Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Windows 7 (64 bit) stuck in startup repair infinite loop [Solved]


  • This topic is locked This topic is locked

#1
KaizerZZ

KaizerZZ

    New Member

  • Member
  • Pip
  • 3 posts
My Hp Pavillion laptop has been working so good until Today Morning it asked me whether to enter Startup repair or Start Windows Normally and I chose Startup repair since it was recommended , problem is the startup repair keeps on restarting uselessly without reporting any errors and the system keeps on automatically entering Startup repair every time the Laptop boots with no result !!!!!Help Me Please !!
(Note: I don't want to re-install Windows since I don't want to lose my files !!!)


By the way ,Here is my FRST Scan log

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-09-2012 01
Ran by SYSTEM at 14-09-2012 15:16:26
Running from H:\
Windows 7 Home Premium (X64) OS Language: English(US)
The current controlset is ControlSet001

==================== Registry (Whitelisted) ===================

HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-13] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s [6486120 2011-05-01] (Realtek Semiconductor)
HKLM\...\Run: [RtkOSD] C:\Program Files (x86)\Realtek\Audio\OSD\RtVOsd64.exe [995840 2010-01-12] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" [172032 2010-04-10] (Sun Microsystems, Inc.)
HKLM\...\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe 120 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden [363064 2010-01-27] (Hewlett-Packard)
HKLM-x32\...\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume [288080 2009-07-17] (Microsoft Corporation)
HKLM-x32\...\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-12] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [641664 2012-04-05] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml [10752 2012-02-20] ()
HKLM-x32\...\Run: [Aimersoft Helper Compact.exe] C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [1666560 2012-02-20] (AimerSoft)
HKLM-x32\...\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [3524536 2012-08-07] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot [296096 2012-08-31] (RealNetworks, Inc.)
HKLM-x32\...\Run: [] [x]
HKLM-x32\...\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe" [1568976 2012-06-20] (Ask)
HKLM-x32\...\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [348664 2012-07-18] (Avira Operations GmbH & Co. KG)
HKU\Default\...\Run: [HPAdvisorDock] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe [1712184 2010-02-09] ()
HKU\Default User\...\Run: [HPAdvisorDock] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe [1712184 2010-02-09] ()
HKU\Guest\...\Run: [HPAdvisorDock] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe [1712184 2010-02-09] ()
HKU\Guest\...\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [2363392 2010-02-22] (Hewlett-Packard Company)
HKU\hp\...\Run: [Facebook Update] "C:\Users\hp\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver [138096 2012-08-18] (Facebook Inc.)
HKU\hp\...\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload [960440 2012-08-07] (Samsung)
HKU\hp\...\Run: [KiesAirMessage] C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKU\hp\...\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-08-07] ()
HKU\hp\...\Run: [] [x]
HKU\hp\...\Run: [DS3 Tool] C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe -mini [104768 2012-09-13] (www.motioninjoy.com)
HKU\hp\...\Run: [Greenshot] "C:\Program Files (x86)\Greenshot\Greenshot.exe" [548864 2010-07-11] ()
HKU\hp\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [3671904 2012-08-28] (DT Soft Ltd)
HKU\hp\...\Run: [Pokki] "C:\Users\hp\AppData\Local\Pokki\v0.260.0.535\pokki.exe" [3919704 2012-09-07] (Pokki)
HKU\hp\...\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot [3519936 2012-09-03] (Tonec Inc.)
HKU\hp\...\Run: [Akamai NetSession Interface] "C:\Users\hp\AppData\Local\Akamai\netsession_win.exe" [4440896 2012-08-10] (Akamai Technologies, Inc.)
HKU\hp\...\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe [59240 2012-02-23] (Apple Inc.)
HKU\hp\...\Run: [BlueStacks Agent] C:\Program Files (x86)\BlueStacks\HD-Agent.exe [573304 2012-08-21] (BlueStack Systems, Inc.)
HKU\hp\...\Policies\system: [DisableLockWorkstation] 0
HKU\hp\...\Policies\system: [DisableChangePassword] 0
HKU\hp\...\Policies\system: [LogonHoursAction] 2
HKU\hp\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\hp\...\Winlogon: [Shell] explorer.exe
Tcpip\Parameters: [DhcpNameServer] 194.165.130.38 196.27.0.27
AppInit_DLLs:
Startup: C:\Users\All Users\Start Menu\Programs\Startup\AlienwareDock.lnk
ShortcutTarget: AlienwareDock.lnk -> C:\Windows\Red Alienware Skin Pack\AlienwareDock\AlienwareDock.exe (No File)
Startup: C:\Users\All Users\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\All Users\Start Menu\Programs\Startup\EA_RESTART_001.lnk
ShortcutTarget: EA_RESTART_001.lnk -> (No File)
Startup: C:\Users\All Users\Start Menu\Programs\Startup\Gdi++.lnk
ShortcutTarget: Gdi++.lnk -> C:\Program Files (x86)\Ubuntu Skin Pack\Gdi++\GDITRAY.EXE (No File)
Startup: C:\Users\All Users\Start Menu\Programs\Startup\LOLRecorder.lnk
ShortcutTarget: LOLRecorder.lnk -> C:\Program Files (x86)\LOLReplay\LOLRecorder.exe (LOL Replay)
Startup: C:\Users\All Users\Start Menu\Programs\Startup\Nimi Visuals.lnk
ShortcutTarget: Nimi Visuals.lnk -> C:\Program Files (x86)\Ubuntu Skin Pack\Nimi Visuals\Nimi Visuals.exe (No File)
Startup: C:\Users\All Users\Start Menu\Programs\Startup\Refresh.lnk
ShortcutTarget: Refresh.lnk -> C:\Windows\Neon Skin Pack\Tools\Refresh.cmd (No File)
Startup: C:\Users\All Users\Start Menu\Programs\Startup\RocketDock.lnk
ShortcutTarget: RocketDock.lnk -> C:\Program Files (x86)\Gaia Skin Pack\RocketDock\RocketDock.exe ()
Startup: C:\Users\All Users\Start Menu\Programs\Startup\SkinPackMenu.lnk
ShortcutTarget: SkinPackMenu.lnk -> C:\Program Files (x86)\Gaia Skin Pack\SP.exe (skin pack)
Startup: C:\Users\All Users\Start Menu\Programs\Startup\SmartFlip.lnk
ShortcutTarget: SmartFlip.lnk -> C:\Program Files (x86)\Ubuntu Skin Pack\SmartFlip\SmartFlip.exe (No File)
Startup: C:\Users\All Users\Start Menu\Programs\Startup\UberIcon.lnk
ShortcutTarget: UberIcon.lnk -> C:\Windows\Neon Skin Pack\UberIcon\UberIcon.exe (No File)
Startup: C:\Users\All Users\Start Menu\Programs\Startup\xwidget.lnk
ShortcutTarget: xwidget.lnk -> C:\Program Files (x86)\iOS Skin Pack\Xwidget\xwidget.exe (No File)
Startup: C:\Users\All Users\Start Menu\Programs\Startup\Yodm3D.lnk
ShortcutTarget: Yodm3D.lnk -> C:\Program Files (x86)\Ubuntu Skin Pack\Yodm3D\Yodm3D.exe (No File)
Startup: C:\Users\All Users\Start Menu\Programs\Startup\YzShadow.lnk
ShortcutTarget: YzShadow.lnk -> C:\Windows\Neon Skin Pack\YzShadow\YzShadow.exe (No File)
Startup: C:\Users\hp\Start Menu\Programs\Startup\Alienware Dock.lnk
ShortcutTarget: Alienware Dock.lnk -> C:\Windows\Red Alienware Skin Pack\AlienwareDock\AlienwareDock.exe (No File)

==================== Services ====================

2 AntiVirSchedulerService; "C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe" [86224 2012-07-18] (Avira Operations GmbH & Co. KG)
2 AntiVirService; "C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe" [110032 2012-07-18] (Avira Operations GmbH & Co. KG)
2 AntiVirWebService; "C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE" [465360 2012-07-18] (Avira Operations GmbH & Co. KG)
2 BstHdAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android [397176 2012-08-21] (BlueStack Systems, Inc.)
2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384888 2012-08-21] (BlueStack Systems, Inc.)
2 HPWMISVC; C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [20480 2010-01-18] ()
2 HssWd; C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe -product HSS [329544 2011-05-24] ()
2 KMService; C:\Windows\SysWow64\srvany.exe [8192 2012-06-15] ()
2 SentinelKeysServer; "C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe" [369952 2009-09-16] (SafeNet, Inc.)
2 SentinelProtectionServer; "C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe" [1246496 2009-09-16] (SafeNet, Inc)
2 SentinelSecurityRuntime; "C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe" [292128 2009-09-16] (SafeNet, Inc.)
2 Akamai; C:\program files (x86)\common files\akamai/netsession_win_4f7fccd.dll [x]
3 rpcapd; "C:\Program Files (x86)\WinPcap\rpcapd.exe" -d -f "C:\Program Files (x86)\WinPcap\rpcapd.ini" [x]

==================== Drivers =================================

2 avgntflt; C:\Windows\System32\Drivers\avgntflt.sys [98848 2012-07-18] (Avira GmbH)
1 avipbb; C:\Windows\System32\Drivers\avipbb.sys [132832 2012-07-18] (Avira GmbH)
1 avkmgr; C:\Windows\System32\Drivers\avkmgr.sys [27760 2012-07-18] (Avira GmbH)
2 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [74616 2012-08-21] (BlueStack Systems)
1 dtsoftbus01; C:\Windows\System32\Drivers\dtsoftbus01.sys [283200 2012-09-02] (DT Soft Ltd)
3 hamachi; C:\Windows\System32\Drivers\hamachi.sys [33856 2009-03-18] (LogMeIn, Inc.)
2 NPF; C:\Windows\System32\Drivers\NPF.sys [35344 2010-06-25] (CACE Technologies, Inc.)
2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-16] (SafeNet, Inc.)
3 dump_wmimmc; \??\C:\Program Files (x86)\Game Power 7\Rappelz Middle East\GameGuard\dump_wmimmc.sys [x]
3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [x]
3 hwdatacard; C:\Windows\System32\DRIVERS\ewusbmdm.sys [x]
3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [x]
3 NPPTNT2; \??\C:\Windows\system32\npptNT2.sys [x]
2 srservice; [x]
3 SysInfo; \??\C:\Windows\system32\drivers\SysInfo.sys [x]
3 vserial; C:\Windows\System32\DRIVERS\vserial.sys [x]
2 wuaserv; [x]
3 X6va005; \??\C:\Users\hp\AppData\Local\Temp\005A499.tmp [x]
3 X6va008; \??\C:\Users\hp\AppData\Local\Temp\008B37.tmp [x]

