OTL logfile created on: 1/25/2015 11:05:45 AM - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\young\Desktop Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17501) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 1.75 Gb Total Physical Memory | 0.81 Gb Available Physical Memory | 46.54% Memory free 3.50 Gb Paging File | 2.15 Gb Available in Paging File | 61.42% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files Drive C: | 223.33 Gb Total Space | 183.40 Gb Free Space | 82.12% Space Free | Partition Type: NTFS Computer Name: YOUNG-PC | User Name: young | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 180 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2015/01/25 10:31:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\young\Desktop\OTL.exe PRC - [2015/01/24 16:02:34 | 000,960,688 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\Macromed\Flash\FlashUtil32_16_0_0_296_ActiveX.exe PRC - [2015/01/09 17:36:21 | 001,099,336 | ---- | M] (Mindspark) -- C:\Program Files\GamingWonderland\bar\1.bin\CrExtPgt.exe PRC - [2015/01/09 17:36:21 | 000,225,864 | ---- | M] (Mindspark) -- C:\Program Files\GamingWonderland\bar\1.bin\APPINTEGRATOR.EXE PRC - [2015/01/09 17:36:17 | 000,090,696 | ---- | M] (Mindspark) -- C:\Program Files\GamingWonderland\bar\1.bin\gtbarsvc.exe PRC - [2014/12/10 04:00:44 | 000,282,528 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton Security with Backup\Engine\22.1.0.9\NSBU.exe PRC - [2014/11/19 19:32:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2014/10/07 15:39:30 | 001,241,472 | ---- | M] (Oracle Corporation) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe PRC - [2011/02/24 22:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009/08/17 11:48:46 | 001,294,136 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe PRC - [2009/08/17 11:48:42 | 000,051,512 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe PRC - [2009/08/10 20:55:46 | 000,185,712 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe PRC - [2009/08/05 15:18:50 | 000,464,224 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe PRC - [2009/08/05 15:18:08 | 000,476,512 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe PRC - [2009/08/05 15:04:54 | 000,738,616 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe PRC - [2009/08/03 18:16:50 | 001,021,272 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe PRC - [2009/08/03 18:16:32 | 000,111,960 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe PRC - [2009/07/30 00:54:38 | 000,348,160 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe PRC - [2009/07/30 00:54:10 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe PRC - [2009/07/28 15:43:04 | 000,128,344 | ---- | M] (TOSHIBA Corporation) -- C:\Windows\System32\TODDSrv.exe PRC - [2009/07/28 15:00:10 | 000,460,088 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe PRC - [2009/03/10 19:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe PRC - [2009/01/13 22:33:40 | 000,034,088 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\Utilities\KeNotify.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014/11/23 12:14:57 | 000,774,144 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\5c093e6286545b5ee4b9d29e6bd24eb7\System.Runtime.Remoting.ni.dll MOD - [2014/11/23 11:18:13 | 012,435,968 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\b63fb23d171f316e1c47c5cdbd97ec56\System.Windows.Forms.ni.dll MOD - [2014/11/22 10:40:10 | 000,212,992 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\af1324443e5540135950578db84809d5\System.ServiceProcess.ni.dll MOD - [2014/11/22 10:39:22 | 011,922,944 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\cef6560830fd889aff2917e1de716f1f\System.Web.ni.dll MOD - [2014/11/22 10:39:09 | 001,593,344 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\b3fd0e68baabf3b45f59fe6df4166c6b\System.Drawing.ni.dll MOD - [2014/11/22 10:39:04 | 005,467,648 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\7a042b46130d9b9c7498bf10af0cb036\System.Xml.ni.dll MOD - [2014/11/22 10:38:59 | 000,978,432 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\1a6f4c47bfc15ff2361c89383c8dbffb\System.Configuration.ni.dll MOD - [2014/11/22 10:38:52 | 007,991,808 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System\ea649d6e9b7c95482ec8f75ba544ae5a\System.ni.dll MOD - [2014/11/22 10:38:37 | 011,497,984 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll MOD - [2014/11/17 19:23:17 | 001,736,704 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3497.38831__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll MOD - [2014/11/17 19:23:17 | 000,491,520 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3497.38899__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll MOD - [2014/11/17 19:23:17 | 000,339,968 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3497.38814__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll MOD - [2014/11/17 19:23:17 | 000,204,800 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll MOD - [2014/11/17 19:23:17 | 000,077,824 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3497.38880__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll MOD - [2014/11/17 19:23:17 | 000,073,728 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3497.38822__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll MOD - [2014/11/17 19:23:17 | 000,065,536 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3497.38863__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll MOD - [2014/11/17 19:23:17 | 000,040,960 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3497.38828__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll MOD - [2014/11/17 19:23:17 | 000,036,864 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll MOD - [2014/11/17 19:23:17 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3497.38823__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll MOD - [2014/11/17 19:23:16 | 000,331,776 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3497.38868__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll MOD - [2014/11/17 19:23:16 | 000,118,784 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard\2.0.3497.38898__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.dll MOD - [2014/11/17 19:23:16 | 000,094,208 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3497.38868__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll MOD - [2014/11/17 19:23:16 | 000,061,440 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3497.38867__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll MOD - [2014/11/17 19:23:16 | 000,045,056 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3497.38899__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll MOD - [2014/11/17 19:23:16 | 000,045,056 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.3497.38898__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll MOD - [2014/11/17 19:23:15 | 000,782,336 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll MOD - [2014/11/17 19:23:15 | 000,409,600 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3497.38875__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll MOD - [2014/11/17 19:23:15 | 000,196,608 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll MOD - [2014/11/17 19:23:15 | 000,081,920 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll MOD - [2014/11/17 19:23:14 | 000,950,272 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager2.Graphics.Dashboard\2.0.3497.38923__90ba9c70f846762e\CLI.Aspect.DisplaysManager2.Graphics.Dashboard.dll MOD - [2014/11/17 19:23:14 | 000,573,440 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll MOD - [2014/11/17 19:23:14 | 000,393,216 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll MOD - [2014/11/17 19:23:14 | 000,315,392 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3497.38862__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll MOD - [2014/11/17 19:23:14 | 000,307,200 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3497.38837__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll MOD - [2014/11/17 19:23:14 | 000,270,336 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll MOD - [2014/11/17 19:23:14 | 000,094,208 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3497.38861__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll MOD - [2014/11/17 19:23:14 | 000,061,440 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll MOD - [2014/11/17 19:23:14 | 000,040,960 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3497.38837__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll MOD - [2014/11/17 19:23:14 | 000,040,960 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll MOD - [2014/11/17 19:23:14 | 000,036,864 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3497.38860__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll MOD - [2014/11/17 19:23:14 | 000,032,768 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3497.38862__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll MOD - [2014/11/17 19:23:13 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll MOD - [2014/11/17 19:23:13 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3428.28302__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll MOD - [2014/11/17 19:23:13 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll MOD - [2014/11/17 19:23:13 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3428.28329__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll MOD - [2014/11/17 19:23:13 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll MOD - [2014/11/17 19:23:13 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll MOD - [2014/11/17 19:23:13 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll MOD - [2014/11/17 19:23:13 | 000,007,168 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll MOD - [2014/11/17 19:23:12 | 000,094,208 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Foundation\2.0.3428.28298__90ba9c70f846762e\CLI.Foundation.dll MOD - [2014/11/17 19:23:12 | 000,045,056 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll MOD - [2014/11/17 19:23:12 | 000,032,768 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\LOG.Foundation\2.0.3428.28296__90ba9c70f846762e\LOG.Foundation.dll MOD - [2014/11/17 19:23:12 | 000,028,672 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3428.28297__90ba9c70f846762e\NEWAEM.Foundation.dll MOD - [2014/11/17 19:23:12 | 000,028,672 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3428.28354__90ba9c70f846762e\CLI.Foundation.XManifest.dll MOD - [2014/11/17 19:23:12 | 000,024,576 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3428.28304__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll MOD - [2014/11/17 19:23:12 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll MOD - [2014/11/17 19:23:12 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\MOM.Foundation\2.0.3428.28310__90ba9c70f846762e\MOM.Foundation.dll MOD - [2014/11/17 19:23:12 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll MOD - [2014/11/17 19:23:12 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\DEM.Graphics\2.0.3428.28324__90ba9c70f846762e\DEM.Graphics.dll MOD - [2014/11/17 19:23:12 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll MOD - [2014/11/17 19:23:11 | 000,098,304 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3428.28305__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll MOD - [2014/11/17 19:23:11 | 000,053,248 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll MOD - [2014/11/17 19:23:11 | 000,053,248 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll MOD - [2014/11/17 19:23:11 | 000,040,960 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3428.28324__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll MOD - [2014/11/17 19:23:11 | 000,028,672 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.3428.28323__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll MOD - [2014/11/17 19:23:11 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3428.28302__90ba9c70f846762e\CLI.Component.Client.Shared.dll MOD - [2014/11/17 19:23:11 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3428.28303__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll MOD - [2014/11/17 19:23:11 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll MOD - [2014/11/17 19:23:11 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll MOD - [2014/11/17 19:23:10 | 000,065,536 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3428.28316__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll MOD - [2014/11/17 19:23:10 | 000,053,248 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll MOD - [2014/11/17 19:23:10 | 000,049,152 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll MOD - [2014/11/17 19:23:10 | 000,045,056 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3497.38904__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll MOD - [2014/11/17 19:23:10 | 000,040,960 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll MOD - [2014/11/17 19:23:10 | 000,032,768 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3428.28309__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll MOD - [2014/11/17 19:23:10 | 000,028,672 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll MOD - [2014/11/17 19:23:10 | 000,028,672 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll MOD - [2014/11/17 19:23:10 | 000,028,672 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3428.28311__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll MOD - [2014/11/17 19:23:10 | 000,024,576 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll MOD - [2014/11/17 19:23:10 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll MOD - [2014/11/17 19:23:10 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\APM.Foundation\2.0.3428.28310__90ba9c70f846762e\APM.Foundation.dll MOD - [2014/11/17 19:23:10 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Server.Shared.dll MOD - [2014/11/17 19:23:10 | 000,007,168 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3497.38810__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll MOD - [2014/11/17 19:23:09 | 000,405,504 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3497.38827__90ba9c70f846762e\CLI.Component.Wizard.dll MOD - [2014/11/17 19:23:09 | 000,106,496 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3497.38894__90ba9c70f846762e\MOM.Implementation.dll MOD - [2014/11/17 19:23:09 | 000,065,536 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3497.38892__90ba9c70f846762e\LOG.Foundation.Implementation.dll MOD - [2014/11/17 19:23:09 | 000,057,344 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3497.38813__90ba9c70f846762e\CLI.Component.SkinFactory.dll MOD - [2014/11/17 19:23:09 | 000,057,344 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3497.38812__90ba9c70f846762e\CLI.Component.Runtime.dll MOD - [2014/11/17 19:23:09 | 000,045,056 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll MOD - [2014/11/17 19:23:09 | 000,040,960 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3428.28301__90ba9c70f846762e\CLI.Foundation.Private.dll MOD - [2014/11/17 19:23:09 | 000,036,864 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\LOG.Foundation.Private.dll MOD - [2014/11/17 19:23:09 | 000,024,576 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll MOD - [2014/11/17 19:23:09 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll MOD - [2014/11/17 19:23:09 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3428.28310__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll MOD - [2014/11/17 19:23:08 | 001,212,416 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3497.38819__90ba9c70f846762e\CLI.Component.Dashboard.dll MOD - [2014/11/17 19:23:08 | 000,061,440 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\APM.Server\2.0.3497.38811__90ba9c70f846762e\APM.Server.dll MOD - [2014/11/17 19:23:08 | 000,045,056 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Server\2.0.3497.38810__90ba9c70f846762e\AEM.Server.dll MOD - [2014/11/17 19:23:08 | 000,040,960 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll MOD - [2014/11/17 19:23:08 | 000,032,768 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll MOD - [2014/11/17 19:23:08 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3428.28309__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll MOD - [2014/11/17 19:23:08 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3428.28316__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll MOD - [2014/11/17 19:23:08 | 000,019,456 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3497.38893__90ba9c70f846762e\CCC.Implementation.dll MOD - [2014/11/17 19:10:50 | 008,007,680 | ---- | M] () -- C:\windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll MOD - [2009/08/03 18:17:24 | 000,079,192 | ---- | M] () -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll MOD - [2009/07/25 11:07:12 | 000,058,704 | ---- | M] () -- C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll MOD - [2009/07/16 16:27:48 | 000,052,536 | ---- | M] () -- C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll MOD - [2009/07/16 16:27:44 | 007,263,544 | ---- | M] () -- C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll MOD - [2009/06/22 15:38:40 | 000,015,160 | ---- | M] () -- C:\Program Files\TOSHIBA\TOSHIBA Assist\NotifyX.dll MOD - [2009/05/04 11:45:14 | 000,016,384 | R--- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll MOD - [2009/03/12 20:08:04 | 000,049,152 | ---- | M] () -- C:\Program Files\TOSHIBA\PCDiag\NotifyPCD.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2015/01/24 16:02:41 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2015/01/09 17:36:17 | 000,090,696 | ---- | M] (Mindspark) [Auto | Running] -- C:\Program Files\GamingWonderland\bar\1.bin\gtbarsvc.exe -- (GamingWonderlandService) SRV - [2014/12/10 04:00:44 | 000,282,528 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton Security with Backup\Engine\22.1.0.9\NSBU.exe -- (NSBU) SRV - [2014/11/21 18:55:14 | 000,102,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService) SRV - [2013/05/26 21:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2009/08/27 21:17:26 | 000,332,272 | ---- | M] (Google Inc.) [On_Demand | Stopped] -- C:\ProgramData\Partner\Partner.exe -- (Partner Service) SRV - [2009/08/17 11:48:42 | 000,051,512 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo) SRV - [2009/08/10 20:55:46 | 000,185,712 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe -- (cfWiMAXService) SRV - [2009/08/05 15:18:50 | 000,464,224 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe -- (TosCoSrv) SRV - [2009/08/03 18:16:32 | 000,111,960 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service) SRV - [2009/07/30 00:54:10 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility) SRV - [2009/07/28 15:43:04 | 000,128,344 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\System32\TODDSrv.exe -- (TODDSrv) SRV - [2009/07/13 18:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009/05/22 11:02:20 | 000,250,616 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe -- (GameConsoleService) SRV - [2009/03/10 19:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\RtsUCcid.sys -- (USBCCID) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\Rts516xIR.sys -- (RtsUIR) DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\RtsUStor.sys -- (RSUSBSTOR) DRV - [2015/01/20 19:58:01 | 001,636,696 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Norton Security with Backup\NortonData\22.1.0.9\Definitions\VirusDefs\20150124.003\NAVEX15.SYS -- (NAVEX15) DRV - [2015/01/20 19:58:01 | 000,095,704 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Norton Security with Backup\NortonData\22.1.0.9\Definitions\VirusDefs\20150124.003\NAVENG.SYS -- (NAVENG) DRV - [2015/01/10 11:42:58 | 000,503,000 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Norton Security with Backup\NortonData\22.1.0.9\Definitions\IPSDefs\20150123.001\IDSvix86.sys -- (IDSVix86) DRV - [2015/01/06 12:15:27 | 001,164,504 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Norton Security with Backup\NortonData\22.1.0.9\Definitions\BASHDefs\20150106.001\BHDrvx86.sys -- (BHDrvx86) DRV - [2015/01/01 15:59:36 | 000,094,424 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent) DRV - [2014/12/01 22:59:40 | 000,699,608 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\NSBU\1601000.009\srtsp.sys -- (SRTSP) DRV - [2014/12/01 22:59:40 | 000,036,056 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NSBU\1601000.009\srtspx.sys -- (SRTSPX) DRV - [2014/11/25 14:30:33 | 000,378,672 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl) DRV - [2014/11/25 14:30:27 | 000,111,408 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2014/09/08 22:15:11 | 000,420,056 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NSBU\1601000.009\symnets.sys -- (SymNetS) DRV - [2014/09/08 22:15:10 | 000,939,224 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\NSBU\1601000.009\SymEFA.sys -- (SymEFA) DRV - [2014/09/08 22:15:09 | 000,364,760 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\NSBU\1601000.009\SymDS.sys -- (SymDS) DRV - [2014/09/08 22:05:40 | 000,212,696 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NSBU\1601000.009\Ironx86.sys -- (SymIRON) DRV - [2014/09/08 22:05:23 | 000,128,728 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NSBU\1601000.009\ccSetx86.sys -- (ccSet_NSBU) DRV - [2013/10/01 17:42:31 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2012/08/23 07:44:32 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV - [2009/07/30 17:45:56 | 000,022,912 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tdcmdpst.sys -- (tdcmdpst) DRV - [2009/07/30 13:06:30 | 004,994,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV - [2009/07/24 16:57:06 | 000,275,536 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tos_sps32.sys -- (tos_sps32) DRV - [2009/07/14 16:28:42 | 000,023,512 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ) DRV - [2009/07/13 15:13:48 | 001,035,776 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2009/07/02 15:55:36 | 000,036,208 | ---- | M] (COMPAL ELECTRONIC INC.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\LPCFilter.sys -- (LPCFilter) DRV - [2009/05/05 01:30:28 | 000,014,392 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AtiPcie.sys -- (AtiPcie) DRV - [2008/08/22 10:28:32 | 000,333,824 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTL8187Se.sys -- (RTL8187Se) [color=#E56717]========== Standard Registry (All) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 IE - HKLM\..\SearchScopes,DefaultScope = {7C13A060-8CC2-4016-AF6B-C68DFD9EA7BD} IE - HKLM\..\SearchScopes\{3d29c02b-bf3e-4d3b-8a7a-e0e7d0f6dbab}: "URL" = http://search.tb.ask.com/search/GGmain.jhtml?p2=^Z7^xdm674^YYA^us&si=CITltZaXiMMCFQ4SMgodmRoApw&ptb=F80D5B23-606F-4202-9ABD-246392384BCD&psa=&ind=2015010919&st=sb&n=781aa067&searchfor={searchTerms} IE - HKLM\..\SearchScopes\{7C13A060-8CC2-4016-AF6B-C68DFD9EA7BD}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=TSNA&bmod=TSNA IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com/ IE - HKCU\..\URLSearchHook: {a8625cb7-85fe-4936-92a4-b2a7c925209e} - No CLSID value found IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation) IE - HKCU\..\SearchScopes,DefaultScope = {BB1A66A5-7601-457A-BCEF-F70A42C8C18C} IE - HKCU\..\SearchScopes\{3d29c02b-bf3e-4d3b-8a7a-e0e7d0f6dbab}: "URL" = http://search.tb.ask.com/search/GGmain.jhtml?p2=^Z7^xdm674^YYA^us&si=CITltZaXiMMCFQ4SMgodmRoApw&ptb=F80D5B23-606F-4202-9ABD-246392384BCD&psa=&ind=2015010919&st=sb&n=781aa067&searchfor={searchTerms} IE - HKCU\..\SearchScopes\{BB1A66A5-7601-457A-BCEF-F70A42C8C18C}: "URL" = https://www.google.com/search?q={searchTerms} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.25.2: C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2: C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.1.0.9\coFFPlgn\ [2015/01/21 21:00:48 | 000,000,000 | ---D | M] [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: (Enabled) CHR - default_search_provider: search_url = CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - plugin: Error reading preferences file CHR - Extension: No name found = C:\Users\young\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\ CHR - Extension: No name found = C:\Users\young\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: No name found = C:\Users\young\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\ CHR - Extension: No name found = C:\Users\young\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: No name found = C:\Users\young\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: No name found = C:\Users\young\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\ CHR - Extension: No name found = C:\Users\young\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2009/06/10 14:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Security with Backup\Engine\22.1.0.9\CoIEPlg.dll (Symantec Corporation) O2 - BHO: (Toolbar BHO) - {7c8f8fe5-9785-4f74-bcf8-895ef9752d97} - C:\Program Files\GamingWonderland\bar\1.bin\gtbar.dll (Mindspark) O2 - BHO: (Partner BHO Class) - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll (Google Inc.) O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Search Assistant BHO) - {ab5d199e-9659-47a2-930b-fc3b69061353} - C:\Program Files\GamingWonderland\bar\1.bin\gtSrcAs.dll (Mindspark) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security with Backup\Engine\22.1.0.9\CoIEPlg.dll (Symantec Corporation) O3 - HKLM\..\Toolbar: (GamingWonderland) - {a899079d-206f-43a6-be6a-07e0fa648ea0} - C:\Program Files\GamingWonderland\bar\1.bin\gtbar.dll (Mindspark) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (GamingWonderland) - {A899079D-206F-43A6-BE6A-07E0FA648EA0} - C:\Program Files\GamingWonderland\bar\1.bin\gtbar.dll (Mindspark) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [GamingWonderland AppIntegrator 32-bit] C:\Program Files\GamingWonderland\bar\1.bin\APPINTEGRATOR.EXE (Mindspark) O4 - HKLM..\Run: [GamingWonderland EPM Support] C:\Program Files\GamingWonderland\bar\1.bin\gtmedint.exe (Mindspark) O4 - HKLM..\Run: [GamingWonderland Search Scope Monitor] "C:\PROGRA~1\GAMING~2\bar\1.bin\gtsrchmn.exe" /m=2 /w /h File not found O4 - HKLM..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe (TOSHIBA Electronics, Inc.) O4 - HKLM..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe (TOSHIBA CORPORATION) O4 - HKLM..\Run: [NortonOnlineBackupReminder] C:\Program Files\TOSHIBA\Toshiba Online Backup\Activation\TobuActivation.exe (Toshiba) O4 - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe (Oracle Corporation) O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA CORPORATION) O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) O4 - HKLM..\Run: [ToshibaServiceStation] C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation) O4 - HKCU..\Run: [MyTOSHIBA] C:\Program Files\TOSHIBA\My Toshiba\MyToshiba.exe (TOSHIBA) O4 - HKCU..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17 O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab (Java Plug-in 11.25.2) O16 - DPF: {CAFEEFAC-0018-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab (Java Plug-in 1.8.0_25) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab (Java Plug-in 1.8.0_25) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 71.10.216.1 71.10.216.2 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1498BDB2-C595-4949-9297-1E3FCCFA6C51}: DhcpNameServer = 71.10.216.1 71.10.216.2 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9A2C832A-3E88-42DB-8D70-FFA7F014AFC6}: DhcpNameServer = 12.127.16.68 216.57.128.2 12.127.17.77 216.57.130.1 12.127.16.77 O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation) O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation) O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation) O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\windows\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\windows\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\windows\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O29 - HKLM SecurityProviders - (credssp.dll) - C:\windows\System32\credssp.dll (Microsoft Corporation) O30 - LSA: Authentication Packages - (msv1_0) - C:\windows\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (kerberos) - C:\windows\System32\kerberos.dll (Microsoft Corporation) O30 - LSA: Security Packages - (msv1_0) - C:\windows\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (schannel) - C:\windows\System32\schannel.dll (Microsoft Corporation) O30 - LSA: Security Packages - (wdigest) - C:\windows\System32\wdigest.dll (Microsoft Corporation) O30 - LSA: Security Packages - (tspkg) - C:\windows\System32\tspkg.dll (Microsoft Corporation) O30 - LSA: Security Packages - (pku2u) - C:\windows\System32\pku2u.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/06/10 14:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 180 Days ==========[/color] [2015/01/25 10:31:46 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\young\Desktop\OTL.exe [2015/01/21 19:54:09 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\ParetoLogic [2015/01/21 19:53:52 | 000,000,000 | ---D | C] -- C:\ProgramData\ParetoLogic [2015/01/21 19:47:59 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\IAC [2015/01/21 16:43:29 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\OneNote Notebooks [2015/01/21 16:06:25 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0 [2015/01/21 15:33:34 | 000,000,000 | ---D | C] -- C:\Program Files\Hewlett-Packard [2015/01/21 15:33:34 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Hewlett-Packard [2015/01/21 15:31:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\HP [2015/01/21 15:27:42 | 000,000,000 | ---D | C] -- C:\Program Files\HP [2015/01/21 15:27:40 | 000,000,000 | -H-D | C] -- C:\Config.Msi [2015/01/21 15:18:37 | 000,000,000 | ---D | C] -- C:\ProgramData\HP [2015/01/17 15:45:58 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TSWbPrxy.exe [2015/01/15 19:32:37 | 003,971,512 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ntkrnlpa.exe [2015/01/15 19:32:36 | 003,916,728 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ntoskrnl.exe [2015/01/09 17:38:09 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\GamingWonderland [2015/01/09 17:36:16 | 000,000,000 | ---D | C] -- C:\Program Files\GamingWonderland [2015/01/08 22:48:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2015/01/08 22:48:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2015/01/08 22:46:49 | 000,096,680 | ---- | C] (Oracle Corporation) -- C:\windows\System32\WindowsAccessBridge.dll [2015/01/08 22:46:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java [2015/01/08 22:46:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle [2015/01/08 22:39:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome [2015/01/08 22:38:55 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\Google [2015/01/08 22:38:22 | 000,701,616 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerApp.exe [2015/01/08 22:38:22 | 000,071,344 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerCPLApp.cpl [2015/01/07 09:46:45 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\Template [2015/01/07 09:21:51 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2015/01/05 22:25:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight [2015/01/04 11:06:30 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\Adobe [2015/01/02 21:37:09 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieUnatt.exe [2015/01/01 16:31:29 | 000,000,000 | ---D | C] -- C:\Users\young\Easy Tech [2015/01/01 15:59:36 | 000,094,424 | ---- | C] (Symantec Corporation) -- C:\windows\System32\drivers\SYMEVENT.SYS [2015/01/01 15:59:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared [2015/01/01 15:58:29 | 000,939,224 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\SymEFA.sys [2015/01/01 15:58:29 | 000,420,056 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\symnets.sys [2015/01/01 15:58:29 | 000,364,760 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\SymDS.sys [2015/01/01 15:58:29 | 000,036,056 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\srtspx.sys [2015/01/01 15:58:29 | 000,021,520 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\SymELAM.sys [2015/01/01 15:58:28 | 000,699,608 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\srtsp.sys [2015/01/01 15:58:28 | 000,212,696 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\Ironx86.sys [2015/01/01 15:58:28 | 000,128,728 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\ccSetx86.sys [2015/01/01 15:57:57 | 000,000,000 | ---D | C] -- C:\windows\System32\drivers\NSBU [2015/01/01 15:57:57 | 000,000,000 | ---D | C] -- C:\windows\System32\drivers\NSBU\1601000.009 [2015/01/01 15:57:53 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security with Backup [2015/01/01 15:57:53 | 000,000,000 | ---D | C] -- C:\Program Files\Norton Security with Backup [2015/01/01 15:55:00 | 000,000,000 | ---D | C] -- C:\ProgramData\PCSettings [2015/01/01 15:46:50 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Symantec [2015/01/01 15:41:12 | 000,000,000 | ---D | C] -- C:\Program Files\NortonInstaller [2015/01/01 15:11:05 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\LogMeIn Rescue Applet [2015/01/01 14:17:50 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton [2015/01/01 14:15:41 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\Macromedia [2014/12/27 09:30:47 | 000,000,000 | ---D | C] -- C:\windows\System32\appraiser [2014/12/27 09:14:51 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfpmp.exe [2014/12/27 09:14:51 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mferror.dll [2014/12/27 09:14:50 | 003,209,728 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mf.dll [2014/12/27 09:14:50 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfps.dll [2014/12/27 09:14:50 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rrinstaller.exe [2014/12/26 16:25:21 | 001,160,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\aitstatic.exe [2014/12/26 16:25:21 | 000,873,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\aeinv.dll [2014/12/26 16:25:21 | 000,728,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\appraiser.dll [2014/12/26 16:25:21 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\aepic.dll [2014/12/26 16:25:20 | 000,610,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\invagent.dll [2014/12/26 16:25:19 | 000,337,920 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\generaltel.dll [2014/12/26 16:25:19 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\devinv.dll [2014/12/26 16:25:18 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\aepdu.dll [2014/12/26 16:25:06 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieetwcollector.exe [2014/12/26 16:25:06 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\JavaScriptCollectionAgent.dll [2014/12/26 16:25:06 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieetwproxystub.dll [2014/12/26 16:25:05 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MsSpellCheckingFacility.exe [2014/12/26 16:25:05 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jsproxy.dll [2014/12/26 16:25:04 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jscript9diag.dll [2014/12/26 16:25:04 | 000,418,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dxtmsft.dll [2014/12/26 16:25:04 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieetwcollectorres.dll [2014/12/26 16:25:02 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieui.dll [2014/12/26 16:25:02 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dxtrans.dll [2014/12/26 16:25:00 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtmlmedia.dll [2014/12/26 16:25:00 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MshtmlDac.dll [2014/12/26 16:24:57 | 004,299,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jscript9.dll [2014/12/26 16:24:55 | 000,684,544 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ie4uinit.exe [2014/12/26 16:24:55 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iernonce.dll [2014/12/26 16:24:54 | 000,342,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iedkcs32.dll [2014/12/26 16:24:53 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieapfltr.dll [2014/12/26 16:24:53 | 000,688,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeeds.dll [2014/12/26 16:24:52 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtml.tlb [2014/12/26 16:24:51 | 002,052,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\inetcpl.cpl [2014/12/26 16:24:51 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msrating.dll [2014/12/26 16:24:50 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iesetup.dll [2014/12/26 16:21:58 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tzres.dll [2014/12/26 16:21:39 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\charmap.exe [2014/12/26 16:21:31 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WSManMigrationPlugin.dll [2014/12/26 16:21:31 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WsmWmiPl.dll [2014/12/26 16:21:31 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WSManHTTPConfig.exe [2014/12/26 16:21:31 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WsmAuto.dll [2014/12/26 16:16:15 | 000,000,000 | -HSD | C] -- C:\Users\young\AppData\Local\EmieUserList [2014/12/26 16:16:15 | 000,000,000 | -HSD | C] -- C:\Users\young\AppData\Local\EmieSiteList [2014/12/26 16:16:15 | 000,000,000 | -HSD | C] -- C:\Users\young\AppData\Local\EmieBrowserModeList [2014/11/23 16:16:35 | 000,000,000 | ---D | C] -- C:\Users\young\Desktop\Guest [2014/11/23 15:45:20 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Work Training Aids [2014/11/23 15:45:15 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Work Schedule [2014/11/23 15:45:09 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Will [2014/11/23 15:45:07 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Tax Spreadsheets [2014/11/23 15:45:00 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Sunshine in Paris Novel [2014/11/23 15:43:15 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\CD Labels [2014/11/23 15:43:11 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Canon Utilities [2014/11/23 15:43:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Business Plans [2014/11/23 15:43:02 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\BookSmartData [2014/11/23 15:42:45 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Boarmasters [2014/11/23 15:26:13 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Social Services [2014/11/23 15:26:12 | 000,000,000 | R--D | C] -- C:\Users\young\Documents\Scanned Documents [2014/11/23 15:26:12 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Social Security [2014/11/23 15:26:12 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Resume [2014/11/23 15:26:12 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Receipies [2014/11/23 15:26:11 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\NE Restaurant Rules [2014/11/23 15:26:10 | 000,000,000 | R-SD | C] -- C:\Users\young\Documents\My Stationery [2014/11/23 15:26:10 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\My Smilebox Creations [2014/11/23 15:26:10 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\My Scans [2014/11/23 15:26:07 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\My Logo Design Studio Pro Projects [2014/11/23 15:26:07 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Monthly Budget [2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Misc [2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Juicers [2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Jeep pmts [2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\House Remodel Receipts [2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Grandparents Rights [2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Family History [2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Court Documents [2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Cougar [2014/11/23 15:25:26 | 000,000,000 | ---D | C] -- C:\Users\young\Desktop\Adobe Reader 9 Installer [2014/11/23 15:08:54 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\Apps [2014/11/23 13:42:55 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\prevhost.exe [2014/11/23 12:31:18 | 002,744,320 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpcorets.dll [2014/11/23 12:20:46 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RdpGroupPolicyExtension.dll [2014/11/23 11:33:45 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\rdpvideominiport.sys [2014/11/23 11:33:41 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpudd.dll [2014/11/23 11:33:40 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpendp_winip.dll [2014/11/23 11:32:21 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TsUsbGDCoInstaller.dll [2014/11/23 11:32:18 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TsUsbRedirectionGroupPolicyControl.exe [2014/11/23 11:32:17 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\TsUsbFlt.sys [2014/11/23 11:32:15 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tsgqec.dll [2014/11/23 11:32:15 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MsRdpWebAccess.dll [2014/11/23 11:32:15 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wksprtPS.dll [2014/11/23 11:32:15 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TsUsbRedirectionGroupPolicyExtension.dll [2014/11/23 11:32:14 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdvidcrl.dll [2014/11/23 11:32:14 | 000,350,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wksprt.exe [2014/11/23 11:03:37 | 002,285,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msmpeg2vdec.dll [2014/11/22 10:53:46 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\fsutil.exe [2014/11/22 10:53:31 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMPhoto.dll [2014/11/22 10:53:26 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\DWrite.dll [2014/11/22 10:53:18 | 001,987,584 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d10warp.dll [2014/11/22 10:53:06 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\windows\explorer.exe [2014/11/22 10:53:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDYAK.DLL [2014/11/22 10:53:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDTAT.DLL [2014/11/22 10:53:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDRU1.DLL [2014/11/22 10:53:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDBASH.DLL [2014/11/22 10:53:02 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDRU.DLL [2014/11/22 10:52:58 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d2d1.dll [2014/11/22 10:37:39 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\Adobe [2014/11/19 21:13:45 | 000,000,000 | ---D | C] -- C:\windows\Migration [2014/11/19 20:18:09 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WUDFPlatform.dll [2014/11/19 20:18:08 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WUDFCoinstaller.dll [2014/11/19 20:18:07 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WUDFx.dll [2014/11/19 20:14:56 | 000,099,480 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\infocardapi.dll [2014/11/19 20:14:51 | 000,008,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\icardres.dll [2014/11/19 20:14:43 | 000,619,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\icardagt.exe [2014/11/19 20:14:38 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TsWpfWrp.exe [2014/11/19 19:49:09 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmploc.DLL [2014/11/19 19:34:36 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\elshyph.dll [2014/11/19 19:34:35 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jsIntl.dll [2014/11/19 19:34:35 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieapfltr.dat [2014/11/19 19:34:35 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\html.iec [2014/11/19 19:34:35 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\url.dll [2014/11/19 19:34:35 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msls31.dll [2014/11/19 19:34:35 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iexpress.exe [2014/11/19 19:34:35 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wextract.exe [2014/11/19 19:34:35 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\inseng.dll [2014/11/19 19:34:35 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RegisterIEPKEYs.exe [2014/11/19 19:34:35 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\licmgr10.dll [2014/11/19 19:34:34 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iepeers.dll [2014/11/19 19:34:34 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\IEAdvpack.dll [2014/11/19 19:34:34 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iesysprep.dll [2014/11/19 19:34:34 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\SetIEInstalledDate.exe [2014/11/19 19:34:34 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\pngfilt.dll [2014/11/19 19:34:34 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtmler.dll [2014/11/19 19:34:34 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeedsbs.dll [2014/11/19 19:34:34 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\imgutil.dll [2014/11/19 19:34:34 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeedssync.exe [2014/11/19 19:33:07 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tdh.dll [2014/11/19 19:33:07 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\csrsrv.dll [2014/11/19 19:32:19 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\taskhost.exe [2014/11/19 19:28:51 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XpsPrint.dll [2014/11/19 19:28:51 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d10.dll [2014/11/19 19:28:51 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d10level9.dll [2014/11/19 19:28:51 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XpsGdiConverter.dll [2014/11/19 19:28:51 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dxgi.dll [2014/11/19 19:28:51 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d10_1core.dll [2014/11/19 19:28:51 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d10core.dll [2014/11/19 19:28:51 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WindowsCodecsExt.dll [2014/11/19 19:28:51 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\UIAnimation.dll [2014/11/19 19:28:51 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d10_1.dll [2014/11/19 19:28:51 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2014/11/19 19:28:51 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2014/11/19 19:28:51 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2014/11/19 19:28:51 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2014/11/19 19:28:51 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2014/11/19 19:28:51 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2014/11/19 19:28:51 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2014/11/19 19:28:51 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2014/11/19 19:28:51 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2014/11/19 19:26:29 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d11.dll [2014/11/19 19:15:25 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cryptdlg.dll [2014/11/19 19:14:53 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\objsel.dll [2014/11/19 19:14:52 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cngprovider.dll [2014/11/19 19:14:52 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\adprovider.dll [2014/11/19 19:14:52 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\capiprovider.dll [2014/11/19 19:14:52 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dpapiprovider.dll [2014/11/19 19:14:52 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dimsroam.dll [2014/11/19 19:14:52 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wincredprovider.dll [2014/11/19 19:14:35 | 000,046,592 | ---- | C] (Microsoft) -- C:\windows\System32\fpb.rs [2014/11/19 19:14:35 | 000,045,568 | ---- | C] (Microsoft) -- C:\windows\System32\oflc-nz.rs [2014/11/19 19:14:35 | 000,044,544 | ---- | C] (Microsoft) -- C:\windows\System32\pegibbfc.rs [2014/11/19 19:14:35 | 000,043,520 | ---- | C] (Microsoft) -- C:\windows\System32\csrr.rs [2014/11/19 19:14:35 | 000,040,960 | ---- | C] (Microsoft) -- C:\windows\System32\cob-au.rs [2014/11/19 19:14:35 | 000,030,720 | ---- | C] (Microsoft) -- C:\windows\System32\usk.rs [2014/11/19 19:14:35 | 000,021,504 | ---- | C] (Microsoft) -- C:\windows\System32\grb.rs [2014/11/19 19:14:35 | 000,020,480 | ---- | C] (Microsoft) -- C:\windows\System32\pegi.rs [2014/11/19 19:14:35 | 000,015,360 | ---- | C] (Microsoft) -- C:\windows\System32\djctq.rs [2014/11/19 19:14:34 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\gameux.dll [2014/11/19 19:14:34 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Wpc.dll [2014/11/19 19:14:34 | 000,020,480 | ---- | C] (Microsoft) -- C:\windows\System32\pegi-pt.rs [2014/11/19 19:14:33 | 000,055,296 | ---- | C] (Microsoft) -- C:\windows\System32\cero.rs [2014/11/19 19:14:33 | 000,051,712 | ---- | C] (Microsoft) -- C:\windows\System32\esrb.rs [2014/11/19 19:14:33 | 000,023,552 | ---- | C] (Microsoft) -- C:\windows\System32\oflc.rs [2014/11/19 19:14:33 | 000,020,480 | ---- | C] (Microsoft) -- C:\windows\System32\pegi-fi.rs [2014/11/19 19:13:26 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\certutil.exe [2014/11/19 19:13:26 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\certenc.dll [2014/11/19 19:13:01 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ncrypt.dll [2014/11/19 19:12:31 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdrmemptylst.exe [2014/11/19 19:12:30 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpcorekmts.dll [2014/11/19 19:12:30 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpwsx.dll [2014/11/19 19:11:53 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ncsi.dll [2014/11/19 19:11:52 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netcorehc.dll [2014/11/19 19:11:52 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netevent.dll [2014/11/19 19:11:43 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpcore.dll [2014/11/19 19:11:38 | 001,805,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\authui.dll [2014/11/19 19:11:38 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msihnd.dll [2014/11/19 19:11:38 | 000,101,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\consent.exe [2014/11/19 19:10:17 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\srcore.dll [2014/11/19 19:09:58 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\CPFilters.dll [2014/11/19 19:09:57 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sbe.dll [2014/11/19 19:09:57 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mpg2splt.ax [2014/11/19 19:09:34 | 000,793,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TSWorkspace.dll [2014/11/19 19:09:28 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\conhost.exe [2014/11/19 19:09:28 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\winsrv.dll [2014/11/19 19:09:28 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll [2014/11/19 19:09:28 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-synch-l1-1-0.dll [2014/11/19 19:09:28 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll [2014/11/19 19:09:27 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-security-base-l1-1-0.dll [2014/11/19 19:09:27 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-file-l1-1-0.dll [2014/11/19 19:09:27 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-threadpool-l1-1-0.dll [2014/11/19 19:09:27 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-processthreads-l1-1-0.dll [2014/11/19 19:09:27 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-misc-l1-1-0.dll [2014/11/19 19:09:27 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-localregistry-l1-1-0.dll [2014/11/19 19:09:27 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-localization-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-xstate-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-memory-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-interlocked-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-heap-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-util-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-string-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-profile-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-io-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-handle-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-fibers-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-delayload-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-debug-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-datetime-l1-1-0.dll [2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-console-l1-1-0.dll [2014/11/19 19:09:24 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\webio.dll [2014/11/19 19:09:14 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\FXSCOVER.exe [2014/11/19 19:09:12 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\OxpsConverter.exe [2014/11/19 19:09:08 | 000,434,688 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\scavengeui.dll [2014/11/19 19:08:56 | 000,240,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\netio.sys [2014/11/19 19:08:56 | 000,187,840 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\FWPKCLNT.SYS [2014/11/19 19:08:49 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\quartz.dll [2014/11/19 19:08:47 | 001,620,992 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMVDECOD.DLL [2014/11/19 19:08:44 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\EncDec.dll [2014/11/19 19:08:30 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dhcpcore6.dll [2014/11/19 19:08:30 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dhcpcsvc6.dll [2014/11/19 19:08:24 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mssrch.dll [2014/11/19 19:08:23 | 001,549,312 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tquery.dll [2014/11/19 19:08:23 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mssph.dll [2014/11/19 19:08:22 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mssvp.dll [2014/11/19 19:08:22 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mssphtb.dll [2014/11/19 19:08:22 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msscntrs.dll [2014/11/19 19:08:18 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msxml3r.dll [2014/11/19 19:08:17 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cdosys.dll [2014/11/19 19:08:11 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msxml6r.dll [2014/11/19 19:08:10 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\IMJP10K.DLL [2014/11/19 19:08:09 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\AUDIOKSE.dll [2014/11/19 19:08:09 | 000,374,784 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\AudioEng.dll [2014/11/19 19:08:09 | 000,275,968 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\EncDump.dll [2014/11/19 19:08:09 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\AudioSes.dll [2014/11/19 19:08:03 | 000,156,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mscorier.dll [2014/11/19 19:08:02 | 000,081,560 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mscories.dll [2014/11/19 19:08:00 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\odbcjt32.dll [2014/11/19 19:08:00 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\odbctrac.dll [2014/11/19 19:08:00 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\odbccp32.dll [2014/11/19 19:08:00 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\odbccu32.dll [2014/11/19 19:08:00 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\odbccr32.dll [2014/11/19 19:07:57 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\System32\atmfd.dll [2014/11/19 19:07:57 | 000,219,072 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\dxgmms1.sys [2014/11/19 19:07:57 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cdd.dll [2014/11/19 19:07:57 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\windows\System32\atmlib.dll [2014/11/19 19:07:57 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dciman32.dll [2014/11/19 19:07:56 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\fontsub.dll [2014/11/19 19:07:55 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dnscacheugc.exe [2014/11/19 19:07:53 | 000,149,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\storport.sys [2014/11/19 19:07:53 | 000,027,072 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\Diskdump.sys [2014/11/19 19:07:53 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iologmsg.dll [2014/11/19 19:07:44 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\psisdecd.dll [2014/11/19 19:07:44 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\psisrndr.ax [2014/11/19 19:07:41 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\osk.exe [2014/11/19 19:07:39 | 002,379,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\win32k.sys [2014/11/19 19:07:35 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\SmartcardCredentialProvider.dll [2014/11/19 19:07:03 | 000,656,896 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\nshwfp.dll [2014/11/19 19:07:03 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\FWPUCLNT.DLL [2014/11/19 19:07:01 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PresentationCFFRasterizerNative_v0300.dll [2014/11/19 19:06:48 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wwanprotdim.dll [2014/11/19 19:06:46 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\qdvd.dll [2014/11/19 19:06:43 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\usb8023.sys [2014/11/19 19:06:41 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dpnet.dll [2014/11/19 19:06:39 | 000,133,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\ataport.sys [2014/11/19 19:06:38 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\hidclass.sys [2014/11/19 19:06:38 | 000,025,728 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\hidparse.sys [2014/11/19 19:06:33 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\RNDISMP.sys [2014/11/19 19:06:31 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\timedate.cpl [2014/11/19 19:06:25 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\browcli.dll [2014/11/19 19:06:23 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\portcls.sys [2014/11/19 19:06:23 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\drmk.sys [2014/11/19 19:06:21 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfc42.dll [2014/11/19 19:06:20 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfc42u.dll [2014/11/19 19:06:16 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wer.dll [2014/11/19 19:06:15 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\packager.dll [2014/11/19 19:06:14 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\qedit.dll [2014/11/19 19:06:11 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cscript.exe [2014/11/19 19:06:07 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\synceng.dll [2014/11/19 19:00:46 | 000,681,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\adtschema.dll [2014/11/19 19:00:45 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msaudite.dll [2014/11/19 19:00:45 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sspisrv.dll [2014/11/19 18:59:47 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate_isv.exe [2014/11/19 18:59:47 | 000,572,416 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate.exe [2014/11/19 18:59:47 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate_ssp.exe [2014/11/19 18:59:47 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate_ssp_isv.exe [2014/11/19 18:59:46 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc.dll [2014/11/19 18:59:46 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc_isv.dll [2014/11/19 18:59:46 | 000,390,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msdrm.dll [2014/11/19 18:59:46 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc_ssp_isv.dll [2014/11/19 18:59:46 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc_ssp.dll [2014/11/19 18:50:24 | 000,047,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\WdfLdr.sys [2014/11/19 18:50:24 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Wdfres.dll [2014/11/19 18:41:36 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\usbport.sys [2014/11/19 18:41:35 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\usbd.sys [2014/11/19 18:28:41 | 002,425,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wucltux.dll [2014/11/19 18:28:41 | 000,045,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wups2.dll [2014/11/19 18:28:21 | 000,581,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wuapi.dll [2014/11/19 18:28:21 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wudriver.dll [2014/11/19 18:28:21 | 000,036,320 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wups.dll [2014/11/19 18:28:12 | 000,179,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wuwebv.dll [2014/11/19 18:28:11 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wuapp.exe [2014/11/19 17:45:26 | 000,000,000 | ---D | C] -- C:\windows\System32\SPReview [2014/11/19 17:45:10 | 000,000,000 | ---D | C] -- C:\windows\System32\EventProviders [2014/11/19 10:01:23 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfc40.dll [2014/11/19 10:01:23 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfc40u.dll [2014/11/19 10:01:18 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spwizui.dll [2014/11/19 10:01:16 | 000,520,064 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mcupdate_GenuineIntel.dll [2014/11/19 10:01:15 | 001,334,272 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\CertEnroll.dll [2014/11/19 10:01:14 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PresentationHost.exe [2014/11/19 10:01:14 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PresentationHostProxy.dll [2014/11/19 10:01:12 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\AuthFWSnapin.dll [2014/11/19 10:01:12 | 001,115,136 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RacEngn.dll [2014/11/19 10:01:10 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ExplorerFrame.dll [2014/11/19 10:01:09 | 001,828,352 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d9.dll [2014/11/19 10:01:08 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\taskschd.dll [2014/11/19 10:01:07 | 000,456,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spinstall.exe [2014/11/19 10:01:07 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spreview.exe [2014/11/19 10:01:05 | 001,371,136 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dwmcore.dll [2014/11/19 10:01:05 | 000,863,744 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\diagperf.dll [2014/11/19 10:01:04 | 003,367,424 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WinSAT.exe [2014/11/19 10:01:03 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tsmf.dll [2014/11/19 10:01:02 | 002,522,624 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dbgeng.dll [2014/11/19 10:01:00 | 000,252,928 | ---- | C] (Microsoft) -- C:\windows\System32\DShowRdpFilter.dll [2014/11/19 10:00:59 | 002,151,936 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mmcndmgr.dll [2014/11/19 10:00:59 | 000,974,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sppobjs.dll [2014/11/19 10:00:59 | 000,732,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\imapi2fs.dll [2014/11/19 10:00:59 | 000,049,488 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netfxperf.dll [2014/11/19 10:00:58 | 001,555,456 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\certmgr.dll [2014/11/19 10:00:58 | 000,547,840 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PortableDeviceApi.dll [2014/11/19 10:00:58 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mcbuilder.exe [2014/11/19 10:00:57 | 001,712,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xpsservices.dll [2014/11/19 10:00:57 | 000,508,904 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\winload.exe [2014/11/19 10:00:57 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sppwinob.dll [2014/11/19 10:00:57 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drvstore.dll [2014/11/19 10:00:56 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cmd.exe [2014/11/19 10:00:56 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfds.dll [2014/11/19 10:00:56 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\framedynos.dll [2014/11/19 10:00:55 | 000,442,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\winresume.exe [2014/11/19 10:00:55 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmicmiplugin.dll [2014/11/19 10:00:54 | 001,063,936 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\werconcpl.dll [2014/11/19 10:00:54 | 000,762,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\azroles.dll [2014/11/19 10:00:53 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfreadwrite.dll [2014/11/19 10:00:53 | 000,144,768 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\basecsp.dll [2014/11/19 10:00:52 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\NaturalLanguage6.dll [2014/11/19 10:00:52 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sqlsrv32.dll [2014/11/19 10:00:52 | 000,776,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\calc.exe [2014/11/19 10:00:52 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\evr.dll [2014/11/19 10:00:52 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WinSATAPI.dll [2014/11/19 10:00:52 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\taskcomp.dll [2014/11/19 10:00:51 | 002,983,424 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\UIRibbon.dll [2014/11/19 10:00:51 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\lpksetup.exe [2014/11/19 10:00:51 | 000,271,664 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\fveapi.dll [2014/11/19 10:00:51 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vpnike.dll [2014/11/19 10:00:50 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\hgprint.dll [2014/11/19 10:00:49 | 000,458,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WSDApi.dll [2014/11/19 10:00:49 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmpeffects.dll [2014/11/19 10:00:49 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\net1.exe [2014/11/19 10:00:49 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rpchttp.dll [2014/11/19 10:00:49 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\prncache.dll [2014/11/19 10:00:48 | 000,690,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ci.dll [2014/11/19 10:00:48 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\scansetting.dll [2014/11/19 10:00:48 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\aitagent.exe [2014/11/19 10:00:47 | 002,504,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMVCORE.DLL [2014/11/19 10:00:47 | 001,750,528 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\pnidui.dll [2014/11/19 10:00:47 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wlangpui.dll [2014/11/19 10:00:47 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MMDevAPI.dll [2014/11/19 10:00:47 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\QSHVHOST.DLL [2014/11/19 10:00:47 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\t2embed.dll [2014/11/19 10:00:46 | 002,146,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\SyncCenter.dll [2014/11/19 10:00:46 | 000,907,776 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sdengin2.dll [2014/11/19 10:00:46 | 000,782,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\webservices.dll [2014/11/19 10:00:46 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netdiagfx.dll [2014/11/19 10:00:46 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\fde.dll [2014/11/19 10:00:46 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wscapi.dll [2014/11/19 10:00:45 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MSMPEG2ENC.DLL [2014/11/19 10:00:45 | 000,802,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WFS.exe [2014/11/19 10:00:45 | 000,727,040 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mcmde.dll [2014/11/19 10:00:44 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\DXPTaskRingtone.dll [2014/11/19 10:00:44 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\imapi2.dll [2014/11/19 10:00:44 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\setupcl.exe [2014/11/19 10:00:43 | 001,624,064 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMPEncEn.dll [2014/11/19 10:00:43 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dwmredir.dll [2014/11/19 10:00:42 | 002,217,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\bootres.dll [2014/11/19 10:00:42 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Narrator.exe [2014/11/19 10:00:42 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\autoconv.exe [2014/11/19 10:00:42 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\autofmt.exe [2014/11/19 10:00:42 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vaultsvc.dll [2014/11/19 10:00:42 | 000,194,432 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\halmacpi.dll [2014/11/19 10:00:42 | 000,194,432 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\hal.dll [2014/11/19 10:00:42 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netiohlp.dll [2014/11/19 10:00:42 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\audiodg.exe [2014/11/19 10:00:42 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\hbaapi.dll [2014/11/19 10:00:42 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\proquota.exe [2014/11/19 10:00:41 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\powercpl.dll [2014/11/19 10:00:41 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ipsmsnap.dll [2014/11/19 10:00:41 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msinfo32.exe [2014/11/19 10:00:41 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\srchadmin.dll [2014/11/19 10:00:41 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\eapphost.dll [2014/11/19 10:00:41 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\framedyn.dll [2014/11/19 10:00:41 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tcpipcfg.dll [2014/11/19 10:00:41 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\schtasks.exe [2014/11/19 10:00:41 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mimefilt.dll [2014/11/19 10:00:40 | 000,665,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\AuxiliaryDisplayCpl.dll [2014/11/19 10:00:40 | 000,399,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\DXP.dll [2014/11/19 10:00:40 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MSNP.ax [2014/11/19 10:00:40 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\QAGENT.DLL [2014/11/19 10:00:40 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netid.dll [2014/11/19 10:00:39 | 001,227,776 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wdc.dll [2014/11/19 10:00:38 | 001,326,592 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wlanpref.dll [2014/11/19 10:00:38 | 001,131,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sdclt.exe [2014/11/19 10:00:38 | 001,003,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMNetMgr.dll [2014/11/19 10:00:38 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Vault.dll [2014/11/19 10:00:38 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\untfs.dll [2014/11/19 10:00:38 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\nci.dll [2014/11/19 10:00:37 | 001,400,320 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\DxpTaskSync.dll [2014/11/19 10:00:37 | 001,040,384 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Display.dll [2014/11/19 10:00:37 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msdri.dll [2014/11/19 10:00:37 | 000,316,416 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sharemediacpl.dll [2014/11/19 10:00:37 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XpsRasterService.dll [2014/11/19 10:00:37 | 000,098,816 | ---- | C] (Microsoft) -- C:\windows\System32\Robocopy.exe [2014/11/19 10:00:37 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\userinit.exe [2014/11/19 10:00:36 | 001,188,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\DiagCpl.dll [2014/11/19 10:00:36 | 001,066,496 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msdtctm.dll [2014/11/19 10:00:36 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\biocpl.dll [2014/11/19 10:00:36 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wiadefui.dll [2014/11/19 10:00:36 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\termmgr.dll [2014/11/19 10:00:36 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\puiobj.dll [2014/11/19 10:00:36 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\eudcedit.exe [2014/11/19 10:00:36 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sppcomapi.dll [2014/11/19 10:00:36 | 000,140,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\scsiport.sys [2014/11/19 10:00:36 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\logoncli.dll [2014/11/19 10:00:36 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\shsetup.dll [2014/11/19 10:00:35 | 002,202,624 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\SensorsCpl.dll [2014/11/19 10:00:35 | 002,157,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\themecpl.dll [2014/11/19 10:00:35 | 000,856,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\FirewallControlPanel.dll [2014/11/19 10:00:35 | 000,766,464 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wpccpl.dll [2014/11/19 10:00:35 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msconfig.exe [2014/11/19 10:00:35 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dnscmmc.dll [2014/11/19 10:00:34 | 000,481,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mscms.dll [2014/11/19 10:00:34 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\localsec.dll [2014/11/19 10:00:34 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PhotoScreensaver.scr [2014/11/19 10:00:34 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\hgcpl.dll [2014/11/19 10:00:34 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mprddm.dll [2014/11/19 10:00:33 | 001,644,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netcenter.dll [2014/11/19 10:00:33 | 000,941,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mblctr.exe [2014/11/19 10:00:33 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\VAN.dll [2014/11/19 10:00:33 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PerfCenterCPL.dll [2014/11/19 10:00:33 | 000,600,064 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\usercpl.dll [2014/11/19 10:00:33 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wlanui.dll [2014/11/19 10:00:33 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\SndVol.exe [2014/11/19 10:00:33 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\SndVolSSO.dll [2014/11/19 10:00:33 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\bcdsrv.dll [2014/11/19 10:00:33 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\prntvpt.dll [2014/11/19 10:00:33 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iasacct.dll [2014/11/19 10:00:33 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\w32tm.exe [2014/11/19 10:00:32 | 003,727,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\accessibilitycpl.dll [2014/11/19 10:00:32 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\main.cpl [2014/11/19 10:00:32 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spwizeng.dll [2014/11/19 10:00:32 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\azroleui.dll [2014/11/19 10:00:32 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MSAC3ENC.DLL [2014/11/19 10:00:32 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\ks.sys [2014/11/19 10:00:32 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netjoin.dll [2014/11/19 10:00:32 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\fdeploy.dll [2014/11/19 10:00:31 | 002,130,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\networkmap.dll [2014/11/19 10:00:31 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sud.dll [2014/11/19 10:00:31 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ActionCenter.dll [2014/11/19 10:00:31 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mspbda.dll [2014/11/19 10:00:31 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\prnfldr.dll [2014/11/19 10:00:31 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\slui.exe [2014/11/19 10:00:31 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Faultrep.dll [2014/11/19 10:00:31 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wusa.exe [2014/11/19 10:00:31 | 000,312,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MCEWMDRMNDBootstrap.dll [2014/11/19 10:00:31 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MediaMetadataHandler.dll [2014/11/19 10:00:31 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\taskbarcpl.dll [2014/11/19 10:00:31 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\OnLineIDCpl.dll [2014/11/19 10:00:31 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\adsldp.dll [2014/11/19 10:00:30 | 000,750,080 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sdcpl.dll [2014/11/19 10:00:30 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\bthprops.cpl [2014/11/19 10:00:30 | 000,577,024 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wpd_ci.dll [2014/11/19 10:00:30 | 000,537,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ActionCenterCPL.dll [2014/11/19 10:00:30 | 000,428,544 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\shwebsvc.dll [2014/11/19 10:00:30 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sysmon.ocx [2014/11/19 10:00:30 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\intl.cpl [2014/11/19 10:00:30 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iprtrmgr.dll [2014/11/19 10:00:30 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\defaultlocationcpl.dll [2014/11/19 10:00:30 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\efscore.dll [2014/11/19 10:00:30 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iasrad.dll [2014/11/19 10:00:30 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ifsutil.dll [2014/11/19 10:00:30 | 000,137,088 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\halacpi.dll [2014/11/19 10:00:30 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\recovery.dll [2014/11/19 10:00:30 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dot3cfg.dll [2014/11/19 10:00:30 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ftp.exe [2014/11/19 10:00:30 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sisbkup.dll [2014/11/19 10:00:29 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\OobeFldr.dll [2014/11/19 10:00:29 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmpmde.dll [2014/11/19 10:00:29 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TabletPC.cpl [2014/11/19 10:00:29 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\DeviceCenter.dll [2014/11/19 10:00:29 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\systemcpl.dll [2014/11/19 10:00:29 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ntprint.dll [2014/11/19 10:00:29 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\bcdedit.exe [2014/11/19 10:00:29 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\recdisc.exe [2014/11/19 10:00:29 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vdsutil.dll [2014/11/19 10:00:29 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\bcdboot.exe [2014/11/19 10:00:29 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\autoplay.dll [2014/11/19 10:00:29 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sppnp.dll [2014/11/19 10:00:29 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WSTPager.ax [2014/11/19 10:00:28 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\blackbox.dll [2014/11/19 10:00:28 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\nshipsec.dll [2014/11/19 10:00:28 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sethc.exe [2014/11/19 10:00:28 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rstrui.exe [2014/11/19 10:00:28 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dpx.dll [2014/11/19 10:00:28 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ksproxy.ax [2014/11/19 10:00:28 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmpsrcwp.dll [2014/11/19 10:00:28 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\AuxiliaryDisplayServices.dll [2014/11/19 10:00:28 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\NAPHLPR.DLL [2014/11/19 10:00:28 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\migisol.dll [2014/11/19 10:00:28 | 000,093,696 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\windows\System32\fms.dll [2014/11/19 10:00:28 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\asycfilt.dll [2014/11/19 10:00:27 | 000,592,384 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msftedit.dll [2014/11/19 10:00:27 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dfrgui.exe [2014/11/19 10:00:27 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wlanmsm.dll [2014/11/19 10:00:27 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dot3ui.dll [2014/11/19 10:00:27 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wsqmcons.exe [2014/11/19 10:00:27 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ReAgent.dll [2014/11/19 10:00:27 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wavemsp.dll [2014/11/19 10:00:27 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sysclass.dll [2014/11/19 10:00:27 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ocsetup.exe [2014/11/19 10:00:27 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\isoburn.exe [2014/11/19 10:00:27 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tzutil.exe [2014/11/19 10:00:26 | 000,697,344 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\SmiEngine.dll [2014/11/19 10:00:26 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wvc.dll [2014/11/19 10:00:26 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wimgapi.dll [2014/11/19 10:00:26 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PkgMgr.exe [2014/11/19 10:00:26 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\qasf.dll [2014/11/19 10:00:26 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\qcap.dll [2014/11/19 10:00:26 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\uxlib.dll [2014/11/19 10:00:26 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\setupugc.exe [2014/11/19 10:00:26 | 000,051,200 | ---- | C] (Twain Working Group) -- C:\windows\twain_32.dll [2014/11/19 10:00:26 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\slwga.dll [2014/11/19 10:00:25 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmdrmsdk.dll [2014/11/19 10:00:25 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msscp.dll [2014/11/19 10:00:25 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ssText3d.scr [2014/11/19 10:00:25 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\diskraid.exe [2014/11/19 10:00:25 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\srrstr.dll [2014/11/19 10:00:25 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\DevicePairingFolder.dll [2014/11/19 10:00:25 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wwanconn.dll [2014/11/19 10:00:25 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\nslookup.exe [2014/11/19 10:00:25 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mciavi32.dll [2014/11/19 10:00:24 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\onexui.dll [2014/11/19 10:00:24 | 000,402,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drmmgrtn.dll [2014/11/19 10:00:24 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wimserv.exe [2014/11/19 10:00:24 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\nltest.exe [2014/11/19 10:00:24 | 000,292,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WindowsAnytimeUpgradeResults.exe [2014/11/19 10:00:24 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iTVData.dll [2014/11/19 10:00:24 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\input.dll [2014/11/19 10:00:24 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wpdwcn.dll [2014/11/19 10:00:24 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpencom.dll [2014/11/19 10:00:24 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ocsetapi.dll [2014/11/19 10:00:24 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vdsbas.dll [2014/11/19 10:00:24 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\perfmon.exe [2014/11/19 10:00:24 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\UserAccountControlSettings.dll [2014/11/19 10:00:24 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\NAPCRYPT.DLL [2014/11/19 10:00:24 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\acppage.dll [2014/11/19 10:00:24 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vpnikeapi.dll [2014/11/19 10:00:23 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\eapp3hst.dll [2014/11/19 10:00:23 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dxdiagn.dll [2014/11/19 10:00:23 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MFPlay.dll [2014/11/19 10:00:23 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\rmcast.sys [2014/11/19 10:00:23 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\logagent.exe [2014/11/19 10:00:23 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\windows\bfsvc.exe [2014/11/19 10:00:23 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\runonce.exe [2014/11/19 10:00:22 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\OpcServices.dll [2014/11/19 10:00:22 | 000,878,592 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Bubbles.scr [2014/11/19 10:00:22 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmdrmdev.dll [2014/11/19 10:00:22 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sqlcese30.dll [2014/11/19 10:00:22 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\bitsadmin.exe [2014/11/19 10:00:22 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\shacct.dll [2014/11/19 10:00:22 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tabcal.exe [2014/11/19 10:00:22 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PnPUnattend.exe [2014/11/19 10:00:22 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\unimdmat.dll [2014/11/19 10:00:22 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpd3d.dll [2014/11/19 10:00:22 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iscsium.dll [2014/11/19 10:00:22 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\lsmproxy.dll [2014/11/19 10:00:21 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMADMOD.DLL [2014/11/19 10:00:21 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PortableDeviceStatus.dll [2014/11/19 10:00:21 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WPDSp.dll [2014/11/19 10:00:21 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Mystify.scr [2014/11/19 10:00:21 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Ribbons.scr [2014/11/19 10:00:21 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PortableDeviceSyncProvider.dll [2014/11/19 10:00:21 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ActionQueue.dll [2014/11/19 10:00:21 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\powercfg.cpl [2014/11/19 10:00:21 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MdSched.exe [2014/11/19 10:00:21 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\QSVRMGMT.DLL [2014/11/19 10:00:21 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\kstvtune.ax [2014/11/19 10:00:21 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\logman.exe [2014/11/19 10:00:21 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\olethk32.dll [2014/11/19 10:00:21 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mapistub.dll [2014/11/19 10:00:21 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mapi32.dll [2014/11/19 10:00:21 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Mpeg2Data.ax [2014/11/19 10:00:21 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\lpremove.exe [2014/11/19 10:00:21 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ncryptui.dll [2014/11/19 10:00:21 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\djoin.exe [2014/11/19 10:00:21 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\utildll.dll [2014/11/19 10:00:20 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMVSDECD.DLL [2014/11/19 10:00:20 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmdrmnet.dll [2014/11/19 10:00:20 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\qdv.dll [2014/11/19 10:00:20 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msnetobj.dll [2014/11/19 10:00:20 | 000,257,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WindowsAnytimeUpgrade.exe [2014/11/19 10:00:20 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\unattend.dll [2014/11/19 10:00:20 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sqmapi.dll [2014/11/19 10:00:20 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RelPost.exe [2014/11/19 10:00:20 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\VBICodec.ax [2014/11/19 10:00:20 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\EhStorAPI.dll [2014/11/19 10:00:20 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dot3msm.dll [2014/11/19 10:00:20 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wiavideo.dll [2014/11/19 10:00:20 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Kswdmcap.ax [2014/11/19 10:00:20 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sppinst.dll [2014/11/19 10:00:20 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\fphc.dll [2014/11/19 10:00:20 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cmstp.exe [2014/11/19 10:00:20 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\QCLIPROV.DLL [2014/11/19 10:00:20 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cca.dll [2014/11/19 10:00:20 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\takeown.exe [2014/11/19 10:00:19 | 000,739,328 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMSPDMOD.DLL [2014/11/19 10:00:19 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msorcl32.dll [2014/11/19 10:00:19 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iscsicli.exe [2014/11/19 10:00:19 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\desk.cpl [2014/11/19 10:00:19 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iasrecst.dll [2014/11/19 10:00:19 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\setupcln.dll [2014/11/19 10:00:19 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MuiUnattend.exe [2014/11/19 10:00:19 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vfwwdm32.dll [2014/11/19 10:00:19 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wsnmp32.dll [2014/11/19 10:00:19 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\umb.dll [2014/11/19 10:00:19 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WavDest.dll [2014/11/19 10:00:19 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\pdhui.dll [2014/11/19 10:00:19 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\basesrv.dll [2014/11/19 10:00:19 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\relog.exe [2014/11/19 10:00:19 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PrintIsolationProxy.dll [2014/11/19 10:00:19 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\AzSqlExt.dll [2014/11/19 10:00:19 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netiougc.exe [2014/11/19 10:00:18 | 001,027,584 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\IMJP10.IME [2014/11/19 10:00:18 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\FXSTIFF.dll [2014/11/19 10:00:18 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\itircl.dll [2014/11/19 10:00:18 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmpps.dll [2014/11/19 10:00:18 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\diskpart.exe [2014/11/19 10:00:18 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\amstream.dll [2014/11/19 10:00:18 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\CertPolEng.dll [2014/11/19 10:00:18 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spbcd.dll [2014/11/19 10:00:18 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MultiDigiMon.exe [2014/11/19 10:00:18 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\setbcdlocale.dll [2014/11/19 10:00:18 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ksxbar.ax [2014/11/19 10:00:18 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wkscli.dll [2014/11/19 10:00:18 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WerFaultSecure.exe [2014/11/19 10:00:18 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netbtugc.exe [2014/11/19 10:00:18 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\syssetup.dll [2014/11/19 10:00:18 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\nrpsrv.dll [2014/11/19 10:00:17 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sppc.dll [2014/11/19 10:00:17 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\eappgnui.dll [2014/11/19 10:00:17 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\windows\System32\iccvid.dll [2014/11/19 10:00:17 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tlscsp.dll [2014/11/19 10:00:17 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\findstr.exe [2014/11/19 10:00:17 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MSDvbNP.ax [2014/11/19 10:00:17 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\luainstall.dll [2014/11/19 10:00:17 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mciqtz32.dll [2014/11/19 10:00:17 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wiarpc.dll [2014/11/19 10:00:17 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wdiasqmmodule.dll [2014/11/19 10:00:17 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\usbrpm.sys [2014/11/19 10:00:17 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\HotStartUserAgent.dll [2014/11/19 10:00:17 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ReAgentc.exe [2014/11/19 10:00:17 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\tdi.sys [2014/11/19 10:00:17 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spopk.dll [2014/11/19 10:00:17 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\muifontsetup.dll [2014/11/19 10:00:16 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\UIRibbonRes.dll [2014/11/19 10:00:16 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\manage-bde.exe [2014/11/19 10:00:16 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\repair-bde.exe [2014/11/19 10:00:16 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\inetmib1.dll [2014/11/19 10:00:16 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\g711codc.ax [2014/11/19 10:00:16 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\odbcconf.dll [2014/11/19 10:00:16 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\unlodctr.exe [2014/11/19 10:00:16 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vbisurf.ax [2014/11/19 10:00:16 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msdmo.dll [2014/11/19 10:00:16 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\profprov.dll [2014/11/19 10:00:16 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netcfg.exe [2014/11/19 10:00:16 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdprefdrvapi.dll [2014/11/19 10:00:15 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RDPENCDD.dll [2014/11/19 10:00:15 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\napdsnap.dll [2014/11/19 10:00:15 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\FXSMON.dll [2014/11/19 10:00:15 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\elsTrans.dll [2014/11/19 10:00:15 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TRAPI.dll [2014/11/19 10:00:15 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\bitsperf.dll [2014/11/19 10:00:15 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\schedcli.dll [2014/11/19 10:00:15 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\perfts.dll [2014/11/19 10:00:14 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\imkr80.ime [2014/11/19 10:00:14 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dsauth.dll [2014/11/19 10:00:14 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wsdchngr.dll [2014/11/19 10:00:14 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sscore.dll [2014/11/19 10:00:14 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\riched32.dll [2014/11/19 10:00:13 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wshirda.dll [2014/11/19 10:00:13 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpcfgex.dll [2014/11/19 10:00:12 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\USBCAMD2.sys [2014/11/19 10:00:12 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\USBCAMD.sys [2014/11/19 10:00:11 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RDPREFDD.dll [2014/11/19 10:00:11 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\C_ISCII.DLL [2014/11/19 10:00:11 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\shunimpl.dll [2014/11/19 10:00:11 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spwmp.dll [2014/11/19 10:00:11 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msdxm.ocx [2014/11/19 10:00:11 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dxmasf.dll [2014/11/19 10:00:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDUS.DLL [2014/11/19 10:00:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDINTEL.DLL [2014/11/19 10:00:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDINKAN.DLL [2014/11/19 10:00:09 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\nlsbres.dll [2014/11/19 10:00:09 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\BlbEvents.dll [2014/11/19 10:00:09 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\pifmgr.dll [2014/11/19 10:00:09 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spwizres.dll [2014/11/19 10:00:09 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDSG.DLL [2014/11/19 10:00:09 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\kbdlk41a.dll [2014/11/19 10:00:09 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDCZ1.DLL [2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDTUQ.DLL [2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDTUF.DLL [2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDSF.DLL [2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDPO.DLL [2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDNEPR.DLL [2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDINBEN.DLL [2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDGR1.DLL [2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDGKL.DLL [2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDUGHR1.DLL [2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDTURME.DLL [2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDTAJIK.DLL [2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDMON.DLL [2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDMAORI.DLL [2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDLT1.DLL [2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDINTAM.DLL [2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDINORI.DLL [2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDINMAR.DLL [2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDINHIN.DLL [2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDBULG.DLL [2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDBLR.DLL [2014/11/19 10:00:09 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDGEO.DLL [2014/11/19 10:00:09 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dpnaddr.dll [2014/11/19 10:00:03 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wdscore.dll [2014/11/19 09:59:48 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wbemcomn.dll [2014/11/18 14:56:48 | 001,202,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\FM20.DLL [2014/11/18 08:33:41 | 000,000,000 | --SD | C] -- C:\windows\System32\CompatTel [2014/11/18 08:33:35 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\TOSHIBA_Corporation [2014/11/18 08:15:18 | 000,000,000 | ---D | C] -- C:\windows\System32\MRT [2014/11/17 20:17:57 | 000,229,000 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MpSigStub.exe [2014/11/17 20:14:18 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\poqexec.exe [2014/11/17 19:59:17 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\Toshiba [2014/11/17 19:59:10 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\ATI [2014/11/17 19:59:10 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\ATI [2014/11/17 19:58:19 | 000,000,000 | R--D | C] -- C:\Users\young\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2014/11/17 19:58:19 | 000,000,000 | R--D | C] -- C:\Users\young\Searches [2014/11/17 19:58:19 | 000,000,000 | R--D | C] -- C:\Users\young\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2014/11/17 19:58:19 | 000,000,000 | -H-D | C] -- C:\Users\young\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned [2014/11/17 19:58:10 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\Identities [2014/11/17 19:58:08 | 000,000,000 | R--D | C] -- C:\Users\young\Contacts [2014/11/17 19:57:03 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\WinBatch [2014/11/17 19:56:19 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\VirtualStore [2014/11/17 19:56:17 | 000,000,000 | --SD | C] -- C:\Users\young\AppData\Roaming\Microsoft [2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Videos [2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Saved Games [2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Pictures [2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Music [2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Links [2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Favorites [2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Downloads [2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Documents [2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Desktop [2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\AppData\Local\Temporary Internet Files [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Templates [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Start Menu [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\SendTo [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Recent [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\PrintHood [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\NetHood [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Documents\My Videos [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Documents\My Pictures [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Documents\My Music [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\My Documents [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Local Settings [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\AppData\Local\History [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Cookies [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Application Data [2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\AppData\Local\Application Data [2014/11/17 19:56:17 | 000,000,000 | -H-D | C] -- C:\Users\young\AppData [2014/11/17 19:56:17 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\Temp [2014/11/17 19:56:17 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\Microsoft [2014/11/17 19:56:17 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\Media Center Programs [2014/11/17 19:55:06 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2014/11/17 19:39:57 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Toshiba Shared [2014/11/17 19:39:50 | 000,275,536 | ---- | C] (TOSHIBA Corporation) -- C:\windows\System32\drivers\tos_sps32.sys [2014/11/17 19:39:49 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DX9_41.dll [2014/11/17 19:39:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA DVD PLAYER [2014/11/17 19:33:17 | 000,024,576 | ---- | C] (Toshiba) -- C:\windows\System32\TSCI.dll [2014/11/17 19:33:17 | 000,024,576 | ---- | C] (Toshiba) -- C:\windows\System32\THCI.dll [2014/11/17 19:32:31 | 000,024,576 | ---- | C] (COMPAL ELECTRONIC INC.) -- C:\windows\System32\TSBWLS.dll [2014/11/17 19:31:52 | 000,000,000 | ---D | C] -- C:\windows\System32\Microsoft.VC80.MFC [2014/11/17 19:31:51 | 000,000,000 | ---D | C] -- C:\ProgramData\XP [2014/11/17 19:31:51 | 000,000,000 | ---D | C] -- C:\ProgramData\win7_64 [2014/11/17 19:31:51 | 000,000,000 | ---D | C] -- C:\ProgramData\win7_32 [2014/11/17 19:31:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Vista64 [2014/11/17 19:31:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Vista32 [2014/11/17 19:30:24 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics [2014/11/17 19:28:31 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek WLAN Driver [2014/11/17 19:26:56 | 007,360,512 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\System32\RTSUSTORicon.dll [2014/11/17 19:26:19 | 000,000,000 | ---D | C] -- C:\windows\System32\RTCOM [2014/11/17 19:26:02 | 001,784,352 | ---- | C] (Waves Audio Ltd.) -- C:\windows\System32\WavesLib.dll [2014/11/17 19:26:02 | 000,339,968 | ---- | C] (SRS Labs, Inc.) -- C:\windows\System32\SRSTSXT.dll [2014/11/17 19:26:02 | 000,185,776 | ---- | C] (SRS Labs, Inc.) -- C:\windows\System32\SRSTSHD.dll [2014/11/17 19:26:02 | 000,167,936 | ---- | C] (SRS Labs, Inc.) -- C:\windows\System32\SRSHP360.dll [2014/11/17 19:26:02 | 000,135,168 | ---- | C] (SRS Labs, Inc.) -- C:\windows\System32\SRSWOW.dll [2014/11/17 19:26:01 | 002,898,464 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\System32\RtkAPO.dll [2014/11/17 19:26:01 | 001,933,312 | ---- | C] (Waves Audio Ltd.) -- C:\windows\System32\MaxxAudioEQ.dll [2014/11/17 19:26:01 | 001,227,296 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\System32\RtkPgExt.dll [2014/11/17 19:26:01 | 000,551,456 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\System32\RTSndMgr.cpl [2014/11/17 19:26:01 | 000,326,176 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\System32\RtkApoApi.dll [2014/11/17 19:26:01 | 000,290,304 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\System32\RP3DHT32.dll [2014/11/17 19:26:01 | 000,290,304 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\System32\RP3DAA32.dll [2014/11/17 19:26:01 | 000,159,744 | ---- | C] (Waves Audio Ltd.) -- C:\windows\System32\MaxxAudioAPO20.dll [2014/11/17 19:26:01 | 000,126,976 | ---- | C] (Waves Audio Ltd.) -- C:\windows\System32\MaxxAudioAPO.dll [2014/11/17 19:26:01 | 000,052,256 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\System32\RtkCoInst.dll [2014/11/17 19:26:00 | 000,831,488 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\RtlExUpd.dll [2014/11/17 19:26:00 | 000,266,240 | ---- | C] (Fortemedia Corporation) -- C:\windows\System32\FMAPO.dll [2014/11/17 19:26:00 | 000,142,848 | ---- | C] (Andrea Electronics Corporation) -- C:\windows\System32\AERTACap.dll [2014/11/17 19:26:00 | 000,125,952 | ---- | C] (Andrea Electronics Corporation) -- C:\windows\System32\AERTARen.dll [2014/11/17 19:26:00 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp [2014/11/17 19:26:00 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek [2014/11/17 19:25:16 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2014/11/17 19:23:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center [2014/11/17 19:21:46 | 000,000,000 | ---D | C] -- C:\Program Files\ATI [2014/11/17 19:21:45 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2014/11/17 19:21:43 | 011,660,800 | ---- | C] (ATI Technologies Inc.) -- C:\windows\System32\atioglxx.dll [2014/11/17 19:21:43 | 004,994,560 | ---- | C] (ATI Technologies Inc.) -- C:\windows\System32\drivers\atikmdag.sys [2014/11/17 19:21:43 | 003,105,280 | ---- | C] (ATI Technologies Inc. ) -- C:\windows\System32\atiumdag.dll [2014/11/17 19:21:43 | 002,868,736 | ---- | C] (ATI Technologies Inc. ) -- C:\windows\System32\atiumdva.dll [2014/11/17 19:21:43 | 000,356,352 | ---- | C] (ATI Technologies, Inc.) -- C:\windows\System32\atipdlxx.dll [2014/11/17 19:21:43 | 000,274,432 | ---- | C] (ATI Technologies, Inc.) -- C:\windows\System32\Oemdspif.dll [2014/11/17 19:21:43 | 000,176,128 | ---- | C] (AMD) -- C:\windows\System32\atiesrxx.exe [2014/11/17 19:21:43 | 000,159,744 | ---- | C] (AMD) -- C:\windows\System32\atitmmxx.dll [2014/11/17 19:21:43 | 000,051,712 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\windows\System32\atimpc32.dll [2014/11/17 19:21:43 | 000,051,712 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\windows\System32\amdpcom32.dll [2014/11/17 19:21:43 | 000,014,392 | ---- | C] (Advanced Micro Devices Inc.) -- C:\windows\System32\drivers\AtiPcie.sys [2014/11/17 19:21:43 | 000,011,776 | ---- | C] (AMD) -- C:\windows\System32\atimuixx.dll [2014/11/17 19:21:42 | 003,264,512 | ---- | C] (Advanced Micro Devices Inc.) -- C:\windows\System32\aticaldd.dll [2014/11/17 19:21:42 | 002,469,888 | ---- | C] (ATI Technologies Inc. ) -- C:\windows\System32\atidxx32.dll [2014/11/17 19:21:42 | 000,442,368 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\windows\System32\ATIDEMGX.dll [2014/11/17 19:21:42 | 000,348,160 | ---- | C] (AMD) -- C:\windows\System32\atieclxx.exe [2014/11/17 19:21:42 | 000,184,320 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\windows\System32\atiadlxx.dll [2014/11/17 19:21:42 | 000,118,784 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\windows\System32\atibtmon.exe [2014/11/17 19:21:42 | 000,053,248 | ---- | C] (ATI Technologies Inc.) -- C:\windows\System32\drivers\ati2erec.dll [2014/11/17 19:21:42 | 000,053,248 | ---- | C] (Advanced Micro Devices Inc.) -- C:\windows\System32\aticalrt.dll [2014/11/17 19:21:42 | 000,053,248 | ---- | C] (Advanced Micro Devices Inc.) -- C:\windows\System32\aticalcl.dll [2014/11/17 19:21:42 | 000,043,520 | ---- | C] (ATI Technologies, Inc.) -- C:\windows\System32\ati2edxx.dll [2014/11/17 19:20:51 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office Suite Activation Assistant [2014/11/17 19:11:25 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office [2014/11/17 19:11:19 | 000,031,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msonpmon.dll [2014/11/17 19:10:36 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET [2014/11/17 19:09:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help [2014/11/17 19:08:29 | 000,000,000 | RH-D | C] -- C:\MSOCache [2014/11/17 19:04:29 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office [2014/11/17 19:04:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works [2014/11/17 19:04:00 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works [2014/11/17 19:03:47 | 000,000,000 | ---D | C] -- C:\windows\SoftwareDistribution [1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 180 Days ==========[/color] [2015/01/25 11:07:31 | 001,310,720 | -HS- | M] () -- C:\Users\young\NTUSER.DAT [2015/01/25 10:51:43 | 000,000,886 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job [2015/01/25 10:31:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\young\Desktop\OTL.exe [2015/01/25 10:19:00 | 000,000,830 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job [2015/01/25 10:13:33 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat [2015/01/25 09:39:30 | 000,019,024 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2015/01/25 09:39:30 | 000,019,024 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2015/01/25 09:17:31 | 000,000,882 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job [2015/01/25 09:12:16 | 000,000,438 | ---- | M] () -- C:\windows\win.ini [2015/01/24 16:02:36 | 000,701,616 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerApp.exe [2015/01/24 16:02:34 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerCPLApp.cpl [2015/01/22 20:35:35 | 000,002,140 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2015/01/21 20:57:58 | 000,000,006 | -H-- | M] () -- C:\windows\tasks\SA.DAT [2015/01/21 20:57:49 | 1408,045,056 | -HS- | M] () -- C:\hiberfil.sys [2015/01/21 20:57:03 | 000,782,366 | -H-- | M] () -- C:\Users\young\AppData\Local\IconCache.db [2015/01/21 19:53:57 | 000,000,539 | ---- | M] () -- C:\windows\tasks\RegCure Pro_sch_E828F404-A1E1-11E4-A29D-002622F60C76.job [2015/01/21 16:46:34 | 000,000,001 | ---- | M] () -- C:\Users\young\Documents\CryptoWall 2.0.html [2015/01/21 16:44:26 | 001,715,072 | ---- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\Cat.DB [2015/01/21 16:44:19 | 000,781,298 | ---- | M] () -- C:\windows\System32\PerfStringBackup.INI [2015/01/21 16:44:19 | 000,661,894 | ---- | M] () -- C:\windows\System32\perfh009.dat [2015/01/21 16:44:19 | 000,121,730 | ---- | M] () -- C:\windows\System32\perfc009.dat [2015/01/21 15:37:25 | 000,001,020 | ---- | M] () -- C:\Users\young\AppData\Roaming\wklnhst.dat [2015/01/21 15:34:17 | 000,148,910 | ---- | M] () -- C:\windows\hpoins19.dat [2015/01/15 04:37:00 | 000,069,995 | ---- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\VT20150115.002 [2015/01/09 20:26:05 | 000,002,240 | ---- | M] () -- C:\Users\young\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2015/01/08 22:46:19 | 000,096,680 | ---- | M] (Oracle Corporation) -- C:\windows\System32\WindowsAccessBridge.dll [2015/01/08 22:46:18 | 000,272,296 | ---- | M] (Oracle Corporation) -- C:\windows\System32\javaws.exe [2015/01/08 22:46:18 | 000,176,552 | ---- | M] (Oracle Corporation) -- C:\windows\System32\javaw.exe [2015/01/08 22:46:18 | 000,176,552 | ---- | M] (Oracle Corporation) -- C:\windows\System32\java.exe [2015/01/01 15:59:36 | 000,094,424 | ---- | M] (Symantec Corporation) -- C:\windows\System32\drivers\SYMEVENT.SYS [2015/01/01 15:59:36 | 000,008,186 | ---- | M] () -- C:\windows\System32\drivers\SYMEVENT.CAT [2015/01/01 15:59:36 | 000,000,806 | ---- | M] () -- C:\windows\System32\drivers\SYMEVENT.INF [2015/01/01 15:59:22 | 000,002,542 | ---- | M] () -- C:\Users\Public\Desktop\Norton Security with Backup.lnk [2015/01/01 15:57:39 | 000,001,265 | ---- | M] () -- C:\Users\young\Desktop\Norton Installation Files.lnk [2014/12/12 20:33:44 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ieUnatt.exe [2014/12/11 22:11:44 | 003,971,512 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ntkrnlpa.exe [2014/12/11 22:11:43 | 003,916,728 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ntoskrnl.exe [2014/12/11 10:47:27 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\TSWbPrxy.exe [2014/12/10 03:59:47 | 000,000,172 | ---- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\isolate.ini [2014/12/03 21:38:59 | 000,337,920 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\generaltel.dll [2014/12/03 21:38:45 | 000,610,304 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\invagent.dll [2014/12/03 21:38:40 | 000,315,392 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\devinv.dll [2014/12/03 21:38:37 | 000,728,576 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\appraiser.dll [2014/12/03 21:38:36 | 000,202,752 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\aepdu.dll [2014/12/03 21:38:36 | 000,159,744 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\aepic.dll [2014/12/03 21:34:13 | 000,873,984 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\aeinv.dll [2014/12/01 22:59:55 | 000,008,172 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtspx.cat [2014/12/01 22:59:55 | 000,008,168 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtsp.cat [2014/12/01 22:59:55 | 000,001,390 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtspx.inf [2014/12/01 22:59:55 | 000,001,389 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtsp.inf [2014/12/01 22:59:40 | 000,699,608 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\srtsp.sys [2014/12/01 22:59:40 | 000,036,056 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\srtspx.sys [2014/12/01 16:28:26 | 001,160,872 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\aitstatic.exe [2014/11/26 18:10:45 | 000,342,200 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\iedkcs32.dll [2014/11/25 16:24:03 | 000,000,000 | -H-- | M] () -- C:\windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf [2014/11/24 14:04:58 | 000,229,000 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\MpSigStub.exe [2014/11/23 12:13:25 | 000,336,232 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT [2014/11/22 10:38:19 | 000,079,592 | ---- | M] () -- C:\Users\young\AppData\Local\GDIPFONTCACHEV1.DAT [2014/11/21 19:20:44 | 002,724,864 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\mshtml.tlb [2014/11/21 19:20:30 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ieetwcollectorres.dll [2014/11/21 19:07:17 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\iesetup.dll [2014/11/21 19:06:32 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ieetwproxystub.dll [2014/11/21 19:05:02 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\MshtmlDac.dll [2014/11/21 18:59:42 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\jsproxy.dll [2014/11/21 18:58:54 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\iernonce.dll [2014/11/21 18:56:40 | 000,478,208 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ieui.dll [2014/11/21 18:55:14 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ieetwcollector.exe [2014/11/21 18:54:30 | 000,620,032 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\jscript9diag.dll [2014/11/21 18:48:26 | 000,667,648 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\MsSpellCheckingFacility.exe [2014/11/21 18:45:18 | 000,418,304 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\dxtmsft.dll [2014/11/21 18:40:04 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\JavaScriptCollectionAgent.dll [2014/11/21 18:36:14 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msrating.dll [2014/11/21 18:33:22 | 000,285,696 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\dxtrans.dll [2014/11/21 18:29:26 | 004,299,264 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\jscript9.dll [2014/11/21 18:23:48 | 000,688,640 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msfeeds.dll [2014/11/21 18:23:06 | 000,684,544 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ie4uinit.exe [2014/11/21 18:22:49 | 002,052,096 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\inetcpl.cpl [2014/11/21 18:21:57 | 001,155,072 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\mshtmlmedia.dll [2014/11/21 17:54:44 | 000,710,144 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ieapfltr.dll [2014/11/19 19:34:36 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\elshyph.dll [2014/11/19 19:34:35 | 000,645,120 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\jsIntl.dll [2014/11/19 19:34:35 | 000,616,104 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ieapfltr.dat [2014/11/19 19:34:35 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\html.iec [2014/11/19 19:34:35 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\url.dll [2014/11/19 19:34:35 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msls31.dll [2014/11/19 19:34:35 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\iexpress.exe [2014/11/19 19:34:35 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\wextract.exe [2014/11/19 19:34:35 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\inseng.dll [2014/11/19 19:34:35 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\RegisterIEPKEYs.exe [2014/11/19 19:34:35 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\licmgr10.dll [2014/11/19 19:34:35 | 000,016,284 | ---- | M] () -- C:\windows\System32\ieuinit.inf [2014/11/19 19:34:34 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\iepeers.dll [2014/11/19 19:34:34 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\IEAdvpack.dll [2014/11/19 19:34:34 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\iesysprep.dll [2014/11/19 19:34:34 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\SetIEInstalledDate.exe [2014/11/19 19:34:34 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\pngfilt.dll [2014/11/19 19:34:34 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\mshtmler.dll [2014/11/19 19:34:34 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msfeedsbs.dll [2014/11/19 19:34:34 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\imgutil.dll [2014/11/19 19:34:34 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msfeedssync.exe [2014/11/19 19:33:07 | 000,619,520 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\tdh.dll [2014/11/19 19:33:07 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\csrsrv.dll [2014/11/19 19:32:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\taskhost.exe [2014/11/19 19:28:51 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\XpsPrint.dll [2014/11/19 19:28:51 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\d3d10.dll [2014/11/19 19:28:51 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\d3d10level9.dll [2014/11/19 19:28:51 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\XpsGdiConverter.dll [2014/11/19 19:28:51 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\dxgi.dll [2014/11/19 19:28:51 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\d3d10_1core.dll [2014/11/19 19:28:51 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\d3d10core.dll [2014/11/19 19:28:51 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\WindowsCodecsExt.dll [2014/11/19 19:28:51 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\UIAnimation.dll [2014/11/19 19:28:51 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\d3d10_1.dll [2014/11/19 19:28:51 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2014/11/19 19:28:51 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2014/11/19 19:28:51 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2014/11/19 19:28:51 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2014/11/19 19:28:51 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2014/11/19 19:28:51 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2014/11/19 19:28:51 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2014/11/19 19:28:51 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2014/11/19 19:28:51 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2014/11/19 19:26:29 | 001,505,280 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\d3d11.dll [2014/11/19 17:51:27 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msclmd.dll [2014/11/18 14:56:48 | 001,202,848 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\FM20.DLL [2014/11/18 08:33:39 | 000,524,288 | -HS- | M] () -- C:\Users\young\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms [2014/11/18 08:33:39 | 000,524,288 | -HS- | M] () -- C:\Users\young\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms [2014/11/18 08:33:39 | 000,065,536 | -HS- | M] () -- C:\Users\young\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf [2014/11/17 19:57:26 | 000,000,017 | RHS- | M] () -- C:\windows\System32\drivers\fbd.sys [2014/11/17 19:56:17 | 000,000,020 | -HS- | M] () -- C:\Users\young\ntuser.ini [2014/11/17 19:55:15 | 000,039,252 | ---- | M] () -- C:\windows\System32\license.rtf [2014/11/17 19:49:14 | 000,000,000 | ---- | M] () -- C:\windows\NDSTray.INI [2014/11/17 19:30:30 | 000,000,000 | -H-- | M] () -- C:\windows\System32\drivers\Msft_Kernel_SynTP_01007.Wdf [2014/11/17 18:57:35 | 000,000,000 | ---- | M] () -- C:\windows\ativpsrm.bin [2014/11/15 12:03:34 | 000,646,010 | ---- | M] () -- C:\Users\young\Documents\PostVirus-Spyware Status Report.mht [2014/11/07 19:45:09 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\tzres.dll [2014/10/29 18:45:43 | 000,155,136 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\charmap.exe [2014/10/24 18:32:37 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\packager.dll [2014/10/17 18:33:13 | 003,209,728 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\mf.dll [2014/10/13 18:47:30 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msaudite.dll [2014/10/13 18:46:02 | 000,681,984 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\adtschema.dll [2014/10/09 17:45:54 | 002,379,264 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\win32k.sys [2014/10/02 18:45:03 | 000,248,832 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\WSManMigrationPlugin.dll [2014/10/02 18:45:03 | 000,214,016 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\WsmWmiPl.dll [2014/10/02 18:45:03 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\WsmAuto.dll [2014/10/02 18:44:42 | 000,442,880 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\AUDIOKSE.dll [2014/10/02 18:44:31 | 000,275,968 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\EncDump.dll [2014/10/02 18:44:26 | 000,374,784 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\AudioEng.dll [2014/10/02 18:44:26 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\AudioSes.dll [2014/10/02 18:44:25 | 000,198,656 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\WSManHTTPConfig.exe [2014/09/24 18:40:50 | 000,519,680 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\qdvd.dll [2014/09/20 08:10:49 | 000,218,976 | ---- | M] () -- C:\Users\young\Documents\Ovarian Cancer.pdf [2014/09/19 02:23:46 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ncrypt.dll [2014/09/08 22:15:11 | 000,420,056 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\symnets.sys [2014/09/08 22:15:10 | 000,939,224 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\SymEFA.sys [2014/09/08 22:15:10 | 000,042,291 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymVTcer.dat [2014/09/08 22:15:10 | 000,021,520 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\SymELAM.sys [2014/09/08 22:15:10 | 000,009,931 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymELAM.cat [2014/09/08 22:15:10 | 000,008,176 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymNet.cat [2014/09/08 22:15:10 | 000,008,174 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymEFA.cat [2014/09/08 22:15:10 | 000,003,434 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymEFA.inf [2014/09/08 22:15:10 | 000,001,442 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymNet.inf [2014/09/08 22:15:10 | 000,001,098 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\symELAM.inf [2014/09/08 22:15:09 | 000,364,760 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\SymDS.sys [2014/09/08 22:15:09 | 000,008,248 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymDS.cat [2014/09/08 22:15:09 | 000,002,852 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymDS.inf [2014/09/08 22:05:40 | 000,212,696 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\Ironx86.sys [2014/09/08 22:05:40 | 000,008,168 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\iron.cat [2014/09/08 22:05:40 | 000,000,737 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\Iron.inf [2014/09/08 22:05:23 | 000,128,728 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\ccSetx86.sys [2014/09/08 22:05:23 | 000,008,186 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\ccSetx86.cat [2014/09/08 22:05:23 | 000,000,828 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\ccSetx86.inf [2014/08/28 18:44:52 | 002,744,320 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\rdpcorets.dll [2014/08/20 23:23:10 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msxml3r.dll [2014/08/11 18:36:37 | 000,701,440 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\IMJP10K.DLL [2014/08/01 04:35:06 | 000,793,600 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\TSWorkspace.dll [1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2015/01/21 20:55:29 | 000,782,366 | -H-- | C] () -- C:\Users\young\AppData\Local\IconCache.db [2015/01/21 19:53:57 | 000,000,539 | ---- | C] () -- C:\windows\tasks\RegCure Pro_sch_E828F404-A1E1-11E4-A29D-002622F60C76.job [2015/01/21 16:46:34 | 000,000,001 | ---- | C] () -- C:\Users\young\Documents\CryptoWall 2.0.html [2015/01/21 15:19:16 | 000,148,910 | ---- | C] () -- C:\windows\hpoins19.dat [2015/01/15 19:29:52 | 000,069,995 | ---- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\VT20150115.002 [2015/01/08 22:39:30 | 000,002,240 | ---- | C] () -- C:\Users\young\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2015/01/08 22:39:29 | 000,002,140 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2015/01/08 22:39:02 | 000,000,886 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job [2015/01/08 22:39:01 | 000,000,882 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job [2015/01/08 22:38:26 | 000,000,830 | ---- | C] () -- C:\windows\tasks\Adobe Flash Player Updater.job [2015/01/07 09:46:37 | 000,001,020 | ---- | C] () -- C:\Users\young\AppData\Roaming\wklnhst.dat [2015/01/01 15:59:48 | 001,715,072 | ---- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\Cat.DB [2015/01/01 15:59:36 | 000,008,186 | ---- | C] () -- C:\windows\System32\drivers\SYMEVENT.CAT [2015/01/01 15:59:36 | 000,000,806 | ---- | C] () -- C:\windows\System32\drivers\SYMEVENT.INF [2015/01/01 15:59:22 | 000,002,542 | ---- | C] () -- C:\Users\Public\Desktop\Norton Security with Backup.lnk [2015/01/01 15:57:58 | 000,042,291 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymVTcer.dat [2015/01/01 15:57:58 | 000,009,931 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymELAM.cat [2015/01/01 15:57:58 | 000,008,248 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymDS.cat [2015/01/01 15:57:58 | 000,008,186 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\ccSetx86.cat [2015/01/01 15:57:58 | 000,008,176 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymNet.cat [2015/01/01 15:57:58 | 000,008,174 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymEFA.cat [2015/01/01 15:57:58 | 000,008,172 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtspx.cat [2015/01/01 15:57:58 | 000,008,168 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtsp.cat [2015/01/01 15:57:58 | 000,008,168 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\iron.cat [2015/01/01 15:57:58 | 000,003,434 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymEFA.inf [2015/01/01 15:57:58 | 000,002,852 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymDS.inf [2015/01/01 15:57:58 | 000,001,442 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymNet.inf [2015/01/01 15:57:58 | 000,001,390 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtspx.inf [2015/01/01 15:57:58 | 000,001,389 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtsp.inf [2015/01/01 15:57:58 | 000,001,098 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\symELAM.inf [2015/01/01 15:57:58 | 000,000,828 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\ccSetx86.inf [2015/01/01 15:57:58 | 000,000,737 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\Iron.inf [2015/01/01 15:57:57 | 000,000,172 | ---- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\isolate.ini [2015/01/01 15:27:25 | 000,001,265 | ---- | C] () -- C:\Users\young\Desktop\Norton Installation Files.lnk [2014/11/25 16:24:03 | 000,000,000 | -H-- | C] () -- C:\windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf [2014/11/23 15:35:57 | 000,646,010 | ---- | C] () -- C:\Users\young\Documents\PostVirus-Spyware Status Report.mht [2014/11/23 15:35:57 | 000,218,976 | ---- | C] () -- C:\Users\young\Documents\Ovarian Cancer.pdf [2014/11/23 15:35:57 | 000,103,280 | ---- | C] () -- C:\Users\young\Documents\FTF_2014-03-31_1396298261486.pdf [2014/11/23 15:35:57 | 000,047,312 | ---- | C] () -- C:\Users\young\Documents\STF_2014-03-31_1396298312156.pdf [2014/11/23 15:35:57 | 000,000,438 | ---- | C] () -- C:\Users\young\Documents\Pictures - Shortcut.lnk [2014/11/23 15:25:26 | 000,001,827 | ---- | C] () -- C:\Users\young\Desktop\Microsoft Office - Shortcut.lnk [2014/11/23 15:25:25 | 000,000,172 | ---- | C] () -- C:\Users\young\Desktop\Genealogy, Family Trees and Family History Records online - Ancestry.com.url [2014/11/22 10:53:03 | 000,419,992 | ---- | C] () -- C:\windows\System32\locale.nls [2014/11/19 20:18:07 | 000,000,003 | ---- | C] () -- C:\windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf [2014/11/19 19:34:35 | 000,016,284 | ---- | C] () -- C:\windows\System32\ieuinit.inf [2014/11/19 18:50:24 | 000,000,003 | ---- | C] () -- C:\windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf [2014/11/19 10:01:11 | 000,146,852 | ---- | C] () -- C:\windows\System32\systemsf.ebd [2014/11/19 10:00:17 | 000,053,600 | ---- | C] () -- C:\windows\System32\dosx.exe [2014/11/19 10:00:15 | 000,010,429 | ---- | C] () -- C:\windows\System32\ScavengeSpace.xml [2014/11/19 10:00:08 | 000,105,559 | ---- | C] () -- C:\windows\System32\RacRules.xml [2014/11/17 19:59:21 | 000,079,592 | ---- | C] () -- C:\Users\young\AppData\Local\GDIPFONTCACHEV1.DAT [2014/11/17 19:58:23 | 000,001,428 | ---- | C] () -- C:\Users\young\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2014/11/17 19:57:26 | 000,000,017 | RHS- | C] () -- C:\windows\System32\drivers\fbd.sys [2014/11/17 19:56:17 | 001,310,720 | -HS- | C] () -- C:\Users\young\NTUSER.DAT [2014/11/17 19:56:17 | 000,524,288 | -HS- | C] () -- C:\Users\young\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms [2014/11/17 19:56:17 | 000,524,288 | -HS- | C] () -- C:\Users\young\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms [2014/11/17 19:56:17 | 000,065,536 | -HS- | C] () -- C:\Users\young\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf [2014/11/17 19:56:17 | 000,000,290 | ---- | C] () -- C:\Users\young\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk [2014/11/17 19:56:17 | 000,000,272 | ---- | C] () -- C:\Users\young\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk [2014/11/17 19:56:17 | 000,000,020 | -HS- | C] () -- C:\Users\young\ntuser.ini [2014/11/17 19:49:14 | 000,000,000 | ---- | C] () -- C:\windows\NDSTray.INI [2014/11/17 19:32:31 | 000,045,056 | ---- | C] () -- C:\windows\System32\HWS_Ctrl.dll [2014/11/17 19:30:30 | 000,000,000 | -H-- | C] () -- C:\windows\System32\drivers\Msft_Kernel_SynTP_01007.Wdf [2014/11/17 19:27:19 | 000,073,728 | ---- | C] () -- C:\windows\System32\RtNicProp32.dll [2014/11/17 19:26:03 | 000,000,520 | ---- | C] () -- C:\windows\System32\drivers\RTEQEX1.dat [2014/11/17 19:26:03 | 000,000,520 | ---- | C] () -- C:\windows\System32\drivers\RTEQEX0.dat [2014/11/17 19:21:43 | 000,219,120 | ---- | C] () -- C:\windows\System32\atiumdva.cap [2014/11/17 19:21:43 | 000,197,654 | ---- | C] () -- C:\windows\System32\atiicdxx.dat [2014/11/17 19:21:43 | 000,018,335 | ---- | C] () -- C:\windows\atiogl.xml [2014/11/17 19:04:34 | 000,002,557 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office PowerPoint Viewer 2007.lnk [2014/11/17 19:04:16 | 000,001,116 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works Task Launcher.lnk [2014/11/17 18:57:35 | 000,000,000 | ---- | C] () -- C:\windows\ativpsrm.bin [2014/11/17 18:56:07 | 1408,045,056 | -HS- | C] () -- C:\hiberfil.sys [color=#E56717]========== ZeroAccess Check ==========[/color] [2009/07/13 21:42:31 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2014/06/24 18:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 05:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/13 18:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2015/01/21 19:54:09 | 000,000,000 | ---D | M] -- C:\Users\young\AppData\Roaming\ParetoLogic [2015/01/07 09:46:45 | 000,000,000 | ---D | M] -- C:\Users\young\AppData\Roaming\Template [2014/11/17 19:57:03 | 000,000,000 | ---D | M] -- C:\Users\young\AppData\Roaming\WinBatch [color=#E56717]========== Purity Check ==========[/color] < End of report >