Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Malware issue [Solved]


  • This topic is locked This topic is locked

#1
ninja_mommy

ninja_mommy

    Member

  • Member
  • PipPip
  • 11 posts

Hello,

csrss.exe is the name of a critical system process but it can also be malware. It is depends on where it is found. The legitimate location will be in system32 folder. Any other location could be Malware.

Thanks
Joe :)

 

 

Hi Zep, hope you dont mind me replying on your thread but I was browsing bc I am having multiple issues and swear I have an infection but malewarebytes and AVG turn up nothing but something is eating all my resources. Anyway, Joe I have 2 of these in system and have tried ending process and they just come back. How can I get rid of these? I have did recovery to out of box 3x my next option at this point with all issues is do a total wipe out of my HDD. Thanks guys :)

 

Susan


  • 0

Advertisements


#2
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts

I'm not sure if your posting is for Zep or you are just quoting a similar problem? However, if you still require help please perform an FRST scan (instructions below) and post the results.

 

FRST.gif Scan with Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your Desktop.

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • When the tool opens click Yes to disclaimer.
  • Make sure that Addition option is checked.
  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please copy and paste their content into your next reply.


  • 0

#3
ninja_mommy

ninja_mommy

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts

I was quoting him... I have since did a system recovery and ran OLT immediately after and again a few mins ago.

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-11-2014
Ran by Mommy (administrator) on MOMMY-PC on 04-11-2014 19:21:07
Running from C:\Users\Mommy\Downloads
Loaded Profile: Mommy (Available profiles: Mommy)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: English (United States)
Internet Explorer Version 7
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Agere Systems) C:\Windows\System32\agrsmsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgwdsvc.exe
(TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgnsx.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\RSelect\RSelSvc.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TEco.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TANU\TANU.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(DataLode, Inc.) C:\Program Files\Toshiba Registration\Registration.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcfgex.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [] => [X]
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2009-04-21] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6965792 2009-03-12] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1451304 2009-03-18] (Synaptics Incorporated)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [468320 2009-03-06] (TOSHIBA Corporation)
HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [55160 2009-03-09] (TOSHIBA Corporation)
HKLM\...\Run: [SmoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [448376 2008-12-18] (TOSHIBA Corporation)
HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [729088 2009-03-23] (TOSHIBA Corporation)
HKLM\...\Run: [NDSTray.exe] => C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe [299008 2009-05-12] (TOSHIBA CORPORATION)
HKLM\...\Run: [cfFncEnabler.exe] => C:\Program Files\TOSHIBA\ConfigFree\cfFncEnabler.exe [16384 2009-03-24] (Toshiba Corporation)
HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1318912 2009-04-14] (TOSHIBA Corporation)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-20] (Microsoft Corporation)
HKLM\...\Run: [TANU] => C:\Program Files\TOSHIBA\TANU\TANU.exe [263560 2009-03-28] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe [1007616 2009-03-24] (TOSHIBA Corporation)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3649040 2014-10-16] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-03-12] (Realtek Semiconductor Corp.)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-2096730829-1502462945-2231001969-1000\...\Run: [1544741396] => C:\Program Files\Toshiba Registration\Registration.exe [87536 2008-10-21] (DataLode, Inc.)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co...=TSHB&bmod=TSHB
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.co...=TSHB&bmod=TSHB
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co...=TSHB&bmod=TSHB
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.co...=TSHB&bmod=TSHB
SearchScopes: HKLM - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.co...ng}&rlz=1I7TSHB
SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.co...ng}&rlz=1I7TSHB
SearchScopes: HKLM - {84903A98-877D-4CFB-AC81-0920665D1B82} URL = http://www.google.co...ng}&rlz=1I7TSHB
SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.co...&rlz=1I7TSHB_en
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.co...&rlz=1I7TSHB_en
SearchScopes: HKCU - {84903A98-877D-4CFB-AC81-0920665D1B82} URL = http://www.google.co...ng}&rlz=1I7TSHB
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab
DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76
 
FireFox:
========
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-10-28]
 
Chrome: 
=======
CHR HomePage: Default -> hxxp://www.yahoo.com/
CHR StartupUrls: Default -> "hxxp://www.facebook.com/"
CHR Profile: C:\Users\Mommy\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Mommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-28]
CHR Extension: (Google Drive) - C:\Users\Mommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-28]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Mommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-28]
CHR Extension: (YouTube) - C:\Users\Mommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-28]
CHR Extension: (Google Search) - C:\Users\Mommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-28]
CHR Extension: (Google Sheets) - C:\Users\Mommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-28]
CHR Extension: (Google Wallet) - C:\Users\Mommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-28]
CHR Extension: (Gmail) - C:\Users\Mommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-28]
 
