This topic is locked
The computer is affected of Claro-search, among other things of virus that I opened the first page in Firefox and Crome will not boot up. The problem is created by installing Easeus Disk Copy, even though I unchecked the box for the installation of Claro-search.
I attach the file OTL and OTL Extras TX. Waiting for your help to fix the PC.
thanks
OTL logfile created on: 25/11/2012 02:28:05 - Run 5
OTL by OldTimer - Version 3.2.69.0 Folder = D:\Utenti\Paul\dowloads\OTL
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16433)
Locale: 00000410 | Country: Italia | Language: ITA | Date Format: dd/MM/yyyy
3,98 Gb Total Physical Memory | 2,16 Gb Available Physical Memory | 54,33% Memory free
10,00 Gb Paging File | 7,83 Gb Available in Paging File | 78,27% Paging File free
Paging file location(s): c:\pagefile.sys 64 64e:\pagefile. [Binary data over 200 bytes]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 279,46 Gb Total Space | 200,34 Gb Free Space | 71,69% Space Free | Partition Type: NTFS
Drive D: | 288,74 Gb Total Space | 190,48 Gb Free Space | 65,97% Space Free | Partition Type: NTFS
Drive E: | 19,06 Gb Total Space | 12,67 Gb Free Space | 66,47% Space Free | Partition Type: NTFS
Drive F: | 86,37 Gb Total Space | 30,97 Gb Free Space | 35,86% Space Free | Partition Type: NTFS
Drive G: | 30,61 Mb Total Space | 19,36 Mb Free Space | 63,23% Space Free | Partition Type: NTFS
Drive N: | 24,98 Gb Total Space | 5,12 Gb Free Space | 20,48% Space Free | Partition Type: FAT32
Computer Name: ASUSC123 | User Name: Paul | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days
========== Processes (SafeList) ==========
PRC - [2012/11/25 02:07:28 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\Utenti\Paul\dowloads\OTL\OTL.exe
PRC - [2012/11/24 09:48:42 | 000,077,496 | ---- | M] (Microsoft Corporation) -- C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
PRC - [2012/11/24 09:46:47 | 000,165,184 | ---- | M] (Microsoft Corporation) -- C:\Programmi\Microsoft Office 15\root\office15\msosync.exe
PRC - [2012/11/20 07:16:04 | 000,916,960 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012/11/16 08:01:55 | 000,255,992 | ---- | M] (Microsoft Corporation) -- C:\Users\Paul\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
PRC - [2012/11/10 20:36:28 | 001,807,800 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe
PRC - [2012/11/01 18:33:14 | 000,388,576 | ---- | M] (Mozilla Corporation) -- D:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
PRC - [2012/10/11 12:17:59 | 002,312,216 | ---- | M] () -- C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
PRC - [2012/10/10 19:29:14 | 000,143,928 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton 360\Norton 360\Engine\20.2.0.19\ccSvcHst.exe
PRC - [2012/10/09 09:53:36 | 004,441,920 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\Paul\AppData\Local\Akamai\netsession_win.exe
PRC - [2012/06/20 16:21:46 | 001,556,640 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
PRC - [2012/06/15 13:08:30 | 001,149,912 | ---- | M] (Crystal Dew World) -- D:\Program Files (x86)\CrystalDiskInfo\DiskInfo.exe
PRC - [2012/02/06 18:32:34 | 000,102,568 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
PRC - [2012/02/03 15:24:50 | 000,277,120 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe
PRC - [2012/02/03 14:40:42 | 000,277,120 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe
PRC - [2012/01/20 00:42:54 | 003,058,304 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2011/12/23 15:39:38 | 000,174,720 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
PRC - [2011/12/22 18:58:42 | 000,318,080 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
PRC - [2011/11/21 13:22:08 | 000,080,512 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
PRC - [2011/11/21 13:19:50 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
PRC - [2011/10/24 16:20:38 | 000,174,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
PRC - [2011/10/03 10:45:58 | 000,375,424 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe
PRC - [2011/10/01 00:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2011/10/01 00:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2011/08/10 21:52:54 | 000,138,760 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Safe Web Lite\Engine\2.0.0.16\ccSvcHst.exe
PRC - [2011/05/30 12:48:16 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\Windows\SysWOW64\ACEngSvr.exe
PRC - [2011/04/06 08:27:56 | 002,535,296 | ---- | M] (ashampoo GmbH & Co. KG) -- D:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 4\UIWatcher.exe
PRC - [2011/02/18 10:47:12 | 000,079,192 | ---- | M] (Research In Motion Limited) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
PRC - [2010/12/21 03:24:38 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2010/12/21 03:24:36 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
PRC - [2010/08/20 18:57:06 | 000,107,816 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2010/07/10 07:45:00 | 000,984,400 | ---- | M] (Virage Logic Corporation / Sonic Focus) -- C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
PRC - [2009/06/19 09:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
PRC - [2009/06/14 00:34:40 | 000,350,208 | ---- | M] (Util's Haven) -- D:\Program Files (x86)\Prism HUD\prism.exe
PRC - [2009/04/07 08:13:10 | 000,673,616 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
PRC - [2007/06/15 11:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) -- C:\Windows\SysWOW64\bgsvcgen.exe
========== Modules (No Company Name) ==========
MOD - [2012/11/24 09:49:41 | 006,307,952 | ---- | M] () -- C:\Programmi\Microsoft Office 15\root\office15\1033\grooveintlresource.dll
MOD - [2012/11/24 09:48:18 | 000,340,592 | ---- | M] () -- C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\c2r32.dll
MOD - [2012/11/24 09:47:46 | 000,307,976 | ---- | M] () -- C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll
MOD - [2012/11/24 09:43:47 | 000,110,192 | ---- | M] () -- C:\Programmi\Microsoft Office 15\root\office15\jitv.dll
MOD - [2012/11/24 09:41:08 | 000,340,592 | ---- | M] () -- C:\Programmi\Microsoft Office 15\root\office15\c2r32.dll
MOD - [2012/11/24 09:41:08 | 000,307,976 | ---- | M] () -- C:\Programmi\Microsoft Office 15\root\office15\appvisvstream32.dll
MOD - [2012/11/20 07:16:18 | 002,400,224 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2012/11/19 21:31:12 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\6cb04d32b2897d0745ade5b7a0689189\System.Configuration.ni.dll
MOD - [2012/11/18 20:40:42 | 005,452,800 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\6c34b9c8df4997ebbd2cd0ec01592eb2\System.Xml.ni.dll
MOD - [2012/11/18 20:40:39 | 012,436,480 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\b5fbb0525df9de99970c60a5891939eb\System.Windows.Forms.ni.dll
MOD - [2012/11/18 20:40:32 | 001,592,832 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\a2ce5fa5ddc467113d344183228ad23e\System.Drawing.ni.dll
MOD - [2012/11/18 20:40:26 | 014,344,704 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e77619e856b76cb3cafaf8978fa50a3c\PresentationFramework.ni.dll
MOD - [2012/11/18 20:40:26 | 000,368,128 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\451a19701e7295e052a28fc3fc496922\PresentationFramework.Aero.ni.dll
MOD - [2012/11/18 20:40:12 | 012,240,384 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCore\d3c3e4130d3b3fabf8e856ef4da0b05d\PresentationCore.ni.dll
MOD - [2012/11/18 20:40:02 | 003,349,504 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsBase\20da735ec72bc50c0041364d82b87e7a\WindowsBase.ni.dll
MOD - [2012/11/18 20:39:59 | 007,988,224 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\7a3f4b6e28bff7fc6e201f3444e38d06\System.ni.dll
MOD - [2012/11/18 20:39:54 | 011,494,912 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\0d4a97f42b4d71125220c04a3a2fee75\mscorlib.ni.dll
MOD - [2012/11/10 20:36:28 | 014,586,808 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll
MOD - [2012/11/01 18:33:14 | 002,111,456 | ---- | M] () -- D:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
MOD - [2012/11/01 18:33:14 | 000,157,664 | ---- | M] () -- D:\Program Files (x86)\Mozilla Thunderbird\nsldap32v60.dll
MOD - [2012/11/01 18:33:14 | 000,021,984 | ---- | M] () -- D:\Program Files (x86)\Mozilla Thunderbird\nsldappr32v60.dll
MOD - [2012/10/11 12:17:59 | 002,312,216 | ---- | M] () -- C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
MOD - [2012/10/11 12:17:06 | 002,069,528 | ---- | M] () -- C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll
MOD - [2012/09/13 23:04:00 | 000,307,200 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
MOD - [2012/07/06 03:01:04 | 000,241,664 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_it_31bf3856ad364e35\PresentationFramework.resources.dll
MOD - [2012/07/06 03:01:04 | 000,086,016 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\WindowsBase.resources\3.0.0.0_it_31bf3856ad364e35\WindowsBase.resources.dll
MOD - [2012/07/06 03:01:02 | 000,425,984 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_it_b77a5c561934e089\System.Windows.Forms.resources.dll
MOD - [2012/05/30 07:51:08 | 000,699,280 | R--- | M] () -- C:\PROGRAM FILES (X86)\NORTON 360\NORTON 360\ENGINE\20.2.0.19\wincfi39.dll
MOD - [2012/02/06 18:32:30 | 000,009,216 | ---- | M] () -- C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
MOD - [2010/08/20 18:57:06 | 000,619,816 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
MOD - [2010/08/20 18:57:00 | 000,013,096 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
MOD - [2009/03/12 14:45:32 | 000,135,168 | ---- | M] () -- C:\PROGRA~2\EPSONS~1\EVENTM~1\ASSIST~1\SCANAS~1\SCANEN~1.DLL
MOD - [2008/11/21 12:58:42 | 000,057,344 | ---- | M] () -- C:\PROGRA~2\EPSONS~1\EVENTM~1\ASSIST~1\SCANAS~1\SATWAIN.dll
========== Services (SafeList) ==========
SRV:64bit: - [2012/10/29 04:20:49 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:64bit: - [2012/10/20 08:43:53 | 006,746,280 | ---- | M] (Prevx) [Auto | Running] -- C:\Program Files\Prevx\prevx.exe -- (CSIScanner)
SRV:64bit: - [2012/09/20 10:10:47 | 002,367,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:64bit: - [2012/09/20 09:18:03 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:64bit: - [2012/09/20 07:32:59 | 000,169,984 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:64bit: - [2012/09/20 07:32:58 | 000,178,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:64bit: - [2012/09/20 07:31:18 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:64bit: - [2012/09/20 07:30:41 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:64bit: - [2012/07/26 04:08:33 | 000,025,088 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\mqsvc.exe -- (MSMQ)
SRV:64bit: - [2012/07/26 04:08:04 | 001,968,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:64bit: - [2012/07/26 04:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:64bit: - [2012/07/26 04:07:42 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:64bit: - [2012/07/26 04:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:64bit: - [2012/07/26 04:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:64bit: - [2012/07/26 04:06:36 | 000,463,872 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:64bit: - [2012/07/26 04:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:64bit: - [2012/07/26 04:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:64bit: - [2012/07/26 04:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:64bit: - [2012/07/26 04:06:00 | 000,438,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:64bit: - [2012/07/26 04:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:64bit: - [2012/07/26 04:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:64bit: - [2012/07/26 04:05:28 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:64bit: - [2012/07/26 04:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:64bit: - [2012/07/26 04:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent)
SRV:64bit: - [2012/07/26 04:05:04 | 000,187,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2012/07/26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:64bit: - [2012/07/26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:64bit: - [2012/07/26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:64bit: - [2012/07/26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:64bit: - [2012/07/26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:64bit: - [2012/07/26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:64bit: - [2012/05/29 16:19:44 | 000,035,680 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp)
SRV:64bit: - [2011/03/04 01:57:58 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
SRV - [2012/11/22 00:58:46 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/11/10 20:36:28 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/10/25 20:17:30 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012/10/11 12:17:59 | 002,312,216 | ---- | M] () [Auto | Running] -- C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe -- (Browser Manager)
SRV - [2012/10/10 19:29:14 | 000,143,928 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton 360\Norton 360\Engine\20.2.0.19\ccSvcHst.exe -- (N360)
SRV - [2012/09/23 19:43:34 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012/09/20 09:18:03 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2012/09/11 18:13:02 | 001,494,144 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programmi\Microsoft Office 15\ClientX64\integratedoffice.exe -- (OfficeSvc)
SRV - [2012/07/26 04:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
SRV - [2012/07/26 04:18:41 | 000,408,064 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS)
SRV - [2012/07/26 04:18:41 | 000,408,064 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (W3SVC)
SRV - [2012/07/26 04:17:52 | 000,060,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc)
SRV - [2012/07/05 17:41:46 | 003,048,136 | ---- | M] (Skype Technologies S.A.) [Disabled | Stopped] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012/06/23 17:18:38 | 005,132,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programmi\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2012/05/29 16:19:46 | 002,143,072 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
SRV - [2012/05/29 16:19:44 | 000,029,024 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp)
SRV - [2012/02/03 15:24:50 | 000,277,120 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe -- (ASUS InstantOn)
SRV - [2011/11/21 13:22:08 | 000,080,512 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
SRV - [2011/11/21 13:19:50 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2011/11/04 08:57:32 | 002,234,992 | ---- | M] (mobile concepts) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\MC Common\BoostService.exe -- (SpeedBoosterSvc)
SRV - [2011/11/04 08:57:30 | 005,663,856 | ---- | M] (mobile concepts) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\MC Common\AMDSrv.exe -- (MCDefragService)
SRV - [2011/10/01 00:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011/10/01 00:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2011/08/10 21:52:54 | 000,138,760 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Safe Web Lite\Engine\2.0.0.16\ccSvcHst.exe -- (NSL)
SRV - [2010/12/21 03:24:38 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2010/12/21 03:24:36 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2010/09/23 02:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Programmi\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV - [2010/03/18 10:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2007/12/17 04:00:00 | 000,163,840 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE -- (EPSON_EB_RPCV4_01)
SRV - [2007/06/15 11:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) [Auto | Running] -- C:\Windows\SysWOW64\bgsvcgen.exe -- (bgsvcgen)
SRV - [2007/01/11 04:02:00 | 000,126,464 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE -- (EPSON_PM_RPCV4_01)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2012/11/24 16:28:46 | 000,177,312 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2012/10/20 08:43:54 | 000,065,736 | ---- | M] (Prevx) [File_System | System | Running] -- C:\Windows\SysNative\Drivers\pxrts.sys -- (pxrts)
DRV:64bit: - [2012/10/20 08:43:54 | 000,036,384 | ---- | M] (Prevx) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pxscan.sys -- (pxscan)
DRV:64bit: - [2012/10/20 08:43:53 | 000,024,024 | ---- | M] (Prevx) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\pxkbf.sys -- (pxkbf)
DRV:64bit: - [2012/10/18 07:17:18 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc)
DRV:64bit: - [2012/10/12 09:08:01 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012/10/11 08:25:48 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor)
DRV:64bit: - [2012/10/11 08:13:54 | 000,194,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2012/10/11 08:13:49 | 000,058,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam)
DRV:64bit: - [2012/10/08 18:00:02 | 000,776,864 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\srtsp64.sys -- (SRTSP)
DRV:64bit: - [2012/10/03 18:40:36 | 001,133,216 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\SymEFA64.sys -- (SymEFA)
DRV:64bit: - [2012/10/03 18:40:20 | 000,493,216 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\SymDS64.sys -- (SymDS)
DRV:64bit: - [2012/10/03 18:19:14 | 000,168,096 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\ccSetx64.sys -- (ccSet_N360)
DRV:64bit: - [2012/09/20 08:55:33 | 000,445,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3)
DRV:64bit: - [2012/09/20 08:55:33 | 000,337,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI)
DRV:64bit: - [2012/09/20 08:55:33 | 000,212,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000)
DRV:64bit: - [2012/09/20 08:55:30 | 000,120,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:64bit: - [2012/09/20 08:55:29 | 000,028,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:64bit: - [2012/09/20 08:55:27 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2012/09/20 08:55:24 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2012/09/20 08:03:08 | 000,148,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM)
DRV:64bit: - [2012/09/20 07:09:11 | 000,031,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:64bit: - [2012/09/20 07:08:27 | 000,029,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid)
DRV:64bit: - [2012/09/06 19:05:14 | 000,432,800 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\symnets.sys -- (SymNetS)
DRV:64bit: - [2012/09/06 19:05:08 | 000,043,680 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\SymIMV.sys -- (SymIM)
DRV:64bit: - [2012/09/06 19:05:06 | 000,023,448 | R--- | M] (Symantec Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\SymELAM.sys -- (SymELAM)
DRV:64bit: - [2012/09/06 18:48:08 | 000,224,416 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\Ironx64.sys -- (SymIRON)
DRV:64bit: - [2012/09/06 18:40:52 | 000,037,496 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\N360x64\1402000.013\srtspx64.sys -- (SRTSPX)
DRV:64bit: - [2012/08/21 17:56:38 | 000,091,648 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\AtihdW86.sys -- (AtiHDAudioService)
DRV:64bit: - [2012/08/20 16:23:52 | 000,147,288 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:64bit: - [2012/08/01 03:03:18 | 003,618,304 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\athw8x.sys -- (athr)
DRV:64bit: - [2012/07/26 06:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012/07/26 06:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv)
DRV:64bit: - [2012/07/26 06:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:64bit: - [2012/07/26 06:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt)
DRV:64bit: - [2012/07/26 06:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor)
DRV:64bit: - [2012/07/26 06:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex)
DRV:64bit: - [2012/07/26 06:00:55 | 000,283,888 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport)
DRV:64bit: - [2012/07/26 06:00:55 | 000,077,552 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci)
