 16:05:21 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll
[2013.10.15 16:05:21 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll
[2013.10.15 16:05:21 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll
[2013.10.15 16:05:20 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll
[2013.10.15 16:05:20 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll
[2013.10.15 16:05:20 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll
[2013.10.15 16:05:20 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll
[2013.10.15 16:05:19 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll
[2013.10.15 16:05:19 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll
[2013.10.15 16:05:19 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll
[2013.10.15 16:05:19 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll
[2013.10.15 16:05:18 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll
[2013.10.15 16:05:18 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll
[2013.10.15 16:05:18 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll
[2013.10.15 16:05:18 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll
[2013.10.15 16:05:18 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll
[2013.10.15 16:05:18 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll
[2013.10.15 16:05:17 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll
[2013.10.15 16:05:17 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll
[2013.10.15 16:05:16 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll
[2013.10.15 16:05:16 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll
[2013.10.15 16:05:16 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll
[2013.10.15 16:05:16 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll
[2013.10.15 16:05:16 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll
[2013.10.15 16:05:16 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll
[2013.10.15 16:05:15 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll
[2013.10.15 16:05:15 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll
[2013.10.15 16:05:14 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll
[2013.10.15 16:05:14 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll
[2013.10.15 16:05:14 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll
[2013.10.15 16:05:14 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll
[2013.10.15 16:05:14 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll
[2013.10.15 16:05:14 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll
[2013.10.15 16:05:13 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll
[2013.10.15 16:05:13 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll
[2013.10.15 16:05:12 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll
[2013.10.15 16:05:12 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll
[2013.10.15 16:05:11 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll
[2013.10.15 16:05:11 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll
[2013.10.15 16:05:11 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll
[2013.10.15 16:05:11 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll
[2013.10.15 16:05:11 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll
[2013.10.15 16:05:11 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll
[2013.10.15 16:05:10 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll
[2013.10.15 16:05:10 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll
[2013.10.15 16:05:09 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll
[2013.10.15 16:05:09 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll
[2013.10.15 16:05:07 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll
[2013.10.15 16:05:07 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll
[2013.10.15 16:05:07 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll
[2013.10.15 16:05:07 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll
[2013.10.15 16:05:06 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll
[2013.10.15 16:05:06 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll
[2013.10.15 16:05:05 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll
[2013.10.15 16:05:05 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll
[2013.10.15 16:05:04 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll
[2013.10.15 16:05:04 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll
[2013.10.15 16:05:04 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll
[2013.10.15 16:05:04 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll
[2013.10.15 16:05:04 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll
[2013.10.15 16:05:04 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll
[2013.10.15 16:05:03 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll
[2013.10.15 16:05:03 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll
[2013.10.15 16:05:03 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll
[2013.10.15 16:05:03 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll
[2013.10.15 16:05:02 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll
[2013.10.15 16:05:02 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll
[2013.10.15 16:05:02 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll
[2013.10.15 16:05:02 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll
[2013.10.15 16:05:02 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll
[2013.10.15 16:05:02 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll
[2013.10.15 16:05:00 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll
[2013.10.15 16:05:00 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll
[2013.10.15 16:04:59 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll
[2013.10.15 16:04:59 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll
[2013.10.15 16:04:59 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll
[2013.10.15 16:04:59 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll
[2013.10.15 16:04:59 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll
[2013.10.15 16:04:59 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll
[2013.10.15 16:04:58 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll
[2013.10.15 16:04:58 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll
[2013.10.15 16:04:58 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll
[2013.10.15 16:04:58 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll
[2013.10.15 16:04:57 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll
[2013.10.15 16:04:57 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll
[2013.10.15 16:04:56 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll
[2013.10.15 16:04:56 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll
[2013.10.15 16:04:56 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll
[2013.10.15 16:04:56 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll
[2013.10.15 16:04:55 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll
[2013.10.15 16:04:55 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll
[2013.10.15 16:04:55 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll
[2013.10.15 16:04:55 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll
[2013.10.15 16:04:54 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll
[2013.10.15 16:04:54 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll
[2013.10.15 16:04:53 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll
[2013.10.15 16:04:53 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll
[2013.10.15 16:04:53 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll
[2013.10.15 16:04:53 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll
[2013.10.15 16:04:50 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll
[2013.10.15 16:04:50 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll
[2013.10.15 16:04:49 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll
[2013.10.15 16:04:49 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll
[2013.10.15 16:04:49 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll
[2013.10.15 16:04:49 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll
[2013.10.15 16:04:47 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll
[2013.10.15 16:04:47 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll
[2013.10.15 16:04:46 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll
[2013.10.15 16:04:46 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll
[2013.10.15 16:04:46 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll
[2013.10.15 16:04:46 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll
[2013.10.15 16:04:45 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll
[2013.10.15 16:04:45 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll
[2013.10.15 16:04:44 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll
[2013.10.15 16:04:44 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll
[2013.10.15 16:04:43 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll
[2013.10.15 16:04:43 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll
[2013.10.15 16:04:43 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll
[2013.10.15 16:04:43 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll
[2013.10.15 16:04:42 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll
[2013.10.15 16:04:42 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll
[2013.10.15 16:04:41 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll
[2013.10.15 16:04:41 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll
[2013.10.15 16:02:49 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Skype
[2013.10.15 16:02:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx
[2013.10.15 16:02:43 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2013.10.15 16:02:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013.10.15 16:02:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2013.10.15 16:02:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
[2013.10.15 16:02:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2013.10.15 15:58:29 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2013.10.15 15:58:16 | 000,000,000 | -HSD | C] -- C:\Boot
[2013.10.15 15:57:03 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\AVAST Software
[2013.10.15 15:56:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
[2013.10.15 15:56:41 | 000,065,264 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2013.10.15 15:56:40 | 001,032,416 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2013.10.15 15:56:40 | 000,409,832 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2013.10.15 15:56:39 | 000,084,328 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2013.10.15 15:56:39 | 000,038,984 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2013.10.15 15:56:38 | 000,092,544 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2013.10.15 15:56:37 | 000,334,648 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2013.10.15 15:56:36 | 000,043,152 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2013.10.15 15:56:28 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2013.10.15 15:55:51 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2013.10.15 15:50:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013.10.15 15:49:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2013.10.15 15:49:55 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Google
[2013.10.15 15:49:38 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Deployment
[2013.10.15 15:49:38 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Apps
[2013.10.15 15:31:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2013.10.15 15:31:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
[2013.10.15 15:31:04 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2013.10.15 15:31:02 | 001,031,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll
[2013.10.15 15:31:02 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll
[2013.10.15 15:31:02 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpudd.dll
[2013.10.15 15:31:02 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys
[2013.10.15 15:30:46 | 006,599,968 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
[2013.10.15 15:30:46 | 003,452,192 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
[2013.10.15 15:30:46 | 000,219,424 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
[2013.10.15 15:30:46 | 000,063,776 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
[2013.10.15 15:30:37 | 000,061,216 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2013.10.15 15:30:37 | 000,053,024 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2013.10.15 15:30:30 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2013.10.15 15:30:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2013.10.15 15:28:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2013.10.15 15:27:09 | 002,622,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2013.10.15 15:27:09 | 000,057,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2013.10.15 15:27:09 | 000,044,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2013.10.15 15:27:00 | 000,701,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2013.10.15 15:27:00 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2013.10.15 15:27:00 | 000,038,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2013.10.15 15:26:56 | 000,186,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2013.10.15 15:26:56 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2013.10.15 15:26:03 | 029,337,376 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2013.10.15 15:26:03 | 025,256,224 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2013.10.15 15:26:03 | 022,102,304 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2013.10.15 15:26:03 | 017,560,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2013.10.15 15:26:03 | 015,901,448 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
[2013.10.15 15:26:03 | 015,703,688 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2013.10.15 15:26:03 | 013,628,208 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2013.10.15 15:26:03 | 012,947,360 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
[2013.10.15 15:26:03 | 009,281,032 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2013.10.15 15:26:03 | 007,720,576 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2013.10.15 15:26:03 | 007,648,000 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
[2013.10.15 15:26:03 | 006,329,552 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
[2013.10.15 15:26:03 | 002,986,672 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
[2013.10.15 15:26:03 | 002,970,400 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2013.10.15 15:26:03 | 002,789,152 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2013.10.15 15:26:03 | 002,630,304 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2013.10.15 15:26:03 | 002,367,264 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
