This topic is locked
Got most of it out ,but computer would not boot in safe mode,and malwarebytes would not enable malicious web site blocking
was told to type msconfig in run and tick safe mode and with network under boot tab ,now computer will not boot at all
Can anyone help?
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 13-03-2013 (ATTENTION: FRST version is 12 days old)
Ran by SYSTEM at 25-03-2013 09:28:41
Running from H:\
Windows 7 Professional Service Pack 1 (X64) OS Language: English(US)
The current controlset is ControlSet002
==================== Registry (Whitelisted) ===================
HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [11474024 2010-10-05] (Realtek Semiconductor)
HKLM\...\Run: [Acronis Scheduler2 Service] "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [394832 2011-06-27] (Acronis)
HKLM\...\Run: [IntelliType Pro] "c:\Program Files\Microsoft Device Center\itype.exe" [1464928 2012-06-26] (Microsoft Corporation)
HKLM\...\Run: [IntelliPoint] "c:\Program Files\Microsoft Device Center\ipoint.exe" [2004584 2012-06-26] (Microsoft Corporation)
HKLM\...\Run: [hshcpi] "C:\Windows\System32\rundll32.exe" "C:\Users\Hank\AppData\Roaming\hshcpi.dll",NewMember [586240 2013-03-20] ()
HKLM\...\Run: [c4d6820f-2eed-4e77-8cac-891e9f6db4d1] C:\Users\Hank\AppData\Roaming\c4d6820f-2eed-4e77-8cac-891e9f6db4d1.exe [x]
HKLM-x32\...\Run: [BiosNotice] C:\Program Files (x86)\BIOSTAR\BiosNotice\BiosNotice.exe [1003008 2010-10-13] ()
HKLM-x32\...\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [284184 2011-02-09] (Intel Corporation)
HKLM-x32\...\Run: [SAOB Monitor] C:\Program Files (x86)\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe [2536440 2011-05-10] (Acronis)
HKLM-x32\...\Run: [PivotSoftware] "C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe" -delay=10 [110192 2010-05-13] ()
HKU\Hank\...\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler [222496 2012-12-23] (Acresso Corporation)
HKU\Jonas\...\Run: [AnyDVD] C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe [4828792 2011-02-01] (SlySoft, Inc.)
HKU\Jonas\...\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [x]
HKU\Jonas\...\Run: [Advanced SystemCare 5] "C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart [x]
HKU\Jonas\...\Run: [Exetender] "C:\Program Files (x86)\FantastiGames\GPlayer.exe" /runonstartup [x]
HKLM\...\RunOnce: [*Restore] C:\Windows\system32\rstrui.exe /RUNONCE [296960 2010-11-20] (Microsoft Corporation)
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] C:\$Recycle.Bin\S-1-5-18\$454e0e414c1fbaf8774438c9ac6732d9\n. ATTENTION! ====> ZeroAccess
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1
Tcpip\..\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}: [NameServer]107.6.133.8,23.23.180.210
Startup: C:\Users\Hank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
ShortcutTarget: MagicDisc.lnk -> C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
==================== Services (Whitelisted) ===================
2 AcrSch2Svc; "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe" [1113784 2011-06-27] (Acronis)
2 AdvancedSystemCareService6; C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [465216 2013-01-15] (IObit)
2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [3246040 2011-09-05] (Acronis)
2 Asset Management Daemon; C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\AM\dtsslsrv.exe [133744 2011-05-26] ()
2 ccEvtMgr; "C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon [108392 2009-07-08] (Symantec Corporation)
2 ccSetMgr; "C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon [108392 2009-07-08] (Symantec Corporation)
4 Freemake Improver; "C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe" [101376 2012-11-23] (Freemake)
4 FreemakeVideoCapture; "C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe" [8704 2012-08-21] (Microsoft)
3 LiveUpdate; "C:\PROGRA~2\Symantec\LIVEUP~1\LUCOMS~1.EXE" [3093880 2009-07-13] (Symantec Corporation)
2 MBAMScheduler; "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe" [398184 2012-12-14] (Malwarebytes Corporation)
2 MBAMService; "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe" [682344 2012-12-14] (Malwarebytes Corporation)
2 SmcService; "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe" [3197256 2009-09-17] (Symantec Corporation)
4 SNAC; "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE" [411976 2009-09-17] (Symantec Corporation)
2 Symantec AntiVirus; "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe" [2477304 2009-09-17] (Symantec Corporation)
2 TeamViewer8; "C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe" [3560288 2013-03-06] (TeamViewer GmbH)
4 TomTomHOMEService; "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe" [92632 2012-08-28] (TomTom)
==================== Drivers (Whitelisted) =====================
3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.)
3 AnyDVD; C:\Windows\SysWow64\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.)
1 BIOS; \??\C:\Windows\system32\drivers\BIOS64.sys [14136 2009-07-15] (BIOSTAR Group)
1 BS_I2cIo; \??\C:\Windows\system32\drivers\BS_I2c64.sys [15408 2010-05-17] (BIOSTAR Group)
3 DigiartyVirtualCDBus; C:\Windows\System32\Drivers\DigiartyVirtualCDBus.sys [276256 2013-02-25] (Digiarty Software, Inc.)
1 eeCtrl; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-09] (Symantec Corporation)
3 EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2012-08-09] (Symantec Corporation)
3 MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [24176 2012-12-14] (Malwarebytes Corporation)
3 NAVENG; \??\C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20130323.008\ENG64.SYS [126192 2013-01-16] (Symantec Corporation)
3 NAVEX15; \??\C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20130323.008\EX64.SYS [2087664 2013-01-16] (Symantec Corporation)
3 PdiPorts; C:\Windows\System32\Drivers\PdiPorts.sys [20592 2011-05-05] (Portrait Displays, Inc.)
1 SRTSP; C:\Windows\System32\Drivers\SRTSP64.SYS [443952 2009-08-25] (Symantec Corporation)
3 SRTSPL; C:\Windows\System32\Drivers\SRTSPL64.SYS [481840 2009-08-25] (Symantec Corporation)
1 SRTSPX; C:\Windows\System32\Drivers\SRTSPX64.SYS [32304 2009-08-25] (Symantec Corporation)
3 SWDUMon; C:\Windows\System32\Drivers\SWDUMon.sys [15712 2012-11-02] ()
3 SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [172592 2012-06-03] (Symantec Corporation)
3 Teefer2; C:\Windows\System32\Drivers\Teefer2.sys [62512 2009-05-27] (Symantec Corporation)
1 WPS; \??\C:\Windows\system32\drivers\wpsdrvnt.sys [52784 2009-09-17] (Symantec Corporation)
3 WpsHelper; C:\Windows\System32\Drivers\WpsHelper.sys [233120 2012-10-04] (Symantec Corporation)
3 catchme; [x]
3 cpudrv64; [x]
3 cpuz134; [x]
3 cpuz135; [x]
3 EraserUtilDrv11220; [x]
2 gupdate; [x]
3 gupdatem; [x]
3 w4shwdrv; [x]
==================== NetSvcs (Whitelisted) ====================
==================== One Month Created Files and Folders ========
2013-03-25 09:28 - 2013-03-25 09:28 - 00000000 ____D C:\FRST
2013-03-23 17:53 - 2013-03-23 17:53 - 00019716 ____A C:\Users\Hank\Desktop\dds.txt
2013-03-23 17:53 - 2013-03-23 17:53 - 00013511 ____A C:\Users\Hank\Desktop\attach.txt
2013-03-23 17:51 - 2013-03-23 17:51 - 00001098 ____A C:\Users\Hank\Desktop\dds.scr - Shortcut.lnk
2013-03-23 17:50 - 2013-03-23 17:50 - 00688992 ____R (Swearware) C:\Users\Hank\Downloads\dds.scr
2013-03-23 17:43 - 2013-03-23 17:43 - 00353352 ____A (Malwarebytes Corporation) C:\Users\Hank\Downloads\mbam-check-2.0.0.1000.exe
2013-03-23 17:43 - 2013-03-23 17:43 - 00001262 ____A C:\Users\Hank\Desktop\mbam-check-2.0.0.1000.exe - Shortcut.lnk
2013-03-23 17:38 - 2013-03-23 17:38 - 00039923 ____A C:\Users\Hank\Desktop\CheckResults.txt mbx.txt
2013-03-23 17:37 - 2013-03-23 17:44 - 00039923 ____A C:\Users\Hank\Desktop\CheckResults.txt
2013-03-23 06:32 - 2013-03-23 06:32 - 00001208 ____A C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-03-23 05:44 - 2013-03-24 18:37 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-03-23 05:44 - 2013-03-23 05:45 - 00001155 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-03-23 05:44 - 2012-12-14 12:49 - 00024176 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-03-23 05:32 - 2013-03-23 05:36 - 00000000 ____D C:\Users\Hank\AppData\Roaming\PC Utility Kit
2013-03-23 05:32 - 2013-03-23 05:36 - 00000000 ____D C:\ProgramData\PC Utility Kit
2013-03-23 04:56 - 2013-03-23 04:56 - 00000000 ____D C:\Users\Default\AppData\Roaming\IObit
2013-03-23 04:56 - 2013-03-23 04:56 - 00000000 ____D C:\Users\Default User\AppData\Roaming\IObit
2013-03-22 17:07 - 2013-03-22 17:12 - 00000000 ____D C:\Program Files (x86)\FixCleaner
2013-03-22 16:50 - 2013-03-22 16:50 - 00000000 ____D C:\Users\Hank\Documents\ProcAlyzer Dumps
2013-03-22 06:55 - 2013-03-22 08:36 - 10485760 ____A C:\restore.0 (2).etl
2013-03-22 06:54 - 2013-03-20 23:11 - 10485760 ____A C:\restore.1.etl
2013-03-22 06:53 - 2013-03-22 08:36 - 10485760 ____A C:\restore.0.etl
2013-03-21 20:45 - 2013-03-21 20:45 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-03-21 20:45 - 2013-03-21 20:45 - 00000000 ____A C:\autoexec.bat
2013-03-21 20:44 - 2013-03-24 08:11 - 00000000 ____D C:\Windows\6B6C4C461B7E4A419E70ACFBB22B1D81.TMP
2013-03-21 17:10 - 2013-03-21 17:10 - 00003072 __ASH C:\Thumbs.db
2013-03-20 17:14 - 2013-03-23 18:31 - 00006540 ____A C:\Users\Hank\AppData\Local\38488874-dfec-45ca-a9c2-6e924f0e15a4.crx
2013-03-20 17:14 - 2013-03-20 17:14 - 00586240 ____A () C:\Users\Hank\AppData\Roaming\hshcpi.dll
2013-03-20 17:13 - 2013-03-20 17:14 - 00307660 ____A C:\Users\Hank\AppData\Roaming\c4d6820f-2eed-4e77-8cac-891e9f6db4d1
2013-03-20 17:13 - 2013-03-20 17:13 - 00000175 ____A C:\Users\Hank\AppData\Roaming\$h.bat
2013-03-18 15:52 - 2013-03-23 04:52 - 00012322 ____A C:\Windows\PFRO.log
2013-03-17 09:01 - 2013-03-17 09:01 - 00001167 ____A C:\Users\Hank\Desktop\tdsskiller.exe - Shortcut.lnk
2013-03-17 09:00 - 2013-03-17 09:00 - 02237968 ____A (Kaspersky Lab ZAO) C:\Users\Hank\Downloads\tdsskiller.exe
2013-03-17 07:05 - 2013-03-24 08:11 - 00000000 ____D C:\Users\Hank\AppData\Local\Hide_My_IP_Trial_Time_Res
2013-03-17 06:45 - 2012-12-11 08:12 - 00441104 ____A (Hide My IP) C:\Windows\System32\HMIPCore64.dll
2013-03-17 06:45 - 2012-01-19 04:23 - 00339320 ____A (Hide My IP) C:\Windows\SysWOW64\HMIPCore.dll
2013-03-17 06:44 - 2013-03-17 06:56 - 00003912 ____A C:\Windows\SysWOW64\HideMyIpSRV.ini
2013-03-17 06:44 - 2013-03-17 06:56 - 00002096 ____A C:\Windows\SysWOW64\HideMyIpSRVOff.ini
2013-03-17 06:44 - 2013-03-17 06:56 - 00002096 ____A C:\Windows\System32\HideMyIpSRVOff.ini
2013-03-14 06:40 - 2013-03-23 18:08 - 00002515 ____A C:\Windows\setupact.log
2013-03-14 06:40 - 2013-03-16 16:54 - 00000000 ____A C:\Windows\setuperr.log
2013-03-14 04:43 - 2013-03-14 04:43 - 19221504 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 15407616 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 14317568 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 13761024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-03-14 04:43 - 2013-03-14 04:43 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-03-14 04:43 - 2013-03-14 04:43 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 02240512 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 02046464 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 01766912 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-03-14 04:43 - 2013-03-14 04:43 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-03-14 04:43 - 2013-03-14 04:43 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-03-14 04:43 - 2013-03-14 04:43 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-03-14 04:43 - 2013-03-14 04:43 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 01129984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00526848 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-03-14 04:43 - 2013-03-14 04:43 - 00391680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-03-14 04:43 - 2013-03-14 04:43 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-03-14 04:43 - 2013-03-14 04:43 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-03-14 04:43 - 2013-03-14 04:43 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-03-14 04:42 - 2013-03-14 04:42 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-03-13 23:01 - 2013-03-13 23:01 - 00000000 __SHD C:\Windows\System32\%APPDATA%
2013-03-13 23:00 - 2013-03-13 23:00 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-03-13 22:56 - 2013-02-11 20:12 - 00019968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023.sys
2013-02-26 20:43 - 2013-03-23 04:52 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
2013-02-26 19:49 - 2013-02-23 20:42 - 00000027 ____A C:\Windows\System32\Drivers\etc\hosts.20130226-224900.backup
2013-02-26 06:44 - 2013-03-22 16:49 - 00000000 ____D C:\Program Files (x86)\ParetoLogic
2013-02-24 16:52 - 2013-02-24 16:52 - 00000000 ____D C:\Users\Hank\AppData\Local\Secunia PSI
2013-02-24 16:41 - 2013-03-23 04:57 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-02-24 16:31 - 2013-02-24 16:31 - 01085344 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll
2013-02-24 16:31 - 2013-02-24 16:31 - 00963488 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll
2013-02-24 16:31 - 2013-02-24 16:31 - 00310688 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-02-24 16:31 - 2013-02-24 16:31 - 00188832 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-02-24 16:31 - 2013-02-24 16:31 - 00188320 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-02-24 16:31 - 2013-02-24 16:31 - 00108448 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge-64.dll
2013-02-24 16:31 - 2013-02-24 16:31 - 00000000 ____D C:\Program Files\Java
2013-02-23 20:34 - 2013-02-23 20:47 - 00000000 ____D C:\Qoobox
2013-02-23 20:34 - 2013-02-23 20:45 - 00000000 ____D C:\Windows\erdnt
2013-02-23 20:34 - 2011-06-25 22:45 - 00256000 ____A C:\Windows\PEV.exe
2013-02-23 20:34 - 2010-11-07 09:20 - 00208896 ____A C:\Windows\MBR.exe
2013-02-23 20:34 - 2009-04-19 20:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-02-23 20:34 - 2000-08-30 16:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-02-23 20:34 - 2000-08-30 16:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-02-23 20:34 - 2000-08-30 16:00 - 00098816 ____A C:\Windows\sed.exe
2013-02-23 20:34 - 2000-08-30 16:00 - 00080412 ____A C:\Windows\grep.exe
2013-02-23 20:34 - 2000-08-30 16:00 - 00068096 ____A C:\Windows\zip.exe
2013-02-23 17:45 - 2013-02-23 17:45 - 00002460 ____A C:\Users\Hank\Documents\cc_20130223_204345.reg
2013-02-23 17:37 - 2013-02-23 17:37 - 78606336 ____A C:\Windows\System32\config\SOFTWARE.iobit
2013-02-23 17:37 - 2013-02-23 17:37 - 00446464 ____A C:\Windows\System32\config\DEFAULT.iobit
2013-02-23 17:37 - 2013-02-23 17:37 - 00061440 ____A C:\Windows\System32\config\SAM.iobit
2013-02-23 17:37 - 2013-02-23 17:37 - 00024576 ____A C:\Windows\System32\config\SECURITY.iobit
==================== One Month Modified Files and Folders =======
2013-03-25 09:28 - 2013-03-25 09:28 - 00000000 ____D C:\FRST
2013-03-24 18:37 - 2013-03-23 05:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-03-24 18:37 - 2011-11-15 07:03 - 00000000 ____D C:\Windows\pss
2013-03-24 18:37 - 2011-09-03 12:28 - 00000000 ____D C:\ProgramData\Intel
2013-03-24 18:37 - 2011-09-03 11:59 - 00000000 ____D C:\users\Hank
2013-03-24 18:37 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\AppCompat
2013-03-24 08:11 - 2013-03-21 20:44 - 00000000 ____D C:\Windows\6B6C4C461B7E4A419E70ACFBB22B1D81.TMP
2013-03-24 08:11 - 2013-03-17 07:05 - 00000000 ____D C:\Users\Hank\AppData\Local\Hide_My_IP_Trial_Time_Res
2013-03-24 08:11 - 2013-01-06 09:37 - 00000000 ____D C:\Users\Hank\AppData\Roaming\Wise Disk Cleaner
2013-03-24 08:11 - 2012-11-07 06:07 - 00000000 ____D C:\Users\Hank\AppData\Roaming\uTorrent
2013-03-24 08:11 - 2012-05-02 11:12 - 00000000 ____D C:\Users\Hank\AppData\Roaming\Wise Registry Cleaner
2013-03-24 08:11 - 2011-12-31 11:02 - 00000000 ____D C:\Program Files (x86)\File Type Assistant
2013-03-24 08:11 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\NDF
2013-03-23 18:36 - 2012-01-29 13:16 - 00018480 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-03-23 18:36 - 2012-01-29 13:16 - 00018480 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-03-23 18:35 - 2011-12-31 10:18 - 01834420 ____A C:\Windows\WindowsUpdate.log
2013-03-23 18:31 - 2013-03-20 17:14 - 00006540 ____A C:\Users\Hank\AppData\Local\38488874-dfec-45ca-a9c2-6e924f0e15a4.crx
2013-03-23 18:14 - 2009-07-13 21:13 - 00783310 ____A C:\Windows\System32\PerfStringBackup.INI
2013-03-23 18:10 - 2009-07-13 20:45 - 05368904 ____A C:\Windows\System32\FNTCACHE.DAT
2013-03-23 18:09 - 2011-11-14 17:03 - 00073266 ____A C:\Windows\SysWOW64\DTSSL.log
2013-03-23 18:09 - 2009-07-13 21:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-03-23 18:08 - 2013-03-14 06:40 - 00002515 ____A C:\Windows\setupact.log
2013-03-23 18:03 - 2012-09-23 17:52 - 00000000 ____D C:\Users\Hank\Desktop\backups
2013-03-23 17:53 - 2013-03-23 17:53 - 00019716 ____A C:\Users\Hank\Desktop\dds.txt
2013-03-23 17:53 - 2013-03-23 17:53 - 00013511 ____A C:\Users\Hank\Desktop\attach.txt
2013-03-23 17:51 - 2013-03-23 17:51 - 00001098 ____A C:\Users\Hank\Desktop\dds.scr - Shortcut.lnk
2013-03-23 17:50 - 2013-03-23 17:50 - 00688992 ____R (Swearware) C:\Users\Hank\Downloads\dds.scr
2013-03-23 17:49 - 2012-04-10 08:03 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-03-23 17:44 - 2013-03-23 17:37 - 00039923 ____A C:\Users\Hank\Desktop\CheckResults.txt
2013-03-23 17:43 - 2013-03-23 17:43 - 00353352 ____A (Malwarebytes Corporation) C:\Users\Hank\Downloads\mbam-check-2.0.0.1000.exe
2013-03-23 17:43 - 2013-03-23 17:43 - 00001262 ____A C:\Users\Hank\Desktop\mbam-check-2.0.0.1000.exe - Shortcut.lnk
2013-03-23 17:38 - 2013-03-23 17:38 - 00039923 ____A C:\Users\Hank\Desktop\CheckResults.txt mbx.txt
2013-03-23 16:24 - 2011-11-05 17:09 - 1307362304 ____A C:\outlook.pst
2013-03-23 16:17 - 2011-09-03 12:28 - 00110992 ____A C:\Users\Hank\AppData\Local\GDIPFONTCACHEV1.DAT
2013-03-23 14:00 - 2012-10-07 19:20 - 00000464 ____A C:\Windows\Tasks\ParetoLogic Registration.job
2013-03-23 06:33 - 2011-11-05 17:05 - 00000000 ____D C:\Users\Hank\AppData\Roaming\TeamViewer
2013-03-23 06:32 - 2013-03-23 06:32 - 00001208 ____A C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-03-23 06:32 - 2011-09-04 22:55 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-03-23 05:45 - 2013-03-23 05:44 - 00001155 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-03-23 05:36 - 2013-03-23 05:32 - 00000000 ____D C:\Users\Hank\AppData\Roaming\PC Utility Kit
2013-03-23 05:36 - 2013-03-23 05:32 - 00000000 ____D C:\ProgramData\PC Utility Kit
2013-03-23 04:57 - 2013-02-24 16:41 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-03-23 04:56 - 2013-03-23 04:56 - 00000000 ____D C:\Users\Default\AppData\Roaming\IObit
2013-03-23 04:56 - 2013-03-23 04:56 - 00000000 ____D C:\Users\Default User\AppData\Roaming\IObit
2013-03-23 04:53 - 2012-02-25 13:17 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-03-23 04:52 - 2013-03-18 15:52 - 00012322 ____A C:\Windows\PFRO.log
2013-03-23 04:52 - 2013-02-26 20:43 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
2013-03-22 17:12 - 2013-03-22 17:07 - 00000000 ____D C:\Program Files (x86)\FixCleaner
2013-03-22 17:09 - 2012-11-25 06:42 - 00000000 ____D C:\Users\Hank\AppData\Roaming\FixCleaner
2013-03-22 17:07 - 2012-11-02 16:57 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers
2013-03-22 16:50 - 2013-03-22 16:50 - 00000000 ____D C:\Users\Hank\Documents\ProcAlyzer Dumps
2013-03-22 16:49 - 2013-02-26 06:44 - 00000000 ____D C:\Program Files (x86)\ParetoLogic
2013-03-22 16:49 - 2012-10-07 19:19 - 00000000 ____D C:\ProgramData\ParetoLogic
2013-03-22 15:30 - 2012-12-08 19:26 - 00000000 ____D C:\Users\Hank\AppData\Roaming\ParetoLogic
2013-03-22 08:36 - 2013-03-22 06:55 - 10485760 ____A C:\restore.0 (2).etl
2013-03-22 08:36 - 2013-03-22 06:53 - 10485760 ____A C:\restore.0.etl
2013-03-22 07:22 - 2011-11-06 08:35 - 00000000 ____D C:\ProgramData\Adobe
2013-03-22 07:21 - 2011-11-06 08:35 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-03-22 06:16 - 2009-07-13 21:08 - 00032554 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-03-22 06:13 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\registration
2013-03-22 05:06 - 2012-05-02 11:12 - 00001273 ____A C:\Users\Public\Desktop\Wise Registry Cleaner.lnk
2013-03-21 20:45 - 2013-03-21 20:45 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-03-21 20:45 - 2013-03-21 20:45 - 00000000 ____A C:\autoexec.bat
2013-03-21 17:10 - 2013-03-21 17:10 - 00003072 __ASH C:\Thumbs.db
2013-03-20 23:11 - 2013-03-22 06:54 - 10485760 ____A C:\restore.1.etl
2013-03-20 17:14 - 2013-03-20 17:14 - 00586240 ____A () C:\Users\Hank\AppData\Roaming\hshcpi.dll
2013-03-20 17:14 - 2013-03-20 17:13 - 00307660 ____A C:\Users\Hank\AppData\Roaming\c4d6820f-2eed-4e77-8cac-891e9f6db4d1
2013-03-20 17:13 - 2013-03-20 17:13 - 00000175 ____A C:\Users\Hank\AppData\Roaming\$h.bat
2013-03-18 11:20 - 2012-05-02 11:20 - 00000464 ____A C:\Windows\Tasks\Wise Registry Cleaner Schedule Task.job
2013-03-18 08:41 - 2013-01-06 11:12 - 00000452 ____A C:\Windows\Tasks\Wise Disk Cleaner Schedule Task.job
2013-03-17 09:01 - 2013-03-17 09:01 - 00001167 ____A C:\Users\Hank\Desktop\tdsskiller.exe - Shortcut.lnk
2013-03-17 09:00 - 2013-03-17 09:00 - 02237968 ____A (Kaspersky Lab ZAO) C:\Users\Hank\Downloads\tdsskiller.exe
2013-03-17 06:56 - 2013-03-17 06:44 - 00003912 ____A C:\Windows\SysWOW64\HideMyIpSRV.ini
2013-03-17 06:56 - 2013-03-17 06:44 - 00002096 ____A C:\Windows\SysWOW64\HideMyIpSRVOff.ini
2013-03-17 06:56 - 2013-03-17 06:44 - 00002096 ____A C:\Windows\System32\HideMyIpSRVOff.ini
2013-03-16 23:53 - 2012-10-07 19:19 - 00000438 ____A C:\Windows\Tasks\ParetoLogic Update Version2.job
2013-03-16 16:55 - 2011-11-11 20:17 - 00001908 ____A C:\Windows\diagwrn.xml
2013-03-16 16:55 - 2011-11-11 20:17 - 00001908 ____A C:\Windows\diagerr.xml
2013-03-16 16:54 - 2013-03-14 06:40 - 00000000 ____A C:\Windows\setuperr.log
2013-03-14 08:35 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\rescache
2013-03-14 06:35 - 2011-09-03 12:51 - 00000000 ____D C:\Windows\Panther
2013-03-14 06:33 - 2011-11-15 06:58 - 00000864 ____A C:\Users\Public\Desktop\CCleaner.lnk
2013-03-14 06:33 - 2011-11-15 06:58 - 00000000 ____D C:\Program Files\CCleaner
2013-03-14 04:47 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-03-14 04:47 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-03-14 04:47 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-03-14 04:47 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-03-14 04:47 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-03-14 04:43 - 2013-03-14 04:43 - 19221504 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 15407616 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 14317568 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 13761024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-03-14 04:43 - 2013-03-14 04:43 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-03-14 04:43 - 2013-03-14 04:43 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 02240512 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 02046464 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 01766912 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-03-14 04:43 - 2013-03-14 04:43 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-03-14 04:43 - 2013-03-14 04:43 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-03-14 04:43 - 2013-03-14 04:43 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-03-14 04:43 - 2013-03-14 04:43 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 01129984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00526848 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-03-14 04:43 - 2013-03-14 04:43 - 00391680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-03-14 04:43 - 2013-03-14 04:43 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-03-14 04:43 - 2013-03-14 04:43 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-03-14 04:43 - 2013-03-14 04:43 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-03-14 04:43 - 2013-03-14 04:43 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-03-14 04:43 - 2013-03-14 04:43 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-03-14 04:42 - 2013-03-14 04:42 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-03-14 04:42 - 2013-03-14 04:42 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-03-13 23:21 - 2011-09-04 02:40 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-03-13 23:03 - 2011-09-04 01:27 - 72013344 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-03-13 23:03 - 2011-09-03 12:43 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-03-13 23:01 - 2013-03-13 23:01 - 00000000 __SHD C:\Windows\System32\%APPDATA%
2013-03-13 23:00 - 2013-03-13 23:00 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-03-12 23:49 - 2012-04-10 08:03 - 00693976 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-03-12 23:49 - 2011-09-04 02:17 - 00073432 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-03-10 09:55 - 2012-09-13 17:11 - 00000000 ____D C:\ProgramData\IObit
2013-03-10 07:02 - 2012-08-07 18:37 - 00000000 ____D C:\Users\Hank\AppData\Roaming\vlc
2013-03-02 17:04 - 2012-01-08 14:41 - 00000000 ___RD C:\Users\Hank\Virtual Machines
2013-03-01 18:05 - 2011-11-05 15:47 - 00009826 ____A C:\Users\Hank\Documents\Fly Tying Nite.xlsx
2013-02-28 20:45 - 2011-09-03 12:57 - 00000000 ____D C:\Program Files (x86)\CloneDVD
2013-02-28 20:27 - 2011-09-03 12:57 - 00000000 ____D C:\Users\Hank\AppData\Roaming\Vso
2013-02-26 08:51 - 2012-01-30 06:30 - 00000000 ____D C:\users\Jonas
2013-02-26 06:50 - 2011-11-23 06:48 - 00000326 ____A C:\Windows\reimage.ini
2013-02-26 06:45 - 2012-10-07 18:23 - 00000224 ____A C:\Windows\SysWOW64\9B13A86D.plf
2013-02-26 06:44 - 2012-10-07 18:23 - 00000000 ____A C:\FileRecovery.log
2013-02-25 21:49 - 2012-10-10 17:35 - 00000000 ____D C:\Users\Hank\AppData\Roaming\dvdcss
2013-02-25 20:58 - 2012-12-18 07:19 - 00276256 ____A (Digiarty Software, Inc.) C:\Windows\System32\Drivers\DigiartyVirtualCDBus.sys
2013-02-24 16:52 - 2013-02-24 16:52 - 00000000 ____D C:\Users\Hank\AppData\Local\Secunia PSI
2013-02-24 16:31 - 2013-02-24 16:31 - 01085344 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll
2013-02-24 16:31 - 2013-02-24 16:31 - 00963488 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll
2013-02-24 16:31 - 2013-02-24 16:31 - 00310688 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-02-24 16:31 - 2013-02-24 16:31 - 00188832 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-02-24 16:31 - 2013-02-24 16:31 - 00188320 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-02-24 16:31 - 2013-02-24 16:31 - 00108448 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge-64.dll
2013-02-24 16:31 - 2013-02-24 16:31 - 00000000 ____D C:\Program Files\Java
2013-02-23 20:47 - 2013-02-23 20:34 - 00000000 ____D C:\Qoobox
2013-02-23 20:46 - 2012-08-10 18:29 - 00000000 ____D C:\users\Live Billiards 2
2013-02-23 20:46 - 2009-07-13 19:20 - 00000000 __RHD C:\users\Default
2013-02-23 20:45 - 2013-02-23 20:34 - 00000000 ____D C:\Windows\erdnt
2013-02-23 20:42 - 2013-02-26 19:49 - 00000027 ____A C:\Windows\System32\Drivers\etc\hosts.20130226-224900.backup
2013-02-23 20:42 - 2009-07-13 18:34 - 00000215 ____A C:\Windows\system.ini
2013-02-23 20:40 - 2009-07-13 18:34 - 78606336 ____A C:\Windows\System32\config\SOFTWARE.bak
2013-02-23 20:40 - 2009-07-13 18:34 - 20185088 ____A C:\Windows\System32\config\SYSTEM.bak
2013-02-23 20:40 - 2009-07-13 18:34 - 00446464 ____A C:\Windows\System32\config\DEFAULT.bak
2013-02-23 20:40 - 2009-07-13 18:34 - 00061440 ____A C:\Windows\System32\config\SAM.bak
2013-02-23 20:40 - 2009-07-13 18:34 - 00024576 ____A C:\Windows\System32\config\SECURITY.bak
2013-02-23 20:39 - 2012-10-12 17:57 - 00000000 ____D C:\Users\Hank\AppData\Roaming\DefaultTab
2013-02-23 20:39 - 2012-10-12 17:56 - 00000000 ____D C:\Users\Hank\AppData\Roaming\OneTab
2013-02-23 19:36 - 2013-02-15 18:25 - 00000000 ____D C:\Program Files (x86)\SIW
2013-02-23 19:36 - 2012-12-13 07:31 - 00000000 ____D C:\Users\Hank\AppData\Roaming\Digiarty
2013-02-23 19:36 - 2009-07-13 19:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-02-23 17:45 - 2013-02-23 17:45 - 00002460 ____A C:\Users\Hank\Documents\cc_20130223_204345.reg
2013-02-23 17:37 - 2013-02-23 17:37 - 78606336 ____A C:\Windows\System32\config\SOFTWARE.iobit
2013-02-23 17:37 - 2013-02-23 17:37 - 00446464 ____A C:\Windows\System32\config\DEFAULT.iobit
2013-02-23 17:37 - 2013-02-23 17:37 - 00061440 ____A C:\Windows\System32\config\SAM.iobit
2013-02-23 17:37 - 2013-02-23 17:37 - 00024576 ____A C:\Windows\System32\config\SECURITY.iobit
ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-4113200172-1455572893-3263450326-1000\$454e0e414c1fbaf8774438c9ac6732d9
ZeroAccess:
C:\$Recycle.Bin\S-1-5-18\$454e0e414c1fbaf8774438c9ac6732d9
==================== Known DLLs (Whitelisted) =================
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
==================== EXE ASSOCIATION =====================
HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK
==================== Restore Points =========================
Restore point made on: 2013-03-05 21:00:20
Restore point made on: 2013-03-13 17:59:19
Restore point made on: 2013-03-13 17:59:56
Restore point made on: 2013-03-13 23:00:28
Restore point made on: 2013-03-14 04:40:43
Restore point made on: 2013-03-17 06:57:27
Restore point made on: 2013-03-17 07:13:16
Restore point made on: 2013-03-21 20:45:18
Restore point made on: 2013-03-22 05:07:49
Restore point made on: 2013-03-22 05:08:02
Restore point made on: 2013-03-22 05:30:16
Restore point made on: 2013-03-22 05:47:51
Restore point made on: 2013-03-22 07:15:27
Restore point made on: 2013-03-22 07:16:18
Restore point made on: 2013-03-22 16:49:20
Restore point made on: 2013-03-22 17:11:18
Restore point made on: 2013-03-22 17:11:34
Restore point made on: 2013-03-22 17:17:31
Restore point made on: 2013-03-22 17:20:31
Restore point made on: 2013-03-23 04:55:53
Restore point made on: 2013-03-23 05:01:35
Restore point made on: 2013-03-23 05:36:18
Restore point made on: 2013-03-23 05:42:02
==================== Memory info ===========================
Percentage of memory in use: 7%
Total physical RAM: 16295.18 MB
Available physical RAM: 15118.33 MB
Total Pagefile: 16293.38 MB
Available Pagefile: 15108.6 MB
Total Virtual: 8192 MB
Available Virtual: 8191.9 MB
==================== Partitions =============================
1 Drive c: () (Fixed) (Total:931.41 GB) (Free:761.18 GB) NTFS
2 Drive d: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
3 Drive f: () (Fixed) (Total:931.41 GB) (Free:761.69 GB) NTFS
4 Drive g: (GRMCPRXFRER_EN_DVD) (CDROM) (Total:3.09 GB) (Free:0 GB) UDF
5 Drive h: () (Removable) (Total:3.73 GB) (Free:2.04 GB) FAT32
7 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
8 Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 931 GB 2048 KB
Disk 1 Online 931 GB 2048 KB
Disk 2 Online 3823 MB 0 B
Disk 3 No Media 0 B 0 B
Partitions of Disk 0:
===============
Disk ID: 43337595
Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 100 MB 1024 KB
Partition 2 Primary 931 GB 101 MB
==================================================================================
Disk: 0
Partition 1
Type : 07
Hidden: No
Active: Yes
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 1 Y System Rese NTFS Partition 100 MB Healthy
=========================================================
Disk: 0
Partition 2
Type : 07
Hidden: No
Active: No
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 2 C NTFS Partition 931 GB Healthy
=========================================================
Partitions of Disk 1:
===============
Disk ID: F5CD7BF2
Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 100 MB 1024 KB
Partition 2 Primary 931 GB 101 MB
==================================================================================
Disk: 1
Partition 1
Type : 07
Hidden: No
Active: Yes
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 3 D System Rese NTFS Partition 100 MB Healthy
=========================================================
Disk: 1
Partition 2
Type : 07
Hidden: No
Active: No
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 4 F NTFS Partition 931 GB Healthy
=========================================================
Partitions of Disk 2:
===============
Disk ID: E66A677B
Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 3823 MB 16 KB
==================================================================================
Disk: 2
Partition 1
Type : 0B
Hidden: No
Active: Yes
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 5 H FAT32 Removable 3823 MB Healthy
=========================================================
============================== MBR Partition Table ==================
==============================
Partitions of Disk 0:
===============
Disk ID: 43337595
Partition 1:
=========
Hex: 8020210007DF130C0008000000200300
Active: YES
Type: 07 (NTFS)
Size: 100 MB
Partition 2:
=========
Hex: 00DF140C07FEFFFF0028030000286D74
Active: NO
Type: 07 (NTFS)
Size: 931 GB
==============================
Partitions of Disk 1:
===============
Disk ID: F5CD7BF2
Partition 1:
=========
Hex: 8020210007DF130C0008000000200300
Active: YES
Type: 07 (NTFS)
Size: 100 MB
Partition 2:
=========
Hex: 00DF140C07FEFFFF0028030000286D74
Active: NO
Type: 07 (NTFS)
Size: 931 GB
==============================
Partitions of Disk 2:
===============
Disk ID: E66A677B
Partition 1:
=========
Hex: 800101000B0FE0BD20000000E07B7700
Active: YES
Type: 0B
Size: 4 GB
Last Boot: 2013-03-14 20:50
==================== End Of Log =============================
Sign In
Create Account