==================== NetSvcs (Whitelisted) =================


==================== One Month Created Files and Folders ======================

2012-09-14 14:56 - 2012-09-14 14:56 - 00000000 ____D C:\FRST
2012-09-14 13:50 - 2012-09-14 13:50 - 00047057 ____A C:\Windows\System32\config\mybackup
2012-09-14 13:49 - 2012-09-14 13:49 - 00000000 ____D C:\Windows\System32\config\backup
2012-09-14 12:01 - 2012-09-14 13:22 - 00000000 ___AD C:\.Trash-0
2012-09-13 19:42 - 2012-09-13 19:42 - 00733525 ____A C:\Users\hp\Desktop\DIAG.LOG
2012-09-13 13:18 - 2012-09-14 19:18 - 00000000 ____D C:\Windows\LastGood
2012-09-13 00:48 - 2012-09-13 00:48 - 00000000 ____D C:\Users\hp\AppData\Local\Skyrim
2012-09-13 00:22 - 2008-10-14 19:22 - 05631312 ____A (Microsoft Corporation) C:\Windows\System32\D3DX9_40.dll
2012-09-13 00:22 - 2008-10-14 19:22 - 04379984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2012-09-13 00:22 - 2008-10-14 19:22 - 02605920 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_40.dll
2012-09-13 00:22 - 2008-10-14 19:22 - 02036576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2012-09-13 00:22 - 2008-10-14 19:22 - 00519000 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_40.dll
2012-09-13 00:22 - 2008-10-14 19:22 - 00452440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2012-09-13 00:21 - 2012-09-13 19:35 - 00017876 ____A C:\Windows\DirectX.log
2012-09-13 00:13 - 2012-09-13 00:48 - 00000000 ____D C:\Program Files (x86)\The Elder Scrolls V Skyrim
2012-09-12 16:24 - 2012-08-22 10:12 - 01913200 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2012-09-12 16:24 - 2012-08-22 10:12 - 00950128 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ndis.sys
2012-09-12 16:24 - 2012-08-22 10:12 - 00376688 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys
2012-09-12 16:24 - 2012-08-22 10:12 - 00288624 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2012-09-12 16:24 - 2012-08-02 09:58 - 00574464 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2012-09-12 16:24 - 2012-08-02 08:57 - 00490496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2012-09-12 16:24 - 2012-07-04 12:26 - 00041472 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\RNDISMP.sys
2012-09-12 15:55 - 2012-09-12 15:55 - 00000000 ____D C:\Users\hp\AppData\Roaming\Rovio
2012-09-12 15:55 - 2012-09-12 15:55 - 00000000 ____D C:\Users\hp\AppData\Roaming\Mozilla
2012-09-12 15:55 - 2012-09-12 15:55 - 00000000 ____D C:\Program Files (x86)\Rovio
2012-09-12 03:48 - 2012-09-11 01:10 - 27212396 ____A C:\Users\hp\Desktop\ExtAudio.wav
2012-09-12 01:32 - 2012-09-12 01:32 - 00002948 ____A C:\Windows\SysWOW64\jupdate-1.6.0_35-b10.log
2012-09-12 01:32 - 2012-08-28 09:10 - 00157680 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaws.exe
2012-09-12 01:32 - 2012-08-28 09:10 - 00149488 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaw.exe
2012-09-12 01:32 - 2012-08-28 09:09 - 00149488 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\java.exe
2012-09-11 15:24 - 2012-09-11 15:24 - 00000000 ____D C:\Program Files (x86)\Gaia Skin Pack
2012-09-11 11:47 - 2012-09-11 11:47 - 01178247 ____A C:\Users\hp\Desktop\08.Ya_Dale_Ya_Rohi.rm
2012-09-11 11:26 - 2012-06-28 19:48 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2012-09-11 11:26 - 2011-12-29 22:26 - 00515584 ____A (Microsoft Corporation) C:\Windows\System32\timedate.cpl
2012-09-11 11:26 - 2010-11-20 05:25 - 00242688 ____A (Microsoft Corporation) C:\Windows\System32\recdisc.exe
2012-09-11 11:26 - 2010-11-20 05:25 - 00241152 ____A (Microsoft Corporation) C:\Windows\System32\rstrui.exe
2012-09-11 11:26 - 2010-11-20 05:24 - 00850944 ____A (Microsoft Corporation) C:\Windows\System32\mmsys.cpl
2012-09-11 11:26 - 2010-11-20 05:24 - 00497664 ____A (Microsoft Corporation) C:\Windows\System32\main.cpl
2012-09-11 11:26 - 2010-11-20 05:24 - 00373248 ____A (Microsoft Corporation) C:\Windows\System32\intl.cpl
2012-09-11 11:26 - 2009-07-13 17:39 - 04808704 ____A (Microsoft Corporation) C:\Windows\System32\xpsrchvw.exe
2012-09-11 11:26 - 2009-07-13 17:39 - 00395776 ____A (Microsoft Corporation) C:\Windows\System32\StikyNot.exe
2012-09-11 11:26 - 2009-07-13 17:39 - 00394752 ____A (Microsoft Corporation) C:\Windows\System32\SnippingTool.exe
2012-09-11 11:26 - 2009-07-13 17:39 - 00160768 ____A (Microsoft Corporation) C:\Windows\System32\SoundRecorder.exe
2012-09-11 11:26 - 2009-07-13 17:38 - 00108032 ____A (Microsoft Corporation) C:\Windows\System32\telephon.cpl
2012-09-11 11:25 - 2010-11-20 05:44 - 01040384 ____A (Microsoft Corporation) C:\Windows\System32\Narrator.exe
2012-09-11 11:25 - 2010-11-20 05:25 - 01190400 ____A (Microsoft Corporation) C:\Windows\System32\mstsc.exe
2012-09-11 11:25 - 2009-07-13 17:39 - 00638976 ____A (Microsoft Corporation) C:\Windows\System32\msra.exe
2012-09-11 11:25 - 2009-07-13 17:39 - 00515584 ____A (Microsoft Corporation) C:\Windows\System32\osk.exe
2012-09-11 11:25 - 2009-07-13 17:39 - 00194048 ____A (Microsoft Corporation) C:\Windows\System32\notepad.exe
2012-09-11 11:17 - 2012-06-02 14:15 - 02622464 ____A (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2012-09-11 11:17 - 2012-01-04 02:44 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2012-09-11 11:17 - 2011-02-24 22:19 - 03113984 ____A (Microsoft Corporation) C:\Windows\explorer.exe
2012-09-11 11:17 - 2010-11-20 05:27 - 02262528 ____A (Microsoft Corporation) C:\Windows\System32\SyncCenter.dll
2012-09-11 11:17 - 2010-11-20 05:27 - 02250752 ____A (Microsoft Corporation) C:\Windows\System32\SensorsCpl.dll
2012-09-11 11:17 - 2010-11-20 05:27 - 02193920 ____A (Microsoft Corporation) C:\Windows\System32\themecpl.dll
2012-09-11 11:17 - 2010-11-20 05:27 - 01363968 ____A (Microsoft Corporation) C:\Windows\System32\wdc.dll
2012-09-11 11:17 - 2010-11-20 05:27 - 01098240 ____A (Microsoft Corporation) C:\Windows\System32\Vault.dll
2012-09-11 11:17 - 2010-11-20 05:27 - 00898560 ____A (Microsoft Corporation) C:\Windows\System32\OobeFldr.dll
2012-09-11 11:17 - 2010-11-20 05:27 - 00812032 ____A (Microsoft Corporation) C:\Windows\System32\wpccpl.dll
2012-09-11 11:17 - 2010-11-20 05:27 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\sdcpl.dll
2012-09-11 11:17 - 2010-11-20 05:27 - 00750080 ____A (Microsoft Corporation) C:\Windows\System32\TSWorkspace.dll
2012-09-11 11:17 - 2010-11-20 05:27 - 00658432 ____A (Microsoft Corporation) C:\Windows\System32\PerfCenterCPL.dll
2012-09-11 11:17 - 2010-11-20 05:27 - 00625664 ____A (Microsoft Corporation) C:\Windows\System32\usercpl.dll
2012-09-11 11:17 - 2010-11-20 05:27 - 00486400 ____A (Microsoft Corporation) C:\Windows\System32\powercpl.dll
2012-09-11 11:17 - 2010-11-20 05:27 - 00340992 ____A (Microsoft Corporation) C:\Windows\System32\srchadmin.dll
2012-09-11 11:17 - 2010-11-20 05:27 - 00243712 ____A (Microsoft Corporation) C:\Windows\System32\taskbarcpl.dll
2012-09-11 11:17 - 2010-11-20 05:25 - 00580608 ____A (Microsoft Corporation) C:\Windows\System32\taskmgr.exe
2012-09-11 11:17 - 2010-11-20 05:25 - 00244736 ____A (Microsoft Corporation) C:\Windows\System32\SndVol.exe
2012-09-11 11:17 - 2010-11-20 05:24 - 01063936 ____A (Microsoft Corporation) C:\Windows\System32\mblctr.exe
2012-09-11 11:17 - 2010-11-20 05:24 - 00436224 ____A (Microsoft Corporation) C:\Windows\System32\dfrgui.exe
2012-09-11 11:17 - 2010-11-20 05:24 - 00353792 ____A (Microsoft Corporation) C:\Windows\System32\msinfo32.exe
2012-09-11 11:17 - 2010-11-20 05:24 - 00315392 ____A (Microsoft Corporation) C:\Windows\System32\eudcedit.exe
2012-09-11 11:17 - 2010-11-20 05:24 - 00258048 ____A (Microsoft Corporation) C:\Windows\System32\msconfig.exe
2012-09-11 11:17 - 2010-11-20 05:24 - 00127488 ____A (Microsoft Corporation) C:\Windows\System32\MdSched.exe
2012-09-11 11:17 - 2010-11-20 05:24 - 00088064 ____A (Microsoft Corporation) C:\Windows\System32\mobsync.exe
2012-09-11 11:17 - 2010-11-20 05:16 - 12510720 ____A (Microsoft Corporation) C:\Windows\System32\wmploc.DLL
2012-09-11 11:17 - 2009-07-13 17:41 - 01495552 ____A (Microsoft Corporation) C:\Windows\System32\wsecedit.dll
2012-09-11 11:17 - 2009-07-13 17:39 - 06651904 ____A (Microsoft Corporation) C:\Windows\System32\mspaint.exe
2012-09-11 11:17 - 2009-07-13 17:39 - 00637952 ____A (Microsoft Corporation) C:\Windows\System32\Magnify.exe
2012-09-11 11:17 - 2009-07-13 17:39 - 00516608 ____A (Microsoft Corporation) C:\Windows\System32\DisplaySwitch.exe
2012-09-11 11:17 - 2009-07-13 17:39 - 00061952 ____A (Microsoft Corporation) C:\Windows\System32\colorcpl.exe
2012-09-11 11:17 - 2009-07-13 17:39 - 00059392 ____A (Microsoft Corporation) C:\Windows\System32\control.exe
2012-09-11 11:17 - 2009-07-13 17:38 - 00891392 ____A (Microsoft Corporation) C:\Windows\System32\calc.exe
2012-09-11 11:17 - 2009-07-13 17:38 - 00364544 ____A (Microsoft Corporation) C:\Windows\System32\charmap.exe
2012-09-11 11:17 - 2009-07-13 17:38 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\cleanmgr.exe
2012-09-11 11:17 - 2009-07-13 17:33 - 00669184 ____A (Microsoft Corporation) C:\Windows\System32\WFSR.dll
2012-09-11 11:16 - 2012-06-28 20:09 - 10925568 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2012-09-11 11:16 - 2010-11-20 05:27 - 02652160 ____A (Microsoft Corporation) C:\Windows\System32\netshell.dll
2012-09-11 11:16 - 2010-11-20 05:27 - 01689600 ____A (Microsoft Corporation) C:\Windows\System32\netcenter.dll
2012-09-11 11:16 - 2010-11-20 05:27 - 01672704 ____A (Microsoft Corporation) C:\Windows\System32\networkexplorer.dll
2012-09-11 11:16 - 2010-11-20 05:27 - 01037824 ____A (Microsoft Corporation) C:\Windows\System32\pnidui.dll
2012-09-11 11:16 - 2010-11-20 05:27 - 00243200 ____A (Microsoft Corporation) C:\Windows\System32\stobject.dll
2012-09-11 11:16 - 2010-11-20 05:27 - 00201216 ____A (Microsoft Corporation) C:\Windows\System32\SndVolSSO.dll
2012-09-11 11:16 - 2010-11-20 05:27 - 00143360 ____A (Microsoft Corporation) C:\Windows\System32\mydocs.dll
2012-09-11 11:16 - 2010-11-20 05:26 - 02746880 ____A (Microsoft Corporation) C:\Windows\System32\gameux.dll
2012-09-11 11:16 - 2010-11-20 05:26 - 02046976 ____A (Microsoft Corporation) C:\Windows\System32\ExplorerFrame.dll
2012-09-11 11:16 - 2010-11-20 05:26 - 01202176 ____A (Microsoft Corporation) C:\Windows\System32\DiagCpl.dll
2012-09-11 11:16 - 2010-11-20 05:26 - 01066496 ____A (Microsoft Corporation) C:\Windows\System32\Display.dll
2012-09-11 11:16 - 2010-11-20 05:26 - 00934912 ____A (Microsoft Corporation) C:\Windows\System32\FirewallControlPanel.dll
2012-09-11 11:16 - 2010-11-20 05:26 - 00861184 ____A (Microsoft Corporation) C:\Windows\System32\fontext.dll
2012-09-11 11:16 - 2010-11-20 05:26 - 00508928 ____A (Microsoft Corporation) C:\Windows\System32\DeviceCenter.dll
2012-09-11 11:16 - 2010-11-20 05:25 - 03745792 ____A (Microsoft Corporation) C:\Windows\System32\accessibilitycpl.dll
2012-09-11 11:16 - 2010-11-20 05:25 - 01927168 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2012-09-11 11:16 - 2010-11-20 05:25 - 00749568 ____A (Microsoft Corporation) C:\Windows\System32\batmeter.dll
2012-09-11 11:16 - 2010-11-20 05:25 - 00695808 ____A (Microsoft Corporation) C:\Windows\System32\ActionCenter.dll
2012-09-11 11:16 - 2010-11-20 05:25 - 00549888 ____A (Microsoft Corporation) C:\Windows\System32\ActionCenterCPL.dll
2012-09-11 11:16 - 2010-11-20 05:25 - 00155136 ____A (Microsoft Corporation) C:\Windows\System32\autoplay.dll
2012-09-11 11:16 - 2010-11-20 05:25 - 00014336 ____A (Microsoft Corporation) C:\Windows\System32\browseui.dll
2012-09-11 11:16 - 2009-07-13 17:41 - 00368128 ____A (Microsoft Corporation) C:\Windows\System32\pnpui.dll
2012-09-11 11:16 - 2009-07-13 17:41 - 00272384 ____A (Microsoft Corporation) C:\Windows\System32\mycomput.dll
2012-09-11 11:16 - 2009-07-13 17:41 - 00234496 ____A (Microsoft Corporation) C:\Windows\System32\iscsicpl.dll
2012-09-11 11:16 - 2009-07-13 17:41 - 00182272 ____A (Microsoft Corporation) C:\Windows\System32\miguiresource.dll
2012-09-11 11:16 - 2009-07-13 17:41 - 00064512 ____A (Microsoft Corporation) C:\Windows\System32\hotplug.dll
2012-09-11 11:16 - 2009-07-13 17:40 - 06281216 ____A (Microsoft Corporation) C:\Windows\System32\DDORes.dll
2012-09-11 11:16 - 2009-07-13 17:40 - 00582656 ____A (Microsoft Corporation) C:\Windows\System32\filemgmt.dll
2012-09-11 11:16 - 2009-07-13 17:40 - 00528896 ____A (Microsoft Corporation) C:\Windows\System32\devmgr.dll
2012-09-11 11:16 - 2009-07-13 17:40 - 00304128 ____A (Microsoft Corporation) C:\Windows\System32\AuthFWGP.dll
2012-09-11 11:16 - 2009-07-13 17:31 - 00229376 ____A (Microsoft Corporation) C:\Windows\System32\odbcint.dll
2012-09-11 11:16 - 2009-07-13 17:29 - 09053696 ____A (Microsoft Corporation) C:\Windows\System32\mmres.dll
2012-09-11 11:16 - 2009-07-13 17:28 - 66314240 ____A (Microsoft Corporation) C:\Windows\System32\imageres.dll
2012-09-11 11:16 - 2009-07-13 17:28 - 00832000 ____A (Microsoft Corporation) C:\Windows\System32\imagesp1.dll
2012-09-11 11:16 - 2009-07-13 17:26 - 01297408 ____A (Microsoft Corporation) C:\Windows\System32\comres.dll
2012-09-10 22:40 - 2012-09-10 22:40 - 00000000 ____D C:\Users\All Users\SonicStage
2012-09-10 21:55 - 2007-01-12 21:25 - 00532480 ____A () C:\Windows\SysWOW64\CddbPlaylist2Sony.dll
2012-09-10 21:55 - 2007-01-12 21:24 - 00770048 ____A (Gracenote) C:\Windows\SysWOW64\CDDBUISony.dll
2012-09-10 21:55 - 2007-01-12 21:24 - 00073728 ____A (Gracenote) C:\Windows\SysWOW64\CddbLinkSony.dll
2012-09-10 21:55 - 2007-01-12 21:22 - 00655360 ____A (Gracenote, Inc.) C:\Windows\SysWOW64\CDDBControlSony.dll
2012-09-10 21:55 - 2007-01-12 21:22 - 00589824 ____A (Gracenote) C:\Windows\SysWOW64\CddbMusicIDSony.dll
2012-09-10 21:55 - 2006-10-28 14:00 - 00116472 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxcpyi64.exe
2012-09-10 21:55 - 2006-10-28 14:00 - 00064760 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxcpya64.exe
2012-09-10 21:55 - 2006-10-18 05:30 - 01329912 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxsfs.dll
2012-09-10 21:55 - 2006-10-18 05:30 - 00527096 ____N (Sonic Solutions) C:\Windows\SysWOW64\px.dll
2012-09-10 21:55 - 2006-10-18 05:30 - 00379640 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxwave.dll
2012-09-10 21:55 - 2006-10-18 05:30 - 00183032 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxmas.dll
2012-09-10 21:55 - 2006-10-18 05:30 - 00129784 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxafs.dll
2012-09-10 21:55 - 2006-10-17 15:00 - 00118520 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxinsi64.exe
2012-09-10 21:55 - 2006-10-17 15:00 - 00072440 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxhpinst.exe
2012-09-10 21:55 - 2006-10-17 15:00 - 00064760 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxinsa64.exe
2012-09-10 21:55 - 2006-10-17 15:00 - 00052760 ____N (Sonic Solutions) C:\Windows\System32\Drivers\PxHlpa64.sys
2012-09-10 21:55 - 2006-10-17 15:00 - 00003584 ____N (Sonic Solutions) C:\Windows\System32\Drivers\cdralw2k.sys
2012-09-10 21:55 - 2006-10-17 15:00 - 00003584 ____N (Sonic Solutions) C:\Windows\System32\Drivers\cdr4_xp.sys
2012-09-10 21:55 - 2006-10-17 13:02 - 00498424 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxdrv.dll
2012-09-10 21:55 - 2006-10-09 13:00 - 00039672 ____N (Sonic Solutions) C:\Windows\SysWOW64\vxblock.dll
2012-09-10 21:54 - 2012-09-10 22:40 - 00000000 ____D C:\Users\All Users\Sony Corporation
2012-09-10 21:53 - 2012-09-10 21:54 - 00000000 ____D C:\Program Files (x86)\Sony
2012-09-10 21:53 - 2012-09-10 21:53 - 00000000 ____D C:\Windows\SysWOW64\Iosubsys
2012-09-10 15:51 - 2012-09-10 15:51 - 00000000 ____D C:\Users\All Users\Premium
2012-09-10 15:47 - 2012-09-14 19:18 - 00000000 ____D C:\Users\All Users\TheBflix
2012-09-10 15:47 - 2012-09-13 10:37 - 00000346 ___AH C:\Windows\Tasks\TheBflixUpdaterTask{BDE032AD-FC3F-4A7B-AD94-88B334F9FA6E}.job
2012-09-10 15:47 - 2012-09-10 15:47 - 00000000 ____D C:\Users\All Users\Coolyou
2012-09-10 15:45 - 2012-09-10 22:29 - 00000000 ____D C:\Users\All Users\InstallMate
2012-09-10 14:22 - 2012-09-10 22:37 - 00000000 ____D C:\Users\hp\AppData\Roaming\Apple Computer
2012-09-10 14:22 - 2009-05-18 02:17 - 00034152 ____A (GEAR Software Inc.) C:\Windows\System32\Drivers\GEARAspiWDM.sys
2012-09-10 14:22 - 2008-04-17 01:12 - 00126312 ____A (GEAR Software Inc.) C:\Windows\System32\GEARAspi64.dll
2012-09-10 14:22 - 2008-04-17 01:12 - 00107368 ____A (GEAR Software Inc.) C:\Windows\SysWOW64\GEARAspi.dll
2012-09-10 14:21 - 2012-09-10 14:22 - 00000000 ____D C:\Users\All Users\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2012-09-10 14:21 - 2012-09-10 14:22 - 00000000 ____D C:\Program Files\iTunes
2012-09-10 14:21 - 2012-09-10 14:22 - 00000000 ____D C:\Program Files (x86)\iTunes
2012-09-10 14:21 - 2012-09-10 14:21 - 00000000 ____D C:\Program Files\iPod
2012-09-10 14:15 - 2012-09-10 14:21 - 00000000 ____D C:\Users\All Users\Apple Computer
2012-09-10 14:15 - 2012-09-10 14:15 - 00000000 ____D C:\Program Files (x86)\QuickTime
2012-09-10 14:12 - 2012-09-10 14:20 - 00000000 ____D C:\Program Files\Common Files\Apple
2012-09-10 14:11 - 2012-09-10 14:11 - 00000000 ____D C:\Program Files\Bonjour
2012-09-10 14:11 - 2012-09-10 14:11 - 00000000 ____D C:\Program Files (x86)\Bonjour
2012-09-09 16:51 - 2012-09-09 16:51 - 00000000 ____D C:\Users\hp\Documents\SavedGames
2012-09-09 16:51 - 2012-09-09 16:51 - 00000000 ____D C:\Users\hp\Documents\Kodu
2012-09-09 16:51 - 2012-09-09 16:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Research
2012-09-09 16:51 - 2012-09-09 16:51 - 00000000 ____D C:\Content
2012-09-09 16:50 - 2012-09-09 16:50 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA
2012-09-09 16:24 - 2012-09-09 16:24 - 00000000 ____D C:\Users\All Users\.mono
2012-09-09 16:23 - 2012-09-09 16:23 - 00000000 ____D C:\Users\hp\AppData\Roaming\.mono
2012-09-09 16:21 - 2012-09-09 16:21 - 00000000 ____D C:\Users\hp\AppData\Roaming\Pokémon Trading Card Game Online
2012-09-09 14:29 - 2012-09-09 14:29 - 00000899 ____A C:\Users\hp\.recently-used.xbel
2012-09-08 10:59 - 2012-09-08 10:59 - 00000000 ____D C:\Users\hp\AppData\Local\{738D42D0-ED75-4039-BF45-BEEDF313A80A}
2012-09-08 03:25 - 2012-09-11 08:17 - 00000000 ____D C:\Users\hp\Documents\BattleForge
2012-09-08 03:05 - 2012-09-09 00:40 - 1311861891 ___AH C:\Users\hp\Desktop\120626_LocoSetup_Live.exe.part
2012-09-07 21:38 - 2012-09-07 21:38 - 00008224 ____A C:\Windows\System32\GDIPFONTCACHEV1.DAT
2012-09-07 11:50 - 2012-09-14 19:18 - 00000000 ____D C:\Users\hp\AppData\Roaming\Azureus
2012-09-07 11:50 - 2012-09-07 11:50 - 00000000 ____D C:\Users\hp\.swt
2012-09-07 11:49 - 2012-09-07 11:50 - 00000000 ____D C:\Program Files (x86)\Vuze
2012-09-07 10:38 - 2012-09-12 10:06 - 00000000 ____D C:\Users\hp\Desktop\jpcsp-windows-amd64
2012-09-07 10:00 - 2012-09-10 05:19 - 00000000 ___AD C:\Program Files (x86)\MicroVolts
2012-09-06 15:05 - 2012-09-06 15:05 - 00000000 ____D C:\Users\hp\AppData\Roaming\Need for Speed World
2012-09-05 04:43 - 2012-09-05 04:43 - 00000000 ____D C:\Users\hp\AppData\Local\{9EA47741-C567-4B0A-A61B-49A4CD0D17EC}
2012-09-05 04:11 - 2012-05-04 03:00 - 00366592 ____A (Microsoft Corporation) C:\Windows\System32\qdvd.dll
2012-09-05 04:11 - 2012-05-04 01:59 - 00514560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2012-09-04 09:48 - 2012-09-04 09:48 - 00000845 ____A C:\Users\Public\Desktop\osu!.lnk
2012-09-04 09:47 - 2012-09-10 16:09 - 00000000 ____D C:\Program Files (x86)\osu!
2012-09-04 09:46 - 2012-09-04 09:46 - 00000000 ____D C:\Users\hp\AppData\Roaming\Downloaded Installations
2012-09-03 14:30 - 2012-07-06 12:07 - 00552960 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\bthport.sys
2012-09-03 14:04 - 2012-06-28 20:55 - 17809920 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2012-09-03 14:04 - 2012-06-28 19:56 - 02312704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2012-09-03 14:04 - 2012-06-28 19:49 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2012-09-03 14:04 - 2012-06-28 19:49 - 01346048 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2012-09-03 14:04 - 2012-06-28 19:47 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2012-09-03 14:04 - 2012-06-28 19:45 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2012-09-03 14:04 - 2012-06-28 19:44 - 00816640 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2012-09-03 14:04 - 2012-06-28 19:43 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2012-09-03 14:04 - 2012-06-28 19:42 - 02144768 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2012-09-03 14:04 - 2012-06-28 19:40 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2012-09-03 14:04 - 2012-06-28 19:39 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2012-09-03 14:04 - 2012-06-28 19:35 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2012-09-03 14:04 - 2012-06-28 16:52 - 12317184 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2012-09-03 14:04 - 2012-06-28 16:27 - 09737728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2012-09-03 14:04 - 2012-06-28 16:16 - 01800704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2012-09-03 14:04 - 2012-06-28 16:09 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2012-09-03 14:04 - 2012-06-28 16:09 - 01103872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2012-09-03 14:04 - 2012-06-28 16:08 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2012-09-03 14:04 - 2012-06-28 16:07 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2012-09-03 14:04 - 2012-06-28 16:06 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2012-09-03 14:04 - 2012-06-28 16:04 - 00717824 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2012-09-03 14:04 - 2012-06-28 16:04 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2012-09-03 14:04 - 2012-06-28 16:01 - 01793024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2012-09-03 14:04 - 2012-06-28 16:01 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2012-09-03 14:04 - 2012-06-28 16:00 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2012-09-03 14:04 - 2012-06-28 15:57 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2012-09-03 13:57 - 2012-09-03 13:57 - 00000000 ____D C:\Users\hp\AppData\Roaming\Avira
2012-09-03 13:50 - 2012-09-03 13:51 - 00000000 ____D C:\Program Files (x86)\Ask.com
2012-09-03 13:50 - 2012-09-03 13:50 - 00000000 ____D C:\Users\hp\AppData\Local\APN
2012-09-03 13:49 - 2012-09-03 13:51 - 00000000 ____D C:\Users\All Users\Avira
2012-09-03 13:49 - 2012-09-03 13:49 - 00000000 ____D C:\Program Files (x86)\Avira
2012-09-03 13:49 - 2012-07-18 07:05 - 00132832 ____A (Avira GmbH) C:\Windows\System32\Drivers\avipbb.sys
2012-09-03 13:49 - 2012-07-18 07:05 - 00098848 ____A (Avira GmbH) C:\Windows\System32\Drivers\avgntflt.sys
2012-09-03 13:49 - 2012-07-18 07:05 - 00027760 ____A (Avira GmbH) C:\Windows\System32\Drivers\avkmgr.sys
2012-09-03 13:44 - 2012-07-04 14:16 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\netapi32.dll
2012-09-03 13:44 - 2012-07-04 14:13 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\browser.dll
2012-09-03 13:44 - 2012-07-04 14:13 - 00059392 ____A (Microsoft Corporation) C:\Windows\System32\browcli.dll
2012-09-03 13:44 - 2012-07-04 13:16 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2012-09-03 13:44 - 2012-07-04 13:14 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2012-09-03 13:44 - 2012-06-08 20:41 - 12873728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2012-09-03 13:44 - 2012-06-01 21:50 - 00458704 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys
2012-09-03 13:44 - 2012-06-01 21:48 - 00151920 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2012-09-03 13:44 - 2012-06-01 21:48 - 00095600 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2012-09-03 13:44 - 2012-06-01 21:45 - 00340992 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll
2012-09-03 13:44 - 2012-06-01 21:44 - 00307200 ____A (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2012-09-03 13:44 - 2012-06-01 20:40 - 00225280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2012-09-03 13:44 - 2012-06-01 20:40 - 00022016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2012-09-03 13:44 - 2012-06-01 20:39 - 00219136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2012-09-03 13:44 - 2012-06-01 20:34 - 00096768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2012-09-03 13:44 - 2012-02-10 22:43 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2012-09-03 13:44 - 2012-02-10 22:36 - 00559104 ____A (Microsoft Corporation) C:\Windows\System32\spoolsv.exe
2012-09-03 13:44 - 2012-02-10 22:36 - 00067072 ____A (Microsoft Corporation) C:\Windows\splwow64.exe
2012-09-03 13:44 - 2012-02-10 21:43 - 00492032 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2012-09-03 13:43 - 2012-05-04 03:06 - 05559664 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2012-09-03 13:43 - 2012-05-04 02:03 - 03968368 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2012-09-03 13:43 - 2012-05-04 02:03 - 03913072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2012-09-03 13:43 - 2012-04-23 21:37 - 01462272 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2012-09-03 13:43 - 2012-04-23 21:37 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2012-09-03 13:43 - 2012-04-23 21:37 - 00140288 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2012-09-03 13:43 - 2012-04-23 20:36 - 01158656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2012-09-03 13:43 - 2012-04-23 20:36 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2012-09-03 13:43 - 2012-04-23 20:36 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2012-09-03 13:42 - 2012-07-18 10:15 - 03148800 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2012-09-03 13:42 - 2012-06-05 22:06 - 02004480 ____A (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2012-09-03 13:42 - 2012-06-05 22:06 - 01881600 ____A (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2012-09-03 13:42 - 2012-06-05 21:05 - 01390080 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2012-09-03 13:42 - 2012-06-05 21:05 - 01236992 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2012-09-03 13:42 - 2012-05-05 00:36 - 00503808 ____A (Microsoft Corporation) C:\Windows\System32\srcore.dll
2012-09-03 13:42 - 2012-05-04 23:46 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2012-09-03 13:42 - 2012-04-30 21:40 - 00209920 ____A (Microsoft Corporation) C:\Windows\System32\profsvc.dll
2012-09-03 13:42 - 2012-04-27 19:55 - 00210944 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2012-09-03 13:42 - 2012-04-25 21:41 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll
2012-09-03 13:42 - 2012-04-25 21:41 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\rdpwsx.dll
2012-09-03 13:42 - 2012-04-25 21:34 - 00009216 ____A (Microsoft Corporation) C:\Windows\System32\rdrmemptylst.exe
2012-09-03 13:42 - 2012-04-07 04:31 - 03216384 ____A (Microsoft Corporation) C:\Windows\System32\msi.dll
2012-09-03 13:42 - 2012-04-07 03:26 - 02342400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2012-09-03 13:42 - 2012-03-16 23:58 - 00075120 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\partmgr.sys
2012-09-03 13:42 - 2012-03-02 22:35 - 01544704 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2012-09-03 13:42 - 2012-03-02 21:31 - 01077248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2012-09-03 13:42 - 2010-06-25 19:55 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\msxml3r.dll
2012-09-03 13:42 - 2010-06-25 19:24 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2012-09-03 13:37 - 2012-06-05 22:02 - 01133568 ____A (Microsoft Corporation) C:\Windows\System32\cdosys.dll
2012-09-03 13:37 - 2012-06-05 21:03 - 00805376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2012-09-03 13:37 - 2012-05-13 21:26 - 00956928 ____A (Microsoft Corporation) C:\Windows\System32\localspl.dll
2012-09-03 13:23 - 2012-09-11 01:52 - 00000000 ____D C:\Users\hp\Desktop\Japanese
2012-09-03 13:21 - 2012-09-06 03:06 - 00000000 ____D C:\Users\hp\Mobile & Android
2012-09-03 12:52 - 2012-09-03 12:52 - 00019696 ____A C:\Users\hp\Desktop\Faculty of Science and Information Technology.htm
2012-09-03 12:52 - 2012-09-03 12:52 - 00000000 ____D C:\Users\hp\Desktop\Faculty of Science and Information Technology_files
2012-09-03 12:01 - 2012-09-04 06:42 - 00000000 ____D C:\Program Files (x86)\Luxor Quest For The Afterlife
2012-09-03 12:01 - 2012-09-03 12:01 - 00000000 ____D C:\Users\All Users\MumboJumbo
2012-09-03 06:11 - 2012-09-06 02:17 - 00000000 ____D C:\Users\hp\AppData\Local\Skymonk2
2012-09-03 05:07 - 2010-11-20 05:32 - 03899392 ____A (Microsoft Corporation) C:\Windows\System32\bootrs2~1.dll
2012-09-03 05:07 - 2010-11-20 05:32 - 00140288 ____A (Microsoft Corporation) C:\Windows\System32\bootrs2.dll
2012-09-03 02:51 - 2012-09-03 02:51 - 00000000 ____D C:\Users\Public\Documents\DAEMON Tools Images
2012-09-03 02:30 - 2012-09-03 02:30 - 00000000 ____D C:\Users\All Users\JAGUAR
2012-09-02 16:13 - 2012-09-03 03:45 - 00000000 ____D C:\Users\All Users\Electronic Arts
2012-09-02 16:13 - 2012-09-02 16:13 - 00000000 ____D C:\Users\All Users\EA Core
2012-09-02 15:13 - 2012-09-13 13:00 - 00000000 ____D C:\Users\hp\AppData\Local\Pokki
2012-09-02 15:10 - 2012-09-06 20:53 - 00000000 ____D C:\Users\hp\AppData\Roaming\DAEMON Tools Lite
2012-09-02 15:10 - 2012-09-06 20:38 - 00000000 ____D C:\Users\All Users\DAEMON Tools Lite
2012-09-02 15:10 - 2012-09-02 15:10 - 00283200 ____A (DT Soft Ltd) C:\Windows\System32\Drivers\dtsoftbus01.sys
2012-09-02 15:10 - 2012-09-02 15:10 - 00000000 ____D C:\Users\hp\AppData\Roaming\OpenCandy
2012-09-02 15:10 - 2012-09-02 15:10 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
2012-09-02 06:52 - 2012-09-02 06:52 - 00017920 ____A C:\Users\hp\Desktop\?????? ??????.xls
2012-08-31 01:54 - 2012-08-31 01:54 - 00272896 ____A (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2012-08-31 01:31 - 2012-08-31 01:31 - 00000000 ____D C:\Users\hp\Documents\Square Enix
2012-08-31 01:21 - 2012-08-31 01:21 - 00000000 ____D C:\Users\hp\AppData\Roaming\WinRAR
2012-08-30 05:02 - 2012-08-30 05:02 - 00000000 ____D C:\Users\hp\AppData\Local\{78CA3B48-743B-4577-95F9-CBE6C7A72C52}
2012-08-27 06:56 - 2012-08-27 06:57 - 00000000 ____D C:\Users\hp\AppData\Local\{0E41A3E1-0BB1-44A5-954E-569DF9E2B47E}
2012-08-27 06:48 - 2012-08-27 06:48 - 00000000 ____D C:\Users\hp\AppData\Local\{5849ADD9-D752-48F4-B388-A6A7731AB6A4}
2012-08-27 03:12 - 2012-09-13 13:20 - 00034869 ____A C:\Windows\setupact.log
2012-08-27 03:12 - 2012-09-11 15:25 - 00144600 ____A C:\Windows\PFRO.log
2012-08-27 03:12 - 2012-09-07 21:36 - 00475520 ____A C:\Windows\System32\FNTCACHE.DAT
2012-08-27 03:12 - 2012-08-27 03:12 - 00000000 ____A C:\Windows\setuperr.log
2012-08-26 23:35 - 2012-09-07 21:37 - 00136608 ____A C:\Users\hp\AppData\Local\GDIPFONTCACHEV1.DAT
2012-08-26 23:18 - 2012-08-26 23:18 - 00000000 ____D C:\Users\hp\AppData\Local\Stardock
2012-08-26 23:12 - 2012-08-26 23:12 - 00000000 ____D C:\Users\hp\AppData\Local\liQeNSoft
2012-08-26 22:25 - 2012-08-26 22:25 - 00000000 ____D C:\Users\hp\.NewTek
2012-08-26 22:10 - 2009-09-16 20:05 - 00145448 ____A (SafeNet, Inc.) C:\Windows\System32\Drivers\sentinel64.sys
2012-08-26 22:09 - 2012-08-26 22:09 - 00000000 ____D C:\Users\All Users\SafeNet Sentinel
2012-08-26 22:09 - 2012-08-26 22:09 - 00000000 ____D C:\Program Files (x86)\SafeNet Sentinel
2012-08-26 22:08 - 2012-08-26 22:08 - 00000000 ____D C:\Users\hp\Documents\Downloaded Installations
2012-08-26 22:02 - 2012-08-26 22:02 - 00000000 ____D C:\Program Files\NewTek
2012-08-26 22:01 - 2012-08-26 22:01 - 00000000 ____D C:\Users\hp\AppData\Local\{90284D51-2F67-4087-A039-3057D2FC91BA}
2012-08-26 13:05 - 2012-08-26 13:05 - 00000000 ____D C:\Users\hp\AppData\Local\{371DCD4D-B3AB-44C4-8D4D-43B7D92959C1}
2012-08-26 11:31 - 2012-09-03 05:07 - 00000000 ____D C:\Program Files (x86)\Skin Pack
2012-08-26 11:30 - 2012-09-11 15:24 - 02755072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll.tmp
2012-08-26 11:30 - 2012-09-11 15:24 - 00245760 ____A (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll.tmp
2012-08-26 11:30 - 2012-08-26 11:30 - 00000000 ____A C:\[email protected]
2012-08-26 11:30 - 2010-11-20 05:27 - 02851840 ____A (Microsoft Corporation) C:\Windows\System32\themeui.dll.backup
2012-08-26 11:30 - 2010-11-20 04:21 - 02755072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll.backup
2012-08-26 11:30 - 2009-07-13 17:41 - 00332288 ____A (Microsoft Corporation) C:\Windows\System32\uxtheme.dll.backup
2012-08-26 11:30 - 2009-07-13 17:41 - 00044544 ____A (Microsoft Corporation) C:\Windows\System32\themeservice.dll.backup
2012-08-26 11:30 - 2009-07-13 17:11 - 00245760 ____A (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll.backup
2012-08-26 11:00 - 2012-09-14 12:41 - 00000000 ____D C:\Users\hp\Downloads\Compressed
2012-08-26 11:00 - 2012-09-14 00:05 - 00000000 ____D C:\Users\hp\AppData\Roaming\DMCache
2012-08-26 11:00 - 2012-09-07 11:34 - 00000000 ____D C:\Users\hp\AppData\Roaming\IDM
2012-08-26 11:00 - 2012-09-03 05:15 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2012-08-26 11:00 - 2012-08-26 11:00 - 00000000 ____D C:\Users\hp\Downloads\Video
2012-08-26 08:05 - 2012-08-26 08:07 - 00000000 ____D C:\Users\hp\Documents\NFSTR
2012-08-25 05:07 - 2012-08-25 05:08 - 00000000 ____D C:\Users\hp\AppData\Local\{79C5F6A5-F0E7-4520-81A3-AC7C2BDBD9F1}
2012-08-24 07:27 - 2012-08-24 07:27 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2012-08-24 07:27 - 2012-08-24 07:27 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_MijXfilt_01009.Wdf
2012-08-24 07:13 - 2012-09-13 13:06 - 00121416 ____A (MotioninJoy) C:\Windows\System32\Drivers\MijXfilt.sys
2012-08-24 07:13 - 2012-08-24 07:13 - 00000000 ____D C:\Users\hp\AppData\Roaming\MotioninJoy
2012-08-24 07:13 - 2012-08-24 07:13 - 00000000 ____D C:\Program Files\MotioninJoy
2012-08-24 07:13 - 2010-08-19 08:24 - 00074960 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\xusb21.sys
2012-08-24 07:13 - 2010-05-03 05:12 - 00328712 ____A (Logitech Inc.) C:\Windows\System32\MijFrc.dll
2012-08-23 16:46 - 2012-08-23 16:46 - 00000000 ____D C:\Users\hp\Documents\Nokia Suite
2012-08-23 16:45 - 2012-08-23 16:45 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf
2012-08-23 15:32 - 2012-08-23 15:32 - 00001954 ____A C:\Users\Guest\Desktop\Launch JAF COM Emulator.lnk
2012-08-23 15:32 - 2012-08-23 15:32 - 00001919 ____A C:\Users\Guest\Desktop\Launch JAF Logger.lnk
2012-08-23 15:32 - 2012-08-23 15:32 - 00001873 ____A C:\Users\Guest\Desktop\Launch JAF.lnk
2012-08-23 15:29 - 2012-08-23 15:29 - 00000000 ____D C:\Program Files (x86)\ODEON
2012-08-23 15:12 - 2012-08-23 15:12 - 00000000 ____D C:\Program Files\ODEON
2012-08-23 15:09 - 2012-08-23 15:09 - 00001913 ____A C:\Users\Guest\Desktop\Launch SFIFlashBus.lnk
2012-08-23 15:08 - 2012-08-23 15:08 - 00000000 ____D C:\Users\hp\AppData\Local\NokiaAccount
2012-08-23 15:07 - 2012-08-23 15:08 - 00000000 ____D C:\Users\hp\AppData\Local\Nokia
2012-08-23 15:06 - 2012-09-01 11:44 - 00000000 ____D C:\Users\hp\AppData\Roaming\PC Suite
2012-08-23 15:06 - 2012-08-23 16:45 - 00000000 ____D C:\Users\All Users\PC Suite
2012-08-23 15:05 - 2012-08-23 15:06 - 00000000 ____D C:\Users\All Users\Nokia
2012-08-23 15:05 - 2012-08-23 15:05 - 00000000 ____D C:\Program Files (x86)\PC Connectivity Solution
2012-08-23 15:05 - 2012-06-27 04:18 - 00026112 ____A (Nokia) C:\Windows\System32\Drivers\pccsmcfdx64.sys
2012-08-23 15:04 - 2012-01-09 06:28 - 00057856 ____A (Nokia) C:\Windows\System32\nmwcdclsX64.dll
2012-08-23 15:03 - 2012-08-23 15:05 - 00000000 ____D C:\Program Files (x86)\Nokia
2012-08-23 15:03 - 2012-08-23 15:03 - 00000000 ____D C:\Users\All Users\NokiaInstallerCache
2012-08-23 08:37 - 2012-08-23 08:37 - 00000000 ____D C:\Users\hp\AppData\Local\Samsung
2012-08-23 08:36 - 2012-08-23 08:36 - 00000000 ____D C:\Users\hp\Documents\samsung
2012-08-23 08:36 - 2012-08-23 08:36 - 00000000 ____D C:\Users\hp\AppData\Roaming\Samsung
2012-08-23 08:29 - 2012-07-30 03:16 - 04659712 ____A (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2012-08-23 08:28 - 2012-08-23 08:28 - 00000000 ____D C:\Program Files (x86)\MarkAny
2012-08-23 08:28 - 2012-07-30 03:16 - 00821824 ____A (Devguru Co., Ltd.) C:\Windows\SysWOW64\dgderapi.dll
2012-08-23 08:27 - 2012-08-23 08:31 - 00000000 ____D C:\Program Files (x86)\Samsung
2012-08-23 08:27 - 2012-08-23 08:30 - 00000000 ____D C:\Users\All Users\Samsung
2012-08-23 07:41 - 2012-09-12 23:59 - 00000000 ____D C:\Users\hp\Desktop\Pics
2012-08-22 14:12 - 2012-08-22 14:12 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2012-08-22 14:08 - 2012-09-11 03:23 - 00000000 ____D C:\Users\hp\Desktop\ProgZ
2012-08-22 14:07 - 2012-09-12 23:58 - 00000000 ____D C:\Users\hp\Desktop\Games
2012-08-22 13:55 - 2012-08-22 14:12 - 00000000 ____D C:\Users\All Users\BlueStacks
2012-08-22 13:55 - 2012-08-22 14:11 - 00000000 ____D C:\Users\All Users\BlueStacksSetup
2012-08-22 04:49 - 2012-08-22 04:49 - 00000000 ____D C:\Users\hp\AppData\Local\{DC1851C7-AA0E-402A-8759-1E176FD485A8}
2012-08-21 03:43 - 2012-08-21 03:43 - 00001134 ____A C:\Users\Guest\Desktop\Yu-Gi-Oh! Power of Chaos KAIBA THE REVENGE.lnk
2012-08-21 03:43 - 2012-08-21 03:43 - 00001134 ____A C:\Users\Guest\Desktop\Yu-Gi-Oh! Power of Chaos JOEY THE PASSION.lnk
2012-08-21 03:43 - 2012-08-21 03:43 - 00001127 ____A C:\Users\Guest\Desktop\Yu-Gi-Oh! Power of Chaos Yugi The Destiny.lnk
2012-08-19 13:31 - 2012-08-19 13:31 - 00000000 ____D C:\Users\hp\AppData\Local\{7A3CA6D9-0AC8-49C5-9C1D-2684092104B9}
2012-08-18 18:05 - 2012-08-18 18:05 - 00000000 ____D C:\Users\hp\AppData\Local\{E5CAB4B6-FDC7-4FDF-ACDF-55AD227B1705}
2012-08-18 17:14 - 2012-08-18 17:14 - 00000000 ____A C:\Windows\SysWOW64\debug.log
2012-08-17 17:53 - 2012-08-17 17:53 - 00000000 ____D C:\Users\hp\AppData\Local\{E88959E3-8F3D-4E2C-9569-60694FE6458F}
2012-08-17 17:53 - 2012-08-17 17:53 - 00000000 ____D C:\Users\hp\AppData\Local\{A38BACCC-3388-47D3-A6CD-6CD09BA0D2D1}
2012-08-17 04:39 - 2012-09-13 17:18 - 00000916 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2615546507-2399928836-372582084-1000UA.job
2012-08-17 04:39 - 2012-09-13 17:18 - 00000894 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2615546507-2399928836-372582084-1000Core.job
2012-08-17 04:39 - 2012-08-18 17:14 - 00000000 ____D C:\Users\hp\AppData\Local\Facebook
2012-08-16 16:19 - 2012-08-16 16:19 - 00000000 ____D C:\Users\hp\AppData\Local\{2E747A26-84FF-4071-8271-471DEF4EC019}
2012-08-16 16:18 - 2012-08-16 16:19 - 00000000 ____D C:\Users\hp\AppData\Local\{B522D199-49D4-4DCD-B22B-EC8A26195244}

==================== 3 Months Modified Files ================================

2012-09-14 13:50 - 2012-09-14 13:50 - 00047057 ____A C:\Windows\System32\config\mybackup
2012-09-13 19:42 - 2012-09-13 19:42 - 00733525 ____A C:\Users\hp\Desktop\DIAG.LOG
2012-09-13 19:35 - 2012-09-13 00:21 - 00017876 ____A C:\Windows\DirectX.log
2012-09-13 19:35 - 2011-03-04 06:45 - 00000840 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2615546507-2399928836-372582084-1000UA.job
2012-09-13 19:11 - 2011-04-10 07:20 - 00000274 ___AH C:\Windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
2012-09-13 18:52 - 2011-08-05 07:04 - 00000274 ___AH C:\Windows\Tasks\{810401E2-DDE0-454e-B0E2-AA89C9E5967C}.job
2012-09-13 18:50 - 2010-06-11 15:03 - 01548058 ____A C:\Windows\WindowsUpdate.log
2012-09-13 17:18 - 2012-08-17 04:39 - 00000916 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2615546507-2399928836-372582084-1000UA.job
2012-09-13 17:18 - 2012-08-17 04:39 - 00000894 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2615546507-2399928836-372582084-1000Core.job
2012-09-13 13:20 - 2012-08-27 03:12 - 00034869 ____A C:\Windows\setupact.log
2012-09-13 13:06 - 2012-08-24 07:13 - 00121416 ____A (MotioninJoy) C:\Windows\System32\Drivers\MijXfilt.sys
2012-09-13 10:38 - 2009-07-13 20:45 - 00023248 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2012-09-13 10:38 - 2009-07-13 20:45 - 00023248 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2012-09-13 10:37 - 2012-09-10 15:47 - 00000346 ___AH C:\Windows\Tasks\TheBflixUpdaterTask{BDE032AD-FC3F-4A7B-AD94-88B334F9FA6E}.job
2012-09-13 10:35 - 2009-07-13 21:13 - 00778834 ____A C:\Windows\System32\PerfStringBackup.INI
2012-09-13 10:31 - 2011-08-05 07:04 - 00000310 __ASH C:\Windows\Tasks\UCNJW.job
2012-09-13 10:31 - 2009-07-13 21:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2012-09-13 00:35 - 2011-03-04 06:45 - 00000788 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2615546507-2399928836-372582084-1000Core.job
2012-09-12 16:26 - 2012-02-15 12:45 - 64462936 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2012-09-12 01:32 - 2012-09-12 01:32 - 00002948 ____A C:\Windows\SysWOW64\jupdate-1.6.0_35-b10.log
2012-09-11 15:25 - 2012-08-27 03:12 - 00144600 ____A C:\Windows\PFRO.log
2012-09-11 15:24 - 2012-08-26 11:30 - 02755072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll.tmp
2012-09-11 15:24 - 2012-08-26 11:30 - 00245760 ____A (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll.tmp
2012-09-11 11:47 - 2012-09-11 11:47 - 01178247 ____A C:\Users\hp\Desktop\08.Ya_Dale_Ya_Rohi.rm
2012-09-11 01:10 - 2012-09-12 03:48 - 27212396 ____A C:\Users\hp\Desktop\ExtAudio.wav
2012-09-10 09:34 - 2012-02-20 10:42 - 00000320 ____A C:\Windows\Tasks\HPCeeScheduleForhp.job
2012-09-10 07:36 - 2011-01-30 09:24 - 00000052 ____A C:\Windows\SysWOW64\DOErrors.log
2012-09-09 14:29 - 2012-09-09 14:29 - 00000899 ____A C:\Users\hp\.recently-used.xbel
2012-09-09 00:40 - 2012-09-08 03:05 - 1311861891 ___AH C:\Users\hp\Desktop\120626_LocoSetup_Live.exe.part
2012-09-07 21:38 - 2012-09-07 21:38 - 00008224 ____A C:\Windows\System32\GDIPFONTCACHEV1.DAT
2012-09-07 21:37 - 2012-08-26 23:35 - 00136608 ____A C:\Users\hp\AppData\Local\GDIPFONTCACHEV1.DAT
2012-09-07 21:36 - 2012-08-27 03:12 - 00475520 ____A C:\Windows\System32\FNTCACHE.DAT
2012-09-04 09:48 - 2012-09-04 09:48 - 00000845 ____A C:\Users\Public\Desktop\osu!.lnk
2012-09-03 14:31 - 2009-07-13 18:34 - 00000478 ____A C:\Windows\win.ini
2012-09-03 12:52 - 2012-09-03 12:52 - 00019696 ____A C:\Users\hp\Desktop\Faculty of Science and Information Technology.htm
2012-09-02 15:10 - 2012-09-02 15:10 - 00283200 ____A (DT Soft Ltd) C:\Windows\System32\Drivers\dtsoftbus01.sys
2012-09-02 06:52 - 2012-09-02 06:52 - 00017920 ____A C:\Users\hp\Desktop\?????? ??????.xls
2012-08-31 01:55 - 2011-12-22 07:49 - 00198864 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2012-08-31 01:55 - 2011-12-22 07:49 - 00006656 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2012-08-31 01:55 - 2011-12-22 07:49 - 00005632 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2012-08-31 01:54 - 2012-08-31 01:54 - 00272896 ____A (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2012-08-31 01:54 - 2009-07-21 11:22 - 00499712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2012-08-29 00:45 - 2009-07-13 21:08 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2012-08-28 09:24 - 2012-07-09 20:45 - 00477168 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\npdeployJava1.dll
2012-08-28 09:24 - 2011-01-28 13:20 - 00473072 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\deployJava1.dll
2012-08-28 09:10 - 2012-09-12 01:32 - 00157680 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaws.exe
2012-08-28 09:10 - 2012-09-12 01:32 - 00149488 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaw.exe
2012-08-28 09:09 - 2012-09-12 01:32 - 00149488 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\java.exe
2012-08-27 03:12 - 2012-08-27 03:12 - 00000000 ____A C:\Windows\setuperr.log
2012-08-26 22:52 - 2009-07-21 11:22 - 00348160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2012-08-26 12:06 - 2009-07-13 15:55 - 00332288 ____A (Microsoft Corporation) C:\Windows\System32\uxtheme.dll
2012-08-26 11:30 - 2012-08-26 11:30 - 00000000 ____A C:\[email protected]
2012-08-26 11:30 - 2012-02-15 11:58 - 02851840 ____A (Microsoft Corporation) C:\Windows\System32\themeui.dll
2012-08-26 11:30 - 2009-07-13 15:54 - 00044544 ____A (Microsoft Corporation) C:\Windows\System32\themeservice.dll
2012-08-24 07:27 - 2012-08-24 07:27 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2012-08-24 07:27 - 2012-08-24 07:27 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_MijXfilt_01009.Wdf
2012-08-23 16:45 - 2012-08-23 16:45 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf
2012-08-23 15:32 - 2012-08-23 15:32 - 00001954 ____A C:\Users\Guest\Desktop\Launch JAF COM Emulator.lnk
2012-08-23 15:32 - 2012-08-23 15:32 - 00001919 ____A C:\Users\Guest\Desktop\Launch JAF Logger.lnk
2012-08-23 15:32 - 2012-08-23 15:32 - 00001873 ____A C:\Users\Guest\Desktop\Launch JAF.lnk
2012-08-23 15:09 - 2012-08-23 15:09 - 00001913 ____A C:\Users\Guest\Desktop\Launch SFIFlashBus.lnk
2012-08-23 08:26 - 2011-07-22 09:06 - 00764746 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2012-08-22 10:12 - 2012-09-12 16:24 - 01913200 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2012-08-22 10:12 - 2012-09-12 16:24 - 00950128 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ndis.sys
2012-08-22 10:12 - 2012-09-12 16:24 - 00376688 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys
2012-08-22 10:12 - 2012-09-12 16:24 - 00288624 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2012-08-21 03:43 - 2012-08-21 03:43 - 00001134 ____A C:\Users\Guest\Desktop\Yu-Gi-Oh! Power of Chaos KAIBA THE REVENGE.lnk
2012-08-21 03:43 - 2012-08-21 03:43 - 00001134 ____A C:\Users\Guest\Desktop\Yu-Gi-Oh! Power of Chaos JOEY THE PASSION.lnk
2012-08-21 03:43 - 2012-08-21 03:43 - 00001127 ____A C:\Users\Guest\Desktop\Yu-Gi-Oh! Power of Chaos Yugi The Destiny.lnk
2012-08-18 17:14 - 2012-08-18 17:14 - 00000000 ____A C:\Windows\SysWOW64\debug.log
2012-08-13 15:23 - 2012-08-13 13:07 - 00002640 ____A C:\Windows\SysWOW64\AVRedirector.ini
2012-08-13 15:23 - 2012-08-13 13:07 - 00001432 ____A C:\Windows\SysWOW64\AVRedirectorOff.ini
2012-08-13 15:23 - 2012-08-13 13:07 - 00001432 ____A C:\Windows\System32\AVRedirectorOff.ini
2012-08-13 12:16 - 2012-08-13 12:16 - 00002852 ____A C:\Windows\SysWOW64\jupdate-1.6.0_33-b05.log
2012-08-05 08:39 - 2012-08-05 08:39 - 00000540 ____A C:\settings.ini
2012-08-04 09:41 - 2012-06-29 09:42 - 00000632 _RASH C:\Users\hp\ntuser.pol
2012-08-03 03:51 - 2012-08-03 03:51 - 00000827 ____A C:\Users\Guest\Desktop\Worms 3D.lnk
2012-08-02 09:58 - 2012-09-12 16:24 - 00574464 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2012-08-02 08:57 - 2012-09-12 16:24 - 00490496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2012-07-30 23:14 - 2011-10-27 07:37 - 00000042 ____A C:\Users\hp\jagex_cl_runescape_LIVE1.dat
2012-07-30 23:14 - 2011-10-27 07:35 - 00000032 ____A C:\Users\hp\jagex_cl_runescape_LIVE.dat
2012-07-30 08:01 - 2012-06-08 12:09 - 00000000 ____A C:\Windows\System32\HP_ActiveX_Patch_NOT_DETECTED.txt
2012-07-30 07:12 - 2012-07-30 04:28 - 00000046 ____A C:\Users\hp\AppData\Roaming\hidewin.cfg