[2013.10.15 15:26:03 | 002,007,328 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
[2013.10.15 15:26:03 | 001,884,448 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6432723.dll
[2013.10.15 15:26:03 | 001,511,712 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6432723.dll
[2013.10.15 15:26:03 | 001,510,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdagenco6420103.dll
[2013.10.15 15:26:03 | 001,412,832 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvumdshimx.dll
[2013.10.15 15:26:03 | 001,222,824 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
[2013.10.15 15:26:03 | 000,681,760 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll
[2013.10.15 15:26:03 | 000,603,424 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll
[2013.10.15 15:26:03 | 000,586,016 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll
[2013.10.15 15:26:03 | 000,515,360 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll
[2013.10.15 15:26:03 | 000,317,472 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglshim64.dll
[2013.10.15 15:26:03 | 000,266,984 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglshim32.dll
[2013.10.15 15:26:03 | 000,196,384 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvhda64v.sys
[2013.10.15 15:26:03 | 000,168,616 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
[2013.10.15 15:26:03 | 000,141,336 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
[2013.10.15 15:26:03 | 000,039,200 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvvad64v.sys
[2013.10.15 15:26:03 | 000,031,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdap64.dll
[2013.10.15 15:26:03 | 000,029,984 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvaudcap64v.dll
[2013.10.15 15:26:03 | 000,028,448 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvaudcap32v.dll
[2013.10.15 15:25:30 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2013.10.15 15:25:15 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2013.10.15 15:22:46 | 000,020,464 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iusb3hcs.sys
[2013.10.15 15:22:38 | 000,786,416 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iusb3xhc.sys
[2013.10.15 15:22:37 | 000,368,112 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iusb3hub.sys
[2013.10.15 15:19:51 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2013.10.15 15:19:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros
[2013.10.15 15:19:32 | 000,000,000 | ---D | C] -- C:\Program Files\Qualcomm Atheros
[2013.10.15 15:19:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Bigfoot Networks
[2013.10.15 15:19:02 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2013.10.15 15:09:50 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll
[2013.10.15 15:09:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2013.10.15 15:09:39 | 000,000,000 | ---D | C] -- C:\Intel
[2013.10.15 15:09:24 | 000,000,000 | ---D | C] -- C:\MSI
[2013.10.15 15:06:01 | 000,000,000 | R--D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2013.10.15 15:06:01 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Searches
[2013.10.15 15:06:01 | 000,000,000 | R--D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2013.10.15 15:05:53 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Identities
[2013.10.15 15:05:52 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Contacts
[2013.10.15 15:05:50 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\VirtualStore
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\AppData\Local\Temporary Internet Files
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Šablony
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Soubory cookie
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\SendTo
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Poslední
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Okolní tiskárny
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Okolní síť
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Documents\Obrázky
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Nabídka Start
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Local Settings
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Documents\Hudba
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\AppData\Local\History
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Documents\Filmy
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Dokumenty
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Data aplikací
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\AppData\Local\Data aplikací
[2013.10.15 15:05:37 | 000,000,000 | --SD | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Videos
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Saved Games
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Pictures
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Music
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Links
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Favorites
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Downloads
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Documents
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Desktop
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2013.10.15 15:05:37 | 000,000,000 | -H-D | C] -- C:\Users\Hanes\AppData
[2013.10.15 15:05:37 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Temp
[2013.10.15 15:05:37 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Microsoft
[2013.10.15 15:05:37 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Media Center Programs
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Šablony
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\Recovery
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Plocha
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Obrázky
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Oblíbené položky
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Nabídka Start
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Hudba
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Filmy
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Data aplikací
[2013.10.15 15:04:28 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2013.10.15 14:59:21 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2013.10.15 14:59:00 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013.10.20 20:42:20 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013.10.20 20:37:18 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Hanes\Desktop\OTL.exe
[2013.10.20 20:01:01 | 000,000,950 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.10.20 16:00:04 | 000,000,946 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.10.20 15:25:54 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.10.20 15:25:54 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.10.20 14:42:05 | 001,576,554 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.10.20 14:42:05 | 000,666,194 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2013.10.20 14:42:05 | 000,651,938 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.10.20 14:42:05 | 000,139,890 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2013.10.20 14:42:05 | 000,120,870 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.10.20 14:37:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.10.20 14:37:09 | 3164,610,560 | -HS- | M] () -- C:\hiberfil.sys
[2013.10.19 13:10:17 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2013.10.18 21:59:28 | 000,000,730 | ---- | M] () -- C:\Users\Public\Desktop\World of Tanks - Common Test.lnk
[2013.10.18 18:46:37 | 000,001,096 | ---- | M] () -- C:\Users\Hanes\AppData\Local\SRDownloader.nast
[2013.10.18 18:22:35 | 000,001,061 | ---- | M] () -- C:\Users\Hanes\Desktop\dirt3 – zástupce.lnk
[2013.10.18 17:29:09 | 000,283,064 | ---- | M] (Disc Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2013.10.18 17:28:59 | 000,000,783 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2013.10.17 20:35:27 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.10.17 19:14:51 | 000,000,000 | ---- | M] () -- C:\autoexec.bat
[2013.10.17 19:08:45 | 000,002,258 | ---- | M] () -- C:\Users\Hanes\Desktop\SpyHunter.lnk
[2013.10.17 19:06:30 | 000,000,456 | ---- | M] () -- C:\Users\Hanes\Desktop\LFS – zástupce.lnk
[2013.10.17 17:26:08 | 000,277,672 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.10.17 15:49:28 | 003,959,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013.10.17 15:49:28 | 001,509,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2013.10.17 15:49:28 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013.10.17 15:49:28 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2013.10.17 15:49:28 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2013.10.17 15:49:28 | 001,054,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2013.10.17 15:49:28 | 000,905,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2013.10.17 15:49:28 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013.10.17 15:49:28 | 000,762,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2013.10.17 15:49:28 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2013.10.17 15:49:28 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013.10.17 15:49:28 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2013.10.17 15:49:28 | 000,603,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013.10.17 15:49:28 | 000,599,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2013.10.17 15:49:28 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013.10.17 15:49:28 | 000,452,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2013.10.17 15:49:28 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2013.10.17 15:49:28 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013.10.17 15:49:28 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2013.10.17 15:49:28 | 000,281,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2013.10.17 15:49:28 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2013.10.17 15:49:28 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2013.10.17 15:49:28 | 000,226,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
[2013.10.17 15:49:28 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2013.10.17 15:49:28 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2013.10.17 15:49:28 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
[2013.10.17 15:49:28 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2013.10.17 15:49:28 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2013.10.17 15:49:28 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2013.10.17 15:49:28 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2013.10.17 15:49:28 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2013.10.17 15:49:28 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2013.10.17 15:49:28 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2013.10.17 15:49:28 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2013.10.17 15:49:28 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013.10.17 15:49:28 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2013.10.17 15:49:28 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2013.10.17 15:49:28 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2013.10.17 15:49:28 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2013.10.17 15:49:28 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2013.10.17 15:49:28 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013.10.17 15:49:28 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2013.10.17 15:49:28 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2013.10.17 15:49:28 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2013.10.17 15:49:28 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013.10.17 15:49:28 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2013.10.17 15:49:28 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2013.10.17 15:49:28 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2013.10.17 15:49:28 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2013.10.17 15:49:28 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2013.10.17 15:49:28 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013.10.17 15:49:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2013.10.17 15:49:28 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013.10.17 15:49:28 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2013.10.17 15:49:28 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2013.10.17 15:49:28 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013.10.17 15:49:28 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2013.10.17 15:49:28 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013.10.17 15:49:28 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2013.10.17 15:49:28 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2013.10.17 15:49:28 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2013.10.17 15:49:28 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013.10.17 15:49:28 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013.10.17 15:49:28 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2013.10.17 15:49:28 | 000,025,185 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
[2013.10.17 15:49:28 | 000,025,185 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
[2013.10.17 15:49:28 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2013.10.17 15:49:28 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2013.10.17 15:49:28 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2013.10.17 15:49:28 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2013.10.17 15:48:06 | 003,928,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2013.10.17 15:48:06 | 002,776,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll
[2013.10.17 15:48:06 | 002,565,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2013.10.17 15:48:06 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll
[2013.10.17 15:48:06 | 001,682,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2013.10.17 15:48:06 | 001,643,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2013.10.17 15:48:06 | 001,424,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
[2013.10.17 15:48:06 | 001,238,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll
[2013.10.17 15:48:06 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2013.10.17 15:48:06 | 000,648,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
[2013.10.17 15:48:06 | 000,522,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2013.10.17 15:48:06 | 000,465,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2013.10.17 15:48:06 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2013.10.17 15:48:06 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2013.10.17 15:48:06 | 000,363,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
[2013.10.17 15:48:06 | 000,333,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2013.10.17 15:48:06 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll
[2013.10.17 15:48:06 | 000,245,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll
[2013.10.17 15:48:06 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll
[2013.10.17 15:48:06 | 000,194,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
[2013.10.17 15:48:06 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll
[2013.10.17 15:48:06 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.10.17 15:48:06 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.10.17 15:48:06 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.10.17 15:48:06 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.10.17 15:46:53 | 001,887,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
[2013.10.17 15:46:53 | 001,505,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
[2013.10.17 15:42:18 | 001,554,840 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013.10.17 15:04:30 | 000,001,967 | RH-- | M] () -- C:\Windows\ctfile.rfc
[2013.10.17 14:50:36 | 000,002,775 | ---- | M] () -- C:\Users\Public\Desktop\Anti-Vibrate Oscar Editor.lnk
[2013.10.17 13:47:09 | 386,998,726 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013.10.17 08:25:53 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msclmd.dll
[2013.10.17 08:25:52 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msclmd.dll
[2013.10.17 00:12:00 | 000,000,871 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2013.10.16 22:25:00 | 000,000,065 | ---- | M] () -- C:\Users\Hanes\AppData\Local\SRDownloader.err
[2013.10.16 22:23:08 | 000,905,728 | ---- | M] (Share-rapid.com) -- C:\Users\Hanes\Desktop\SRDownloader.exe
[2013.10.16 18:07:26 | 000,000,036 | ---- | M] () -- C:\Windows\SysWow64\soundtweak.cfg
[2013.10.16 17:54:40 | 000,000,220 | ---- | M] () -- C:\Windows\SysWow64\RichardBurnsRally.ini
[2013.10.15 17:00:57 | 000,000,620 | ---- | M] () -- C:\Users\Hanes\Desktop\TeamSpeak 3 Client.lnk
[2013.10.15 16:55:50 | 000,466,520 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2013.10.15 16:55:50 | 000,445,016 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2013.10.15 16:55:50 | 000,123,480 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2013.10.15 16:55:50 | 000,109,144 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2013.10.15 16:14:39 | 000,002,308 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk
[2013.10.15 16:14:39 | 000,002,266 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVerQuick.lnk
[2013.10.15 16:14:39 | 000,000,727 | ---- | M] () -- C:\Users\Public\Desktop\AVerTV 3D.lnk
[2013.10.15 16:02:43 | 000,000,620 | ---- | M] () -- C:\Users\Public\Desktop\World of Tanks.lnk
[2013.10.15 15:58:17 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2013.10.15 15:56:36 | 001,032,416 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2013.10.15 15:56:36 | 000,409,832 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2013.10.15 15:56:36 | 000,334,648 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2013.10.15 15:56:36 | 000,205,320 | ---- | M] () -- C:\Windows\SysNative\drivers\aswVmm.sys
[2013.10.15 15:56:36 | 000,092,544 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2013.10.15 15:56:36 | 000,084,328 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2013.10.15 15:56:36 | 000,065,776 | ---- | M] () -- C:\Windows\SysNative\drivers\aswRvrt.sys
[2013.10.15 15:56:36 | 000,065,264 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2013.10.15 15:56:36 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2013.10.15 15:56:36 | 000,038,984 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2013.10.15 15:33:10 | 000,001,351 | ---- | M] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2013.10.15 15:22:51 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_iusb3hcs_01009.Wdf
[2013.10.15 15:19:35 | 000,002,268 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk
[2013.10.15 15:04:35 | 000,000,012 | RHS- | M] () -- C:\win7.ld
[2013.10.15 15:04:34 | 000,203,464 | RHS- | M] () -- C:\grldr
[2013.10.15 15:02:27 | 000,061,655 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2013.10.15 15:02:27 | 000,061,655 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2013.10.09 15:46:33 | 000,001,114 | ---- | M] () -- C:\Users\Hanes\Desktop\Photoshop – zástupce.lnk
[2013.10.08 07:50:37 | 000,096,168 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2013.10.08 07:46:52 | 000,264,616 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2013.10.08 07:46:47 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2013.10.08 07:46:23 | 000,174,504 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.10.20 20:42:20 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013.10.19 13:10:17 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2013.10.18 21:59:28 | 000,000,730 | ---- | C] () -- C:\Users\Public\Desktop\World of Tanks - Common Test.lnk
[2013.10.18 18:22:35 | 000,001,061 | ---- | C] () -- C:\Users\Hanes\Desktop\dirt3 – zástupce.lnk
[2013.10.18 17:28:59 | 000,000,783 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2013.10.17 20:35:27 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.10.17 19:14:51 | 000,000,000 | ---- | C] () -- C:\autoexec.bat
[2013.10.17 19:08:45 | 000,002,258 | ---- | C] () -- C:\Users\Hanes\Desktop\SpyHunter.lnk
[2013.10.17 19:06:30 | 000,000,456 | ---- | C] () -- C:\Users\Hanes\Desktop\LFS – zástupce.lnk
[2013.10.17 15:49:28 | 000,025,185 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2013.10.17 15:49:28 | 000,025,185 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2013.10.17 15:31:06 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2013.10.17 15:04:44 | 000,004,626 | ---- | C] () -- C:\Windows\SysWow64\AudioDrv.ini
[2013.10.17 15:04:30 | 000,000,049 | R--- | C] () -- C:\Windows\SysNative\ctzapxx.ini
[2013.10.17 14:50:36 | 000,002,775 | ---- | C] () -- C:\Users\Public\Desktop\Anti-Vibrate Oscar Editor.lnk
[2013.10.17 13:47:09 | 386,998,726 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2013.10.17 00:12:00 | 000,000,871 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2013.10.16 22:25:00 | 000,000,065 | ---- | C] () -- C:\Users\Hanes\AppData\Local\SRDownloader.err
[2013.10.16 22:24:28 | 000,001,096 | ---- | C] () -- C:\Users\Hanes\AppData\Local\SRDownloader.nast
[2013.10.16 18:07:47 | 000,095,744 | ---- | C] () -- C:\Windows\SysNative\RDVGHelper.exe
[2013.10.16 18:07:37 | 000,347,904 | ---- | C] () -- C:\Windows\SysNative\systemsf.ebd
[2013.10.16 18:06:02 | 000,010,429 | ---- | C] () -- C:\Windows\SysNative\ScavengeSpace.xml
[2013.10.16 18:05:43 | 000,105,559 | ---- | C] () -- C:\Windows\SysWow64\RacRules.xml
[2013.10.16 18:05:43 | 000,105,559 | ---- | C] () -- C:\Windows\SysNative\RacRules.xml
[2013.10.16 18:05:28 | 000,146,389 | ---- | C] () -- C:\Windows\SysWow64\printmanagement.msc
[2013.10.16 18:05:28 | 000,001,041 | ---- | C] () -- C:\Windows\SysWow64\tcpbidi.xml
[2013.10.16 17:58:49 | 000,000,036 | ---- | C] () -- C:\Windows\SysWow64\soundtweak.cfg
[2013.10.16 17:54:18 | 000,000,220 | ---- | C] () -- C:\Windows\SysWow64\RichardBurnsRally.ini
[2013.10.16 17:20:15 | 000,620,273 | ---- | C] () -- C:\Windows\SysNative\drivers\RTAIODAT.DAT
[2013.10.16 10:30:15 | 000,001,114 | ---- | C] () -- C:\Users\Hanes\Desktop\Photoshop – zástupce.lnk
[2013.10.15 17:00:57 | 000,000,620 | ---- | C] () -- C:\Users\Hanes\Desktop\TeamSpeak 3 Client.lnk
[2013.10.15 16:56:04 | 000,007,062 | ---- | C] () -- C:\Windows\SysWow64\audiopid.vxd
[2013.10.15 16:54:32 | 000,190,976 | ---- | C] () -- C:\Windows\SysNative\APOMgr64.DLL
[2013.10.15 16:54:32 | 000,148,480 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2013.10.15 16:54:32 | 000,089,088 | ---- | C] () -- C:\Windows\SysNative\CmdRtr64.DLL
[2013.10.15 16:54:32 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2013.10.15 16:54:30 | 000,150,016 | R--- | C] () -- C:\Windows\SysWow64\OemSpiE.dll
[2013.10.15 16:54:30 | 000,008,899 | ---- | C] () -- C:\Windows\SysWow64\T3APO64.UDA
[2013.10.15 16:54:30 | 000,001,967 | RH-- | C] () -- C:\Windows\ctfile.rfc
[2013.10.15 16:54:30 | 000,001,726 | R--- | C] () -- C:\Windows\SB0710.reg
[2013.10.15 16:54:30 | 000,001,518 | R--- | C] () -- C:\Windows\SB0820.reg
[2013.10.15 16:54:30 | 000,001,436 | R--- | C] () -- C:\Windows\CfgHPSp.ini
[2013.10.15 16:54:30 | 000,001,434 | R--- | C] () -- C:\Windows\Cfg05Sp.ini
[2013.10.15 16:54:30 | 000,001,434 | R--- | C] () -- C:\Windows\Cfg04Sp.ini
[2013.10.15 16:54:30 | 000,001,091 | R--- | C] () -- C:\Windows\Cfg03Sp.ini
[2013.10.15 16:54:30 | 000,001,091 | R--- | C] () -- C:\Windows\Cfg02Sp.ini
[2013.10.15 16:54:30 | 000,001,000 | R--- | C] () -- C:\Windows\Cfg01Sp.ini
[2013.10.15 16:54:30 | 000,000,992 | R--- | C] () -- C:\Windows\SB1049.reg
[2013.10.15 16:54:30 | 000,000,932 | R--- | C] () -- C:\Windows\CfgHPHp.ini
[2013.10.15 16:54:30 | 000,000,932 | R--- | C] () -- C:\Windows\CfgHPDO.ini
[2013.10.15 16:54:30 | 000,000,932 | R--- | C] () -- C:\Windows\Cfg05DO.ini
[2013.10.15 16:54:30 | 000,000,932 | R--- | C] () -- C:\Windows\Cfg04DO.ini
[2013.10.15 16:54:30 | 000,000,930 | R--- | C] () -- C:\Windows\Cfg05Hp.ini
[2013.10.15 16:54:30 | 000,000,930 | R--- | C] () -- C:\Windows\Cfg04Hp.ini
[2013.10.15 16:54:30 | 000,000,904 | R--- | C] () -- C:\Windows\SB1042.reg
[2013.10.15 16:54:30 | 000,000,904 | R--- | C] () -- C:\Windows\SB1040.reg
[2013.10.15 16:54:30 | 000,000,818 | R--- | C] () -- C:\Windows\Cfg01APR.ini
[2013.10.15 16:54:30 | 000,000,725 | R--- | C] () -- C:\Windows\Cfg03Hp.ini
[2013.10.15 16:54:30 | 000,000,725 | R--- | C] () -- C:\Windows\Cfg03DO.ini
[2013.10.15 16:54:30 | 000,000,725 | R--- | C] () -- C:\Windows\Cfg02Hp.ini
[2013.10.15 16:54:30 | 000,000,725 | R--- | C] () -- C:\Windows\Cfg02DO.ini
[2013.10.15 16:54:30 | 000,000,725 | R--- | C] () -- C:\Windows\Cfg01Hp.ini
[2013.10.15 16:54:30 | 000,000,725 | R--- | C] () -- C:\Windows\Cfg01DO.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\CfgHPRMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\CfgHPRLI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\CfgHPFMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\CfgHPDI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg05RMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg05RLI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg05FMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg05DI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg04RMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg04RLI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg04FMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg04DI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg03RMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg03RLI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg03FMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg03DI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg02RMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg02RLI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg02FMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg02DI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg01Mic.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg01LI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg01DI.ini
[2013.10.15 16:14:39 | 000,002,308 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk
[2013.10.15 16:14:39 | 000,002,266 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVerQuick.lnk
[2013.10.15 16:14:39 | 000,000,727 | ---- | C] () -- C:\Users\Public\Desktop\AVerTV 3D.lnk
[2013.10.15 16:14:19 | 000,049,152 | ---- | C] () -- C:\Windows\SysWow64\AVerIO.dll
[2013.10.15 16:14:19 | 000,003,456 | ---- | C] () -- C:\Windows\SysWow64\AVerIO.sys
[2013.10.15 16:14:18 | 000,622,592 | ---- | C] () -- C:\Windows\SysWow64\sptlib21.dll
[2013.10.15 16:14:18 | 000,421,888 | ---- | C] () -- C:\Windows\SysWow64\sptlib02.dll
[2013.10.15 16:14:18 | 000,311,296 | ---- | C] () -- C:\Windows\SysWow64\sptlib01.dll
[2013.10.15 16:14:18 | 000,307,200 | ---- | C] () -- C:\Windows\SysWow64\sptlib22.dll
[2013.10.15 16:14:18 | 000,307,200 | ---- | C] () -- C:\Windows\SysWow64\sptlib03.dll
[2013.10.15 16:14:18 | 000,294,912 | ---- | C] () -- C:\Windows\SysWow64\sptlib11.dll
[2013.10.15 16:14:18 | 000,135,168 | ---- | C] () -- C:\Windows\SysWow64\sptlib12.dll
[2013.10.15 16:12:56 | 000,020,480 | ---- | C] () -- C:\Windows\FixCamera.exe
[2013.10.15 16:12:55 | 000,827,392 | ---- | C] () -- C:\Windows\vsnp325.exe
[2013.10.15 16:12:55 | 000,306,176 | ---- | C] ( ) -- C:\Windows\SysNative\vsnp325.dll
[2013.10.15 16:12:55 | 000,018,944 | ---- | C] ( ) -- C:\Windows\SysNative\csnp325.dll
[2013.10.15 16:12:55 | 000,015,498 | ---- | C] () -- C:\Windows\snp325.ini
[2013.10.15 16:12:55 | 000,013,023 | ---- | C] () -- C:\Windows\snp325.src
[2013.10.15 16:12:54 | 000,147,456 | ---- | C] ( ) -- C:\Windows\SysWow64\rsnp325.dll
[2013.10.15 16:12:54 | 000,061,440 | ---- | C] ( ) -- C:\Windows\SysWow64\vsnp325.dll
[2013.10.15 16:08:54 | 000,053,248 | ---- | C] ( ) -- C:\Windows\SysWow64\csnp325.dll
[2013.10.15 16:02:43 | 000,000,620 | ---- | C] () -- C:\Users\Public\Desktop\World of Tanks.lnk
[2013.10.15 15:58:17 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2013.10.15 15:58:16 | 000,383,786 | RHS- | C] () -- C:\bootmgr
[2013.10.15 15:56:41 | 000,205,320 | ---- | C] () -- C:\Windows\SysNative\drivers\aswVmm.sys
[2013.10.15 15:56:40 | 000,065,776 | ---- | C] () -- C:\Windows\SysNative\drivers\aswRvrt.sys
[2013.10.15 15:50:00 | 000,000,950 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.10.15 15:49:59 | 000,000,946 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.10.15 15:33:10 | 000,001,351 | ---- | C] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2013.10.15 15:30:46 | 003,361,114 | ---- | C] () -- C:\Windows\SysNative\nvcoproc.bin
[2013.10.15 15:29:15 | 001,554,840 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013.10.15 15:26:03 | 000,022,814 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
[2013.10.15 15:22:51 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_iusb3hcs_01009.Wdf
[2013.10.15 15:19:35 | 000,002,268 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk
[2013.10.15 15:06:03 | 000,001,397 | ---- | C] () -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2013.10.15 15:04:35 | 000,000,012 | RHS- | C] () -- C:\win7.ld
[2013.10.15 15:04:34 | 000,203,464 | RHS- | C] () -- C:\grldr
[2013.10.15 15:02:12 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2013.10.15 15:02:08 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2013.10.15 14:59:00 | 3164,610,560 | -HS- | C] () -- C:\hiberfil.sys

========== ZeroAccess Check ==========

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.07.26 04:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013.10.15 15:57:04 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\AVAST Software
[2013.10.18 17:30:43 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\DAEMON Tools Lite
[2013.10.16 17:34:02 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\DriverCure
[2013.10.16 17:34:02 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\ParetoLogic
[2013.10.18 18:28:38 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Seznam.cz
[2013.10.15 18:34:22 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\TS3Client
[2013.10.15 17:27:38 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Wargaming.net

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009.07.14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009.07.14 07:08:49 | 000,009,416 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2013.10.15 15:49:59 | 000,000,946 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013.10.15 15:50:00 | 000,000,950 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< >

< MD5 for: AGP440.SYS >
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 03:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2012.06.02 06:52:32 | 000,142,336 | ---- | M] (Microsoft Corporation) MD5=063DD65889D21035311463337BD268E7 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_788c7cc71232cc19\cryptsvc.dll
[2010.11.20 15:25:59 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_d4259ed3b16ed82a\cryptsvc.dll
[2013.05.13 06:45:55 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=3897DFF247D9ED0006190349DE264E14 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_77d8a461f934afb8\cryptsvc.dll
[2013.07.09 16:47:30 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=434CCE8E7150CD1324C5FAA088D1D061 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_d45f6e88cac8f85b\cryptsvc.dll
[2012.06.02 07:32:25 | 000,183,808 | ---- | M] (Microsoft Corporation) MD5=456107D69D4EE850A559434F19EFEE65 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.21225_none_d2beeccacd6d6c07\cryptsvc.dll
[2013.07.09 07:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=6B400F211BEE880A37A1ED0368776BF4 -- C:\Windows\SysNative\cryptsvc.dll
[2013.07.09 07:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=6B400F211BEE880A37A1ED0368776BF4 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_d431528fb165f7bc\cryptsvc.dll
[2013.07.09 15:57:37 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=6DB499DEFCC827317C5371164A7CDB27 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_7840d305126b8725\cryptsvc.dll
[2013.07.09 06:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=7CA1BECEA5DE2643ADDAD32670E7A4C9 -- C:\Windows\SysWOW64\cryptsvc.dll
[2013.07.09 06:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=7CA1BECEA5DE2643ADDAD32670E7A4C9 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_7812b70bf9088686\cryptsvc.dll
[2012.06.04 09:52:35 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=7E7D2DACF65D750D466F36BD3D09AE20 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_d4ab184aca903d4f\cryptsvc.dll
[2013.05.11 07:18:23 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=8122252F0A4ACFA92FA0C1D50D18493B -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_d4a24ea4ca968363\cryptsvc.dll
[2009.07.14 03:40:24 | 000,175,104 | ---- | M] (Microsoft Corporation) MD5=8C57411B66282C01533CB776F98AD384 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_d1f48b0bb4805490\cryptsvc.dll
[2012.06.02 06:36:29 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=96C0E38905CFD788313BE8E11DAE3F2F -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_77ddc9e5f93000db\cryptsvc.dll
[2012.06.02 07:41:28 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=9C01375BE382E834CC26D1B7EAF2C4FE -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_d3fc6569b18d7211\cryptsvc.dll
[2009.07.14 03:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll
[2010.11.20 14:18:24 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll
[2013.05.11 06:59:05 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=AC04D05309BB2C418D0D80B9FB014642 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_7883b3211239122d\cryptsvc.dll
[2012.06.02 07:25:12 | 000,182,272 | ---- | M] (Microsoft Corporation) MD5=BAF19B633933A9FB4883D27D66C39E9A -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.17035_none_d22a7e2db457eb07\cryptsvc.dll
[2013.05.13 07:51:01 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=D8129C49798CBBFB2E4351D4B7B8EF9C -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_d3f73fe5b19220ee\cryptsvc.dll
[2012.06.02 06:41:59 | 000,141,312 | ---- | M] (Microsoft Corporation) MD5=EA8C26ECF1656D9647EF044F115EC6DA -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.21225_none_76a05147150ffad1\cryptsvc.dll
[2012.06.02 06:45:21 | 000,139,264 | ---- | M] (Microsoft Corporation) MD5=F2FDE6C8DBAAD44CC58D1E07E4AF4EED -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.17035_none_760be2a9fbfa79d1\cryptsvc.dll

< MD5 for: EXPLORER.EXE >
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\SysWOW64\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009.08.03 08:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2009.10.31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009.08.03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010.11.20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\explorer.exe
[2010.11.20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009.10.31 08:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.08.03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009.10.31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2009.08.03 08:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009.07.14 03:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010.11.20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: IASTORV.SYS >
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\drivers\iaStorV.sys
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\drivers\isapnp.sys
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\isapnp.sys
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\isapnp.sys
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\isapnp.sys

< MD5 for: LSASS.EXE >
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_023f7c69767c3edd\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_023e7e05767d22ad\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_02bd4ae48fa2de68\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe
[2011.11.17 08:20:34 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0A10B74FBB437FF9A23F1D5DE4446A83 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_04c1204e8cb39c3f\lsass.exe
[2011.11.17 09:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16915_none_028b374176436a30\lsass.exe
[2011.11.17 09:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.17035_none_02756f8b7653d554\lsass.exe
[2012.06.04 09:51:10 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=79C908CAA6F43021EB05F4C733A927D1 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_04f609a88c8c279c\lsass.exe
[2012.06.02 07:30:31 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=BF63CE11A25F3509129888710D5111FC -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21225_none_0309de288f695654\lsass.exe
[2011.11.17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\SysNative\lsass.exe
[2011.11.17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_0466c45b7371f20d\lsass.exe
[2011.11.17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_044756c773895c5e\lsass.exe
[2011.11.17 08:42:52 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=D21BD47E528CD62E79311FB5DF0150E6 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21092_none_02bb2a0a8fa4d398\lsass.exe

< MD5 for: NDIS.SYS >
[2010.11.20 15:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\SysNative\drivers\ndis.sys
[2010.11.20 15:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
[2009.07.14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009.07.14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVRAID.SYS >
[2009.07.14 03:48:27 | 000,149,056 | ---- | M] (NVIDIA Corporation) MD5=3E38712941E9BB4DDBEE00AFFE3FED3D -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvraid.sys
[2010.11.20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\SysNative\drivers\nvraid.sys
[2010.11.20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvraid.sys
[2010.11.20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\drivers\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SMSS.EXE >
[2009.07.14 03:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_082f99a432e2a661\smss.exe
[2013.03.19 04:57:17 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=498E2A20E145199709CD100CDBA8603D -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22280_none_0a9a7b3b492b4d05\smss.exe
[2013.03.19 05:20:12 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=7180204786A9DED8723B2D8CF3CDD388 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.21490_none_08a94e494c0cfd0a\smss.exe
[2013.08.02 07:06:34 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=CB5DA3E44456D1084BCD87F5B1B3152B -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22411_none_0ae72ec548f19d13\smss.exe
[2013.03.19 05:06:33 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0371DE302FFFF8F086661611BE60848 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18113_none_0a5f8ec22fd235a9\smss.exe
[2013.08.02 02:59:09 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0970A4BC8395659C22BF53D0FADF16F -- C:\Windows\SysNative\smss.exe
[2013.08.02 02:59:09 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0970A4BC8395659C22BF53D0FADF16F -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18229_none_0a5ac2782fd4e6cb\smss.exe
[2013.03.19 05:19:03 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=FA64733BD65F52712F0545F56FDB4BE6 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.17273_none_0838504e32dc743c\smss.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2010.11.20 15:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2013.01.04 07:41:01 | 001,893,224 | ---- | M] (Microsoft Corporation) MD5=5CFB7AB8F9524D1A1E14369DE63B83CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.17206_none_0f6a6af57fd59de6\tcpip.sys
[2013.01.03 07:57:12 | 001,876,824 | ---- | M] (Microsoft Corporation) MD5=692969AB90BDA19F56E27BF89A9260E2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21415_none_0fe8397098fc3d71\tcpip.sys
[2009.07.14 03:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2013.07.06 07:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
[2013.01.03 08:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) MD5=B62A953F2BF3922C8764A29C34A22899 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_112187237d20143a\tcpip.sys
[2013.01.04 07:47:43 | 001,901,416 | ---- | M] (Microsoft Corporation) MD5=B8C1AAC0523E1C33AEB0EF7572144BA2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_11dd678a9616f2c8\tcpip.sys
[2013.07.06 08:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\SysNative\drivers\tcpip.sys
[2013.07.06 08:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009.10.28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2009.10.28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< MD5 for: WS2_32.DLL >
[2010.11.20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\SysNative\ws2_32.dll
[2010.11.20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll
[2009.07.14 03:41:58 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=7083F463788CB34FCC42F565D56F89E8 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_4eaca269e8070c6b\ws2_32.dll
[2010.11.20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\SysWOW64\ws2_32.dll
[2010.11.20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
[2009.07.14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[5 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[3 C:\Windows\SysWOW64\*.tmp files -> C:\Windows\SysWOW64\*.tmp -> ]
[29 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2013.10.17 17:27:49 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Adobe
[2013.10.15 15:57:04 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\AVAST Software
[2013.10.18 17:30:43 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\DAEMON Tools Lite
[2013.10.16 17:34:02 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\DriverCure
[2013.10.15 15:05:53 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Identities
[2013.10.15 16:12:05 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\InstallShield
[2013.10.15 16:24:35 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Logishrd
[2013.10.15 16:24:35 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Logitech
[2013.10.17 20:35:40 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Malwarebytes
[2009.07.14 17:36:38 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Media Center Programs
[2013.10.20 15:19:44 | 000,000,000 | --SD | M] -- C:\Users\Hanes\AppData\Roaming\Microsoft
[2013.10.15 16:25:57 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\NVIDIA
[2013.10.16 17:34:02 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\ParetoLogic
[2013.10.18 18:28:38 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Seznam.cz
[2013.10.19 10:23:55 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Skype
[2013.10.15 18:34:22 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\TS3Client
[2013.10.17 15:19:56 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\vlc
[2013.10.15 17:27:38 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Wargaming.net
[2013.10.15 16:56:56 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\WinRAR

