OTL logfile created on: 25/11/2012 02:28:05 - Run 5 OTL by OldTimer - Version 3.2.69.0 Folder = D:\Utenti\Paul\dowloads\OTL 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16433) Locale: 00000410 | Country: Italia | Language: ITA | Date Format: dd/MM/yyyy 3,98 Gb Total Physical Memory | 2,16 Gb Available Physical Memory | 54,33% Memory free 10,00 Gb Paging File | 7,83 Gb Available in Paging File | 78,27% Paging File free Paging file location(s): c:\pagefile.sys 64 64e:\pagefile. [Binary data over 200 bytes] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 279,46 Gb Total Space | 200,34 Gb Free Space | 71,69% Space Free | Partition Type: NTFS Drive D: | 288,74 Gb Total Space | 190,48 Gb Free Space | 65,97% Space Free | Partition Type: NTFS Drive E: | 19,06 Gb Total Space | 12,67 Gb Free Space | 66,47% Space Free | Partition Type: NTFS Drive F: | 86,37 Gb Total Space | 30,97 Gb Free Space | 35,86% Space Free | Partition Type: NTFS Drive G: | 30,61 Mb Total Space | 19,36 Mb Free Space | 63,23% Space Free | Partition Type: NTFS Drive N: | 24,98 Gb Total Space | 5,12 Gb Free Space | 20,48% Space Free | Partition Type: FAT32 Computer Name: ASUSC123 | User Name: Paul | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012/11/25 02:07:28 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\Utenti\Paul\dowloads\OTL\OTL.exe PRC - [2012/11/24 09:48:42 | 000,077,496 | ---- | M] (Microsoft Corporation) -- C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE PRC - [2012/11/24 09:46:47 | 000,165,184 | ---- | M] (Microsoft Corporation) -- C:\Programmi\Microsoft Office 15\root\office15\msosync.exe PRC - [2012/11/20 07:16:04 | 000,916,960 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2012/11/16 08:01:55 | 000,255,992 | ---- | M] (Microsoft Corporation) -- C:\Users\Paul\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe PRC - [2012/11/10 20:36:28 | 001,807,800 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe PRC - [2012/11/01 18:33:14 | 000,388,576 | ---- | M] (Mozilla Corporation) -- D:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe PRC - [2012/10/11 12:17:59 | 002,312,216 | ---- | M] () -- C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe PRC - [2012/10/10 19:29:14 | 000,143,928 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton 360\Norton 360\Engine\20.2.0.19\ccSvcHst.exe PRC - [2012/10/09 09:53:36 | 004,441,920 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\Paul\AppData\Local\Akamai\netsession_win.exe PRC - [2012/06/20 16:21:46 | 001,556,640 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe PRC - [2012/06/15 13:08:30 | 001,149,912 | ---- | M] (Crystal Dew World) -- D:\Program Files (x86)\CrystalDiskInfo\DiskInfo.exe PRC - [2012/02/06 18:32:34 | 000,102,568 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe PRC - [2012/02/03 15:24:50 | 000,277,120 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe PRC - [2012/02/03 14:40:42 | 000,277,120 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe PRC - [2012/01/20 00:42:54 | 003,058,304 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe PRC - [2011/12/23 15:39:38 | 000,174,720 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe PRC - [2011/12/22 18:58:42 | 000,318,080 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe PRC - [2011/11/21 13:22:08 | 000,080,512 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe PRC - [2011/11/21 13:19:50 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe PRC - [2011/10/24 16:20:38 | 000,174,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe PRC - [2011/10/03 10:45:58 | 000,375,424 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe PRC - [2011/10/01 00:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe PRC - [2011/10/01 00:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe PRC - [2011/08/10 21:52:54 | 000,138,760 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Safe Web Lite\Engine\2.0.0.16\ccSvcHst.exe PRC - [2011/05/30 12:48:16 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\Windows\SysWOW64\ACEngSvr.exe PRC - [2011/04/06 08:27:56 | 002,535,296 | ---- | M] (ashampoo GmbH & Co. KG) -- D:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 4\UIWatcher.exe PRC - [2011/02/18 10:47:12 | 000,079,192 | ---- | M] (Research In Motion Limited) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe PRC - [2010/12/21 03:24:38 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2010/12/21 03:24:36 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2010/08/20 18:57:06 | 000,107,816 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe PRC - [2010/07/10 07:45:00 | 000,984,400 | ---- | M] (Virage Logic Corporation / Sonic Focus) -- C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe PRC - [2009/06/19 09:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe PRC - [2009/06/14 00:34:40 | 000,350,208 | ---- | M] (Util's Haven) -- D:\Program Files (x86)\Prism HUD\prism.exe PRC - [2009/04/07 08:13:10 | 000,673,616 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe PRC - [2007/06/15 11:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) -- C:\Windows\SysWOW64\bgsvcgen.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012/11/24 09:49:41 | 006,307,952 | ---- | M] () -- C:\Programmi\Microsoft Office 15\root\office15\1033\grooveintlresource.dll MOD - [2012/11/24 09:48:18 | 000,340,592 | ---- | M] () -- C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\c2r32.dll MOD - [2012/11/24 09:47:46 | 000,307,976 | ---- | M] () -- C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll MOD - [2012/11/24 09:43:47 | 000,110,192 | ---- | M] () -- C:\Programmi\Microsoft Office 15\root\office15\jitv.dll MOD - [2012/11/24 09:41:08 | 000,340,592 | ---- | M] () -- C:\Programmi\Microsoft Office 15\root\office15\c2r32.dll MOD - [2012/11/24 09:41:08 | 000,307,976 | ---- | M] () -- C:\Programmi\Microsoft Office 15\root\office15\appvisvstream32.dll MOD - [2012/11/20 07:16:18 | 002,400,224 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2012/11/19 21:31:12 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\6cb04d32b2897d0745ade5b7a0689189\System.Configuration.ni.dll MOD - [2012/11/18 20:40:42 | 005,452,800 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\6c34b9c8df4997ebbd2cd0ec01592eb2\System.Xml.ni.dll MOD - [2012/11/18 20:40:39 | 012,436,480 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\b5fbb0525df9de99970c60a5891939eb\System.Windows.Forms.ni.dll MOD - [2012/11/18 20:40:32 | 001,592,832 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\a2ce5fa5ddc467113d344183228ad23e\System.Drawing.ni.dll MOD - [2012/11/18 20:40:26 | 014,344,704 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e77619e856b76cb3cafaf8978fa50a3c\PresentationFramework.ni.dll MOD - [2012/11/18 20:40:26 | 000,368,128 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\451a19701e7295e052a28fc3fc496922\PresentationFramework.Aero.ni.dll MOD - [2012/11/18 20:40:12 | 012,240,384 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCore\d3c3e4130d3b3fabf8e856ef4da0b05d\PresentationCore.ni.dll MOD - [2012/11/18 20:40:02 | 003,349,504 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsBase\20da735ec72bc50c0041364d82b87e7a\WindowsBase.ni.dll MOD - [2012/11/18 20:39:59 | 007,988,224 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\7a3f4b6e28bff7fc6e201f3444e38d06\System.ni.dll MOD - [2012/11/18 20:39:54 | 011,494,912 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\0d4a97f42b4d71125220c04a3a2fee75\mscorlib.ni.dll MOD - [2012/11/10 20:36:28 | 014,586,808 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll MOD - [2012/11/01 18:33:14 | 002,111,456 | ---- | M] () -- D:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll MOD - [2012/11/01 18:33:14 | 000,157,664 | ---- | M] () -- D:\Program Files (x86)\Mozilla Thunderbird\nsldap32v60.dll MOD - [2012/11/01 18:33:14 | 000,021,984 | ---- | M] () -- D:\Program Files (x86)\Mozilla Thunderbird\nsldappr32v60.dll MOD - [2012/10/11 12:17:59 | 002,312,216 | ---- | M] () -- C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe MOD - [2012/10/11 12:17:06 | 002,069,528 | ---- | M] () -- C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll MOD - [2012/09/13 23:04:00 | 000,307,200 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll MOD - [2012/07/06 03:01:04 | 000,241,664 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_it_31bf3856ad364e35\PresentationFramework.resources.dll MOD - [2012/07/06 03:01:04 | 000,086,016 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\WindowsBase.resources\3.0.0.0_it_31bf3856ad364e35\WindowsBase.resources.dll MOD - [2012/07/06 03:01:02 | 000,425,984 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_it_b77a5c561934e089\System.Windows.Forms.resources.dll MOD - [2012/05/30 07:51:08 | 000,699,280 | R--- | M] () -- C:\PROGRAM FILES (X86)\NORTON 360\NORTON 360\ENGINE\20.2.0.19\wincfi39.dll MOD - [2012/02/06 18:32:30 | 000,009,216 | ---- | M] () -- C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll MOD - [2010/08/20 18:57:06 | 000,619,816 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll MOD - [2010/08/20 18:57:00 | 000,013,096 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll MOD - [2009/03/12 14:45:32 | 000,135,168 | ---- | M] () -- C:\PROGRA~2\EPSONS~1\EVENTM~1\ASSIST~1\SCANAS~1\SCANEN~1.DLL MOD - [2008/11/21 12:58:42 | 000,057,344 | ---- | M] () -- C:\PROGRA~2\EPSONS~1\EVENTM~1\ASSIST~1\SCANAS~1\SATWAIN.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2012/10/29 04:20:49 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV:[b]64bit:[/b] - [2012/10/20 08:43:53 | 006,746,280 | ---- | M] (Prevx) [Auto | Running] -- C:\Program Files\Prevx\prevx.exe -- (CSIScanner) SRV:[b]64bit:[/b] - [2012/09/20 10:10:47 | 002,367,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService) SRV:[b]64bit:[/b] - [2012/09/20 09:18:03 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV:[b]64bit:[/b] - [2012/09/20 07:32:59 | 000,169,984 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker) SRV:[b]64bit:[/b] - [2012/09/20 07:32:58 | 000,178,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV:[b]64bit:[/b] - [2012/09/20 07:31:18 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc) SRV:[b]64bit:[/b] - [2012/09/20 07:30:41 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure) SRV:[b]64bit:[/b] - [2012/07/26 04:08:33 | 000,025,088 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\mqsvc.exe -- (MSMQ) SRV:[b]64bit:[/b] - [2012/07/26 04:08:04 | 001,968,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc) SRV:[b]64bit:[/b] - [2012/07/26 04:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc) SRV:[b]64bit:[/b] - [2012/07/26 04:07:42 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc) SRV:[b]64bit:[/b] - [2012/07/26 04:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc) SRV:[b]64bit:[/b] - [2012/07/26 04:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc) SRV:[b]64bit:[/b] - [2012/07/26 04:06:36 | 000,463,872 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm) SRV:[b]64bit:[/b] - [2012/07/26 04:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon) SRV:[b]64bit:[/b] - [2012/07/26 04:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc) SRV:[b]64bit:[/b] - [2012/07/26 04:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup) SRV:[b]64bit:[/b] - [2012/07/26 04:06:00 | 000,438,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM) SRV:[b]64bit:[/b] - [2012/07/26 04:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso) SRV:[b]64bit:[/b] - [2012/07/26 04:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS) SRV:[b]64bit:[/b] - [2012/07/26 04:05:28 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc) SRV:[b]64bit:[/b] - [2012/07/26 04:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService) SRV:[b]64bit:[/b] - [2012/07/26 04:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent) SRV:[b]64bit:[/b] - [2012/07/26 04:05:04 | 000,187,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2012/07/26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss) SRV:[b]64bit:[/b] - [2012/07/26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync) SRV:[b]64bit:[/b] - [2012/07/26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown) SRV:[b]64bit:[/b] - [2012/07/26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv) SRV:[b]64bit:[/b] - [2012/07/26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange) SRV:[b]64bit:[/b] - [2012/07/26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat) SRV:[b]64bit:[/b] - [2012/05/29 16:19:44 | 000,035,680 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp) SRV:[b]64bit:[/b] - [2011/03/04 01:57:58 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent) SRV - [2012/11/22 00:58:46 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012/11/10 20:36:28 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012/10/25 20:17:30 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2012/10/11 12:17:59 | 002,312,216 | ---- | M] () [Auto | Running] -- C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe -- (Browser Manager) SRV - [2012/10/10 19:29:14 | 000,143,928 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton 360\Norton 360\Engine\20.2.0.19\ccSvcHst.exe -- (N360) SRV - [2012/09/23 19:43:34 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012/09/20 09:18:03 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify) SRV - [2012/09/11 18:13:02 | 001,494,144 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programmi\Microsoft Office 15\ClientX64\integratedoffice.exe -- (OfficeSvc) SRV - [2012/07/26 04:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc) SRV - [2012/07/26 04:18:41 | 000,408,064 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS) SRV - [2012/07/26 04:18:41 | 000,408,064 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (W3SVC) SRV - [2012/07/26 04:17:52 | 000,060,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc) SRV - [2012/07/05 17:41:46 | 003,048,136 | ---- | M] (Skype Technologies S.A.) [Disabled | Stopped] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2012/06/23 17:18:38 | 005,132,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programmi\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc) SRV - [2012/05/29 16:19:46 | 002,143,072 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc) SRV - [2012/05/29 16:19:44 | 000,029,024 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp) SRV - [2012/02/03 15:24:50 | 000,277,120 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe -- (ASUS InstantOn) SRV - [2011/11/21 13:22:08 | 000,080,512 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService) SRV - [2011/11/21 13:19:50 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv) SRV - [2011/11/04 08:57:32 | 002,234,992 | ---- | M] (mobile concepts) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\MC Common\BoostService.exe -- (SpeedBoosterSvc) SRV - [2011/11/04 08:57:30 | 005,663,856 | ---- | M] (mobile concepts) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\MC Common\AMDSrv.exe -- (MCDefragService) SRV - [2011/10/01 00:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa) SRV - [2011/10/01 00:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist) SRV - [2011/08/10 21:52:54 | 000,138,760 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Safe Web Lite\Engine\2.0.0.16\ccSvcHst.exe -- (NSL) SRV - [2010/12/21 03:24:38 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2010/12/21 03:24:36 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2010/09/23 02:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Programmi\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV - [2010/03/18 10:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon) SRV - [2007/12/17 04:00:00 | 000,163,840 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE -- (EPSON_EB_RPCV4_01) SRV - [2007/06/15 11:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) [Auto | Running] -- C:\Windows\SysWOW64\bgsvcgen.exe -- (bgsvcgen) SRV - [2007/01/11 04:02:00 | 000,126,464 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE -- (EPSON_PM_RPCV4_01) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012/11/24 16:28:46 | 000,177,312 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\SYMEVENT64x86.SYS -- (SymEvent) DRV:[b]64bit:[/b] - [2012/10/20 08:43:54 | 000,065,736 | ---- | M] (Prevx) [File_System | System | Running] -- C:\Windows\SysNative\Drivers\pxrts.sys -- (pxrts) DRV:[b]64bit:[/b] - [2012/10/20 08:43:54 | 000,036,384 | ---- | M] (Prevx) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pxscan.sys -- (pxscan) DRV:[b]64bit:[/b] - [2012/10/20 08:43:53 | 000,024,024 | ---- | M] (Prevx) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\pxkbf.sys -- (pxkbf) DRV:[b]64bit:[/b] - [2012/10/18 07:17:18 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc) DRV:[b]64bit:[/b] - [2012/10/12 09:08:01 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2012/10/11 08:25:48 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor) DRV:[b]64bit:[/b] - [2012/10/11 08:13:54 | 000,194,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2012/10/11 08:13:49 | 000,058,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam) DRV:[b]64bit:[/b] - [2012/10/08 18:00:02 | 000,776,864 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\srtsp64.sys -- (SRTSP) DRV:[b]64bit:[/b] - [2012/10/03 18:40:36 | 001,133,216 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\SymEFA64.sys -- (SymEFA) DRV:[b]64bit:[/b] - [2012/10/03 18:40:20 | 000,493,216 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\SymDS64.sys -- (SymDS) DRV:[b]64bit:[/b] - [2012/10/03 18:19:14 | 000,168,096 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\ccSetx64.sys -- (ccSet_N360) DRV:[b]64bit:[/b] - [2012/09/20 08:55:33 | 000,445,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3) DRV:[b]64bit:[/b] - [2012/09/20 08:55:33 | 000,337,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI) DRV:[b]64bit:[/b] - [2012/09/20 08:55:33 | 000,212,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000) DRV:[b]64bit:[/b] - [2012/09/20 08:55:30 | 000,120,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101) DRV:[b]64bit:[/b] - [2012/09/20 08:55:29 | 000,028,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32) DRV:[b]64bit:[/b] - [2012/09/20 08:55:27 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2012/09/20 08:55:24 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2012/09/20 08:03:08 | 000,148,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM) DRV:[b]64bit:[/b] - [2012/09/20 07:09:11 | 000,031,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg) DRV:[b]64bit:[/b] - [2012/09/20 07:08:27 | 000,029,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid) DRV:[b]64bit:[/b] - [2012/09/06 19:05:14 | 000,432,800 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\symnets.sys -- (SymNetS) DRV:[b]64bit:[/b] - [2012/09/06 19:05:08 | 000,043,680 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\SymIMV.sys -- (SymIM) DRV:[b]64bit:[/b] - [2012/09/06 19:05:06 | 000,023,448 | R--- | M] (Symantec Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\SymELAM.sys -- (SymELAM) DRV:[b]64bit:[/b] - [2012/09/06 18:48:08 | 000,224,416 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\Ironx64.sys -- (SymIRON) DRV:[b]64bit:[/b] - [2012/09/06 18:40:52 | 000,037,496 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\srtspx64.sys -- (SRTSPX) DRV:[b]64bit:[/b] - [2012/08/21 17:56:38 | 000,091,648 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\AtihdW86.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2012/08/20 16:23:52 | 000,147,288 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV:[b]64bit:[/b] - [2012/08/01 03:03:18 | 003,618,304 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\athw8x.sys -- (athr) DRV:[b]64bit:[/b] - [2012/07/26 06:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2012/07/26 06:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv) DRV:[b]64bit:[/b] - [2012/07/26 06:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID) DRV:[b]64bit:[/b] - [2012/07/26 06:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt) DRV:[b]64bit:[/b] - [2012/07/26 06:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor) DRV:[b]64bit:[/b] - [2012/07/26 06:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex) DRV:[b]64bit:[/b] - [2012/07/26 06:00:55 | 000,283,888 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport) DRV:[b]64bit:[/b] - [2012/07/26 06:00:55 | 000,077,552 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci) DRV:[b]64bit:[/b] - [2012/07/26 06:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis) DRV:[b]64bit:[/b] - [2012/07/26 06:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2012/07/26 06:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2012/07/26 06:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS) DRV:[b]64bit:[/b] - [2012/07/26 06:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2012/07/26 06:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV:[b]64bit:[/b] - [2012/07/26 06:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass) DRV:[b]64bit:[/b] - [2012/07/26 06:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2012/07/26 06:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware) DRV:[b]64bit:[/b] - [2012/07/26 06:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2012/07/26 06:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2012/07/26 05:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS) DRV:[b]64bit:[/b] - [2012/07/26 05:54:34 | 000,096,496 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS) DRV:[b]64bit:[/b] - [2012/07/26 05:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci) DRV:[b]64bit:[/b] - [2012/07/26 05:44:30 | 000,258,288 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter) DRV:[b]64bit:[/b] - [2012/07/26 05:36:15 | 000,034,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot) DRV:[b]64bit:[/b] - [2012/07/26 04:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2012/07/26 03:30:26 | 000,185,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mqac.sys -- (MQAC) DRV:[b]64bit:[/b] - [2012/07/26 03:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf) DRV:[b]64bit:[/b] - [2012/07/26 03:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay) DRV:[b]64bit:[/b] - [2012/07/26 03:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo) DRV:[b]64bit:[/b] - [2012/07/26 03:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender) DRV:[b]64bit:[/b] - [2012/07/26 03:27:58 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM) DRV:[b]64bit:[/b] - [2012/07/26 03:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter) DRV:[b]64bit:[/b] - [2012/07/26 03:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic) DRV:[b]64bit:[/b] - [2012/07/26 03:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime) DRV:[b]64bit:[/b] - [2012/07/26 03:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig) DRV:[b]64bit:[/b] - [2012/07/26 03:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV:[b]64bit:[/b] - [2012/07/26 03:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr) DRV:[b]64bit:[/b] - [2012/07/26 03:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd) DRV:[b]64bit:[/b] - [2012/07/26 03:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx) DRV:[b]64bit:[/b] - [2012/07/26 03:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx) DRV:[b]64bit:[/b] - [2012/07/26 03:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2012/07/26 03:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum) DRV:[b]64bit:[/b] - [2012/07/26 03:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2012/07/26 03:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2012/07/26 03:25:54 | 000,038,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c) DRV:[b]64bit:[/b] - [2012/07/26 03:25:26 | 000,203,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\Vid.sys -- (Vid) DRV:[b]64bit:[/b] - [2012/07/26 03:25:22 | 000,067,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\storvsp.sys -- (storvsp) DRV:[b]64bit:[/b] - [2012/07/26 03:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr) DRV:[b]64bit:[/b] - [2012/07/26 03:25:12 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmbusr.sys -- (vmbusr) DRV:[b]64bit:[/b] - [2012/07/26 03:25:12 | 000,066,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpcivsp.sys -- (vpcivsp) DRV:[b]64bit:[/b] - [2012/07/26 03:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform) DRV:[b]64bit:[/b] - [2012/07/26 03:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp) DRV:[b]64bit:[/b] - [2012/07/26 03:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu) DRV:[b]64bit:[/b] - [2012/07/25 23:53:22 | 011,926,528 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2012/06/29 03:00:48 | 000,360,448 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2012/06/02 15:31:31 | 000,100,864 | ---- | M] (Qualcomm Atheros Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\L1C63x64.sys -- (L1C) DRV:[b]64bit:[/b] - [2012/03/09 09:57:36 | 000,023,816 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\cpuz135_x64.sys -- (cpuz135) DRV:[b]64bit:[/b] - [2011/10/01 00:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Sftvolwin7.sys -- (Sftvol) DRV:[b]64bit:[/b] - [2011/10/01 00:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Sftplaywin7.sys -- (Sftplay) DRV:[b]64bit:[/b] - [2011/10/01 00:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Sftredirwin7.sys -- (Sftredir) DRV:[b]64bit:[/b] - [2011/10/01 00:30:16 | 000,765,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Sftfswin7.sys -- (Sftfs) DRV:[b]64bit:[/b] - [2011/08/09 00:38:05 | 000,167,048 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\NSTx64\0200000.010\ccSetx64.sys -- (ccSet_NST) DRV:[b]64bit:[/b] - [2011/07/29 12:54:56 | 000,016,776 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv) DRV:[b]64bit:[/b] - [2011/07/29 12:54:56 | 000,009,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv) DRV:[b]64bit:[/b] - [2011/05/13 23:37:54 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fssfltr.sys -- (fssfltr) DRV:[b]64bit:[/b] - [2011/04/26 04:07:36 | 000,557,848 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2010/12/31 17:30:10 | 000,138,024 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\ETD.sys -- (ETD) DRV:[b]64bit:[/b] - [2010/10/19 23:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\HECIx64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2009/05/18 12:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:[b]64bit:[/b] - [2008/05/23 16:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WimFltr.sys -- (WimFltr) DRV:[b]64bit:[/b] - [2006/08/25 13:36:52 | 000,039,208 | ---- | M] (B.H.A Corporation) [Kernel | System | Running] -- C:\WINDOWS\SysNative\drivers\cdrbsdrv.sys -- (cdrbsdrv) DRV - [2012/11/23 16:36:10 | 000,513,184 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\IPSDefs\20121123.001\IDSviA64.sys -- (IDSVia64) DRV - [2012/11/23 01:00:00 | 002,084,000 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\VirusDefs\20121123.020\ex64.sys -- (NAVEX15) DRV - [2012/11/23 01:00:00 | 000,126,112 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\VirusDefs\20121123.020\eng64.sys -- (NAVENG) DRV - [2012/11/18 01:48:50 | 000,138,912 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2012/10/24 00:34:23 | 001,384,608 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\BASHDefs\20121106.001\BHDrvx64.sys -- (BHDrvx64) DRV - [2012/09/29 07:26:46 | 000,484,512 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl) DRV - [2011/10/31 14:00:20 | 000,011,856 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv) DRV - [2011/09/07 08:55:04 | 000,017,536 | ---- | M] (ASUS) [Kernel | System | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys -- (ATKWMIACPIIO_) DRV - [2011/07/29 12:54:56 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv) DRV - [2011/07/29 12:54:56 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2009/07/02 16:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.claro-search.com/?affID=116677&tt=4612_6&babsrc=HP_ss&mntrId=008edbb00000000000002eeddef5ae3e IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://forum.mozillaitalia.org/ind [Binary data over 200 bytes] IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/ IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\..\SearchScopes,DefaultScope = {0EBB234C-42D8-48A5-A996-DC65E2E0B99D} IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\..\SearchScopes\{0EBB234C-42D8-48A5-A996-DC65E2E0B99D}: "URL" = http://www.google.it/#hl=it&source=hp&q={searchTerms}&aq=f&aqi=g10&aql=&oq=&gs_rfai=&fp=9fca69c98b5d77d7 IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: %7Be4a8a97b-f2ed-450b-b12d-ee082ba24781%7D:1.5 FF - prefs.js..extensions.enabledAddons: text2voice%40vik.josh:1.10 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0 FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_11_5_502_110.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\windows\system32\npDeployJava1.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll () FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.3: D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKLM\Software\MozillaPlugins\ZEON/PDF,version=2.0: D:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: D:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012/07/22 10:46:39 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\coFFPlgn\ [2012/11/24 17:14:37 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\IPSFFPlgn\ [2012/11/24 16:32:05 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/11/24 16:08:46 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 13.0.1\extensions\\Components: D:\Program Files (x86)\Mozilla Thunderbird\components [2012/11/01 18:33:11 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{b64982b1-d112-42b5-b1e4-d3867c4533f8}: C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension [2012/11/18 04:27:03 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 16.0.2\extensions\\Components: D:\Program Files (x86)\Mozilla Thunderbird\components [2012/11/01 18:33:11 | 000,000,000 | ---D | M] [2012/07/01 08:08:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paul\AppData\Roaming\mozilla\Extensions [2012/11/24 09:37:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paul\AppData\Roaming\mozilla\Firefox\Profiles\f86jyhcc.default-1353537215881\extensions [2012/11/24 09:37:23 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Paul\AppData\Roaming\mozilla\Firefox\Profiles\f86jyhcc.default-1353537215881\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2012/11/22 01:23:10 | 000,061,608 | ---- | M] () (No name found) -- C:\Users\Paul\AppData\Roaming\mozilla\firefox\profiles\f86jyhcc.default-1353537215881\extensions\text2voice@vik.josh.xpi [2012/11/24 09:37:14 | 000,804,627 | ---- | M] () (No name found) -- C:\Users\Paul\AppData\Roaming\mozilla\firefox\profiles\f86jyhcc.default-1353537215881\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012/11/22 01:23:10 | 000,243,496 | ---- | M] () (No name found) -- C:\Users\Paul\AppData\Roaming\mozilla\firefox\profiles\f86jyhcc.default-1353537215881\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2012/11/24 16:08:46 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2012/11/22 00:58:43 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012/11/20 07:17:00 | 000,262,112 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012/11/20 11:04:28 | 000,001,606 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazon-it.xml [2012/11/20 11:04:28 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2012/11/20 11:04:28 | 000,000,957 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-it.xml [2012/11/20 11:04:28 | 000,001,030 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\hoepli.xml [2012/11/20 11:04:28 | 000,001,395 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-it.xml [2012/11/20 11:04:28 | 000,001,166 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-it.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter} CHR - homepage: CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\pdf.dll CHR - plugin: Application Manager (Enabled) = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph\1.0_0\spext.dll CHR - plugin: Freemake np-plugin for google chrome (Enabled) = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj\1.0.0_0\npFreemake.dll CHR - plugin: Norton Confidential (Enabled) = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.6.10_0\npcoplgn.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = D:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = D:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = D:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = D:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = D:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = D:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = D:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll CHR - plugin: RIM Handheld Application Loader (Enabled) = C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Disabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Microsoft Office 2013 (Enabled) = C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL CHR - plugin: Shockwave Flash (Enabled) = C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\windows\SysWOW64\npDeployJava1.dll CHR - plugin: DocuCom PDF Plus (Enabled) = D:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll CHR - plugin: VLC Web Plugin (Enabled) = D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll CHR - Extension: Google Drive = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: GreaseGoogle = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\apeeedokdcajckokidhdkbkflkpfpgko\1.61_0\ CHR - Extension: YouTube = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Ricerca Google = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: Freemake Video Converter = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj\1.0.0_0\ CHR - Extension: Norton Identity Protection = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.6.10_0\ CHR - Extension: Norton Identity Protection = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.2.0.18_0\ CHR - Extension: Tastiera virtuale (di Google) = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpphfcjpaldmedbbomcdhgonmhjngfig\0.9.8.8_0\ CHR - Extension: Settings Protector = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph\1.0_0\ CHR - Extension: Gmail = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ CHR - Extension: OneClickDownload = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.2_0\ O1 HOSTS File: ([2012/07/26 06:26:49 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre7\bin\ssv.dll (Oracle Corporation) O2:[b]64bit:[/b] - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) O2:[b]64bit:[/b] - BHO: (Microsoft SPFS Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Norton 360\Engine\20.2.0.19\coIEPlg.dll (Symantec Corporation) O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Norton 360\Engine\20.2.0.19\IPS\IPSBHO.DLL (Symantec Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programmi\Microsoft Office 15\root\office15\urlredir.dll (Microsoft Corporation) O2 - BHO: (Microsoft SPFS Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Programmi\Microsoft Office 15\root\office15\grooveex.dll (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Norton 360\Engine\20.2.0.19\coIEPlg.dll (Symantec Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Alcor Micro Corp.) O4:[b]64bit:[/b] - HKLM..\Run: [ETDCtrl] C:\Programmi\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) O4:[b]64bit:[/b] - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Microsoft Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [IntelliType Pro] c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation) O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.) O4 - HKLM..\Run: [EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS) O4 - HKLM..\Run: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe (Research In Motion Limited) O4 - HKLM..\Run: [SonicMasterTray] C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe (Virage Logic Corporation / Sonic Focus) O4 - HKU\S-1-5-21-135823994-239325686-984002518-1000..\Run: [Akamai NetSession Interface] C:\Users\Paul\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) O4 - HKU\S-1-5-21-135823994-239325686-984002518-1000..\Run: [EPSON SX510W Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFIE.EXE /FU "C:\Windows\TEMP\E_SAD9F.tmp" /EF "HKCU" File not found O4 - HKU\S-1-5-21-135823994-239325686-984002518-1000..\Run: [EPSON SX510W Series (Copia 2)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFIE.EXE /FU "C:\Windows\TEMP\E_S1862.tmp" /EF "HKCU" File not found O4 - HKU\S-1-5-21-135823994-239325686-984002518-1000..\Run: [Minimem] D:\Program Files (x86)\Kerkia\Minimem\minimem.exe (Kerkia) O4 - HKU\S-1-5-21-135823994-239325686-984002518-1000..\Run: [SkyDrive] c:\users\paul\appdata\local\microsoft\skydrive\skydrive.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-135823994-239325686-984002518-1000..\Run: [UIWatcher] D:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 4\UIWatcher.exe (ashampoo GmbH & Co. KG) O4 - Startup: C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Start Prism HUD.lnk = D:\Program Files (x86)\Prism HUD\prism.exe (Util's Haven) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\S-1-5-21-135823994-239325686-984002518-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O7 - HKU\S-1-5-21-135823994-239325686-984002518-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 00 00 01 00 [binary data] O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation) O8:[b]64bit:[/b] - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation) O8:[b]64bit:[/b] - Extra context menu item: Traduci pagina con Google - C:\ProgramData\TuneUp Software\TuneUp Utilities 2012\Web\gtranslate.htm () O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation) O8 - Extra context menu item: Traduci pagina con Google - C:\ProgramData\TuneUp Software\TuneUp Utilities 2012\Web\gtranslate.htm () O9:[b]64bit:[/b] - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation) O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation) O9:[b]64bit:[/b] - Extra Button: Microsoft Lync add-on - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Microsoft Lync add-on - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) O9:[b]64bit:[/b] - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9:[b]64bit:[/b] - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programmi\Microsoft Office 15\root\office15\onbttnie.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programmi\Microsoft Office 15\root\office15\onbttnie.dll (Microsoft Corporation) O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programmi\Microsoft Office 15\root\office15\onbttnielinkednotes.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programmi\Microsoft Office 15\root\office15\onbttnielinkednotes.dll (Microsoft Corporation) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programmi\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-135823994-239325686-984002518-1000\..Trusted Domains: hijackthis.de ([www] https in Siti attendibili) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 193.70.152.15 212.52.97.15 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{39069E62-4E84-4576-B0D1-97E4429FCA4A}: DhcpNameServer = 193.70.152.15 212.52.97.15 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\osf - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Programmi\Microsoft Office 15\root\office15\msosb.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - AppInit_DLLs: (c:\progra~3\browse~1\23796~1.11\{16cdf~1\browse~1.dll) - c:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll () O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O27:[b]64bit:[/b] - HKLM IFEO\isuspm.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27:[b]64bit:[/b] - HKLM IFEO\itunes.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27:[b]64bit:[/b] - HKLM IFEO\pdfreader.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27:[b]64bit:[/b] - HKLM IFEO\skype.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27:[b]64bit:[/b] - HKLM IFEO\soda 3d pdf reader.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27:[b]64bit:[/b] - HKLM IFEO\x-lite.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\isuspm.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\itunes.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\pdfreader.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\skype.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\soda 3d pdf reader.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\x-lite.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O30 - LSA: Security Packages - (livessp) - File not found O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) NetSvcs:[b]64bit:[/b] wlidsvc - C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] DsmSvc - C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] NcaSvc - C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) MsConfig:64bit - StartUpFolder: C:^Users^Paul^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Battery Doubler.lnk - D:\Program Files (x86)\Dachshund Software\Battery Doubler\Battery Doubler.exe - () MsConfig:64bit - StartUpReg: [b]ACMON[/b] - hkey= - key= - C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUS) MsConfig:64bit - StartUpReg: [b]Adobe ARM[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) MsConfig:64bit - StartUpReg: [b]ASUS Screen Saver Protector[/b] - hkey= - key= - C:\Windows\AsScrPro.exe (ASUS) MsConfig:64bit - StartUpReg: [b]CLMLServer[/b] - hkey= - key= - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink) MsConfig:64bit - StartUpReg: [b]RtHDVCpl[/b] - hkey= - key= - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) MsConfig:64bit - StartUpReg: [b]X-Lite[/b] - hkey= - key= - D:\Program Files (x86)\CounterPath\X-Lite\X-Lite.exe (CounterPath) MsConfig:64bit - State: "bootini" - Reg Error: Key error. MsConfig:64bit - State: "services" - Reg Error: Key error. MsConfig:64bit - State: "startup" - Reg Error: Key error. SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Base - Driver Group SafeBootMin:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group SafeBootMin:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] File system - Driver Group SafeBootMin:[b]64bit:[/b] Filter - Driver Group SafeBootMin:[b]64bit:[/b] HelpSvc - Service SafeBootMin:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group SafeBootMin:[b]64bit:[/b] sacsvr - Service SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] TBS - Service SafeBootMin:[b]64bit:[/b] vmms - Service SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices SafeBootMin:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: TBS - Service SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices SafeBootMin: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Base - Driver Group SafeBootNet:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group SafeBootNet:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] File system - Driver Group SafeBootNet:[b]64bit:[/b] Filter - Driver Group SafeBootNet:[b]64bit:[/b] HelpSvc - Service SafeBootNet:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Messenger - Service SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group SafeBootNet:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] netprofm - C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Network - Driver Group SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group SafeBootNet:[b]64bit:[/b] rdpencdd.sys - Driver SafeBootNet:[b]64bit:[/b] rdsessmgr - Service SafeBootNet:[b]64bit:[/b] sacsvr - Service SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group SafeBootNet:[b]64bit:[/b] SmartcardSimulator - Driver SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] TBS - Service SafeBootNet:[b]64bit:[/b] TDI - Driver Group SafeBootNet:[b]64bit:[/b] VaultSvc - C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] VirtualSmartcardReader - Driver SafeBootNet:[b]64bit:[/b] vmms - Service SafeBootNet:[b]64bit:[/b] Wcmsvc - C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices SafeBootNet:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdpencdd.sys - Driver SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: SmartcardSimulator - Driver SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TBS - Service SafeBootNet: TDI - Driver Group SafeBootNet: VirtualSmartcardReader - Driver SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices SafeBootNet: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX:[b]64bit:[/b] {74166507-F39E-305E-A972-2C3478E47350} - .NET Framework ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U %SystemRoot%\System32\shell32.dll ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX:[b]64bit:[/b] >{26923b43-4d38-484f-9b9e-de460746276c} - ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {3A8403F3-90B5-35DC-8926-EB9B907209F9} - .NET Framework ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5A604D2C-E968-429B-8327-62B5CE52126D} - .NET Framework ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP Drivers32:[b]64bit:[/b] aux - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] aux1 - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] midi - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] midi1 - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] midimapper - midimap.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] mixer - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] mixer1 - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] msacm.imaadpcm - imaadp32.acm (Microsoft Corporation) Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32:[b]64bit:[/b] msacm.msadpcm - msadp32.acm (Microsoft Corporation) Drivers32:[b]64bit:[/b] msacm.msg711 - msg711.acm (Microsoft Corporation) Drivers32:[b]64bit:[/b] msacm.msgsm610 - msgsm32.acm (Microsoft Corporation) Drivers32:[b]64bit:[/b] MSVideo8 - VfWWDM32.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.i420 - iyuv_32.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] VIDC.IYUV - iyuv_32.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.mrle - msrle32.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.msvc - msvidc32.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] VIDC.UYVY - msyuv.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] VIDC.YUY2 - msyuv.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] VIDC.YVU9 - tsbyuv.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] VIDC.YVYU - msyuv.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] wave - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] wave1 - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] wavemapper - msacm32.drv (Microsoft Corporation) Drivers32: aux - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: aux1 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: midi - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: midi1 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: midimapper - C:\WINDOWS\SysWow64\midimap.dll (Microsoft Corporation) Drivers32: mixer - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: mixer1 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: msacm.imaadpcm - C:\WINDOWS\SysWow64\imaadp32.acm (Microsoft Corporation) Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.msadpcm - C:\WINDOWS\SysWow64\msadp32.acm (Microsoft Corporation) Drivers32: msacm.msg711 - C:\WINDOWS\SysWow64\msg711.acm (Microsoft Corporation) Drivers32: msacm.msgsm610 - C:\WINDOWS\SysWow64\msgsm32.acm (Microsoft Corporation) Drivers32: msacm.siren - C:\WINDOWS\SysWow64\sirenacm.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\WINDOWS\SysWow64\iccvid.dll (Radius Inc.) Drivers32: vidc.i420 - C:\WINDOWS\SysWow64\iyuv_32.dll (Microsoft Corporation) Drivers32: vidc.iyuv - C:\WINDOWS\SysWow64\iyuv_32.dll (Microsoft Corporation) Drivers32: vidc.mrle - C:\WINDOWS\SysWow64\msrle32.dll (Microsoft Corporation) Drivers32: vidc.msvc - C:\WINDOWS\SysWow64\msvidc32.dll (Microsoft Corporation) Drivers32: vidc.uyvy - C:\WINDOWS\SysWow64\msyuv.dll (Microsoft Corporation) Drivers32: vidc.yuy2 - C:\WINDOWS\SysWow64\msyuv.dll (Microsoft Corporation) Drivers32: vidc.yvu9 - C:\WINDOWS\SysWow64\tsbyuv.dll (Microsoft Corporation) Drivers32: vidc.yvyu - C:\WINDOWS\SysWow64\msyuv.dll (Microsoft Corporation) Drivers32: wave - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: wave1 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: wavemapper - C:\WINDOWS\SysWow64\msacm32.drv (Microsoft Corporation) CREATERESTOREPOINT Restore point Set: OTL Restore Point [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2012/11/24 16:45:58 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\NPE [2012/11/24 16:30:53 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360 [2012/11/24 16:23:22 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton [2012/11/24 10:25:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\appmgmt [2012/11/24 09:42:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 [2012/11/23 08:03:03 | 000,000,000 | ---D | C] -- C:\HijackThis [2012/11/22 00:58:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2012/11/22 00:48:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome [2012/11/22 00:46:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator [2012/11/22 00:46:35 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSCOMCT2.OCX [2012/11/22 00:46:35 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSMAPI32.OCX [2012/11/22 00:46:35 | 000,100,864 | ---- | C] (pdfforge GbR) -- C:\WINDOWS\SysNative\pdfcmon.dll [2012/11/22 00:46:34 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSCMCIT.DLL [2012/11/22 00:46:34 | 000,122,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VB6IT.DLL [2012/11/22 00:46:34 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSCC2IT.DLL [2012/11/22 00:46:33 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSMPIDE.DLL [2012/11/21 23:33:41 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\Dati precedenti di Firefox [2012/11/20 08:59:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP [2012/11/20 08:58:25 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2012/11/20 08:48:56 | 000,000,000 | ---D | C] -- C:\AMD [2012/11/19 02:49:50 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Apps [2012/11/18 21:11:01 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Malwarebytes [2012/11/18 21:10:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012/11/18 21:10:36 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\SysNative\drivers\mbam.sys [2012/11/18 19:02:19 | 000,000,000 | R--D | C] -- C:\WINDOWS\BrowserChoice [2012/11/18 17:16:04 | 002,367,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSService.dll [2012/11/18 17:16:03 | 013,640,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll [2012/11/18 17:15:53 | 003,265,256 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\SysNative\drivers\evbda.sys [2012/11/18 17:15:49 | 014,259,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll [2012/11/18 17:15:47 | 010,791,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll [2012/11/18 17:15:44 | 001,131,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll [2012/11/18 17:15:42 | 002,397,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcMon.exe [2012/11/18 17:15:38 | 003,847,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d2d1.dll [2012/11/18 17:15:37 | 003,964,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinSAT.exe [2012/11/18 17:15:36 | 011,875,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll [2012/11/18 17:15:34 | 000,533,224 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\SysNative\drivers\bxvbda.sys [2012/11/18 17:15:33 | 001,513,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vssapi.dll [2012/11/18 17:15:32 | 001,825,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll [2012/11/18 17:15:29 | 001,739,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RacEngn.dll [2012/11/18 17:15:29 | 001,019,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MsSpellCheckingFacility.dll [2012/11/18 17:15:28 | 002,219,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d10warp.dll [2012/11/18 17:15:28 | 001,304,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Streaming.dll [2012/11/18 17:15:28 | 001,096,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpmde.dll [2012/11/18 17:15:28 | 000,757,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uDWM.dll [2012/11/18 17:15:28 | 000,389,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MMDevAPI.dll [2012/11/18 17:15:27 | 001,146,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mcmde.dll [2012/11/18 17:15:27 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provcore.dll [2012/11/18 17:15:26 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ncsi.dll [2012/11/18 17:15:25 | 001,145,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winmde.dll [2012/11/18 17:15:25 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinSATAPI.dll [2012/11/18 17:15:25 | 000,543,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlroamextension.dll [2012/11/18 17:15:23 | 000,995,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Streaming.dll [2012/11/18 17:15:22 | 001,590,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WindowsCodecs.dll [2012/11/18 17:15:22 | 000,634,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apphelp.dll [2012/11/18 17:15:22 | 000,488,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\usbport.sys [2012/11/18 17:15:22 | 000,468,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll [2012/11/18 17:15:22 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IPHLPAPI.DLL [2012/11/18 17:15:21 | 001,743,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\combase.dll [2012/11/18 17:15:21 | 000,709,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MsSpellCheckingFacility.dll [2012/11/18 17:15:21 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFPlay.dll [2012/11/18 17:15:20 | 000,604,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dnsapi.dll [2012/11/18 17:15:20 | 000,420,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWAHost.exe [2012/11/18 17:15:19 | 000,866,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinTypes.dll [2012/11/18 17:15:19 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fveapi.dll [2012/11/18 17:15:19 | 000,640,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSShared.dll [2012/11/18 17:15:19 | 000,631,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserLanguagesCpl.dll [2012/11/18 17:15:19 | 000,545,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\taskeng.exe [2012/11/18 17:15:19 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidcredprov.dll [2012/11/18 17:15:19 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rascfg.dll [2012/11/18 17:15:18 | 000,702,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drvstore.dll [2012/11/18 17:15:18 | 000,617,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll [2012/11/18 17:15:18 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsvr.dll [2012/11/18 17:15:18 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rascfg.dll [2012/11/18 17:15:17 | 001,400,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\propsys.dll [2012/11/18 17:15:17 | 000,337,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBXHCI.SYS [2012/11/18 17:15:17 | 000,332,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wintrust.dll [2012/11/18 17:15:17 | 000,249,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnprv.dll [2012/11/18 17:15:17 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcdsrv.dll [2012/11/18 17:15:16 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VAN.dll [2012/11/18 17:15:16 | 000,445,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBHUB3.SYS [2012/11/18 17:15:16 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlroamextension.dll [2012/11/18 17:15:16 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\services.exe [2012/11/18 17:15:16 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinSATAPI.dll [2012/11/18 17:15:16 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fveapibase.dll [2012/11/18 17:15:16 | 000,203,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSClient.dll [2012/11/18 17:15:15 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appwiz.cpl [2012/11/18 17:15:15 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll [2012/11/18 17:15:15 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bisrv.dll [2012/11/18 17:15:14 | 000,891,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winmde.dll [2012/11/18 17:15:14 | 000,707,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.dll [2012/11/18 17:15:14 | 000,548,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\drvstore.dll [2012/11/18 17:15:14 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSShared.dll [2012/11/18 17:15:14 | 000,291,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Connectivity.dll [2012/11/18 17:15:14 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhengine.dll [2012/11/18 17:15:14 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vdsutil.dll [2012/11/18 17:15:14 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSSync.dll [2012/11/18 17:15:14 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSClient.dll [2012/11/18 17:15:14 | 000,120,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\msgpioclx.sys [2012/11/18 17:15:14 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\psmsrv.dll [2012/11/18 17:15:14 | 000,028,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\msgpiowin32.sys [2012/11/18 17:15:13 | 000,670,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\appwiz.cpl [2012/11/18 17:15:13 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWAHost.exe [2012/11/18 17:15:13 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFPlay.dll [2012/11/18 17:15:13 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSSync.dll [2012/11/18 17:15:13 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PackageStateRoaming.dll [2012/11/18 17:15:12 | 001,369,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RacEngn.dll [2012/11/18 17:15:12 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpncore.dll [2012/11/18 17:15:12 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmredir.dll [2012/11/18 17:15:12 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TpmTasks.dll [2012/11/18 17:15:11 | 000,533,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\provcore.dll [2012/11/18 17:15:11 | 000,390,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.BackgroundTransfer.dll [2012/11/18 17:15:11 | 000,256,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvproc.dll [2012/11/18 17:15:11 | 000,228,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ProximityService.dll [2012/11/18 17:15:11 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PackageStateRoaming.dll [2012/11/18 17:15:11 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\setbcdlocale.dll [2012/11/18 17:15:10 | 002,016,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\batmeter.dll [2012/11/18 17:15:10 | 002,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\batmeter.dll [2012/11/18 17:15:10 | 001,247,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\combase.dll [2012/11/18 17:15:10 | 000,560,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserLanguagesCpl.dll [2012/11/18 17:15:10 | 000,509,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.dll [2012/11/18 17:15:10 | 000,480,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VAN.dll [2012/11/18 17:15:10 | 000,449,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll [2012/11/18 17:15:10 | 000,411,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\FWPKCLNT.SYS [2012/11/18 17:15:10 | 000,148,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\tpm.sys [2012/11/18 17:15:10 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\microsoft-windows-kernel-power-events.dll [2012/11/18 17:15:10 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncHost.exe [2012/11/18 17:15:10 | 000,062,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dumpfve.sys [2012/11/18 17:15:10 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\perfdisk.dll [2012/11/18 17:15:10 | 000,027,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\avrt.dll [2012/11/18 17:15:09 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll [2012/11/18 17:15:09 | 000,303,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys [2012/11/18 17:15:09 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsvr.dll [2012/11/18 17:15:09 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidcredprov.dll [2012/11/18 17:15:09 | 000,212,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UCX01000.SYS [2012/11/18 17:15:09 | 000,195,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Connectivity.dll [2012/11/18 17:15:09 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\perfdisk.dll [2012/11/18 17:15:09 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\svchost.exe [2012/11/18 17:15:09 | 000,021,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\usbd.sys [2012/11/18 17:15:08 | 001,342,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\user32.dll [2012/11/18 17:15:08 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.BackgroundTransfer.dll [2012/11/18 17:15:08 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winsrv.dll [2012/11/18 17:15:08 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\storewuauth.dll [2012/11/18 17:15:08 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhevents.dll [2012/11/18 17:15:07 | 000,699,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.dll [2012/11/18 17:15:07 | 000,627,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lpksetup.exe [2012/11/18 17:15:07 | 000,437,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfh264enc.dll [2012/11/18 17:15:07 | 000,413,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfh264enc.dll [2012/11/18 17:15:07 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfreadwrite.dll [2012/11/18 17:15:07 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvproc.dll [2012/11/18 17:15:07 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfreadwrite.dll [2012/11/18 17:15:07 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll [2012/11/18 17:15:07 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DevPropMgr.dll [2012/11/18 17:15:07 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwm.exe [2012/11/18 17:15:07 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncHost.exe [2012/11/18 17:15:07 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\perfnet.dll [2012/11/18 17:15:06 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhcfg.dll [2012/11/18 17:15:06 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drvinst.exe [2012/11/18 17:15:06 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\drvinst.exe [2012/11/18 17:15:05 | 002,066,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d11.dll [2012/11/18 17:15:05 | 001,701,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3d11.dll [2012/11/18 17:15:05 | 000,588,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webio.dll [2012/11/18 17:15:05 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxgi.dll [2012/11/18 17:15:05 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\perfos.dll [2012/11/18 17:15:05 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll [2012/11/18 17:15:05 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DAFWSD.dll [2012/11/18 17:15:05 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll [2012/11/18 17:15:05 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhsrchapi.dll [2012/11/18 17:15:05 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\perfnet.dll [2012/11/18 17:15:04 | 000,417,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webio.dll [2012/11/18 17:15:04 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhcat.dll [2012/11/18 17:15:04 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemEventsBrokerServer.dll [2012/11/18 17:15:04 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TimeBrokerServer.dll [2012/11/18 17:15:04 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll [2012/11/18 17:15:04 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CscMig.dll [2012/11/18 17:15:04 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnApi.dll [2012/11/18 17:15:04 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhsvc.dll [2012/11/18 17:15:04 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafWCN.dll [2012/11/18 17:15:04 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WcnApi.dll [2012/11/18 17:15:04 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lpremove.exe [2012/11/18 17:15:03 | 000,163,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sspicli.dll [2012/11/18 17:15:03 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhmanagew.exe [2012/11/18 17:15:03 | 000,137,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhshl.dll [2012/11/18 17:15:03 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fdWCN.dll [2012/11/18 17:15:03 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasdiag.dll [2012/11/18 17:15:03 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vsstrace.dll [2012/11/18 17:15:03 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhsrchph.dll [2012/11/18 17:15:03 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhlisten.dll [2012/11/18 17:15:03 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasdiag.dll [2012/11/18 17:15:03 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhcleanup.dll [2012/11/18 17:15:03 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ndptsp.tsp [2012/11/18 17:15:03 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasmxs.dll [2012/11/18 17:15:03 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhtask.dll [2012/11/18 17:15:03 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cryptdlg.dll [2012/11/18 17:15:03 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnEapAuthProxy.dll [2012/11/18 17:15:03 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sdbinst.exe [2012/11/18 17:15:03 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cryptdlg.dll [2012/11/18 17:15:03 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vdsldr.exe [2012/11/18 17:15:03 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sdbinst.exe [2012/11/18 17:15:02 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhautoplay.dll [2012/11/18 17:15:02 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ndptsp.tsp [2012/11/18 17:15:02 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\perfctrs.dll [2012/11/18 17:15:02 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\perfctrs.dll [2012/11/18 17:15:02 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\perfproc.dll [2012/11/18 17:15:02 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasmxs.dll [2012/11/18 17:15:02 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasser.dll [2012/11/18 17:15:02 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnEapPeerProxy.dll [2012/11/18 17:15:02 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasser.dll [2012/11/18 17:15:01 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\perfproc.dll [2012/11/18 17:15:01 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\perfos.dll [2012/11/18 17:15:00 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\kmddsp.tsp [2012/11/18 17:15:00 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kmddsp.tsp [2012/11/18 17:15:00 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sspisrv.dll [2012/11/18 17:14:59 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vds_ps.dll [2012/11/18 17:14:59 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\vds_ps.dll [2012/11/18 17:14:59 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LangCleanupSysprepAction.dll [2012/11/18 17:14:59 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhsvcctl.dll [2012/11/18 17:14:59 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\eventcls.dll [2012/11/18 17:14:59 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\eventcls.dll [2012/11/18 17:14:59 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MUILanguageCleanup.dll [2012/11/18 17:14:59 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\spwmp.dll [2012/11/18 17:14:59 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\spwmp.dll [2012/11/18 17:14:59 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lpksetupproxyserv.dll [2012/11/18 17:14:59 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shimeng.dll [2012/11/18 17:14:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdxm.ocx [2012/11/18 17:14:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxmasf.dll [2012/11/18 17:14:58 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdd.dll [2012/11/18 17:14:58 | 000,031,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BthAvrcpTg.sys [2012/11/18 17:14:58 | 000,029,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BthhfHid.sys [2012/11/18 17:14:58 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BtaMPM.sys [2012/11/18 17:14:58 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdxm.ocx [2012/11/18 17:14:58 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dxmasf.dll [2012/11/18 17:14:57 | 009,374,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmploc.DLL [2012/11/18 17:14:57 | 009,374,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmploc.DLL [2012/11/18 17:14:41 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\synceng.dll [2012/11/18 17:14:41 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\synceng.dll [2012/11/18 17:14:32 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\newdev.dll [2012/11/18 17:14:32 | 000,275,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\newdev.dll [2012/11/18 17:14:32 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\newdev.exe [2012/11/18 17:14:32 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ndadmin.exe [2012/11/18 17:14:32 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\newdev.exe [2012/11/18 17:14:32 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ndadmin.exe [2012/11/18 17:14:31 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanprotdim.dll [2012/11/18 17:11:16 | 000,017,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvcr100_clr0400.dll [2012/11/18 17:11:12 | 000,017,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvcr100_clr0400.dll [2012/11/18 17:10:09 | 001,619,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wucltux.dll [2012/11/18 17:10:09 | 000,767,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll [2012/11/18 17:10:09 | 000,621,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll [2012/11/18 17:10:09 | 000,318,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ubpm.dll [2012/11/18 17:10:09 | 000,251,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WUSettingsProvider.dll [2012/11/18 17:10:09 | 000,246,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ubpm.dll [2012/11/18 17:10:09 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuwebv.dll [2012/11/18 17:10:09 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuwebv.dll [2012/11/18 17:10:09 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wudriver.dll [2012/11/18 17:10:09 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wudriver.dll [2012/11/18 17:10:09 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\taskhost.exe [2012/11/18 17:10:09 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\taskhostex.exe [2012/11/18 17:10:09 | 000,058,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuauclt.exe [2012/11/18 17:10:09 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups2.dll [2012/11/18 17:10:09 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups.dll [2012/11/18 17:10:09 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapp.exe [2012/11/18 17:10:09 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapp.exe [2012/11/18 17:10:09 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wups.dll [2012/11/18 17:10:09 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuaext.dll [2012/11/18 17:10:08 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wushareduxresources.dll [2012/11/18 17:10:07 | 001,526,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll [2012/11/18 17:10:06 | 001,451,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll [2012/11/18 17:10:06 | 000,522,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AUDIOKSE.dll [2012/11/18 17:10:06 | 000,490,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll [2012/11/18 17:10:06 | 000,463,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AUDIOKSE.dll [2012/11/18 17:10:06 | 000,447,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll [2012/11/18 17:10:06 | 000,267,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EncDump.dll [2012/11/18 17:10:06 | 000,253,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\audiodg.exe [2012/11/18 17:10:06 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll [2012/11/18 17:10:04 | 003,244,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll [2012/11/18 17:10:04 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmstormod.dll [2012/11/18 17:10:04 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmstormod.dll [2012/11/18 17:10:04 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dskquota.dll [2012/11/18 17:10:04 | 000,027,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\rdpvideominiport.sys [2012/11/18 17:10:03 | 001,347,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmclient.dll [2012/11/18 17:10:03 | 000,987,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmclient.dll [2012/11/18 17:10:03 | 000,652,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmscan.dll [2012/11/18 17:10:03 | 000,487,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmscan.dll [2012/11/18 17:10:03 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srm.dll [2012/11/18 17:10:03 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srm.dll [2012/11/18 17:10:03 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll [2012/11/18 17:10:03 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmshell.dll [2012/11/18 17:10:03 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\adrclient.dll [2012/11/18 17:10:03 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmshell.dll [2012/11/18 17:10:03 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\adrclient.dll [2012/11/18 17:10:03 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmtrace.dll [2012/11/18 17:10:03 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dskquota.dll [2012/11/18 17:10:03 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmtrace.dll [2012/11/18 17:10:03 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rfxvmt.dll [2012/11/18 17:10:03 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srm_ps.dll [2012/11/18 17:10:03 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srm_ps.dll [2012/11/18 17:09:56 | 006,972,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe [2012/11/18 17:09:55 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll [2012/11/18 17:09:55 | 000,396,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hal.dll [2012/11/18 17:09:53 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll [2012/11/18 17:09:53 | 008,856,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll [2012/11/18 17:09:52 | 002,302,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll [2012/11/18 17:09:52 | 002,146,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll [2012/11/18 17:09:52 | 002,033,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll [2012/11/18 17:09:52 | 000,069,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pdc.sys [2012/11/18 17:09:51 | 001,172,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetsrc.dll [2012/11/18 17:09:51 | 000,929,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetsrc.dll [2012/11/18 17:09:51 | 000,677,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetcore.dll [2012/11/18 17:09:51 | 000,673,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll [2012/11/18 17:09:51 | 000,568,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetcore.dll [2012/11/18 17:09:51 | 000,513,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll [2012/11/18 17:09:50 | 001,048,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll [2012/11/18 17:09:50 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll [2012/11/18 17:09:12 | 003,966,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll [2012/11/18 17:09:12 | 003,554,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll [2012/11/18 17:09:09 | 002,116,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll [2012/11/18 17:09:08 | 002,206,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll [2012/11/18 17:09:07 | 002,764,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll [2012/11/18 17:09:07 | 002,380,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [2012/11/18 17:09:06 | 002,115,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe [2012/11/18 17:09:06 | 001,610,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll [2012/11/18 17:09:06 | 001,395,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Immersive.dll [2012/11/18 17:09:06 | 000,945,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\resetengmig.dll [2012/11/18 17:09:05 | 001,841,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll [2012/11/18 17:09:05 | 001,265,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll [2012/11/18 17:09:05 | 001,226,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Immersive.dll [2012/11/18 17:09:05 | 000,907,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uxtheme.dll [2012/11/18 17:09:05 | 000,793,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll [2012/11/18 17:09:05 | 000,590,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SHCore.dll [2012/11/18 17:09:05 | 000,579,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StructuredQuery.dll [2012/11/18 17:09:04 | 001,403,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi [2012/11/18 17:09:04 | 001,267,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe [2012/11/18 17:09:04 | 001,009,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll [2012/11/18 17:09:04 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.dll [2012/11/18 17:09:03 | 000,373,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe [2012/11/18 17:09:02 | 001,217,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi [2012/11/18 17:09:02 | 001,093,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe [2012/11/18 17:09:02 | 000,612,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll [2012/11/18 17:09:02 | 000,561,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll [2012/11/18 17:09:02 | 000,460,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SHCore.dll [2012/11/18 17:09:02 | 000,435,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssph.dll [2012/11/18 17:09:01 | 000,517,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe [2012/11/18 17:09:01 | 000,441,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\netio.sys [2012/11/18 17:09:00 | 001,045,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usercpl.dll [2012/11/18 17:09:00 | 000,503,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll [2012/11/18 17:09:00 | 000,411,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll [2012/11/18 17:09:00 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.dll [2012/11/18 17:09:00 | 000,336,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Classpnp.sys [2012/11/18 17:09:00 | 000,286,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\portcls.sys [2012/11/18 17:09:00 | 000,194,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdbus.sys [2012/11/18 17:09:00 | 000,154,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Storage.Compression.dll [2012/11/18 17:09:00 | 000,058,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dam.sys [2012/11/18 17:08:58 | 000,962,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usercpl.dll [2012/11/18 17:08:58 | 000,505,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SpaceControl.dll [2012/11/18 17:08:58 | 000,273,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanapi.dll [2012/11/18 17:08:58 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dhcpcore6.dll [2012/11/18 17:08:58 | 000,204,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dhcpcore6.dll [2012/11/18 17:08:57 | 000,470,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanmsm.dll [2012/11/18 17:08:57 | 000,446,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlansec.dll [2012/11/18 17:08:57 | 000,408,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssph.dll [2012/11/18 17:08:57 | 000,386,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanmsm.dll [2012/11/18 17:08:57 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFilterHost.exe [2012/11/18 17:08:57 | 000,124,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dumpsd.sys [2012/11/18 17:08:57 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Storage.Compression.dll [2012/11/18 17:08:57 | 000,056,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdstor.sys [2012/11/18 17:08:57 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe [2012/11/18 17:08:57 | 000,033,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\battc.sys [2012/11/18 17:08:56 | 000,375,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlansec.dll [2012/11/18 17:08:56 | 000,259,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\input.dll [2012/11/18 17:08:56 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\input.dll [2012/11/18 17:08:56 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFCaptureEngine.dll [2012/11/18 17:08:56 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dhcpcsvc6.dll [2012/11/18 17:08:55 | 000,745,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssvp.dll [2012/11/18 17:08:55 | 000,658,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssvp.dll [2012/11/18 17:08:55 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesysprep.dll [2012/11/18 17:08:55 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFCaptureEngine.dll [2012/11/18 17:08:55 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesysprep.dll [2012/11/18 17:08:55 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msscntrs.dll [2012/11/18 17:08:55 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PCPKsp.dll [2012/11/18 17:08:55 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\microsoft-windows-pdc.dll [2012/11/18 17:08:54 | 001,294,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32.dll [2012/11/18 17:08:54 | 000,757,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FirewallAPI.dll [2012/11/18 17:08:54 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll [2012/11/18 17:08:54 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanapi.dll [2012/11/18 17:08:54 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxSip.dll [2012/11/18 17:08:53 | 001,836,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DWrite.dll [2012/11/18 17:08:53 | 000,854,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll [2012/11/18 17:08:53 | 000,370,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SysFxUI.dll [2012/11/18 17:08:53 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssphtb.dll [2012/11/18 17:08:53 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sysreset.exe [2012/11/18 17:08:53 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxSip.dll [2012/11/18 17:08:53 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icfupgd.dll [2012/11/18 17:08:53 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PCPKsp.dll [2012/11/18 17:08:53 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UXInit.dll [2012/11/18 17:08:53 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BdeUISrv.exe [2012/11/18 17:08:53 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UXInit.dll [2012/11/18 17:08:53 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iernonce.dll [2012/11/18 17:08:53 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iernonce.dll [2012/11/18 17:08:52 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssitlb.dll [2012/11/18 17:08:52 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll [2012/11/18 17:08:52 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssitlb.dll [2012/11/18 17:08:52 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesetup.dll [2012/11/18 17:08:52 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msscntrs.dll [2012/11/18 17:08:52 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wfdprov.dll [2012/11/18 17:08:52 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wfdprov.dll [2012/11/18 17:08:52 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wfapigp.dll [2012/11/18 17:08:52 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wfapigp.dll [2012/11/18 17:08:51 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\drmk.sys [2012/11/18 17:08:51 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesetup.dll [2012/11/18 17:08:51 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msshooks.dll [2012/11/18 17:08:51 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msshooks.dll [2012/11/18 17:08:50 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanhlp.dll [2012/11/18 17:08:50 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanhlp.dll [2012/11/18 17:08:50 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\kbdhebl3.dll [2012/11/18 17:08:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdhebl3.dll [2012/11/18 17:06:50 | 002,893,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2vdec.dll [2012/11/18 17:06:50 | 002,400,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2vdec.dll [2012/11/18 17:06:50 | 000,439,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgent.dll [2012/11/18 17:06:50 | 000,371,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgent.dll [2012/11/18 17:06:50 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgentc.exe [2012/11/18 17:06:50 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgentc.exe [2012/11/18 16:28:25 | 000,000,000 | ---D | C] -- C:\ProgramData\PRICache [2012/11/18 16:28:25 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Packages [2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Video [2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\Programmi [2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\ProgramData\Preferiti [2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Musica [2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\ProgramData\Modelli [2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Avvio [2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Immagini [2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\Program Files\File comuni [2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\ProgramData\Documenti [2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dati applicazioni [2012/11/18 16:09:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC [2012/11/18 15:58:16 | 000,000,000 | --SD | C] -- C:\Users\Paul\AppData\Roaming\Microsoft [2012/11/18 15:58:16 | 000,000,000 | R--D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools [2012/11/18 15:58:16 | 000,000,000 | R--D | C] -- C:\Users\Paul\Favorites [2012/11/18 15:58:16 | 000,000,000 | R--D | C] -- C:\Users\Paul\Desktop [2012/11/18 15:58:16 | 000,000,000 | R--D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2012/11/18 15:58:16 | 000,000,000 | R--D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility [2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\AppData\Local\Temporary Internet Files [2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\SendTo [2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Risorse di stampa [2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Risorse di rete [2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Recenti [2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Modelli [2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Menu Avvio [2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Impostazioni locali [2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Documenti [2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Dati applicazioni [2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\AppData\Local\Dati applicazioni [2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\AppData\Local\Cronologia [2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Cookies [2012/11/18 15:58:16 | 000,000,000 | -H-D | C] -- C:\Users\Paul\AppData [2012/11/18 15:58:16 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Temp [2012/11/18 15:58:16 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Microsoft [2012/11/18 15:58:16 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2012/11/18 15:55:18 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek [2012/11/18 15:55:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\RTCOM [2012/11/18 15:54:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2012/11/18 15:52:50 | 000,000,000 | ---D | C] -- C:\Windows.old [2012/11/18 15:48:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies [2012/11/18 15:48:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild [2012/11/18 15:48:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\XPSViewer [2012/11/18 15:48:56 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies [2012/11/18 15:48:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\msmq [2012/11/18 15:48:56 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild [2012/11/18 15:48:56 | 000,000,000 | ---D | C] -- C:\inetpub [2012/11/18 15:48:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\BestPractices [2012/11/18 15:48:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\BestPractices [2012/11/18 15:47:50 | 001,166,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationNative_v0300.dll [2012/11/18 15:47:49 | 000,124,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationCFFRasterizerNative_v0300.dll [2012/11/18 15:47:49 | 000,035,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TsWpfWrp.exe [2012/11/18 15:47:49 | 000,035,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TsWpfWrp.exe [2012/11/18 15:47:48 | 000,778,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationNative_v0300.dll [2012/11/18 15:47:48 | 000,102,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll [2012/11/18 15:46:02 | 000,000,000 | ---D | C] -- C:\Program Files\Elantech [2012/11/18 15:13:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther [2012/11/18 14:56:50 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\AAAPcMover [2012/11/18 04:27:09 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Manager [2012/11/18 04:27:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Browser Manager [2012/11/18 04:26:16 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Babylon [2012/11/18 04:26:04 | 000,000,000 | ---D | C] -- C:\Users\Paul\Downloads [2012/11/18 03:30:19 | 000,000,000 | ---D | C] -- C:\archdb [2012/11/18 03:25:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Paragon [2012/11/17 22:13:48 | 000,037,392 | ---- | C] (Paragon Software Group) -- C:\WINDOWS\SysNative\drivers\hotcore3.sys [2012/11/17 22:13:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Hard Disk Manager™ 10 Special Edition [2012/11/17 12:17:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner [2012/11/17 00:42:16 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\sun [2012/11/17 00:40:23 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1 [2012/11/17 00:36:20 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\open office [2012/11/10 20:45:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Laplink [2012/11/10 20:44:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Laplink PCmover [2012/11/10 20:44:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Laplink [2012/11/10 11:21:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Agent Ransack (64-bit) [2012/11/09 23:53:44 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\{5190CE6A-5CC5-4B5A-AF43-0230C7367BD9} [2012/11/04 12:05:57 | 002,578,576 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\WavesGUILib.dll [2012/11/04 12:05:56 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\SysNative\SRSTSX64.dll [2012/11/04 12:05:56 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\SysNative\SRSTSH64.dll [2012/11/04 12:05:56 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\SysNative\SRSHP64.dll [2012/11/04 12:05:56 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\SysNative\SRSWOW64.dll [2012/11/04 12:05:54 | 000,220,496 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\WINDOWS\SysNative\SFNHK64.dll [2012/11/04 12:05:54 | 000,121,744 | ---- | C] (Sony Corporation) -- C:\WINDOWS\SysNative\SFSS_APO.dll [2012/11/04 12:05:53 | 001,146,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RTSnMg64.cpl [2012/11/04 12:05:53 | 000,081,232 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\WINDOWS\SysNative\SFCOM64.dll [2012/11/04 12:05:53 | 000,078,160 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\WINDOWS\SysNative\SFAPO64.dll [2012/11/04 12:05:53 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\WINDOWS\SysWow64\SFCOM.dll [2012/11/04 12:05:52 | 002,358,888 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtPgEx64.dll [2012/11/04 12:05:52 | 000,332,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtlCPAPI64.dll [2012/11/04 12:05:50 | 002,841,704 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtkAPO64.dll [2012/11/04 12:05:50 | 000,638,056 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtkApi64.dll [2012/11/04 12:05:50 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtkCfg64.dll [2012/11/04 12:05:49 | 001,247,848 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RTCOM64.dll [2012/11/04 12:05:49 | 000,783,360 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RCoRes64.dat [2012/11/04 12:05:49 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RTEEP64A.dll [2012/11/04 12:05:49 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RP3DHT64.dll [2012/11/04 12:05:49 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RP3DAA64.dll [2012/11/04 12:05:49 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RTEED64A.dll [2012/11/04 12:05:49 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RTEEL64A.dll [2012/11/04 12:05:49 | 000,083,560 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RCoInst64.dll [2012/11/04 12:05:49 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RTEEG64A.dll [2012/11/04 12:05:48 | 001,718,616 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\R4EEP64A.dll [2012/11/04 12:05:48 | 000,421,720 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\R4EED64A.dll [2012/11/04 12:05:48 | 000,127,832 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\R4EEL64A.dll [2012/11/04 12:05:48 | 000,108,888 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\R4EEA64A.dll [2012/11/04 12:05:48 | 000,074,584 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\R4EEG64A.dll [2012/11/04 12:05:47 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioEQ.dll [2012/11/04 12:05:47 | 001,868,944 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioRealtek.dll [2012/11/04 12:05:47 | 000,341,336 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioAPO30.dll [2012/11/04 12:05:47 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxVolumeSDAPO.dll [2012/11/04 12:05:47 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioAPO20.dll [2012/11/04 12:05:44 | 001,943,616 | ---- | C] (Fortemedia Corporation) -- C:\WINDOWS\SysNative\FMAPO64.dll [2012/11/04 12:05:44 | 001,327,208 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSS2SpeakerDLL64.dll [2012/11/04 12:05:44 | 001,179,752 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSS2HeadphoneDLL64.dll [2012/11/04 12:05:44 | 000,491,112 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSSymmetryDLL64.dll [2012/11/04 12:05:44 | 000,475,752 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSVoiceClarityDLL64.dll [2012/11/04 12:05:44 | 000,317,032 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSNeoPCDLL64.dll [2012/11/04 12:05:44 | 000,269,928 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSLimiterDLL64.dll [2012/11/04 12:05:44 | 000,126,056 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSLFXAPO64.dll [2012/11/04 12:05:44 | 000,125,544 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSGFXAPO64.dll [2012/11/04 12:05:44 | 000,125,032 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSGFXAPONS64.dll [2012/11/04 12:05:43 | 001,111,656 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSBoostDLL64.dll [2012/11/04 12:05:43 | 000,504,936 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSBassEnhancementDLL64.dll [2012/11/04 12:05:43 | 000,266,856 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSGainCompensatorDLL64.dll [2012/11/04 12:05:42 | 000,200,800 | ---- | C] (Andrea Electronics Corporation) -- C:\WINDOWS\SysNative\AERTAC64.dll [2012/11/04 12:05:42 | 000,108,960 | ---- | C] (Andrea Electronics Corporation) -- C:\WINDOWS\SysNative\AERTAR64.dll [2012/11/03 17:57:09 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Balabolka [2012/11/03 17:57:09 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Balabolka [2012/11/03 17:57:09 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Balabolka [2012/11/03 16:49:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ScanSoft [2012/11/03 15:35:27 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Regedit [2012/11/03 14:12:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eSpeak [2012/11/03 14:12:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\eSpeak [2012/11/03 13:11:34 | 000,000,000 | ---D | C] -- C:\CepTemp [2012/11/03 05:49:23 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\{4E71E243-27AA-46B3-9735-F952AC738221} [2012/11/02 20:36:54 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\WildBit Viewer [2012/11/01 19:35:51 | 000,000,000 | RH-D | C] -- C:\ESD [2012/10/30 05:19:08 | 000,000,000 | ---D | C] -- C:\NST [2012/10/30 05:15:47 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EasyBCD [2012/10/30 05:14:12 | 000,000,000 | ---D | C] -- C:\BCD_Back [2012/10/28 16:24:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Centro gestione Mouse e Tastiere Microsoft [2012/10/28 16:22:41 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Mouse and Keyboard Center [2012/10/28 16:21:29 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RdpGroupPolicyExtension.dll [2012/10/28 16:21:29 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TsUsbRedirectionGroupPolicyControl.exe [2012/10/28 16:21:27 | 000,228,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpendp_winip.dll [2012/10/28 16:21:27 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpendp_winip.dll [2012/10/28 10:48:22 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartEd Lite [2012/10/28 10:07:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NeoSmart Technologies [2012/10/28 09:58:54 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\NeoSmart_Technologies [2012/10/28 07:16:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2012/10/28 07:16:03 | 000,246,760 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysWow64\javaws.exe [2012/10/28 07:15:26 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysWow64\javaw.exe [2012/10/28 07:15:26 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysWow64\java.exe [2012/10/28 07:15:26 | 000,095,208 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysWow64\WindowsAccessBridge-32.dll [2012/10/28 07:15:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2012/10/28 07:10:30 | 001,034,216 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\npDeployJava1.dll [2012/10/28 07:10:30 | 000,916,456 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\deployJava1.dll [2012/10/28 07:10:30 | 000,289,768 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\javaws.exe [2012/10/28 07:09:53 | 000,189,416 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\javaw.exe [2012/10/28 07:09:53 | 000,188,904 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\java.exe [2012/10/28 07:09:53 | 000,108,008 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\WindowsAccessBridge-64.dll [2012/10/28 07:09:41 | 000,000,000 | ---D | C] -- C:\Program Files\Java [2012/10/26 20:13:00 | 000,000,000 | -H-D | C] -- C:\SkyDriveTemp [2012/10/25 04:17:28 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Adobe [2012/10/25 04:14:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe [2012/10/25 04:14:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2012/10/20 08:43:54 | 000,065,736 | ---- | C] (Prevx) -- C:\WINDOWS\SysNative\drivers\pxrts.sys [2012/10/20 08:43:54 | 000,062,976 | ---- | C] (Prevx) -- C:\WINDOWS\SysWow64\PxSecure.dll [2012/10/20 08:43:54 | 000,036,384 | ---- | C] (Prevx) -- C:\WINDOWS\SysNative\drivers\pxscan.sys [2012/10/20 08:43:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prevx 3.0 [2012/10/20 08:43:53 | 000,024,024 | ---- | C] (Prevx) -- C:\WINDOWS\SysNative\drivers\pxkbf.sys [2012/10/20 08:43:53 | 000,000,000 | ---D | C] -- C:\Program Files\Prevx [2012/10/20 08:41:35 | 000,000,000 | ---D | C] -- C:\ProgramData\PrevxCSI [2012/10/20 07:35:24 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\LICENZE [2012/10/17 20:45:00 | 000,000,000 | ---D | C] -- C:\Program Files\Cepstral [2012/10/13 23:40:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CheckDrive [2012/10/13 21:10:02 | 000,000,000 | ---D | C] -- C:\Users\Paul\Videos [2012/10/13 21:10:02 | 000,000,000 | ---D | C] -- C:\Users\Paul\Music [2012/10/13 18:12:10 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\WildBit Viewer [2012/10/13 18:12:10 | 000,000,000 | ---D | C] -- C:\ProgramData\WildBit Viewer [2012/10/12 16:35:54 | 000,862,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvcr110.dll [2012/10/12 16:35:54 | 000,828,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvcr110.dll [2012/10/12 16:35:54 | 000,661,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvcp110.dll [2012/10/12 16:35:54 | 000,534,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvcp110.dll [2012/10/12 16:35:54 | 000,354,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vccorlib110.dll [2012/10/12 16:35:54 | 000,251,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\vccorlib110.dll [2012/10/12 05:56:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Macrovision Corporation [2012/10/07 23:41:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel Corporation [2012/10/07 23:39:45 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Intel Corporation [2012/10/07 23:12:21 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\SlimWare Utilities Inc [2012/10/07 23:12:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimDrivers [2012/10/07 23:12:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SlimDrivers [2012/10/07 15:01:21 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\JAM Software [2012/10/07 15:01:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TreeSize Free [2012/10/06 18:08:15 | 000,000,000 | ---D | C] -- C:\8056739527e545988b [2012/10/06 18:06:38 | 000,000,000 | ---D | C] -- C:\1120a5e223cdad4892f5 [2012/10/06 09:54:01 | 000,000,000 | --SD | C] -- D:\Utenti\Paul\Documenti\MabinogiEU [2012/10/06 09:54:01 | 000,000,000 | R--D | C] -- D:\Utenti\Paul\Documenti\Scanned Documents [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Vuze Downloads [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Visual Studio 2008 [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\VirtualDJ [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Symantec [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Sports Interactive [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Soda PDF Files [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Soda 3D PDF Reader Files [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Smart PC Utilities [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Ovi [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\netFramwork [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\My Weblog Posts [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\My Print Creations [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\My Games [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\My DAP Downloads [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Incomedia [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\imule Downloads [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\HdTune [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Freemake [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\ForceField Shared Files [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Fax [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Expstudio Audio Editor [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\DriverEasy [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Cross Fire [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Blocchi appunti di OneNote [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\BlackBerry [2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\ASUS [2012/09/29 23:31:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Media Player Plus! [2012/09/29 12:48:56 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\AppBooster [2012/09/29 12:45:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AppBooster 2.0 [2012/09/29 12:45:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\MC Common [2012/09/29 05:40:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CheckDiskGUI [2012/09/28 22:32:08 | 002,177,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\coin92.dll [2012/09/28 15:36:44 | 000,075,776 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\OpenVideo64.dll [2012/09/28 15:36:40 | 000,065,536 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\OpenVideo.dll [2012/09/28 15:36:36 | 000,063,488 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\OVDecode64.dll [2012/09/28 15:36:34 | 000,056,320 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\OVDecode.dll [2012/09/28 15:36:24 | 032,635,904 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\amdocl64.dll [2012/09/28 15:32:16 | 027,341,824 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\amdocl.dll [2012/09/28 15:28:46 | 000,054,784 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysNative\OpenCL.dll [2012/09/28 15:28:42 | 000,050,176 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysWow64\OpenCL.dll [2012/09/28 04:32:18 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Audacity [2012/09/27 20:58:34 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UpdateStar [2012/09/27 20:58:33 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\UpdateStar [2012/09/27 01:49:45 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\GodMode.{ED7BA470-8E54-465E-825C-99712043E01C} [5 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ] [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2012/11/25 01:06:14 | 002,064,206 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI [2012/11/25 01:06:14 | 000,897,946 | ---- | M] () -- C:\WINDOWS\SysNative\perfh010.dat [2012/11/25 01:06:14 | 000,804,122 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat [2012/11/25 01:06:14 | 000,195,368 | ---- | M] () -- C:\WINDOWS\SysNative\perfc010.dat [2012/11/25 01:06:14 | 000,166,122 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat [2012/11/25 01:03:26 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012/11/25 01:02:15 | 000,000,376 | ---- | M] () -- C:\Users\Paul\AppData\Roaming\sp_data.sys [2012/11/25 01:01:16 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2012/11/25 01:01:15 | 3415,941,120 | -HS- | M] () -- C:\hiberfil.sys [2012/11/24 16:43:40 | 000,001,720 | ---- | M] () -- C:\{9C9295E7-21BD-49A1-8CEF-3F1AE03B965F} [2012/11/24 16:32:11 | 000,001,294 | ---- | M] () -- C:\Users\Paul\Desktop\File di installazione Norton.lnk [2012/11/24 16:31:38 | 000,002,620 | ---- | M] () -- C:\WINDOWS\SysNative\AutoRunFilter.ini [2012/11/24 16:31:00 | 001,892,221 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\Cat.DB [2012/11/24 16:30:53 | 000,002,511 | ---- | M] () -- C:\Users\Public\Desktop\Norton 360.lnk [2012/11/24 16:30:09 | 000,013,946 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\VT20121114.016 [2012/11/24 16:28:46 | 000,177,312 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\SysNative\drivers\SYMEVENT64x86.SYS [2012/11/24 16:28:46 | 000,007,466 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\SYMEVENT64x86.CAT [2012/11/24 16:28:46 | 000,000,855 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\SYMEVENT64x86.INF [2012/11/24 10:08:00 | 000,463,512 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT [2012/11/24 08:28:07 | 000,053,248 | ---- | M] () -- D:\Utenti\Paul\Documenti\EasyBCD Backup (2012-11-24).bcd [2012/11/19 14:01:31 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf [2012/11/18 21:10:42 | 000,000,790 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012/11/18 18:59:39 | 000,001,146 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2012/11/18 16:13:32 | 000,026,673 | ---- | M] () -- C:\WINDOWS\diagwrn.xml [2012/11/18 16:13:32 | 000,026,673 | ---- | M] () -- C:\WINDOWS\diagerr.xml [2012/11/18 16:13:15 | 000,022,928 | ---- | M] () -- C:\WINDOWS\SysNative\emptyregdb.dat [2012/11/18 15:57:13 | 002,000,694 | ---- | M] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI [2012/11/18 15:55:35 | 000,000,000 | ---- | M] () -- C:\WINDOWS\ativpsrm.bin [2012/11/18 15:55:35 | 000,000,000 | ---- | M] () -- C:\WINDOWS\SysNative\atiicdxx.dat [2012/11/18 15:51:01 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2012/11/18 15:16:13 | 000,009,920 | -H-- | M] () -- C:\WINDOWS\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/11/18 15:16:13 | 000,009,920 | -H-- | M] () -- C:\WINDOWS\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/11/18 15:08:01 | 000,327,680 | ---- | M] () -- C:\WINDOWS\SysNative\Ikeext.etl [2012/11/18 11:31:24 | 000,001,267 | -H-- | M] () -- C:\WINDOWS\EPMBatch.ept [2012/11/18 05:16:02 | 000,001,574 | ---- | M] () -- C:\WINDOWS\SysNative\ServiceFilter.ini [2012/11/17 00:40:24 | 000,000,983 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk [2012/11/16 07:22:51 | 000,001,146 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012/11/16 07:22:51 | 000,001,142 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012/11/11 00:15:29 | 000,001,746 | ---- | M] () -- C:\Users\Public\Desktop\PCmover Windows 7 Upgrade Assistant.lnk [2012/11/11 00:09:56 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2012/11/03 17:57:09 | 000,000,658 | ---- | M] () -- C:\Users\Paul\Desktop\Balabolka.lnk [2012/11/02 16:25:03 | 000,003,584 | ---- | M] () -- C:\Users\Paul\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012/11/02 08:07:58 | 000,058,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuauclt.exe [2012/11/02 06:22:08 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapp.exe [2012/11/02 06:21:44 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuwebv.dll [2012/11/02 06:21:44 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wudriver.dll [2012/11/02 06:21:44 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wups.dll [2012/11/02 06:21:43 | 000,621,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll [2012/11/02 06:21:28 | 000,246,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ubpm.dll [2012/11/02 06:20:31 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapp.exe [2012/11/02 06:20:28 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\taskhost.exe [2012/11/02 06:20:28 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\taskhostex.exe [2012/11/02 06:20:10 | 000,141,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuwebv.dll [2012/11/02 06:20:09 | 001,619,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wucltux.dll [2012/11/02 06:20:09 | 000,767,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll [2012/11/02 06:20:09 | 000,251,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WUSettingsProvider.dll [2012/11/02 06:20:09 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wudriver.dll [2012/11/02 06:20:09 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups2.dll [2012/11/02 06:20:09 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups.dll [2012/11/02 06:20:09 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuaext.dll [2012/11/02 06:19:50 | 000,318,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ubpm.dll [2012/11/02 06:01:27 | 000,099,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wushareduxresources.dll [2012/10/31 02:28:36 | 000,000,450 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for Paul.job [2012/10/30 03:42:20 | 000,028,672 | ---- | M] () -- D:\Utenti\Paul\Documenti\EasyBCD Backup (2012-10-30).bcd [2012/10/29 06:04:47 | 000,522,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AUDIOKSE.dll [2012/10/29 06:04:47 | 000,490,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll [2012/10/29 06:04:47 | 000,447,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll [2012/10/29 06:04:47 | 000,253,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\audiodg.exe [2012/10/29 04:21:53 | 001,526,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll [2012/10/29 04:21:21 | 000,267,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EncDump.dll [2012/10/29 04:20:49 | 000,169,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll [2012/10/29 04:19:08 | 000,463,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AUDIOKSE.dll [2012/10/29 03:46:23 | 001,451,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll [2012/10/28 16:24:24 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_point64_01011.Wdf [2012/10/28 16:24:23 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf [2012/10/28 10:48:23 | 000,000,704 | ---- | M] () -- C:\Users\Paul\Desktop\StartEd Lite.lnk [2012/10/28 10:18:19 | 000,028,672 | ---- | M] () -- D:\Utenti\Paul\Documenti\EasyBCD Backup (2012-10-28).bcd [2012/10/28 10:07:26 | 000,000,882 | ---- | M] () -- C:\Users\Public\Desktop\EasyBCD 2.2.lnk [2012/10/28 07:15:19 | 000,821,736 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysWow64\npDeployJava1.dll [2012/10/28 07:15:19 | 000,746,984 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysWow64\deployJava1.dll [2012/10/28 07:15:19 | 000,246,760 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysWow64\javaws.exe [2012/10/28 07:15:19 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysWow64\javaw.exe [2012/10/28 07:15:19 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysWow64\java.exe [2012/10/28 07:15:19 | 000,095,208 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysWow64\WindowsAccessBridge-32.dll [2012/10/28 07:09:44 | 001,034,216 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\npDeployJava1.dll [2012/10/28 07:09:44 | 000,916,456 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\deployJava1.dll [2012/10/28 07:09:44 | 000,289,768 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\javaws.exe [2012/10/28 07:09:44 | 000,189,416 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\javaw.exe [2012/10/28 07:09:44 | 000,188,904 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\java.exe [2012/10/28 07:09:44 | 000,108,008 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\WindowsAccessBridge-64.dll [2012/10/27 18:12:11 | 000,019,256 | ---- | M] () -- C:\Users\Paul\Desktop\bookmarks-2012-10-27.json [2012/10/27 18:11:36 | 000,036,639 | ---- | M] () -- C:\Users\Paul\Desktop\bookmarks27102012.html [2012/10/27 16:35:24 | 000,000,017 | ---- | M] () -- C:\WINDOWS\SysWow64\shortcut_ex.dat [2012/10/26 23:19:09 | 000,695,648 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe [2012/10/26 23:19:09 | 000,080,728 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl [2012/10/26 00:54:02 | 000,064,512 | -H-- | M] () -- D:\Utenti\Paul\Documenti\dach200.dll [2012/10/25 22:37:24 | 000,002,128 | ---- | M] () -- C:\{715E9EC5-DC6A-4204-898B-50B0AF58FC25} [2012/10/25 04:14:33 | 000,002,021 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk [2012/10/24 05:54:06 | 006,972,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe [2012/10/24 05:54:04 | 000,396,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hal.dll [2012/10/24 04:25:41 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgentc.exe [2012/10/24 04:24:42 | 000,439,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgent.dll [2012/10/24 04:24:12 | 000,603,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll [2012/10/24 03:48:12 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgentc.exe [2012/10/24 03:47:29 | 000,371,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgent.dll [2012/10/22 22:56:23 | 000,000,172 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\isolate.ini [2012/10/21 08:51:01 | 000,000,578 | ---- | M] () -- D:\Utenti\Paul\Documenti\Documenti - collegamento.lnk [2012/10/20 08:43:54 | 000,065,736 | ---- | M] (Prevx) -- C:\WINDOWS\SysNative\drivers\pxrts.sys [2012/10/20 08:43:54 | 000,062,976 | ---- | M] (Prevx) -- C:\WINDOWS\SysWow64\PxSecure.dll [2012/10/20 08:43:54 | 000,036,384 | ---- | M] (Prevx) -- C:\WINDOWS\SysNative\drivers\pxscan.sys [2012/10/20 08:43:53 | 000,024,024 | ---- | M] (Prevx) -- C:\WINDOWS\SysNative\drivers\pxkbf.sys [2012/10/18 07:17:18 | 000,069,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pdc.sys [2012/10/18 04:20:46 | 010,096,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll [2012/10/18 04:18:40 | 002,302,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll [2012/10/18 04:18:33 | 002,146,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll [2012/10/18 03:46:00 | 008,856,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll [2012/10/18 03:44:38 | 002,033,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll [2012/10/17 05:32:52 | 001,172,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetsrc.dll [2012/10/17 05:32:51 | 000,677,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetcore.dll [2012/10/17 05:32:51 | 000,673,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll [2012/10/17 05:32:50 | 001,048,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll [2012/10/17 04:57:37 | 000,929,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetsrc.dll [2012/10/17 04:57:37 | 000,568,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetcore.dll [2012/10/17 04:57:37 | 000,513,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll [2012/10/17 04:57:36 | 000,850,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll [2012/10/14 06:07:06 | 000,002,026 | ---- | M] () -- C:\Users\Public\Desktop\ASUS Vibe Fun Center.lnk [2012/10/13 23:40:15 | 000,000,762 | ---- | M] () -- C:\Users\Paul\Desktop\CheckDrive.lnk [2012/10/12 16:35:54 | 000,862,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvcr110.dll [2012/10/12 16:35:54 | 000,828,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvcr110.dll [2012/10/12 16:35:54 | 000,661,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvcp110.dll [2012/10/12 16:35:54 | 000,534,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvcp110.dll [2012/10/12 16:35:54 | 000,354,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vccorlib110.dll [2012/10/12 16:35:54 | 000,251,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\vccorlib110.dll [2012/10/12 09:08:01 | 000,027,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\rdpvideominiport.sys [2012/10/12 07:34:54 | 000,100,864 | ---- | M] (pdfforge GbR) -- C:\WINDOWS\SysNative\pdfcmon.dll [2012/10/12 07:14:54 | 001,347,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmclient.dll [2012/10/12 07:14:54 | 000,652,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmscan.dll [2012/10/12 07:14:54 | 000,279,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srm.dll [2012/10/12 07:14:54 | 000,274,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmstormod.dll [2012/10/12 07:14:54 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmshell.dll [2012/10/12 07:14:54 | 000,134,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\adrclient.dll [2012/10/12 07:14:54 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmtrace.dll [2012/10/12 07:14:54 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srm_ps.dll [2012/10/12 07:14:40 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rfxvmt.dll [2012/10/12 07:14:39 | 003,244,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll [2012/10/12 07:13:32 | 000,109,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dskquota.dll [2012/10/12 06:50:01 | 000,235,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll [2012/10/12 06:41:02 | 000,987,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmclient.dll [2012/10/12 06:41:02 | 000,487,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmscan.dll [2012/10/12 06:41:02 | 000,278,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srm.dll [2012/10/12 06:41:02 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmstormod.dll [2012/10/12 06:41:02 | 000,128,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmshell.dll [2012/10/12 06:41:02 | 000,104,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\adrclient.dll [2012/10/12 06:41:02 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmtrace.dll [2012/10/12 06:41:02 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srm_ps.dll [2012/10/12 06:39:54 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dskquota.dll [2012/10/11 08:47:18 | 000,793,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll [2012/10/11 08:35:16 | 002,380,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [2012/10/11 08:26:44 | 000,336,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Classpnp.sys [2012/10/11 08:25:48 | 000,056,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdstor.sys [2012/10/11 08:23:32 | 000,441,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\netio.sys [2012/10/11 08:16:20 | 001,403,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi [2012/10/11 08:16:20 | 001,267,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe [2012/10/11 08:16:20 | 001,217,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi [2012/10/11 08:16:19 | 001,093,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe [2012/10/11 08:13:54 | 000,194,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdbus.sys [2012/10/11 08:13:51 | 000,124,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dumpsd.sys [2012/10/11 08:13:49 | 000,058,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dam.sys [2012/10/11 08:13:37 | 000,033,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\battc.sys [2012/10/11 08:02:27 | 001,636,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMALFXGFXDSP.dll [2012/10/11 08:01:47 | 000,503,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll [2012/10/11 06:56:41 | 002,115,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe [2012/10/11 06:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe [2012/10/11 06:46:55 | 000,132,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sysreset.exe [2012/10/11 06:46:50 | 000,373,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe [2012/10/11 06:46:50 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFilterHost.exe [2012/10/11 06:46:39 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe [2012/10/11 06:46:30 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BdeUISrv.exe [2012/10/11 06:46:12 | 000,470,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanmsm.dll [2012/10/11 06:46:12 | 000,446,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlansec.dll [2012/10/11 06:46:11 | 000,273,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanapi.dll [2012/10/11 06:46:07 | 001,395,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Immersive.dll [2012/10/11 06:46:07 | 000,594,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.dll [2012/10/11 06:46:07 | 000,154,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Storage.Compression.dll [2012/10/11 06:46:05 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wfdprov.dll [2012/10/11 06:46:05 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wfapigp.dll [2012/10/11 06:45:58 | 001,045,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usercpl.dll [2012/10/11 06:45:58 | 000,907,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uxtheme.dll [2012/10/11 06:45:58 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UXInit.dll [2012/10/11 06:45:53 | 003,554,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll [2012/10/11 06:45:49 | 000,370,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SysFxUI.dll [2012/10/11 06:45:48 | 000,579,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StructuredQuery.dll [2012/10/11 06:45:42 | 000,505,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SpaceControl.dll [2012/10/11 06:45:37 | 000,590,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SHCore.dll [2012/10/11 06:45:26 | 001,009,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll [2012/10/11 06:45:26 | 000,945,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\resetengmig.dll [2012/10/11 06:45:16 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PCPKsp.dll [2012/10/11 06:44:49 | 000,745,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssvp.dll [2012/10/11 06:44:48 | 002,116,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll [2012/10/11 06:44:48 | 000,435,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssph.dll [2012/10/11 06:44:48 | 000,246,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssphtb.dll [2012/10/11 06:44:48 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssitlb.dll [2012/10/11 06:44:48 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll [2012/10/11 06:44:48 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msshooks.dll [2012/10/11 06:44:47 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msscntrs.dll [2012/10/11 06:44:26 | 000,561,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll [2012/10/11 06:44:25 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFCaptureEngine.dll [2012/10/11 06:44:22 | 001,265,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll [2012/10/11 06:44:15 | 003,966,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll [2012/10/11 06:44:15 | 000,854,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll [2012/10/11 06:44:11 | 000,259,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\input.dll [2012/10/11 06:44:08 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesysprep.dll [2012/10/11 06:44:08 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesetup.dll [2012/10/11 06:44:08 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iernonce.dll [2012/10/11 06:44:03 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icfupgd.dll [2012/10/11 06:43:57 | 001,294,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32.dll [2012/10/11 06:43:52 | 000,757,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FirewallAPI.dll [2012/10/11 06:43:46 | 001,836,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DWrite.dll [2012/10/11 06:43:45 | 002,206,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll [2012/10/11 06:43:40 | 000,244,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dhcpcore6.dll [2012/10/11 06:43:40 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dhcpcsvc6.dll [2012/10/11 06:43:26 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxSip.dll [2012/10/11 06:42:31 | 000,612,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll [2012/10/11 06:23:47 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\microsoft-windows-pdc.dll [2012/10/11 06:23:08 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\kbdhebl3.dll [2012/10/11 06:22:44 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanhlp.dll [2012/10/11 06:18:59 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\drmk.sys [2012/10/11 06:16:52 | 000,286,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\portcls.sys [2012/10/11 06:07:57 | 000,386,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanmsm.dll [2012/10/11 06:07:57 | 000,375,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlansec.dll [2012/10/11 06:07:57 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanapi.dll [2012/10/11 06:07:52 | 001,226,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Immersive.dll [2012/10/11 06:07:52 | 000,116,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Storage.Compression.dll [2012/10/11 06:07:51 | 000,410,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.dll [2012/10/11 06:07:49 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wfdprov.dll [2012/10/11 06:07:49 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wfapigp.dll [2012/10/11 06:07:43 | 000,962,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usercpl.dll [2012/10/11 06:07:43 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UXInit.dll [2012/10/11 06:07:40 | 002,764,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll [2012/10/11 06:07:27 | 000,460,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SHCore.dll [2012/10/11 06:07:09 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PCPKsp.dll [2012/10/11 06:06:42 | 001,610,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll [2012/10/11 06:06:42 | 000,658,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssvp.dll [2012/10/11 06:06:42 | 000,408,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssph.dll [2012/10/11 06:06:41 | 000,094,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssitlb.dll [2012/10/11 06:06:41 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msscntrs.dll [2012/10/11 06:06:41 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msshooks.dll [2012/10/11 06:06:25 | 000,411,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll [2012/10/11 06:06:24 | 000,126,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFCaptureEngine.dll [2012/10/11 06:06:19 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll [2012/10/11 06:06:17 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\input.dll [2012/10/11 06:06:16 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesysprep.dll [2012/10/11 06:06:16 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesetup.dll [2012/10/11 06:06:16 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iernonce.dll [2012/10/11 06:06:04 | 001,841,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll [2012/10/11 06:06:02 | 000,204,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dhcpcore6.dll [2012/10/11 06:05:51 | 000,099,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxSip.dll [2012/10/11 05:42:57 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdhebl3.dll [2012/10/11 05:42:25 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanhlp.dll [2012/10/10 19:25:22 | 000,007,605 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\srtspx64.cat [2012/10/10 19:25:22 | 000,007,601 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\srtsp64.cat [2012/10/10 19:25:22 | 000,001,418 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\srtspx64.inf [2012/10/10 08:04:51 | 000,094,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\synceng.dll [2012/10/10 07:31:46 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\synceng.dll [2012/10/09 22:07:59 | 000,001,152 | ---- | M] () -- C:\Users\Paul\.swfinfo [2012/10/08 18:52:50 | 000,007,597 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\SymDS64.cat [2012/10/08 18:52:48 | 000,007,603 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\SymEFA64.cat [2012/10/08 18:00:02 | 000,776,864 | R--- | M] (Symantec Corporation) -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\srtsp64.sys [2012/10/08 18:00:02 | 000,001,437 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\srtsp64.inf [2012/10/06 16:40:58 | 000,007,734 | ---- | M] () -- C:\Users\Paul\Desktop\Area C.odt [2012/10/06 16:38:39 | 000,009,626 | ---- | M] () -- D:\Utenti\Paul\Documenti\Area C.odt [2012/10/06 05:53:04 | 002,893,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2vdec.dll [2012/10/06 05:15:33 | 002,400,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2vdec.dll [2012/10/03 18:40:36 | 001,133,216 | R--- | M] (Symantec Corporation) -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\SymEFA64.sys [2012/10/03 18:40:36 | 000,009,103 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\SymVTcer.dat [2012/10/03 18:40:36 | 000,003,433 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\SymEFA.inf [2012/10/03 18:40:20 | 000,493,216 | R--- | M] (Symantec Corporation) -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\SymDS64.sys [2012/10/03 18:40:20 | 000,002,851 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\SymDS.inf [2012/10/03 18:19:14 | 000,168,096 | R--- | M] (Symantec Corporation) -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\ccSetx64.sys [2012/10/03 18:19:14 | 000,007,611 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\ccSetx64.cat [2012/10/03 18:19:14 | 000,000,853 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\ccSetx64.inf [2012/10/02 08:34:02 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanprotdim.dll [2012/09/29 19:54:26 | 000,025,928 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\SysNative\drivers\mbam.sys [2012/09/28 22:32:08 | 002,177,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\coin92.dll [2012/09/28 15:37:02 | 000,221,696 | ---- | M] () -- C:\WINDOWS\SysNative\clinfo.exe [2012/09/28 15:36:44 | 000,075,776 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\OpenVideo64.dll [2012/09/28 15:36:40 | 000,065,536 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\OpenVideo.dll [2012/09/28 15:36:36 | 000,063,488 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\OVDecode64.dll [2012/09/28 15:36:34 | 000,056,320 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\OVDecode.dll [2012/09/28 15:36:24 | 032,635,904 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\amdocl64.dll [2012/09/28 15:32:16 | 027,341,824 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\amdocl.dll [2012/09/28 15:28:46 | 000,054,784 | ---- | M] (Khronos Group) -- C:\WINDOWS\SysNative\OpenCL.dll [2012/09/28 15:28:42 | 000,050,176 | ---- | M] (Khronos Group) -- C:\WINDOWS\SysWow64\OpenCL.dll [2012/09/27 20:58:35 | 000,002,038 | ---- | M] () -- C:\Users\Paul\Desktop\UpdateStar.lnk [2012/09/27 08:17:17 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\newdev.exe [2012/09/27 08:17:17 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ndadmin.exe [2012/09/27 08:15:56 | 000,301,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\newdev.dll [2012/09/27 07:35:21 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\newdev.exe [2012/09/27 07:35:20 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ndadmin.exe [2012/09/27 07:34:16 | 000,275,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\newdev.dll [5 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012/11/24 16:43:40 | 000,001,720 | ---- | C] () -- C:\{9C9295E7-21BD-49A1-8CEF-3F1AE03B965F} [2012/11/24 16:30:53 | 000,002,511 | ---- | C] () -- C:\Users\Public\Desktop\Norton 360.lnk [2012/11/24 16:23:22 | 000,001,294 | ---- | C] () -- C:\Users\Paul\Desktop\File di installazione Norton.lnk [2012/11/24 08:28:07 | 000,053,248 | ---- | C] () -- D:\Utenti\Paul\Documenti\EasyBCD Backup (2012-11-24).bcd [2012/11/21 15:05:19 | 000,000,992 | ---- | C] () -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AgentRansack.lnk [2012/11/19 23:28:57 | 000,031,841 | ---- | C] () -- C:\WINDOWS\ProfessionalWMC.xml [2012/11/19 14:01:31 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf [2012/11/18 22:05:43 | 000,463,512 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT [2012/11/18 21:10:41 | 000,000,790 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012/11/18 18:59:39 | 000,001,146 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2012/11/18 17:15:16 | 000,361,934 | ---- | C] () -- C:\WINDOWS\SysNative\ApnDatabase.xml [2012/11/18 17:15:03 | 000,110,592 | ---- | C] () -- C:\WINDOWS\SysNative\OEMLicense.dll [2012/11/18 17:15:03 | 000,083,968 | ---- | C] () -- C:\WINDOWS\SysWow64\OEMLicense.dll [2012/11/18 16:31:36 | 000,001,409 | ---- | C] () -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2012/11/18 16:13:15 | 000,022,928 | ---- | C] () -- C:\WINDOWS\SysNative\emptyregdb.dat [2012/11/18 15:58:17 | 000,026,673 | ---- | C] () -- C:\WINDOWS\diagwrn.xml [2012/11/18 15:58:17 | 000,026,673 | ---- | C] () -- C:\WINDOWS\diagerr.xml [2012/11/18 15:57:13 | 002,000,694 | ---- | C] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI [2012/11/18 15:55:35 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2012/11/18 15:55:35 | 000,000,000 | ---- | C] () -- C:\WINDOWS\SysNative\atiicdxx.dat [2012/11/18 15:53:45 | 268,435,456 | -HS- | C] () -- C:\swapfile.sys [2012/11/17 13:06:24 | 000,001,267 | -H-- | C] () -- C:\WINDOWS\EPMBatch.ept [2012/11/17 00:40:24 | 000,000,983 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk [2012/11/10 20:44:33 | 000,001,746 | ---- | C] () -- C:\Users\Public\Desktop\PCmover Windows 7 Upgrade Assistant.lnk [2012/11/03 17:57:09 | 000,000,658 | ---- | C] () -- C:\Users\Paul\Desktop\Balabolka.lnk [2012/11/02 16:17:01 | 000,003,584 | ---- | C] () -- C:\Users\Paul\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012/10/30 03:42:20 | 000,028,672 | ---- | C] () -- D:\Utenti\Paul\Documenti\EasyBCD Backup (2012-10-30).bcd [2012/10/28 16:24:24 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_point64_01011.Wdf [2012/10/28 16:24:23 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf [2012/10/28 10:48:23 | 000,000,704 | ---- | C] () -- C:\Users\Paul\Desktop\StartEd Lite.lnk [2012/10/28 10:18:19 | 000,028,672 | ---- | C] () -- D:\Utenti\Paul\Documenti\EasyBCD Backup (2012-10-28).bcd [2012/10/28 10:07:26 | 000,000,882 | ---- | C] () -- C:\Users\Public\Desktop\EasyBCD 2.2.lnk [2012/10/27 18:12:11 | 000,019,256 | ---- | C] () -- C:\Users\Paul\Desktop\bookmarks-2012-10-27.json [2012/10/27 18:11:36 | 000,036,639 | ---- | C] () -- C:\Users\Paul\Desktop\bookmarks27102012.html [2012/10/27 16:35:24 | 000,000,017 | ---- | C] () -- C:\WINDOWS\SysWow64\shortcut_ex.dat [2012/10/26 00:54:02 | 000,064,512 | -H-- | C] () -- D:\Utenti\Paul\Documenti\dach200.dll [2012/10/25 22:37:24 | 000,002,128 | ---- | C] () -- C:\{715E9EC5-DC6A-4204-898B-50B0AF58FC25} [2012/10/25 04:14:33 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk [2012/10/25 04:14:33 | 000,002,021 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk [2012/10/13 23:40:14 | 000,000,762 | ---- | C] () -- C:\Users\Paul\Desktop\CheckDrive.lnk [2012/10/11 04:22:57 | 000,001,428 | ---- | C] () -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Restore Manager.lnk [2012/10/06 16:40:58 | 000,007,734 | ---- | C] () -- C:\Users\Paul\Desktop\Area C.odt [2012/10/06 16:38:37 | 000,009,626 | ---- | C] () -- D:\Utenti\Paul\Documenti\Area C.odt [2012/10/06 09:54:03 | 002,283,105 | ---- | C] () -- D:\Utenti\Paul\Documenti\P1000713.jpg [2012/10/06 09:54:03 | 001,271,278 | ---- | C] () -- D:\Utenti\Paul\Documenti\speed.io - Internet DSL Speedtest.mht [2012/10/06 09:54:03 | 000,231,830 | ---- | C] () -- D:\Utenti\Paul\Documenti\poste.xps [2012/10/06 09:54:03 | 000,069,208 | ---- | C] () -- D:\Utenti\Paul\Documenti\Testpage - PDFCreator.pdf [2012/10/06 09:54:03 | 000,068,692 | ---- | C] () -- D:\Utenti\Paul\Documenti\P1000344.jpg [2012/10/06 09:54:02 | 000,891,806 | ---- | C] () -- D:\Utenti\Paul\Documenti\DL 6 12 2011 n 201.xps [2012/10/06 09:54:02 | 000,112,502 | ---- | C] () -- D:\Utenti\Paul\Documenti\Esempio di contratto di loc....pdf [2012/10/06 09:54:02 | 000,048,167 | ---- | C] () -- D:\Utenti\Paul\Documenti\Cayttalica Iscrizione Piatro a test.pdf [2012/10/06 09:54:02 | 000,002,253 | ---- | C] () -- D:\Utenti\Paul\Documenti\Nuovo database.odb [2012/10/06 09:54:02 | 000,000,578 | ---- | C] () -- D:\Utenti\Paul\Documenti\Documenti - collegamento.lnk [2012/10/06 09:54:02 | 000,000,402 | -HS- | C] () -- D:\Utenti\Paul\Documenti\desktop (2).ini [2012/10/06 09:54:02 | 000,000,084 | -HS- | C] () -- D:\Utenti\Paul\Documenti\desktop (3).ini [2012/09/28 15:37:02 | 000,221,696 | ---- | C] () -- C:\WINDOWS\SysNative\clinfo.exe [2012/09/27 20:58:34 | 000,002,038 | ---- | C] () -- C:\Users\Paul\Desktop\UpdateStar.lnk [2012/09/10 22:17:30 | 000,000,270 | -H-- | C] () -- C:\WINDOWS\sysreg.dat [2012/07/27 01:22:05 | 000,001,152 | ---- | C] () -- C:\Users\Paul\.swfinfo [2012/07/26 09:13:10 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat [2012/07/26 09:13:09 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT [2012/07/26 08:21:26 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2012/07/26 02:17:42 | 000,043,520 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll [2012/07/25 21:37:29 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin [2012/07/25 21:28:31 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll [2012/07/10 20:40:32 | 002,468,520 | ---- | C] () -- C:\WINDOWS\SysWow64\BootMan.exe [2012/07/10 20:40:32 | 000,086,408 | ---- | C] () -- C:\WINDOWS\SysWow64\setupempdrv03.exe [2012/07/10 20:40:32 | 000,019,840 | ---- | C] () -- C:\WINDOWS\SysWow64\EuEpmGdi.dll [2012/07/10 20:40:32 | 000,014,216 | ---- | C] () -- C:\WINDOWS\SysWow64\epmntdrv.sys [2012/07/10 20:40:32 | 000,008,456 | ---- | C] () -- C:\WINDOWS\SysWow64\EuGdiDrv.sys [2012/07/07 17:43:21 | 000,109,488 | ---- | C] () -- C:\WINDOWS\123w.exe [2012/07/07 17:33:52 | 000,012,971 | ---- | C] () -- C:\WINDOWS\123r5.ini [2012/07/07 17:33:52 | 000,000,999 | ---- | C] () -- C:\WINDOWS\lotus.ini [2012/07/02 21:12:31 | 000,007,605 | ---- | C] () -- C:\Users\Paul\AppData\Local\Resmon.ResmonCfg [2012/06/24 08:27:59 | 000,111,932 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPrinterDB.dat [2012/06/24 08:27:59 | 000,031,053 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern131.dat [2012/06/24 08:27:59 | 000,027,417 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern121.dat [2012/06/24 08:27:59 | 000,024,903 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern3.dat [2012/06/24 08:27:59 | 000,021,390 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern5.dat [2012/06/24 08:27:59 | 000,020,148 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern2.dat [2012/06/24 08:27:59 | 000,011,811 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern4.dat [2012/06/24 08:27:59 | 000,004,943 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern6.dat [2012/06/24 08:27:59 | 000,001,146 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_DU.dat [2012/06/24 08:27:59 | 000,001,139 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_PT.dat [2012/06/24 08:27:59 | 000,001,139 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_BP.dat [2012/06/24 08:27:59 | 000,001,136 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_ES.dat [2012/06/24 08:27:59 | 000,001,129 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_FR.dat [2012/06/24 08:27:59 | 000,001,129 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_CF.dat [2012/06/24 08:27:59 | 000,001,120 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_IT.dat [2012/06/24 08:27:59 | 000,001,107 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_GE.dat [2012/06/24 08:27:59 | 000,001,104 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_EN.dat [2012/06/24 08:27:59 | 000,000,097 | ---- | C] () -- C:\WINDOWS\SysWow64\PICSDK.ini [2012/06/24 08:27:58 | 000,026,154 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern1.dat [2012/06/24 04:18:50 | 000,000,376 | ---- | C] () -- C:\Users\Paul\AppData\Roaming\sp_data.sys [2012/06/23 20:06:35 | 000,034,149 | ---- | C] () -- C:\Users\Paul\Grub Interfaccia grafica per modificare GRUB.htm [2012/06/23 19:21:18 | 000,000,000 | ---- | C] () -- C:\Users\Paul\AppData\Local\prvlcl.dat [2012/06/18 20:10:09 | 000,193,688 | ---- | C] () -- C:\ProgramData\nvModes.dat [2012/06/18 20:10:09 | 000,193,688 | ---- | C] () -- C:\ProgramData\nvModes.001 [2012/06/18 20:10:09 | 000,000,270 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2012/06/18 20:10:09 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2012/06/14 21:25:19 | 000,045,056 | ---- | C] () -- C:\WINDOWS\SysWow64\acovcnt.exe [2012/06/02 15:31:19 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat [2011/10/19 05:26:32 | 000,131,984 | ---- | C] () -- C:\ProgramData\FullRemove.exe [color=#E56717]========== ZeroAccess Check ==========[/color] [2012/11/18 19:07:16 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2012/10/11 06:45:39 | 019,789,824 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012/10/11 06:07:29 | 017,560,576 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012/07/26 04:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2012/07/26 04:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012/07/26 04:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2012/09/29 12:48:59 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\AppBooster [2012/07/24 22:26:10 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Ashampoo [2012/06/14 21:30:28 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\ASUS WebStorage [2012/11/06 05:47:32 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Audacity [2012/11/18 04:26:16 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Babylon [2012/11/03 17:57:09 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Balabolka [2012/06/23 19:24:56 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Blackberry Desktop [2012/08/07 12:18:14 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Epson [2012/06/23 19:25:24 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\FMRTEv5 [2012/07/08 02:47:43 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\FreeFileSync [2012/07/28 10:18:41 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Ghostbuster [2012/10/13 20:17:54 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\I2P [2012/09/01 14:59:31 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\ImgBurn [2012/10/07 15:01:21 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\JAM Software [2012/06/24 10:43:08 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\minimem [2012/07/24 05:38:16 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Nuance [2012/06/15 01:01:09 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\OpenOffice.org [2012/07/22 18:55:20 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Panasonic [2012/10/07 06:29:06 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\PDF Software [2012/11/22 00:43:02 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\pdfforge [2012/11/21 23:22:23 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\SoftGrid Client [2012/06/19 20:04:00 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Sports Interactive [2012/08/04 15:59:01 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\T-App [2012/07/09 10:00:15 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\TeraCopy [2012/06/15 00:54:22 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Thunderbird [2012/06/24 09:17:41 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\TP [2012/08/31 17:09:15 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\TuneUp Software [2012/09/27 20:58:34 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\UpdateStar [2012/11/03 05:46:44 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\WildBit Viewer [2012/06/18 21:59:24 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Zeon [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color] [2011/10/11 12:18:45 | 000,000,044 | ---- | M] () -- C:\ASUS.md5 [2012/07/10 06:08:25 | 000,032,768 | ---- | M] () -- C:\BCD_Backup [2012/07/26 04:44:30 | 000,398,156 | RHS- | M] () -- C:\bootmgr [2012/06/02 15:30:55 | 000,000,001 | -HS- | M] () -- C:\BOOTNXT [2012/11/18 15:51:01 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2012/09/29 18:05:35 | 000,001,775 | ---- | M] () -- C:\CheckDiskGUI29 9 2012disco asus.txt [2012/09/29 18:39:25 | 000,004,455 | ---- | M] () -- C:\CheckDiskGUIAsus2992012.txt [2012/01/20 00:54:09 | 000,013,754 | ---- | M] () -- C:\devlist.txt [2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1028.txt [2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1031.txt [2007/11/07 08:00:40 | 000,010,134 | ---- | M] () -- C:\eula.1033.txt [2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1036.txt [2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1040.txt [2007/11/07 08:00:40 | 000,000,118 | ---- | M] () -- C:\eula.1041.txt [2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1042.txt [2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.2052.txt [2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.3082.txt [2007/11/07 08:00:40 | 000,001,110 | ---- | M] () -- C:\globdata.ini [2012/11/25 01:01:15 | 3415,941,120 | -HS- | M] () -- C:\hiberfil.sys [2007/11/07 08:44:20 | 000,855,040 | ---- | M] (Microsoft Corporation) -- C:\install.exe [2007/11/07 08:00:40 | 000,000,843 | ---- | M] () -- C:\install.ini [2007/11/07 08:44:20 | 000,075,280 | ---- | M] (Microsoft Corporation) -- C:\install.res.1028.dll [2007/11/07 08:44:20 | 000,095,248 | ---- | M] (Microsoft Corporation) -- C:\install.res.1031.dll [2007/11/07 08:44:20 | 000,090,128 | ---- | M] (Microsoft Corporation) -- C:\install.res.1033.dll [2007/11/07 08:44:20 | 000,096,272 | ---- | M] (Microsoft Corporation) -- C:\install.res.1036.dll [2007/11/07 08:44:20 | 000,094,224 | ---- | M] (Microsoft Corporation) -- C:\install.res.1040.dll [2007/11/07 08:44:20 | 000,080,400 | ---- | M] (Microsoft Corporation) -- C:\install.res.1041.dll [2007/11/07 08:44:20 | 000,078,864 | ---- | M] (Microsoft Corporation) -- C:\install.res.1042.dll [2007/11/07 08:44:20 | 000,074,768 | ---- | M] (Microsoft Corporation) -- C:\install.res.2052.dll [2007/11/07 08:44:20 | 000,095,248 | ---- | M] (Microsoft Corporation) -- C:\install.res.3082.dll [2012/06/20 16:46:24 | 002,621,440 | RH-- | M] () -- C:\K54HR.BIN [2011/10/13 05:50:42 | 000,000,019 | ---- | M] () -- C:\K54HR_WIN7.20 [2006/12/01 23:37:14 | 000,904,704 | ---- | M] (Microsoft Corporation) -- C:\msdia80.dll [2012/11/25 01:01:16 | 067,108,864 | -HS- | M] () -- C:\pagefile.sys [2012/01/20 00:55:09 | 000,000,303 | ---- | M] () -- C:\Pass.txt [2011/10/13 05:50:42 | 000,000,007 | ---- | M] () -- C:\RECOVERY.DAT [2011/08/30 12:00:22 | 000,001,083 | ---- | M] () -- C:\setup.iss [2012/11/25 01:01:16 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2012/07/22 19:21:04 | 000,000,026 | ---- | M] () -- C:\UpdaterforApp.ini [2007/11/07 08:00:40 | 000,005,686 | ---- | M] () -- C:\vcredist.bmp [2007/11/07 08:09:22 | 001,442,522 | ---- | M] () -- C:\VC_RED.cab [2007/11/07 08:12:28 | 000,232,960 | ---- | M] () -- C:\VC_RED.MSI [2012/10/25 22:37:24 | 000,002,128 | ---- | M] () -- C:\{715E9EC5-DC6A-4204-898B-50B0AF58FC25} [2012/11/24 16:43:40 | 000,001,720 | ---- | M] () -- C:\{9C9295E7-21BD-49A1-8CEF-3F1AE03B965F} [color=#A23BEC]< %systemroot%\*. /mp /s >[/color] [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color] [2012/10/24 03:46:42 | 013,739,008 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\WINDOWS\system32\ieframe.dll [5 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ] [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color] [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /90 >[/color] [color=#A23BEC]< %appdata%\*.* >[/color] [2012/11/25 01:02:15 | 000,000,376 | ---- | M] () -- C:\Users\Paul\AppData\Roaming\sp_data.sys [color=#A23BEC]< %PROGRAMFILES%\*. >[/color] [2012/11/16 09:24:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\1ClickDownload [2012/11/16 09:19:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe [2012/11/20 08:59:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AMD APP [2012/11/16 09:24:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AmIcoSingLun [2012/11/16 09:24:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update [2012/11/16 09:24:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ASM104xUSB3 [2012/11/16 09:24:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ASUS [2012/11/16 09:20:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ATI Technologies [2012/11/16 09:26:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour [2012/11/18 16:04:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files [2012/11/16 09:20:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CyberLink [2012/11/16 09:20:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EaseUS [2012/11/16 09:25:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\epson [2012/11/16 09:20:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Epson Software [2012/11/16 09:25:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\eSpeak [2012/07/07 22:58:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Everything [2012/11/16 09:25:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Ffmpeg For Audacity [2012/11/22 00:48:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google [2012/11/18 03:25:33 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information [2012/11/16 09:20:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel [2012/11/18 19:02:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer [2012/11/16 09:25:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\iTunes [2012/11/16 09:21:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java [2012/11/16 09:25:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Lame For Audacity [2012/10/12 05:56:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Macrovision Corporation [2012/06/24 06:24:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft [2012/11/16 09:25:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Analysis Services [2012/06/24 05:51:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Application Virtualization Client [2012/11/16 09:21:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office [2012/11/16 09:25:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight [2012/11/16 09:21:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition [2012/11/16 09:25:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio 8 [2012/11/24 09:47:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET [2012/11/16 09:25:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Movie Maker 2.6 [2012/11/24 16:08:45 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox [2012/11/24 16:12:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Maintenance Service [2012/11/18 15:48:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild [2012/11/16 09:21:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSECache [2012/07/14 22:03:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSXML 4.0 [2012/11/16 09:25:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Norton 360 [2012/11/16 09:25:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Norton Safe Web Lite [2012/11/16 09:25:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Norton Security Scan [2012/11/24 16:27:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NortonInstaller [2012/11/16 09:21:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Paragon Software [2012/11/16 09:25:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PixiePack Codec Pack [2012/11/16 09:25:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Qualcomm Atheros WiFi Driver Installation [2012/11/16 09:21:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\RapidSolution [2012/11/16 09:21:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Realtek [2012/11/18 15:48:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies [2012/11/16 09:21:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ScanSoft [2012/10/07 23:12:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SlimDrivers [2012/11/20 00:10:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Steam [2012/06/15 02:21:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Symantec [2012/06/15 02:18:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Synaptics [2012/11/04 12:06:52 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Temp [2012/06/15 03:40:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\TuneUp Utilities 2012 [2009/07/14 05:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information [2012/07/10 04:51:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Visual BCD [2012/09/16 22:34:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WebSite X5 v9 - Smart [2012/07/26 10:55:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender [2011/10/19 05:22:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live [2012/07/26 10:55:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail [2012/11/18 19:02:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player [2012/09/29 23:31:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player Plus! [2012/07/26 09:13:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Multimedia Platform [2012/07/26 09:12:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT [2012/07/26 10:55:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer [2012/07/26 09:13:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices [2012/11/18 16:04:28 | 000,000,000 | -HSD | M] -- C:\Program Files (x86)\Windows Sidebar [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:AC57032B < End of report >