DRV:64bit: - [2012/07/26 06:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis)
DRV:64bit: - [2012/07/26 06:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2012/07/26 06:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2012/07/26 06:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS)
DRV:64bit: - [2012/07/26 06:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2012/07/26 06:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:64bit: - [2012/07/26 06:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass)
DRV:64bit: - [2012/07/26 06:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2012/07/26 06:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware)
DRV:64bit: - [2012/07/26 06:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2012/07/26 06:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2012/07/26 05:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS)
DRV:64bit: - [2012/07/26 05:54:34 | 000,096,496 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS)
DRV:64bit: - [2012/07/26 05:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci)
DRV:64bit: - [2012/07/26 05:44:30 | 000,258,288 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter)
DRV:64bit: - [2012/07/26 05:36:15 | 000,034,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot)
DRV:64bit: - [2012/07/26 04:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2012/07/26 03:30:26 | 000,185,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mqac.sys -- (MQAC)
DRV:64bit: - [2012/07/26 03:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf)
DRV:64bit: - [2012/07/26 03:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:64bit: - [2012/07/26 03:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo)
DRV:64bit: - [2012/07/26 03:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender)
DRV:64bit: - [2012/07/26 03:27:58 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM)
DRV:64bit: - [2012/07/26 03:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter)
DRV:64bit: - [2012/07/26 03:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic)
DRV:64bit: - [2012/07/26 03:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime)
DRV:64bit: - [2012/07/26 03:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig)
DRV:64bit: - [2012/07/26 03:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:64bit: - [2012/07/26 03:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr)
DRV:64bit: - [2012/07/26 03:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd)
DRV:64bit: - [2012/07/26 03:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx)
DRV:64bit: - [2012/07/26 03:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx)
DRV:64bit: - [2012/07/26 03:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012/07/26 03:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum)
DRV:64bit: - [2012/07/26 03:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2012/07/26 03:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012/07/26 03:25:54 | 000,038,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c)
DRV:64bit: - [2012/07/26 03:25:26 | 000,203,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\Vid.sys -- (Vid)
DRV:64bit: - [2012/07/26 03:25:22 | 000,067,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\storvsp.sys -- (storvsp)
DRV:64bit: - [2012/07/26 03:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr)
DRV:64bit: - [2012/07/26 03:25:12 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmbusr.sys -- (vmbusr)
DRV:64bit: - [2012/07/26 03:25:12 | 000,066,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpcivsp.sys -- (vpcivsp)
DRV:64bit: - [2012/07/26 03:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:64bit: - [2012/07/26 03:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp)
DRV:64bit: - [2012/07/26 03:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu)
DRV:64bit: - [2012/07/25 23:53:22 | 011,926,528 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2012/06/29 03:00:48 | 000,360,448 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2012/06/02 15:31:31 | 000,100,864 | ---- | M] (Qualcomm Atheros Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\L1C63x64.sys -- (L1C)
DRV:64bit: - [2012/03/09 09:57:36 | 000,023,816 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\cpuz135_x64.sys -- (cpuz135)
DRV:64bit: - [2011/10/01 00:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Sftvolwin7.sys -- (Sftvol)
DRV:64bit: - [2011/10/01 00:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Sftplaywin7.sys -- (Sftplay)
DRV:64bit: - [2011/10/01 00:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Sftredirwin7.sys -- (Sftredir)
DRV:64bit: - [2011/10/01 00:30:16 | 000,765,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Sftfswin7.sys -- (Sftfs)
DRV:64bit: - [2011/08/09 00:38:05 | 000,167,048 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\NSTx64\0200000.010\ccSetx64.sys -- (ccSet_NST)
DRV:64bit: - [2011/07/29 12:54:56 | 000,016,776 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv)
DRV:64bit: - [2011/07/29 12:54:56 | 000,009,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv)
DRV:64bit: - [2011/05/13 23:37:54 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2011/04/26 04:07:36 | 000,557,848 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010/12/31 17:30:10 | 000,138,024 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\ETD.sys -- (ETD)
DRV:64bit: - [2010/10/19 23:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2009/05/18 12:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2008/05/23 16:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WimFltr.sys -- (WimFltr)
DRV:64bit: - [2006/08/25 13:36:52 | 000,039,208 | ---- | M] (B.H.A Corporation) [Kernel | System | Running] -- C:\WINDOWS\SysNative\drivers\cdrbsdrv.sys -- (cdrbsdrv)
DRV - [2012/11/23 16:36:10 | 000,513,184 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\IPSDefs\20121123.001\IDSviA64.sys -- (IDSVia64)
DRV - [2012/11/23 01:00:00 | 002,084,000 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\VirusDefs\20121123.020\ex64.sys -- (NAVEX15)
DRV - [2012/11/23 01:00:00 | 000,126,112 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\VirusDefs\20121123.020\eng64.sys -- (NAVENG)
DRV - [2012/11/18 01:48:50 | 000,138,912 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2012/10/24 00:34:23 | 001,384,608 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\BASHDefs\20121106.001\BHDrvx64.sys -- (BHDrvx64)
DRV - [2012/09/29 07:26:46 | 000,484,512 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2011/10/31 14:00:20 | 000,011,856 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
DRV - [2011/09/07 08:55:04 | 000,017,536 | ---- | M] (ASUS) [Kernel | System | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys -- (ATKWMIACPIIO_)
DRV - [2011/07/29 12:54:56 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv)
DRV - [2011/07/29 12:54:56 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv)
DRV - [2009/07/02 16:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.claro-sea...0002eeddef5ae3e
IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://forum.mozillaitalia.org/ind [Binary data over 200 bytes]
IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\..\SearchScopes,DefaultScope = {0EBB234C-42D8-48A5-A996-DC65E2E0B99D}
IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\..\SearchScopes\{0EBB234C-42D8-48A5-A996-DC65E2E0B99D}: "URL" = http://www.google.it...fca69c98b5d77d7
IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-135823994-239325686-984002518-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
========== FireFox ==========
FF - prefs.js..extensions.enabledAddons: %7Be4a8a97b-f2ed-450b-b12d-ee082ba24781%7D:1.5
FF - prefs.js..extensions.enabledAddons: text2voice%40vik.josh:1.10
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_11_5_502_110.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.3: D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\ZEON/PDF,version=2.0: D:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: D:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012/07/22 10:46:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\coFFPlgn\ [2012/11/24 17:14:37 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\IPSFFPlgn\ [2012/11/24 16:32:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/11/24 16:08:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 13.0.1\extensions\\Components: D:\Program Files (x86)\Mozilla Thunderbird\components [2012/11/01 18:33:11 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{b64982b1-d112-42b5-b1e4-d3867c4533f8}: C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension [2012/11/18 04:27:03 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 16.0.2\extensions\\Components: D:\Program Files (x86)\Mozilla Thunderbird\components [2012/11/01 18:33:11 | 000,000,000 | ---D | M]
[2012/07/01 08:08:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paul\AppData\Roaming\mozilla\Extensions
[2012/11/24 09:37:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paul\AppData\Roaming\mozilla\Firefox\Profiles\f86jyhcc.default-1353537215881\extensions
[2012/11/24 09:37:23 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Paul\AppData\Roaming\mozilla\Firefox\Profiles\f86jyhcc.default-1353537215881\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2012/11/22 01:23:10 | 000,061,608 | ---- | M] () (No name found) -- C:\Users\Paul\AppData\Roaming\mozilla\firefox\profiles\f86jyhcc.default-1353537215881\extensions\[email protected]
[2012/11/24 09:37:14 | 000,804,627 | ---- | M] () (No name found) -- C:\Users\Paul\AppData\Roaming\mozilla\firefox\profiles\f86jyhcc.default-1353537215881\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2012/11/22 01:23:10 | 000,243,496 | ---- | M] () (No name found) -- C:\Users\Paul\AppData\Roaming\mozilla\firefox\profiles\f86jyhcc.default-1353537215881\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
[2012/11/24 16:08:46 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012/11/22 00:58:43 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012/11/20 07:17:00 | 000,262,112 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/11/20 11:04:28 | 000,001,606 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazon-it.xml
[2012/11/20 11:04:28 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/11/20 11:04:28 | 000,000,957 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-it.xml
[2012/11/20 11:04:28 | 000,001,030 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\hoepli.xml
[2012/11/20 11:04:28 | 000,001,395 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-it.xml
[2012/11/20 11:04:28 | 000,001,166 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-it.xml
========== Chrome ==========
CHR - homepage:
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage:
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\pdf.dll
CHR - plugin: Application Manager (Enabled) = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph\1.0_0\spext.dll
CHR - plugin: Freemake np-plugin for google chrome (Enabled) = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj\1.0.0_0\npFreemake.dll
CHR - plugin: Norton Confidential (Enabled) = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.6.10_0\npcoplgn.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = D:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = D:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = D:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = D:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = D:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = D:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = D:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: RIM Handheld Application Loader (Enabled) = C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Disabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Java™ Platform SE 7 U9 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Microsoft Office 2013 (Enabled) = C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL
CHR - plugin: Shockwave Flash (Enabled) = C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll
CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\windows\SysWOW64\npDeployJava1.dll
CHR - plugin: DocuCom PDF Plus (Enabled) = D:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll
CHR - plugin: VLC Web Plugin (Enabled) = D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - Extension: Google Drive = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: GreaseGoogle = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\apeeedokdcajckokidhdkbkflkpfpgko\1.61_0\
CHR - Extension: YouTube = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Ricerca Google = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Freemake Video Converter = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj\1.0.0_0\
CHR - Extension: Norton Identity Protection = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.6.10_0\
CHR - Extension: Norton Identity Protection = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.2.0.18_0\
CHR - Extension: Tastiera virtuale (di Google) = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpphfcjpaldmedbbomcdhgonmhjngfig\0.9.8.8_0\
CHR - Extension: Settings Protector = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph\1.0_0\
CHR - Extension: Gmail = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: OneClickDownload = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.2_0\
O1 HOSTS File: ([2012/07/26 06:26:49 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts
O2:64bit: - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Microsoft SPFS Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Norton 360\Engine\20.2.0.19\coIEPlg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Norton 360\Engine\20.2.0.19\IPS\IPSBHO.DLL (Symantec Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programmi\Microsoft Office 15\root\office15\urlredir.dll (Microsoft Corporation)
O2 - BHO: (Microsoft SPFS Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Programmi\Microsoft Office 15\root\office15\grooveex.dll (Microsoft Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Norton 360\Engine\20.2.0.19\coIEPlg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Alcor Micro Corp.)
O4:64bit: - HKLM..\Run: [ETDCtrl] C:\Programmi\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
O4:64bit: - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [IntelliType Pro] c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe (Research In Motion Limited)
O4 - HKLM..\Run: [SonicMasterTray] C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe (Virage Logic Corporation / Sonic Focus)
O4 - HKU\S-1-5-21-135823994-239325686-984002518-1000..\Run: [Akamai NetSession Interface] C:\Users\Paul\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKU\S-1-5-21-135823994-239325686-984002518-1000..\Run: [EPSON SX510W Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFIE.EXE /FU "C:\Windows\TEMP\E_SAD9F.tmp" /EF "HKCU" File not found
O4 - HKU\S-1-5-21-135823994-239325686-984002518-1000..\Run: [EPSON SX510W Series (Copia 2)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFIE.EXE /FU "C:\Windows\TEMP\E_S1862.tmp" /EF "HKCU" File not found
O4 - HKU\S-1-5-21-135823994-239325686-984002518-1000..\Run: [Minimem] D:\Program Files (x86)\Kerkia\Minimem\minimem.exe (Kerkia)
O4 - HKU\S-1-5-21-135823994-239325686-984002518-1000..\Run: [SkyDrive] c:\users\paul\appdata\local\microsoft\skydrive\skydrive.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-135823994-239325686-984002518-1000..\Run: [UIWatcher] D:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 4\UIWatcher.exe (ashampoo GmbH & Co. KG)
O4 - Startup: C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Start Prism HUD.lnk = D:\Program Files (x86)\Prism HUD\prism.exe (Util's Haven)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-135823994-239325686-984002518-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O7 - HKU\S-1-5-21-135823994-239325686-984002518-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 00 00 01 00 [binary data]
O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
O8:64bit: - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
O8:64bit: - Extra context menu item: Traduci pagina con Google - C:\ProgramData\TuneUp Software\TuneUp Utilities 2012\Web\gtranslate.htm ()
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: Traduci pagina con Google - C:\ProgramData\TuneUp Software\TuneUp Utilities 2012\Web\gtranslate.htm ()
O9:64bit: - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Microsoft Lync add-on - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Microsoft Lync add-on - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
O9:64bit: - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programmi\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programmi\Microsoft Office 15\root\office15\onbttnie.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programmi\Microsoft Office 15\root\office15\onbttnie.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programmi\Microsoft Office 15\root\office15\onbttnielinkednotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programmi\Microsoft Office 15\root\office15\onbttnielinkednotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programmi\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-135823994-239325686-984002518-1000\..Trusted Domains: hijackthis.de ([www] https in Siti attendibili)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 193.70.152.15 212.52.97.15 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{39069E62-4E84-4576-B0D1-97E4429FCA4A}: DhcpNameServer = 193.70.152.15 212.52.97.15 192.168.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\osf - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Programmi\Microsoft Office 15\root\office15\msosb.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (c:\progra~3\browse~1\23796~1.11\{16cdf~1\browse~1.dll) - c:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll ()
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27:64bit: - HKLM IFEO\isuspm.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\itunes.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\pdfreader.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\skype.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\soda 3d pdf reader.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\x-lite.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\isuspm.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\itunes.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\pdfreader.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\skype.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\soda 3d pdf reader.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\x-lite.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O30 - LSA: Security Packages - (livessp) - File not found
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
NetSvcs:64bit: wlidsvc - C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
NetSvcs:64bit: DsmSvc - C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
NetSvcs:64bit: NcaSvc - C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
NetSvcs:64bit: SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
MsConfig:64bit - StartUpFolder: C:^Users^Paul^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Battery Doubler.lnk - D:\Program Files (x86)\Dachshund Software\Battery Doubler\Battery Doubler.exe - ()
MsConfig:64bit - StartUpReg: ACMON - hkey= - key= - C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUS)
MsConfig:64bit - StartUpReg: Adobe ARM - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: ASUS Screen Saver Protector - hkey= - key= - C:\Windows\AsScrPro.exe (ASUS)
MsConfig:64bit - StartUpReg: CLMLServer - hkey= - key= - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
MsConfig:64bit - StartUpReg: RtHDVCpl - hkey= - key= - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
MsConfig:64bit - StartUpReg: X-Lite - hkey= - key= - D:\Program Files (x86)\CounterPath\X-Lite\X-Lite.exe (CounterPath)
MsConfig:64bit - State: "bootini" - Reg Error: Key error.
MsConfig:64bit - State: "services" - Reg Error: Key error.
MsConfig:64bit - State: "startup" - Reg Error: Key error.
SafeBootMin:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: BasicDisplay.sys - C:\Windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootMin:64bit: BasicRender.sys - C:\Windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation)
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootMin:64bit: EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootMin:64bit: LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootMin:64bit: Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: TBS - Service
SafeBootMin:64bit: vmms - Service
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin:64bit: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: TBS - Service
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: BasicDisplay.sys - C:\Windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootNet:64bit: BasicRender.sys - C:\Windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation)
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootNet:64bit: EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootNet:64bit: LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootNet:64bit: Messenger - Service
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootNet:64bit: netprofm - C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdpencdd.sys - Driver
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: SmartcardSimulator - Driver
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: TBS - Service
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: VaultSvc - C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation)
SafeBootNet:64bit: VirtualSmartcardReader - Driver
SafeBootNet:64bit: vmms - Service
SafeBootNet:64bit: Wcmsvc - C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation)
SafeBootNet:64bit: WudfUsbccidDriver - Driver
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet:64bit: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdpencdd.sys - Driver
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: SmartcardSimulator - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TBS - Service
SafeBootNet: TDI - Driver Group
SafeBootNet: VirtualSmartcardReader - Driver
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {74166507-F39E-305E-A972-2C3478E47350} - .NET Framework
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U %SystemRoot%\System32\shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {3A8403F3-90B5-35DC-8926-EB9B907209F9} - .NET Framework
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5A604D2C-E968-429B-8327-62B5CE52126D} - .NET Framework
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
Drivers32:64bit: aux - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: aux1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midimapper - midimap.dll (Microsoft Corporation)
Drivers32:64bit: mixer - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: msacm.imaadpcm - imaadp32.acm (Microsoft Corporation)
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: msacm.msadpcm - msadp32.acm (Microsoft Corporation)
Drivers32:64bit: msacm.msg711 - msg711.acm (Microsoft Corporation)
Drivers32:64bit: msacm.msgsm610 - msgsm32.acm (Microsoft Corporation)
Drivers32:64bit: MSVideo8 - VfWWDM32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.i420 - iyuv_32.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.IYUV - iyuv_32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.mrle - msrle32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.msvc - msvidc32.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.UYVY - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.YUY2 - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.YVU9 - tsbyuv.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.YVYU - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: wave - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wavemapper - msacm32.drv (Microsoft Corporation)
Drivers32: aux - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: aux1 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi1 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midimapper - C:\WINDOWS\SysWow64\midimap.dll (Microsoft Corporation)
Drivers32: mixer - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer1 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: msacm.imaadpcm - C:\WINDOWS\SysWow64\imaadp32.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.msadpcm - C:\WINDOWS\SysWow64\msadp32.acm (Microsoft Corporation)
Drivers32: msacm.msg711 - C:\WINDOWS\SysWow64\msg711.acm (Microsoft Corporation)
Drivers32: msacm.msgsm610 - C:\WINDOWS\SysWow64\msgsm32.acm (Microsoft Corporation)
Drivers32: msacm.siren - C:\WINDOWS\SysWow64\sirenacm.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.i420 - C:\WINDOWS\SysWow64\iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.iyuv - C:\WINDOWS\SysWow64\iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.mrle - C:\WINDOWS\SysWow64\msrle32.dll (Microsoft Corporation)
Drivers32: vidc.msvc - C:\WINDOWS\SysWow64\msvidc32.dll (Microsoft Corporation)
Drivers32: vidc.uyvy - C:\WINDOWS\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yuy2 - C:\WINDOWS\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvu9 - C:\WINDOWS\SysWow64\tsbyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvyu - C:\WINDOWS\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: wave - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave1 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wavemapper - C:\WINDOWS\SysWow64\msacm32.drv (Microsoft Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 60 Days ==========
[2012/11/24 16:45:58 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\NPE
[2012/11/24 16:30:53 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
[2012/11/24 16:23:22 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
[2012/11/24 10:25:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\appmgmt
[2012/11/24 09:42:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
[2012/11/23 08:03:03 | 000,000,000 | ---D | C] -- C:\HijackThis
[2012/11/22 00:58:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2012/11/22 00:48:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2012/11/22 00:46:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
[2012/11/22 00:46:35 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSCOMCT2.OCX
[2012/11/22 00:46:35 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSMAPI32.OCX
[2012/11/22 00:46:35 | 000,100,864 | ---- | C] (pdfforge GbR) -- C:\WINDOWS\SysNative\pdfcmon.dll
[2012/11/22 00:46:34 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSCMCIT.DLL
[2012/11/22 00:46:34 | 000,122,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VB6IT.DLL
[2012/11/22 00:46:34 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSCC2IT.DLL
[2012/11/22 00:46:33 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSMPIDE.DLL
[2012/11/21 23:33:41 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\Dati precedenti di Firefox
[2012/11/20 08:59:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP
[2012/11/20 08:58:25 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2012/11/20 08:48:56 | 000,000,000 | ---D | C] -- C:\AMD
[2012/11/19 02:49:50 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Apps
[2012/11/18 21:11:01 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Malwarebytes
[2012/11/18 21:10:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/11/18 21:10:36 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\SysNative\drivers\mbam.sys
[2012/11/18 19:02:19 | 000,000,000 | R--D | C] -- C:\WINDOWS\BrowserChoice
[2012/11/18 17:16:04 | 002,367,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSService.dll
[2012/11/18 17:16:03 | 013,640,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll
[2012/11/18 17:15:53 | 003,265,256 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\SysNative\drivers\evbda.sys
[2012/11/18 17:15:49 | 014,259,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll
[2012/11/18 17:15:47 | 010,791,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll
[2012/11/18 17:15:44 | 001,131,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
[2012/11/18 17:15:42 | 002,397,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcMon.exe
[2012/11/18 17:15:38 | 003,847,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d2d1.dll
[2012/11/18 17:15:37 | 003,964,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinSAT.exe
[2012/11/18 17:15:36 | 011,875,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
[2012/11/18 17:15:34 | 000,533,224 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\SysNative\drivers\bxvbda.sys
[2012/11/18 17:15:33 | 001,513,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vssapi.dll
[2012/11/18 17:15:32 | 001,825,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll
[2012/11/18 17:15:29 | 001,739,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RacEngn.dll
[2012/11/18 17:15:29 | 001,019,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MsSpellCheckingFacility.dll
[2012/11/18 17:15:28 | 002,219,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d10warp.dll
[2012/11/18 17:15:28 | 001,304,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Streaming.dll
[2012/11/18 17:15:28 | 001,096,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpmde.dll
[2012/11/18 17:15:28 | 000,757,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uDWM.dll
[2012/11/18 17:15:28 | 000,389,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MMDevAPI.dll
[2012/11/18 17:15:27 | 001,146,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mcmde.dll
[2012/11/18 17:15:27 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provcore.dll
[2012/11/18 17:15:26 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ncsi.dll
[2012/11/18 17:15:25 | 001,145,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winmde.dll
[2012/11/18 17:15:25 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinSATAPI.dll
[2012/11/18 17:15:25 | 000,543,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlroamextension.dll
[2012/11/18 17:15:23 | 000,995,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Streaming.dll
[2012/11/18 17:15:22 | 001,590,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WindowsCodecs.dll
[2012/11/18 17:15:22 | 000,634,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apphelp.dll
[2012/11/18 17:15:22 | 000,488,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\usbport.sys
[2012/11/18 17:15:22 | 000,468,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
[2012/11/18 17:15:22 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IPHLPAPI.DLL
[2012/11/18 17:15:21 | 001,743,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\combase.dll
[2012/11/18 17:15:21 | 000,709,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MsSpellCheckingFacility.dll
[2012/11/18 17:15:21 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFPlay.dll
[2012/11/18 17:15:20 | 000,604,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dnsapi.dll
[2012/11/18 17:15:20 | 000,420,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWAHost.exe
[2012/11/18 17:15:19 | 000,866,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinTypes.dll
[2012/11/18 17:15:19 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fveapi.dll
[2012/11/18 17:15:19 | 000,640,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSShared.dll
[2012/11/18 17:15:19 | 000,631,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserLanguagesCpl.dll
[2012/11/18 17:15:19 | 000,545,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\taskeng.exe
[2012/11/18 17:15:19 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidcredprov.dll
[2012/11/18 17:15:19 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rascfg.dll
[2012/11/18 17:15:18 | 000,702,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drvstore.dll
[2012/11/18 17:15:18 | 000,617,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll
[2012/11/18 17:15:18 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsvr.dll
[2012/11/18 17:15:18 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rascfg.dll
[2012/11/18 17:15:17 | 001,400,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\propsys.dll
[2012/11/18 17:15:17 | 000,337,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBXHCI.SYS
[2012/11/18 17:15:17 | 000,332,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wintrust.dll
[2012/11/18 17:15:17 | 000,249,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnprv.dll
[2012/11/18 17:15:17 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcdsrv.dll
[2012/11/18 17:15:16 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VAN.dll
[2012/11/18 17:15:16 | 000,445,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBHUB3.SYS
[2012/11/18 17:15:16 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlroamextension.dll
[2012/11/18 17:15:16 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\services.exe
[2012/11/18 17:15:16 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinSATAPI.dll
[2012/11/18 17:15:16 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fveapibase.dll
[2012/11/18 17:15:16 | 000,203,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSClient.dll
[2012/11/18 17:15:15 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appwiz.cpl
[2012/11/18 17:15:15 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
[2012/11/18 17:15:15 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bisrv.dll
[2012/11/18 17:15:14 | 000,891,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winmde.dll
[2012/11/18 17:15:14 | 000,707,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.dll
[2012/11/18 17:15:14 | 000,548,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\drvstore.dll
[2012/11/18 17:15:14 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSShared.dll
[2012/11/18 17:15:14 | 000,291,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Connectivity.dll
[2012/11/18 17:15:14 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhengine.dll
[2012/11/18 17:15:14 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vdsutil.dll
[2012/11/18 17:15:14 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSSync.dll
[2012/11/18 17:15:14 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSClient.dll
[2012/11/18 17:15:14 | 000,120,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\msgpioclx.sys
[2012/11/18 17:15:14 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\psmsrv.dll
[2012/11/18 17:15:14 | 000,028,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\msgpiowin32.sys
[2012/11/18 17:15:13 | 000,670,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\appwiz.cpl
[2012/11/18 17:15:13 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWAHost.exe
[2012/11/18 17:15:13 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFPlay.dll
[2012/11/18 17:15:13 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSSync.dll
[2012/11/18 17:15:13 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PackageStateRoaming.dll
[2012/11/18 17:15:12 | 001,369,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RacEngn.dll
[2012/11/18 17:15:12 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpncore.dll
[2012/11/18 17:15:12 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmredir.dll
[2012/11/18 17:15:12 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TpmTasks.dll
[2012/11/18 17:15:11 | 000,533,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\provcore.dll
[2012/11/18 17:15:11 | 000,390,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.BackgroundTransfer.dll
[2012/11/18 17:15:11 | 000,256,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvproc.dll
[2012/11/18 17:15:11 | 000,228,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ProximityService.dll
[2012/11/18 17:15:11 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PackageStateRoaming.dll
[2012/11/18 17:15:11 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\setbcdlocale.dll
[2012/11/18 17:15:10 | 002,016,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\batmeter.dll
[2012/11/18 17:15:10 | 002,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\batmeter.dll
[2012/11/18 17:15:10 | 001,247,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\combase.dll
[2012/11/18 17:15:10 | 000,560,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserLanguagesCpl.dll
[2012/11/18 17:15:10 | 000,509,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.dll
[2012/11/18 17:15:10 | 000,480,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VAN.dll
[2012/11/18 17:15:10 | 000,449,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll
[2012/11/18 17:15:10 | 000,411,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\FWPKCLNT.SYS
[2012/11/18 17:15:10 | 000,148,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\tpm.sys
[2012/11/18 17:15:10 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\microsoft-windows-kernel-power-events.dll
[2012/11/18 17:15:10 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncHost.exe
[2012/11/18 17:15:10 | 000,062,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dumpfve.sys
[2012/11/18 17:15:10 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\perfdisk.dll
[2012/11/18 17:15:10 | 000,027,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\avrt.dll
[2012/11/18 17:15:09 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll
[2012/11/18 17:15:09 | 000,303,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
[2012/11/18 17:15:09 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsvr.dll
[2012/11/18 17:15:09 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidcredprov.dll
[2012/11/18 17:15:09 | 000,212,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UCX01000.SYS
[2012/11/18 17:15:09 | 000,195,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Connectivity.dll
[2012/11/18 17:15:09 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\perfdisk.dll
[2012/11/18 17:15:09 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\svchost.exe
[2012/11/18 17:15:09 | 000,021,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\usbd.sys
[2012/11/18 17:15:08 | 001,342,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\user32.dll
[2012/11/18 17:15:08 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.BackgroundTransfer.dll
[2012/11/18 17:15:08 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winsrv.dll
[2012/11/18 17:15:08 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\storewuauth.dll
[2012/11/18 17:15:08 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhevents.dll
[2012/11/18 17:15:07 | 000,699,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.dll
[2012/11/18 17:15:07 | 000,627,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lpksetup.exe
[2012/11/18 17:15:07 | 000,437,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfh264enc.dll
[2012/11/18 17:15:07 | 000,413,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfh264enc.dll
[2012/11/18 17:15:07 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfreadwrite.dll
[2012/11/18 17:15:07 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvproc.dll
[2012/11/18 17:15:07 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfreadwrite.dll
[2012/11/18 17:15:07 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll
[2012/11/18 17:15:07 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DevPropMgr.dll
[2012/11/18 17:15:07 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwm.exe
[2012/11/18 17:15:07 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncHost.exe
[2012/11/18 17:15:07 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\perfnet.dll
[2012/11/18 17:15:06 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhcfg.dll
[2012/11/18 17:15:06 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drvinst.exe
[2012/11/18 17:15:06 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\drvinst.exe
[2012/11/18 17:15:05 | 002,066,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d11.dll
[2012/11/18 17:15:05 | 001,701,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3d11.dll
[2012/11/18 17:15:05 | 000,588,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webio.dll
[2012/11/18 17:15:05 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxgi.dll
[2012/11/18 17:15:05 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\perfos.dll
[2012/11/18 17:15:05 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll
[2012/11/18 17:15:05 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DAFWSD.dll
[2012/11/18 17:15:05 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
[2012/11/18 17:15:05 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhsrchapi.dll
[2012/11/18 17:15:05 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\perfnet.dll
[2012/11/18 17:15:04 | 000,417,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webio.dll
[2012/11/18 17:15:04 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhcat.dll
[2012/11/18 17:15:04 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemEventsBrokerServer.dll
[2012/11/18 17:15:04 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TimeBrokerServer.dll
[2012/11/18 17:15:04 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll
[2012/11/18 17:15:04 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CscMig.dll
[2012/11/18 17:15:04 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnApi.dll
[2012/11/18 17:15:04 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhsvc.dll
[2012/11/18 17:15:04 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafWCN.dll
[2012/11/18 17:15:04 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WcnApi.dll
[2012/11/18 17:15:04 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lpremove.exe
[2012/11/18 17:15:03 | 000,163,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sspicli.dll
[2012/11/18 17:15:03 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhmanagew.exe
[2012/11/18 17:15:03 | 000,137,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhshl.dll
[2012/11/18 17:15:03 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fdWCN.dll
[2012/11/18 17:15:03 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasdiag.dll
[2012/11/18 17:15:03 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vsstrace.dll
[2012/11/18 17:15:03 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhsrchph.dll
[2012/11/18 17:15:03 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhlisten.dll
[2012/11/18 17:15:03 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasdiag.dll
[2012/11/18 17:15:03 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhcleanup.dll
[2012/11/18 17:15:03 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ndptsp.tsp
[2012/11/18 17:15:03 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasmxs.dll
[2012/11/18 17:15:03 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhtask.dll
[2012/11/18 17:15:03 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cryptdlg.dll
[2012/11/18 17:15:03 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnEapAuthProxy.dll
[2012/11/18 17:15:03 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sdbinst.exe
[2012/11/18 17:15:03 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cryptdlg.dll
[2012/11/18 17:15:03 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vdsldr.exe
[2012/11/18 17:15:03 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sdbinst.exe
[2012/11/18 17:15:02 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhautoplay.dll
[2012/11/18 17:15:02 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ndptsp.tsp
[2012/11/18 17:15:02 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\perfctrs.dll
[2012/11/18 17:15:02 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\perfctrs.dll
[2012/11/18 17:15:02 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\perfproc.dll
[2012/11/18 17:15:02 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasmxs.dll
[2012/11/18 17:15:02 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasser.dll
[2012/11/18 17:15:02 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnEapPeerProxy.dll
[2012/11/18 17:15:02 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasser.dll
[2012/11/18 17:15:01 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\perfproc.dll
[2012/11/18 17:15:01 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\perfos.dll
[2012/11/18 17:15:00 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\kmddsp.tsp
[2012/11/18 17:15:00 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kmddsp.tsp
[2012/11/18 17:15:00 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sspisrv.dll
[2012/11/18 17:14:59 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vds_ps.dll
[2012/11/18 17:14:59 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\vds_ps.dll
[2012/11/18 17:14:59 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LangCleanupSysprepAction.dll
[2012/11/18 17:14:59 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhsvcctl.dll
[2012/11/18 17:14:59 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\eventcls.dll
[2012/11/18 17:14:59 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\eventcls.dll
[2012/11/18 17:14:59 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MUILanguageCleanup.dll
[2012/11/18 17:14:59 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\spwmp.dll
[2012/11/18 17:14:59 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\spwmp.dll
[2012/11/18 17:14:59 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lpksetupproxyserv.dll
[2012/11/18 17:14:59 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shimeng.dll
[2012/11/18 17:14:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdxm.ocx
[2012/11/18 17:14:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxmasf.dll
[2012/11/18 17:14:58 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdd.dll
[2012/11/18 17:14:58 | 000,031,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BthAvrcpTg.sys
[2012/11/18 17:14:58 | 000,029,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BthhfHid.sys
[2012/11/18 17:14:58 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BtaMPM.sys
[2012/11/18 17:14:58 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdxm.ocx
[2012/11/18 17:14:58 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dxmasf.dll
[2012/11/18 17:14:57 | 009,374,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmploc.DLL
[2012/11/18 17:14:57 | 009,374,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmploc.DLL
[2012/11/18 17:14:41 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\synceng.dll
[2012/11/18 17:14:41 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\synceng.dll
[2012/11/18 17:14:32 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\newdev.dll
[2012/11/18 17:14:32 | 000,275,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\newdev.dll
[2012/11/18 17:14:32 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\newdev.exe
[2012/11/18 17:14:32 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ndadmin.exe
[2012/11/18 17:14:32 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\newdev.exe
[2012/11/18 17:14:32 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ndadmin.exe
[2012/11/18 17:14:31 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanprotdim.dll
[2012/11/18 17:11:16 | 000,017,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvcr100_clr0400.dll
[2012/11/18 17:11:12 | 000,017,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvcr100_clr0400.dll
[2012/11/18 17:10:09 | 001,619,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wucltux.dll
[2012/11/18 17:10:09 | 000,767,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
[2012/11/18 17:10:09 | 000,621,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
[2012/11/18 17:10:09 | 000,318,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ubpm.dll
[2012/11/18 17:10:09 | 000,251,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WUSettingsProvider.dll
[2012/11/18 17:10:09 | 000,246,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ubpm.dll
[2012/11/18 17:10:09 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuwebv.dll
[2012/11/18 17:10:09 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuwebv.dll
[2012/11/18 17:10:09 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wudriver.dll
[2012/11/18 17:10:09 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wudriver.dll
[2012/11/18 17:10:09 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\taskhost.exe
[2012/11/18 17:10:09 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\taskhostex.exe
[2012/11/18 17:10:09 | 000,058,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuauclt.exe
[2012/11/18 17:10:09 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups2.dll
[2012/11/18 17:10:09 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups.dll
[2012/11/18 17:10:09 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapp.exe
[2012/11/18 17:10:09 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapp.exe
[2012/11/18 17:10:09 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wups.dll
[2012/11/18 17:10:09 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuaext.dll
[2012/11/18 17:10:08 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wushareduxresources.dll
[2012/11/18 17:10:07 | 001,526,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
[2012/11/18 17:10:06 | 001,451,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
[2012/11/18 17:10:06 | 000,522,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AUDIOKSE.dll
[2012/11/18 17:10:06 | 000,490,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll
[2012/11/18 17:10:06 | 000,463,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AUDIOKSE.dll
[2012/11/18 17:10:06 | 000,447,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll
[2012/11/18 17:10:06 | 000,267,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EncDump.dll
[2012/11/18 17:10:06 | 000,253,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\audiodg.exe
[2012/11/18 17:10:06 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll
[2012/11/18 17:10:04 | 003,244,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll
[2012/11/18 17:10:04 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmstormod.dll
[2012/11/18 17:10:04 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmstormod.dll
[2012/11/18 17:10:04 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dskquota.dll
[2012/11/18 17:10:04 | 000,027,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\rdpvideominiport.sys
[2012/11/18 17:10:03 | 001,347,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmclient.dll
[2012/11/18 17:10:03 | 000,987,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmclient.dll
[2012/11/18 17:10:03 | 000,652,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmscan.dll
[2012/11/18 17:10:03 | 000,487,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmscan.dll
[2012/11/18 17:10:03 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srm.dll
[2012/11/18 17:10:03 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srm.dll
[2012/11/18 17:10:03 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll
[2012/11/18 17:10:03 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmshell.dll
[2012/11/18 17:10:03 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\adrclient.dll
[2012/11/18 17:10:03 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmshell.dll
[2012/11/18 17:10:03 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\adrclient.dll
[2012/11/18 17:10:03 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmtrace.dll
[2012/11/18 17:10:03 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dskquota.dll
[2012/11/18 17:10:03 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmtrace.dll
[2012/11/18 17:10:03 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rfxvmt.dll
[2012/11/18 17:10:03 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srm_ps.dll
[2012/11/18 17:10:03 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srm_ps.dll
[2012/11/18 17:09:56 | 006,972,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2012/11/18 17:09:55 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
[2012/11/18 17:09:55 | 000,396,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hal.dll
[2012/11/18 17:09:53 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
[2012/11/18 17:09:53 | 008,856,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll
[2012/11/18 17:09:52 | 002,302,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll
[2012/11/18 17:09:52 | 002,146,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll
[2012/11/18 17:09:52 | 002,033,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll
[2012/11/18 17:09:52 | 000,069,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pdc.sys
[2012/11/18 17:09:51 | 001,172,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetsrc.dll
[2012/11/18 17:09:51 | 000,929,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetsrc.dll
[2012/11/18 17:09:51 | 000,677,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetcore.dll
[2012/11/18 17:09:51 | 000,673,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
[2012/11/18 17:09:51 | 000,568,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetcore.dll
[2012/11/18 17:09:51 | 000,513,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
[2012/11/18 17:09:50 | 001,048,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll
[2012/11/18 17:09:50 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll
[2012/11/18 17:09:12 | 003,966,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2012/11/18 17:09:12 | 003,554,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll
[2012/11/18 17:09:09 | 002,116,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll
[2012/11/18 17:09:08 | 002,206,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll
[2012/11/18 17:09:07 | 002,764,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll
[2012/11/18 17:09:07 | 002,380,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2012/11/18 17:09:06 | 002,115,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe
[2012/11/18 17:09:06 | 001,610,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll
[2012/11/18 17:09:06 | 001,395,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Immersive.dll
[2012/11/18 17:09:06 | 000,945,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\resetengmig.dll
[2012/11/18 17:09:05 | 001,841,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll
[2012/11/18 17:09:05 | 001,265,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
[2012/11/18 17:09:05 | 001,226,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Immersive.dll
[2012/11/18 17:09:05 | 000,907,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uxtheme.dll
[2012/11/18 17:09:05 | 000,793,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll
[2012/11/18 17:09:05 | 000,590,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SHCore.dll
[2012/11/18 17:09:05 | 000,579,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StructuredQuery.dll
[2012/11/18 17:09:04 | 001,403,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi
[2012/11/18 17:09:04 | 001,267,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe
[2012/11/18 17:09:04 | 001,009,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll
[2012/11/18 17:09:04 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.dll
[2012/11/18 17:09:03 | 000,373,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe
[2012/11/18 17:09:02 | 001,217,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi
[2012/11/18 17:09:02 | 001,093,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe
[2012/11/18 17:09:02 | 000,612,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll
[2012/11/18 17:09:02 | 000,561,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
[2012/11/18 17:09:02 | 000,460,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SHCore.dll
[2012/11/18 17:09:02 | 000,435,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssph.dll
[2012/11/18 17:09:01 | 000,517,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe
[2012/11/18 17:09:01 | 000,441,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\netio.sys
[2012/11/18 17:09:00 | 001,045,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usercpl.dll
[2012/11/18 17:09:00 | 000,503,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll
[2012/11/18 17:09:00 | 000,411,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
[2012/11/18 17:09:00 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.dll
[2012/11/18 17:09:00 | 000,336,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Classpnp.sys
[2012/11/18 17:09:00 | 000,286,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\portcls.sys
[2012/11/18 17:09:00 | 000,194,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdbus.sys
[2012/11/18 17:09:00 | 000,154,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Storage.Compression.dll
[2012/11/18 17:09:00 | 000,058,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dam.sys
[2012/11/18 17:08:58 | 000,962,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usercpl.dll
[2012/11/18 17:08:58 | 000,505,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SpaceControl.dll
[2012/11/18 17:08:58 | 000,273,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanapi.dll
[2012/11/18 17:08:58 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dhcpcore6.dll
[2012/11/18 17:08:58 | 000,204,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dhcpcore6.dll
[2012/11/18 17:08:57 | 000,470,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanmsm.dll
[2012/11/18 17:08:57 | 000,446,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlansec.dll
[2012/11/18 17:08:57 | 000,408,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssph.dll
[2012/11/18 17:08:57 | 000,386,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanmsm.dll
[2012/11/18 17:08:57 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFilterHost.exe
[2012/11/18 17:08:57 | 000,124,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dumpsd.sys
[2012/11/18 17:08:57 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Storage.Compression.dll
[2012/11/18 17:08:57 | 000,056,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdstor.sys
[2012/11/18 17:08:57 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
[2012/11/18 17:08:57 | 000,033,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\battc.sys
[2012/11/18 17:08:56 | 000,375,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlansec.dll
[2012/11/18 17:08:56 | 000,259,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\input.dll
[2012/11/18 17:08:56 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\input.dll
[2012/11/18 17:08:56 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFCaptureEngine.dll
[2012/11/18 17:08:56 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dhcpcsvc6.dll
[2012/11/18 17:08:55 | 000,745,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssvp.dll
[2012/11/18 17:08:55 | 000,658,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssvp.dll
[2012/11/18 17:08:55 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesysprep.dll
[2012/11/18 17:08:55 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFCaptureEngine.dll
[2012/11/18 17:08:55 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesysprep.dll
[2012/11/18 17:08:55 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msscntrs.dll
[2012/11/18 17:08:55 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PCPKsp.dll
[2012/11/18 17:08:55 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\microsoft-windows-pdc.dll
[2012/11/18 17:08:54 | 001,294,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32.dll
[2012/11/18 17:08:54 | 000,757,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FirewallAPI.dll
[2012/11/18 17:08:54 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
[2012/11/18 17:08:54 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanapi.dll
[2012/11/18 17:08:54 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxSip.dll
[2012/11/18 17:08:53 | 001,836,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DWrite.dll
[2012/11/18 17:08:53 | 000,854,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll
[2012/11/18 17:08:53 | 000,370,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SysFxUI.dll
[2012/11/18 17:08:53 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssphtb.dll
[2012/11/18 17:08:53 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sysreset.exe
[2012/11/18 17:08:53 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxSip.dll
[2012/11/18 17:08:53 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icfupgd.dll
[2012/11/18 17:08:53 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PCPKsp.dll
[2012/11/18 17:08:53 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UXInit.dll
[2012/11/18 17:08:53 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BdeUISrv.exe
[2012/11/18 17:08:53 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UXInit.dll
[2012/11/18 17:08:53 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iernonce.dll
[2012/11/18 17:08:53 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iernonce.dll
[2012/11/18 17:08:52 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssitlb.dll
[2012/11/18 17:08:52 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
[2012/11/18 17:08:52 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssitlb.dll
[2012/11/18 17:08:52 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesetup.dll
[2012/11/18 17:08:52 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msscntrs.dll
[2012/11/18 17:08:52 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wfdprov.dll
[2012/11/18 17:08:52 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wfdprov.dll
[2012/11/18 17:08:52 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wfapigp.dll
[2012/11/18 17:08:52 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wfapigp.dll
[2012/11/18 17:08:51 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\drmk.sys
[2012/11/18 17:08:51 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesetup.dll
[2012/11/18 17:08:51 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msshooks.dll
[2012/11/18 17:08:51 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msshooks.dll
[2012/11/18 17:08:50 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanhlp.dll
[2012/11/18 17:08:50 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanhlp.dll
[2012/11/18 17:08:50 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\kbdhebl3.dll
[2012/11/18 17:08:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdhebl3.dll
[2012/11/18 17:06:50 | 002,893,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2vdec.dll
[2012/11/18 17:06:50 | 002,400,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2vdec.dll
[2012/11/18 17:06:50 | 000,439,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgent.dll
[2012/11/18 17:06:50 | 000,371,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgent.dll
[2012/11/18 17:06:50 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgentc.exe
[2012/11/18 17:06:50 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgentc.exe
[2012/11/18 16:28:25 | 000,000,000 | ---D | C] -- C:\ProgramData\PRICache
[2012/11/18 16:28:25 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Packages
[2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Video
[2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\Programmi
[2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\ProgramData\Preferiti
[2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Musica
[2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\ProgramData\Modelli
[2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Avvio
[2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Immagini
[2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\Program Files\File comuni
[2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\ProgramData\Documenti
[2012/11/18 16:13:58 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dati applicazioni
[2012/11/18 16:09:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC
[2012/11/18 15:58:16 | 000,000,000 | --SD | C] -- C:\Users\Paul\AppData\Roaming\Microsoft
[2012/11/18 15:58:16 | 000,000,000 | R--D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
[2012/11/18 15:58:16 | 000,000,000 | R--D | C] -- C:\Users\Paul\Favorites
[2012/11/18 15:58:16 | 000,000,000 | R--D | C] -- C:\Users\Paul\Desktop
[2012/11/18 15:58:16 | 000,000,000 | R--D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2012/11/18 15:58:16 | 000,000,000 | R--D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
[2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\AppData\Local\Temporary Internet Files
[2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\SendTo
[2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Risorse di stampa
[2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Risorse di rete
[2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Recenti
[2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Modelli
[2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Menu Avvio
[2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Impostazioni locali
[2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Documenti
[2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Dati applicazioni
[2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\AppData\Local\Dati applicazioni
[2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\AppData\Local\Cronologia
[2012/11/18 15:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Paul\Cookies
[2012/11/18 15:58:16 | 000,000,000 | -H-D | C] -- C:\Users\Paul\AppData
[2012/11/18 15:58:16 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Temp
[2012/11/18 15:58:16 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Microsoft
[2012/11/18 15:58:16 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012/11/18 15:55:18 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2012/11/18 15:55:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\RTCOM
[2012/11/18 15:54:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2012/11/18 15:52:50 | 000,000,000 | ---D | C] -- C:\Windows.old
[2012/11/18 15:48:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies
[2012/11/18 15:48:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild
[2012/11/18 15:48:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\XPSViewer
[2012/11/18 15:48:56 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2012/11/18 15:48:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\msmq
[2012/11/18 15:48:56 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2012/11/18 15:48:56 | 000,000,000 | ---D | C] -- C:\inetpub
[2012/11/18 15:48:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\BestPractices
[2012/11/18 15:48:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\BestPractices
[2012/11/18 15:47:50 | 001,166,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationNative_v0300.dll
[2012/11/18 15:47:49 | 000,124,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2012/11/18 15:47:49 | 000,035,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TsWpfWrp.exe
[2012/11/18 15:47:49 | 000,035,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TsWpfWrp.exe
[2012/11/18 15:47:48 | 000,778,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationNative_v0300.dll
[2012/11/18 15:47:48 | 000,102,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2012/11/18 15:46:02 | 000,000,000 | ---D | C] -- C:\Program Files\Elantech
[2012/11/18 15:13:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther
[2012/11/18 14:56:50 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\AAAPcMover
[2012/11/18 04:27:09 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Manager
[2012/11/18 04:27:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Browser Manager
[2012/11/18 04:26:16 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Babylon
[2012/11/18 04:26:04 | 000,000,000 | ---D | C] -- C:\Users\Paul\Downloads
[2012/11/18 03:30:19 | 000,000,000 | ---D | C] -- C:\archdb
[2012/11/18 03:25:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Paragon
[2012/11/17 22:13:48 | 000,037,392 | ---- | C] (Paragon Software Group) -- C:\WINDOWS\SysNative\drivers\hotcore3.sys
[2012/11/17 22:13:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Hard Disk Manager™ 10 Special Edition
[2012/11/17 12:17:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2012/11/17 00:42:16 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\sun
[2012/11/17 00:40:23 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1
[2012/11/17 00:36:20 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\open office
[2012/11/10 20:45:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Laplink
[2012/11/10 20:44:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Laplink PCmover
[2012/11/10 20:44:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Laplink
[2012/11/10 11:21:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Agent Ransack (64-bit)
[2012/11/09 23:53:44 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\{5190CE6A-5CC5-4B5A-AF43-0230C7367BD9}
[2012/11/04 12:05:57 | 002,578,576 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\WavesGUILib.dll
[2012/11/04 12:05:56 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\SysNative\SRSTSX64.dll
[2012/11/04 12:05:56 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\SysNative\SRSTSH64.dll
[2012/11/04 12:05:56 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\SysNative\SRSHP64.dll
[2012/11/04 12:05:56 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\SysNative\SRSWOW64.dll
[2012/11/04 12:05:54 | 000,220,496 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\WINDOWS\SysNative\SFNHK64.dll
[2012/11/04 12:05:54 | 000,121,744 | ---- | C] (Sony Corporation) -- C:\WINDOWS\SysNative\SFSS_APO.dll
[2012/11/04 12:05:53 | 001,146,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RTSnMg64.cpl
[2012/11/04 12:05:53 | 000,081,232 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\WINDOWS\SysNative\SFCOM64.dll
[2012/11/04 12:05:53 | 000,078,160 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\WINDOWS\SysNative\SFAPO64.dll
[2012/11/04 12:05:53 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\WINDOWS\SysWow64\SFCOM.dll
[2012/11/04 12:05:52 | 002,358,888 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtPgEx64.dll
[2012/11/04 12:05:52 | 000,332,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtlCPAPI64.dll
[2012/11/04 12:05:50 | 002,841,704 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtkAPO64.dll
[2012/11/04 12:05:50 | 000,638,056 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtkApi64.dll
[2012/11/04 12:05:50 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtkCfg64.dll
[2012/11/04 12:05:49 | 001,247,848 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RTCOM64.dll
[2012/11/04 12:05:49 | 000,783,360 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RCoRes64.dat
[2012/11/04 12:05:49 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RTEEP64A.dll
[2012/11/04 12:05:49 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RP3DHT64.dll
[2012/11/04 12:05:49 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RP3DAA64.dll
[2012/11/04 12:05:49 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RTEED64A.dll
[2012/11/04 12:05:49 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RTEEL64A.dll
[2012/11/04 12:05:49 | 000,083,560 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RCoInst64.dll
[2012/11/04 12:05:49 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RTEEG64A.dll
[2012/11/04 12:05:48 | 001,718,616 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\R4EEP64A.dll
[2012/11/04 12:05:48 | 000,421,720 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\R4EED64A.dll
[2012/11/04 12:05:48 | 000,127,832 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\R4EEL64A.dll
[2012/11/04 12:05:48 | 000,108,888 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\R4EEA64A.dll
[2012/11/04 12:05:48 | 000,074,584 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\R4EEG64A.dll
[2012/11/04 12:05:47 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioEQ.dll
[2012/11/04 12:05:47 | 001,868,944 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioRealtek.dll
[2012/11/04 12:05:47 | 000,341,336 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioAPO30.dll
[2012/11/04 12:05:47 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxVolumeSDAPO.dll
[2012/11/04 12:05:47 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioAPO20.dll
[2012/11/04 12:05:44 | 001,943,616 | ---- | C] (Fortemedia Corporation) -- C:\WINDOWS\SysNative\FMAPO64.dll
[2012/11/04 12:05:44 | 001,327,208 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSS2SpeakerDLL64.dll
[2012/11/04 12:05:44 | 001,179,752 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSS2HeadphoneDLL64.dll
[2012/11/04 12:05:44 | 000,491,112 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSSymmetryDLL64.dll
[2012/11/04 12:05:44 | 000,475,752 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSVoiceClarityDLL64.dll
[2012/11/04 12:05:44 | 000,317,032 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSNeoPCDLL64.dll
[2012/11/04 12:05:44 | 000,269,928 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSLimiterDLL64.dll
[2012/11/04 12:05:44 | 000,126,056 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSLFXAPO64.dll
[2012/11/04 12:05:44 | 000,125,544 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSGFXAPO64.dll
[2012/11/04 12:05:44 | 000,125,032 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSGFXAPONS64.dll
[2012/11/04 12:05:43 | 001,111,656 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSBoostDLL64.dll
[2012/11/04 12:05:43 | 000,504,936 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSBassEnhancementDLL64.dll
[2012/11/04 12:05:43 | 000,266,856 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSGainCompensatorDLL64.dll
[2012/11/04 12:05:42 | 000,200,800 | ---- | C] (Andrea Electronics Corporation) -- C:\WINDOWS\SysNative\AERTAC64.dll
[2012/11/04 12:05:42 | 000,108,960 | ---- | C] (Andrea Electronics Corporation) -- C:\WINDOWS\SysNative\AERTAR64.dll
[2012/11/03 17:57:09 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Balabolka
[2012/11/03 17:57:09 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Balabolka
[2012/11/03 17:57:09 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Balabolka
[2012/11/03 16:49:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ScanSoft
[2012/11/03 15:35:27 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Regedit
[2012/11/03 14:12:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eSpeak
[2012/11/03 14:12:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\eSpeak
[2012/11/03 13:11:34 | 000,000,000 | ---D | C] -- C:\CepTemp
[2012/11/03 05:49:23 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\{4E71E243-27AA-46B3-9735-F952AC738221}
[2012/11/02 20:36:54 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\WildBit Viewer
[2012/11/01 19:35:51 | 000,000,000 | RH-D | C] -- C:\ESD
[2012/10/30 05:19:08 | 000,000,000 | ---D | C] -- C:\NST
[2012/10/30 05:15:47 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EasyBCD
[2012/10/30 05:14:12 | 000,000,000 | ---D | C] -- C:\BCD_Back
[2012/10/28 16:24:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Centro gestione Mouse e Tastiere Microsoft
[2012/10/28 16:22:41 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Mouse and Keyboard Center
[2012/10/28 16:21:29 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RdpGroupPolicyExtension.dll
[2012/10/28 16:21:29 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TsUsbRedirectionGroupPolicyControl.exe
[2012/10/28 16:21:27 | 000,228,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpendp_winip.dll
[2012/10/28 16:21:27 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpendp_winip.dll
[2012/10/28 10:48:22 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartEd Lite
[2012/10/28 10:07:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NeoSmart Technologies
[2012/10/28 09:58:54 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\NeoSmart_Technologies
[2012/10/28 07:16:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2012/10/28 07:16:03 | 000,246,760 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysWow64\javaws.exe
[2012/10/28 07:15:26 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysWow64\javaw.exe
[2012/10/28 07:15:26 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysWow64\java.exe
[2012/10/28 07:15:26 | 000,095,208 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysWow64\WindowsAccessBridge-32.dll
[2012/10/28 07:15:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2012/10/28 07:10:30 | 001,034,216 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\npDeployJava1.dll
[2012/10/28 07:10:30 | 000,916,456 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\deployJava1.dll
[2012/10/28 07:10:30 | 000,289,768 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\javaws.exe
[2012/10/28 07:09:53 | 000,189,416 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\javaw.exe
[2012/10/28 07:09:53 | 000,188,904 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\java.exe
[2012/10/28 07:09:53 | 000,108,008 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\WindowsAccessBridge-64.dll
[2012/10/28 07:09:41 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2012/10/26 20:13:00 | 000,000,000 | -H-D | C] -- C:\SkyDriveTemp
[2012/10/25 04:17:28 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Adobe
[2012/10/25 04:14:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2012/10/25 04:14:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2012/10/20 08:43:54 | 000,065,736 | ---- | C] (Prevx) -- C:\WINDOWS\SysNative\drivers\pxrts.sys
[2012/10/20 08:43:54 | 000,062,976 | ---- | C] (Prevx) -- C:\WINDOWS\SysWow64\PxSecure.dll
[2012/10/20 08:43:54 | 000,036,384 | ---- | C] (Prevx) -- C:\WINDOWS\SysNative\drivers\pxscan.sys
[2012/10/20 08:43:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prevx 3.0
[2012/10/20 08:43:53 | 000,024,024 | ---- | C] (Prevx) -- C:\WINDOWS\SysNative\drivers\pxkbf.sys
[2012/10/20 08:43:53 | 000,000,000 | ---D | C] -- C:\Program Files\Prevx
[2012/10/20 08:41:35 | 000,000,000 | ---D | C] -- C:\ProgramData\PrevxCSI
[2012/10/20 07:35:24 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\LICENZE
[2012/10/17 20:45:00 | 000,000,000 | ---D | C] -- C:\Program Files\Cepstral
[2012/10/13 23:40:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CheckDrive
[2012/10/13 21:10:02 | 000,000,000 | ---D | C] -- C:\Users\Paul\Videos
[2012/10/13 21:10:02 | 000,000,000 | ---D | C] -- C:\Users\Paul\Music
[2012/10/13 18:12:10 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\WildBit Viewer
[2012/10/13 18:12:10 | 000,000,000 | ---D | C] -- C:\ProgramData\WildBit Viewer
[2012/10/12 16:35:54 | 000,862,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvcr110.dll
[2012/10/12 16:35:54 | 000,828,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvcr110.dll
[2012/10/12 16:35:54 | 000,661,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvcp110.dll
[2012/10/12 16:35:54 | 000,534,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvcp110.dll
[2012/10/12 16:35:54 | 000,354,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vccorlib110.dll
[2012/10/12 16:35:54 | 000,251,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\vccorlib110.dll
[2012/10/12 05:56:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Macrovision Corporation
[2012/10/07 23:41:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel Corporation
[2012/10/07 23:39:45 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Intel Corporation
[2012/10/07 23:12:21 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\SlimWare Utilities Inc
[2012/10/07 23:12:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimDrivers
[2012/10/07 23:12:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SlimDrivers
[2012/10/07 15:01:21 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\JAM Software
[2012/10/07 15:01:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TreeSize Free
[2012/10/06 18:08:15 | 000,000,000 | ---D | C] -- C:\8056739527e545988b
[2012/10/06 18:06:38 | 000,000,000 | ---D | C] -- C:\1120a5e223cdad4892f5
[2012/10/06 09:54:01 | 000,000,000 | --SD | C] -- D:\Utenti\Paul\Documenti\MabinogiEU
[2012/10/06 09:54:01 | 000,000,000 | R--D | C] -- D:\Utenti\Paul\Documenti\Scanned Documents
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Vuze Downloads
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Visual Studio 2008
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\VirtualDJ
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Symantec
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Sports Interactive
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Soda PDF Files
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Soda 3D PDF Reader Files
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Smart PC Utilities
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Ovi
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\netFramwork
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\My Weblog Posts
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\My Print Creations
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\My Games
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\My DAP Downloads
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Incomedia
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\imule Downloads
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\HdTune
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Freemake
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\ForceField Shared Files
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Fax
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Expstudio Audio Editor
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\DriverEasy
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Cross Fire
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\Blocchi appunti di OneNote
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\BlackBerry
[2012/10/06 09:54:01 | 000,000,000 | ---D | C] -- D:\Utenti\Paul\Documenti\ASUS
[2012/09/29 23:31:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Media Player Plus!
[2012/09/29 12:48:56 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\AppBooster
[2012/09/29 12:45:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AppBooster 2.0
[2012/09/29 12:45:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\MC Common
[2012/09/29 05:40:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CheckDiskGUI
[2012/09/28 22:32:08 | 002,177,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\coin92.dll
[2012/09/28 15:36:44 | 000,075,776 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\OpenVideo64.dll
[2012/09/28 15:36:40 | 000,065,536 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\OpenVideo.dll
[2012/09/28 15:36:36 | 000,063,488 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\OVDecode64.dll
[2012/09/28 15:36:34 | 000,056,320 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\OVDecode.dll
[2012/09/28 15:36:24 | 032,635,904 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\amdocl64.dll
[2012/09/28 15:32:16 | 027,341,824 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\amdocl.dll
[2012/09/28 15:28:46 | 000,054,784 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysNative\OpenCL.dll
[2012/09/28 15:28:42 | 000,050,176 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysWow64\OpenCL.dll
[2012/09/28 04:32:18 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Audacity
[2012/09/27 20:58:34 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UpdateStar
[2012/09/27 20:58:33 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\UpdateStar
[2012/09/27 01:49:45 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}
[5 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]
========== Files - Modified Within 60 Days ==========
[2012/11/25 01:06:14 | 002,064,206 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2012/11/25 01:06:14 | 000,897,946 | ---- | M] () -- C:\WINDOWS\SysNative\perfh010.dat
[2012/11/25 01:06:14 | 000,804,122 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2012/11/25 01:06:14 | 000,195,368 | ---- | M] () -- C:\WINDOWS\SysNative\perfc010.dat
[2012/11/25 01:06:14 | 000,166,122 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2012/11/25 01:03:26 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/11/25 01:02:15 | 000,000,376 | ---- | M] () -- C:\Users\Paul\AppData\Roaming\sp_data.sys
[2012/11/25 01:01:16 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2012/11/25 01:01:15 | 3415,941,120 | -HS- | M] () -- C:\hiberfil.sys
[2012/11/24 16:43:40 | 000,001,720 | ---- | M] () -- C:\{9C9295E7-21BD-49A1-8CEF-3F1AE03B965F}
[2012/11/24 16:32:11 | 000,001,294 | ---- | M] () -- C:\Users\Paul\Desktop\File di installazione Norton.lnk
[2012/11/24 16:31:38 | 000,002,620 | ---- | M] () -- C:\WINDOWS\SysNative\AutoRunFilter.ini
[2012/11/24 16:31:00 | 001,892,221 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\Cat.DB
[2012/11/24 16:30:53 | 000,002,511 | ---- | M] () -- C:\Users\Public\Desktop\Norton 360.lnk
[2012/11/24 16:30:09 | 000,013,946 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\VT20121114.016
[2012/11/24 16:28:46 | 000,177,312 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\SysNative\drivers\SYMEVENT64x86.SYS
[2012/11/24 16:28:46 | 000,007,466 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\SYMEVENT64x86.CAT
[2012/11/24 16:28:46 | 000,000,855 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\SYMEVENT64x86.INF
[2012/11/24 10:08:00 | 000,463,512 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2012/11/24 08:28:07 | 000,053,248 | ---- | M] () -- D:\Utenti\Paul\Documenti\EasyBCD Backup (2012-11-24).bcd
[2012/11/19 14:01:31 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2012/11/18 21:10:42 | 000,000,790 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/11/18 18:59:39 | 000,001,146 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012/11/18 16:13:32 | 000,026,673 | ---- | M] () -- C:\WINDOWS\diagwrn.xml
[2012/11/18 16:13:32 | 000,026,673 | ---- | M] () -- C:\WINDOWS\diagerr.xml
[2012/11/18 16:13:15 | 000,022,928 | ---- | M] () -- C:\WINDOWS\SysNative\emptyregdb.dat
[2012/11/18 15:57:13 | 002,000,694 | ---- | M] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI
[2012/11/18 15:55:35 | 000,000,000 | ---- | M] () -- C:\WINDOWS\ativpsrm.bin
[2012/11/18 15:55:35 | 000,000,000 | ---- | M] () -- C:\WINDOWS\SysNative\atiicdxx.dat
[2012/11/18 15:51:01 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2012/11/18 15:16:13 | 000,009,920 | -H-- | M] () -- C:\WINDOWS\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/11/18 15:16:13 | 000,009,920 | -H-- | M] () -- C:\WINDOWS\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/11/18 15:08:01 | 000,327,680 | ---- | M] () -- C:\WINDOWS\SysNative\Ikeext.etl
[2012/11/18 11:31:24 | 000,001,267 | -H-- | M] () -- C:\WINDOWS\EPMBatch.ept
[2012/11/18 05:16:02 | 000,001,574 | ---- | M] () -- C:\WINDOWS\SysNative\ServiceFilter.ini
[2012/11/17 00:40:24 | 000,000,983 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
[2012/11/16 07:22:51 | 000,001,146 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012/11/16 07:22:51 | 000,001,142 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012/11/11 00:15:29 | 000,001,746 | ---- | M] () -- C:\Users\Public\Desktop\PCmover Windows 7 Upgrade Assistant.lnk
[2012/11/11 00:09:56 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/11/03 17:57:09 | 000,000,658 | ---- | M] () -- C:\Users\Paul\Desktop\Balabolka.lnk
[2012/11/02 16:25:03 | 000,003,584 | ---- | M] () -- C:\Users\Paul\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/11/02 08:07:58 | 000,058,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuauclt.exe
[2012/11/02 06:22:08 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapp.exe
[2012/11/02 06:21:44 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuwebv.dll
[2012/11/02 06:21:44 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wudriver.dll
[2012/11/02 06:21:44 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wups.dll
[2012/11/02 06:21:43 | 000,621,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
[2012/11/02 06:21:28 | 000,246,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ubpm.dll
[2012/11/02 06:20:31 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapp.exe
[2012/11/02 06:20:28 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\taskhost.exe
[2012/11/02 06:20:28 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\taskhostex.exe
[2012/11/02 06:20:10 | 000,141,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuwebv.dll
[2012/11/02 06:20:09 | 001,619,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wucltux.dll
[2012/11/02 06:20:09 | 000,767,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
[2012/11/02 06:20:09 | 000,251,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WUSettingsProvider.dll
[2012/11/02 06:20:09 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wudriver.dll
[2012/11/02 06:20:09 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups2.dll
[2012/11/02 06:20:09 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups.dll
[2012/11/02 06:20:09 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuaext.dll
[2012/11/02 06:19:50 | 000,318,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ubpm.dll
[2012/11/02 06:01:27 | 000,099,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wushareduxresources.dll
[2012/10/31 02:28:36 | 000,000,450 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for Paul.job
[2012/10/30 03:42:20 | 000,028,672 | ---- | M] () -- D:\Utenti\Paul\Documenti\EasyBCD Backup (2012-10-30).bcd
[2012/10/29 06:04:47 | 000,522,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AUDIOKSE.dll
[2012/10/29 06:04:47 | 000,490,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll
[2012/10/29 06:04:47 | 000,447,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll
[2012/10/29 06:04:47 | 000,253,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\audiodg.exe
[2012/10/29 04:21:53 | 001,526,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
[2012/10/29 04:21:21 | 000,267,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EncDump.dll
[2012/10/29 04:20:49 | 000,169,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll
[2012/10/29 04:19:08 | 000,463,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AUDIOKSE.dll
[2012/10/29 03:46:23 | 001,451,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
[2012/10/28 16:24:24 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_point64_01011.Wdf
[2012/10/28 16:24:23 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
[2012/10/28 10:48:23 | 000,000,704 | ---- | M] () -- C:\Users\Paul\Desktop\StartEd Lite.lnk
[2012/10/28 10:18:19 | 000,028,672 | ---- | M] () -- D:\Utenti\Paul\Documenti\EasyBCD Backup (2012-10-28).bcd
[2012/10/28 10:07:26 | 000,000,882 | ---- | M] () -- C:\Users\Public\Desktop\EasyBCD 2.2.lnk
[2012/10/28 07:15:19 | 000,821,736 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysWow64\npDeployJava1.dll
[2012/10/28 07:15:19 | 000,746,984 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysWow64\deployJava1.dll
[2012/10/28 07:15:19 | 000,246,760 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysWow64\javaws.exe
[2012/10/28 07:15:19 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysWow64\javaw.exe
[2012/10/28 07:15:19 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysWow64\java.exe
[2012/10/28 07:15:19 | 000,095,208 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysWow64\WindowsAccessBridge-32.dll
[2012/10/28 07:09:44 | 001,034,216 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\npDeployJava1.dll
[2012/10/28 07:09:44 | 000,916,456 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\deployJava1.dll
[2012/10/28 07:09:44 | 000,289,768 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\javaws.exe
[2012/10/28 07:09:44 | 000,189,416 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\javaw.exe
[2012/10/28 07:09:44 | 000,188,904 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\java.exe
[2012/10/28 07:09:44 | 000,108,008 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\WindowsAccessBridge-64.dll
[2012/10/27 18:12:11 | 000,019,256 | ---- | M] () -- C:\Users\Paul\Desktop\bookmarks-2012-10-27.json
[2012/10/27 18:11:36 | 000,036,639 | ---- | M] () -- C:\Users\Paul\Desktop\bookmarks27102012.html
[2012/10/27 16:35:24 | 000,000,017 | ---- | M] () -- C:\WINDOWS\SysWow64\shortcut_ex.dat
[2012/10/26 23:19:09 | 000,695,648 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
[2012/10/26 23:19:09 | 000,080,728 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
[2012/10/26 00:54:02 | 000,064,512 | -H-- | M] () -- D:\Utenti\Paul\Documenti\dach200.dll
[2012/10/25 22:37:24 | 000,002,128 | ---- | M] () -- C:\{715E9EC5-DC6A-4204-898B-50B0AF58FC25}
[2012/10/25 04:14:33 | 000,002,021 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2012/10/24 05:54:06 | 006,972,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2012/10/24 05:54:04 | 000,396,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hal.dll
[2012/10/24 04:25:41 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgentc.exe
[2012/10/24 04:24:42 | 000,439,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgent.dll
[2012/10/24 04:24:12 | 000,603,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
[2012/10/24 03:48:12 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgentc.exe
[2012/10/24 03:47:29 | 000,371,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgent.dll
[2012/10/22 22:56:23 | 000,000,172 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\isolate.ini
[2012/10/21 08:51:01 | 000,000,578 | ---- | M] () -- D:\Utenti\Paul\Documenti\Documenti - collegamento.lnk
[2012/10/20 08:43:54 | 000,065,736 | ---- | M] (Prevx) -- C:\WINDOWS\SysNative\drivers\pxrts.sys
[2012/10/20 08:43:54 | 000,062,976 | ---- | M] (Prevx) -- C:\WINDOWS\SysWow64\PxSecure.dll
[2012/10/20 08:43:54 | 000,036,384 | ---- | M] (Prevx) -- C:\WINDOWS\SysNative\drivers\pxscan.sys
[2012/10/20 08:43:53 | 000,024,024 | ---- | M] (Prevx) -- C:\WINDOWS\SysNative\drivers\pxkbf.sys
[2012/10/18 07:17:18 | 000,069,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pdc.sys
[2012/10/18 04:20:46 | 010,096,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
[2012/10/18 04:18:40 | 002,302,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll
[2012/10/18 04:18:33 | 002,146,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll
[2012/10/18 03:46:00 | 008,856,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll
[2012/10/18 03:44:38 | 002,033,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll
[2012/10/17 05:32:52 | 001,172,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetsrc.dll
[2012/10/17 05:32:51 | 000,677,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetcore.dll
[2012/10/17 05:32:51 | 000,673,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
[2012/10/17 05:32:50 | 001,048,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll
[2012/10/17 04:57:37 | 000,929,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetsrc.dll
[2012/10/17 04:57:37 | 000,568,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetcore.dll
[2012/10/17 04:57:37 | 000,513,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
[2012/10/17 04:57:36 | 000,850,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll
[2012/10/14 06:07:06 | 000,002,026 | ---- | M] () -- C:\Users\Public\Desktop\ASUS Vibe Fun Center.lnk
[2012/10/13 23:40:15 | 000,000,762 | ---- | M] () -- C:\Users\Paul\Desktop\CheckDrive.lnk
[2012/10/12 16:35:54 | 000,862,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvcr110.dll
[2012/10/12 16:35:54 | 000,828,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvcr110.dll
[2012/10/12 16:35:54 | 000,661,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvcp110.dll
[2012/10/12 16:35:54 | 000,534,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvcp110.dll
[2012/10/12 16:35:54 | 000,354,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vccorlib110.dll
[2012/10/12 16:35:54 | 000,251,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\vccorlib110.dll
[2012/10/12 09:08:01 | 000,027,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\rdpvideominiport.sys
[2012/10/12 07:34:54 | 000,100,864 | ---- | M] (pdfforge GbR) -- C:\WINDOWS\SysNative\pdfcmon.dll
[2012/10/12 07:14:54 | 001,347,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmclient.dll
[2012/10/12 07:14:54 | 000,652,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmscan.dll
[2012/10/12 07:14:54 | 000,279,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srm.dll
[2012/10/12 07:14:54 | 000,274,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmstormod.dll
[2012/10/12 07:14:54 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmshell.dll
[2012/10/12 07:14:54 | 000,134,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\adrclient.dll
[2012/10/12 07:14:54 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmtrace.dll
[2012/10/12 07:14:54 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srm_ps.dll
[2012/10/12 07:14:40 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rfxvmt.dll
[2012/10/12 07:14:39 | 003,244,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll
[2012/10/12 07:13:32 | 000,109,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dskquota.dll
[2012/10/12 06:50:01 | 000,235,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll
[2012/10/12 06:41:02 | 000,987,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmclient.dll
[2012/10/12 06:41:02 | 000,487,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmscan.dll
[2012/10/12 06:41:02 | 000,278,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srm.dll
[2012/10/12 06:41:02 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmstormod.dll
[2012/10/12 06:41:02 | 000,128,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmshell.dll
[2012/10/12 06:41:02 | 000,104,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\adrclient.dll
[2012/10/12 06:41:02 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmtrace.dll
[2012/10/12 06:41:02 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srm_ps.dll
[2012/10/12 06:39:54 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dskquota.dll
[2012/10/11 08:47:18 | 000,793,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll
[2012/10/11 08:35:16 | 002,380,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2012/10/11 08:26:44 | 000,336,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Classpnp.sys
[2012/10/11 08:25:48 | 000,056,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdstor.sys
[2012/10/11 08:23:32 | 000,441,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\netio.sys
[2012/10/11 08:16:20 | 001,403,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi
[2012/10/11 08:16:20 | 001,267,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe
[2012/10/11 08:16:20 | 001,217,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi
[2012/10/11 08:16:19 | 001,093,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe
[2012/10/11 08:13:54 | 000,194,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdbus.sys
[2012/10/11 08:13:51 | 000,124,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dumpsd.sys
[2012/10/11 08:13:49 | 000,058,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dam.sys
[2012/10/11 08:13:37 | 000,033,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\battc.sys
[2012/10/11 08:02:27 | 001,636,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMALFXGFXDSP.dll
[2012/10/11 08:01:47 | 000,503,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll
[2012/10/11 06:56:41 | 002,115,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe
[2012/10/11 06:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe
[2012/10/11 06:46:55 | 000,132,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sysreset.exe
[2012/10/11 06:46:50 | 000,373,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe
[2012/10/11 06:46:50 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFilterHost.exe
[2012/10/11 06:46:39 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
[2012/10/11 06:46:30 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BdeUISrv.exe
[2012/10/11 06:46:12 | 000,470,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanmsm.dll
[2012/10/11 06:46:12 | 000,446,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlansec.dll
[2012/10/11 06:46:11 | 000,273,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanapi.dll
[2012/10/11 06:46:07 | 001,395,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Immersive.dll
[2012/10/11 06:46:07 | 000,594,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.dll
[2012/10/11 06:46:07 | 000,154,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Storage.Compression.dll
[2012/10/11 06:46:05 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wfdprov.dll
[2012/10/11 06:46:05 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wfapigp.dll
[2012/10/11 06:45:58 | 001,045,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usercpl.dll
[2012/10/11 06:45:58 | 000,907,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uxtheme.dll
[2012/10/11 06:45:58 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UXInit.dll
[2012/10/11 06:45:53 | 003,554,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll
[2012/10/11 06:45:49 | 000,370,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SysFxUI.dll
[2012/10/11 06:45:48 | 000,579,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StructuredQuery.dll
[2012/10/11 06:45:42 | 000,505,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SpaceControl.dll
[2012/10/11 06:45:37 | 000,590,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SHCore.dll
[2012/10/11 06:45:26 | 001,009,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll
[2012/10/11 06:45:26 | 000,945,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\resetengmig.dll
[2012/10/11 06:45:16 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PCPKsp.dll
[2012/10/11 06:44:49 | 000,745,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssvp.dll
[2012/10/11 06:44:48 | 002,116,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll
[2012/10/11 06:44:48 | 000,435,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssph.dll
[2012/10/11 06:44:48 | 000,246,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssphtb.dll
[2012/10/11 06:44:48 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssitlb.dll
[2012/10/11 06:44:48 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
[2012/10/11 06:44:48 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msshooks.dll
[2012/10/11 06:44:47 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msscntrs.dll
[2012/10/11 06:44:26 | 000,561,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
[2012/10/11 06:44:25 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFCaptureEngine.dll
[2012/10/11 06:44:22 | 001,265,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
[2012/10/11 06:44:15 | 003,966,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2012/10/11 06:44:15 | 000,854,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll
[2012/10/11 06:44:11 | 000,259,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\input.dll
[2012/10/11 06:44:08 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesysprep.dll
[2012/10/11 06:44:08 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesetup.dll
[2012/10/11 06:44:08 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iernonce.dll
[2012/10/11 06:44:03 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icfupgd.dll
[2012/10/11 06:43:57 | 001,294,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32.dll
[2012/10/11 06:43:52 | 000,757,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FirewallAPI.dll
[2012/10/11 06:43:46 | 001,836,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DWrite.dll
[2012/10/11 06:43:45 | 002,206,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll
[2012/10/11 06:43:40 | 000,244,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dhcpcore6.dll
[2012/10/11 06:43:40 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dhcpcsvc6.dll
[2012/10/11 06:43:26 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxSip.dll
[2012/10/11 06:42:31 | 000,612,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll
[2012/10/11 06:23:47 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\microsoft-windows-pdc.dll
[2012/10/11 06:23:08 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\kbdhebl3.dll
[2012/10/11 06:22:44 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanhlp.dll
[2012/10/11 06:18:59 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\drmk.sys
[2012/10/11 06:16:52 | 000,286,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\portcls.sys
[2012/10/11 06:07:57 | 000,386,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanmsm.dll
[2012/10/11 06:07:57 | 000,375,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlansec.dll
[2012/10/11 06:07:57 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanapi.dll
[2012/10/11 06:07:52 | 001,226,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Immersive.dll
[2012/10/11 06:07:52 | 000,116,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Storage.Compression.dll
[2012/10/11 06:07:51 | 000,410,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.dll
[2012/10/11 06:07:49 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wfdprov.dll
[2012/10/11 06:07:49 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wfapigp.dll
[2012/10/11 06:07:43 | 000,962,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usercpl.dll
[2012/10/11 06:07:43 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UXInit.dll
[2012/10/11 06:07:40 | 002,764,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll
[2012/10/11 06:07:27 | 000,460,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SHCore.dll
[2012/10/11 06:07:09 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PCPKsp.dll
[2012/10/11 06:06:42 | 001,610,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll
[2012/10/11 06:06:42 | 000,658,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssvp.dll
[2012/10/11 06:06:42 | 000,408,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssph.dll
[2012/10/11 06:06:41 | 000,094,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssitlb.dll
[2012/10/11 06:06:41 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msscntrs.dll
[2012/10/11 06:06:41 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msshooks.dll
[2012/10/11 06:06:25 | 000,411,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
[2012/10/11 06:06:24 | 000,126,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFCaptureEngine.dll
[2012/10/11 06:06:19 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
[2012/10/11 06:06:17 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\input.dll
[2012/10/11 06:06:16 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesysprep.dll
[2012/10/11 06:06:16 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesetup.dll
[2012/10/11 06:06:16 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iernonce.dll
[2012/10/11 06:06:04 | 001,841,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll
[2012/10/11 06:06:02 | 000,204,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dhcpcore6.dll
[2012/10/11 06:05:51 | 000,099,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxSip.dll
[2012/10/11 05:42:57 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdhebl3.dll
[2012/10/11 05:42:25 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanhlp.dll
[2012/10/10 19:25:22 | 000,007,605 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\srtspx64.cat
[2012/10/10 19:25:22 | 000,007,601 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\srtsp64.cat
[2012/10/10 19:25:22 | 000,001,418 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\srtspx64.inf
[2012/10/10 08:04:51 | 000,094,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\synceng.dll
[2012/10/10 07:31:46 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\synceng.dll
[2012/10/09 22:07:59 | 000,001,152 | ---- | M] () -- C:\Users\Paul\.swfinfo
[2012/10/08 18:52:50 | 000,007,597 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\SymDS64.cat
[2012/10/08 18:52:48 | 000,007,603 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\SymEFA64.cat
[2012/10/08 18:00:02 | 000,776,864 | R--- | M] (Symantec Corporation) -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\srtsp64.sys
[2012/10/08 18:00:02 | 000,001,437 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\srtsp64.inf
[2012/10/06 16:40:58 | 000,007,734 | ---- | M] () -- C:\Users\Paul\Desktop\Area C.odt
[2012/10/06 16:38:39 | 000,009,626 | ---- | M] () -- D:\Utenti\Paul\Documenti\Area C.odt
[2012/10/06 05:53:04 | 002,893,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2vdec.dll
[2012/10/06 05:15:33 | 002,400,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2vdec.dll
[2012/10/03 18:40:36 | 001,133,216 | R--- | M] (Symantec Corporation) -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\SymEFA64.sys
[2012/10/03 18:40:36 | 000,009,103 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\SymVTcer.dat
[2012/10/03 18:40:36 | 000,003,433 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\SymEFA.inf
[2012/10/03 18:40:20 | 000,493,216 | R--- | M] (Symantec Corporation) -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\SymDS64.sys
[2012/10/03 18:40:20 | 000,002,851 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\SymDS.inf
[2012/10/03 18:19:14 | 000,168,096 | R--- | M] (Symantec Corporation) -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\ccSetx64.sys
[2012/10/03 18:19:14 | 000,007,611 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\ccSetx64.cat
[2012/10/03 18:19:14 | 000,000,853 | R--- | M] () -- C:\WINDOWS\SysNative\drivers\N360x64\1402000.013\ccSetx64.inf
[2012/10/02 08:34:02 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanprotdim.dll
[2012/09/29 19:54:26 | 000,025,928 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\SysNative\drivers\mbam.sys
[2012/09/28 22:32:08 | 002,177,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\coin92.dll
[2012/09/28 15:37:02 | 000,221,696 | ---- | M] () -- C:\WINDOWS\SysNative\clinfo.exe
[2012/09/28 15:36:44 | 000,075,776 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\OpenVideo64.dll
[2012/09/28 15:36:40 | 000,065,536 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\OpenVideo.dll
[2012/09/28 15:36:36 | 000,063,488 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\OVDecode64.dll
[2012/09/28 15:36:34 | 000,056,320 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\OVDecode.dll
[2012/09/28 15:36:24 | 032,635,904 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\amdocl64.dll
[2012/09/28 15:32:16 | 027,341,824 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\amdocl.dll
[2012/09/28 15:28:46 | 000,054,784 | ---- | M] (Khronos Group) -- C:\WINDOWS\SysNative\OpenCL.dll
[2012/09/28 15:28:42 | 000,050,176 | ---- | M] (Khronos Group) -- C:\WINDOWS\SysWow64\OpenCL.dll
[2012/09/27 20:58:35 | 000,002,038 | ---- | M] () -- C:\Users\Paul\Desktop\UpdateStar.lnk
[2012/09/27 08:17:17 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\newdev.exe
[2012/09/27 08:17:17 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ndadmin.exe
[2012/09/27 08:15:56 | 000,301,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\newdev.dll
[2012/09/27 07:35:21 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\newdev.exe
[2012/09/27 07:35:20 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ndadmin.exe
[2012/09/27 07:34:16 | 000,275,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\newdev.dll
[5 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012/11/24 16:43:40 | 000,001,720 | ---- | C] () -- C:\{9C9295E7-21BD-49A1-8CEF-3F1AE03B965F}
[2012/11/24 16:30:53 | 000,002,511 | ---- | C] () -- C:\Users\Public\Desktop\Norton 360.lnk
[2012/11/24 16:23:22 | 000,001,294 | ---- | C] () -- C:\Users\Paul\Desktop\File di installazione Norton.lnk
[2012/11/24 08:28:07 | 000,053,248 | ---- | C] () -- D:\Utenti\Paul\Documenti\EasyBCD Backup (2012-11-24).bcd
[2012/11/21 15:05:19 | 000,000,992 | ---- | C] () -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AgentRansack.lnk
[2012/11/19 23:28:57 | 000,031,841 | ---- | C] () -- C:\WINDOWS\ProfessionalWMC.xml
[2012/11/19 14:01:31 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2012/11/18 22:05:43 | 000,463,512 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2012/11/18 21:10:41 | 000,000,790 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/11/18 18:59:39 | 000,001,146 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012/11/18 17:15:16 | 000,361,934 | ---- | C] () -- C:\WINDOWS\SysNative\ApnDatabase.xml
[2012/11/18 17:15:03 | 000,110,592 | ---- | C] () -- C:\WINDOWS\SysNative\OEMLicense.dll
[2012/11/18 17:15:03 | 000,083,968 | ---- | C] () -- C:\WINDOWS\SysWow64\OEMLicense.dll
[2012/11/18 16:31:36 | 000,001,409 | ---- | C] () -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2012/11/18 16:13:15 | 000,022,928 | ---- | C] () -- C:\WINDOWS\SysNative\emptyregdb.dat
[2012/11/18 15:58:17 | 000,026,673 | ---- | C] () -- C:\WINDOWS\diagwrn.xml
[2012/11/18 15:58:17 | 000,026,673 | ---- | C] () -- C:\WINDOWS\diagerr.xml
[2012/11/18 15:57:13 | 002,000,694 | ---- | C] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI
[2012/11/18 15:55:35 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2012/11/18 15:55:35 | 000,000,000 | ---- | C] () -- C:\WINDOWS\SysNative\atiicdxx.dat
[2012/11/18 15:53:45 | 268,435,456 | -HS- | C] () -- C:\swapfile.sys
[2012/11/17 13:06:24 | 000,001,267 | -H-- | C] () -- C:\WINDOWS\EPMBatch.ept
[2012/11/17 00:40:24 | 000,000,983 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
[2012/11/10 20:44:33 | 000,001,746 | ---- | C] () -- C:\Users\Public\Desktop\PCmover Windows 7 Upgrade Assistant.lnk
[2012/11/03 17:57:09 | 000,000,658 | ---- | C] () -- C:\Users\Paul\Desktop\Balabolka.lnk
[2012/11/02 16:17:01 | 000,003,584 | ---- | C] () -- C:\Users\Paul\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/10/30 03:42:20 | 000,028,672 | ---- | C] () -- D:\Utenti\Paul\Documenti\EasyBCD Backup (2012-10-30).bcd
[2012/10/28 16:24:24 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_point64_01011.Wdf
[2012/10/28 16:24:23 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
[2012/10/28 10:48:23 | 000,000,704 | ---- | C] () -- C:\Users\Paul\Desktop\StartEd Lite.lnk
[2012/10/28 10:18:19 | 000,028,672 | ---- | C] () -- D:\Utenti\Paul\Documenti\EasyBCD Backup (2012-10-28).bcd
[2012/10/28 10:07:26 | 000,000,882 | ---- | C] () -- C:\Users\Public\Desktop\EasyBCD 2.2.lnk
[2012/10/27 18:12:11 | 000,019,256 | ---- | C] () -- C:\Users\Paul\Desktop\bookmarks-2012-10-27.json
[2012/10/27 18:11:36 | 000,036,639 | ---- | C] () -- C:\Users\Paul\Desktop\bookmarks27102012.html
[2012/10/27 16:35:24 | 000,000,017 | ---- | C] () -- C:\WINDOWS\SysWow64\shortcut_ex.dat
[2012/10/26 00:54:02 | 000,064,512 | -H-- | C] () -- D:\Utenti\Paul\Documenti\dach200.dll
[2012/10/25 22:37:24 | 000,002,128 | ---- | C] () -- C:\{715E9EC5-DC6A-4204-898B-50B0AF58FC25}
[2012/10/25 04:14:33 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
[2012/10/25 04:14:33 | 000,002,021 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2012/10/13 23:40:14 | 000,000,762 | ---- | C] () -- C:\Users\Paul\Desktop\CheckDrive.lnk
[2012/10/11 04:22:57 | 000,001,428 | ---- | C] () -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Restore Manager.lnk
[2012/10/06 16:40:58 | 000,007,734 | ---- | C] () -- C:\Users\Paul\Desktop\Area C.odt
[2012/10/06 16:38:37 | 000,009,626 | ---- | C] () -- D:\Utenti\Paul\Documenti\Area C.odt
[2012/10/06 09:54:03 | 002,283,105 | ---- | C] () -- D:\Utenti\Paul\Documenti\P1000713.jpg
[2012/10/06 09:54:03 | 001,271,278 | ---- | C] () -- D:\Utenti\Paul\Documenti\speed.io - Internet DSL Speedtest.mht
[2012/10/06 09:54:03 | 000,231,830 | ---- | C] () -- D:\Utenti\Paul\Documenti\poste.xps
[2012/10/06 09:54:03 | 000,069,208 | ---- | C] () -- D:\Utenti\Paul\Documenti\Testpage - PDFCreator.pdf
[2012/10/06 09:54:03 | 000,068,692 | ---- | C] () -- D:\Utenti\Paul\Documenti\P1000344.jpg
[2012/10/06 09:54:02 | 000,891,806 | ---- | C] () -- D:\Utenti\Paul\Documenti\DL 6 12 2011 n 201.xps
[2012/10/06 09:54:02 | 000,112,502 | ---- | C] () -- D:\Utenti\Paul\Documenti\Esempio di contratto di loc....pdf
[2012/10/06 09:54:02 | 000,048,167 | ---- | C] () -- D:\Utenti\Paul\Documenti\Cayttalica Iscrizione Piatro a test.pdf
[2012/10/06 09:54:02 | 000,002,253 | ---- | C] () -- D:\Utenti\Paul\Documenti\Nuovo database.odb
[2012/10/06 09:54:02 | 000,000,578 | ---- | C] () -- D:\Utenti\Paul\Documenti\Documenti - collegamento.lnk
[2012/10/06 09:54:02 | 000,000,402 | -HS- | C] () -- D:\Utenti\Paul\Documenti\desktop (2).ini
[2012/10/06 09:54:02 | 000,000,084 | -HS- | C] () -- D:\Utenti\Paul\Documenti\desktop (3).ini
[2012/09/28 15:37:02 | 000,221,696 | ---- | C] () -- C:\WINDOWS\SysNative\clinfo.exe
[2012/09/27 20:58:34 | 000,002,038 | ---- | C] () -- C:\Users\Paul\Desktop\UpdateStar.lnk
[2012/09/10 22:17:30 | 000,000,270 | -H-- | C] () -- C:\WINDOWS\sysreg.dat
[2012/07/27 01:22:05 | 000,001,152 | ---- | C] () -- C:\Users\Paul\.swfinfo
[2012/07/26 09:13:10 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2012/07/26 09:13:09 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2012/07/26 08:21:26 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012/07/26 02:17:42 | 000,043,520 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2012/07/25 21:37:29 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2012/07/25 21:28:31 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2012/07/10 20:40:32 | 002,468,520 | ---- | C] () -- C:\WINDOWS\SysWow64\BootMan.exe
[2012/07/10 20:40:32 | 000,086,408 | ---- | C] () -- C:\WINDOWS\SysWow64\setupempdrv03.exe
[2012/07/10 20:40:32 | 000,019,840 | ---- | C] () -- C:\WINDOWS\SysWow64\EuEpmGdi.dll
[2012/07/10 20:40:32 | 000,014,216 | ---- | C] () -- C:\WINDOWS\SysWow64\epmntdrv.sys
[2012/07/10 20:40:32 | 000,008,456 | ---- | C] () -- C:\WINDOWS\SysWow64\EuGdiDrv.sys
[2012/07/07 17:43:21 | 000,109,488 | ---- | C] () -- C:\WINDOWS\123w.exe
[2012/07/07 17:33:52 | 000,012,971 | ---- | C] () -- C:\WINDOWS\123r5.ini
[2012/07/07 17:33:52 | 000,000,999 | ---- | C] () -- C:\WINDOWS\lotus.ini
[2012/07/02 21:12:31 | 000,007,605 | ---- | C] () -- C:\Users\Paul\AppData\Local\Resmon.ResmonCfg
[2012/06/24 08:27:59 | 000,111,932 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPrinterDB.dat
[2012/06/24 08:27:59 | 000,031,053 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern131.dat
[2012/06/24 08:27:59 | 000,027,417 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern121.dat
[2012/06/24 08:27:59 | 000,024,903 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern3.dat
[2012/06/24 08:27:59 | 000,021,390 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern5.dat
[2012/06/24 08:27:59 | 000,020,148 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern2.dat
[2012/06/24 08:27:59 | 000,011,811 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern4.dat
[2012/06/24 08:27:59 | 000,004,943 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern6.dat
[2012/06/24 08:27:59 | 000,001,146 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_DU.dat
[2012/06/24 08:27:59 | 000,001,139 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_PT.dat
[2012/06/24 08:27:59 | 000,001,139 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_BP.dat
[2012/06/24 08:27:59 | 000,001,136 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_ES.dat
[2012/06/24 08:27:59 | 000,001,129 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_FR.dat
[2012/06/24 08:27:59 | 000,001,129 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_CF.dat
[2012/06/24 08:27:59 | 000,001,120 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_IT.dat
[2012/06/24 08:27:59 | 000,001,107 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_GE.dat
[2012/06/24 08:27:59 | 000,001,104 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPresetData_EN.dat
[2012/06/24 08:27:59 | 000,000,097 | ---- | C] () -- C:\WINDOWS\SysWow64\PICSDK.ini
[2012/06/24 08:27:58 | 000,026,154 | ---- | C] () -- C:\WINDOWS\SysWow64\EPPICPattern1.dat
[2012/06/24 04:18:50 | 000,000,376 | ---- | C] () -- C:\Users\Paul\AppData\Roaming\sp_data.sys
[2012/06/23 20:06:35 | 000,034,149 | ---- | C] () -- C:\Users\Paul\Grub Interfaccia grafica per modificare GRUB.htm
[2012/06/23 19:21:18 | 000,000,000 | ---- | C] () -- C:\Users\Paul\AppData\Local\prvlcl.dat
[2012/06/18 20:10:09 | 000,193,688 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2012/06/18 20:10:09 | 000,193,688 | ---- | C] () -- C:\ProgramData\nvModes.001
[2012/06/18 20:10:09 | 000,000,270 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2012/06/18 20:10:09 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2012/06/14 21:25:19 | 000,045,056 | ---- | C] () -- C:\WINDOWS\SysWow64\acovcnt.exe
[2012/06/02 15:31:19 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2011/10/19 05:26:32 | 000,131,984 | ---- | C] () -- C:\ProgramData\FullRemove.exe
========== ZeroAccess Check ==========
[2012/11/18 19:07:16 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012/10/11 06:45:39 | 019,789,824 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/10/11 06:07:29 | 017,560,576 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012/07/26 04:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2012/07/26 04:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012/07/26 04:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2012/09/29 12:48:59 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\AppBooster
[2012/07/24 22:26:10 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Ashampoo
[2012/06/14 21:30:28 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\ASUS WebStorage
[2012/11/06 05:47:32 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Audacity
[2012/11/18 04:26:16 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Babylon
[2012/11/03 17:57:09 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Balabolka
[2012/06/23 19:24:56 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Blackberry Desktop
[2012/08/07 12:18:14 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Epson
[2012/06/23 19:25:24 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\FMRTEv5
[2012/07/08 02:47:43 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\FreeFileSync
[2012/07/28 10:18:41 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Ghostbuster
[2012/10/13 20:17:54 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\I2P
[2012/09/01 14:59:31 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\ImgBurn
[2012/10/07 15:01:21 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\JAM Software
[2012/06/24 10:43:08 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\minimem
[2012/07/24 05:38:16 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Nuance
[2012/06/15 01:01:09 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\OpenOffice.org
[2012/07/22 18:55:20 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Panasonic
[2012/10/07 06:29:06 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\PDF Software
[2012/11/22 00:43:02 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\pdfforge
[2012/11/21 23:22:23 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\SoftGrid Client
[2012/06/19 20:04:00 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Sports Interactive
[2012/08/04 15:59:01 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\T-App
[2012/07/09 10:00:15 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\TeraCopy
[2012/06/15 00:54:22 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Thunderbird
[2012/06/24 09:17:41 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\TP
[2012/08/31 17:09:15 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\TuneUp Software
[2012/09/27 20:58:34 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\UpdateStar
[2012/11/03 05:46:44 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\WildBit Viewer
[2012/06/18 21:59:24 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Zeon
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2011/10/11 12:18:45 | 000,000,044 | ---- | M] () -- C:\ASUS.md5
[2012/07/10 06:08:25 | 000,032,768 | ---- | M] () -- C:\BCD_Backup
[2012/07/26 04:44:30 | 000,398,156 | RHS- | M] () -- C:\bootmgr
[2012/06/02 15:30:55 | 000,000,001 | -HS- | M] () -- C:\BOOTNXT
[2012/11/18 15:51:01 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2012/09/29 18:05:35 | 000,001,775 | ---- | M] () -- C:\CheckDiskGUI29 9 2012disco asus.txt
[2012/09/29 18:39:25 | 000,004,455 | ---- | M] () -- C:\CheckDiskGUIAsus2992012.txt
[2012/01/20 00:54:09 | 000,013,754 | ---- | M] () -- C:\devlist.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1028.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1031.txt
[2007/11/07 08:00:40 | 000,010,134 | ---- | M] () -- C:\eula.1033.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1036.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1040.txt
[2007/11/07 08:00:40 | 000,000,118 | ---- | M] () -- C:\eula.1041.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1042.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.2052.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.3082.txt
[2007/11/07 08:00:40 | 000,001,110 | ---- | M] () -- C:\globdata.ini
[2012/11/25 01:01:15 | 3415,941,120 | -HS- | M] () -- C:\hiberfil.sys
[2007/11/07 08:44:20 | 000,855,040 | ---- | M] (Microsoft Corporation) -- C:\install.exe
[2007/11/07 08:00:40 | 000,000,843 | ---- | M] () -- C:\install.ini
[2007/11/07 08:44:20 | 000,075,280 | ---- | M] (Microsoft Corporation) -- C:\install.res.1028.dll
[2007/11/07 08:44:20 | 000,095,248 | ---- | M] (Microsoft Corporation) -- C:\install.res.1031.dll
[2007/11/07 08:44:20 | 000,090,128 | ---- | M] (Microsoft Corporation) -- C:\install.res.1033.dll
[2007/11/07 08:44:20 | 000,096,272 | ---- | M] (Microsoft Corporation) -- C:\install.res.1036.dll
[2007/11/07 08:44:20 | 000,094,224 | ---- | M] (Microsoft Corporation) -- C:\install.res.1040.dll
[2007/11/07 08:44:20 | 000,080,400 | ---- | M] (Microsoft Corporation) -- C:\install.res.1041.dll
[2007/11/07 08:44:20 | 000,078,864 | ---- | M] (Microsoft Corporation) -- C:\install.res.1042.dll
[2007/11/07 08:44:20 | 000,074,768 | ---- | M] (Microsoft Corporation) -- C:\install.res.2052.dll
[2007/11/07 08:44:20 | 000,095,248 | ---- | M] (Microsoft Corporation) -- C:\install.res.3082.dll
[2012/06/20 16:46:24 | 002,621,440 | RH-- | M] () -- C:\K54HR.BIN
[2011/10/13 05:50:42 | 000,000,019 | ---- | M] () -- C:\K54HR_WIN7.20
[2006/12/01 23:37:14 | 000,904,704 | ---- | M] (Microsoft Corporation) -- C:\msdia80.dll
[2012/11/25 01:01:16 | 067,108,864 | -HS- | M] () -- C:\pagefile.sys
[2012/01/20 00:55:09 | 000,000,303 | ---- | M] () -- C:\Pass.txt
[2011/10/13 05:50:42 | 000,000,007 | ---- | M] () -- C:\RECOVERY.DAT
[2011/08/30 12:00:22 | 000,001,083 | ---- | M] () -- C:\setup.iss
[2012/11/25 01:01:16 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2012/07/22 19:21:04 | 000,000,026 | ---- | M] () -- C:\UpdaterforApp.ini
[2007/11/07 08:00:40 | 000,005,686 | ---- | M] () -- C:\vcredist.bmp
[2007/11/07 08:09:22 | 001,442,522 | ---- | M] () -- C:\VC_RED.cab
[2007/11/07 08:12:28 | 000,232,960 | ---- | M] () -- C:\VC_RED.MSI
[2012/10/25 22:37:24 | 000,002,128 | ---- | M] () -- C:\{715E9EC5-DC6A-4204-898B-50B0AF58FC25}
[2012/11/24 16:43:40 | 000,001,720 | ---- | M] () -- C:\{9C9295E7-21BD-49A1-8CEF-3F1AE03B965F}
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[2012/10/24 03:46:42 | 013,739,008 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\ieframe.dll
[5 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
< %systemroot%\system32\drivers\*.sys /90 >
< %appdata%\*.* >
[2012/11/25 01:02:15 | 000,000,376 | ---- | M] () -- C:\Users\Paul\AppData\Roaming\sp_data.sys
< %PROGRAMFILES%\*. >
[2012/11/16 09:24:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\1ClickDownload
[2012/11/16 09:19:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
[2012/11/20 08:59:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AMD APP
[2012/11/16 09:24:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AmIcoSingLun
[2012/11/16 09:24:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update
[2012/11/16 09:24:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ASM104xUSB3
[2012/11/16 09:24:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ASUS
[2012/11/16 09:20:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ATI Technologies
[2012/11/16 09:26:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour
[2012/11/18 16:04:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2012/11/16 09:20:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CyberLink
[2012/11/16 09:20:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EaseUS
[2012/11/16 09:25:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\epson
[2012/11/16 09:20:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Epson Software
[2012/11/16 09:25:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\eSpeak
[2012/07/07 22:58:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Everything
[2012/11/16 09:25:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Ffmpeg For Audacity
[2012/11/22 00:48:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
[2012/11/18 03:25:33 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2012/11/16 09:20:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel
[2012/11/18 19:02:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2012/11/16 09:25:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\iTunes
[2012/11/16 09:21:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
[2012/11/16 09:25:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Lame For Audacity
[2012/10/12 05:56:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Macrovision Corporation
[2012/06/24 06:24:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft
[2012/11/16 09:25:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Analysis Services
[2012/06/24 05:51:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Application Virtualization Client
[2012/11/16 09:21:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
[2012/11/16 09:25:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight
[2012/11/16 09:21:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[2012/11/16 09:25:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2012/11/24 09:47:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2012/11/16 09:25:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Movie Maker 2.6
[2012/11/24 16:08:45 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox
[2012/11/24 16:12:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2012/11/18 15:48:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2012/11/16 09:21:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSECache
[2012/07/14 22:03:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSXML 4.0
[2012/11/16 09:25:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Norton 360
[2012/11/16 09:25:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Norton Safe Web Lite
[2012/11/16 09:25:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Norton Security Scan
[2012/11/24 16:27:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NortonInstaller
[2012/11/16 09:21:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Paragon Software
[2012/11/16 09:25:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PixiePack Codec Pack
[2012/11/16 09:25:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Qualcomm Atheros WiFi Driver Installation
[2012/11/16 09:21:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\RapidSolution
[2012/11/16 09:21:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Realtek
[2012/11/18 15:48:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2012/11/16 09:21:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ScanSoft
[2012/10/07 23:12:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SlimDrivers
[2012/11/20 00:10:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Steam
[2012/06/15 02:21:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Symantec
[2012/06/15 02:18:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Synaptics
[2012/11/04 12:06:52 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Temp
[2012/06/15 03:40:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\TuneUp Utilities 2012
[2009/07/14 05:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information
[2012/07/10 04:51:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Visual BCD
[2012/09/16 22:34:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WebSite X5 v9 - Smart
[2012/07/26 10:55:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2011/10/19 05:22:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live
[2012/07/26 10:55:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2012/11/18 19:02:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2012/09/29 23:31:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player Plus!
[2012/07/26 09:13:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Multimedia Platform
[2012/07/26 09:12:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2012/07/26 10:55:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2012/07/26 09:13:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2012/11/18 16:04:28 | 000,000,000 | -HSD | M] -- C:\Program Files (x86)\Windows Sidebar
========== Alternate Data Streams ==========
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:AC57032B
< End of report >
Attached Files
-
OTL.Txt 431.63KB
68 downloads
-
Extras.Txt 108.05KB
130 downloads
Sign In
Create Account