< %APPDATA%\*.exe /s >
[2013.10.17 19:08:44 | 000,110,080 | R--- | M] () -- C:\Users\Hanes\AppData\Roaming\Microsoft\Installer\{86CA3695-A412-4BAE-92B6-49A60C2AC663}\Icon1226A4C5.exe
[2013.10.17 19:08:44 | 000,110,080 | R--- | M] () -- C:\Users\Hanes\AppData\Roaming\Microsoft\Installer\{86CA3695-A412-4BAE-92B6-49A60C2AC663}\IconD7F16134.exe
[2013.10.17 19:08:44 | 000,110,080 | R--- | M] () -- C:\Users\Hanes\AppData\Roaming\Microsoft\Installer\{86CA3695-A412-4BAE-92B6-49A60C2AC663}\IconF7A21AF7.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[3 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >
[3 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[3 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Overwolf" = C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
"OscarEditor" = "C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe" Minimum -- [2010.07.22 14:18:32 | 002,636,800 | ---- | M] ()
"DAEMON Tools Lite" = "F:\Instalace\DAEMON Tools Lite\DTLite.exe" -autorun -- [2013.07.03 15:16:46 | 003,673,184 | ---- | M] (Disc Soft Ltd)
"LiveSupport" = "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2013.10.20 20:42:20 | 000,000,512 | ---- | M] () MD5=5EA74EE16CE9E1FC1A28930B1AB5A7F5 -- C:\PhysicalMBR.bin

< >

< *crack* /s >

< *keygen* /s >

< *AntiWPA* /s >

< *loader* /s >
[2013.08.27 23:15:54 | 001,177,888 | ---- | M] () -- \NVIDIA\DisplayDriver\327.23\Win8_WinVista_Win7_64\English\GFExperience\ExtensionLoader.dll
[2013.08.27 23:15:54 | 001,177,888 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\ExtensionLoader.dll
[2013.07.25 03:43:28 | 000,065,344 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2013.07.25 03:43:30 | 000,067,904 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader64.dll
[2013.07.25 03:43:12 | 000,073,024 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader.dll
[2013.07.25 03:43:12 | 000,080,704 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader64.dll
[2013.08.27 23:15:54 | 001,177,888 | ---- | M] () -- \Program Files\NVIDIA Corporation\Installer2\Display.GFExperience.{7CDD766A-6C52-4125-A10B-8AA0174AA3A9}\ExtensionLoader.dll
[2011.03.02 12:39:58 | 000,054,784 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2013.09.16 14:37:22 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2013.09.16 14:37:22 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2013.09.16 14:37:22 | 000,009,772 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\retina\loader@2x.png
[2013.09.16 14:37:22 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2013.09.16 14:37:22 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2013.09.16 14:37:22 | 000,009,772 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\retina\loader@2x.png
[2013.10.16 22:25:00 | 000,000,065 | ---- | M] () -- \Users\Hanes\AppData\Local\SRDownloader.err
[2013.10.18 18:46:37 | 000,001,096 | ---- | M] () -- \Users\Hanes\AppData\Local\SRDownloader.nast
[2013.10.18 19:16:45 | 000,001,511 | ---- | M] () -- \Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\41X53OZ1\AdLoader[1].htm
[2013.10.18 17:25:22 | 000,141,216 | ---- | M] () -- \Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\41X53OZ1\bi_downloader[1].exe
[2013.10.18 19:16:45 | 000,109,505 | ---- | M] () -- \Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\70JSY9BY\AdLoader-3ce32d357de39fd9427f374be93bd0ac.min[1].js
[2013.10.18 17:29:39 | 000,031,516 | ---- | M] () -- \Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\70JSY9BY\cz.seznam.software.libfoxloader-3.1.2-win32[1].zip
[2013.10.15 15:50:24 | 000,003,705 | ---- | M] () -- \Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9RBVZIJN\lang_loader[1].gif
[2013.10.15 15:49:23 | 000,003,061 | ---- | M] () -- \Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\V3E9I8JY\rmsloaderdelayeddiv[1].js
[2013.10.18 17:30:44 | 000,000,912 | ---- | M] () -- \Users\Hanes\AppData\Roaming\Microsoft\Windows\Recent\Dirt.3.Complete.Edition.2012.FiGHTCLUB.by.Colly.of.PowerUploaders.lnk
[2013.10.16 22:23:08 | 000,905,728 | ---- | M] () -- \Users\Hanes\Desktop\SRDownloader.exe
[2009.07.14 14:25:34 | 002,202,645 | R--- | M] () -- \Windows\Setup\SCRIPTS\Windows7Loader.exe
[2010.11.20 12:09:38 | 000,004,290 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_fi-fi_73a52105efe44483.manifest
[2010.11.20 14:33:18 | 000,004,338 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_zh-cn_344529e2e1c53ac6.manifest
[2012.10.04 19:38:48 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\1eeeafda1c58ef6e778ff768f9a94a6f\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:40:37 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\1eeeafda1c58ef6e778ff768f9a94a6f\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.02.05 15:09:50 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d639f7376b627c8f37f9acbbf7c6234a\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_9c05f879842e1792.manifest
[2011.02.05 15:05:03 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d639f7376b627c8f37f9acbbf7c6234a\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_9c6455949d6c2720.manifest
[2011.02.05 19:34:40 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d639f7376b627c8f37f9acbbf7c6234a\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_9deb553581556a27.manifest
[2011.02.05 15:10:12 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d639f7376b627c8f37f9acbbf7c6234a\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_9e73f1b69a73f09a.manifest
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[3 \Windows\System32\*.tmp files -> \Windows\System32\*.tmp -> ]
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[3 \Windows\SysWOW64\*.tmp files -> \Windows\SysWOW64\*.tmp -> ]
[2009.07.14 03:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 03:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:28:57 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_66dcd6a595588d81\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 07:26:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_66fe4899953f502c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:26:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_67667556ae762a72\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 16:12:39 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_677d175eae65090e\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:38:48 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 04:12:19 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 07:32:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_6971452eab80a50e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 08:20:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_695e76beab8ff095\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 17:17:49 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 17:17:49 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2009.07.14 17:17:49 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2009.07.14 17:17:49 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2009.07.14 17:17:49 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2013.10.17 08:26:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2013.10.17 08:26:31 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2013.10.17 08:26:31 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2013.10.17 08:26:31 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2013.10.17 08:26:31 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009.07.14 04:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 04:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2009.07.14 17:15:51 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 04:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011.02.05 15:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011.02.05 15:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010.11.20 06:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.02.05 19:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.02.05 15:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009.07.14 04:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:45:38 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_0abe3b21dcfb1c4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_0adfad15dce1def6\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:48:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_0b47d9d2f618b93c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:39:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_0b5e7bdaf60797d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:40:37 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 07:53:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_0d3fdb3af3327f5f\api-ms-win-core-libraryloader-l1-1-0.dll

< *minodlogin* /s >

< *tnod* /s >

< *AutoKMS* /s >

< *activator* /s >

< *serial* /s >
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2012.10.05 12:52:37 | 000,847,872 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2010.11.05 03:54:42 | 000,090,112 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2009.07.14 17:17:20 | 000,011,776 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.13 04:02:06 | 000,090,112 | ---- | M] () -- \Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2013.10.17 17:28:55 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\d462f459c4353e2c628e6def1430aed7\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.10.17 17:29:23 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e043ad64456256a8ee5b934e227d9782\System.Runtime.Serialization.ni.dll
[2013.10.17 17:30:32 | 000,396,288 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\845e04461d3d879b24c5b0d30947050a\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.10.17 17:31:31 | 003,073,536 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\dbfc784cc4bde7b16fb471e14563569d\System.Runtime.Serialization.ni.dll
[2013.10.18 17:46:48 | 000,311,296 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\ad3522eafb95969623aeef7c389246bd\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.10.18 17:47:02 | 002,658,304 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\b5faab90a38802d89ccf6f9ac4bff440\System.Runtime.Serialization.ni.dll
[2013.10.17 17:43:34 | 003,424,768 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\2667455537b2f323b4c0039602cdacad\System.Runtime.Serialization.ni.dll
[2013.10.18 17:49:43 | 000,376,832 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\cd2da26160fba6400b0353e558e35da6\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2010.03.18 13:16:28 | 001,026,936 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\System.Runtime.Serialization.dll.amd64
[2010.03.18 13:16:28 | 001,026,936 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\System.Runtime.Serialization.dll.x86
[2013.10.15 15:29:38 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.10.17 15:45:15 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.10.15 15:29:37 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2013.10.17 15:45:14 | 001,039,040 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012.10.05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013.09.11 06:06:54 | 001,039,040 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010.03.18 13:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2010.06.15 02:33:16 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.06.15 02:33:16 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2009.06.10 22:40:06 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.05 03:54:38 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2012.10.05 12:52:38 | 000,847,872 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013.09.11 06:06:54 | 001,039,040 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.dll
[2010.03.18 13:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2010.06.15 02:48:20 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.06.15 02:48:20 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2010.11.20 05:55:00 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17514_hu-hu_1778ab4419ab99ad.manifest
[2010.11.20 05:50:38 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17514_nl-nl_28520112cd09eae9.manifest
[2010.11.20 05:54:56 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17514_sv-se_0bbde5ad62777806.manifest
[2010.11.20 06:45:14 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17514_zh-cn_493a46a2345c6076.manifest
[2010.11.20 06:43:54 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17514_zh-tw_48d9179c34a52b86.manifest
[2012.10.06 22:21:19 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_ar-sa_da88077b472a2e15.manifest
[2012.10.06 22:23:12 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_da-dk_624b45bba15a625c.manifest
[2012.10.06 19:58:29 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_de-de_6290266ba1262012.manifest
[2012.10.06 22:26:12 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_el-gr_8f75741bbf791474.manifest
[2012.10.06 20:17:26 | 000,000,531 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_en-us_8f6cbf57bf7f3b35.manifest
[2012.10.06 22:21:09 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_es-es_8f71a269bf7ae778.manifest
[2012.10.06 22:25:26 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_fi-fi_bd3e9597dd22b01e.manifest
[2012.10.06 20:22:01 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_fr-fr_bce648e5dd638fa6.manifest
[2012.10.06 22:29:10 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_he-il_17efd446191e56a8.manifest
[2012.10.06 22:45:43 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_hu-hu_179e87b41958ea6a.manifest
[2012.10.06 22:43:45 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_it-it_45132e3037419298.manifest
[2012.10.06 21:09:21 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_ja-jp_72963f3c55221ed5.manifest
[2012.10.06 21:08:31 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_ko-kr_9ff97a4a731596ef.manifest
[2012.10.06 22:26:16 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_nb-no_284d6adaccd89213.manifest
[2012.10.06 22:40:36 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_nl-nl_2877dd82ccb73ba6.manifest
[2012.10.06 22:46:10 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_pl-pl_834d8b370896f692.manifest
[2012.10.06 22:24:57 | 000,001,635 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_pt-br_8314936b08c090ce.manifest
[2012.10.06 22:40:29 | 000,001,632 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_pt-pt_82ff0e2708d0a0d2.manifest
[2012.10.06 22:34:25 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_ru-ru_ddcaec3944b79106.manifest
[2012.10.06 22:49:44 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_sv-se_0be3c21d6224c8c3.manifest
[2012.10.06 22:49:51 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_tr-tr_38be08d38081ac1a.manifest
[2012.10.06 21:22:18 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_zh-cn_496023123409b133.manifest
[2012.10.06 21:08:05 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_zh-tw_48fef40c34527c43.manifest
[2012.10.06 23:30:46 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_ar-sa_c3ba49cf60d1a80d.manifest
[2012.10.06 23:30:50 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_da-dk_4b7d880fbb01dc54.manifest
[2012.10.06 20:17:45 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_de-de_4bc268bfbacd9a0a.manifest
[2012.10.06 23:30:50 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_el-gr_78a7b66fd9208e6c.manifest
[2012.10.06 20:18:44 | 000,000,531 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_en-us_789f01abd926b52d.manifest
[2012.10.06 23:28:38 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_es-es_78a3e4bdd9226170.manifest
[2012.10.06 23:30:47 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_fi-fi_a670d7ebf6ca2a16.manifest
[2012.10.06 20:02:41 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_fr-fr_a6188b39f70b099e.manifest
[2012.10.06 23:30:53 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_he-il_0122169a32c5d0a0.manifest
[2012.10.07 00:17:29 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_hu-hu_00d0ca0833006462.manifest
[2012.10.07 00:13:25 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_it-it_2e45708450e90c90.manifest
[2012.10.06 21:14:51 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_ja-jp_5bc881906ec998cd.manifest
[2012.10.06 21:00:18 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_ko-kr_892bbc9e8cbd10e7.manifest
[2012.10.06 23:29:24 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_nb-no_117fad2ee6800c0b.manifest
[2012.10.07 00:21:44 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_nl-nl_11aa1fd6e65eb59e.manifest
[2012.10.07 00:08:03 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_pl-pl_6c7fcd8b223e708a.manifest
[2012.10.06 23:27:40 | 000,001,635 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_pt-br_6c46d5bf22680ac6.manifest
[2012.10.07 00:20:45 | 000,001,632 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_pt-pt_6c31507b22781aca.manifest
[2012.10.06 23:32:55 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_ru-ru_c6fd2e8d5e5f0afe.manifest
[2012.10.07 00:09:28 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_sv-se_f51604717bcc42bb.manifest
[2012.10.07 00:05:27 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_tr-tr_21f04b279a292612.manifest
[2012.10.06 21:20:02 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_zh-cn_329265664db12b2b.manifest
[2012.10.06 21:04:52 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_zh-tw_323136604df9f63b.manifest
[2012.10.05 22:09:22 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_ar-sa_da66fe5d47789091.manifest
[2012.10.05 22:03:20 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_da-dk_622a3c9da1a8c4d8.manifest
[2012.10.05 20:10:04 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_de-de_626f1d4da174828e.manifest
[2012.10.05 22:02:37 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_el-gr_8f546afdbfc776f0.manifest
[2012.10.05 20:09:41 | 000,000,531 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_en-us_8f4bb639bfcd9db1.manifest
[2012.10.05 21:54:09 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_es-es_8f50994bbfc949f4.manifest
[2012.10.05 22:02:40 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_fi-fi_bd1d8c79dd71129a.manifest
[2012.10.05 20:08:58 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_fr-fr_bcc53fc7ddb1f222.manifest
[2012.10.05 22:01:09 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_he-il_17cecb28196cb924.manifest
[2012.10.05 22:12:17 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_hu-hu_177d7e9619a74ce6.manifest
[2012.10.05 22:12:18 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_it-it_44f22512378ff514.manifest
[2012.10.05 21:11:25 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_ja-jp_7275361e55708151.manifest
[2012.10.05 21:10:37 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_ko-kr_9fd8712c7363f96b.manifest
[2012.10.05 22:02:32 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_nb-no_282c61bccd26f48f.manifest
[2012.10.05 22:12:15 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_nl-nl_2856d464cd059e22.manifest
[2012.10.05 22:12:17 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_pl-pl_832c821908e5590e.manifest
[2012.10.05 21:51:35 | 000,001,635 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_pt-br_82f38a4d090ef34a.manifest
[2012.10.05 22:12:12 | 000,001,632 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_pt-pt_82de0509091f034e.manifest
[2012.10.05 22:03:52 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_ru-ru_dda9e31b4505f382.manifest
[2012.10.05 22:12:13 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_sv-se_0bc2b8ff62732b3f.manifest
[2012.10.05 22:12:16 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_tr-tr_389cffb580d00e96.manifest
[2012.10.05 21:15:11 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_zh-cn_493f19f4345813af.manifest
[2012.10.05 21:15:20 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_zh-tw_48ddeaee34a0debf.manifest
[2012.10.05 21:54:03 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_ar-sa_c395599f61238589.manifest
[2012.10.05 21:54:13 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_da-dk_4b5897dfbb53b9d0.manifest
[2012.10.05 19:58:55 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_de-de_4b9d788fbb1f7786.manifest
[2012.10.05 21:53:49 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_el-gr_7882c63fd9726be8.manifest
[2012.10.05 19:57:17 | 000,000,531 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_en-us_787a117bd97892a9.manifest
[2012.10.05 21:48:11 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_es-es_787ef48dd9743eec.manifest
[2012.10.05 21:52:37 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_fi-fi_a64be7bbf71c0792.manifest
[2012.10.05 20:00:18 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_fr-fr_a5f39b09f75ce71a.manifest
[2012.10.05 21:54:34 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_he-il_00fd266a3317ae1c.manifest
[2012.10.05 21:59:30 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_hu-hu_00abd9d8335241de.manifest
[2012.10.05 21:59:26 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_it-it_2e208054513aea0c.manifest
[2012.10.05 21:01:19 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_ja-jp_5ba391606f1b7649.manifest
[2012.10.05 21:03:36 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_ko-kr_8906cc6e8d0eee63.manifest
[2012.10.05 21:54:16 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_nb-no_115abcfee6d1e987.manifest
[2012.10.05 22:00:42 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_nl-nl_11852fa6e6b0931a.manifest
[2012.10.05 22:00:50 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_pl-pl_6c5add5b22904e06.manifest
[2012.10.05 21:48:47 | 000,001,635 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_pt-br_6c21e58f22b9e842.manifest
[2012.10.05 22:00:41 | 000,001,632 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_pt-pt_6c0c604b22c9f846.manifest
[2012.10.05 21:54:16 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_ru-ru_c6d83e5d5eb0e87a.manifest
[2012.10.05 22:00:43 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_sv-se_f4f114417c1e2037.manifest
[2012.10.05 22:00:35 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_tr-tr_21cb5af79a7b038e.manifest
[2012.10.05 21:03:52 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_zh-cn_326d75364e0308a7.manifest
[2012.10.05 21:03:53 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_zh-tw_320c46304e4bd3b7.manifest
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll

[3 \Windows\System32\*.tmp files -> \Windows\System32\*.tmp -> ]
[2009.07.14 17:17:13 | 000,005,120 | ---- | M] () -- \Windows\System32\cs-CZ\serialui.dll.mui
[2009.07.14 02:00:40 | 000,094,208 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\serial.sys
[2009.06.10 22:37:50 | 000,038,400 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\grserial.sys
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\SysWOW64\serialui.dll
[3 \Windows\SysWOW64\*.tmp files -> \Windows\SysWOW64\*.tmp -> ]
[2009.07.14 17:17:13 | 000,005,120 | ---- | M] () -- \Windows\SysWOW64\cs-CZ\serialui.dll.mui
[2009.07.14 17:17:19 | 000,011,776 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_1c215c9ac50719c5\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2010.11.05 03:54:38 | 000,011,776 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_1e527062c1f59d5f\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2009.07.14 17:17:22 | 000,005,120 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_aa5fd338fd5bcb23\serialui.dll.mui
[2009.07.14 03:41:54 | 000,017,920 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360\serialui.dll
[2009.07.14 17:17:32 | 000,090,112 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_b96904386c2fe002\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:54:42 | 000,090,112 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_bb9a1800691e639c\System.RunTime.Serialization.Resources.dll
[2009.07.14 17:17:25 | 000,009,728 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_20ab142d65ed6acc\serial.sys.mui
[2009.07.14 02:00:40 | 000,094,208 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\serial.sys
[2009.06.10 22:40:06 | 000,131,072 | ---- | M] () -- \Windows\winsxs\amd64_netfx-system.runtim..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_a9d1bee515273f56\System.Runtime.Serialization.Formatters.Soap.dll
[2009.06.10 22:37:50 | 000,038,400 | ---- | M] () -- \Windows\winsxs\amd64_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_ce9ed3064deed3aa\grserial.sys
[2009.06.10 22:30:46 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.16385_none_5943b25a748cb06c\System.Runtime.Serialization.dll
[2012.10.06 12:53:01 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.17136_none_593e9c4e749147df\System.Runtime.Serialization.dll
[2012.10.06 12:56:09 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.21337_none_4270dea28e38c1d7\System.Runtime.Serialization.dll
[2010.11.05 03:52:16 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722\System.Runtime.Serialization.dll
[2012.10.05 12:52:38 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b\System.Runtime.Serialization.dll
[2012.10.06 12:56:09 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53\System.Runtime.Serialization.dll
[2009.06.10 22:30:43 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_941abf24c884ab05\System.Runtime.Serialization.dll
[2012.10.06 12:53:00 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_9415a918c8894278\System.Runtime.Serialization.dll
[2012.10.06 12:56:08 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_7d47eb6ce230bc70\System.Runtime.Serialization.dll
[2010.11.05 03:52:08 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb\System.Runtime.Serialization.dll
[2012.10.05 12:52:37 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4\System.Runtime.Serialization.dll
[2012.10.06 12:56:08 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec\System.Runtime.Serialization.dll
[2013.10.17 08:26:05 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2013.10.17 08:26:05 | 000,017,792 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8_kdcom.dll_db5e7744
[2009.07.14 17:17:49 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_aa5fd338fd5bcb23_serialui.dll.mui_7d29d2a3
[2009.07.14 04:57:29 | 000,017,920 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360_serialui.dll_bea29328
[2009.07.14 17:17:47 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed_serialui.dll.mui_7d29d2a3
[2009.07.14 04:58:37 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2009.07.14 04:15:17 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_6daa7ec5c65bf5bc.manifest
[2011.02.05 15:10:43 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16757_none_6dccf6b5c641c933.manifest
[2011.02.05 15:05:47 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.20897_none_6e2b53d0df7fd8c1.manifest
[2011.02.05 19:35:45 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2011.02.05 15:11:05 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.21655_none_703aeff2dc87a23b.manifest
[2009.07.14 04:11:30 | 000,000,868 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_88b1c48f2026fe3f.manifest
[2009.07.14 04:26:23 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.16385_none_5943b25a748cb06c.manifest
[2012.10.06 20:44:48 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.17136_none_593e9c4e749147df.manifest
[2012.10.06 21:00:33 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.21337_none_4270dea28e38c1d7.manifest
[2010.11.20 06:21:24 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722.manifest
[2012.10.05 20:18:30 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b.manifest
[2012.10.05 20:10:31 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53.manifest
[2009.07.14 04:27:09 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_941abf24c884ab05.manifest
[2012.10.06 20:46:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_9415a918c8894278.manifest
[2012.10.06 21:01:29 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_7d47eb6ce230bc70.manifest
[2010.11.20 06:22:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb.manifest
[2012.10.05 20:19:07 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4.manifest
[2012.10.05 20:11:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec.manifest
[2009.07.14 03:52:33 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896.manifest
[2012.10.06 20:07:20 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.17136_none_a6a4fe887487d009.manifest
[2012.10.06 20:58:54 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.21337_none_8fd740dc8e2f4a01.manifest
[2010.11.20 05:06:16 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c.manifest
[2012.10.05 19:15:39 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285.manifest
[2012.10.05 19:17:50 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d.manifest
[2009.07.14 17:16:38 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0.manifest
[2012.10.06 22:42:01 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_cs-cz_3450454183d3f023.manifest
[2012.10.07 00:05:03 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_cs-cz_1d8287959d7b6a1b.manifest
[2012.10.05 22:12:17 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_cs-cz_342f3c238422529f.manifest
[2012.10.05 21:59:28 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_cs-cz_1d5d97659dcd4797.manifest
[2009.07.14 03:51:52 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9.manifest
[2012.10.06 20:11:48 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.17136_none_d6e834229c2ed13c.manifest
[2012.10.06 21:03:01 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.21337_none_c01a7676b5d64b34.manifest
[2010.11.20 05:05:38 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f.manifest
[2012.10.05 19:15:03 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8.manifest
[2012.10.05 19:17:15 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0.manifest
[2009.07.14 03:57:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b.manifest
[2012.10.06 20:09:38 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_dbc2dfefdd056b7e.manifest
[2012.10.06 21:00:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_c4f52243f6ace576.manifest
[2010.11.20 05:10:46 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1.manifest
[2012.10.05 19:19:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa.manifest
[2012.10.05 19:22:10 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2.manifest
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2009.07.14 17:17:20 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7600.16385_cs-cz_d5c3552dd9b47144\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 23:14:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896\System.Runtime.Serialization.dll
[2012.10.06 12:54:26 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.17136_none_a6a4fe887487d009\System.Runtime.Serialization.dll
[2012.10.06 12:57:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.21337_none_8fd740dc8e2f4a01\System.Runtime.Serialization.dll
[2010.11.05 03:52:39 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c\System.Runtime.Serialization.dll
[2012.10.05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285\System.Runtime.Serialization.dll
[2012.10.06 12:57:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d\System.Runtime.Serialization.dll
[2009.07.14 17:17:32 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0\System.RunTime.Serialization.Resources.dll
[2009.07.14 17:17:32 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_cs-cz_3450454183d3f023\System.RunTime.Serialization.Resources.dll
[2009.07.14 17:17:32 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_cs-cz_1d8287959d7b6a1b\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:02:06 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_cs-cz_342f3c238422529f\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:37:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_cs-cz_1d5d97659dcd4797\System.RunTime.Serialization.Resources.dll
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9\System.Runtime.Serialization.dll
[2012.10.06 12:54:25 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.17136_none_d6e834229c2ed13c\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.21337_none_c01a7676b5d64b34\System.Runtime.Serialization.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f\System.Runtime.Serialization.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0\System.Runtime.Serialization.dll
[2009.07.14 17:17:21 | 000,011,776 | ---- | M] () -- \Windows\winsxs\wow64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_267606ecf967dbc0\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\winsxs\wow64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_28a71ab4f6565f5a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.07.14 17:17:13 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed\serialui.dll.mui
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2009.07.14 17:17:32 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_5d4a68b4b3d26ecc\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_5f7b7c7cb0c0f266\System.RunTime.Serialization.Resources.dll
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b\System.Runtime.Serialization.dll
[2012.10.06 12:54:25 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_dbc2dfefdd056b7e\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_c4f52243f6ace576\System.Runtime.Serialization.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1\System.Runtime.Serialization.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2\System.Runtime.Serialization.dll

< *w7lxe* /s >

< End of report >

OTL Extras logfile created on: 20.10.2013 20:40:59 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Hanes\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16721)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,93 Gb Total Physical Memory | 2,07 Gb Available Physical Memory | 52,75% Memory free
7,86 Gb Paging File | 5,17 Gb Available in Paging File | 65,79% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 117,09 Gb Total Space | 74,06 Gb Free Space | 63,25% Space Free | Partition Type: NTFS
Drive D: | 931,51 Gb Total Space | 177,89 Gb Free Space | 19,10% Space Free | Partition Type: NTFS
Drive E: | 100,00 Mb Total Space | 86,24 Mb Free Space | 86,25% Space Free | Partition Type: NTFS
Drive F: | 115,70 Gb Total Space | 90,29 Gb Free Space | 78,04% Space Free | Partition Type: NTFS

Computer Name: HANES-PC | User Name: Hanes | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-3610317745-1078608998-3150650337-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{30E9DCC8-0912-43F7-9A3D-AEE45ED53CFA}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{3F4D03D6-4A53-4F8D-B510-FAEE573E7C32}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{66C4D959-EC61-40C1-8D42-2984328E2FE6}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{B4AFDBB7-8C5C-48B3-B335-54A10A8AF39A}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{001CE47F-CB1D-45D3-B79C-76AC71D76B88}" = protocol=6 | dir=in | app=d:\hry\dirt 3 full\hra\dirt3_game.exe |
"{04D3CC32-D4C2-4182-8781-1CCE2298DDFF}" = protocol=17 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\worldoftanks.exe |
"{142644B4-F8CD-4EF8-AA35-7D7BFB2DA89B}" = protocol=17 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\wotlauncher.exe |
"{3AE5E706-F55E-4B19-A470-FE3A85D9CA68}" = protocol=6 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\worldoftanks.exe |
"{42A9C872-A445-4715-8648-7CD35217D582}" = protocol=6 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\wotlauncher.exe |
"{510DE2B1-D9B8-4363-96D0-53889B05BAD3}" = protocol=6 | dir=in | app=d:\lfs\lfs.exe |
"{8968E9B5-237A-472C-9911-6A4ABF312801}" = protocol=17 | dir=in | app=d:\hry\dirt 3 full\hra\dirt3_game.exe |
"{89BAAC5D-5036-4CAC-A36C-A976EE6C356B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{CD82441C-0E13-4AD4-881E-1DC0287C138C}" = protocol=17 | dir=in | app=d:\lfs\lfs.exe |
"TCP Query User{11CD509E-10EC-4D02-8D19-4E9DE7B748AF}D:\nikolas hry\world_of_tanks_ct\worldoftanks.exe" = protocol=6 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\worldoftanks.exe |
"TCP Query User{262DDB85-0E6B-4745-A5CB-342709CD810C}D:\torenty\utorrent.exe" = protocol=6 | dir=in | app=d:\torenty\utorrent.exe |
"TCP Query User{44F3917E-2BE9-4587-92F1-81F4480C1F1A}D:\nikolas hry\sindicate konecne rozjety....doufam\ekura\client.bin" = protocol=6 | dir=in | app=d:\nikolas hry\sindicate konecne rozjety....doufam\ekura\client.bin |
"TCP Query User{5402917E-DE48-43E8-BC1E-CA3A7A448C84}D:\tanky\hra\worldoftanks.exe" = protocol=6 | dir=in | app=d:\tanky\hra\worldoftanks.exe |
"TCP Query User{76A234D3-1B87-48E9-BCC9-300A4C67CB56}D:\tanky\hra\wotlauncher.exe" = protocol=6 | dir=in | app=d:\tanky\hra\wotlauncher.exe |
"TCP Query User{A567B888-4320-4324-8025-C5D4416A4D58}D:\nikolas hry\world_of_tanks_ct\wotlauncher.exe" = protocol=6 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\wotlauncher.exe |
"TCP Query User{AA7C38AA-2643-4554-8128-AC764709F92B}C:\users\hanes\appdata\local\temp\rar$ex98.080\teamspeak3-server_win64\ts3server_win64.exe" = protocol=6 | dir=in | app=c:\users\hanes\appdata\local\temp\rar$ex98.080\teamspeak3-server_win64\ts3server_win64.exe |
"TCP Query User{D7747E94-396C-4EA2-A739-3950F1C8F1C6}C:\users\hanes\appdata\local\temp\rar$ex75.784\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe" = protocol=6 | dir=in | app=c:\users\hanes\appdata\local\temp\rar$ex75.784\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe |
"TCP Query User{EE22FE5C-EBF8-4CEC-922D-4A48CFF7A97B}D:\nikolas hry\nfs\speed2.exe" = protocol=6 | dir=in | app=d:\nikolas hry\nfs\speed2.exe |
"UDP Query User{16AD8263-C7F6-4CC1-A515-FDBF74D60BDC}D:\nikolas hry\world_of_tanks_ct\worldoftanks.exe" = protocol=17 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\worldoftanks.exe |
"UDP Query User{1E7E4EC3-AC07-43F0-8D7B-17A2C8D92F3B}C:\users\hanes\appdata\local\temp\rar$ex98.080\teamspeak3-server_win64\ts3server_win64.exe" = protocol=17 | dir=in | app=c:\users\hanes\appdata\local\temp\rar$ex98.080\teamspeak3-server_win64\ts3server_win64.exe |
"UDP Query User{27CA03EC-3896-48BF-BB26-D444A367A443}D:\nikolas hry\world_of_tanks_ct\wotlauncher.exe" = protocol=17 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\wotlauncher.exe |
"UDP Query User{93CA0904-4FA8-48B8-B10D-D1AC06262C4B}D:\tanky\hra\wotlauncher.exe" = protocol=17 | dir=in | app=d:\tanky\hra\wotlauncher.exe |
"UDP Query User{A3CB45F7-D3E9-4D6C-AD41-538A8217B04B}D:\tanky\hra\worldoftanks.exe" = protocol=17 | dir=in | app=d:\tanky\hra\worldoftanks.exe |
"UDP Query User{A9BE60AB-6849-4CDC-8CA5-7AD87B6021F4}C:\users\hanes\appdata\local\temp\rar$ex75.784\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe" = protocol=17 | dir=in | app=c:\users\hanes\appdata\local\temp\rar$ex75.784\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe |
"UDP Query User{AF74227C-7348-427D-B82B-9B36DAD8386A}D:\nikolas hry\nfs\speed2.exe" = protocol=17 | dir=in | app=d:\nikolas hry\nfs\speed2.exe |
"UDP Query User{D6105743-0EFF-4371-BA22-6B5D8AB85646}D:\torenty\utorrent.exe" = protocol=17 | dir=in | app=d:\torenty\utorrent.exe |
"UDP Query User{E808A846-6F1D-4A35-8621-86C1FF0300B1}D:\nikolas hry\sindicate konecne rozjety....doufam\ekura\client.bin" = protocol=17 | dir=in | app=d:\nikolas hry\sindicate konecne rozjety....doufam\ekura\client.bin |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1444D2EE-C7AD-44A8-844F-2634B49353D1}" = Logitech Gaming Software 5.10
"{690285C2-2481-44FB-8402-162EA970A6DD}" = Logitech Gaming Software
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{86CA3695-A412-4BAE-92B6-49A60C2AC663}" = SpyHunter
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{A324DC11-FF02-3CE8-9D6F-67EBC006D970}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Ovladač 3D Vision 327.23
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 327.23
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 327.23
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Ovladač řídící jednotky 3D Vision 326.01
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Systémový software PhysX 9.13.0725
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizace NVIDIA 8.3.14
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Ovladač HD audia 1.3.26.4
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 1.2.5
"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64
"{DF446558-ADF7-4884-9B2D-281979CCE71F}" = Qualcomm Atheros Killer Network Manager
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Logitech Gaming Software" = Logitech Gaming Software 8.50
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"VLC media player" = VLC media player 2.1.0
"WinRAR archiver" = WinRAR 4.00 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0C9D0200-FA32-44B7-BBB3-7C03F700C4A0}" = Sound Blaster X-Fi
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812CT}_is1" = World of Tanks - Common Test
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1" = World of Tanks
"{240C3DDD-C5E9-4029-9DF7-95650D040CF2}" = Intel(R) USB 3.0 eXtensible Host Controller Driver
"{26A24AE4-039D-4CA4-87B4-2F83217040FF}" = Java 7 Update 45
"{434D0FA0-1558-4D8E-AC3D-BD1000008400}" = DiRT 3
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.9
"{5016185F-05AF-455F-AA70-6B6E5D6D4E70}" = AVerTV 3D
"{53C63F43-B827-42D9-8886-4698D91EA33B}" = System Requirements Lab for Intel
"{7B5AA67E-FEA0-40BB-BAB5-CA56645A589C}" = NVIDIA PhysX
"{8FB1B528-E260-451E-9B55-E9152F94B80B}" = Microsoft Games for Windows - LIVE Redistributable
"{92C7D009-A464-4948-A980-7A3E28CB2F49}" = Richard Burns Rally
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.8 Game
"{D8A790CB-CF32-4135-AAAE-6BA5A75C5DBF}" = OSCAR Editor
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F9466082-90E9-4BE4-92F0-CF0AF195B0CF}" = 325 USB PC Camera _beta
"{F97E3841-CA9D-4964-9D64-26066241D26F}" = Microsoft Games for Windows - LIVE
"{FCFCFCFC-FCFC-FCFC-FCFC-FCFCFCFCFCFC}_is1" = DiRT 3 Profile Import version 1.0
"Avast" = avast! Free Antivirus
"AVerMedia A835 USB DVB-T" = AVerMedia A835 USB DVB-T 8.2.64.64
"Creative Software AutoUpdate" = Creative Software AutoUpdate
"DAEMON Tools Lite" = DAEMON Tools Lite
"GFWL_{434D0FA0-1558-4D8E-AC3D-BD1000008400}" = DiRT 3
"Google Chrome" = Google Chrome
"Host OpenAL" = Host OpenAL
"InstallShield_{5016185F-05AF-455F-AA70-6B6E5D6D4E70}" = AVerTV 3D
"InstallShield_{D8A790CB-CF32-4135-AAAE-6BA5A75C5DBF}" = Anti-Vibrate Oscar Editor
"InstallShield_{DF446558-ADF7-4884-9B2D-281979CCE71F}" = Qualcomm Atheros Killer Network Manager
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware verze 1.75.0.1300
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OpenAL" = OpenAL
"RBRTM" = RBR Tournament plugin (remove only)
"RBRTrack574" = RBR Sorica (remove only)
"SysInfo" = Creative System Information

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3610317745-1078608998-3150650337-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"TeamSpeak 3 Client" = TeamSpeak 3 Client

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3610317745-1078608998-3150650337-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"TeamSpeak 3 Client" = TeamSpeak 3 Client

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 19.10.2013 15:10:45 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 19.10.2013 15:10:45 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 19.10.2013 15:10:45 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 20.10.2013 2:25:50 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 20.10.2013 2:25:50 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 20.10.2013 2:25:50 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 20.10.2013 7:59:35 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 20.10.2013 7:59:35 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 20.10.2013 8:37:57 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 20.10.2013 8:37:57 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

[ System Events ]
Error - 16.10.2013 18:24:05 | Computer Name = Hanes-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (23:45:58, ?16.?10.?2013) bylo neočekávané.

Error - 17.10.2013 2:31:01 | Computer Name = Hanes-PC | Source = DCOM | ID = 10016
Description =

Error - 17.10.2013 7:47:15 | Computer Name = Hanes-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (13:45:45, ?17.?10.?2013) bylo neočekávané.

Error - 17.10.2013 7:47:18 | Computer Name = HANES-PC | Source = BugCheck | ID = 1001
Description =

Error - 17.10.2013 8:44:57 | Computer Name = Hanes-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (13:53:01, ?17.?10.?2013) bylo neočekávané.

Error - 17.10.2013 9:07:04 | Computer Name = Hanes-PC | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: cdrom

Error - 17.10.2013 13:05:18 | Computer Name = Hanes-PC | Source = Service Control Manager | ID = 7031
Description = Služba avast! Antivirus byla nečekaně ukončena. Stalo se to 1 krát.
Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.

Error - 18.10.2013 8:53:14 | Computer Name = Hanes-PC | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: cdrom

Error - 20.10.2013 8:37:15 | Computer Name = Hanes-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (14:35:38, ?20.?10.?2013) bylo neočekávané.

Error - 20.10.2013 11:45:48 | Computer Name = Hanes-PC | Source = Service Control Manager | ID = 7031
Description = Služba avast! Antivirus byla nečekaně ukončena. Stalo se to 1 krát.
Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.


< End of report >

Log z Mbam

Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.10.20.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16721
Hanes :: HANES-PC [administrátor]

Ochrana: Povolena

20.10.2013 20:16:29
MBAM-log-2013-10-20 (22-10-46).txt

Typ: Kompletní kontrola (C:\|D:\|E:\|F:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 785909
Uplynulý čas: 1 hodin, 33 minut, 11 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 1
HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C} (PUP.Optional.OptimzerPro.A) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 1
C:\Users\Hanes\Documents\Optimizer Pro (PUP.Optional.OptimizerPro.A) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 15
C:\Users\Hanes\AppData\Local\Application Data\Bundled software uninstaller\bi_client.exe (PUP.Optional.Somoto.A) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\41X53OZ1\bi_downloader[1].exe (PUP.Optional.Somoto.A) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\70JSY9BY\BiTool[1].dll (PUP.Optional.Somoto) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\AppData\Local\Temp\bitool.dll (PUP.Optional.Somoto) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\AppData\Local\Temp\nsb1E11.tmp (PUP.Optional.Somoto.A) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\AppData\Local\Temp\OptimizerPro.exe (PUP.Optional.OptimizerPro.A) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\Downloads\DTLite4471-0335.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\Downloads\GotClip_Setup.exe (PUP.Optional.HandyUpdater.A) -> Nebyla provedena žádná instrukce.
D:\Hry\Angry Birds\Crack.exe (PUP.Riskware.Patcher) -> Nebyla provedena žádná instrukce.
D:\Instalace Hry\Medal of Honour\MOH_CRACK_Antixrist.rar (Riskware.Tool.CK) -> Nebyla provedena žádná instrukce.
D:\Nikolas Hry\SINDICATE KONECNE ROZJETY....DOUFAM\Data.dll (Trojan.Banker) -> Nebyla provedena žádná instrukce.
D:\Nikolas Hry\SMB\Uninstall.exe (Malware.Packer.Krunchy) -> Nebyla provedena žádná instrukce.
D:\Programy\DVD Fab\Patch.rar (Trojan.MSIL.Disfa) -> Nebyla provedena žádná instrukce.
D:\Programy\Malwarebytes Anti-Malware Pro v1.75.0.1300 Incl Keygen-BRD\Keygen-BRD\Keygen.exe (Dont.Steal.Our.Software) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\Documents\Optimizer Pro\CookiesException.txt (PUP.Optional.OptimizerPro.A) -> Nebyla provedena žádná instrukce.

(konec)

Vsechny nalezy nechte odstranit. Po restartu test zopakujte a napiste, zda neco nasel.

Jak je to s legalitou systemu? Ultimate neni zrovna bezna domaci verze

Dobré ráno,
se systémem je vše v pořádku, Mbam již nic nenašel ,ale problém přetrvává ,po restartu jsem musel vypnout štíty avastu abych se sem vůbec dostal.

Achjo A ten crack na windows tam je tedy proc?

MBAM je taky cracknute

Avast preinstalujte

přiznávam se Mbam sem zlegalizoval abych měl alespoň nějakou ochranu v PC když jsem musel vypínat avast. již odinstalováno. ted mi projistotu zase zmizela mechanika a zůstala jen virtuální. teď modrá smrt a psalo to neco o memory clock disk ,po restartu mechanika už je

No jo, tak to chodi, kdyz je system cracknuty

A pravidla fora hovori jasne http://forum.viry.cz/viewtopic.php?f=12&t=115512

Pomáhat NELZE:
2) Pokud stroj uživatele prokazatelně obsahuje nelegální hostitelský čí ochranný software
(operační systém, antivir, firewall, atd.), je nutné navést uživatele k nápravě, např. skrze neplacený software,
a začít řešit, až v době kdy je PC "v pořádku". V případě že uživatel nechce na pravidla přistoupit,
je nutné jej vyzvat ať fórum opustí, a vrátí se až je splní.

Zkuste treba obnovu systemu k datu, kdy to jeste vsechno fungovalo.