========================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 avgfws; C:\Program Files\AVG\AVG2015\avgfws.exe [1486664 2014-10-16] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3487248 2014-10-16] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [298080 2014-10-16] (AVG Technologies CZ, s.r.o.)
R2 ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [46448 2009-03-10] (TOSHIBA CORPORATION)
S3 GameConsoleService; C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe [242424 2008-11-03] (WildTangent, Inc.)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440 2006-10-19] (Hewlett-Packard Company) [File not signed]
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
R2 RSELSVC; C:\Program Files\TOSHIBA\RSelect\RSelSvc.exe [57344 2009-02-19] (TOSHIBA Corporation) [File not signed]
R2 TOSHIBA eco Utility Service; C:\Program Files\TOSHIBA\TECO\TecoService.exe [176128 2009-04-14] (TOSHIBA Corporation) [File not signed]
R2 TOSHIBA HDD SSD Alert Service; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [73728 2009-03-17] (TOSHIBA Corporation) [File not signed]
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [121624 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6x.sys [47928 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [213272 2014-10-07] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [147736 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [21272 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [192792 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [230680 2014-07-18] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [98584 2014-10-05] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27416 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [200984 2014-10-10] (AVG Technologies CZ, s.r.o.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2014-10-30] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-10-01] (Malwarebytes Corporation)
R3 RTL8187Se; C:\Windows\System32\DRIVERS\RTL8187Se.sys [333824 2008-08-22] (Realtek Semiconductor Corporation                           )
R1 RtlProt; C:\Windows\System32\DRIVERS\rtlprot.sys [25896 2007-04-23] (Windows ® Codename Longhorn DDK provider)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2014-11-04 19:21 - 2014-11-04 19:21 - 00015224 _____ () C:\Users\Mommy\Downloads\FRST.txt
2014-11-04 19:20 - 2014-11-04 19:21 - 00000000 ____D () C:\FRST
2014-11-04 19:18 - 2014-11-04 19:19 - 01106432 _____ (Farbar) C:\Users\Mommy\Downloads\FRST.exe
2014-11-04 19:17 - 2014-11-04 19:17 - 00120730 _____ () C:\Users\Mommy\Downloads\OTL2.Txt
2014-11-03 08:37 - 2012-06-02 16:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-11-03 08:37 - 2012-06-02 16:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-11-03 08:37 - 2012-06-02 16:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-11-03 08:37 - 2012-06-02 16:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-11-03 08:36 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-11-03 08:36 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-10-30 13:11 - 2014-10-30 13:11 - 00000000 ____D () C:\Windows\system32\vi-VN
2014-10-30 13:11 - 2014-10-30 13:11 - 00000000 ____D () C:\Windows\system32\eu-ES
2014-10-30 13:11 - 2014-10-30 13:11 - 00000000 ____D () C:\Windows\system32\ca-ES
2014-10-30 12:45 - 2014-10-30 12:45 - 00000000 ____D () C:\Windows\system32\EventProviders
2014-10-30 12:43 - 2009-04-11 00:28 - 02134528 _____ (Microsoft Corporation) C:\Windows\system32\FunctionDiscoveryFolder.dll
2014-10-30 12:43 - 2009-04-11 00:28 - 01081344 _____ (Microsoft Corporation) C:\Windows\system32\SLCExt.dll
2014-10-30 12:43 - 2009-04-11 00:27 - 03408896 _____ (Microsoft Corporation) C:\Windows\system32\SLsvc.exe
2014-10-30 12:43 - 2009-04-11 00:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingWizard.exe
2014-10-30 12:43 - 2009-04-10 23:03 - 12240896 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0007.dll
2014-10-30 12:43 - 2009-04-10 23:03 - 02644480 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0009.dll
2014-10-30 12:42 - 2009-04-11 00:33 - 00986600 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-10-30 12:42 - 2009-04-11 00:33 - 00926184 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-10-30 12:42 - 2009-04-11 00:33 - 00614376 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2014-10-30 12:42 - 2009-04-11 00:32 - 01083880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-10-30 12:42 - 2009-04-11 00:32 - 00438744 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2014-10-30 12:42 - 2009-04-11 00:32 - 00223208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-10-30 12:42 - 2009-04-11 00:32 - 00180712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-10-30 12:42 - 2009-04-11 00:28 - 06079488 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 03596288 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe
2014-10-30 12:42 - 2009-04-11 00:28 - 03174400 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 02167808 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 02012160 _____ (Microsoft Corporation) C:\Windows\system32\milcore.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01985024 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01856512 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01788416 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01730560 _____ (Microsoft Corporation) C:\Windows\system32\apds.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01591296 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01589248 _____ (Microsoft Corporation) C:\Windows\system32\msjet40.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01576960 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01533440 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01524736 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01480704 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01459200 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01382912 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2014-10-30 12:42 - 2009-04-11 00:28 - 01381376 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01324032 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01209856 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01167872 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\wercon.exe
2014-10-30 12:42 - 2009-04-11 00:28 - 01112064 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01086464 _____ (Microsoft Corporation) C:\Windows\system32\NetProjW.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01078784 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01055232 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-10-30 12:42 - 2009-04-11 00:28 - 01053696 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 01017856 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00996352 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00978432 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00968192 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz2.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00928768 _____ (Microsoft Corporation) C:\Windows\system32\scavenge.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00856064 _____ (Microsoft Corporation) C:\Windows\system32\mswdat10.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00807424 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-10-30 12:42 - 2009-04-11 00:28 - 00712704 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00679936 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00670720 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00644608 _____ (Microsoft Corporation) C:\Windows\system32\p2psvc.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00643072 _____ (Microsoft Corporation) C:\Windows\system32\msrepl40.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00618496 _____ (Microsoft Corporation) C:\Windows\system32\mswstr10.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2VDEC.DLL
2014-10-30 12:42 - 2009-04-11 00:28 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00582144 _____ (Microsoft Corporation) C:\Windows\system32\SLCommDlg.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\emdmgmt.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00560640 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00550400 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00469504 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00466944 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00461824 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\msxbde40.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00454144 _____ (Microsoft) C:\Windows\system32\IasMigPlugin.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00450560 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00443392 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-10-30 12:42 - 2009-04-11 00:28 - 00425472 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\msexch40.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\msvcp60.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00398848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2014-10-30 12:42 - 2009-04-11 00:28 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\devmgr.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\mspbde40.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\SLUI.exe
2014-10-30 12:42 - 2009-04-11 00:28 - 00351744 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\msrd3x40.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\msexcl40.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-10-30 12:42 - 2009-04-11 00:28 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\P2PGraph.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\sdohlp.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\msrd2x40.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL
2014-10-30 12:42 - 2009-04-11 00:28 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\WscEapPr.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\msjtes40.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe
2014-10-30 12:42 - 2009-04-11 00:28 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\mstext40.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\es.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\msltus40.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\msshsq.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\SLC.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\adsldpc.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\sperror.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\WcnNetsh.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\wevtutil.exe
2014-10-30 12:42 - 2009-04-11 00:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\spoolss.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\korwbrkr.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\nlhtml.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00117248 _____ () C:\Windows\system32\EhStorAuthn.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\EhStorShell.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe
2014-10-30 12:42 - 2009-04-11 00:28 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\fdBth.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\msctfp.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\propdefs.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\slwmi.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\msjter40.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\xmlfilter.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingProxy.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\rtffilt.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\EhStorPwdMgr.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\msscb.dll
2014-10-30 12:42 - 2009-04-11 00:28 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\fdBthProxy.dll
2014-10-30 12:42 - 2009-04-11 00:27 - 02926592 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 02092544 _____ (Microsoft Corporation) C:\Windows\system32\dfsr.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 00799744 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\Magnify.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl
2014-10-30 12:42 - 2009-04-11 00:27 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\IasMigReader.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 00441344 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\PresentationSettings.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\reg.exe
2014-10-30 12:42 - 2009-04-11 00:27 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\compcln.exe
2014-10-30 12:42 - 2009-04-11 00:23 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime
2014-10-30 12:42 - 2009-04-11 00:23 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime
2014-10-30 12:42 - 2009-04-11 00:23 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime
2014-10-30 12:42 - 2009-04-11 00:22 - 00883712 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
2014-10-30 12:42 - 2009-04-11 00:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime
2014-10-30 12:42 - 2009-04-11 00:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime
2014-10-30 12:42 - 2009-04-10 22:48 - 00344698 _____ () C:\Windows\system32\eaphost.tmf
2014-10-30 12:42 - 2009-04-10 22:43 - 00442788 _____ () C:\Windows\system32\dot3.tmf
2014-10-30 12:42 - 2009-04-10 22:43 - 00392170 _____ () C:\Windows\system32\onex.tmf