2012-07-30 03:16 - 2012-08-23 08:29 - 04659712 ____A (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2012-07-30 03:16 - 2012-08-23 08:28 - 00821824 ____A (Devguru Co., Ltd.) C:\Windows\SysWOW64\dgderapi.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00974848 ____A C:\Windows\SysWOW64\cis-2.4.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00569344 ____A (© MusicCity) C:\Windows\SysWOW64\muzdecode.ax
2012-07-30 03:16 - 2012-07-30 03:16 - 00491520 ____A (Musiccity Co.Ltd.) C:\Windows\SysWOW64\muzapp.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00352256 ____A (Sample Corporation) C:\Windows\SysWOW64\MSLUR71.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00330240 ____A ((?)????) C:\Windows\MASetupCaller.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00258048 ____A (© PeeringPortal) C:\Windows\SysWOW64\muzoggsp.ax
2012-07-30 03:16 - 2012-07-30 03:16 - 00245760 ____A (Teruten Inc.) C:\Windows\SysWOW64\MSCLib.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00200704 ____A ( © MusicCity) C:\Windows\SysWOW64\muzwmts.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00172032 ____A (Musiccity Co.Ltd.) C:\Windows\SysWOW64\muzapp.exe
2012-07-30 03:16 - 2012-07-30 03:16 - 00155648 ____A (Teruten Inc.) C:\Windows\SysWOW64\MSFLib.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00143360 ____A C:\Windows\SysWOW64\3DAudio.ax
2012-07-30 03:16 - 2012-07-30 03:16 - 00135168 ____A (Musiccity Co.Ltd.) C:\Windows\SysWOW64\muzaf1.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00131072 ____A (© MusicCity) C:\Windows\SysWOW64\muzmpgsp.ax
2012-07-30 03:16 - 2012-07-30 03:16 - 00122880 ____A (© MUSICCITY) C:\Windows\SysWOW64\muzeffect.ax
2012-07-30 03:16 - 2012-07-30 03:16 - 00118784 ____A ((?)????) C:\Windows\SysWOW64\MaDRM.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00110592 ____A (© MusicCity) C:\Windows\SysWOW64\muzmp4sp.ax
2012-07-30 03:16 - 2012-07-30 03:16 - 00090112 ____A ((?)????) C:\Windows\MAMCityDownload.ocx
2012-07-30 03:16 - 2012-07-30 03:16 - 00081920 ____A C:\Windows\SysWOW64\issacapi_bs-2.3.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00065536 ____A C:\Windows\SysWOW64\issacapi_pe-2.3.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00057344 ____A C:\Windows\SysWOW64\issacapi_se-2.3.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00057344 ____A (Marktek) C:\Windows\SysWOW64\MK_Lyric.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00057344 ____A (Marktek Inc.) C:\Windows\SysWOW64\MTXSYNCICON.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00049152 ____A ((?) ????) C:\Windows\SysWOW64\MaJGUILib.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00045320 ____A (MARKANY) C:\Windows\SysWOW64\MAMACExtract.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00045056 ____A ((?) ????) C:\Windows\SysWOW64\MaXMLProto.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00045056 ____A ((?) ????) C:\Windows\SysWOW64\MACXMLProto.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00040960 ____A (Telechips Inc.,) C:\Windows\SysWOW64\MTTELECHIP.dll
2012-07-30 03:16 - 2012-07-30 03:16 - 00030568 ____A () C:\Windows\MusiccityDownload.exe
2012-07-30 03:16 - 2012-07-30 03:16 - 00024576 ____A ((?)????) C:\Windows\SysWOW64\MASetupCleaner.exe
2012-07-26 14:27 - 2012-07-26 14:27 - 00000304 ____A C:\user.js
2012-07-22 04:35 - 2012-07-22 04:35 - 00000844 ____A C:\Users\Guest\Desktop\Fresco Wizard.lnk
2012-07-22 04:34 - 2012-07-22 04:34 - 00000884 ____A C:\Users\Guest\Desktop\Kasparov Chessmate.lnk
2012-07-22 04:33 - 2012-07-22 04:33 - 00000838 ____A C:\Users\Guest\Desktop\AstroAvenger.lnk
2012-07-22 04:00 - 2012-07-22 04:00 - 00001453 ____A C:\Users\Guest\Desktop\don't take it personally, babe, it just ain't your story.lnk
2012-07-19 03:33 - 2012-07-19 03:33 - 00000890 ____A C:\Users\Guest\Desktop\Wik And The Fable Of Souls.lnk
2012-07-18 10:15 - 2012-09-03 13:42 - 03148800 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2012-07-18 07:05 - 2012-09-03 13:49 - 00132832 ____A (Avira GmbH) C:\Windows\System32\Drivers\avipbb.sys
2012-07-18 07:05 - 2012-09-03 13:49 - 00098848 ____A (Avira GmbH) C:\Windows\System32\Drivers\avgntflt.sys
2012-07-18 07:05 - 2012-09-03 13:49 - 00027760 ____A (Avira GmbH) C:\Windows\System32\Drivers\avkmgr.sys
2012-07-14 00:36 - 2012-07-14 00:36 - 00426184 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2012-07-14 00:36 - 2011-06-09 02:02 - 00070344 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2012-07-11 10:29 - 2012-07-11 10:29 - 00006402 ____A C:\Users\hp\Documents\startup.txt
2012-07-11 10:27 - 2012-07-11 10:27 - 00117482 ____A C:\Users\hp\Documents\cc_20120711_212722.reg
2012-07-06 12:07 - 2012-09-03 14:30 - 00552960 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\bthport.sys
2012-07-04 14:16 - 2012-09-03 13:44 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\netapi32.dll
2012-07-04 14:13 - 2012-09-03 13:44 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\browser.dll
2012-07-04 14:13 - 2012-09-03 13:44 - 00059392 ____A (Microsoft Corporation) C:\Windows\System32\browcli.dll
2012-07-04 13:16 - 2012-09-03 13:44 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2012-07-04 13:14 - 2012-09-03 13:44 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2012-07-04 12:26 - 2012-09-12 16:24 - 00041472 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\RNDISMP.sys
2012-07-04 00:15 - 2012-07-04 00:15 - 00001925 ____A C:\Users\Guest\Desktop\Heroes of Newerth.lnk
2012-06-29 07:03 - 2012-06-29 07:03 - 00017408 ____A C:\Users\Guest\AppData\Local\WebpageIcons.db
2012-06-29 07:02 - 2012-06-29 07:01 - 00133208 ____A C:\Users\Guest\AppData\Local\GDIPFONTCACHEV1.DAT
2012-06-29 07:01 - 2012-06-29 07:01 - 00000020 __ASH C:\Users\Guest\ntuser.ini
2012-06-28 20:55 - 2012-09-03 14:04 - 17809920 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2012-06-28 20:09 - 2012-09-11 11:16 - 10925568 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2012-06-28 19:56 - 2012-09-03 14:04 - 02312704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2012-06-28 19:49 - 2012-09-03 14:04 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2012-06-28 19:49 - 2012-09-03 14:04 - 01346048 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2012-06-28 19:48 - 2012-09-11 11:26 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2012-06-28 19:47 - 2012-09-03 14:04 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2012-06-28 19:45 - 2012-09-03 14:04 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2012-06-28 19:44 - 2012-09-03 14:04 - 00816640 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2012-06-28 19:43 - 2012-09-03 14:04 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2012-06-28 19:42 - 2012-09-03 14:04 - 02144768 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2012-06-28 19:40 - 2012-09-03 14:04 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2012-06-28 19:39 - 2012-09-03 14:04 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2012-06-28 19:35 - 2012-09-03 14:04 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2012-06-28 16:52 - 2012-09-03 14:04 - 12317184 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2012-06-28 16:27 - 2012-09-03 14:04 - 09737728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2012-06-28 16:16 - 2012-09-03 14:04 - 01800704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2012-06-28 16:09 - 2012-09-03 14:04 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2012-06-28 16:09 - 2012-09-03 14:04 - 01103872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2012-06-28 16:08 - 2012-09-03 14:04 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2012-06-28 16:07 - 2012-09-03 14:04 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2012-06-28 16:06 - 2012-09-03 14:04 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2012-06-28 16:04 - 2012-09-03 14:04 - 00717824 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2012-06-28 16:04 - 2012-09-03 14:04 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2012-06-28 16:01 - 2012-09-03 14:04 - 01793024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2012-06-28 16:01 - 2012-09-03 14:04 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2012-06-28 16:00 - 2012-09-03 14:04 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2012-06-28 15:57 - 2012-09-03 14:04 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2012-06-27 04:18 - 2012-08-23 15:05 - 00026112 ____A (Nokia) C:\Windows\System32\Drivers\pccsmcfdx64.sys
2012-06-27 04:18 - 2012-06-27 04:18 - 02152176 ____A (Microsoft Corporation) C:\Windows\System32\WUDFUpdate_01009.dll

ZeroAccess:
C:\Windows\assembly\tmp\U

ZeroAccess:
C:\Users\hp\AppData\Local\f42926a0
C:\Users\hp\AppData\Local\f42926a0\@
C:\Users\hp\AppData\Local\f42926a0\loader.tlb
C:\Users\hp\AppData\Local\f42926a0\U

==================== Known DLLs (Whitelisted) =================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2012-09-11 11:17] - [2011-02-24 22:19] - 3113984 ____A (Microsoft Corporation) 80FB361A20898730C4B303404FD6A6D9

C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points =========================

Restore point made on: 2012-09-13 19:36:20

==================== Memory info ===========================

Percentage of memory in use: 16%
Total physical RAM: 3893.86 MB
Available physical RAM: 3252.56 MB
Total Pagefile: 3892.01 MB
Available Pagefile: 3263.79 MB
Total Virtual: 8192 MB
Available Virtual: 8191.91 MB

==================== Partitions ============================

1 Drive c: () (Fixed) (Total:451.8 GB) (Free:181.94 GB) NTFS ==>[System with boot components (obtained from reading drive)]
2 Drive e: (RECOVERY) (Fixed) (Total:13.66 GB) (Free:1.84 GB) NTFS ==>[System with boot components (obtained from reading drive)]
3 Drive f: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.08 GB) FAT32
4 Drive g: (BT5) (CDROM) (Total:1.91 GB) (Free:0 GB) CDFS
5 Drive h: () (Removable) (Total:7.45 GB) (Free:7.23 GB) NTFS
6 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
7 Drive y: (SYSTEM) (Fixed) (Total:0.19 GB) (Free:0.16 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 465 GB 0 B
Disk 1 Online 7633 MB 0 B

Partitions of Disk 0:
===============

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 199 MB 1024 KB
Partition 2 Primary 451 GB 200 MB
Partition 3 Primary 13 GB 451 GB
Partition 4 Primary 103 MB 465 GB

==================================================================================

Disk: 0
Partition 1
Type : 07
Hidden: No
Active: Yes

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 1 Y SYSTEM NTFS Partition 199 MB Healthy

==================================================================================

Disk: 0
Partition 2
Type : 07
Hidden: No
Active: No

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 2 C NTFS Partition 451 GB Healthy

==================================================================================

Disk: 0
Partition 3
Type : 07
Hidden: No
Active: No

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 3 E RECOVERY NTFS Partition 13 GB Healthy

==================================================================================

Disk: 0
Partition 4
Type : 0C
Hidden: No
Active: No

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 4 F HP_TOOLS FAT32 Partition 103 MB Healthy

==================================================================================

Partitions of Disk 1:
===============

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 7633 MB 16 KB

==================================================================================

Disk: 1
Partition 1
Type : 07
Hidden: No
Active: Yes

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 5 H NTFS Removable 7633 MB Healthy

==================================================================================

Last Boot: 2012-09-06 07:06

==================== End Of Log =============================

Edited by KaizerZZ, 14 September 2012 - 06:43 PM.

  • 0

Advertisements


#2
CompCav

CompCav

    Member 5k

  • Expert
  • 12,449 posts
Hi, KaizerZZ! Posted ImageMy nick name is CompCav and I will be assisting you with your Malware/Security problems. Please make sure you read all of the instructions and fixes thoroughly before continuing with them. If you have any questions or you are unsure about anything, just ask and I will help you out. :)

If you have resolved the issues you were originally experiencing, or have received help elsewhere, please let me know so that this topic can be closed.


Please make sure you are saving and printing the instructions out prior to each fix, this way you will have them on hand just in case you are unable to access this site. One of the steps I will be asking you to do requires you to boot into b]Safe Mode[/b] and this process will be much easier for you to perform if the instructions are printed out for you to follow.

If you are ready to get started, please review and follow these guidelines so that we resolve your issues in a timely and effective manner:
  • Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post.
  • Please make sure to carefully read any instructions that I give you. Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
  • If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
  • These instructions have been specifically tailored to your computer and the issues you are experiencing with your computer. These instructions are not suitable for any other computer, even if the issues are fairly similar.
  • Do not do things I do not ask for, such as running a spyware scan on your computer. However, the one thing that you should always do, is to make sure your anti-virus definitions are up-to-date!
  • Please do not use the Attachment feature for any log file. Just do a Copy/Paste of the entire contents of the log file inside your post and submit.
  • You must reply within four days failure to reply will result in the topic being closed!
  • Please do not PM me directly for help. If you have any questions, post them in this topic. PM me only if I have not responded to your last post in 2 days.
  • Lastly, I am no magician. I will try very hard to fix your issues, but no promises can be made. Also be aware that some infections are so severe that you might need to ultimately reformat your hard drive and reinstall the operating system.
    Don't worry, this only happens in severe cases, but it sadly does happen. Please have the software and storage media for backing up your data available.


We need to search for a file:

  • Restart your computer like you did before to start FRST and get to this screen:
    Posted Image
  • Type the following into the search box:

explorer.exe*

  • Press the Search button.
  • Once it completes, a message will pop up indicating that the search is completed.
  • It will make a log (Search.txt) on the flash drive. Please copy and paste it to your reply.

  • 1

#3
KaizerZZ

KaizerZZ

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts
Hello CompCav , Thanks for your concern and for trying to help I really appreciate it :) , but to be honest I couldn't wait for a reply and so I used Parted Magic to resize my main partition and increase the size of the Recovery partition and I copied all my important Files to the Recovery Partition , but then when I wanted to try and the Hp Recovery for System recovery (reseting to factory setting) , It didn't work because the resizing of the partition probably affected it and so I downloaded a Windows 7 Image and used uneboot tool to put it on my USB Drive, booted my laptop from my USB and Formatted my C: (Main) , Installed Windows 7,
After that It automatically restarted and after it restarted , it showed me a black screen where it started verifying files and folders on my Recovery Partition (to be honest I saw the word deleting on that black screen and so I lost hope of finding my copied files after it finishes , But Amazingly nothing was erased !!
And Then It worked better than before !! :) (After I installed my device drivers ofcourse)
and I think that this problem came in the first place , after I installed the game NFS:Most Wanted from a torrent (I feel stupid for not scanning it before Installing it)
  • 0

#4
KaizerZZ

KaizerZZ

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts
+ Since I already fixed the problem , I guess I must say
CompCav , can you please Close this topic for Me ? :)
But before that can you please give me an advice to avoid such a problem in the future ?
P.S. I apologize for replying very late :(

Edited by KaizerZZ, 26 September 2012 - 05:16 AM.

  • 0

#5
CompCav

CompCav

    Member 5k

  • Expert
  • 12,449 posts
P2P Warning!:

IMPORTANT I have noticed that there are signs of P2P (Peer to Peer) File Sharing Programs on your computer.

As long as you are using any form of Peer-to-Peer networking and downloading files from non-documented sources, you can expect infestations of malware to occur.

Once upon a time, P2P file sharing was fairly safe. This is no longer true. P2P programs form a direct conduit inside your computer, their security measures are easily circumvented, and malware writers are increasingly exploiting them to spread their wares on to your computer. If your P2P program is not configured correctly, your computer may also be sharing more files than you realize. There have been cases where people's passwords, address books and other personal, private, and financial details have been exposed to a file sharing network by a badly configured program.

If you need convincing, please read these short reports on the dangers of peer-2-peer programs and file sharing.

FBI Cyber Education Letter
File sharing infects 500,000 computers
infoworld

It is pretty much certain that if you continue to use P2P programs, you will get infected again.
I would recommend that you uninstall them, however that choice is up to you. If you choose to remove these programs, you can do so via Start > Control Panel > Add/Remove Programs.


Now that you are clean, to help protect your computer in the future I recommend that you get the following free programs:
Posted Image
Malwarebytes. Update and run weekly to keep your system clean

Download and install FileHippo update checker and run it monthly it will show you which programs on your system need updating and give a download link

It is critical to have both a firewall and anti virus to protect your system and to keep them updated. To keep your operating system up to date visit

To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?

Keep safe :wave:
  • 0

#6
CompCav

CompCav

    Member 5k

  • Expert
  • 12,449 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP