OTL logfile created on: 26. 12. 2013 16:02:08 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Turbo\Downloads
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16476)
Locale: 0000041b | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy
2,99 Gb Total Physical Memory | 1,83 Gb Available Physical Memory | 61,09% Memory free
5,98 Gb Paging File | 4,53 Gb Available in Paging File | 75,81% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 254,14 Gb Total Space | 39,42 Gb Free Space | 15,51% Space Free | Partition Type: NTFS
Drive D: | 29,00 Gb Total Space | 28,04 Gb Free Space | 96,72% Space Free | Partition Type: NTFS
Computer Name: TURBO-PC | User Name: Turbo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013/12/26 10:45:04 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Turbo\Downloads\OTL.exe
PRC - [2013/12/23 21:03:56 | 001,862,536 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
PRC - [2013/11/28 21:27:22 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013/09/12 12:06:22 | 001,337,752 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe
PRC - [2013/09/12 12:06:06 | 005,110,672 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
PRC - [2013/08/02 01:52:57 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2013/05/10 08:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012/11/23 03:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2012/05/15 10:27:34 | 000,857,920 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
PRC - [2012/05/15 01:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2011/01/11 21:32:38 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files\Lenovo\YouCam\YCMMirage.exe
PRC - [2010/06/13 19:59:20 | 000,800,032 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
PRC - [2010/06/13 19:59:20 | 000,628,000 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
PRC - [2010/02/06 10:25:27 | 003,122,528 | ---- | M] (Lenovo) -- C:\Program Files\Lenovo\VeriFace\PManage.exe
PRC - [2009/12/23 18:39:04 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2009/12/19 03:50:58 | 000,665,504 | ---- | M] (Lenovo) -- C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe
PRC - [2009/12/17 07:33:56 | 004,114,368 | ---- | M] (Lenovo(beijing) Limited) -- C:\Program Files\Lenovo\Energy Management\utility.exe
PRC - [2009/12/17 07:31:22 | 006,223,808 | ---- | M] (Lenovo (Beijing) Limited) -- C:\Program Files\Lenovo\Energy Management\Energy Management.exe
PRC - [2009/12/09 09:48:26 | 002,320,920 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2009/12/09 09:48:24 | 000,268,824 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2009/11/24 10:36:58 | 000,501,640 | ---- | M] (ELAN Microelectronic Corp.) -- C:\Program Files\Elantech\ETDCtrl.exe
PRC - [2009/11/16 10:07:20 | 000,487,992 | ---- | M] (Conexant Systems, Inc.) -- C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent.exe
PRC - [2009/09/14 14:50:20 | 000,299,008 | ---- | M] () -- C:\Genius\ioCentre\gMouseTask.exe
PRC - [2009/09/03 10:30:38 | 000,061,440 | ---- | M] () -- C:\Genius\ioCentre\gTaskBar.exe
PRC - [2009/09/03 10:26:32 | 000,172,032 | ---- | M] () -- C:\Genius\ioCentre\gKbdTask.exe
PRC - [2009/09/03 10:00:32 | 000,053,248 | ---- | M] (TODO: <Company name>) -- C:\Genius\ioCentre\gIoCentreFunMgm.exe
PRC - [2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IgrsSvcs.exe
PRC - [2009/07/14 02:14:19 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Eap3Host.exe
PRC - [2008/01/11 18:50:16 | 000,030,312 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
========== Modules (No Company Name) ==========
MOD - [2013/12/23 21:03:55 | 016,242,056 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_9_900_170.dll
MOD - [2013/11/28 21:27:21 | 003,363,952 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012/05/15 01:21:26 | 000,368,448 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
MOD - [2010/06/13 19:59:36 | 000,132,384 | ---- | M] () -- C:\Program Files\Lenovo\Bluetooth Software\BTKeyInd.dll
MOD - [2010/02/06 10:25:26 | 001,410,400 | ---- | M] () -- C:\Windows\System32\IcnOvrly.dll
MOD - [2010/02/06 10:25:26 | 000,492,896 | ---- | M] () -- C:\Program Files\Lenovo\VeriFace\ChooseLang.dll
MOD - [2009/12/19 03:51:18 | 000,133,024 | ---- | M] () -- C:\Program Files\Lenovo\Onekey Theater\WindowsApiHookDll32.dll
MOD - [2009/12/19 03:50:38 | 000,161,696 | ---- | M] () -- C:\Program Files\Lenovo\Onekey Theater\ActiveDetect32.dll
MOD - [2009/09/14 14:50:20 | 000,299,008 | ---- | M] () -- C:\Genius\ioCentre\gMouseTask.exe
MOD - [2009/09/03 10:30:38 | 000,061,440 | ---- | M] () -- C:\Genius\ioCentre\gTaskBar.exe
MOD - [2009/09/03 10:26:32 | 000,172,032 | ---- | M] () -- C:\Genius\ioCentre\gKbdTask.exe
MOD - [2009/09/03 10:25:28 | 000,022,016 | ---- | M] () -- C:\Genius\ioCentre\gIoCentreHook.dll
MOD - [2009/09/03 10:24:14 | 000,023,040 | ---- | M] () -- C:\Genius\ioCentre\gfSystem.dll
MOD - [2009/09/03 10:23:26 | 000,017,920 | ---- | M] () -- C:\Genius\ioCentre\gfOffice.dll
MOD - [2009/09/03 10:22:16 | 000,057,344 | ---- | M] () -- C:\Genius\ioCentre\gfMedia.dll
MOD - [2009/09/03 10:18:58 | 000,031,744 | ---- | M] () -- C:\Genius\ioCentre\gfEmail.dll
MOD - [2009/09/03 10:14:30 | 000,061,440 | ---- | M] () -- C:\Genius\ioCentre\gfBrowser.dll
MOD - [2009/09/03 10:06:12 | 000,196,608 | ---- | M] () -- C:\Genius\ioCentre\gZoom.dll
MOD - [2009/09/03 10:05:28 | 000,053,248 | ---- | M] () -- C:\Genius\ioCentre\gTaskSwitch.dll
MOD - [2009/09/03 10:04:44 | 000,061,440 | ---- | M] () -- C:\Genius\ioCentre\gTabSwitch.dll
MOD - [2009/09/03 10:03:00 | 000,118,784 | ---- | M] () -- C:\Genius\ioCentre\gPreset.dll
MOD - [2009/09/03 10:02:16 | 000,192,512 | ---- | M] () -- C:\Genius\ioCentre\gKbStatus.dll
MOD - [2009/09/03 09:59:14 | 000,057,344 | ---- | M] () -- C:\Genius\ioCentre\gIMMgm.dll
MOD - [2009/09/03 09:58:36 | 000,053,248 | ---- | M] () -- C:\Genius\ioCentre\gIMHook.dll
MOD - [2009/09/03 09:56:56 | 000,200,704 | ---- | M] () -- C:\Genius\ioCentre\gDeskMgm.dll
MOD - [2009/09/03 09:55:50 | 000,069,632 | ---- | M] () -- C:\Genius\ioCentre\gAutoScroll.dll
MOD - [2009/09/03 09:54:32 | 000,188,416 | ---- | M] () -- C:\Genius\ioCentre\gAutoPan.dll
MOD - [2009/09/03 09:45:14 | 000,118,784 | ---- | M] () -- C:\Genius\ioCentre\GenXml.dll
MOD - [2009/09/03 09:43:46 | 000,022,016 | ---- | M] () -- C:\Genius\ioCentre\gDevMgm.dll
MOD - [2008/12/20 04:20:50 | 000,063,304 | ---- | M] () -- C:\Program Files\Lenovo\Energy Management\KbdHook.dll
MOD - [2008/12/20 04:20:08 | 000,051,016 | ---- | M] () -- C:\Program Files\Lenovo\Energy Management\HookLib.dll
========== Services (SafeList) ==========
SRV - [2013/12/23 21:03:56 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/11/28 21:27:21 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/11/26 09:29:52 | 000,108,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2013/09/12 12:06:22 | 001,337,752 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2013/06/21 08:53:36 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/05/27 05:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2013/05/10 08:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/04/18 10:06:42 | 000,737,616 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2012/05/15 11:26:00 | 001,262,400 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012/05/15 01:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010/06/17 22:13:02 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010/06/13 19:59:20 | 000,628,000 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe -- (btwdins)
SRV - [2009/12/23 18:39:04 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2009/12/09 09:48:26 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2009/12/09 09:48:24 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2009/09/22 19:16:32 | 000,579,400 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe -- (Lenovo ReadyComm ConnSvc)
SRV - [2009/08/14 15:22:48 | 000,509,192 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\ReadyComm\AppSvc.exe -- (Lenovo ReadyComm AppSvc)
SRV - [2009/07/26 06:43:14 | 000,025,832 | ---- | M] (BioWare) [On_Demand | Stopped] -- C:\Program Files\Dragon Age\bin_ship\daupdatersvc.service.exe -- (DAUpdaterSvc)
SRV - [2009/07/16 04:12:42 | 000,276,296 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\ReadyComm\PS_MDP.dll -- (PS_MDP)
SRV - [2009/07/14 15:27:26 | 000,038,152 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe -- (IGRS)
SRV - [2009/07/14 15:27:20 | 000,103,688 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\ReadyComm\common\router.dll -- (ReadyComm.DirectRouter)
SRV - [2009/07/14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2008/01/11 18:50:16 | 000,030,312 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe -- (BcmSqlStartupSvc)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (TrueSight)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (aqr1tidb)
DRV - [2013/12/04 02:23:26 | 000,161,056 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2013/10/02 01:42:31 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2013/09/17 15:17:38 | 000,188,808 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\System32\drivers\eamonm.sys -- (eamonm)
DRV - [2013/09/17 15:17:38 | 000,174,400 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\epfw.sys -- (epfw)
DRV - [2013/09/17 15:17:38 | 000,134,248 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2013/09/17 15:17:38 | 000,049,240 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\epfwwfp.sys -- (epfwwfp)
DRV - [2013/09/17 15:17:38 | 000,037,416 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\EpfwLWF.sys -- (EpfwLWF)
DRV - [2013/01/23 09:31:50 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2013/01/23 09:31:50 | 000,018,560 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2013/01/23 09:31:50 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2013/01/23 09:31:50 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2012/10/17 13:53:46 | 000,019,072 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2012/08/23 15:44:32 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2012/05/15 11:26:00 | 011,354,944 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2011/01/11 21:33:14 | 000,027,632 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\clwvd.sys -- (clwvd)
DRV - [2010/11/20 10:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/10/07 19:15:15 | 000,436,792 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2010/07/04 11:55:36 | 000,045,736 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btusbflt.sys -- (btusbflt)
DRV - [2010/06/16 18:35:38 | 000,271,360 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2010/06/16 18:35:32 | 000,018,048 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2010/01/20 05:14:42 | 000,023,136 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AcpiVpc.sys -- (ACPIVPC)
DRV - [2009/12/11 09:24:36 | 000,182,304 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2009/11/24 07:20:22 | 000,507,392 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CHDRT32.sys -- (CnxtHdAudService)
DRV - [2009/10/26 20:27:26 | 000,171,776 | ---- | M] (SMI) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SMIksdrv.sys -- (usbsmi)
DRV - [2009/09/17 05:54:14 | 000,041,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HECI.sys -- (HECI)
DRV - [2009/08/05 07:57:02 | 000,032,896 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AVPolCIR.sys -- (AVPolCIR)
DRV - [2009/08/05 07:56:56 | 000,314,752 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AVerPola.sys -- (AVerPola)
DRV - [2009/07/28 22:09:36 | 000,063,240 | ---- | M] (Lenovo) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wdbridge.sys -- (Bridge0)
DRV - [2009/07/21 22:14:58 | 000,081,704 | ---- | M] (CyberLink) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wsvd.sys -- (wsvd)
DRV - [2009/07/16 13:37:14 | 000,011,792 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WDMirror.sys -- (wdmirror)
DRV - [2009/07/14 00:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2009/07/13 23:02:51 | 004,231,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\netw5v32.sys -- (netw5v32)
DRV - [2009/07/13 23:02:49 | 000,229,888 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\k57nd60x.sys -- (k57nd60x)
DRV - [2009/06/27 16:30:32 | 000,020,480 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\gHidPnp.sys -- (gHidPnp)
DRV - [2009/06/25 16:04:28 | 000,011,520 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\gMouUsb.sys -- (gMouUsb)
DRV - [2009/03/18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2008/08/06 13:34:16 | 000,128,104 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\WimFltr.sys -- (WimFltr)
DRV - [2004/11/29 19:14:30 | 000,019,648 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfsync02.sys -- (sfsync02)
DRV - [2004/11/25 17:41:08 | 000,046,080 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfdrv01.sys -- (sfdrv01)
DRV - [2004/10/28 11:47:59 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfhlp02.sys -- (sfhlp02)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-3825014317-2607772001-1910489964-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.msn.com/
IE - HKU\S-1-5-21-3825014317-2607772001-1910489964-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore =
IE - HKU\S-1-5-21-3825014317-2607772001-1910489964-1003\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-3825014317-2607772001-1910489964-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://www.bing.com/search?q={searchTer ... -SearchBox
IE - HKU\S-1-5-21-3825014317-2607772001-1910489964-1003\..\SearchScopes\{5F3BEBD5-F6C6-A4B8-EDD2-A6F5F61813A8}: "URL" =
http://www.buzqo.com/s/?q={searchTerms} ... 01-0-2xDj3
IE - HKU\S-1-5-21-3825014317-2607772001-1910489964-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "
http://www.facebook.com/"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:25.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@cambridgesoft.com/Chem3D,version=12.0: C:\Program Files\CambridgeSoft\ChemOffice2010\Chem3D\npChem3DPlugin.dll (CambridgeSoft Corp.)
FF - HKLM\Software\MozillaPlugins\@cambridgesoft.com/ChemDraw,version=12.0: C:\Program Files\CambridgeSoft\ChemOffice2010\ChemDraw\npcdp32.dll (CambridgeSoft Corp.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Turbo\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Turbo\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/11/28 21:27:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/11/28 21:27:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\
eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013/11/14 07:35:59 | 000,000,000 | ---D | M]
[2010/06/16 20:16:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Turbo\AppData\Roaming\mozilla\Extensions
[2013/07/14 16:02:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Turbo\AppData\Roaming\mozilla\Firefox\Profiles\dku322xp.default\extensions
[2013/11/28 21:27:11 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013/11/28 21:27:23 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013/11/28 21:27:23 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
O1 HOSTS File: ([2013/12/25 11:36:59 | 000,000,741 | ---- | M]) - C:\Windows\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent.exe (Conexant Systems, Inc.)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
O4 - HKLM..\Run: [EnergyUtility] C:\Program Files\Lenovo\Energy Management\utility.exe (Lenovo(beijing) Limited)
O4 - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4 - HKLM..\Run: [ioCentre] C:\Genius\ioCentre\gTaskBar.exe ()
O4 - HKLM..\Run: [OnekeyStudio] C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo)
O4 - HKLM..\Run: [VeriFaceManager] C:\Program Files\Lenovo\VeriFace\PManage.exe (Lenovo)
O4 - HKLM..\Run: [YouCam Mirage] C:\Program Files\Lenovo\YouCam\YCMMirage.exe (CyberLink)
O4 - HKLM..\Run: [YouCam Tray] C:\Program Files\Lenovo\YouCam\YouCam.exe (CyberLink Corp.)
O4 - HKU\S-1-5-21-3825014317-2607772001-1910489964-1003..\Run: [] File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3825014317-2607772001-1910489964-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3825014317-2607772001-1910489964-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB}
http://www.nvidia.com/content/DriverDow ... rtScan.cab (NVIDIA Smart Scan)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia.com/pub/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E750665B-C163-45CA-8352-BAD11573DDA6}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (systempropertiesperformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
Drivers32: msacm.clmp3enc - C:\Program Files\Lenovo\Power2Go\CLMP3Enc.ACM (CyberLink Corp.)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.tscc - C:\windows\System32\tsccvid.dll (TechSmith Corporation)
Drivers32: vidc.VP60 - C:\Windows\System32\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\System32\vp6vfw.dll (On2.com)
Drivers32: vidc.XVID - C:\windows\System32\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
========== Files/Folders - Created Within 30 Days ==========
[2013/12/24 18:34:01 | 000,081,704 | ---- | C] (CyberLink) -- C:\windows\System32\drivers\wsvd.sys.bak
[2013/12/24 18:34:00 | 000,128,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\WimFltr.sys.bak
[2013/12/24 18:34:00 | 000,035,968 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\winusb.sys.bak
[2013/12/24 18:34:00 | 000,014,912 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\wmilib.sys.bak
[2013/12/24 18:33:59 | 000,063,240 | ---- | C] (Lenovo) -- C:\windows\System32\drivers\wdbridge.sys.bak
[2013/12/24 18:33:59 | 000,047,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\WdfLdr.sys.bak
[2013/12/24 18:33:59 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\watchdog.sys.bak
[2013/12/24 18:33:59 | 000,011,792 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\windows\System32\drivers\WDMirror.sys.bak
[2013/12/24 18:33:58 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\vwifimp.sys.bak
[2013/12/24 18:33:57 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\videoprt.sys.bak
[2013/12/24 18:33:55 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\usbrpm.sys.bak
[2013/12/24 18:33:55 | 000,008,192 | ---- | C] (Nokia) -- C:\windows\System32\drivers\usbser_lowerfltj.sys.bak
[2013/12/24 18:33:55 | 000,008,192 | ---- | C] (Nokia) -- C:\windows\System32\drivers\usbser_lowerflt.sys.bak
[2013/12/24 18:33:54 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\usbport.sys.bak
[2013/12/24 18:33:54 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\usbd.sys.bak
[2013/12/24 18:33:53 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\USBCAMD2.sys.bak
[2013/12/24 18:33:53 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\USBCAMD.sys.bak
[2013/12/24 18:33:53 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\usb8023.sys.bak
[2013/12/24 18:33:52 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\TsUsbFlt.sys.bak
[2013/12/24 18:33:51 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\tdi.sys.bak
[2013/12/24 18:33:50 | 000,148,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\storport.sys.bak
[2013/12/24 18:33:50 | 000,053,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\stream.sys.bak
[2013/12/24 18:33:50 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\tape.sys.bak
[2013/12/24 18:33:49 | 000,436,792 | ---- | C] (Duplex Secure Ltd.) -- C:\windows\System32\drivers\sptd.sys.bak
[2013/12/24 18:33:49 | 000,405,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\spsys.sys.bak
[2013/12/24 18:33:48 | 002,532,864 | ---- | C] (Silicon Motion Corporation) -- C:\windows\System32\drivers\SMIexp.sys.bak
[2013/12/24 18:33:48 | 000,171,776 | ---- | C] (SMI) -- C:\windows\System32\drivers\SMIksdrv.sys.bak
[2013/12/24 18:33:48 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\smclib.sys.bak
[2013/12/24 18:33:47 | 000,019,648 | ---- | C] (Protection Technology) -- C:\windows\System32\drivers\sfsync02.sys.bak
[2013/12/24 18:33:47 | 000,006,656 | ---- | C] (Protection Technology) -- C:\windows\System32\drivers\sfhlp02.sys.bak
[2013/12/24 18:33:46 | 000,046,080 | ---- | C] (Protection Technology) -- C:\windows\System32\drivers\sfdrv01.sys.bak
[2013/12/24 18:33:45 | 000,182,304 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\System32\drivers\RtsUStor.sys.bak
[2013/12/24 18:33:45 | 000,140,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\scsiport.sys.bak
[2013/12/24 18:33:44 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\rmcast.sys.bak
[2013/12/24 18:33:44 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\RNDISMP.sys.bak
[2013/12/24 18:33:44 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\rdpvideominiport.sys.bak
[2013/12/24 18:33:41 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\portcls.sys.bak
[2013/12/24 18:33:41 | 000,042,560 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\pciidex.sys.bak
[2013/12/24 18:33:40 | 000,019,072 | ---- | C] (Nokia) -- C:\windows\System32\drivers\pccsmcfd.sys.bak
[2013/12/24 18:33:35 | 011,354,944 | ---- | C] (NVIDIA Corporation) -- C:\windows\System32\drivers\nvlddmkm.sys.bak
[2013/12/24 18:33:35 | 000,161,056 | ---- | C] (NVIDIA Corporation) -- C:\windows\System32\drivers\nvhda32v.sys.bak
[2013/12/24 18:33:33 | 004,231,168 | ---- | C] (Intel Corporation) -- C:\windows\System32\drivers\netw5v32.sys.bak
[2013/12/24 18:33:33 | 000,240,496 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\netio.sys.bak
[2013/12/24 18:33:28 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\mcd.sys.bak
[2013/12/24 18:33:26 | 000,229,888 | ---- | C] (Broadcom Corporation) -- C:\windows\System32\drivers\k57nd60x.sys.bak
[2013/12/24 18:33:26 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\ks.sys.bak
[2013/12/24 18:33:22 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\hidclass.sys.bak
[2013/12/24 18:33:22 | 000,025,728 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\hidparse.sys.bak
[2013/12/24 18:33:21 | 000,041,088 | ---- | C] (Intel Corporation) -- C:\windows\System32\drivers\HECI.sys.bak
[2013/12/24 18:33:21 | 000,026,176 | ---- | C] (LogMeIn, Inc.) -- C:\windows\System32\drivers\hamachi.sys.bak
[2013/12/24 18:33:20 | 000,187,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\FWPKCLNT.SYS.bak
[2013/12/24 18:33:17 | 000,188,808 | ---- | C] (ESET) -- C:\windows\System32\drivers\eamonm.sys.bak
[2013/12/24 18:33:17 | 000,174,400 | ---- | C] (ESET) -- C:\windows\System32\drivers\epfw.sys.bak
[2013/12/24 18:33:17 | 000,134,248 | ---- | C] (ESET) -- C:\windows\System32\drivers\ehdrv.sys.bak
[2013/12/24 18:33:17 | 000,049,240 | ---- | C] (ESET) -- C:\windows\System32\drivers\epfwwfp.sys.bak
[2013/12/24 18:33:17 | 000,037,416 | ---- | C] (ESET) -- C:\windows\System32\drivers\EpfwLWF.sys.bak
[2013/12/24 18:33:16 | 000,218,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\dxgmms1.sys.bak
[2013/12/24 18:33:16 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\dxg.sys.bak
[2013/12/24 18:33:16 | 000,055,584 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\dumpfve.sys.bak
[2013/12/24 18:33:16 | 000,026,704 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\Dumpata.sys.bak
[2013/12/24 18:33:16 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\dxapi.sys.bak
[2013/12/24 18:33:15 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\drmk.sys.bak
[2013/12/24 18:33:15 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\Diskdump.sys.bak
[2013/12/24 18:33:14 | 000,035,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\crashdmp.sys.bak
[2013/12/24 18:33:13 | 000,507,392 | ---- | C] (Conexant Systems Inc.) -- C:\windows\System32\drivers\CHDRT32.sys.bak
[2013/12/24 18:33:13 | 000,140,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\Classpnp.sys.bak
[2013/12/24 18:33:13 | 000,027,632 | ---- | C] (CyberLink Corporation) -- C:\windows\System32\drivers\clwvd.sys.bak
[2013/12/24 18:33:12 | 000,023,168 | ---- | C] (Nokia) -- C:\windows\System32\drivers\ccdcmbo.sys.bak
[2013/12/24 18:33:12 | 000,018,560 | ---- | C] (Nokia) -- C:\windows\System32\drivers\ccdcmb.sys.bak
[2013/12/24 18:33:11 | 000,045,736 | ---- | C] (Broadcom Corporation.) -- C:\windows\System32\drivers\btusbflt.sys.bak
[2013/12/24 18:33:09 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\BdaSup.sys.bak
[2013/12/24 18:33:08 | 000,025,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\battc.sys.bak
[2013/12/24 18:33:07 | 000,314,752 | ---- | C] (AVerMedia TECHNOLOGIES, Inc.) -- C:\windows\System32\drivers\AVerPola.sys.bak
[2013/12/24 18:33:07 | 000,133,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\ataport.sys.bak
[2013/12/24 18:33:07 | 000,032,896 | ---- | C] (AVerMedia TECHNOLOGIES, Inc.) -- C:\windows\System32\drivers\AVPolCIR.sys.bak
[2013/12/24 18:33:03 | 000,023,136 | ---- | C] (Lenovo Corporation) -- C:\windows\System32\drivers\AcpiVpc.sys.bak
[2013/12/24 18:33:01 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\1394bus.sys.bak
[2013/12/24 09:45:35 | 000,000,000 | ---D | C] -- C:\Users\Turbo\AppData\Roaming\Malwarebytes
[2013/12/24 09:45:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013/12/24 09:45:09 | 000,000,000 | ---D | C] -- C:\Users\Turbo\AppData\Local\Programs
[2013/12/23 21:00:04 | 000,000,000 | ---D | C] -- C:\ProgramData\SecTaskMan
[2013/12/11 14:58:53 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtml.tlb
[2013/12/11 14:58:52 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ie4uinit.exe
[2013/12/11 14:58:51 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jsproxy.dll
[2013/12/11 14:58:50 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieapfltr.dll
[2013/12/11 14:58:50 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieui.dll
[2013/12/11 14:58:50 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieetwcollectorres.dll
[2013/12/11 14:58:49 | 000,553,472 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jscript9diag.dll
[2013/12/11 14:58:49 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieUnatt.exe
[2013/12/11 14:58:49 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iesetup.dll
[2013/12/11 14:58:49 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieetwproxystub.dll
[2013/12/11 14:58:49 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iernonce.dll
[2013/12/11 14:58:48 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieetwcollector.exe
[2013/12/11 14:58:46 | 001,928,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\inetcpl.cpl
[2013/12/11 14:58:42 | 004,243,968 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jscript9.dll
[2013/12/11 14:46:50 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmploc.DLL
[2013/12/11 14:45:16 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tzres.dll
[2013/12/11 14:44:39 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cscript.exe
[2013/12/11 14:44:36 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMPhoto.dll
[2013/12/11 14:44:29 | 002,349,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\win32k.sys
[2013/12/11 14:44:26 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\portcls.sys
[2013/12/11 14:44:26 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\drmk.sys
[2013/12/08 18:16:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader
[2013/12/04 02:23:26 | 000,892,704 | ---- | C] (NVIDIA Corporation) -- C:\windows\System32\nvhdagenco32.dll
[2013/12/04 02:23:26 | 000,161,056 | ---- | C] (NVIDIA Corporation) -- C:\windows\System32\drivers\nvhda32v.sys
[2013/12/04 02:23:26 | 000,028,448 | ---- | C] (NVIDIA Corporation) -- C:\windows\System32\nvhdap32.dll
[2013/11/28 22:54:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2013/11/28 22:54:42 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2013/11/28 22:54:38 | 000,264,616 | ---- | C] (Oracle Corporation) -- C:\windows\System32\javaws.exe
[2013/11/28 22:54:31 | 000,094,632 | ---- | C] (Oracle Corporation) -- C:\windows\System32\WindowsAccessBridge.dll
[2013/11/28 22:54:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2013/11/28 21:27:10 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013/11/27 08:22:10 | 000,000,000 | ---D | C] -- C:\windows\Migration
[9 C:\Users\Turbo\Documents\*.tmp files -> C:\Users\Turbo\Documents\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013/12/26 16:04:23 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013/12/26 15:47:49 | 000,000,946 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3825014317-2607772001-1910489964-1003UA1ceebb13ad1ecd7.job
[2013/12/26 15:11:00 | 000,000,830 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
[2013/12/26 13:20:39 | 000,000,886 | ---- | M] () -- C:\Users\Turbo\Desktop\jacksmith_backup_1.papa
[2013/12/26 10:46:55 | 000,015,792 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/12/26 10:46:55 | 000,015,792 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/12/26 10:39:35 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2013/12/26 10:39:27 | 2408,722,432 | -HS- | M] () -- C:\hiberfil.sys
[2013/12/25 21:47:00 | 000,000,894 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3825014317-2607772001-1910489964-1003Core1ceebb13a91d691.job
[2013/12/25 11:39:37 | 000,081,704 | ---- | M] (CyberLink) -- C:\windows\System32\drivers\wsvd.sys.bak
[2013/12/25 11:39:37 | 000,035,968 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\winusb.sys.bak
[2013/12/25 11:39:37 | 000,014,912 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\wmilib.sys.bak
[2013/12/25 11:39:36 | 000,128,104 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\WimFltr.sys.bak
[2013/12/25 11:39:36 | 000,047,720 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\WdfLdr.sys.bak
[2013/12/25 11:39:36 | 000,011,792 | ---- | M] (Windows (R) Codename Longhorn DDK provider) -- C:\windows\System32\drivers\WDMirror.sys.bak
[2013/12/25 11:39:35 | 000,063,240 | ---- | M] (Lenovo) -- C:\windows\System32\drivers\wdbridge.sys.bak
[2013/12/25 11:39:35 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\watchdog.sys.bak
[2013/12/25 11:39:35 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\vwifimp.sys.bak
[2013/12/25 11:39:34 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\videoprt.sys.bak
[2013/12/25 11:39:33 | 000,008,192 | ---- | M] (Nokia) -- C:\windows\System32\drivers\usbser_lowerfltj.sys.bak
[2013/12/25 11:39:32 | 000,284,672 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\usbport.sys.bak
[2013/12/25 11:39:32 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\usbrpm.sys.bak
[2013/12/25 11:39:32 | 000,008,192 | ---- | M] (Nokia) -- C:\windows\System32\drivers\usbser_lowerflt.sys.bak
[2013/12/25 11:39:31 | 000,025,856 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\USBCAMD2.sys.bak
[2013/12/25 11:39:31 | 000,025,856 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\USBCAMD.sys.bak
[2013/12/25 11:39:31 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\usb8023.sys.bak
[2013/12/25 11:39:31 | 000,006,016 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\usbd.sys.bak
[2013/12/25 11:39:30 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\TsUsbFlt.sys.bak
[2013/12/25 11:39:29 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\tdi.sys.bak
[2013/12/25 11:39:28 | 000,148,864 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\storport.sys.bak
[2013/12/25 11:39:28 | 000,053,632 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\stream.sys.bak
[2013/12/25 11:39:28 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\tape.sys.bak
[2013/12/25 11:39:27 | 000,405,504 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\spsys.sys.bak
[2013/12/25 11:39:26 | 002,532,864 | ---- | M] (Silicon Motion Corporation) -- C:\windows\System32\drivers\SMIexp.sys.bak
[2013/12/25 11:39:26 | 000,171,776 | ---- | M] (SMI) -- C:\windows\System32\drivers\SMIksdrv.sys.bak
[2013/12/25 11:39:26 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\smclib.sys.bak
[2013/12/25 11:39:25 | 000,046,080 | ---- | M] (Protection Technology) -- C:\windows\System32\drivers\sfdrv01.sys.bak
[2013/12/25 11:39:25 | 000,019,648 | ---- | M] (Protection Technology) -- C:\windows\System32\drivers\sfsync02.sys.bak
[2013/12/25 11:39:25 | 000,006,656 | ---- | M] (Protection Technology) -- C:\windows\System32\drivers\sfhlp02.sys.bak
[2013/12/25 11:39:24 | 000,140,160 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\scsiport.sys.bak
[2013/12/25 11:39:23 | 000,182,304 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\System32\drivers\RtsUStor.sys.bak
[2013/12/25 11:39:23 | 000,117,760 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\rmcast.sys.bak
[2013/12/25 11:39:23 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\RNDISMP.sys.bak
[2013/12/25 11:39:22 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\rdpvideominiport.sys.bak
[2013/12/25 11:39:20 | 000,177,152 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\portcls.sys.bak
[2013/12/25 11:39:19 | 000,042,560 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\pciidex.sys.bak
[2013/12/25 11:39:19 | 000,019,072 | ---- | M] (Nokia) -- C:\windows\System32\drivers\pccsmcfd.sys.bak
[2013/12/25 11:39:16 | 011,354,944 | ---- | M] (NVIDIA Corporation) -- C:\windows\System32\drivers\nvlddmkm.sys.bak
[2013/12/25 11:39:15 | 000,161,056 | ---- | M] (NVIDIA Corporation) -- C:\windows\System32\drivers\nvhda32v.sys.bak
[2013/12/25 11:39:14 | 004,231,168 | ---- | M] (Intel Corporation) -- C:\windows\System32\drivers\netw5v32.sys.bak
[2013/12/25 11:39:13 | 000,240,496 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\netio.sys.bak
[2013/12/25 11:39:08 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\mcd.sys.bak
[2013/12/25 11:39:07 | 000,229,888 | ---- | M] (Broadcom Corporation) -- C:\windows\System32\drivers\k57nd60x.sys.bak
[2013/12/25 11:39:07 | 000,190,976 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\ks.sys.bak
[2013/12/25 11:39:07 | 000,018,048 | ---- | M] () -- C:\windows\System32\drivers\lirsgt.sys.bak
[2013/12/25 11:39:03 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\hidclass.sys.bak
[2013/12/25 11:39:03 | 000,041,088 | ---- | M] (Intel Corporation) -- C:\windows\System32\drivers\HECI.sys.bak
[2013/12/25 11:39:03 | 000,025,728 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\hidparse.sys.bak
[2013/12/25 11:39:02 | 000,026,176 | ---- | M] (LogMeIn, Inc.) -- C:\windows\System32\drivers\hamachi.sys.bak
[2013/12/25 11:39:02 | 000,020,480 | ---- | M] () -- C:\windows\System32\drivers\gHidPnp.sys.bak
[2013/12/25 11:39:02 | 000,011,520 | ---- | M] () -- C:\windows\System32\drivers\gMouUsb.sys.bak
[2013/12/25 11:39:01 | 000,187,752 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\FWPKCLNT.SYS.bak
[2013/12/25 11:38:59 | 000,049,240 | ---- | M] (ESET) -- C:\windows\System32\drivers\epfwwfp.sys.bak
[2013/12/25 11:38:59 | 000,037,416 | ---- | M] (ESET) -- C:\windows\System32\drivers\EpfwLWF.sys.bak
[2013/12/25 11:38:58 | 000,218,984 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\dxgmms1.sys.bak
[2013/12/25 11:38:58 | 000,188,808 | ---- | M] (ESET) -- C:\windows\System32\drivers\eamonm.sys.bak
[2013/12/25 11:38:58 | 000,174,400 | ---- | M] (ESET) -- C:\windows\System32\drivers\epfw.sys.bak
[2013/12/25 11:38:58 | 000,134,248 | ---- | M] (ESET) -- C:\windows\System32\drivers\ehdrv.sys.bak
[2013/12/25 11:38:57 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\drmk.sys.bak
[2013/12/25 11:38:57 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\dxg.sys.bak
[2013/12/25 11:38:57 | 000,055,584 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\dumpfve.sys.bak
[2013/12/25 11:38:57 | 000,027,008 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\Diskdump.sys.bak
[2013/12/25 11:38:57 | 000,026,704 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\Dumpata.sys.bak
[2013/12/25 11:38:57 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\dxapi.sys.bak
[2013/12/25 11:38:56 | 000,035,408 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\crashdmp.sys.bak
[2013/12/25 11:38:55 | 000,507,392 | ---- | M] (Conexant Systems Inc.) -- C:\windows\System32\drivers\CHDRT32.sys.bak
[2013/12/25 11:38:55 | 000,140,864 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\Classpnp.sys.bak
[2013/12/25 11:38:55 | 000,027,632 | ---- | M] (CyberLink Corporation) -- C:\windows\System32\drivers\clwvd.sys.bak
[2013/12/25 11:38:55 | 000,023,168 | ---- | M] (Nokia) -- C:\windows\System32\drivers\ccdcmbo.sys.bak
[2013/12/25 11:38:54 | 000,045,736 | ---- | M] (Broadcom Corporation.) -- C:\windows\System32\drivers\btusbflt.sys.bak
[2013/12/25 11:38:54 | 000,018,560 | ---- | M] (Nokia) -- C:\windows\System32\drivers\ccdcmb.sys.bak
[2013/12/25 11:38:51 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\BdaSup.sys.bak
[2013/12/25 11:38:50 | 000,314,752 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) -- C:\windows\System32\drivers\AVerPola.sys.bak
[2013/12/25 11:38:50 | 000,271,360 | ---- | M] () -- C:\windows\System32\drivers\atksgt.sys.bak
[2013/12/25 11:38:50 | 000,133,056 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\ataport.sys.bak
[2013/12/25 11:38:50 | 000,032,896 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) -- C:\windows\System32\drivers\AVPolCIR.sys.bak
[2013/12/25 11:38:50 | 000,025,168 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\battc.sys.bak
[2013/12/25 11:38:47 | 000,054,784 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\drivers\1394bus.sys.bak
[2013/12/25 11:38:47 | 000,023,136 | ---- | M] (Lenovo Corporation) -- C:\windows\System32\drivers\AcpiVpc.sys.bak
[2013/12/23 21:03:56 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerApp.exe
[2013/12/23 21:03:56 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerCPLApp.cpl
[2013/12/16 23:14:10 | 000,000,354 | ---- | M] () -- C:\Users\Turbo\Documents\ax_files.xml
[2013/12/12 20:47:31 | 000,734,538 | ---- | M] () -- C:\windows\System32\perfh009.dat
[2013/12/12 20:47:31 | 000,148,234 | ---- | M] () -- C:\windows\System32\perfc009.dat
[2013/12/11 15:18:02 | 000,452,296 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT
[2013/12/08 18:16:27 | 000,001,015 | ---- | M] () -- C:\Users\Public\Desktop\YTD Video Downloader.lnk
[2013/12/04 22:58:11 | 000,000,969 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013/12/04 02:23:26 | 000,892,704 | ---- | M] (NVIDIA Corporation) -- C:\windows\System32\nvhdagenco32.dll
[2013/12/04 02:23:26 | 000,161,056 | ---- | M] (NVIDIA Corporation) -- C:\windows\System32\drivers\nvhda32v.sys
[2013/12/04 02:23:26 | 000,028,448 | ---- | M] (NVIDIA Corporation) -- C:\windows\System32\nvhdap32.dll
[2013/11/28 22:54:26 | 000,094,632 | ---- | M] (Oracle Corporation) -- C:\windows\System32\WindowsAccessBridge.dll
[2013/11/28 22:54:23 | 000,264,616 | ---- | M] (Oracle Corporation) -- C:\windows\System32\javaws.exe
[2013/11/28 22:54:23 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\windows\System32\javaw.exe
[2013/11/28 22:54:22 | 000,174,504 | ---- | M] (Oracle Corporation) -- C:\windows\System32\java.exe
[9 C:\Users\Turbo\Documents\*.tmp files -> C:\Users\Turbo\Documents\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013/12/25 22:15:07 | 000,000,886 | ---- | C] () -- C:\Users\Turbo\Desktop\jacksmith_backup_1.papa
[2013/12/24 18:33:27 | 000,018,048 | ---- | C] () -- C:\windows\System32\drivers\lirsgt.sys.bak
[2013/12/24 18:33:21 | 000,011,520 | ---- | C] () -- C:\windows\System32\drivers\gMouUsb.sys.bak
[2013/12/24 18:33:20 | 000,020,480 | ---- | C] () -- C:\windows\System32\drivers\gHidPnp.sys.bak
[2013/12/24 18:33:07 | 000,271,360 | ---- | C] () -- C:\windows\System32\drivers\atksgt.sys.bak
[2013/11/27 21:42:46 | 000,000,946 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3825014317-2607772001-1910489964-1003UA1ceebb13ad1ecd7.job
[2013/11/27 21:42:46 | 000,000,894 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3825014317-2607772001-1910489964-1003Core1ceebb13a91d691.job
[2013/08/09 20:01:49 | 000,016,384 | ---- | C] () -- C:\windows\System32\FileOps.exe
[2013/01/15 17:15:07 | 000,000,134 | ---- | C] () -- C:\ProgramData\xlink.sys
[2013/01/15 17:15:07 | 000,000,000 | ---- | C] () -- C:\windows\System32\ntUsrrP_1_0.dll
[2012/05/15 01:21:50 | 000,423,744 | ---- | C] () -- C:\windows\System32\nvStreaming.exe
[2012/02/11 19:14:47 | 000,000,535 | ---- | C] () -- C:\windows\SIERRA.INI
[2011/12/24 15:19:13 | 000,005,095 | ---- | C] () -- C:\ProgramData\xpbthzbm.qqq
[2010/09/25 14:13:02 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010/09/13 13:06:47 | 000,230,400 | ---- | C] () -- C:\Users\Turbo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/06/16 22:29:49 | 000,007,591 | ---- | C] () -- C:\Users\Turbo\AppData\Local\Resmon.ResmonCfg
[2010/06/16 17:44:20 | 000,003,719 | ---- | C] () -- C:\ProgramData\profile.xml
[2010/02/06 10:13:18 | 000,001,350 | ---- | C] () -- C:\Users\Turbo\Proof.XML
========== ZeroAccess Check ==========
[2009/07/14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2013/11/23 18:04:11 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\.minecraft
[2010/06/25 18:47:59 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\1C
[2010/06/24 12:55:55 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Advanced Chemistry Development
[2010/06/16 17:44:23 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\ArcSyncConfig
[2010/10/08 13:52:01 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Audacity
[2012/07/06 12:42:50 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\BitTorrent
[2011/12/24 15:13:25 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Boilsoft
[2010/07/17 22:42:57 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\CCS64
[2010/10/06 13:28:15 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Clickteam
[2010/07/30 12:17:15 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/07/04 22:20:55 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\ESET
[2013/10/19 18:06:51 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\fltk.org
[2010/10/08 14:04:08 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Free Audio Editor
[2011/05/02 15:03:46 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\ICQ
[2010/06/18 09:47:03 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Lenovo
[2013/02/13 20:50:16 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Mestrelab Research S.L
[2013/02/25 21:08:16 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\My Battle for Middle-earth Files
[2012/06/24 21:24:27 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\My Battle for Middle-earth(tm) II Files
[2011/12/26 18:30:14 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Nokia
[2011/05/15 11:29:06 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Octoshape
[2011/12/26 18:47:01 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\PC Suite
[2010/07/22 21:17:40 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Red Alert 3 Uprising
[2013/05/13 09:23:32 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Softland
[2010/06/25 18:47:58 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\tmplts
[2010/10/20 16:57:35 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Windows Live Writer
========== Purity Check ==========
========== Custom Scans ==========
< >
[2009/07/14 05:53:46 | 000,032,572 | ---- | C] () -- C:\windows\Tasks\SCHEDLGU.TXT
[2009/07/14 05:53:47 | 000,000,006 | -H-- | C] () -- C:\windows\Tasks\SA.DAT
[2012/04/03 04:56:50 | 000,000,830 | ---- | C] () -- C:\windows\Tasks\Adobe Flash Player Updater.job
[2013/11/27 21:42:46 | 000,000,894 | ---- | C] () -- C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3825014317-2607772001-1910489964-1003Core1ceebb13a91d691.job
[2013/11/27 21:42:46 | 000,000,946 | ---- | C] () -- C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3825014317-2607772001-1910489964-1003UA1ceebb13ad1ecd7.job
< >
< MD5 for: ATAPI.SYS >
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\ERDNT\cache\atapi.sys
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_a5025d31bee4647c\atapi.sys
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_df26d4d57fdef5b0\atapi.sys
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_dfc9143c98e9a6c4\atapi.sys
< MD5 for: AUTOCHK.EXE >
[2009/07/14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2010/11/20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\System32\autochk.exe
[2010/11/20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe
< MD5 for: CDROM.SYS >
[2009/07/14 00:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_5f7fb206051affbb\cdrom.sys
[2010/11/20 09:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\drivers\cdrom.sys
[2010/11/20 09:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_6381e09675524225\cdrom.sys
[2010/11/20 09:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_61b0c5ce02098355\cdrom.sys
< MD5 for: EXPLORER.EXE >
[2011/02/26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009/07/14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011/02/26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2009/10/31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\ERDNT\cache\explorer.exe
[2009/10/31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2011/02/26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010/11/20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2010/02/06 00:36:16 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2010/02/06 00:36:16 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009/10/31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe
< MD5 for: HAL.DLL >
[2010/11/20 13:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\System32\hal.dll
[2010/11/20 13:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_ad305c8fb7ec5060\hal.dll
[2009/07/14 02:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_aaff48c7bafdccc6\hal.dll
< MD5 for: SCECLI.DLL >
[2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\ERDNT\cache\scecli.dll
[2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2010/11/20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010/11/20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll
< MD5 for: SVCHOST.EXE >
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\ERDNT\cache\svchost.exe
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
< MD5 for: TCPIP.SYS >
[2011/04/25 05:56:06 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=0158D5E9982E9D6A90DFC802F618E130 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_b347f075c77b9c9d\tcpip.sys
[2011/06/21 06:34:23 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=04E4A7D53A7ACE02E8C55B17A498F631 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17638_none_b513df73c4b4f466\tcpip.sys
[2011/09/29 17:02:44 | 001,301,872 | ---- | M] (Microsoft Corporation) MD5=22F7E7CBCA308DEE3428B097D4F8A61C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21060_none_b38e8546e0cbe4a1\tcpip.sys
[2012/08/22 18:05:21 | 001,306,992 | ---- | M] (Microsoft Corporation) MD5=23790A44D9A6B67F8690C34D4F516446 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22097_none_b55b785ade04500f\tcpip.sys
[2011/04/25 05:31:30 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=24326784DF8F3D5F5BBB9F878CE33C14 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_b52f4dc5c4a121e0\tcpip.sys
[2009/07/14 02:19:10 | 001,285,712 | ---- | M] (Microsoft Corporation) MD5=2CC3D75488ABD3EC628BBB9A4FC84EFC -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_b2f46875c7b9d667\tcpip.sys
[2013/01/03 06:01:49 | 001,303,912 | ---- | M] (Microsoft Corporation) MD5=34AE5CC0C7417AB701C2AA8A7BC75417 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21415_none_b3c99dece09ecc3b\tcpip.sys
[2010/11/20 13:30:12 | 001,290,112 | ---- | M] (Microsoft Corporation) MD5=37E8FA3779668837CA9E2C36D2415949 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_b5257c3dc4a85a01\tcpip.sys
[2011/09/29 17:17:18 | 001,303,920 | ---- | M] (Microsoft Corporation) MD5=3C1C41E317710F74CEC1E7F0D5325993 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_b5a84e10ddca7566\tcpip.sys
[2013/01/04 05:56:23 | 001,308,504 | ---- | M] (Microsoft Corporation) MD5=4A95845C5F33A4DDEB6AEF6367FB6520 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_b5becc06ddb98192\tcpip.sys
[2013/07/06 06:05:35 | 001,293,760 | ---- | M] (Microsoft Corporation) MD5=4E8B9BE71B807B3BAEDB7F4243F85E3C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_b52f2f65c4a146e5\tcpip.sys
[2013/07/06 05:57:37 | 001,309,120 | ---- | M] (Microsoft Corporation) MD5=528F7CC60391DD0FAB0344F32F051FDF -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_b5721e2eddf328f9\tcpip.sys
[2012/03/30 11:29:05 | 001,287,024 | ---- | M] (Microsoft Corporation) MD5=55E9965552741F3850CB22CBBA9671ED -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16986_none_b2f57423c7b8dea8\tcpip.sys
[2011/09/29 16:43:37 | 001,285,488 | ---- | M] (Microsoft Corporation) MD5=56C198AC82EFA622DD93E9E43575F79C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16889_none_b2f8731bc7b62d86\tcpip.sys
[2013/05/08 07:15:22 | 001,309,032 | ---- | M] (Microsoft Corporation) MD5=6088D01FAD49729EA0A5A3D9B9BA8B84 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22319_none_b5b3fe00ddc19aaa\tcpip.sys
[2011/09/29 17:03:04 | 001,290,608 | ---- | M] (Microsoft Corporation) MD5=65D10B191C59C5501A1263FC33F6894B -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_b4d1ffa1c4e682b5\tcpip.sys
[2013/09/07 03:06:48 | 001,309,120 | ---- | M] (Microsoft Corporation) MD5=6C4F3D92764FFA22D28061A4D9235446 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_b58e8eb0ddde6cf1\tcpip.sys
[2011/04/25 07:31:09 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=6D4728CFF2724FF3A4654971D61D0F1C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_b5ad1a5addc7c444\tcpip.sys
[2013/01/03 06:05:20 | 001,293,672 | ---- | M] (Microsoft Corporation) MD5=7C0507D2391AF5933600CBCED799F277 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_b502eb9fc4c2a304\tcpip.sys
[2012/03/30 11:23:11 | 001,291,632 | ---- | M] (Microsoft Corporation) MD5=7FA2E0F8B072BD04B77B421480B6CC22 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_b52e5147c4a202d7\tcpip.sys
[2011/04/25 05:44:18 | 001,298,816 | ---- | M] (Microsoft Corporation) MD5=8861B9A06BA99C6E1D62D0C86DFAB86C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_b39a7d5ae0c2aec5\tcpip.sys
[2012/03/30 10:04:23 | 001,306,480 | ---- | M] (Microsoft Corporation) MD5=88FCDB9923EFECA207B3CEBD24407126 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_b583df0adde66104\tcpip.sys
[2011/06/21 06:30:45 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=93C444D118B184452132357C322124CD -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20992_none_b3703df4e0e237e0\tcpip.sys
[2010/06/14 07:06:58 | 001,288,576 | ---- | M] (Microsoft Corporation) MD5=A39EA325C081AD27461F630C8E3E56E0 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_b3b219fae0b0af43\tcpip.sys
[2012/08/22 18:16:54 | 001,292,144 | ---- | M] (Microsoft Corporation) MD5=A5EBB8F648000E88B7D9390B514976BF -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17939_none_b514e56fc4b40532\tcpip.sys
[2010/06/14 07:12:30 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=BB7F39C31C4A4417FD318E7CD184E225 -- C:\Windows\ERDNT\cache\tcpip.sys
[2010/06/14 07:12:30 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=BB7F39C31C4A4417FD318E7CD184E225 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_b33b1c29c7858b92\tcpip.sys
[2013/01/04 05:55:21 | 001,287,528 | ---- | M] (Microsoft Corporation) MD5=BBCEAEFF1FD72A026F827CBB2F4AA8AD -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.17206_none_b34bcf71c7782cb0\tcpip.sys
[2011/06/21 06:39:53 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=C2DAAEB48F3A47C410B041A0D2382EE1 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16839_none_b32e82b7c78da1d1\tcpip.sys
[2013/09/08 03:07:12 | 001,294,272 | ---- | M] (Microsoft Corporation) MD5=CA59F7C570AF70BC174F477CFE2D9EE3 -- C:\Windows\System32\drivers\tcpip.sys
[2013/09/08 03:07:12 | 001,294,272 | ---- | M] (Microsoft Corporation) MD5=CA59F7C570AF70BC174F477CFE2D9EE3 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_b4fa2013c4c8ebf1\tcpip.sys
[2013/05/08 06:38:00 | 001,293,672 | ---- | M] (Microsoft Corporation) MD5=D32FDAC73FCD76B85389C39BC1087F2A -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18148_none_b508ef41c4bd3835\tcpip.sys
[2012/10/03 17:44:01 | 001,308,040 | ---- | M] (Microsoft Corporation) MD5=D490DD0A91B4EAC3B4EE08D11EE37C31 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_b5a428d6ddce3d9a\tcpip.sys
[2011/06/21 07:54:00 | 001,303,424 | ---- | M] (Microsoft Corporation) MD5=DEC4940487050AE13C60C86F40E07E75 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21754_none_b583db3edde666b6\tcpip.sys
[2012/10/03 17:58:30 | 001,293,680 | ---- | M] (Microsoft Corporation) MD5=E23A56F843E2AEBBB209D0ACCA73C640 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_b4ef7439c4d0da52\tcpip.sys
[2012/03/30 11:08:19 | 001,303,408 | ---- | M] (Microsoft Corporation) MD5=E47C2844A1605A44178F4281E4D58B3D -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21178_none_b38bb990e0ccc871\tcpip.sys
< MD5 for: USERINIT.EXE >
[2010/11/20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010/11/20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\ERDNT\cache\userinit.exe
[2009/07/14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
< MD5 for: WINLOGON.EXE >
[2009/10/28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\ERDNT\cache\winlogon.exe
[2009/10/28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009/10/28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010/11/20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010/11/20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009/07/14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
< >
< %systemroot%*.* /U /s >
[5 C:\windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\windows\Installer\*.tmp files -> C:\windows\Installer\*.tmp -> ]
< %SYSTEMDRIVE%\*.exe >
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2013/11/23 18:04:11 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\.minecraft
[2010/06/25 18:47:59 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\1C
[2013/08/09 20:02:14 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Adobe
[2010/06/24 12:55:55 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Advanced Chemistry Development
[2011/11/15 06:45:38 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Apple Computer
[2010/06/16 17:44:23 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\ArcSyncConfig
[2010/10/08 13:52:01 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Audacity
[2012/07/06 12:42:50 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\BitTorrent
[2011/12/24 15:13:25 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Boilsoft
[2010/07/17 22:42:57 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\CCS64
[2010/10/06 13:28:15 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Clickteam
[2010/07/30 12:17:15 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/08/02 21:26:49 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Corel
[2010/06/16 17:21:36 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\CyberLink
[2013/07/05 15:03:13 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\dvdcss
[2010/07/04 22:20:55 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\ESET
[2013/10/19 18:06:51 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\fltk.org
[2010/10/08 14:04:08 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Free Audio Editor
[2011/08/14 19:01:46 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Hamachi
[2011/05/02 15:03:46 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\ICQ
[2010/06/16 13:01:54 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Identities
[2010/06/16 13:04:09 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\InstallShield
[2010/06/18 09:47:03 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Lenovo
[2010/06/16 20:55:48 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Macromedia
[2013/12/24 09:45:35 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Malwarebytes
[2009/07/29 11:50:54 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Media Center Programs
[2010/07/07 10:18:31 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Media Player Classic
[2013/02/13 20:50:16 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Mestrelab Research S.L
[2013/04/14 14:15:46 | 000,000,000 | --SD | M] -- C:\Users\Turbo\AppData\Roaming\Microsoft
[2011/05/10 20:05:18 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Mozilla
[2013/02/25 21:08:16 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\My Battle for Middle-earth Files
[2012/06/24 21:24:27 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\My Battle for Middle-earth(tm) II Files
[2012/12/21 14:58:18 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Nero
[2011/12/26 18:30:14 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Nokia
[2012/05/26 16:53:48 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\NVIDIA
[2011/05/15 11:29:06 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Octoshape
[2011/12/26 18:47:01 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\PC Suite
[2010/07/22 21:17:40 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Red Alert 3 Uprising
[2010/08/27 12:36:13 | 000,000,000 | RH-D | M] -- C:\Users\Turbo\AppData\Roaming\SecuROM
[2013/12/14 20:54:07 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Skype
[2012/03/10 17:12:54 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\skypePM
[2013/05/13 09:23:32 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Softland
[2010/06/25 18:47:58 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\tmplts
[2013/12/26 15:58:52 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\vlc
[2010/10/20 16:57:35 | 000,000,000 | ---D | M] -- C:\Users\Turbo\AppData\Roaming\Windows Live Writer
< %APPDATA%\*.exe /s >
[2010/12/18 15:28:20 | 000,010,134 | R--- | M] () -- C:\Users\Turbo\AppData\Roaming\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[2013/11/11 20:18:49 | 000,367,104 | ---- | M] (Microsoft Corporation)
Unable to obtain MD5 -- C:\windows\system32\dxtmsft.dll
[2013/11/11 20:18:49 | 000,244,736 | ---- | M] (Microsoft Corporation)
Unable to obtain MD5 -- C:\windows\system32\dxtrans.dll
[2009/07/14 02:15:36 | 000,226,816 | ---- | M] (Microsoft Corporation)
Unable to obtain MD5 -- C:\windows\system32\LocationApi.dll
< %systemroot%\Tasks\*.job >
[2013/12/26 16:11:00 | 000,000,830 | ---- | M] () -- C:\windows\Tasks\Adobe Flash Player Updater.job
[2013/12/25 21:47:00 | 000,000,894 | ---- | M] () -- C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3825014317-2607772001-1910489964-1003Core1ceebb13a91d691.job
[2013/12/26 15:47:49 | 000,000,946 | ---- | M] () -- C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3825014317-2607772001-1910489964-1003UA1ceebb13ad1ecd7.job
< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2010/10/07 19:15:15 | 000,436,792 | ---- | M] ()
Unable to obtain MD5 -- C:\windows\system32\drivers\sptd.sys
< %systemroot%\System32\config\*.sav >
< %systemroot%\system32\*.dll /lockedfiles >
[2013/11/11 20:18:49 | 000,367,104 | ---- | M] (Microsoft Corporation)
Unable to obtain MD5 -- C:\windows\system32\dxtmsft.dll
[2013/11/11 20:18:49 | 000,244,736 | ---- | M] (Microsoft Corporation)
Unable to obtain MD5 -- C:\windows\system32\dxtrans.dll
[2009/07/14 02:15:36 | 000,226,816 | ---- | M] (Microsoft Corporation)
Unable to obtain MD5 -- C:\windows\system32\LocationApi.dll
< %systemroot%\system32\drivers\*.sys /3 >
< %systemroot%\system32\*.* /3 >
[2013/12/26 10:46:55 | 000,015,792 | -H-- | M] () -- C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/12/26 10:46:55 | 000,015,792 | -H-- | M] () -- C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/12/23 21:03:56 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\system32\FlashPlayerApp.exe
[2013/12/23 21:03:56 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\system32\FlashPlayerCPLApp.cpl
[2013/12/26 10:39:43 | 000,000,018 | ---- | M] () -- C:\windows\system32\log.txt
< %SYSTEMDRIVE%\*.exe >
< >
< *crack* /s >
[2005/03/18 01:53:30 | 000,065,172 | ---- | M] () -- \DUKE3D\highres\sprites\firstperson\2324_crackknuckles.md2
[2012/04/26 00:24:42 | 001,075,116 | ---- | M] () -- \DUKE3D\highres\sprites\firstperson\2324_crackknuckles.md3
[2005/03/26 18:51:00 | 000,140,211 | ---- | M] () -- \DUKE3D\highres\sprites\firstperson\2324_crackknuckles.png
[2012/04/26 00:24:42 | 000,089,820 | ---- | M] () -- \DUKE3D\highres\sprites\firstperson_polymost\2324_crackknuckles.md3
[2012/04/26 00:24:42 | 000,140,092 | ---- | M] () -- \DUKE3D\highres\sprites\firstperson_polymost\2324_crackknuckles.png
[2007/03/18 18:04:42 | 000,555,346 | ---- | M] () -- \Jazz Jackrabbit 2\Jazz2\cracking_ice.mod
[2009/12/19 12:45:08 | 000,003,460 | ---- | M] () -- \Program Files\Game_Maker8\Sprites\Maze - Platform\wall_block_cracked1.png
[2009/12/19 12:45:08 | 000,003,675 | ---- | M] () -- \Program Files\Game_Maker8\Sprites\Maze - Platform\wall_block_cracked2.png
[2009/12/19 12:45:08 | 000,004,107 | ---- | M] () -- \Program Files\Game_Maker8\Sprites\Maze - Platform\wall_block_cracked3.png
[2009/12/19 12:45:08 | 000,003,529 | ---- | M] () -- \Program Files\Game_Maker8\Sprites\Maze - Platform\wall_block_cracked4.png
[2010/05/14 01:47:49 | 000,014,193 | ---- | M] () -- \Program Files\Microsoft DirectX SDK (June 2010)\Samples\C++\Direct3D\UVAtlas\crackdecl.cpp
[2010/05/14 01:47:49 | 000,013,457 | ---- | M] () -- \Program Files\Microsoft DirectX SDK (June 2010)\Samples\C++\Direct3D\UVAtlas\crackdecl.h
[2010/05/24 22:05:23 | 001,049,656 | ---- | M] () -- \Program Files\Microsoft DirectX SDK (June 2010)\Samples\Media\misc\Crack_Displacement.bmp
[2010/05/24 22:05:23 | 003,145,784 | ---- | M] () -- \Program Files\Microsoft DirectX SDK (June 2010)\Samples\Media\misc\Crack_Normal.bmp
[2005/09/22 11:18:52 | 000,032,927 | ---- | M] () -- \Program Files\R'n'D jue\sounds\jue0\nutcrack.wav
[2004/07/22 11:34:50 | 000,002,507 | ---- | M] () -- \Program Files\StatSoft\STATISTICA 8 CS\Examples\Datasets\Cracker promotion.sta
[2004/11/17 15:22:39 | 000,000,574 | ---- | M] () -- \Program Files\Steam\Half Life 2\hl2\materials\Glass\glasswindow018a_cracked.vmt
[2004/11/17 15:22:39 | 000,022,064 | ---- | M] () -- \Program Files\Steam\Half Life 2\hl2\materials\Glass\glasswindow018a_cracked.vtf
[2007/06/13 15:01:48 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack3x2_1
[2007/06/13 15:01:48 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack3x2_2
[2007/06/13 15:01:50 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack3x2_3
[2007/06/13 15:01:50 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack3x2_4
[2007/06/13 15:01:50 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack5x3_1
[2007/06/13 15:01:48 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack5x3_2
[2007/06/13 15:01:48 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack5x3_3
[2007/06/13 15:01:50 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack5x3_4
[2007/06/13 15:01:46 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack7x2_1
[2007/06/13 15:01:46 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack7x4_1
[2007/06/13 15:01:48 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack7x5_1
[2007/06/13 15:01:10 | 000,017,494 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedSpruce01
[2007/06/13 15:01:12 | 000,017,494 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedSpruce02
[2007/06/13 15:01:10 | 000,017,494 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedSpruce03
[2007/06/13 15:01:12 | 000,017,494 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedSpruce04
[2007/06/13 15:01:10 | 000,017,494 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedSpruce05
[2007/06/13 15:01:12 | 000,017,490 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedTree
[2007/06/13 15:10:44 | 000,017,491 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V - Tribes of the East\Editor\IconCache\AdvMapTile\MapObjects\_(AdvMapTile)\Sand\Sand_Cracked
[2006/09/21 15:21:18 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack3x2_1
[2006/09/21 15:21:16 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack3x2_2
[2006/09/21 15:21:18 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack3x2_3
[2006/09/21 15:21:16 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack3x2_4
[2006/09/26 13:04:34 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack5x3_1
[2006/09/21 15:21:14 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack5x3_2
[2006/09/27 19:47:30 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack5x3_3
[2006/09/26 13:04:36 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack5x3_4
[2006/09/21 15:21:16 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack7x2_1
[2006/09/27 16:23:02 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack7x4_1
[2006/09/21 15:21:12 | 000,017,493 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack7x5_1
[2006/09/21 13:29:28 | 000,017,494 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedSpruce01
[2006/09/21 13:29:32 | 000,017,494 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedSpruce02
[2006/09/21 13:29:40 | 000,017,494 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedSpruce03
[2006/09/21 13:29:28 | 000,017,494 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedSpruce04
[2006/09/21 13:29:28 | 000,017,494 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedSpruce05
[2006/09/21 13:29:38 | 000,017,490 | ---- | M] () -- \Program Files\Ubisoft\Heroes of Might and Magic V Collector Edition\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedTree
[2011/12/17 12:31:52 | 017,659,399 | ---- | M] () -- \Users\Turbo\Desktop\Priecinky\Serialy\Annoying Orange\Annoying Orange - Nutcracker.mp4
[2009/05/13 18:46:34 | 000,081,772 | ---- | M] () -- \Users\Turbo\Documents\Electronic Arts\The Sims 3\Downloads\BH_Crackly Bathtub.Sims3Pack
[2009/04/13 21:46:05 | 000,165,623 | ---- | M] () -- \Users\Turbo\Documents\Electronic Arts\The Sims 3\Downloads\crackizzati muro.Sims3Pack
< *keygen* /s >
< *AntiWPA* /s >
< *loader* /s >
[2011/07/18 13:16:43 | 000,009,767 | ---- | M] () -- \AdwCleaner\Quarantine\C\Users\Turbo\AppData\Roaming\Mozilla\Firefox\Profiles\dku322xp.default\ConduitCommon\modules\3.5.0.12\ExternalLibraryLoader.jsm.vir
[2002/10/31 09:31:44 | 000,032,768 | ---- | M] () -- \Program Files\Ballance\Plugins\VirtoolsLoaderR.dll
[2009/05/26 09:08:04 | 000,107,960 | ---- | M] () -- \Program Files\CambridgeSoft\ChemOffice2010\Inventory\ExcelLoader\CambridgeSoft.Inventory.LoaderSupport.exe
[2009/05/26 09:08:04 | 000,345,512 | ---- | M] () -- \Program Files\CambridgeSoft\ChemOffice2010\Inventory\ExcelLoader\ExcelInvLoader.exe
[2006/11/03 17:59:54 | 000,000,406 | ---- | M] () -- \Program Files\CambridgeSoft\ChemOffice2010\Inventory\ExcelLoader\ExcelInvLoader.exe.config
[2000/08/24 13:16:34 | 000,110,592 | ---- | M] () -- \Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
[2006/10/26 14:40:34 | 000,057,344 | ---- | M] () -- \Program Files\Common Files\microsoft shared\VS7DEBUG\coloader.dll
[2006/10/26 14:40:34 | 000,005,120 | ---- | M] () -- \Program Files\Common Files\microsoft shared\VS7DEBUG\coloader.tlb
[2008/07/30 09:06:58 | 000,072,192 | ---- | M] () -- \Program Files\Common Files\microsoft shared\VS7DEBUG\coloader80.dll
[2008/07/29 02:43:16 | 000,004,096 | ---- | M] () -- \Program Files\Common Files\microsoft shared\VS7DEBUG\coloader80.tlb
[2012/09/25 03:39:16 | 000,112,128 | ---- | M] () -- \Program Files\Common Files\Nokia\Tss\ProductApiLoader\ta_productapiloader.dll
[2010/12/13 11:32:32 | 014,278,656 | ---- | M] () -- \Program Files\Free YouTube Downloader\YouTubeDownloader.exe
[2010/07/03 16:07:44 | 000,119,675 | ---- | M] () -- \Program Files\Free YouTube Downloader\YouTubeDownloader.ico
[2009/12/17 00:07:42 | 000,000,123 | ---- | M] () -- \Program Files\Game_Maker8\html\Loader.htm
[2009/12/17 00:30:00 | 000,006,111 | ---- | M] () -- \Program Files\Game_Maker8\html\Loader2.htm
[2011/01/11 21:33:58 | 000,056,416 | ---- | M] () -- \Program Files\Lenovo\YouCam\Koan\pyloader.dll
[2011/01/11 21:32:10 | 000,015,969 | ---- | M] () -- \Program Files\Lenovo\YouCam\subsys\Uploader\PyUploader.kc
[2011/01/11 21:32:10 | 000,179,296 | ---- | M] () -- \Program Files\Lenovo\YouCam\subsys\Uploader\_PyUploader.pyd
[2011/01/11 21:32:12 | 002,475,304 | ---- | M] () -- \Program Files\Lenovo\YouCam\subsys\YouCam\CES_3DLoaderFBX.dll
[2010/05/18 18:52:40 | 000,018,448 | ---- | M] () -- \Program Files\Microsoft DirectX SDK (June 2010)\Samples\C++\Direct3D\MeshFromOBJ\MeshLoader.cpp