2014-10-30 12:42 - 2009-04-10 22:43 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-10-30 12:42 - 2009-04-10 22:42 - 00561152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-10-30 12:42 - 2009-04-10 22:23 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-10-30 12:42 - 2009-04-10 22:14 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2014-10-30 12:42 - 2009-04-10 22:14 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-10-30 12:42 - 2009-04-10 22:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-10-30 12:42 - 2009-04-10 20:52 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spsys.sys
2014-10-30 12:42 - 2009-04-10 19:59 - 00107612 _____ () C:\Windows\system32\StructuredQuerySchema.bin
2014-10-30 12:42 - 2009-04-10 19:54 - 03662128 _____ () C:\Windows\system32\locale.nls
2014-10-30 12:42 - 2009-03-06 19:11 - 00130008 _____ () C:\Windows\system32\systemsf.ebd
2014-10-30 12:42 - 2009-02-19 18:20 - 00009239 _____ () C:\Windows\system32\spcinstrumentation.man
2014-10-30 12:42 - 2009-02-18 12:39 - 00779136 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2014-10-30 12:42 - 2009-02-18 12:39 - 00102816 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-10-30 12:42 - 2009-02-18 12:38 - 00619864 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-10-30 12:42 - 2009-02-18 12:38 - 00099680 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-10-30 12:42 - 2009-02-18 12:38 - 00035168 _____ (Microsoft Corporation) C:\Windows\system32\infocardcpl.cpl
2014-10-30 12:41 - 2009-04-11 00:33 - 00292840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00527848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00265688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00245736 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00226280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00190424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00161752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00149480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00141288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ecache.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00125928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00122344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Storport.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00109032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00099816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-10-30 12:41 - 2009-04-11 00:32 - 00054248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00053736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00053224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00050664 _____ (Microsoft Corporation) C:\Windows\system32\PSHED.DLL
2014-10-30 12:41 - 2009-04-11 00:32 - 00048104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mup.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00043496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pciidex.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00035304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00027624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Dumpata.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00027112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00019944 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2014-10-30 12:41 - 2009-04-11 00:32 - 00019944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\atapi.sys
2014-10-30 12:41 - 2009-04-11 00:32 - 00017896 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2014-10-30 12:41 - 2009-04-11 00:32 - 00017384 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2014-10-30 12:41 - 2009-04-11 00:32 - 00014312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pciide.sys
2014-10-30 12:41 - 2009-04-11 00:28 - 06103040 _____ (Microsoft Corporation) C:\Windows\system32\chtbrkr.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 03072000 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 02515968 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 02226688 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 02225664 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 02205184 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 02153472 _____ (Microsoft Corporation) C:\Windows\system32\oobefldr.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 01823744 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 01671680 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 01671680 _____ (Microsoft Corporation) C:\Windows\system32\chsbrkr.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 01645568 _____ (Microsoft Corporation) C:\Windows\system32\connect.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 01580544 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 01575936 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2014-10-30 12:41 - 2009-04-11 00:28 - 01541120 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 01502720 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 01342464 _____ (Microsoft Corporation) C:\Windows\system32\brcpl.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 01224192 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 01152000 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 01107968 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 01020928 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00971264 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00876032 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00869888 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2014-10-30 12:41 - 2009-04-11 00:28 - 00852992 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00825856 _____ (Microsoft Corporation) C:\Windows\system32\rasdlg.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00777216 _____ (Microsoft Corporation) C:\Windows\system32\slcc.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00759296 _____ (Microsoft Corporation) C:\Windows\system32\ipsecsnp.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00705536 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00671232 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00657408 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2014-10-30 12:41 - 2009-04-11 00:28 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\Utilman.exe
2014-10-30 12:41 - 2009-04-11 00:28 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\CertEnrollUI.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00612864 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-10-30 12:41 - 2009-04-11 00:28 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\comuid.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00551936 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\wiaaut.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00542720 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\pnpui.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00532992 _____ (Microsoft Corporation) C:\Windows\system32\wpcao.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00516608 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00507904 _____ (Microsoft Corporation) C:\Windows\system32\vdsdyn.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\cmdial32.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\dsound.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00425472 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00399360 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rasplap.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00368640 _____ () C:\Windows\system32\msjetoledb40.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00364032 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2014-10-30 12:41 - 2009-04-11 00:28 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00347648 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\RelMon.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-30 12:41 - 2009-04-11 00:28 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\thawbrkr.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\modemui.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00286720 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\SnippingTool.exe
2014-10-30 12:41 - 2009-04-11 00:28 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\wow32.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\iassdo.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2014-10-30 12:41 - 2009-04-11 00:28 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\wscntfy.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\mscandui.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2014-10-30 12:41 - 2009-04-11 00:28 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2014-10-30 12:41 - 2009-04-11 00:28 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\offfilt.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\SLLUA.exe
2014-10-30 12:41 - 2009-04-11 00:28 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\iassam.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\pnpsetup.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceTypes.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-10-30 12:41 - 2009-04-11 00:28 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\rasmontr.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\fundisc.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2014-10-30 12:41 - 2009-04-11 00:28 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wpcsvc.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\dsprop.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\extmgr.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\softkbd.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\ntmarta.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\imapi.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\regsvc.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\dmsynth.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\dmusic.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\ulib.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\powrprof.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\oleprn.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\SCardSvr.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceClassExtension.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
2014-10-30 12:41 - 2009-04-11 00:28 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\wshext.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\msctfui.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mstlsapi.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00083456 _____ (Microsoft) C:\Windows\system32\SMBHelperClass.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\wlgpclnt.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\iassvcs.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\iashlpr.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\PNPXAssoc.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\mpr.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\fdSSDP.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\fdWSD.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-10-30 12:41 - 2009-04-11 00:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\SLUINotify.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\iasads.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Storprop.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\feclient.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\mmci.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\l2nacp.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\iasdatastore.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\bthci.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msstrc.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\slcinst.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\bthserv.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\networkitemfactory.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\TSTheme.exe
2014-10-30 12:41 - 2009-04-11 00:28 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iaspolcy.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\perfdisk.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\bitsigd.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\whealogr.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\msimtf.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\ifmon.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\wsepno.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\uxsms.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelineprxy.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\hidserv.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msjint40.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\version.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\winrnr.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\NcdProp.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\MsCtfMonitor.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wscisvif.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\vdmdbg.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\midimap.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msisip.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\spcmsg.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mmcico.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\spwinsat.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2014-10-30 12:41 - 2009-04-11 00:28 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\CHxReadingStringIME.dll
2014-10-30 12:41 - 2009-04-11 00:27 - 01827840 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-30 12:41 - 2009-04-11 00:27 - 01689600 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2014-10-30 12:41 - 2009-04-11 00:27 - 01122304 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2014-10-30 12:41 - 2009-04-11 00:27 - 01102848 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
2014-10-30 12:41 - 2009-04-11 00:27 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
2014-10-30 12:41 - 2009-04-11 00:27 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00643072 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00636416 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00407040 _____ (Microsoft Corporation) C:\Windows\system32\dpapimig.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2014-10-30 12:41 - 2009-04-11 00:27 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2014-10-30 12:41 - 2009-04-11 00:27 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-10-30 12:41 - 2009-04-11 00:27 - 00241128 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2014-10-30 12:41 - 2009-04-11 00:27 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\certreq.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv
2014-10-30 12:41 - 2009-04-11 00:27 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-10-30 12:41 - 2009-04-11 00:27 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00130024 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2014-10-30 12:41 - 2009-04-11 00:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\gpresult.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax
2014-10-30 12:41 - 2009-04-11 00:27 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\dwm.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\hdwwiz.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\newdev.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\conime.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\cipher.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\cmmon32.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\csrstub.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cbsra.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\rekeywiz.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\bthudtask.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\PnPutil.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\ipconfig.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEject.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\msacm32.drv
2014-10-30 12:41 - 2009-04-11 00:27 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\fc.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\rasdial.exe
2014-10-30 12:41 - 2009-04-11 00:27 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\gpupdate.exe
2014-10-30 12:41 - 2009-04-11 00:23 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime
2014-10-30 12:41 - 2009-04-11 00:23 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime
2014-10-30 12:41 - 2009-04-11 00:22 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
2014-10-30 12:41 - 2009-04-11 00:22 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\f3ahvoas.dll
2014-10-30 12:41 - 2009-04-11 00:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-10-30 12:41 - 2009-04-10 23:42 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2014-10-30 12:41 - 2009-04-10 23:04 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-10-30 12:41 - 2009-04-10 22:51 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-30 12:41 - 2009-04-10 22:46 - 00208966 _____ () C:\Windows\system32\WFP.TMF
2014-10-30 12:41 - 2009-04-10 22:46 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys
2014-10-30 12:41 - 2009-04-10 22:46 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rassstp.sys
2014-10-30 12:41 - 2009-04-10 22:46 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\raspppoe.sys
2014-10-30 12:41 - 2009-04-10 22:46 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2014-10-30 12:41 - 2009-04-10 22:46 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-10-30 12:41 - 2009-04-10 22:45 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2014-10-30 12:41 - 2009-04-10 22:45 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2014-10-30 12:41 - 2009-04-10 22:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-10-30 12:41 - 2009-04-10 22:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
2014-10-30 12:41 - 2009-04-10 22:45 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\smb.sys
2014-10-30 12:41 - 2009-04-10 22:43 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-10-30 12:41 - 2009-04-10 22:42 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-10-30 12:41 - 2009-04-10 22:42 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-10-30 12:41 - 2009-04-10 22:42 - 00052992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2014-10-30 12:41 - 2009-04-10 22:42 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-10-30 12:41 - 2009-04-10 22:42 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-10-30 12:41 - 2009-04-10 22:42 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys
2014-10-30 12:41 - 2009-04-10 22:42 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys
2014-10-30 12:41 - 2009-04-10 22:42 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-10-30 12:41 - 2009-04-10 22:42 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2014-10-30 12:41 - 2009-04-10 22:39 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys
2014-10-30 12:41 - 2009-04-10 22:39 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-10-30 12:41 - 2009-04-10 22:39 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\iscsilog.dll
2014-10-30 12:41 - 2009-04-10 22:38 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-10-30 12:41 - 2009-04-10 22:36 - 01383424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-30 12:41 - 2009-04-10 22:27 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2014-10-30 12:41 - 2009-04-10 22:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxg.sys
2014-10-30 12:41 - 2009-04-10 22:22 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\watchdog.sys
2014-10-30 12:41 - 2009-04-10 22:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\npfs.sys
2014-10-30 12:41 - 2009-04-10 22:13 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2014-10-30 12:41 - 2009-04-10 22:13 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2014-10-30 12:41 - 2009-04-10 22:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2014-10-30 12:41 - 2009-03-29 22:42 - 00155456 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-30 12:41 - 2009-03-29 22:42 - 00080720 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-30 12:41 - 2009-02-19 18:20 - 00009212 _____ () C:\Windows\system32\RacUR.xml
2014-10-30 12:41 - 2009-02-18 12:39 - 00092918 _____ () C:\Windows\system32\slmgr.vbs
2014-10-30 12:41 - 2009-02-18 12:39 - 00035680 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-10-30 12:41 - 2009-02-18 12:38 - 00009048 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-10-30 12:40 - 2009-04-11 00:28 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2014-10-30 12:40 - 2009-04-11 00:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll
2014-10-30 12:40 - 2009-04-11 00:27 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
2014-10-30 10:05 - 2014-10-30 10:05 - 00000000 ____D () C:\Windows\system32\WindowsPowerShell
2014-10-30 09:11 - 2009-11-08 09:55 - 01130824 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-30 09:11 - 2009-11-08 09:55 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2014-10-30 09:11 - 2009-11-08 09:55 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2014-10-30 09:11 - 2009-11-08 09:55 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2014-10-30 09:11 - 2009-11-08 09:55 - 00049472 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2014-10-30 09:07 - 2009-10-09 15:56 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\winrs.exe
2014-10-30 09:07 - 2009-10-09 15:56 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\winrshost.exe
2014-10-30 09:07 - 2009-10-09 15:56 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
2014-10-30 09:07 - 2009-10-09 15:56 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
2014-10-30 09:07 - 2009-10-09 15:56 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\winrssrv.dll
2014-10-30 09:07 - 2009-10-09 15:56 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\winrsmgr.dll
2014-10-30 09:06 - 2009-10-09 15:56 - 01181696 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-10-30 09:06 - 2009-10-09 15:56 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-10-30 09:06 - 2009-10-09 15:56 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\winrscmd.dll
2014-10-30 09:06 - 2009-10-09 15:56 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-10-30 09:06 - 2009-10-09 15:56 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-10-30 09:06 - 2009-10-09 15:56 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\pwrshplugin.dll
2014-10-30 09:06 - 2009-10-09 15:55 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-10-30 09:06 - 2009-10-09 15:55 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\wecsvc.dll
2014-10-30 09:06 - 2009-10-09 15:55 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\wevtfwd.dll
2014-10-30 09:06 - 2009-10-09 15:55 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\wecutil.exe
2014-10-30 09:06 - 2009-10-09 15:55 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\wecapi.dll
2014-10-30 09:06 - 2009-10-09 15:55 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
2014-10-30 09:06 - 2009-08-01 00:27 - 00201184 _____ () C:\Windows\system32\winrm.vbs
2014-10-30 09:06 - 2009-07-16 11:30 - 00004675 _____ () C:\Windows\system32\wsmanconfig_schema.xml
2014-10-30 09:06 - 2009-07-16 11:30 - 00002426 _____ () C:\Windows\system32\WsmTxt.xsl
2014-10-30 09:03 - 2011-03-03 09:40 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\Apphlpdm.dll
2014-10-30 09:03 - 2011-03-03 07:35 - 04240384 _____ (Microsoft) C:\Windows\system32\GameUXLegacyGDFs.dll
2014-10-30 09:03 - 2010-09-06 10:20 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-10-30 09:03 - 2010-09-06 10:19 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2014-10-30 09:03 - 2010-08-26 10:34 - 01696256 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-10-30 09:03 - 2009-10-23 11:10 - 00714240 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2014-10-30 09:02 - 2009-08-24 05:36 - 00377344 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2014-10-30 09:00 - 2009-09-10 08:58 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\unregmp2.exe
2014-10-30 08:59 - 2011-04-12 10:07 - 00892416 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-10-30 08:48 - 2014-10-30 08:48 - 00000000 ____D () C:\Users\Mommy\AppData\Local\WindowsUpdate
2014-10-29 12:38 - 2014-11-04 19:06 - 00120730 _____ () C:\Users\Mommy\Downloads\OTL.Txt
2014-10-29 12:38 - 2014-10-29 12:38 - 00028912 _____ () C:\Users\Mommy\Downloads\Extras.Txt
2014-10-29 12:30 - 2014-10-29 12:30 - 00602112 _____ (OldTimer Tools) C:\Users\Mommy\Downloads\OTL.exe
2014-10-29 09:51 - 2014-10-30 14:12 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-29 09:48 - 2014-10-29 09:48 - 00000910 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-29 09:48 - 2014-10-29 09:48 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-29 09:48 - 2014-10-29 09:48 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-10-29 09:48 - 2014-10-01 10:11 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-10-29 09:48 - 2014-10-01 10:11 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-10-29 09:48 - 2014-10-01 10:11 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-10-28 21:22 - 2014-10-28 21:27 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-28 20:58 - 2010-02-20 17:06 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\nshhttp.dll
2014-10-28 20:58 - 2010-02-20 17:05 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll
2014-10-28 20:58 - 2010-02-20 14:53 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2014-10-28 20:57 - 2014-10-28 20:58 - 00282790 _____ () C:\Windows\msxml4-KB954430-enu.LOG
2014-10-28 20:56 - 2014-10-28 20:57 - 00288316 _____ () C:\Windows\msxml4-KB973688-enu.LOG
2014-10-28 20:55 - 2009-08-14 07:49 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\NETSTAT.EXE
2014-10-28 20:55 - 2009-08-14 07:49 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\ARP.EXE
2014-10-28 20:55 - 2009-08-14 07:49 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\ROUTE.EXE
2014-10-28 20:55 - 2009-08-14 07:49 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\MRINFO.EXE
2014-10-28 20:55 - 2009-08-14 07:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\finger.exe
2014-10-28 20:55 - 2009-08-14 07:49 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\TCPSVCS.EXE
2014-10-28 20:55 - 2009-08-14 07:49 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\HOSTNAME.EXE
2014-10-28 20:55 - 2009-08-14 07:48 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2014-10-28 20:54 - 2011-01-04 19:07 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-10-28 20:54 - 2011-01-04 19:07 - 00605184 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-10-28 20:54 - 2011-01-04 19:06 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2014-10-28 20:54 - 2009-12-02 01:32 - 00763904 _____ (Microsoft Corporation) C:\Windows\system32\MSDTVVDEC.DLL
2014-10-28 20:53 - 2010-12-28 09:55 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll
2014-10-28 20:53 - 2009-06-15 17:15 - 00439864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-10-28 20:53 - 2009-06-15 08:54 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-10-28 20:53 - 2009-06-15 08:53 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-10-28 20:53 - 2009-06-15 08:52 - 01259008 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-10-28 20:53 - 2009-06-15 08:52 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-10-28 20:53 - 2009-06-15 06:48 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-10-28 20:52 - 2010-10-15 08:08 - 03602320 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-10-28 20:52 - 2010-10-15 08:08 - 03550096 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-10-28 20:52 - 2010-10-15 07:48 - 01205080 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-10-28 20:52 - 2010-02-18 07:30 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-10-28 20:52 - 2010-02-18 05:28 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2014-10-28 20:52 - 2010-01-25 06:00 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-10-28 20:52 - 2010-01-25 06:00 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-10-28 20:52 - 2010-01-25 06:00 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-10-28 20:52 - 2010-01-25 06:00 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-10-28 20:52 - 2010-01-25 05:58 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-10-28 20:52 - 2010-01-25 02:21 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-10-28 20:52 - 2010-01-25 02:21 - 00518144 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-10-28 20:52 - 2010-01-25 02:21 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-10-28 20:52 - 2010-01-25 02:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-10-28 20:52 - 2009-08-11 10:44 - 01401856 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-10-28 20:52 - 2009-07-11 13:01 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-10-28 20:52 - 2009-07-11 13:01 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-10-28 20:52 - 2009-07-11 13:01 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-10-28 20:52 - 2009-07-11 13:01 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-10-28 20:52 - 2009-07-11 11:03 - 02501921 _____ () C:\Windows\system32\wlan.tmf
2014-10-28 20:52 - 2009-07-11 11:03 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\L2SecHC.dll
2014-10-28 20:52 - 2009-06-10 05:41 - 02868224 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-10-28 20:52 - 2009-06-10 05:41 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
2014-10-28 20:52 - 2009-04-11 00:28 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-10-28 20:52 - 2009-04-11 00:28 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2014-10-28 20:52 - 2009-04-11 00:27 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-10-28 20:52 - 2009-04-11 00:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-10-28 20:52 - 2009-04-10 22:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-10-28 20:51 - 2010-12-29 12:28 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-10-28 20:51 - 2010-09-13 09:46 - 10628096 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-10-28 20:51 - 2010-09-13 07:56 - 08147456 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-10-28 20:51 - 2009-09-10 10:48 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-10-28 20:51 - 2009-07-15 06:39 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2014-10-28 20:51 - 2009-07-15 06:39 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2014-10-28 20:51 - 2009-07-15 06:39 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2014-10-28 20:51 - 2009-04-23 06:14 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-10-28 20:50 - 2011-02-16 10:16 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-10-28 20:50 - 2011-02-16 08:02 - 00292864 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-10-28 20:50 - 2010-11-04 12:56 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
2014-10-28 20:50 - 2010-11-04 12:55 - 00601600 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2014-10-28 20:50 - 2010-11-04 12:55 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2014-10-28 20:50 - 2010-11-04 12:55 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2014-10-28 20:50 - 2010-11-04 10:34 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2014-10-28 20:50 - 2010-08-31 09:46 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll
2014-10-28 20:50 - 2010-08-31 09:46 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll
2014-10-28 20:50 - 2010-06-16 09:30 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-10-28 20:50 - 2009-07-15 06:39 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2014-10-28 20:50 - 2009-07-15 04:21 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.tlb
2014-10-28 20:50 - 2009-07-15 04:21 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\amcompat.tlb
2014-10-28 20:50 - 2009-07-10 05:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll
2014-10-28 20:50 - 2009-06-15 08:52 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-10-28 20:50 - 2009-06-15 08:51 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-10-28 20:49 - 2010-10-28 07:20 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-10-28 20:48 - 2011-07-06 09:31 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-10-28 20:48 - 2011-04-29 07:24 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-10-28 20:48 - 2011-04-29 07:24 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-10-28 20:48 - 2011-04-14 08:59 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2014-10-28 20:48 - 2011-03-10 11:03 - 01162240 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-10-28 20:48 - 2011-03-10 11:03 - 01136640 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2014-10-28 20:48 - 2011-03-02 09:44 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-10-28 20:48 - 2011-03-02 09:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-10-28 20:48 - 2011-02-22 07:23 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2014-10-28 20:48 - 2011-02-18 08:03 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-10-28 20:48 - 2011-02-16 10:21 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-28 20:48 - 2011-02-16 10:18 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-10-28 20:48 - 2010-12-20 10:35 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-10-28 20:48 - 2010-06-28 11:00 - 01316864 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2014-10-28 20:48 - 2009-12-04 12:30 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
2014-10-28 20:48 - 2009-12-04 12:29 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-10-28 20:48 - 2009-12-04 12:28 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\msvfw32.dll
2014-10-28 20:48 - 2009-12-04 12:28 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll
2014-10-28 20:48 - 2009-12-04 12:28 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll
2014-10-28 20:48 - 2009-12-04 12:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll
2014-10-28 20:48 - 2009-12-04 12:28 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll
2014-10-28 20:48 - 2009-12-04 12:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll
2014-10-28 20:48 - 2009-12-04 12:27 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll
2014-10-28 20:48 - 2009-05-04 03:59 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2014-10-28 20:47 - 2011-06-02 07:34 - 02043392 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-28 20:47 - 2011-04-29 07:25 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-10-28 20:47 - 2011-04-29 07:25 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-10-28 20:47 - 2011-04-21 07:58 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-10-28 20:47 - 2011-01-21 10:35 - 11586048 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-10-28 20:47 - 2011-01-21 10:35 - 00353280 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
2014-10-28 20:47 - 2010-05-27 14:08 - 00081920 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll
2014-10-28 20:47 - 2010-04-16 10:46 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-10-28 20:47 - 2010-04-05 11:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2014-10-28 20:47 - 2009-07-17 07:54 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\atl.dll
2014-10-28 20:47 - 2009-06-10 05:42 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2014-10-28 20:46 - 2010-12-17 09:45 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-28 20:46 - 2010-12-17 07:54 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-28 20:46 - 2010-12-14 08:49 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2014-10-28 20:46 - 2010-08-26 10:37 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2014-10-28 20:46 - 2010-08-20 10:05 - 00867328 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-10-28 20:46 - 2010-08-17 08:11 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-10-28 20:46 - 2010-06-16 10:04 - 00905088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-10-28 20:46 - 2010-06-11 10:15 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-10-28 20:46 - 2010-04-05 11:02 - 00317952 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2014-10-28 20:46 - 2009-12-23 05:33 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-10-28 20:46 - 2009-12-08 11:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-10-28 20:46 - 2009-08-10 06:35 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2014-10-28 20:46 - 2009-04-23 06:15 - 00784896 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-10-28 20:46 - 2009-04-11 00:28 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-10-28 20:46 - 2009-04-11 00:28 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tscupgrd.exe
2014-10-28 20:46 - 2009-04-11 00:28 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-10-28 20:45 - 2011-05-02 11:16 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-10-28 20:45 - 2011-04-20 09:55 - 00375808 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-10-28 20:45 - 2011-04-20 09:50 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-10-28 20:45 - 2010-08-31 09:44 - 00531968 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-10-28 20:45 - 2010-06-18 11:31 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2014-10-28 20:45 - 2010-01-21 09:05 - 00062464 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\system32\l3codeca.acm
2014-10-28 20:45 - 2009-10-07 05:36 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-28 20:45 - 2009-09-04 05:41 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll
2014-10-28 20:45 - 2009-04-11 00:27 - 00220672 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\system32\l3codecp.acm
2014-10-28 20:44 - 2014-10-28 20:44 - 00001982 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-10-28 20:44 - 2014-10-28 20:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-10-28 20:44 - 2010-10-18 07:37 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-10-28 20:44 - 2010-01-13 11:34 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2014-10-28 20:44 - 2009-05-08 06:53 - 00604672 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2014-10-28 20:43 - 2011-04-29 09:59 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-10-28 20:29 - 2014-11-04 18:34 - 00000884 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-28 20:29 - 2014-11-04 18:19 - 00000880 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-28 19:55 - 2014-10-28 19:55 - 00000853 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2014-10-28 19:55 - 2014-10-28 19:55 - 00000000 ____D () C:\Users\Mommy\AppData\Roaming\AVG2015
2014-10-28 19:55 - 2014-10-28 19:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-10-28 19:54 - 2014-10-28 19:55 - 00000000 ____D () C:\ProgramData\AVG2015
2014-10-28 19:54 - 2014-10-28 19:54 - 00000000 ___HD () C:\$AVG
2014-10-28 19:53 - 2014-10-28 19:53 - 00000000 ____D () C:\Program Files\AVG
2014-10-28 19:37 - 2014-10-28 19:37 - 00000000 ____D () C:\Users\Mommy\AppData\Roaming\Macromedia
2014-10-28 19:37 - 2014-10-28 19:37 - 00000000 ____D () C:\Users\Mommy\AppData\Roaming\Adobe
2014-10-28 19:19 - 2014-11-04 18:14 - 00000000 ____D () C:\ProgramData\MFAData
2014-10-28 19:19 - 2014-10-28 20:11 - 00000000 ____D () C:\Users\Mommy\AppData\Local\Avg2015
2014-10-28 19:19 - 2014-10-28 19:19 - 00000000 ____D () C:\Users\Mommy\AppData\Local\MFAData
2014-10-28 18:43 - 2014-10-28 20:44 - 00000000 ____D () C:\Users\Mommy\AppData\Local\Google
2014-10-28 18:43 - 2014-10-28 18:43 - 00000000 ____D () C:\Users\Mommy\Documents\My Google Gadgets
2014-10-28 18:43 - 2014-10-28 18:43 - 00000000 ____D () C:\Users\Mommy\AppData\Roaming\ATI
2014-10-28 18:43 - 2014-10-28 18:43 - 00000000 ____D () C:\Users\Mommy\AppData\Local\Toshiba
2014-10-28 18:43 - 2014-10-28 18:43 - 00000000 ____D () C:\Users\Mommy\AppData\Local\ATI
2014-10-28 18:42 - 2014-10-30 14:12 - 00000960 _____ () C:\Users\Mommy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-28 18:42 - 2014-10-30 14:12 - 00000926 _____ () C:\Users\Mommy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2014-10-28 18:42 - 2014-10-30 10:30 - 00000000 ____D () C:\Users\Mommy\AppData\Local\VirtualStore
2014-10-28 18:42 - 2014-10-30 10:29 - 00085840 _____ () C:\Users\Mommy\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-28 18:42 - 2014-10-28 18:42 - 00000955 _____ () C:\Users\Mommy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-10-28 18:41 - 2014-10-28 18:41 - 00000017 __RSH () C:\Windows\system32\Drivers\fbd.sys
2014-10-28 18:41 - 2014-10-28 18:41 - 00000000 ____D () C:\Users\Mommy\AppData\Roaming\WinBatch
2014-10-28 18:40 - 2014-10-28 21:19 - 00000000 ____D () C:\Users\Mommy
2014-10-28 18:40 - 2014-10-28 18:40 - 00000020 ___SH () C:\Users\Mommy\ntuser.ini
2014-10-28 18:40 - 2008-01-20 20:42 - 00000000 ___RD () C:\Users\Mommy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-10-28 18:40 - 2008-01-20 20:42 - 00000000 ___RD () C:\Users\Mommy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-28 18:25 - 2014-10-28 18:50 - 00000000 ____D () C:\ProgramData\Google
2014-10-28 18:24 - 2014-10-28 19:10 - 00000000 ____D () C:\ProgramData\Symantec
2014-10-28 18:24 - 2014-10-28 19:10 - 00000000 ____D () C:\ProgramData\Norton
2014-10-28 18:17 - 2014-10-28 18:17 - 00000000 _____ () C:\Windows\NDSTray.INI
2014-10-28 18:16 - 2009-02-16 16:01 - 00279376 _____ (TOSHIBA Corporation) C:\Windows\system32\Drivers\tos_sps32.sys
2014-10-28 18:15 - 2014-10-28 18:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA DVD PLAYER
2014-10-28 18:15 - 2014-10-28 18:16 - 00000000 ____D () C:\Program Files\Common Files\Toshiba Shared
2014-10-28 18:14 - 2008-01-15 11:03 - 00364544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlLib.dll
2014-10-28 18:14 - 2007-04-23 11:50 - 00025896 _____ (Windows ® Codename Longhorn DDK provider) C:\Windows\system32\Drivers\RtlProt.sys
2014-10-28 18:14 - 2006-10-26 23:30 - 00131072 _____ () C:\Windows\system32\EnumDevLib.dll
2014-10-28 18:14 - 2006-07-05 07:45 - 01069056 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Windows\system32\libeay32.dll
2014-10-28 18:14 - 2003-11-18 11:27 - 00155648 _____ (TODO: <Company name>) C:\Windows\system32\IpLib.dll
2014-10-28 18:11 - 2014-10-28 18:16 - 00000000 ____D () C:\ProgramData\Toshiba
2014-10-28 18:04 - 1999-10-12 19:47 - 00024576 _____ (Toshiba) C:\Windows\system32\TSCI.dll
2014-10-28 18:04 - 1999-10-12 19:45 - 00024576 _____ (Toshiba) C:\Windows\system32\THCI.dll
2014-10-28 18:03 - 2014-10-28 18:14 - 00000000 ____D () C:\Windows\system32\sda
2014-10-28 18:03 - 2014-10-28 18:03 - 00000004 __RSH () C:\Windows\system32\Drivers\taishop.sys
2014-10-28 18:02 - 2009-03-11 17:17 - 00063488 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTSTOR.sys
2014-10-28 18:02 - 2009-02-03 23:39 - 06815264 _____ () C:\Windows\system\DriveIcon.dll
2014-10-28 17:59 - 2014-10-28 17:59 - 00000000 ____D () C:\Windows\Options
2014-10-28 17:59 - 2014-10-28 17:59 - 00000000 ____D () C:\Program Files\ltmoh
2014-10-28 17:59 - 2009-02-27 11:01 - 00238912 _____ (TOSHIBA Corporation) C:\Windows\system32\tosmreg.exe
2014-10-28 17:59 - 2009-02-17 15:54 - 00000916 _____ () C:\Windows\system32\tosmreg.dat
2014-10-28 17:58 - 2014-10-28 17:58 - 00005024 _____ () C:\Windows\DPINST.LOG
2014-10-28 17:58 - 2014-10-28 17:58 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01007.Wdf
2014-10-28 17:58 - 2014-10-28 17:58 - 00000000 ____D () C:\Program Files\Synaptics
2014-10-28 17:55 - 2014-10-28 17:56 - 00000000 ____D () C:\Program Files\Realtek WLAN Driver
2014-10-28 17:54 - 2014-10-30 13:07 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-10-28 17:54 - 2014-10-28 18:14 - 00000000 ____D () C:\Program Files\Realtek
2014-10-28 17:54 - 2014-10-28 17:54 - 00319456 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2014-10-28 17:54 - 2014-10-28 17:54 - 00000000 ___HD () C:\Program Files\Temp
2014-10-28 17:54 - 2009-04-06 11:07 - 00000520 _____ () C:\Windows\system32\Drivers\RTEQEX0.dat
2014-10-28 17:54 - 2009-03-12 19:11 - 02523680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll
2014-10-28 17:54 - 2009-03-12 19:11 - 01003040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-10-28 17:54 - 2009-03-12 19:11 - 00551456 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-10-28 17:54 - 2009-03-12 19:11 - 00326176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-10-28 17:54 - 2009-03-12 19:11 - 00049184 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInst.dll
2014-10-28 17:54 - 2009-03-12 18:30 - 02342688 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-10-28 17:54 - 2009-02-12 21:24 - 00282112 _____ (Dolby Laboratories) C:\Windows\system32\RTPCEE32.dll
2014-10-28 17:54 - 2009-02-12 17:52 - 00159232 _____ (Windows ® Codename Longhorn DDK provider) C:\Windows\system32\FMAPO.dll
2014-10-28 17:54 - 2008-11-09 12:52 - 00159744 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-10-28 17:54 - 2008-10-08 13:56 - 00141312 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-10-28 17:54 - 2008-09-25 17:52 - 00060416 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTARen.dll
2014-10-28 17:54 - 2008-08-25 17:17 - 00528384 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-10-28 17:54 - 2008-05-19 19:25 - 01933312 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-10-28 17:54 - 2008-05-19 16:12 - 01777664 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesLib.dll
2014-10-28 17:54 - 2008-04-30 09:48 - 00167936 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP360.dll
2014-10-28 17:54 - 2007-07-30 19:26 - 00126976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO.dll
2014-10-28 17:54 - 2007-07-25 10:33 - 00135168 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW.dll
2014-10-28 17:54 - 2007-05-17 12:26 - 00185776 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSHD.dll
2014-10-28 17:54 - 2006-12-13 11:30 - 00339968 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSXT.dll
2014-10-28 17:52 - 2014-10-28 17:52 - 00000000 ____D () C:\ProgramData\ATI
2014-10-28 17:52 - 2014-10-28 17:52 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-10-28 17:49 - 2014-10-28 17:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
2014-10-28 17:47 - 2014-10-28 17:49 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-10-28 17:47 - 2014-10-28 17:47 - 00000000 ____D () C:\Program Files\ATI
2014-10-28 17:47 - 2009-04-22 00:30 - 04491264 _____ (ATI Technologies Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2014-10-28 17:47 - 2009-04-21 23:07 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIDEMGX.dll
2014-10-28 17:47 - 2009-04-21 23:07 - 00303104 _____ (AMD) C:\Windows\system32\atieclxx.exe
2014-10-28 17:47 - 2009-04-21 23:07 - 00176128 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2014-10-28 17:47 - 2009-04-21 23:05 - 00356352 _____ (ATI Technologies, Inc.) C:\Windows\system32\atipdlxx.dll
2014-10-28 17:47 - 2009-04-21 23:05 - 00278528 _____ (ATI Technologies, Inc.) C:\Windows\system32\Oemdspif.dll
2014-10-28 17:47 - 2009-04-21 23:05 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll
2014-10-28 17:47 - 2009-04-21 23:05 - 00043520 _____ (ATI Technologies, Inc.) C:\Windows\system32\ati2edxx.dll
2014-10-28 17:47 - 2009-04-21 23:05 - 00011776 _____ (AMD) C:\Windows\system32\atimuixx.dll
2014-10-28 17:47 - 2009-04-21 23:02 - 02428928 _____ (ATI Technologies Inc. ) C:\Windows\system32\atidxx32.dll
2014-10-28 17:47 - 2009-04-21 22:51 - 03082752 _____ (ATI Technologies Inc. ) C:\Windows\system32\atiumdag.dll
2014-10-28 17:47 - 2009-04-21 22:42 - 11559424 _____ (ATI Technologies Inc.) C:\Windows\system32\atioglxx.dll
2014-10-28 17:47 - 2009-04-21 22:36 - 04963840 _____ (ATI Technologies Inc. ) C:\Windows\system32\atiumdva.dll
2014-10-28 17:47 - 2009-04-21 22:36 - 00167952 _____ () C:\Windows\system32\atiumdva.cap
2014-10-28 17:47 - 2009-04-21 22:24 - 00163840 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2014-10-28 17:47 - 2009-04-21 22:24 - 00051712 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc32.dll
2014-10-28 17:47 - 2009-04-21 22:24 - 00051712 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom32.dll
2014-10-28 17:47 - 2009-04-21 22:10 - 00053248 _____ (ATI Technologies Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2014-10-28 17:47 - 2009-03-03 16:56 - 00118784 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atibtmon.exe
2014-10-28 17:47 - 2009-03-02 17:55 - 00184751 _____ () C:\Windows\system32\atiicdxx.dat
2014-10-28 17:47 - 2009-02-25 05:42 - 00016032 _____ () C:\Windows\atiogl.xml
2014-10-28 17:47 - 2008-04-28 10:26 - 00014352 _____ (ATI Technologies Inc.) C:\Windows\system32\Drivers\AtiPcie.sys
2014-10-28 17:40 - 2014-10-28 17:40 - 00000000 ____D () C:\Program Files\Microsoft Office Suite Activation Assistant
2014-10-28 17:35 - 2014-10-28 18:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-10-28 17:34 - 2006-10-26 20:56 - 00032592 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll
2014-10-28 17:33 - 2014-10-28 18:53 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-28 17:31 - 2014-10-30 09:14 - 00001027 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works Task Launcher.lnk
2014-10-28 17:31 - 2014-10-30 09:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works
2014-10-28 17:31 - 2014-10-30 09:14 - 00000000 ____D () C:\Program Files\Microsoft Works
2014-10-28 17:31 - 2014-10-28 18:52 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-10-28 17:31 - 2014-10-28 17:31 - 00001924 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office PowerPoint Viewer 2007.lnk
2014-10-28 17:24 - 2014-11-03 08:40 - 01650022 _____ () C:\Windows\WindowsUpdate.log
2014-10-10 14:13 - 2014-10-10 14:13 - 00200984 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdix.sys
2014-10-07 20:39 - 2014-10-07 20:39 - 00213272 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdriverx.sys
2014-10-05 20:42 - 2014-10-05 20:42 - 00098584 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx86.sys
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2014-11-04 18:12 - 2006-11-02 04:33 - 00690960 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-04 18:09 - 2006-11-02 06:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-04 18:09 - 2006-11-02 06:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-03 08:40 - 2006-11-02 06:50 - 00001661 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2014-10-30 13:35 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-30 13:34 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\rescache
2014-10-30 13:18 - 2006-11-02 07:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-30 13:17 - 2006-11-02 06:47 - 00330848 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-30 13:15 - 2006-11-02 07:01 - 00011656 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-30 13:11 - 2006-11-02 06:37 - 00000000 ____D () C:\Windows\system32\XPSViewer
2014-10-30 13:11 - 2006-11-02 06:37 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-10-30 13:11 - 2006-11-02 06:37 - 00000000 ____D () C:\Program Files\Windows Photo Gallery
2014-10-30 13:11 - 2006-11-02 06:37 - 00000000 ____D () C:\Program Files\Windows Journal
2014-10-30 13:11 - 2006-11-02 06:37 - 00000000 ____D () C:\Program Files\Windows Defender
2014-10-30 13:11 - 2006-11-02 06:37 - 00000000 ____D () C:\Program Files\Windows Collaboration
2014-10-30 13:11 - 2006-11-02 06:37 - 00000000 ____D () C:\Program Files\Windows Calendar
2014-10-30 13:11 - 2006-11-02 06:37 - 00000000 ____D () C:\Program Files\Movie Maker
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\zh-TW
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\zh-CN
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\uk-UA
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\th-TH
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\sv-SE
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\SLUI
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\sl-SI
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\sk-SK
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\ru-RU
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\ro-RO
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\pt-PT
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\pt-BR
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\nl-NL
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\nb-NO
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\lv-LV
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\lt-LT
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\ko-KR
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\ja-JP
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\it-IT
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\hu-HU
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\hr-HR
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\he-IL
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\fr-FR
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\fi-FI
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\et-EE
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\el-GR
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\de-DE
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\bg-BG
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\ar-SA
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\IME
2014-10-30 13:11 - 2006-11-02 05:18 - 00000000 ____D () C:\Program Files\Common Files\System
2014-10-30 10:07 - 2008-01-20 20:47 - 00186104 _____ () C:\Windows\PFRO.log
2014-10-30 10:05 - 2006-11-02 05:18 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-30 09:10 - 2006-11-02 05:18 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-10-28 20:43 - 2009-05-03 21:45 - 00000000 ____D () C:\Program Files\Google
2014-10-28 19:16 - 2009-05-03 21:26 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-10-28 19:16 - 2009-05-03 21:26 - 00000000 ____D () C:\Program Files\TOSHIBA
2014-10-28 18:51 - 2006-11-02 06:37 - 00000000 ____D () C:\Windows\ShellNew
2014-10-28 18:42 - 2006-11-02 05:18 - 00000000 ___RD () C:\Users\Public
2014-10-28 18:31 - 2009-05-04 20:32 - 00000000 ____D () C:\Windows\Panther
2014-10-28 18:30 - 2006-11-02 06:48 - 00004506 _____ () C:\Windows\DtcInstall.log
2014-10-28 18:16 - 2009-05-03 21:56 - 00155762 _____ () C:\Windows\DirectX.log
2014-10-28 18:12 - 2009-05-03 21:26 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-10-28 18:11 - 2009-05-03 21:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
2014-10-28 18:03 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system
2014-10-28 17:58 - 2006-11-02 06:52 - 00031591 _____ () C:\Windows\setupact.log
2014-10-28 17:32 - 2006-11-02 06:37 - 00000000 ____D () C:\Windows\system32\restore
2014-10-28 17:25 - 2009-05-03 20:02 - 00003652 _____ () C:\Windows\TSSysprep.log
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2014-10-30 13:23
 
==================== End Of Log ============================
 
 
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 04-11-2014
Ran by Mommy at 2014-11-04 19:22:06
Running from C:\Users\Mommy\Downloads
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: AVG Internet Security 2015 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security 2015 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
FW: AVG Internet Security 2015 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe Flash Player ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 9.0.124.0 - Adobe Systems Incorporated)
Adobe Reader 9.1 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
Amazon Links (HKLM\...\{224821ED-CADA-4A8A-AC8D-3734CC0F0931}) (Version: 1.0 - TOSHIBA Corporation)
ATI Catalyst Install Manager (HKLM\...\{8A04B73D-8C7C-F661-72F0-6FF3B0DF24ED}) (Version: 3.0.723.0 - ATI Technologies, Inc.)
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5557 - AVG Technologies)
AVG 2015 (Version: 15.0.4189 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.5557 - AVG Technologies) Hidden
ccc-core-static (Version: 2009.0421.2132.36832 - ATI) Hidden
Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Direct DiscRecorder (Version: 1.00.0000 - Corel Corporation) Hidden
DVD MovieFactory for TOSHIBA (HKLM\...\InstallShield_{50F68032-B5B7-4513-9116-C978DBD8F27A}) (Version: 7.0.0 - Corel Corporation)
DVD MovieFactory for TOSHIBA (Version: 7.0.0 - Corel Corporation) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)
Google Update Helper (Version: 1.3.25.5 - Google Inc.) Hidden
Java™ 6 Update 11 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216011FF}) (Version: 6.0.110 - Sun Microsystems, Inc.)
LightScribe  1.4.124.1 (Version: 1.4.124.1 - http://www.lightscribe.com) Hidden
Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Works (HKLM\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
MSXML 4.0 SP2 (KB941833) (HKLM\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
PlayReady PC runtime (HKLM\...\{B0E5D7E7-A106-458F-BA7B-2F8CAEA3BF16}) (Version: 1 - Microsoft Corporation)
Realtek 8136 8168 8169 Ethernet Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0004 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5809 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM\...\{DC24971E-1946-445D-8A82-CE685433FA7D}) (Version: 6.0.6000.20130 - Realtek Semiconductor Corp.)
Realtek WiFi Protected Setup Library (HKLM\...\{02CA24DD-C8B0-4280-BE53-7862869C2EB1}) (Version: Package:1.00.0026 - REALTEK Semiconductor Corp.)
Realtek WLAN Driver (HKLM\...\{0FB630AB-7BD8-40AE-B223-60397D57C3C9}) (Version: 2.00.0003 - Realtek)
Skins (Version: 2009.0421.2132.36832 - ATI) Hidden
Skype Launcher (HKLM\...\{BF5A20B4-55F7-49B8-9302-FAC7C459AF3D}) (Version: 1.0 - TOSHIBA Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 12.2.10.0 - Synaptics Incorporated)
TOSHIBA Agreement Notification Utility (HKLM\...\InstallShield_{83892653-9EB8-4192-803E-D987A85CDD23}) (Version: 1.0.11.0 - TOSHIBA Corporation)
Toshiba Application and Driver Installer (HKLM\...\{970472D0-F5F9-4158-A6E3-1AE49EFEF2D3}) (Version: 8.0.0.4 - Toshiba)
TOSHIBA Assist (HKLM\...\{12B3A009-A080-4619-9A2A-C6DB151D8D67}) (Version: 2.01.10 - TOSHIBA)
TOSHIBA ConfigFree (HKLM\...\{F0A386D2-6E15-4A8F-A04E-87CE9BED0D48}) (Version: 7.4.9 - TOSHIBA Corporation)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.0.1.3 - TOSHIBA Corporation)
TOSHIBA DVD PLAYER (HKLM\...\{6C5F3BDC-0A1B-4436-A696-5939629D5C31}) (Version: 2.11.09 - TOSHIBA Corporation)
TOSHIBA eco Utility (HKLM\...\InstallShield_{53536479-DFB0-47ED-9D10-43F3708C222D}) (Version: 1.0.2.0 - TOSHIBA Corporation)
TOSHIBA Extended Tiles for Windows Mobility Center (HKLM\...\InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}) (Version: 1.01.00 - TOSHIBA Corporation)
TOSHIBA Hardware Setup (HKLM\...\{D0387727-C89D-4774-B643-B9333EAA09DE}) (Version: 2.00.03 - TOSHIBA Corporation)
TOSHIBA HDD/SSD Alert (HKLM\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.0.0.0 - TOSHIBA Corporation)
TOSHIBA Internal Modem Region Select Utility (HKLM\...\InstallShield_{89F7D66C-777D-473B-AA11-319C0F190EAC}) (Version: 2.3.0.00 - TOSHIBA Corporation)
Toshiba Quality Application (HKLM\...\{E69992ED-A7F6-406C-9280-1C156417BC49}) (Version: 1.001.0000 - Toshiba)
TOSHIBA Recovery Disc Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.0.0.2 - TOSHIBA Corporation)
Toshiba Registration (HKLM\...\{C53D16CC-E56F-47B8-906E-70AAF8EABB4F}) (Version: 1.00.0000 - Datalode Inc.)
Toshiba Resources Page (HKLM\...\{21526716-DFD8-4B90-86D9-EF9F47057B3E}) (Version: 1.0.2.1 - TOSHIBA Corporation)
TOSHIBA SD Memory Utilities (HKLM\...\{EBFF48F5-3CFA-436F-8FD5-94FB01D3A0A7}) (Version: 1.8.1.6_Vista32 - TOSHIBA)
TOSHIBA Software Modem (HKLM\...\TOSHIBA Software Modem) (Version:  - Agere Systems)
TOSHIBA Speech System Applications (HKLM\...\{EE033C1F-443E-41EC-A0E2-559B539A4E4D}) (Version:  - )
TOSHIBA Speech System SR Engine(U.S.) Version1.0 (HKLM\...\{008D69EB-70FF-46AB-9C75-924620DF191A}) (Version:  - )
TOSHIBA Speech System TTS Engine(U.S.) Version1.0 (HKLM\...\{3FBF6F99-8EC6-41B4-8527-0A32241B5496}) (Version:  - )
TOSHIBA Supervisor Password (HKLM\...\{A208044D-A88B-4ACF-AE95-E4F213E6EDC0}) (Version: 2.00.02 - TOSHIBA Corporation)
TOSHIBA Value Added Package (HKLM\...\InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}) (Version: 1.2.8 - TOSHIBA Corporation)
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
WildTangent Games (HKLM\...\WildTangent toshiba Master Uninstall) (Version: 1.0.0.66 - WildTangent)
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 
==================== Restore Points  =========================
 
29-10-2014 00:40:08 Scheduled Checkpoint
29-10-2014 00:41:38 Installed Toshiba Quality Application
29-10-2014 00:50:27 Removed Microsoft Office Home and Student 2007
29-10-2014 01:16:21 Removed Netzero Internet Access Installer
29-10-2014 01:17:22 Removed QuickBooks Financial Center.
29-10-2014 01:53:24 Installed AVG 2015
29-10-2014 01:53:51 Installed AVG 2015
29-10-2014 02:55:38 Windows Update
30-10-2014 15:04:40 Windows Update
30-10-2014 17:52:47 Windows Update
30-10-2014 17:57:07 Windows Update
30-10-2014 18:11:57 Windows Update
30-10-2014 18:16:19 Windows Update
30-10-2014 18:44:46 Windows Update
03-11-2014 14:36:03 Windows Update
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2006-11-02 04:23 - 2006-09-18 15:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 
Task: {28B42922-8728-40D9-B1D4-B2F0A002BCAC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-28] (Google Inc.)
Task: {4062FA59-50D5-46E2-A809-98E7BE26AF0E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-28] (Google Inc.)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (whitelisted) =============
 
2014-10-28 17:47 - 2009-04-21 23:05 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll
2009-03-07 14:15 - 2009-03-07 14:15 - 07005496 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll
2008-07-14 11:37 - 2008-07-14 11:37 - 00095544 _____ () C:\Program Files\TOSHIBA\FlashCards\TWarnMsg\TWarnMsg.dll
2009-05-03 21:29 - 2006-10-10 12:44 - 00009728 _____ () C:\Program Files\TOSHIBA\TOSHIBA Assist\NotifyX.dll
2009-03-12 20:08 - 2009-03-12 20:08 - 00049152 _____ () C:\Program Files\Toshiba\PCDiag\NotifyPCD.dll
2006-10-07 12:57 - 2006-10-07 12:57 - 00053248 _____ () C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll
2006-12-01 18:55 - 2006-12-01 18:55 - 00009216 _____ () C:\Program Files\Toshiba\TBS\NotifyTBS.dll
2009-01-30 23:11 - 2009-01-30 23:11 - 00073728 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll
2014-10-28 17:49 - 2014-10-28 17:49 - 00014848 _____ () C:\Windows\assembly\GAC_MSIL\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.dll
2009-01-30 11:41 - 2009-01-30 11:41 - 00016384 ____R () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
2014-10-28 17:49 - 2014-10-28 17:49 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-10-28 20:44 - 2014-10-21 22:04 - 08910664 _____ () C:\Program Files\Google\Chrome\Application\38.0.2125.111\pdf.dll
2014-10-28 20:44 - 2014-10-21 22:04 - 01681224 _____ () C:\Program Files\Google\Chrome\Application\38.0.2125.111\ffmpegsumo.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 
==================== EXE Association (whitelisted) =============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 
==================== MSCONFIG/TASK MANAGER disabled items =========
 
(Currently there is no automatic fix for this section.)
 
 
========================= Accounts: ==========================
 
Administrator (S-1-5-21-2096730829-1502462945-2231001969-500 - Administrator - Disabled)
Guest (S-1-5-21-2096730829-1502462945-2231001969-501 - Limited - Disabled)
Mommy (S-1-5-21-2096730829-1502462945-2231001969-1000 - Administrator - Enabled) => C:\Users\Mommy
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (10/30/2014 02:12:31 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail (4140) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed.
 
Error: (10/30/2014 01:20:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (10/30/2014 01:18:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (10/30/2014 10:09:19 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (10/28/2014 10:18:07 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (10/28/2014 09:25:49 PM) (Source: Perflib) (EventID: 1017) (User: )
Description: PolicyAgent
 
Error: (10/28/2014 09:25:49 PM) (Source: Perflib) (EventID: 1005) (User: )
Description: OpenIPSecPerformanceDataC:\Windows\System32\ipsecsvc.dllPolicyAgent4
 
Error: (10/28/2014 09:25:49 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4
 
Error: (10/28/2014 09:25:49 PM) (Source: Perflib) (EventID: 1010) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4
 
Error: (10/28/2014 08:02:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 
System errors:
=============
Error: (11/03/2014 08:40:29 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4385) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of changing update Aux from package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package_en-US(Language Pack) into Staged(Staged) state
 
Error: (11/03/2014 08:40:29 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4375) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of setting package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package_en-US (Language Pack) into Install Requested(Install Requested) state
 
Error: (11/03/2014 08:40:29 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4385) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of changing update AuxResourcesLP from package WindowsUpdateClient-SelfUpdate-Aux-Package(Language Pack) into Staged(Staged) state
 
Error: (11/03/2014 08:40:29 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4375) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of setting package WindowsUpdateClient-SelfUpdate-Aux-Package (Language Pack) into Install Requested(Install Requested) state
 
Error: (11/03/2014 08:40:29 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4385) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-en-us-LP from package WUClient-SelfUpdate-Aux-Package-en-us-MiniLP(Feature Pack) into Staged(Staged) state
 
Error: (11/03/2014 08:40:29 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4375) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of setting package WUClient-SelfUpdate-Aux-Package-en-us-MiniLP (Feature Pack) into Install Requested(Install Requested) state
 
Error: (11/03/2014 08:40:29 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4375) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of setting package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package_en-US (Language Pack) into Install Requested(Install Requested) state
 
Error: (11/03/2014 08:40:29 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4385) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of changing update Aux from package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package(Update) into Staged(Staged) state
 
Error: (11/03/2014 08:40:29 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4375) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of setting package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package (Update) into Install Requested(Install Requested) state
 
Error: (11/03/2014 08:40:29 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4385) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of changing update AuxComp from package WindowsUpdateClient-SelfUpdate-Aux-Package(Update) into Staged(Staged) state
 
 
Microsoft Office Sessions:
=========================
Error: (10/30/2014 02:12:31 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail4140WindowsMail0:
 
Error: (10/30/2014 01:20:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (10/30/2014 01:18:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (10/30/2014 10:09:19 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (10/28/2014 10:18:07 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (10/28/2014 09:25:49 PM) (Source: Perflib) (EventID: 1017) (User: )
Description: PolicyAgent
 
Error: (10/28/2014 09:25:49 PM) (Source: Perflib) (EventID: 1005) (User: )
Description: OpenIPSecPerformanceDataC:\Windows\System32\ipsecsvc.dllPolicyAgent4
 
Error: (10/28/2014 09:25:49 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4
 
Error: (10/28/2014 09:25:49 PM) (Source: Perflib) (EventID: 1010) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4
 
Error: (10/28/2014 08:02:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 
CodeIntegrity Errors:
===================================
  Date: 2014-11-04 19:21:54.534
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-11-04 19:21:54.396
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-11-04 19:21:54.244
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-11-04 19:21:54.133
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-11-04 19:21:53.779
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-11-04 19:21:53.644
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-11-04 19:21:53.502
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-11-04 19:21:53.381
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-11-04 19:21:52.531
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-11-04 19:21:52.320
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys because the set of per-page image hashes could not be found on the system.
 
 
==================== Memory info =========================== 
 
Processor: AMD Athlon™ X2 Dual-Core QL-65
Percentage of memory in use: 59%
Total physical RAM: 2813.09 MB
Available physical RAM: 1149.51 MB
Total Pagefile: 5854.73 MB
Available Pagefile: 3696.46 MB
Total Virtual: 2047.88 MB
Available Virtual: 1921.82 MB
 
==================== Drives ================================
 
Drive c: (TI100760V0G) (Fixed) (Total:231.42 GB) (Free:188.71 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 232.9 GB) (Disk ID: 2D41A640)
Partition 1: (Not Active) - (Size=1.5 GB) - (Type=27)
Partition 2: (Active) - (Size=231.4 GB) - (Type=07 NTFS)
 
==================== End Of Log ============================

  • 0

#4
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts

Hi,

 

Just wondering what kind of symptoms you are experiencing? You have a little bit of adware/spyware that we can remove, but I don't see anything signficant. However, I do see either OS installation errors or perhaps Hard Disk errors. Let me know what you see and I'll either clean up what I do see and send you off to the Operating System folks or I'll look harder at your scan.


  • 0

#5
ninja_mommy

ninja_mommy

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
Redirects, avg stops working (actually appears to work but its not) im locked at the moment I think I have a redirct in my windows update but not sure, system recources are at maximum, I cant download ANY security programs, system restore was disabling itsself, processes out the wazooza. I just last night erased my hdd AGAIN and yes I do have some disk errors the laptop is 5 almost 6 yrs old. Hdd is on my list soon as Christmas is over but I need my system to function til tben. Oh and I lose rights even though I have administrative account. And this is just a few of my issues.. Im booted in safe mode trying my best to NOT erase and rewrite partitions. Im outta ideas... thank you so much for helping.

Susan
  • 0

#6
ninja_mommy

ninja_mommy

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
Btw hi :)
  • 0

#7
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts

Redirects, avg stops working (actually appears to work but its not) im locked at the moment I think I have a redirct in my windows update but not sure, system recources are at maximum, I cant download ANY security programs, system restore was disabling itsself, processes out the wazooza. I just last night erased my hdd AGAIN and yes I do have some disk errors the laptop is 5 almost 6 yrs old. Hdd is on my list soon as Christmas is over but I need my system to function til tben. Oh and I lose rights even though I have administrative account. And this is just a few of my issues.. Im booted in safe mode trying my best to NOT erase and rewrite partitions. Im outta ideas... thank you so much for helping.

 

Please don't be offended by my questions as I'm just trying to understand :)

 

You start by saying you have re-directs, A/V stops working, etc. Then later in the paragraph you say that you erased the HD and I presume, based on the FRST scan, that you reinstalled the OS. If so, then what you posted in your first scan has been removed by the re-install.

 

So, why don't you catch me  up on where things are right now. Then, hold off on make any other changes to the computer and give me a fresh FRST Scan.


  • 0

#8
ninja_mommy

ninja_mommy

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
I am only a system recovery from a system failure when I recovery to out of box state or erase HDD. I wasnt offended and I apologize if I cqme across as so. Ive been working on my system all day and was frustrated in general. My chrome was hijackd as was my avg and malwarebytes. I was trying to stop google redicts so I could use goovle bc my IE was no longer supported and I was getting operation aborted at every turn. I had a few security scans on hand and actually found a possible trojan might be false positive idk. Is there a way to send you a log file or copy and paste only? IObits found trojan advanced system care found a lot of crap. I noticed also that my default search engine in chrome was not a true Google sit so I changed it to yahoo or bing or something and I have hhttps back in chrome for the time being. I still have issues as im watching my CPU and MEMORY get higher and higher (system failure usually follows) and Im just trying to get my windows up to dated vista sp1 is not supported and .NET is vulnerable. I think thats all ... enough huh? Sorry have no life and trying my best to keep it running til I get a new hdd after Christmas.

Edited by ninja_mommy, 06 November 2014 - 10:52 PM.

  • 0

#9
ninja_mommy

ninja_mommy

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts

Attached File  ASCULog-2014-11-06(19-31-13).txt   964.94KB   75 downloads  <<<< This one is Advanced systemCare.. Thats a big one    

 

 

                                   Attached File  chrome_installer.log   20.07KB   171 downloads <<<< This is the one when I knew I had an infection of some sort and it wasnt just my hdd going bad  

 

 

 

Attached File  IObit Malware Fighter Report.log   295bytes   106 downloads  <<<< possible  trojan found.  Again i appreciate all the help and i have a pic I want yall to see... inquiring minds wanna know .. see the arrow with no text? There is a subdirectory there also if you right click, scroll or hover :alarm:  :headscratch:   :confused:  whats missing there.jpeg :huh:  :headscratch:

 

Ok I think Im done.. may have more but itd be on my phone which is what I was replying with yesterday. I couldnt do anything but look at webpages from the laptop.but I am having shared folders and stuff pop up again and I have file sharing disabled or am suppose to...Hoping getting windows up to date will help some.

 

Thanks again,

 

Susan 


  • 0

#10
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts

Hi Susan,

 

Ok, glad that I didn't offend you and you have no worries as you wern't offensive at all. I understand your frustration, concern and fear for your computer. :thumbsup:

 

Here's some things that I'm seeing. IOBIT is far from a reliable scanner. AVG is just "ok". So anything either of them tells me I take with a grain of salt. Also, with all of the System and Disk errors, what either tools sees, it likely is concluding incorrectly.

 

Defender is part of your Operating System and is among my favorite A/V's. And...it's free. Likely the only thing Miscrosoft will ever "give" you. So, if you want to do it now, you could uninstall AVG and IOBIT and enable Defender. It would save you listening to those alarms. However, you can also wait for later too.

 

Next, I think we need to try and cleanup these disk and system errors. Here's a spiffy little proceedure with a little different approach for running it that has often healed a very broken system. Perhaps it will help here.

 

From a command prompt, run SFC /SCANNOW three times in a row. Even if time one or two tells you it fixed everything, run it three times.

 

Let me know how this goes.


  • 0

#11
ninja_mommy

ninja_mommy

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
Gmorning :) uhg well.. at least it got me back online and working for a moment.. is defender that good? Guess thats what I get for assuming. I didnt put much faith in it bc well its a Microsoft product and was free..lol.. I have used the sfc /scannow and the chkdsk /f/r a few weeks ago when I was trying to avoid doing an out of nox recovery or formating if I remove IObit and I can no issues w doing that I need to 1 either undo changes advanced syscare made or I need to do a full recovery option wnd I dont see a way to undo specific changes. Window update is blocked as is system restore Again ( had this problem before). And I dont have full permission anymore. (Bangshead)

Im glad you werent offended :D I can certainly be rather sharp (to put mildly) sometimes and will be 1st to admit it. But Im sure you can understand since you deal w computers a lot..lol

I will await your recommendation on recovery, undo changes or what... will restrict OBit and run sfc scan again while I wait.

Sorry if any typos Im on android again :/
  • 0

#12
ninja_mommy

ninja_mommy

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts

Evening,

 

Here are the results of the system scans. I will attach the file if you prefer me to copy and past just let me know.I have alot of dual owner ships and shared files. there is still more files corrupted. :killcomp:  But Im taking the night off unless I get on later. Going to take my son out while he still enjoys my company  :wub: Oh btw, biscuithead was my sisters nickname as well ... just a random thought  :whistling:

 

 

PS> my .NETframework I think have taken over CBS and a few other things. I can only few the files when I click attach files. If i go to the windows folder they are hidden even though I have folder settings specified to show hidden and system files.

Attached Files

  • Attached File  CBS.log   947.81KB   29 downloads

  • 0

#13
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts

Sorry, I've missed a few days due to personal issues.

 

The CBS log indicates issues beyond Malware (which is my area of expertise). You could try opening a ticket on the Hardware side here and perhaps they can help you?


  • 0

#14
ninja_mommy

ninja_mommy

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
Sorry to heqr about personal issues. Hope all is well soon. Ok thanks for all your help, will open another ticket.
  • 0

#15
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP