Documents and pictures encrypted by RSA-2048 using Cryptowall 2.0 [Clo

OTL.Txt 357.2KB 133 downloads

OTL logfile created on: 1/25/2015 11:05:45 AM - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\young\Desktop

Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.11.9600.17501)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.75 Gb Total Physical Memory | 0.81 Gb Available Physical Memory | 46.54% Memory free

3.50 Gb Paging File | 2.15 Gb Available in Paging File | 61.42% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files

Drive C: | 223.33 Gb Total Space | 183.40 Gb Free Space | 82.12% Space Free | Partition Type: NTFS

Computer Name: YOUNG-PC | User Name: young | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 180 Days

========== Processes (SafeList) ==========

PRC - [2015/01/25 10:31:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\young\Desktop\OTL.exe

PRC - [2015/01/24 16:02:34 | 000,960,688 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\Macromed\Flash\FlashUtil32_16_0_0_296_ActiveX.exe

PRC - [2015/01/09 17:36:21 | 001,099,336 | ---- | M] (Mindspark) -- C:\Program Files\GamingWonderland\bar\1.bin\CrExtPgt.exe

PRC - [2015/01/09 17:36:21 | 000,225,864 | ---- | M] (Mindspark) -- C:\Program Files\GamingWonderland\bar\1.bin\APPINTEGRATOR.EXE

PRC - [2015/01/09 17:36:17 | 000,090,696 | ---- | M] (Mindspark) -- C:\Program Files\GamingWonderland\bar\1.bin\gtbarsvc.exe

PRC - [2014/12/10 04:00:44 | 000,282,528 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton Security with Backup\Engine\22.1.0.9\NSBU.exe

PRC - [2014/11/19 19:32:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe

PRC - [2014/10/07 15:39:30 | 001,241,472 | ---- | M] (Oracle Corporation) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe

PRC - [2011/02/24 22:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe

PRC - [2009/08/17 11:48:46 | 001,294,136 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe

PRC - [2009/08/17 11:48:42 | 000,051,512 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe

PRC - [2009/08/10 20:55:46 | 000,185,712 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe

PRC - [2009/08/05 15:18:50 | 000,464,224 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

PRC - [2009/08/05 15:18:08 | 000,476,512 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe

PRC - [2009/08/05 15:04:54 | 000,738,616 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe

PRC - [2009/08/03 18:16:50 | 001,021,272 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe

PRC - [2009/08/03 18:16:32 | 000,111,960 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

PRC - [2009/07/30 00:54:38 | 000,348,160 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe

PRC - [2009/07/30 00:54:10 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe

PRC - [2009/07/28 15:43:04 | 000,128,344 | ---- | M] (TOSHIBA Corporation) -- C:\Windows\System32\TODDSrv.exe

PRC - [2009/07/28 15:00:10 | 000,460,088 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe

PRC - [2009/03/10 19:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

PRC - [2009/01/13 22:33:40 | 000,034,088 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\Utilities\KeNotify.exe

========== Modules (No Company Name) ==========

MOD - [2014/11/23 12:14:57 | 000,774,144 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\5c093e6286545b5ee4b9d29e6bd24eb7\System.Runtime.Remoting.ni.dll

MOD - [2014/11/23 11:18:13 | 012,435,968 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\b63fb23d171f316e1c47c5cdbd97ec56\System.Windows.Forms.ni.dll

MOD - [2014/11/22 10:40:10 | 000,212,992 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\af1324443e5540135950578db84809d5\System.ServiceProcess.ni.dll

MOD - [2014/11/22 10:39:22 | 011,922,944 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\cef6560830fd889aff2917e1de716f1f\System.Web.ni.dll

MOD - [2014/11/22 10:39:09 | 001,593,344 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\b3fd0e68baabf3b45f59fe6df4166c6b\System.Drawing.ni.dll

MOD - [2014/11/22 10:39:04 | 005,467,648 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\7a042b46130d9b9c7498bf10af0cb036\System.Xml.ni.dll

MOD - [2014/11/22 10:38:59 | 000,978,432 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\1a6f4c47bfc15ff2361c89383c8dbffb\System.Configuration.ni.dll

MOD - [2014/11/22 10:38:52 | 007,991,808 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System\ea649d6e9b7c95482ec8f75ba544ae5a\System.ni.dll

MOD - [2014/11/22 10:38:37 | 011,497,984 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll

MOD - [2014/11/17 19:23:17 | 001,736,704 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3497.38831__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll

MOD - [2014/11/17 19:23:17 | 000,491,520 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3497.38899__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll

MOD - [2014/11/17 19:23:17 | 000,339,968 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3497.38814__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll

MOD - [2014/11/17 19:23:17 | 000,204,800 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll

MOD - [2014/11/17 19:23:17 | 000,077,824 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3497.38880__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll

MOD - [2014/11/17 19:23:17 | 000,073,728 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3497.38822__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll

MOD - [2014/11/17 19:23:17 | 000,065,536 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3497.38863__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll

MOD - [2014/11/17 19:23:17 | 000,040,960 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3497.38828__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll

MOD - [2014/11/17 19:23:17 | 000,036,864 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll

MOD - [2014/11/17 19:23:17 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3497.38823__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll

MOD - [2014/11/17 19:23:16 | 000,331,776 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3497.38868__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll

MOD - [2014/11/17 19:23:16 | 000,118,784 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard\2.0.3497.38898__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.dll

MOD - [2014/11/17 19:23:16 | 000,094,208 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3497.38868__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll

MOD - [2014/11/17 19:23:16 | 000,061,440 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3497.38867__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll

MOD - [2014/11/17 19:23:16 | 000,045,056 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3497.38899__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll

MOD - [2014/11/17 19:23:16 | 000,045,056 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.3497.38898__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll

MOD - [2014/11/17 19:23:15 | 000,782,336 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll

MOD - [2014/11/17 19:23:15 | 000,409,600 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3497.38875__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll

MOD - [2014/11/17 19:23:15 | 000,196,608 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll

MOD - [2014/11/17 19:23:15 | 000,081,920 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll

MOD - [2014/11/17 19:23:14 | 000,950,272 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager2.Graphics.Dashboard\2.0.3497.38923__90ba9c70f846762e\CLI.Aspect.DisplaysManager2.Graphics.Dashboard.dll

MOD - [2014/11/17 19:23:14 | 000,573,440 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll

MOD - [2014/11/17 19:23:14 | 000,393,216 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll

MOD - [2014/11/17 19:23:14 | 000,315,392 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3497.38862__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll

MOD - [2014/11/17 19:23:14 | 000,307,200 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3497.38837__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll

MOD - [2014/11/17 19:23:14 | 000,270,336 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

MOD - [2014/11/17 19:23:14 | 000,094,208 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3497.38861__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll

MOD - [2014/11/17 19:23:14 | 000,061,440 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll

MOD - [2014/11/17 19:23:14 | 000,040,960 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3497.38837__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll

MOD - [2014/11/17 19:23:14 | 000,040,960 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll

MOD - [2014/11/17 19:23:14 | 000,036,864 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3497.38860__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll

MOD - [2014/11/17 19:23:14 | 000,032,768 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3497.38862__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll

MOD - [2014/11/17 19:23:13 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll

MOD - [2014/11/17 19:23:13 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3428.28302__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll

MOD - [2014/11/17 19:23:13 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll

MOD - [2014/11/17 19:23:13 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3428.28329__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll

MOD - [2014/11/17 19:23:13 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll

MOD - [2014/11/17 19:23:13 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll

MOD - [2014/11/17 19:23:13 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll

MOD - [2014/11/17 19:23:13 | 000,007,168 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll

MOD - [2014/11/17 19:23:12 | 000,094,208 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Foundation\2.0.3428.28298__90ba9c70f846762e\CLI.Foundation.dll

MOD - [2014/11/17 19:23:12 | 000,045,056 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll

MOD - [2014/11/17 19:23:12 | 000,032,768 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\LOG.Foundation\2.0.3428.28296__90ba9c70f846762e\LOG.Foundation.dll

MOD - [2014/11/17 19:23:12 | 000,028,672 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3428.28297__90ba9c70f846762e\NEWAEM.Foundation.dll

MOD - [2014/11/17 19:23:12 | 000,028,672 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3428.28354__90ba9c70f846762e\CLI.Foundation.XManifest.dll

MOD - [2014/11/17 19:23:12 | 000,024,576 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3428.28304__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll

MOD - [2014/11/17 19:23:12 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll

MOD - [2014/11/17 19:23:12 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\MOM.Foundation\2.0.3428.28310__90ba9c70f846762e\MOM.Foundation.dll

MOD - [2014/11/17 19:23:12 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll

MOD - [2014/11/17 19:23:12 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\DEM.Graphics\2.0.3428.28324__90ba9c70f846762e\DEM.Graphics.dll

MOD - [2014/11/17 19:23:12 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll

MOD - [2014/11/17 19:23:11 | 000,098,304 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3428.28305__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll

MOD - [2014/11/17 19:23:11 | 000,053,248 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll

MOD - [2014/11/17 19:23:11 | 000,053,248 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll

MOD - [2014/11/17 19:23:11 | 000,040,960 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3428.28324__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll

MOD - [2014/11/17 19:23:11 | 000,028,672 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.3428.28323__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll

MOD - [2014/11/17 19:23:11 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3428.28302__90ba9c70f846762e\CLI.Component.Client.Shared.dll

MOD - [2014/11/17 19:23:11 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3428.28303__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll

MOD - [2014/11/17 19:23:11 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll

MOD - [2014/11/17 19:23:11 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll

MOD - [2014/11/17 19:23:10 | 000,065,536 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3428.28316__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll

MOD - [2014/11/17 19:23:10 | 000,053,248 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll

MOD - [2014/11/17 19:23:10 | 000,049,152 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll

MOD - [2014/11/17 19:23:10 | 000,045,056 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3497.38904__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll

MOD - [2014/11/17 19:23:10 | 000,040,960 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll

MOD - [2014/11/17 19:23:10 | 000,032,768 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3428.28309__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll

MOD - [2014/11/17 19:23:10 | 000,028,672 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll

MOD - [2014/11/17 19:23:10 | 000,028,672 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll

MOD - [2014/11/17 19:23:10 | 000,028,672 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3428.28311__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll

MOD - [2014/11/17 19:23:10 | 000,024,576 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll

MOD - [2014/11/17 19:23:10 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll

MOD - [2014/11/17 19:23:10 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\APM.Foundation\2.0.3428.28310__90ba9c70f846762e\APM.Foundation.dll

MOD - [2014/11/17 19:23:10 | 000,016,384 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Server.Shared.dll

MOD - [2014/11/17 19:23:10 | 000,007,168 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3497.38810__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll

MOD - [2014/11/17 19:23:09 | 000,405,504 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3497.38827__90ba9c70f846762e\CLI.Component.Wizard.dll

MOD - [2014/11/17 19:23:09 | 000,106,496 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3497.38894__90ba9c70f846762e\MOM.Implementation.dll

MOD - [2014/11/17 19:23:09 | 000,065,536 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3497.38892__90ba9c70f846762e\LOG.Foundation.Implementation.dll

MOD - [2014/11/17 19:23:09 | 000,057,344 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3497.38813__90ba9c70f846762e\CLI.Component.SkinFactory.dll

MOD - [2014/11/17 19:23:09 | 000,057,344 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3497.38812__90ba9c70f846762e\CLI.Component.Runtime.dll

MOD - [2014/11/17 19:23:09 | 000,045,056 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll

MOD - [2014/11/17 19:23:09 | 000,040,960 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3428.28301__90ba9c70f846762e\CLI.Foundation.Private.dll

MOD - [2014/11/17 19:23:09 | 000,036,864 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\LOG.Foundation.Private.dll

MOD - [2014/11/17 19:23:09 | 000,024,576 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll

MOD - [2014/11/17 19:23:09 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll

MOD - [2014/11/17 19:23:09 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3428.28310__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll

MOD - [2014/11/17 19:23:08 | 001,212,416 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3497.38819__90ba9c70f846762e\CLI.Component.Dashboard.dll

MOD - [2014/11/17 19:23:08 | 000,061,440 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\APM.Server\2.0.3497.38811__90ba9c70f846762e\APM.Server.dll

MOD - [2014/11/17 19:23:08 | 000,045,056 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\AEM.Server\2.0.3497.38810__90ba9c70f846762e\AEM.Server.dll

MOD - [2014/11/17 19:23:08 | 000,040,960 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll

MOD - [2014/11/17 19:23:08 | 000,032,768 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll

MOD - [2014/11/17 19:23:08 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3428.28309__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll

MOD - [2014/11/17 19:23:08 | 000,020,480 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3428.28316__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll

MOD - [2014/11/17 19:23:08 | 000,019,456 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3497.38893__90ba9c70f846762e\CCC.Implementation.dll

MOD - [2014/11/17 19:10:50 | 008,007,680 | ---- | M] () -- C:\windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll

MOD - [2009/08/03 18:17:24 | 000,079,192 | ---- | M] () -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll

MOD - [2009/07/25 11:07:12 | 000,058,704 | ---- | M] () -- C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll

MOD - [2009/07/16 16:27:48 | 000,052,536 | ---- | M] () -- C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll

MOD - [2009/07/16 16:27:44 | 007,263,544 | ---- | M] () -- C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll

MOD - [2009/06/22 15:38:40 | 000,015,160 | ---- | M] () -- C:\Program Files\TOSHIBA\TOSHIBA Assist\NotifyX.dll

MOD - [2009/05/04 11:45:14 | 000,016,384 | R--- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll

MOD - [2009/03/12 20:08:04 | 000,049,152 | ---- | M] () -- C:\Program Files\TOSHIBA\PCDiag\NotifyPCD.dll

========== Services (SafeList) ==========

SRV - [2015/01/24 16:02:41 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2015/01/09 17:36:17 | 000,090,696 | ---- | M] (Mindspark) [Auto | Running] -- C:\Program Files\GamingWonderland\bar\1.bin\gtbarsvc.exe -- (GamingWonderlandService)

SRV - [2014/12/10 04:00:44 | 000,282,528 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton Security with Backup\Engine\22.1.0.9\NSBU.exe -- (NSBU)

SRV - [2014/11/21 18:55:14 | 000,102,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)

SRV - [2013/05/26 21:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV - [2009/08/27 21:17:26 | 000,332,272 | ---- | M] (Google Inc.) [On_Demand | Stopped] -- C:\ProgramData\Partner\Partner.exe -- (Partner Service)

SRV - [2009/08/17 11:48:42 | 000,051,512 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo)

SRV - [2009/08/10 20:55:46 | 000,185,712 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe -- (cfWiMAXService)

SRV - [2009/08/05 15:18:50 | 000,464,224 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe -- (TosCoSrv)

SRV - [2009/08/03 18:16:32 | 000,111,960 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service)

SRV - [2009/07/30 00:54:10 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)

SRV - [2009/07/28 15:43:04 | 000,128,344 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\System32\TODDSrv.exe -- (TODDSrv)

SRV - [2009/07/13 18:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)

SRV - [2009/05/22 11:02:20 | 000,250,616 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe -- (GameConsoleService)

SRV - [2009/03/10 19:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\RtsUCcid.sys -- (USBCCID)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\Rts516xIR.sys -- (RtsUIR)

DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\RtsUStor.sys -- (RSUSBSTOR)

DRV - [2015/01/20 19:58:01 | 001,636,696 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Norton Security with Backup\NortonData\22.1.0.9\Definitions\VirusDefs\20150124.003\NAVEX15.SYS -- (NAVEX15)

DRV - [2015/01/20 19:58:01 | 000,095,704 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Norton Security with Backup\NortonData\22.1.0.9\Definitions\VirusDefs\20150124.003\NAVENG.SYS -- (NAVENG)

DRV - [2015/01/10 11:42:58 | 000,503,000 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Norton Security with Backup\NortonData\22.1.0.9\Definitions\IPSDefs\20150123.001\IDSvix86.sys -- (IDSVix86)

DRV - [2015/01/06 12:15:27 | 001,164,504 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Norton Security with Backup\NortonData\22.1.0.9\Definitions\BASHDefs\20150106.001\BHDrvx86.sys -- (BHDrvx86)

DRV - [2015/01/01 15:59:36 | 000,094,424 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)

DRV - [2014/12/01 22:59:40 | 000,699,608 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\NSBU\1601000.009\srtsp.sys -- (SRTSP)

DRV - [2014/12/01 22:59:40 | 000,036,056 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NSBU\1601000.009\srtspx.sys -- (SRTSPX)

DRV - [2014/11/25 14:30:33 | 000,378,672 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)

DRV - [2014/11/25 14:30:27 | 000,111,408 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)

DRV - [2014/09/08 22:15:11 | 000,420,056 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NSBU\1601000.009\symnets.sys -- (SymNetS)

DRV - [2014/09/08 22:15:10 | 000,939,224 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\NSBU\1601000.009\SymEFA.sys -- (SymEFA)

DRV - [2014/09/08 22:15:09 | 000,364,760 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\NSBU\1601000.009\SymDS.sys -- (SymDS)

DRV - [2014/09/08 22:05:40 | 000,212,696 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NSBU\1601000.009\Ironx86.sys -- (SymIRON)

DRV - [2014/09/08 22:05:23 | 000,128,728 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NSBU\1601000.009\ccSetx86.sys -- (ccSet_NSBU)

DRV - [2013/10/01 17:42:31 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV - [2012/08/23 07:44:32 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV - [2009/07/30 17:45:56 | 000,022,912 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tdcmdpst.sys -- (tdcmdpst)

DRV - [2009/07/30 13:06:30 | 004,994,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)

DRV - [2009/07/24 16:57:06 | 000,275,536 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tos_sps32.sys -- (tos_sps32)

DRV - [2009/07/14 16:28:42 | 000,023,512 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ)

DRV - [2009/07/13 15:13:48 | 001,035,776 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)

DRV - [2009/07/02 15:55:36 | 000,036,208 | ---- | M] (COMPAL ELECTRONIC INC.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\LPCFilter.sys -- (LPCFilter)

DRV - [2009/05/05 01:30:28 | 000,014,392 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AtiPcie.sys -- (AtiPcie)

DRV - [2008/08/22 10:28:32 | 000,333,824 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTL8187Se.sys -- (RTL8187Se)

========== Standard Registry (All) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft..../?LinkId=255141

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft..../?LinkId=255141

IE - HKLM\..\SearchScopes,DefaultScope = {7C13A060-8CC2-4016-AF6B-C68DFD9EA7BD}

IE - HKLM\..\SearchScopes\{3d29c02b-bf3e-4d3b-8a7a-e0e7d0f6dbab}: "URL" = http://search.tb.ask...r={searchTerms}

IE - HKLM\..\SearchScopes\{7C13A060-8CC2-4016-AF6B-C68DFD9EA7BD}: "URL" = http://www.google.co...ng}&rlz=1I7TSNA

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.co...=TSNA&bmod=TSNA

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com/

IE - HKCU\..\URLSearchHook: {a8625cb7-85fe-4936-92a4-b2a7c925209e} - No CLSID value found

IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)

IE - HKCU\..\SearchScopes,DefaultScope = {BB1A66A5-7601-457A-BCEF-F70A42C8C18C}

IE - HKCU\..\SearchScopes\{3d29c02b-bf3e-4d3b-8a7a-e0e7d0f6dbab}: "URL" = http://search.tb.ask...r={searchTerms}

IE - HKCU\..\SearchScopes\{BB1A66A5-7601-457A-BCEF-F70A42C8C18C}: "URL" = https://www.google.c...q={searchTerms}

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.25.2: C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2: C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.1.0.9\coFFPlgn\ [2015/01/21 21:00:48 | 000,000,000 | ---D | M]

========== Chrome ==========

CHR - default_search_provider: (Enabled)

CHR - default_search_provider: search_url =

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},

CHR - plugin: Error reading preferences file

CHR - Extension: No name found = C:\Users\young\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\

CHR - Extension: No name found = C:\Users\young\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\

CHR - Extension: No name found = C:\Users\young\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\

CHR - Extension: No name found = C:\Users\young\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\

CHR - Extension: No name found = C:\Users\young\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\

CHR - Extension: No name found = C:\Users\young\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

CHR - Extension: No name found = C:\Users\young\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2009/06/10 14:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts

O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.

O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Security with Backup\Engine\22.1.0.9\CoIEPlg.dll (Symantec Corporation)

O2 - BHO: (Toolbar BHO) - {7c8f8fe5-9785-4f74-bcf8-895ef9752d97} - C:\Program Files\GamingWonderland\bar\1.bin\gtbar.dll (Mindspark)

O2 - BHO: (Partner BHO Class) - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll (Google Inc.)

O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

O2 - BHO: (Search Assistant BHO) - {ab5d199e-9659-47a2-930b-fc3b69061353} - C:\Program Files\GamingWonderland\bar\1.bin\gtSrcAs.dll (Mindspark)

O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)

O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.)

O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security with Backup\Engine\22.1.0.9\CoIEPlg.dll (Symantec Corporation)

O3 - HKLM\..\Toolbar: (GamingWonderland) - {a899079d-206f-43a6-be6a-07e0fa648ea0} - C:\Program Files\GamingWonderland\bar\1.bin\gtbar.dll (Mindspark)

O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.

O3 - HKCU\..\Toolbar\WebBrowser: (GamingWonderland) - {A899079D-206F-43A6-BE6A-07E0FA648EA0} - C:\Program Files\GamingWonderland\bar\1.bin\gtbar.dll (Mindspark)

O4 - HKLM..\Run: [] File not found

O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)

O4 - HKLM..\Run: [GamingWonderland AppIntegrator 32-bit] C:\Program Files\GamingWonderland\bar\1.bin\APPINTEGRATOR.EXE (Mindspark)

O4 - HKLM..\Run: [GamingWonderland EPM Support] C:\Program Files\GamingWonderland\bar\1.bin\gtmedint.exe (Mindspark)

O4 - HKLM..\Run: [GamingWonderland Search Scope Monitor] "C:\PROGRA~1\GAMING~2\bar\1.bin\gtsrchmn.exe" /m=2 /w /h File not found

O4 - HKLM..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe (TOSHIBA Electronics, Inc.)

O4 - HKLM..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe (TOSHIBA CORPORATION)

O4 - HKLM..\Run: [NortonOnlineBackupReminder] C:\Program Files\TOSHIBA\Toshiba Online Backup\Activation\TobuActivation.exe (Toshiba)

O4 - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor)

O4 - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)

O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe (Oracle Corporation)

O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA CORPORATION)

O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated)

O4 - HKLM..\Run: [ToshibaServiceStation] C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation)

O4 - HKLM..\Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe (TOSHIBA Corporation)

O4 - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)

O4 - HKCU..\Run: [MyTOSHIBA] C:\Program Files\TOSHIBA\My Toshiba\MyToshiba.exe (TOSHIBA)

O4 - HKCU..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17

O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)

O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)

O13 - gopher Prefix: missing

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 11.25.2)

O16 - DPF: {CAFEEFAC-0018-0000-0025-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.8.0_25)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.8.0_25)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 71.10.216.1 71.10.216.2

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1498BDB2-C595-4949-9297-1E3FCCFA6C51}: DhcpNameServer = 71.10.216.1 71.10.216.2

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9A2C832A-3E88-42DB-8D70-FFA7F014AFC6}: DhcpNameServer = 12.127.16.68 216.57.128.2 12.127.17.77 216.57.130.1 12.127.16.77

O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)

O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)

O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)

O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)

O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)

O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)

O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)

O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)

O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)

O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)

O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\windows\System32\mscoree.dll (Microsoft Corporation)

O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\windows\System32\mscoree.dll (Microsoft Corporation)

O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\windows\System32\mscoree.dll (Microsoft Corporation)

O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O29 - HKLM SecurityProviders - (credssp.dll) - C:\windows\System32\credssp.dll (Microsoft Corporation)

O30 - LSA: Authentication Packages - (msv1_0) - C:\windows\System32\msv1_0.dll (Microsoft Corporation)

O30 - LSA: Security Packages - (kerberos) - C:\windows\System32\kerberos.dll (Microsoft Corporation)

O30 - LSA: Security Packages - (msv1_0) - C:\windows\System32\msv1_0.dll (Microsoft Corporation)

O30 - LSA: Security Packages - (schannel) - C:\windows\System32\schannel.dll (Microsoft Corporation)

O30 - LSA: Security Packages - (wdigest) - C:\windows\System32\wdigest.dll (Microsoft Corporation)

O30 - LSA: Security Packages - (tspkg) - C:\windows\System32\tspkg.dll (Microsoft Corporation)

O30 - LSA: Security Packages - (pku2u) - C:\windows\System32\pku2u.dll (Microsoft Corporation)

O31 - SafeBoot: AlternateShell - cmd.exe

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2009/06/10 14:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 180 Days ==========

[2015/01/25 10:31:46 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\young\Desktop\OTL.exe

[2015/01/21 19:54:09 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\ParetoLogic

[2015/01/21 19:53:52 | 000,000,000 | ---D | C] -- C:\ProgramData\ParetoLogic

[2015/01/21 19:47:59 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\IAC

[2015/01/21 16:43:29 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\OneNote Notebooks

[2015/01/21 16:06:25 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0

[2015/01/21 15:33:34 | 000,000,000 | ---D | C] -- C:\Program Files\Hewlett-Packard

[2015/01/21 15:33:34 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Hewlett-Packard

[2015/01/21 15:31:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\HP

[2015/01/21 15:27:42 | 000,000,000 | ---D | C] -- C:\Program Files\HP

[2015/01/21 15:27:40 | 000,000,000 | -H-D | C] -- C:\Config.Msi

[2015/01/21 15:18:37 | 000,000,000 | ---D | C] -- C:\ProgramData\HP

[2015/01/17 15:45:58 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TSWbPrxy.exe

[2015/01/15 19:32:37 | 003,971,512 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ntkrnlpa.exe

[2015/01/15 19:32:36 | 003,916,728 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ntoskrnl.exe

[2015/01/09 17:38:09 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\GamingWonderland

[2015/01/09 17:36:16 | 000,000,000 | ---D | C] -- C:\Program Files\GamingWonderland

[2015/01/08 22:48:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun

[2015/01/08 22:48:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java

[2015/01/08 22:46:49 | 000,096,680 | ---- | C] (Oracle Corporation) -- C:\windows\System32\WindowsAccessBridge.dll

[2015/01/08 22:46:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

[2015/01/08 22:46:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle

[2015/01/08 22:39:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

[2015/01/08 22:38:55 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\Google

[2015/01/08 22:38:22 | 000,701,616 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerApp.exe

[2015/01/08 22:38:22 | 000,071,344 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerCPLApp.cpl

[2015/01/07 09:46:45 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\Template

[2015/01/07 09:21:51 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER

[2015/01/05 22:25:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

[2015/01/04 11:06:30 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\Adobe

[2015/01/02 21:37:09 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieUnatt.exe

[2015/01/01 16:31:29 | 000,000,000 | ---D | C] -- C:\Users\young\Easy Tech

[2015/01/01 15:59:36 | 000,094,424 | ---- | C] (Symantec Corporation) -- C:\windows\System32\drivers\SYMEVENT.SYS

[2015/01/01 15:59:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared

[2015/01/01 15:58:29 | 000,939,224 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\SymEFA.sys

[2015/01/01 15:58:29 | 000,420,056 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\symnets.sys

[2015/01/01 15:58:29 | 000,364,760 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\SymDS.sys

[2015/01/01 15:58:29 | 000,036,056 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\srtspx.sys

[2015/01/01 15:58:29 | 000,021,520 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\SymELAM.sys

[2015/01/01 15:58:28 | 000,699,608 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\srtsp.sys

[2015/01/01 15:58:28 | 000,212,696 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\Ironx86.sys

[2015/01/01 15:58:28 | 000,128,728 | R--- | C] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\ccSetx86.sys

[2015/01/01 15:57:57 | 000,000,000 | ---D | C] -- C:\windows\System32\drivers\NSBU

[2015/01/01 15:57:57 | 000,000,000 | ---D | C] -- C:\windows\System32\drivers\NSBU\1601000.009

[2015/01/01 15:57:53 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security with Backup

[2015/01/01 15:57:53 | 000,000,000 | ---D | C] -- C:\Program Files\Norton Security with Backup

[2015/01/01 15:55:00 | 000,000,000 | ---D | C] -- C:\ProgramData\PCSettings

[2015/01/01 15:46:50 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Symantec

[2015/01/01 15:41:12 | 000,000,000 | ---D | C] -- C:\Program Files\NortonInstaller

[2015/01/01 15:11:05 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\LogMeIn Rescue Applet

[2015/01/01 14:17:50 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton

[2015/01/01 14:15:41 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\Macromedia

[2014/12/27 09:30:47 | 000,000,000 | ---D | C] -- C:\windows\System32\appraiser

[2014/12/27 09:14:51 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfpmp.exe

[2014/12/27 09:14:51 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mferror.dll

[2014/12/27 09:14:50 | 003,209,728 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mf.dll

[2014/12/27 09:14:50 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfps.dll

[2014/12/27 09:14:50 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rrinstaller.exe

[2014/12/26 16:25:21 | 001,160,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\aitstatic.exe

[2014/12/26 16:25:21 | 000,873,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\aeinv.dll

[2014/12/26 16:25:21 | 000,728,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\appraiser.dll

[2014/12/26 16:25:21 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\aepic.dll

[2014/12/26 16:25:20 | 000,610,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\invagent.dll

[2014/12/26 16:25:19 | 000,337,920 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\generaltel.dll

[2014/12/26 16:25:19 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\devinv.dll

[2014/12/26 16:25:18 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\aepdu.dll

[2014/12/26 16:25:06 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieetwcollector.exe

[2014/12/26 16:25:06 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\JavaScriptCollectionAgent.dll

[2014/12/26 16:25:06 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieetwproxystub.dll

[2014/12/26 16:25:05 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MsSpellCheckingFacility.exe

[2014/12/26 16:25:05 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jsproxy.dll

[2014/12/26 16:25:04 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jscript9diag.dll

[2014/12/26 16:25:04 | 000,418,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dxtmsft.dll

[2014/12/26 16:25:04 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieetwcollectorres.dll

[2014/12/26 16:25:02 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieui.dll

[2014/12/26 16:25:02 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dxtrans.dll

[2014/12/26 16:25:00 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtmlmedia.dll

[2014/12/26 16:25:00 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MshtmlDac.dll

[2014/12/26 16:24:57 | 004,299,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jscript9.dll

[2014/12/26 16:24:55 | 000,684,544 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ie4uinit.exe

[2014/12/26 16:24:55 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iernonce.dll

[2014/12/26 16:24:54 | 000,342,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iedkcs32.dll

[2014/12/26 16:24:53 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieapfltr.dll

[2014/12/26 16:24:53 | 000,688,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeeds.dll

[2014/12/26 16:24:52 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtml.tlb

[2014/12/26 16:24:51 | 002,052,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\inetcpl.cpl

[2014/12/26 16:24:51 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msrating.dll

[2014/12/26 16:24:50 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iesetup.dll

[2014/12/26 16:21:58 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tzres.dll

[2014/12/26 16:21:39 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\charmap.exe

[2014/12/26 16:21:31 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WSManMigrationPlugin.dll

[2014/12/26 16:21:31 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WsmWmiPl.dll

[2014/12/26 16:21:31 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WSManHTTPConfig.exe

[2014/12/26 16:21:31 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WsmAuto.dll

[2014/12/26 16:16:15 | 000,000,000 | -HSD | C] -- C:\Users\young\AppData\Local\EmieUserList

[2014/12/26 16:16:15 | 000,000,000 | -HSD | C] -- C:\Users\young\AppData\Local\EmieSiteList

[2014/12/26 16:16:15 | 000,000,000 | -HSD | C] -- C:\Users\young\AppData\Local\EmieBrowserModeList

[2014/11/23 16:16:35 | 000,000,000 | ---D | C] -- C:\Users\young\Desktop\Guest

[2014/11/23 15:45:20 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Work Training Aids

[2014/11/23 15:45:15 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Work Schedule

[2014/11/23 15:45:09 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Will

[2014/11/23 15:45:07 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Tax Spreadsheets

[2014/11/23 15:45:00 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Sunshine in Paris Novel

[2014/11/23 15:43:15 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\CD Labels

[2014/11/23 15:43:11 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Canon Utilities

[2014/11/23 15:43:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Business Plans

[2014/11/23 15:43:02 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\BookSmartData

[2014/11/23 15:42:45 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Boarmasters

[2014/11/23 15:26:13 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Social Services

[2014/11/23 15:26:12 | 000,000,000 | R--D | C] -- C:\Users\young\Documents\Scanned Documents

[2014/11/23 15:26:12 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Social Security

[2014/11/23 15:26:12 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Resume

[2014/11/23 15:26:12 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Receipies

[2014/11/23 15:26:11 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\NE Restaurant Rules

[2014/11/23 15:26:10 | 000,000,000 | R-SD | C] -- C:\Users\young\Documents\My Stationery

[2014/11/23 15:26:10 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\My Smilebox Creations

[2014/11/23 15:26:10 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\My Scans

[2014/11/23 15:26:07 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\My Logo Design Studio Pro Projects

[2014/11/23 15:26:07 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Monthly Budget

[2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Misc

[2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Juicers

[2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Jeep pmts

[2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\House Remodel Receipts

[2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Grandparents Rights

[2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Family History

[2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Court Documents

[2014/11/23 15:26:06 | 000,000,000 | ---D | C] -- C:\Users\young\Documents\Cougar

[2014/11/23 15:25:26 | 000,000,000 | ---D | C] -- C:\Users\young\Desktop\Adobe Reader 9 Installer

[2014/11/23 15:08:54 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\Apps

[2014/11/23 13:42:55 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\prevhost.exe

[2014/11/23 12:31:18 | 002,744,320 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpcorets.dll

[2014/11/23 12:20:46 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RdpGroupPolicyExtension.dll

[2014/11/23 11:33:45 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\rdpvideominiport.sys

[2014/11/23 11:33:41 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpudd.dll

[2014/11/23 11:33:40 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpendp_winip.dll

[2014/11/23 11:32:21 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TsUsbGDCoInstaller.dll

[2014/11/23 11:32:18 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TsUsbRedirectionGroupPolicyControl.exe

[2014/11/23 11:32:17 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\TsUsbFlt.sys

[2014/11/23 11:32:15 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tsgqec.dll

[2014/11/23 11:32:15 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MsRdpWebAccess.dll

[2014/11/23 11:32:15 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wksprtPS.dll

[2014/11/23 11:32:15 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TsUsbRedirectionGroupPolicyExtension.dll

[2014/11/23 11:32:14 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdvidcrl.dll

[2014/11/23 11:32:14 | 000,350,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wksprt.exe

[2014/11/23 11:03:37 | 002,285,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msmpeg2vdec.dll

[2014/11/22 10:53:46 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\fsutil.exe

[2014/11/22 10:53:31 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMPhoto.dll

[2014/11/22 10:53:26 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\DWrite.dll

[2014/11/22 10:53:18 | 001,987,584 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d10warp.dll

[2014/11/22 10:53:06 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\windows\explorer.exe

[2014/11/22 10:53:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDYAK.DLL

[2014/11/22 10:53:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDTAT.DLL

[2014/11/22 10:53:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDRU1.DLL

[2014/11/22 10:53:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDBASH.DLL

[2014/11/22 10:53:02 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDRU.DLL

[2014/11/22 10:52:58 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d2d1.dll

[2014/11/22 10:37:39 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\Adobe

[2014/11/19 21:13:45 | 000,000,000 | ---D | C] -- C:\windows\Migration

[2014/11/19 20:18:09 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WUDFPlatform.dll

[2014/11/19 20:18:08 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WUDFCoinstaller.dll

[2014/11/19 20:18:07 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WUDFx.dll

[2014/11/19 20:14:56 | 000,099,480 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\infocardapi.dll

[2014/11/19 20:14:51 | 000,008,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\icardres.dll

[2014/11/19 20:14:43 | 000,619,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\icardagt.exe

[2014/11/19 20:14:38 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TsWpfWrp.exe

[2014/11/19 19:49:09 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmploc.DLL

[2014/11/19 19:34:36 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\elshyph.dll

[2014/11/19 19:34:35 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jsIntl.dll

[2014/11/19 19:34:35 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieapfltr.dat

[2014/11/19 19:34:35 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\html.iec

[2014/11/19 19:34:35 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\url.dll

[2014/11/19 19:34:35 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msls31.dll

[2014/11/19 19:34:35 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iexpress.exe

[2014/11/19 19:34:35 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wextract.exe

[2014/11/19 19:34:35 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\inseng.dll

[2014/11/19 19:34:35 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RegisterIEPKEYs.exe

[2014/11/19 19:34:35 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\licmgr10.dll

[2014/11/19 19:34:34 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iepeers.dll

[2014/11/19 19:34:34 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\IEAdvpack.dll

[2014/11/19 19:34:34 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iesysprep.dll

[2014/11/19 19:34:34 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\SetIEInstalledDate.exe

[2014/11/19 19:34:34 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\pngfilt.dll

[2014/11/19 19:34:34 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtmler.dll

[2014/11/19 19:34:34 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeedsbs.dll

[2014/11/19 19:34:34 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\imgutil.dll

[2014/11/19 19:34:34 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeedssync.exe

[2014/11/19 19:33:07 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tdh.dll

[2014/11/19 19:33:07 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\csrsrv.dll

[2014/11/19 19:32:19 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\taskhost.exe

[2014/11/19 19:28:51 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XpsPrint.dll

[2014/11/19 19:28:51 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d10.dll

[2014/11/19 19:28:51 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d10level9.dll

[2014/11/19 19:28:51 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XpsGdiConverter.dll

[2014/11/19 19:28:51 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dxgi.dll

[2014/11/19 19:28:51 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d10_1core.dll

[2014/11/19 19:28:51 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d10core.dll

[2014/11/19 19:28:51 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WindowsCodecsExt.dll

[2014/11/19 19:28:51 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\UIAnimation.dll

[2014/11/19 19:28:51 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d10_1.dll

[2014/11/19 19:28:51 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll

[2014/11/19 19:28:51 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

[2014/11/19 19:28:51 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

[2014/11/19 19:28:51 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll

[2014/11/19 19:28:51 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll

[2014/11/19 19:28:51 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll

[2014/11/19 19:28:51 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-version-l1-1-0.dll

[2014/11/19 19:28:51 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll

[2014/11/19 19:28:51 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll

[2014/11/19 19:26:29 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d11.dll

[2014/11/19 19:15:25 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cryptdlg.dll

[2014/11/19 19:14:53 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\objsel.dll

[2014/11/19 19:14:52 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cngprovider.dll

[2014/11/19 19:14:52 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\adprovider.dll

[2014/11/19 19:14:52 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\capiprovider.dll

[2014/11/19 19:14:52 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dpapiprovider.dll

[2014/11/19 19:14:52 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dimsroam.dll

[2014/11/19 19:14:52 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wincredprovider.dll

[2014/11/19 19:14:35 | 000,046,592 | ---- | C] (Microsoft) -- C:\windows\System32\fpb.rs

[2014/11/19 19:14:35 | 000,045,568 | ---- | C] (Microsoft) -- C:\windows\System32\oflc-nz.rs

[2014/11/19 19:14:35 | 000,044,544 | ---- | C] (Microsoft) -- C:\windows\System32\pegibbfc.rs

[2014/11/19 19:14:35 | 000,043,520 | ---- | C] (Microsoft) -- C:\windows\System32\csrr.rs

[2014/11/19 19:14:35 | 000,040,960 | ---- | C] (Microsoft) -- C:\windows\System32\cob-au.rs

[2014/11/19 19:14:35 | 000,030,720 | ---- | C] (Microsoft) -- C:\windows\System32\usk.rs

[2014/11/19 19:14:35 | 000,021,504 | ---- | C] (Microsoft) -- C:\windows\System32\grb.rs

[2014/11/19 19:14:35 | 000,020,480 | ---- | C] (Microsoft) -- C:\windows\System32\pegi.rs

[2014/11/19 19:14:35 | 000,015,360 | ---- | C] (Microsoft) -- C:\windows\System32\djctq.rs

[2014/11/19 19:14:34 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\gameux.dll

[2014/11/19 19:14:34 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Wpc.dll

[2014/11/19 19:14:34 | 000,020,480 | ---- | C] (Microsoft) -- C:\windows\System32\pegi-pt.rs

[2014/11/19 19:14:33 | 000,055,296 | ---- | C] (Microsoft) -- C:\windows\System32\cero.rs

[2014/11/19 19:14:33 | 000,051,712 | ---- | C] (Microsoft) -- C:\windows\System32\esrb.rs

[2014/11/19 19:14:33 | 000,023,552 | ---- | C] (Microsoft) -- C:\windows\System32\oflc.rs

[2014/11/19 19:14:33 | 000,020,480 | ---- | C] (Microsoft) -- C:\windows\System32\pegi-fi.rs

[2014/11/19 19:13:26 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\certutil.exe

[2014/11/19 19:13:26 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\certenc.dll

[2014/11/19 19:13:01 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ncrypt.dll

[2014/11/19 19:12:31 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdrmemptylst.exe

[2014/11/19 19:12:30 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpcorekmts.dll

[2014/11/19 19:12:30 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpwsx.dll

[2014/11/19 19:11:53 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ncsi.dll

[2014/11/19 19:11:52 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netcorehc.dll

[2014/11/19 19:11:52 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netevent.dll

[2014/11/19 19:11:43 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpcore.dll

[2014/11/19 19:11:38 | 001,805,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\authui.dll

[2014/11/19 19:11:38 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msihnd.dll

[2014/11/19 19:11:38 | 000,101,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\consent.exe

[2014/11/19 19:10:17 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\srcore.dll

[2014/11/19 19:09:58 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\CPFilters.dll

[2014/11/19 19:09:57 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sbe.dll

[2014/11/19 19:09:57 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mpg2splt.ax

[2014/11/19 19:09:34 | 000,793,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TSWorkspace.dll

[2014/11/19 19:09:28 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\conhost.exe

[2014/11/19 19:09:28 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\winsrv.dll

[2014/11/19 19:09:28 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll

[2014/11/19 19:09:28 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-synch-l1-1-0.dll

[2014/11/19 19:09:28 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll

[2014/11/19 19:09:27 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-security-base-l1-1-0.dll

[2014/11/19 19:09:27 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-file-l1-1-0.dll

[2014/11/19 19:09:27 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-threadpool-l1-1-0.dll

[2014/11/19 19:09:27 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-processthreads-l1-1-0.dll

[2014/11/19 19:09:27 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-misc-l1-1-0.dll

[2014/11/19 19:09:27 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-localregistry-l1-1-0.dll

[2014/11/19 19:09:27 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-localization-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-xstate-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-memory-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-interlocked-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-heap-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-util-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-string-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-profile-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-io-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-handle-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-fibers-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-delayload-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-debug-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-datetime-l1-1-0.dll

[2014/11/19 19:09:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-console-l1-1-0.dll

[2014/11/19 19:09:24 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\webio.dll

[2014/11/19 19:09:14 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\FXSCOVER.exe

[2014/11/19 19:09:12 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\OxpsConverter.exe

[2014/11/19 19:09:08 | 000,434,688 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\scavengeui.dll

[2014/11/19 19:08:56 | 000,240,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\netio.sys

[2014/11/19 19:08:56 | 000,187,840 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\FWPKCLNT.SYS

[2014/11/19 19:08:49 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\quartz.dll

[2014/11/19 19:08:47 | 001,620,992 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMVDECOD.DLL

[2014/11/19 19:08:44 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\EncDec.dll

[2014/11/19 19:08:30 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dhcpcore6.dll

[2014/11/19 19:08:30 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dhcpcsvc6.dll

[2014/11/19 19:08:24 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mssrch.dll

[2014/11/19 19:08:23 | 001,549,312 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tquery.dll

[2014/11/19 19:08:23 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mssph.dll

[2014/11/19 19:08:22 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mssvp.dll

[2014/11/19 19:08:22 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mssphtb.dll

[2014/11/19 19:08:22 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msscntrs.dll

[2014/11/19 19:08:18 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msxml3r.dll

[2014/11/19 19:08:17 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cdosys.dll

[2014/11/19 19:08:11 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msxml6r.dll

[2014/11/19 19:08:10 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\IMJP10K.DLL

[2014/11/19 19:08:09 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\AUDIOKSE.dll

[2014/11/19 19:08:09 | 000,374,784 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\AudioEng.dll

[2014/11/19 19:08:09 | 000,275,968 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\EncDump.dll

[2014/11/19 19:08:09 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\AudioSes.dll

[2014/11/19 19:08:03 | 000,156,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mscorier.dll

[2014/11/19 19:08:02 | 000,081,560 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mscories.dll

[2014/11/19 19:08:00 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\odbcjt32.dll

[2014/11/19 19:08:00 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\odbctrac.dll

[2014/11/19 19:08:00 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\odbccp32.dll

[2014/11/19 19:08:00 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\odbccu32.dll

[2014/11/19 19:08:00 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\odbccr32.dll

[2014/11/19 19:07:57 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\System32\atmfd.dll

[2014/11/19 19:07:57 | 000,219,072 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\dxgmms1.sys

[2014/11/19 19:07:57 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cdd.dll

[2014/11/19 19:07:57 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\windows\System32\atmlib.dll

[2014/11/19 19:07:57 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dciman32.dll

[2014/11/19 19:07:56 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\fontsub.dll

[2014/11/19 19:07:55 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dnscacheugc.exe

[2014/11/19 19:07:53 | 000,149,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\storport.sys

[2014/11/19 19:07:53 | 000,027,072 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\Diskdump.sys

[2014/11/19 19:07:53 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iologmsg.dll

[2014/11/19 19:07:44 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\psisdecd.dll

[2014/11/19 19:07:44 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\psisrndr.ax

[2014/11/19 19:07:41 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\osk.exe

[2014/11/19 19:07:39 | 002,379,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\win32k.sys

[2014/11/19 19:07:35 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\SmartcardCredentialProvider.dll

[2014/11/19 19:07:03 | 000,656,896 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\nshwfp.dll

[2014/11/19 19:07:03 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\FWPUCLNT.DLL

[2014/11/19 19:07:01 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PresentationCFFRasterizerNative_v0300.dll

[2014/11/19 19:06:48 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wwanprotdim.dll

[2014/11/19 19:06:46 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\qdvd.dll

[2014/11/19 19:06:43 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\usb8023.sys

[2014/11/19 19:06:41 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dpnet.dll

[2014/11/19 19:06:39 | 000,133,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\ataport.sys

[2014/11/19 19:06:38 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\hidclass.sys

[2014/11/19 19:06:38 | 000,025,728 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\hidparse.sys

[2014/11/19 19:06:33 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\RNDISMP.sys

[2014/11/19 19:06:31 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\timedate.cpl

[2014/11/19 19:06:25 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\browcli.dll

[2014/11/19 19:06:23 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\portcls.sys

[2014/11/19 19:06:23 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\drmk.sys

[2014/11/19 19:06:21 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfc42.dll

[2014/11/19 19:06:20 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfc42u.dll

[2014/11/19 19:06:16 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wer.dll

[2014/11/19 19:06:15 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\packager.dll

[2014/11/19 19:06:14 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\qedit.dll

[2014/11/19 19:06:11 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cscript.exe

[2014/11/19 19:06:07 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\synceng.dll

[2014/11/19 19:00:46 | 000,681,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\adtschema.dll

[2014/11/19 19:00:45 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msaudite.dll

[2014/11/19 19:00:45 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sspisrv.dll

[2014/11/19 18:59:47 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate_isv.exe

[2014/11/19 18:59:47 | 000,572,416 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate.exe

[2014/11/19 18:59:47 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate_ssp.exe

[2014/11/19 18:59:47 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate_ssp_isv.exe

[2014/11/19 18:59:46 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc.dll

[2014/11/19 18:59:46 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc_isv.dll

[2014/11/19 18:59:46 | 000,390,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msdrm.dll

[2014/11/19 18:59:46 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc_ssp_isv.dll

[2014/11/19 18:59:46 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc_ssp.dll

[2014/11/19 18:50:24 | 000,047,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\WdfLdr.sys

[2014/11/19 18:50:24 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Wdfres.dll

[2014/11/19 18:41:36 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\usbport.sys

[2014/11/19 18:41:35 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\usbd.sys

[2014/11/19 18:28:41 | 002,425,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wucltux.dll

[2014/11/19 18:28:41 | 000,045,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wups2.dll

[2014/11/19 18:28:21 | 000,581,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wuapi.dll

[2014/11/19 18:28:21 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wudriver.dll

[2014/11/19 18:28:21 | 000,036,320 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wups.dll

[2014/11/19 18:28:12 | 000,179,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wuwebv.dll

[2014/11/19 18:28:11 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wuapp.exe

[2014/11/19 17:45:26 | 000,000,000 | ---D | C] -- C:\windows\System32\SPReview

[2014/11/19 17:45:10 | 000,000,000 | ---D | C] -- C:\windows\System32\EventProviders

[2014/11/19 10:01:23 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfc40.dll

[2014/11/19 10:01:23 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfc40u.dll

[2014/11/19 10:01:18 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spwizui.dll

[2014/11/19 10:01:16 | 000,520,064 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mcupdate_GenuineIntel.dll

[2014/11/19 10:01:15 | 001,334,272 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\CertEnroll.dll

[2014/11/19 10:01:14 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PresentationHost.exe

[2014/11/19 10:01:14 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PresentationHostProxy.dll

[2014/11/19 10:01:12 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\AuthFWSnapin.dll

[2014/11/19 10:01:12 | 001,115,136 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RacEngn.dll

[2014/11/19 10:01:10 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ExplorerFrame.dll

[2014/11/19 10:01:09 | 001,828,352 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d9.dll

[2014/11/19 10:01:08 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\taskschd.dll

[2014/11/19 10:01:07 | 000,456,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spinstall.exe

[2014/11/19 10:01:07 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spreview.exe

[2014/11/19 10:01:05 | 001,371,136 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dwmcore.dll

[2014/11/19 10:01:05 | 000,863,744 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\diagperf.dll

[2014/11/19 10:01:04 | 003,367,424 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WinSAT.exe

[2014/11/19 10:01:03 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tsmf.dll

[2014/11/19 10:01:02 | 002,522,624 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dbgeng.dll

[2014/11/19 10:01:00 | 000,252,928 | ---- | C] (Microsoft) -- C:\windows\System32\DShowRdpFilter.dll

[2014/11/19 10:00:59 | 002,151,936 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mmcndmgr.dll

[2014/11/19 10:00:59 | 000,974,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sppobjs.dll

[2014/11/19 10:00:59 | 000,732,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\imapi2fs.dll

[2014/11/19 10:00:59 | 000,049,488 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netfxperf.dll

[2014/11/19 10:00:58 | 001,555,456 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\certmgr.dll

[2014/11/19 10:00:58 | 000,547,840 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PortableDeviceApi.dll

[2014/11/19 10:00:58 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mcbuilder.exe

[2014/11/19 10:00:57 | 001,712,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xpsservices.dll

[2014/11/19 10:00:57 | 000,508,904 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\winload.exe

[2014/11/19 10:00:57 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sppwinob.dll

[2014/11/19 10:00:57 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drvstore.dll

[2014/11/19 10:00:56 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cmd.exe

[2014/11/19 10:00:56 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfds.dll

[2014/11/19 10:00:56 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\framedynos.dll

[2014/11/19 10:00:55 | 000,442,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\winresume.exe

[2014/11/19 10:00:55 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmicmiplugin.dll

[2014/11/19 10:00:54 | 001,063,936 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\werconcpl.dll

[2014/11/19 10:00:54 | 000,762,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\azroles.dll

[2014/11/19 10:00:53 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfreadwrite.dll

[2014/11/19 10:00:53 | 000,144,768 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\basecsp.dll

[2014/11/19 10:00:52 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\NaturalLanguage6.dll

[2014/11/19 10:00:52 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sqlsrv32.dll

[2014/11/19 10:00:52 | 000,776,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\calc.exe

[2014/11/19 10:00:52 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\evr.dll

[2014/11/19 10:00:52 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WinSATAPI.dll

[2014/11/19 10:00:52 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\taskcomp.dll

[2014/11/19 10:00:51 | 002,983,424 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\UIRibbon.dll

[2014/11/19 10:00:51 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\lpksetup.exe

[2014/11/19 10:00:51 | 000,271,664 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\fveapi.dll

[2014/11/19 10:00:51 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vpnike.dll

[2014/11/19 10:00:50 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\hgprint.dll

[2014/11/19 10:00:49 | 000,458,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WSDApi.dll

[2014/11/19 10:00:49 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmpeffects.dll

[2014/11/19 10:00:49 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\net1.exe

[2014/11/19 10:00:49 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rpchttp.dll

[2014/11/19 10:00:49 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\prncache.dll

[2014/11/19 10:00:48 | 000,690,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ci.dll

[2014/11/19 10:00:48 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\scansetting.dll

[2014/11/19 10:00:48 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\aitagent.exe

[2014/11/19 10:00:47 | 002,504,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMVCORE.DLL

[2014/11/19 10:00:47 | 001,750,528 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\pnidui.dll

[2014/11/19 10:00:47 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wlangpui.dll

[2014/11/19 10:00:47 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MMDevAPI.dll

[2014/11/19 10:00:47 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\QSHVHOST.DLL

[2014/11/19 10:00:47 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\t2embed.dll

[2014/11/19 10:00:46 | 002,146,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\SyncCenter.dll

[2014/11/19 10:00:46 | 000,907,776 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sdengin2.dll

[2014/11/19 10:00:46 | 000,782,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\webservices.dll

[2014/11/19 10:00:46 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netdiagfx.dll

[2014/11/19 10:00:46 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\fde.dll

[2014/11/19 10:00:46 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wscapi.dll

[2014/11/19 10:00:45 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MSMPEG2ENC.DLL

[2014/11/19 10:00:45 | 000,802,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WFS.exe

[2014/11/19 10:00:45 | 000,727,040 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mcmde.dll

[2014/11/19 10:00:44 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\DXPTaskRingtone.dll

[2014/11/19 10:00:44 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\imapi2.dll

[2014/11/19 10:00:44 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\setupcl.exe

[2014/11/19 10:00:43 | 001,624,064 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMPEncEn.dll

[2014/11/19 10:00:43 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dwmredir.dll

[2014/11/19 10:00:42 | 002,217,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\bootres.dll

[2014/11/19 10:00:42 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Narrator.exe

[2014/11/19 10:00:42 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\autoconv.exe

[2014/11/19 10:00:42 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\autofmt.exe

[2014/11/19 10:00:42 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vaultsvc.dll

[2014/11/19 10:00:42 | 000,194,432 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\halmacpi.dll

[2014/11/19 10:00:42 | 000,194,432 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\hal.dll

[2014/11/19 10:00:42 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netiohlp.dll

[2014/11/19 10:00:42 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\audiodg.exe

[2014/11/19 10:00:42 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\hbaapi.dll

[2014/11/19 10:00:42 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\proquota.exe

[2014/11/19 10:00:41 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\powercpl.dll

[2014/11/19 10:00:41 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ipsmsnap.dll

[2014/11/19 10:00:41 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msinfo32.exe

[2014/11/19 10:00:41 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\srchadmin.dll

[2014/11/19 10:00:41 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\eapphost.dll

[2014/11/19 10:00:41 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\framedyn.dll

[2014/11/19 10:00:41 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tcpipcfg.dll

[2014/11/19 10:00:41 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\schtasks.exe

[2014/11/19 10:00:41 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mimefilt.dll

[2014/11/19 10:00:40 | 000,665,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\AuxiliaryDisplayCpl.dll

[2014/11/19 10:00:40 | 000,399,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\DXP.dll

[2014/11/19 10:00:40 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MSNP.ax

[2014/11/19 10:00:40 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\QAGENT.DLL

[2014/11/19 10:00:40 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netid.dll

[2014/11/19 10:00:39 | 001,227,776 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wdc.dll

[2014/11/19 10:00:38 | 001,326,592 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wlanpref.dll

[2014/11/19 10:00:38 | 001,131,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sdclt.exe

[2014/11/19 10:00:38 | 001,003,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMNetMgr.dll

[2014/11/19 10:00:38 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Vault.dll

[2014/11/19 10:00:38 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\untfs.dll

[2014/11/19 10:00:38 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\nci.dll

[2014/11/19 10:00:37 | 001,400,320 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\DxpTaskSync.dll

[2014/11/19 10:00:37 | 001,040,384 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Display.dll

[2014/11/19 10:00:37 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msdri.dll

[2014/11/19 10:00:37 | 000,316,416 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sharemediacpl.dll

[2014/11/19 10:00:37 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XpsRasterService.dll

[2014/11/19 10:00:37 | 000,098,816 | ---- | C] (Microsoft) -- C:\windows\System32\Robocopy.exe

[2014/11/19 10:00:37 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\userinit.exe

[2014/11/19 10:00:36 | 001,188,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\DiagCpl.dll

[2014/11/19 10:00:36 | 001,066,496 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msdtctm.dll

[2014/11/19 10:00:36 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\biocpl.dll

[2014/11/19 10:00:36 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wiadefui.dll

[2014/11/19 10:00:36 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\termmgr.dll

[2014/11/19 10:00:36 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\puiobj.dll

[2014/11/19 10:00:36 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\eudcedit.exe

[2014/11/19 10:00:36 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sppcomapi.dll

[2014/11/19 10:00:36 | 000,140,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\scsiport.sys

[2014/11/19 10:00:36 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\logoncli.dll

[2014/11/19 10:00:36 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\shsetup.dll

[2014/11/19 10:00:35 | 002,202,624 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\SensorsCpl.dll

[2014/11/19 10:00:35 | 002,157,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\themecpl.dll

[2014/11/19 10:00:35 | 000,856,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\FirewallControlPanel.dll

[2014/11/19 10:00:35 | 000,766,464 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wpccpl.dll

[2014/11/19 10:00:35 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msconfig.exe

[2014/11/19 10:00:35 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dnscmmc.dll

[2014/11/19 10:00:34 | 000,481,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mscms.dll

[2014/11/19 10:00:34 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\localsec.dll

[2014/11/19 10:00:34 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PhotoScreensaver.scr

[2014/11/19 10:00:34 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\hgcpl.dll

[2014/11/19 10:00:34 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mprddm.dll

[2014/11/19 10:00:33 | 001,644,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netcenter.dll

[2014/11/19 10:00:33 | 000,941,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mblctr.exe

[2014/11/19 10:00:33 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\VAN.dll

[2014/11/19 10:00:33 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PerfCenterCPL.dll

[2014/11/19 10:00:33 | 000,600,064 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\usercpl.dll

[2014/11/19 10:00:33 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wlanui.dll

[2014/11/19 10:00:33 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\SndVol.exe

[2014/11/19 10:00:33 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\SndVolSSO.dll

[2014/11/19 10:00:33 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\bcdsrv.dll

[2014/11/19 10:00:33 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\prntvpt.dll

[2014/11/19 10:00:33 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iasacct.dll

[2014/11/19 10:00:33 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\w32tm.exe

[2014/11/19 10:00:32 | 003,727,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\accessibilitycpl.dll

[2014/11/19 10:00:32 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\main.cpl

[2014/11/19 10:00:32 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spwizeng.dll

[2014/11/19 10:00:32 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\azroleui.dll

[2014/11/19 10:00:32 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MSAC3ENC.DLL

[2014/11/19 10:00:32 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\ks.sys

[2014/11/19 10:00:32 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netjoin.dll

[2014/11/19 10:00:32 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\fdeploy.dll

[2014/11/19 10:00:31 | 002,130,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\networkmap.dll

[2014/11/19 10:00:31 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sud.dll

[2014/11/19 10:00:31 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ActionCenter.dll

[2014/11/19 10:00:31 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mspbda.dll

[2014/11/19 10:00:31 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\prnfldr.dll

[2014/11/19 10:00:31 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\slui.exe

[2014/11/19 10:00:31 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Faultrep.dll

[2014/11/19 10:00:31 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wusa.exe

[2014/11/19 10:00:31 | 000,312,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MCEWMDRMNDBootstrap.dll

[2014/11/19 10:00:31 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MediaMetadataHandler.dll

[2014/11/19 10:00:31 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\taskbarcpl.dll

[2014/11/19 10:00:31 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\OnLineIDCpl.dll

[2014/11/19 10:00:31 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\adsldp.dll

[2014/11/19 10:00:30 | 000,750,080 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sdcpl.dll

[2014/11/19 10:00:30 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\bthprops.cpl

[2014/11/19 10:00:30 | 000,577,024 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wpd_ci.dll

[2014/11/19 10:00:30 | 000,537,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ActionCenterCPL.dll

[2014/11/19 10:00:30 | 000,428,544 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\shwebsvc.dll

[2014/11/19 10:00:30 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sysmon.ocx

[2014/11/19 10:00:30 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\intl.cpl

[2014/11/19 10:00:30 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iprtrmgr.dll

[2014/11/19 10:00:30 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\defaultlocationcpl.dll

[2014/11/19 10:00:30 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\efscore.dll

[2014/11/19 10:00:30 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iasrad.dll

[2014/11/19 10:00:30 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ifsutil.dll

[2014/11/19 10:00:30 | 000,137,088 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\halacpi.dll

[2014/11/19 10:00:30 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\recovery.dll

[2014/11/19 10:00:30 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dot3cfg.dll

[2014/11/19 10:00:30 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ftp.exe

[2014/11/19 10:00:30 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sisbkup.dll

[2014/11/19 10:00:29 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\OobeFldr.dll

[2014/11/19 10:00:29 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmpmde.dll

[2014/11/19 10:00:29 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TabletPC.cpl

[2014/11/19 10:00:29 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\DeviceCenter.dll

[2014/11/19 10:00:29 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\systemcpl.dll

[2014/11/19 10:00:29 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ntprint.dll

[2014/11/19 10:00:29 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\bcdedit.exe

[2014/11/19 10:00:29 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\recdisc.exe

[2014/11/19 10:00:29 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vdsutil.dll

[2014/11/19 10:00:29 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\bcdboot.exe

[2014/11/19 10:00:29 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\autoplay.dll

[2014/11/19 10:00:29 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sppnp.dll

[2014/11/19 10:00:29 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WSTPager.ax

[2014/11/19 10:00:28 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\blackbox.dll

[2014/11/19 10:00:28 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\nshipsec.dll

[2014/11/19 10:00:28 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sethc.exe

[2014/11/19 10:00:28 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rstrui.exe

[2014/11/19 10:00:28 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dpx.dll

[2014/11/19 10:00:28 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ksproxy.ax

[2014/11/19 10:00:28 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmpsrcwp.dll

[2014/11/19 10:00:28 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\AuxiliaryDisplayServices.dll

[2014/11/19 10:00:28 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\NAPHLPR.DLL

[2014/11/19 10:00:28 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\migisol.dll

[2014/11/19 10:00:28 | 000,093,696 | ---- | C] (Windows ® Codename Longhorn DDK provider) -- C:\windows\System32\fms.dll

[2014/11/19 10:00:28 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\asycfilt.dll

[2014/11/19 10:00:27 | 000,592,384 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msftedit.dll

[2014/11/19 10:00:27 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dfrgui.exe

[2014/11/19 10:00:27 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wlanmsm.dll

[2014/11/19 10:00:27 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dot3ui.dll

[2014/11/19 10:00:27 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wsqmcons.exe

[2014/11/19 10:00:27 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ReAgent.dll

[2014/11/19 10:00:27 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wavemsp.dll

[2014/11/19 10:00:27 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sysclass.dll

[2014/11/19 10:00:27 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ocsetup.exe

[2014/11/19 10:00:27 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\isoburn.exe

[2014/11/19 10:00:27 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tzutil.exe

[2014/11/19 10:00:26 | 000,697,344 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\SmiEngine.dll

[2014/11/19 10:00:26 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wvc.dll

[2014/11/19 10:00:26 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wimgapi.dll

[2014/11/19 10:00:26 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PkgMgr.exe

[2014/11/19 10:00:26 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\qasf.dll

[2014/11/19 10:00:26 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\qcap.dll

[2014/11/19 10:00:26 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\uxlib.dll

[2014/11/19 10:00:26 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\setupugc.exe

[2014/11/19 10:00:26 | 000,051,200 | ---- | C] (Twain Working Group) -- C:\windows\twain_32.dll

[2014/11/19 10:00:26 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\slwga.dll

[2014/11/19 10:00:25 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmdrmsdk.dll

[2014/11/19 10:00:25 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msscp.dll

[2014/11/19 10:00:25 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ssText3d.scr

[2014/11/19 10:00:25 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\diskraid.exe

[2014/11/19 10:00:25 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\srrstr.dll

[2014/11/19 10:00:25 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\DevicePairingFolder.dll

[2014/11/19 10:00:25 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wwanconn.dll

[2014/11/19 10:00:25 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\nslookup.exe

[2014/11/19 10:00:25 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mciavi32.dll

[2014/11/19 10:00:24 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\onexui.dll

[2014/11/19 10:00:24 | 000,402,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drmmgrtn.dll

[2014/11/19 10:00:24 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wimserv.exe

[2014/11/19 10:00:24 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\nltest.exe

[2014/11/19 10:00:24 | 000,292,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WindowsAnytimeUpgradeResults.exe

[2014/11/19 10:00:24 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iTVData.dll

[2014/11/19 10:00:24 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\input.dll

[2014/11/19 10:00:24 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wpdwcn.dll

[2014/11/19 10:00:24 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpencom.dll

[2014/11/19 10:00:24 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ocsetapi.dll

[2014/11/19 10:00:24 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vdsbas.dll

[2014/11/19 10:00:24 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\perfmon.exe

[2014/11/19 10:00:24 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\UserAccountControlSettings.dll

[2014/11/19 10:00:24 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\NAPCRYPT.DLL

[2014/11/19 10:00:24 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\acppage.dll

[2014/11/19 10:00:24 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vpnikeapi.dll

[2014/11/19 10:00:23 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\eapp3hst.dll

[2014/11/19 10:00:23 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dxdiagn.dll

[2014/11/19 10:00:23 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MFPlay.dll

[2014/11/19 10:00:23 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\rmcast.sys

[2014/11/19 10:00:23 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\logagent.exe

[2014/11/19 10:00:23 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\windows\bfsvc.exe

[2014/11/19 10:00:23 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\runonce.exe

[2014/11/19 10:00:22 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\OpcServices.dll

[2014/11/19 10:00:22 | 000,878,592 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Bubbles.scr

[2014/11/19 10:00:22 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmdrmdev.dll

[2014/11/19 10:00:22 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sqlcese30.dll

[2014/11/19 10:00:22 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\bitsadmin.exe

[2014/11/19 10:00:22 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\shacct.dll

[2014/11/19 10:00:22 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tabcal.exe

[2014/11/19 10:00:22 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PnPUnattend.exe

[2014/11/19 10:00:22 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\unimdmat.dll

[2014/11/19 10:00:22 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpd3d.dll

[2014/11/19 10:00:22 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iscsium.dll

[2014/11/19 10:00:22 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\lsmproxy.dll

[2014/11/19 10:00:21 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMADMOD.DLL

[2014/11/19 10:00:21 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PortableDeviceStatus.dll

[2014/11/19 10:00:21 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WPDSp.dll

[2014/11/19 10:00:21 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Mystify.scr

[2014/11/19 10:00:21 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Ribbons.scr

[2014/11/19 10:00:21 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PortableDeviceSyncProvider.dll

[2014/11/19 10:00:21 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ActionQueue.dll

[2014/11/19 10:00:21 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\powercfg.cpl

[2014/11/19 10:00:21 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MdSched.exe

[2014/11/19 10:00:21 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\QSVRMGMT.DLL

[2014/11/19 10:00:21 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\kstvtune.ax

[2014/11/19 10:00:21 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\logman.exe

[2014/11/19 10:00:21 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\olethk32.dll

[2014/11/19 10:00:21 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mapistub.dll

[2014/11/19 10:00:21 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mapi32.dll

[2014/11/19 10:00:21 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Mpeg2Data.ax

[2014/11/19 10:00:21 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\lpremove.exe

[2014/11/19 10:00:21 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ncryptui.dll

[2014/11/19 10:00:21 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\djoin.exe

[2014/11/19 10:00:21 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\utildll.dll

[2014/11/19 10:00:20 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMVSDECD.DLL

[2014/11/19 10:00:20 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmdrmnet.dll

[2014/11/19 10:00:20 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\qdv.dll

[2014/11/19 10:00:20 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msnetobj.dll

[2014/11/19 10:00:20 | 000,257,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WindowsAnytimeUpgrade.exe

[2014/11/19 10:00:20 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\unattend.dll

[2014/11/19 10:00:20 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sqmapi.dll

[2014/11/19 10:00:20 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RelPost.exe

[2014/11/19 10:00:20 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\VBICodec.ax

[2014/11/19 10:00:20 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\EhStorAPI.dll

[2014/11/19 10:00:20 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dot3msm.dll

[2014/11/19 10:00:20 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wiavideo.dll

[2014/11/19 10:00:20 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Kswdmcap.ax

[2014/11/19 10:00:20 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sppinst.dll

[2014/11/19 10:00:20 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\fphc.dll

[2014/11/19 10:00:20 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cmstp.exe

[2014/11/19 10:00:20 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\QCLIPROV.DLL

[2014/11/19 10:00:20 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cca.dll

[2014/11/19 10:00:20 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\takeown.exe

[2014/11/19 10:00:19 | 000,739,328 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WMSPDMOD.DLL

[2014/11/19 10:00:19 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msorcl32.dll

[2014/11/19 10:00:19 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iscsicli.exe

[2014/11/19 10:00:19 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\desk.cpl

[2014/11/19 10:00:19 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iasrecst.dll

[2014/11/19 10:00:19 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\setupcln.dll

[2014/11/19 10:00:19 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MuiUnattend.exe

[2014/11/19 10:00:19 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vfwwdm32.dll

[2014/11/19 10:00:19 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wsnmp32.dll

[2014/11/19 10:00:19 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\umb.dll

[2014/11/19 10:00:19 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WavDest.dll

[2014/11/19 10:00:19 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\pdhui.dll

[2014/11/19 10:00:19 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\basesrv.dll

[2014/11/19 10:00:19 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\relog.exe

[2014/11/19 10:00:19 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PrintIsolationProxy.dll

[2014/11/19 10:00:19 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\AzSqlExt.dll

[2014/11/19 10:00:19 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netiougc.exe

[2014/11/19 10:00:18 | 001,027,584 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\IMJP10.IME

[2014/11/19 10:00:18 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\FXSTIFF.dll

[2014/11/19 10:00:18 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\itircl.dll

[2014/11/19 10:00:18 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmpps.dll

[2014/11/19 10:00:18 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\diskpart.exe

[2014/11/19 10:00:18 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\amstream.dll

[2014/11/19 10:00:18 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\CertPolEng.dll

[2014/11/19 10:00:18 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spbcd.dll

[2014/11/19 10:00:18 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MultiDigiMon.exe

[2014/11/19 10:00:18 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\setbcdlocale.dll

[2014/11/19 10:00:18 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ksxbar.ax

[2014/11/19 10:00:18 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wkscli.dll

[2014/11/19 10:00:18 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WerFaultSecure.exe

[2014/11/19 10:00:18 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netbtugc.exe

[2014/11/19 10:00:18 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\syssetup.dll

[2014/11/19 10:00:18 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\nrpsrv.dll

[2014/11/19 10:00:17 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sppc.dll

[2014/11/19 10:00:17 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\eappgnui.dll

[2014/11/19 10:00:17 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\windows\System32\iccvid.dll

[2014/11/19 10:00:17 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tlscsp.dll

[2014/11/19 10:00:17 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\findstr.exe

[2014/11/19 10:00:17 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MSDvbNP.ax

[2014/11/19 10:00:17 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\luainstall.dll

[2014/11/19 10:00:17 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mciqtz32.dll

[2014/11/19 10:00:17 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wiarpc.dll

[2014/11/19 10:00:17 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wdiasqmmodule.dll

[2014/11/19 10:00:17 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\usbrpm.sys

[2014/11/19 10:00:17 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\HotStartUserAgent.dll

[2014/11/19 10:00:17 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ReAgentc.exe

[2014/11/19 10:00:17 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\tdi.sys

[2014/11/19 10:00:17 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spopk.dll

[2014/11/19 10:00:17 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\muifontsetup.dll

[2014/11/19 10:00:16 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\UIRibbonRes.dll

[2014/11/19 10:00:16 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\manage-bde.exe

[2014/11/19 10:00:16 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\repair-bde.exe

[2014/11/19 10:00:16 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\inetmib1.dll

[2014/11/19 10:00:16 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\g711codc.ax

[2014/11/19 10:00:16 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\odbcconf.dll

[2014/11/19 10:00:16 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\unlodctr.exe

[2014/11/19 10:00:16 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vbisurf.ax

[2014/11/19 10:00:16 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msdmo.dll

[2014/11/19 10:00:16 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\profprov.dll

[2014/11/19 10:00:16 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netcfg.exe

[2014/11/19 10:00:16 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdprefdrvapi.dll

[2014/11/19 10:00:15 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RDPENCDD.dll

[2014/11/19 10:00:15 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\napdsnap.dll

[2014/11/19 10:00:15 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\FXSMON.dll

[2014/11/19 10:00:15 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\elsTrans.dll

[2014/11/19 10:00:15 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TRAPI.dll

[2014/11/19 10:00:15 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\bitsperf.dll

[2014/11/19 10:00:15 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\schedcli.dll

[2014/11/19 10:00:15 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\perfts.dll

[2014/11/19 10:00:14 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\imkr80.ime

[2014/11/19 10:00:14 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dsauth.dll

[2014/11/19 10:00:14 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wsdchngr.dll

[2014/11/19 10:00:14 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sscore.dll

[2014/11/19 10:00:14 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\riched32.dll

[2014/11/19 10:00:13 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wshirda.dll

[2014/11/19 10:00:13 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpcfgex.dll

[2014/11/19 10:00:12 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\USBCAMD2.sys

[2014/11/19 10:00:12 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\USBCAMD.sys

[2014/11/19 10:00:11 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RDPREFDD.dll

[2014/11/19 10:00:11 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\C_ISCII.DLL

[2014/11/19 10:00:11 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\shunimpl.dll

[2014/11/19 10:00:11 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spwmp.dll

[2014/11/19 10:00:11 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msdxm.ocx

[2014/11/19 10:00:11 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dxmasf.dll

[2014/11/19 10:00:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDUS.DLL

[2014/11/19 10:00:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDINTEL.DLL

[2014/11/19 10:00:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDINKAN.DLL

[2014/11/19 10:00:09 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\nlsbres.dll

[2014/11/19 10:00:09 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\BlbEvents.dll

[2014/11/19 10:00:09 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\pifmgr.dll

[2014/11/19 10:00:09 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spwizres.dll

[2014/11/19 10:00:09 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDSG.DLL

[2014/11/19 10:00:09 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\kbdlk41a.dll

[2014/11/19 10:00:09 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDCZ1.DLL

[2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDTUQ.DLL

[2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDTUF.DLL

[2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDSF.DLL

[2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDPO.DLL

[2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDNEPR.DLL

[2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDINBEN.DLL

[2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDGR1.DLL

[2014/11/19 10:00:09 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDGKL.DLL

[2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDUGHR1.DLL

[2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDTURME.DLL

[2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDTAJIK.DLL

[2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDMON.DLL

[2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDMAORI.DLL

[2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDLT1.DLL

[2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDINTAM.DLL

[2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDINORI.DLL

[2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDINMAR.DLL

[2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDINHIN.DLL

[2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDBULG.DLL

[2014/11/19 10:00:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDBLR.DLL

[2014/11/19 10:00:09 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\KBDGEO.DLL

[2014/11/19 10:00:09 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dpnaddr.dll

[2014/11/19 10:00:03 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wdscore.dll

[2014/11/19 09:59:48 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wbemcomn.dll

[2014/11/18 14:56:48 | 001,202,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\FM20.DLL

[2014/11/18 08:33:41 | 000,000,000 | --SD | C] -- C:\windows\System32\CompatTel

[2014/11/18 08:33:35 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\TOSHIBA_Corporation

[2014/11/18 08:15:18 | 000,000,000 | ---D | C] -- C:\windows\System32\MRT

[2014/11/17 20:17:57 | 000,229,000 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MpSigStub.exe

[2014/11/17 20:14:18 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\poqexec.exe

[2014/11/17 19:59:17 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\Toshiba

[2014/11/17 19:59:10 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\ATI

[2014/11/17 19:59:10 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\ATI

[2014/11/17 19:58:19 | 000,000,000 | R--D | C] -- C:\Users\young\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

[2014/11/17 19:58:19 | 000,000,000 | R--D | C] -- C:\Users\young\Searches

[2014/11/17 19:58:19 | 000,000,000 | R--D | C] -- C:\Users\young\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

[2014/11/17 19:58:19 | 000,000,000 | -H-D | C] -- C:\Users\young\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned

[2014/11/17 19:58:10 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\Identities

[2014/11/17 19:58:08 | 000,000,000 | R--D | C] -- C:\Users\young\Contacts

[2014/11/17 19:57:03 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\WinBatch

[2014/11/17 19:56:19 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\VirtualStore

[2014/11/17 19:56:17 | 000,000,000 | --SD | C] -- C:\Users\young\AppData\Roaming\Microsoft

[2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Videos

[2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Saved Games

[2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Pictures

[2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Music

[2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

[2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Links

[2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Favorites

[2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Downloads

[2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Documents

[2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\Desktop

[2014/11/17 19:56:17 | 000,000,000 | R--D | C] -- C:\Users\young\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\AppData\Local\Temporary Internet Files

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Templates

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Start Menu

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\SendTo

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Recent

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\PrintHood

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\NetHood

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Documents\My Videos

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Documents\My Pictures

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Documents\My Music

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\My Documents

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Local Settings

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\AppData\Local\History

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Cookies

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\Application Data

[2014/11/17 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\young\AppData\Local\Application Data

[2014/11/17 19:56:17 | 000,000,000 | -H-D | C] -- C:\Users\young\AppData

[2014/11/17 19:56:17 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\Temp

[2014/11/17 19:56:17 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Local\Microsoft

[2014/11/17 19:56:17 | 000,000,000 | ---D | C] -- C:\Users\young\AppData\Roaming\Media Center Programs

[2014/11/17 19:55:06 | 000,000,000 | -HSD | C] -- C:\System Volume Information

[2014/11/17 19:39:57 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Toshiba Shared

[2014/11/17 19:39:50 | 000,275,536 | ---- | C] (TOSHIBA Corporation) -- C:\windows\System32\drivers\tos_sps32.sys

[2014/11/17 19:39:49 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DX9_41.dll

[2014/11/17 19:39:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA DVD PLAYER

[2014/11/17 19:33:17 | 000,024,576 | ---- | C] (Toshiba) -- C:\windows\System32\TSCI.dll

[2014/11/17 19:33:17 | 000,024,576 | ---- | C] (Toshiba) -- C:\windows\System32\THCI.dll

[2014/11/17 19:32:31 | 000,024,576 | ---- | C] (COMPAL ELECTRONIC INC.) -- C:\windows\System32\TSBWLS.dll

[2014/11/17 19:31:52 | 000,000,000 | ---D | C] -- C:\windows\System32\Microsoft.VC80.MFC

[2014/11/17 19:31:51 | 000,000,000 | ---D | C] -- C:\ProgramData\XP

[2014/11/17 19:31:51 | 000,000,000 | ---D | C] -- C:\ProgramData\win7_64

[2014/11/17 19:31:51 | 000,000,000 | ---D | C] -- C:\ProgramData\win7_32

[2014/11/17 19:31:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Vista64

[2014/11/17 19:31:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Vista32

[2014/11/17 19:30:24 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics

[2014/11/17 19:28:31 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek WLAN Driver

[2014/11/17 19:26:56 | 007,360,512 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\System32\RTSUSTORicon.dll

[2014/11/17 19:26:19 | 000,000,000 | ---D | C] -- C:\windows\System32\RTCOM

[2014/11/17 19:26:02 | 001,784,352 | ---- | C] (Waves Audio Ltd.) -- C:\windows\System32\WavesLib.dll

[2014/11/17 19:26:02 | 000,339,968 | ---- | C] (SRS Labs, Inc.) -- C:\windows\System32\SRSTSXT.dll

[2014/11/17 19:26:02 | 000,185,776 | ---- | C] (SRS Labs, Inc.) -- C:\windows\System32\SRSTSHD.dll

[2014/11/17 19:26:02 | 000,167,936 | ---- | C] (SRS Labs, Inc.) -- C:\windows\System32\SRSHP360.dll

[2014/11/17 19:26:02 | 000,135,168 | ---- | C] (SRS Labs, Inc.) -- C:\windows\System32\SRSWOW.dll

[2014/11/17 19:26:01 | 002,898,464 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\System32\RtkAPO.dll

[2014/11/17 19:26:01 | 001,933,312 | ---- | C] (Waves Audio Ltd.) -- C:\windows\System32\MaxxAudioEQ.dll

[2014/11/17 19:26:01 | 001,227,296 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\System32\RtkPgExt.dll

[2014/11/17 19:26:01 | 000,551,456 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\System32\RTSndMgr.cpl

[2014/11/17 19:26:01 | 000,326,176 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\System32\RtkApoApi.dll

[2014/11/17 19:26:01 | 000,290,304 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\System32\RP3DHT32.dll

[2014/11/17 19:26:01 | 000,290,304 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\System32\RP3DAA32.dll

[2014/11/17 19:26:01 | 000,159,744 | ---- | C] (Waves Audio Ltd.) -- C:\windows\System32\MaxxAudioAPO20.dll

[2014/11/17 19:26:01 | 000,126,976 | ---- | C] (Waves Audio Ltd.) -- C:\windows\System32\MaxxAudioAPO.dll

[2014/11/17 19:26:01 | 000,052,256 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\System32\RtkCoInst.dll

[2014/11/17 19:26:00 | 000,831,488 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\RtlExUpd.dll

[2014/11/17 19:26:00 | 000,266,240 | ---- | C] (Fortemedia Corporation) -- C:\windows\System32\FMAPO.dll

[2014/11/17 19:26:00 | 000,142,848 | ---- | C] (Andrea Electronics Corporation) -- C:\windows\System32\AERTACap.dll

[2014/11/17 19:26:00 | 000,125,952 | ---- | C] (Andrea Electronics Corporation) -- C:\windows\System32\AERTARen.dll

[2014/11/17 19:26:00 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp

[2014/11/17 19:26:00 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek

[2014/11/17 19:25:16 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI

[2014/11/17 19:23:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center

[2014/11/17 19:21:46 | 000,000,000 | ---D | C] -- C:\Program Files\ATI

[2014/11/17 19:21:45 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies

[2014/11/17 19:21:43 | 011,660,800 | ---- | C] (ATI Technologies Inc.) -- C:\windows\System32\atioglxx.dll

[2014/11/17 19:21:43 | 004,994,560 | ---- | C] (ATI Technologies Inc.) -- C:\windows\System32\drivers\atikmdag.sys

[2014/11/17 19:21:43 | 003,105,280 | ---- | C] (ATI Technologies Inc. ) -- C:\windows\System32\atiumdag.dll

[2014/11/17 19:21:43 | 002,868,736 | ---- | C] (ATI Technologies Inc. ) -- C:\windows\System32\atiumdva.dll

[2014/11/17 19:21:43 | 000,356,352 | ---- | C] (ATI Technologies, Inc.) -- C:\windows\System32\atipdlxx.dll

[2014/11/17 19:21:43 | 000,274,432 | ---- | C] (ATI Technologies, Inc.) -- C:\windows\System32\Oemdspif.dll

[2014/11/17 19:21:43 | 000,176,128 | ---- | C] (AMD) -- C:\windows\System32\atiesrxx.exe

[2014/11/17 19:21:43 | 000,159,744 | ---- | C] (AMD) -- C:\windows\System32\atitmmxx.dll

[2014/11/17 19:21:43 | 000,051,712 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\windows\System32\atimpc32.dll

[2014/11/17 19:21:43 | 000,051,712 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\windows\System32\amdpcom32.dll

[2014/11/17 19:21:43 | 000,014,392 | ---- | C] (Advanced Micro Devices Inc.) -- C:\windows\System32\drivers\AtiPcie.sys

[2014/11/17 19:21:43 | 000,011,776 | ---- | C] (AMD) -- C:\windows\System32\atimuixx.dll

[2014/11/17 19:21:42 | 003,264,512 | ---- | C] (Advanced Micro Devices Inc.) -- C:\windows\System32\aticaldd.dll

[2014/11/17 19:21:42 | 002,469,888 | ---- | C] (ATI Technologies Inc. ) -- C:\windows\System32\atidxx32.dll

[2014/11/17 19:21:42 | 000,442,368 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\windows\System32\ATIDEMGX.dll

[2014/11/17 19:21:42 | 000,348,160 | ---- | C] (AMD) -- C:\windows\System32\atieclxx.exe

[2014/11/17 19:21:42 | 000,184,320 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\windows\System32\atiadlxx.dll

[2014/11/17 19:21:42 | 000,118,784 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\windows\System32\atibtmon.exe

[2014/11/17 19:21:42 | 000,053,248 | ---- | C] (ATI Technologies Inc.) -- C:\windows\System32\drivers\ati2erec.dll

[2014/11/17 19:21:42 | 000,053,248 | ---- | C] (Advanced Micro Devices Inc.) -- C:\windows\System32\aticalrt.dll

[2014/11/17 19:21:42 | 000,053,248 | ---- | C] (Advanced Micro Devices Inc.) -- C:\windows\System32\aticalcl.dll

[2014/11/17 19:21:42 | 000,043,520 | ---- | C] (ATI Technologies, Inc.) -- C:\windows\System32\ati2edxx.dll

[2014/11/17 19:20:51 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office Suite Activation Assistant

[2014/11/17 19:11:25 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office

[2014/11/17 19:11:19 | 000,031,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msonpmon.dll

[2014/11/17 19:10:36 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET

[2014/11/17 19:09:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help

[2014/11/17 19:08:29 | 000,000,000 | RH-D | C] -- C:\MSOCache

[2014/11/17 19:04:29 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office

[2014/11/17 19:04:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works

[2014/11/17 19:04:00 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works

[2014/11/17 19:03:47 | 000,000,000 | ---D | C] -- C:\windows\SoftwareDistribution

[1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]

========== Files - Modified Within 180 Days ==========

[2015/01/25 11:07:31 | 001,310,720 | -HS- | M] () -- C:\Users\young\NTUSER.DAT

[2015/01/25 10:51:43 | 000,000,886 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job

[2015/01/25 10:31:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\young\Desktop\OTL.exe

[2015/01/25 10:19:00 | 000,000,830 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job

[2015/01/25 10:13:33 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat

[2015/01/25 09:39:30 | 000,019,024 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2015/01/25 09:39:30 | 000,019,024 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2015/01/25 09:17:31 | 000,000,882 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job

[2015/01/25 09:12:16 | 000,000,438 | ---- | M] () -- C:\windows\win.ini

[2015/01/24 16:02:36 | 000,701,616 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerApp.exe

[2015/01/24 16:02:34 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerCPLApp.cpl

[2015/01/22 20:35:35 | 000,002,140 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk

[2015/01/21 20:57:58 | 000,000,006 | -H-- | M] () -- C:\windows\tasks\SA.DAT

[2015/01/21 20:57:49 | 1408,045,056 | -HS- | M] () -- C:\hiberfil.sys

[2015/01/21 20:57:03 | 000,782,366 | -H-- | M] () -- C:\Users\young\AppData\Local\IconCache.db

[2015/01/21 19:53:57 | 000,000,539 | ---- | M] () -- C:\windows\tasks\RegCure Pro_sch_E828F404-A1E1-11E4-A29D-002622F60C76.job

[2015/01/21 16:46:34 | 000,000,001 | ---- | M] () -- C:\Users\young\Documents\CryptoWall 2.0.html

[2015/01/21 16:44:26 | 001,715,072 | ---- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\Cat.DB

[2015/01/21 16:44:19 | 000,781,298 | ---- | M] () -- C:\windows\System32\PerfStringBackup.INI

[2015/01/21 16:44:19 | 000,661,894 | ---- | M] () -- C:\windows\System32\perfh009.dat

[2015/01/21 16:44:19 | 000,121,730 | ---- | M] () -- C:\windows\System32\perfc009.dat

[2015/01/21 15:37:25 | 000,001,020 | ---- | M] () -- C:\Users\young\AppData\Roaming\wklnhst.dat

[2015/01/21 15:34:17 | 000,148,910 | ---- | M] () -- C:\windows\hpoins19.dat

[2015/01/15 04:37:00 | 000,069,995 | ---- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\VT20150115.002

[2015/01/09 20:26:05 | 000,002,240 | ---- | M] () -- C:\Users\young\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk

[2015/01/08 22:46:19 | 000,096,680 | ---- | M] (Oracle Corporation) -- C:\windows\System32\WindowsAccessBridge.dll

[2015/01/08 22:46:18 | 000,272,296 | ---- | M] (Oracle Corporation) -- C:\windows\System32\javaws.exe

[2015/01/08 22:46:18 | 000,176,552 | ---- | M] (Oracle Corporation) -- C:\windows\System32\javaw.exe

[2015/01/08 22:46:18 | 000,176,552 | ---- | M] (Oracle Corporation) -- C:\windows\System32\java.exe

[2015/01/01 15:59:36 | 000,094,424 | ---- | M] (Symantec Corporation) -- C:\windows\System32\drivers\SYMEVENT.SYS

[2015/01/01 15:59:36 | 000,008,186 | ---- | M] () -- C:\windows\System32\drivers\SYMEVENT.CAT

[2015/01/01 15:59:36 | 000,000,806 | ---- | M] () -- C:\windows\System32\drivers\SYMEVENT.INF

[2015/01/01 15:59:22 | 000,002,542 | ---- | M] () -- C:\Users\Public\Desktop\Norton Security with Backup.lnk

[2015/01/01 15:57:39 | 000,001,265 | ---- | M] () -- C:\Users\young\Desktop\Norton Installation Files.lnk

[2014/12/12 20:33:44 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ieUnatt.exe

[2014/12/11 22:11:44 | 003,971,512 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ntkrnlpa.exe

[2014/12/11 22:11:43 | 003,916,728 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ntoskrnl.exe

[2014/12/11 10:47:27 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\TSWbPrxy.exe

[2014/12/10 03:59:47 | 000,000,172 | ---- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\isolate.ini

[2014/12/03 21:38:59 | 000,337,920 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\generaltel.dll

[2014/12/03 21:38:45 | 000,610,304 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\invagent.dll

[2014/12/03 21:38:40 | 000,315,392 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\devinv.dll

[2014/12/03 21:38:37 | 000,728,576 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\appraiser.dll

[2014/12/03 21:38:36 | 000,202,752 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\aepdu.dll

[2014/12/03 21:38:36 | 000,159,744 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\aepic.dll

[2014/12/03 21:34:13 | 000,873,984 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\aeinv.dll

[2014/12/01 22:59:55 | 000,008,172 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtspx.cat

[2014/12/01 22:59:55 | 000,008,168 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtsp.cat

[2014/12/01 22:59:55 | 000,001,390 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtspx.inf

[2014/12/01 22:59:55 | 000,001,389 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtsp.inf

[2014/12/01 22:59:40 | 000,699,608 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\srtsp.sys

[2014/12/01 22:59:40 | 000,036,056 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\srtspx.sys

[2014/12/01 16:28:26 | 001,160,872 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\aitstatic.exe

[2014/11/26 18:10:45 | 000,342,200 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\iedkcs32.dll

[2014/11/25 16:24:03 | 000,000,000 | -H-- | M] () -- C:\windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf

[2014/11/24 14:04:58 | 000,229,000 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\MpSigStub.exe

[2014/11/23 12:13:25 | 000,336,232 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT

[2014/11/22 10:38:19 | 000,079,592 | ---- | M] () -- C:\Users\young\AppData\Local\GDIPFONTCACHEV1.DAT

[2014/11/21 19:20:44 | 002,724,864 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\mshtml.tlb

[2014/11/21 19:20:30 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ieetwcollectorres.dll

[2014/11/21 19:07:17 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\iesetup.dll

[2014/11/21 19:06:32 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ieetwproxystub.dll

[2014/11/21 19:05:02 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\MshtmlDac.dll

[2014/11/21 18:59:42 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\jsproxy.dll

[2014/11/21 18:58:54 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\iernonce.dll

[2014/11/21 18:56:40 | 000,478,208 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ieui.dll

[2014/11/21 18:55:14 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ieetwcollector.exe

[2014/11/21 18:54:30 | 000,620,032 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\jscript9diag.dll

[2014/11/21 18:48:26 | 000,667,648 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\MsSpellCheckingFacility.exe

[2014/11/21 18:45:18 | 000,418,304 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\dxtmsft.dll

[2014/11/21 18:40:04 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\JavaScriptCollectionAgent.dll

[2014/11/21 18:36:14 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msrating.dll

[2014/11/21 18:33:22 | 000,285,696 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\dxtrans.dll

[2014/11/21 18:29:26 | 004,299,264 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\jscript9.dll

[2014/11/21 18:23:48 | 000,688,640 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msfeeds.dll

[2014/11/21 18:23:06 | 000,684,544 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ie4uinit.exe

[2014/11/21 18:22:49 | 002,052,096 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\inetcpl.cpl

[2014/11/21 18:21:57 | 001,155,072 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\mshtmlmedia.dll

[2014/11/21 17:54:44 | 000,710,144 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ieapfltr.dll

[2014/11/19 19:34:36 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\elshyph.dll

[2014/11/19 19:34:35 | 000,645,120 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\jsIntl.dll

[2014/11/19 19:34:35 | 000,616,104 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ieapfltr.dat

[2014/11/19 19:34:35 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\html.iec

[2014/11/19 19:34:35 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\url.dll

[2014/11/19 19:34:35 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msls31.dll

[2014/11/19 19:34:35 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\iexpress.exe

[2014/11/19 19:34:35 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\wextract.exe

[2014/11/19 19:34:35 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\inseng.dll

[2014/11/19 19:34:35 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\RegisterIEPKEYs.exe

[2014/11/19 19:34:35 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\licmgr10.dll

[2014/11/19 19:34:35 | 000,016,284 | ---- | M] () -- C:\windows\System32\ieuinit.inf

[2014/11/19 19:34:34 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\iepeers.dll

[2014/11/19 19:34:34 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\IEAdvpack.dll

[2014/11/19 19:34:34 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\iesysprep.dll

[2014/11/19 19:34:34 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\SetIEInstalledDate.exe

[2014/11/19 19:34:34 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\pngfilt.dll

[2014/11/19 19:34:34 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\mshtmler.dll

[2014/11/19 19:34:34 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msfeedsbs.dll

[2014/11/19 19:34:34 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\imgutil.dll

[2014/11/19 19:34:34 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msfeedssync.exe

[2014/11/19 19:33:07 | 000,619,520 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\tdh.dll

[2014/11/19 19:33:07 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\csrsrv.dll

[2014/11/19 19:32:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\taskhost.exe

[2014/11/19 19:28:51 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\XpsPrint.dll

[2014/11/19 19:28:51 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\d3d10.dll

[2014/11/19 19:28:51 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\d3d10level9.dll

[2014/11/19 19:28:51 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\XpsGdiConverter.dll

[2014/11/19 19:28:51 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\dxgi.dll

[2014/11/19 19:28:51 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\d3d10_1core.dll

[2014/11/19 19:28:51 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\d3d10core.dll

[2014/11/19 19:28:51 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\WindowsCodecsExt.dll

[2014/11/19 19:28:51 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\UIAnimation.dll

[2014/11/19 19:28:51 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\d3d10_1.dll

[2014/11/19 19:28:51 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll

[2014/11/19 19:28:51 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

[2014/11/19 19:28:51 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

[2014/11/19 19:28:51 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll

[2014/11/19 19:28:51 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll

[2014/11/19 19:28:51 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll

[2014/11/19 19:28:51 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-version-l1-1-0.dll

[2014/11/19 19:28:51 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll

[2014/11/19 19:28:51 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll

[2014/11/19 19:26:29 | 001,505,280 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\d3d11.dll

[2014/11/19 17:51:27 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msclmd.dll

[2014/11/18 14:56:48 | 001,202,848 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\FM20.DLL

[2014/11/18 08:33:39 | 000,524,288 | -HS- | M] () -- C:\Users\young\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms

[2014/11/18 08:33:39 | 000,524,288 | -HS- | M] () -- C:\Users\young\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms

[2014/11/18 08:33:39 | 000,065,536 | -HS- | M] () -- C:\Users\young\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf

[2014/11/17 19:57:26 | 000,000,017 | RHS- | M] () -- C:\windows\System32\drivers\fbd.sys

[2014/11/17 19:56:17 | 000,000,020 | -HS- | M] () -- C:\Users\young\ntuser.ini

[2014/11/17 19:55:15 | 000,039,252 | ---- | M] () -- C:\windows\System32\license.rtf

[2014/11/17 19:49:14 | 000,000,000 | ---- | M] () -- C:\windows\NDSTray.INI

[2014/11/17 19:30:30 | 000,000,000 | -H-- | M] () -- C:\windows\System32\drivers\Msft_Kernel_SynTP_01007.Wdf

[2014/11/17 18:57:35 | 000,000,000 | ---- | M] () -- C:\windows\ativpsrm.bin

[2014/11/15 12:03:34 | 000,646,010 | ---- | M] () -- C:\Users\young\Documents\PostVirus-Spyware Status Report.mht

[2014/11/07 19:45:09 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\tzres.dll

[2014/10/29 18:45:43 | 000,155,136 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\charmap.exe

[2014/10/24 18:32:37 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\packager.dll

[2014/10/17 18:33:13 | 003,209,728 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\mf.dll

[2014/10/13 18:47:30 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msaudite.dll

[2014/10/13 18:46:02 | 000,681,984 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\adtschema.dll

[2014/10/09 17:45:54 | 002,379,264 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\win32k.sys

[2014/10/02 18:45:03 | 000,248,832 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\WSManMigrationPlugin.dll

[2014/10/02 18:45:03 | 000,214,016 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\WsmWmiPl.dll

[2014/10/02 18:45:03 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\WsmAuto.dll

[2014/10/02 18:44:42 | 000,442,880 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\AUDIOKSE.dll

[2014/10/02 18:44:31 | 000,275,968 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\EncDump.dll

[2014/10/02 18:44:26 | 000,374,784 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\AudioEng.dll

[2014/10/02 18:44:26 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\AudioSes.dll

[2014/10/02 18:44:25 | 000,198,656 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\WSManHTTPConfig.exe

[2014/09/24 18:40:50 | 000,519,680 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\qdvd.dll

[2014/09/20 08:10:49 | 000,218,976 | ---- | M] () -- C:\Users\young\Documents\Ovarian Cancer.pdf

[2014/09/19 02:23:46 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\ncrypt.dll

[2014/09/08 22:15:11 | 000,420,056 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\symnets.sys

[2014/09/08 22:15:10 | 000,939,224 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\SymEFA.sys

[2014/09/08 22:15:10 | 000,042,291 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymVTcer.dat

[2014/09/08 22:15:10 | 000,021,520 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\SymELAM.sys

[2014/09/08 22:15:10 | 000,009,931 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymELAM.cat

[2014/09/08 22:15:10 | 000,008,176 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymNet.cat

[2014/09/08 22:15:10 | 000,008,174 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymEFA.cat

[2014/09/08 22:15:10 | 000,003,434 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymEFA.inf

[2014/09/08 22:15:10 | 000,001,442 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymNet.inf

[2014/09/08 22:15:10 | 000,001,098 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\symELAM.inf

[2014/09/08 22:15:09 | 000,364,760 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\SymDS.sys

[2014/09/08 22:15:09 | 000,008,248 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymDS.cat

[2014/09/08 22:15:09 | 000,002,852 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymDS.inf

[2014/09/08 22:05:40 | 000,212,696 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\Ironx86.sys

[2014/09/08 22:05:40 | 000,008,168 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\iron.cat

[2014/09/08 22:05:40 | 000,000,737 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\Iron.inf

[2014/09/08 22:05:23 | 000,128,728 | R--- | M] (Symantec Corporation) -- C:\windows\System32\drivers\NSBU\1601000.009\ccSetx86.sys

[2014/09/08 22:05:23 | 000,008,186 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\ccSetx86.cat

[2014/09/08 22:05:23 | 000,000,828 | R--- | M] () -- C:\windows\System32\drivers\NSBU\1601000.009\ccSetx86.inf

[2014/08/28 18:44:52 | 002,744,320 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\rdpcorets.dll

[2014/08/20 23:23:10 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\msxml3r.dll

[2014/08/11 18:36:37 | 000,701,440 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\IMJP10K.DLL

[2014/08/01 04:35:06 | 000,793,600 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\TSWorkspace.dll

[1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2015/01/21 20:55:29 | 000,782,366 | -H-- | C] () -- C:\Users\young\AppData\Local\IconCache.db

[2015/01/21 19:53:57 | 000,000,539 | ---- | C] () -- C:\windows\tasks\RegCure Pro_sch_E828F404-A1E1-11E4-A29D-002622F60C76.job

[2015/01/21 16:46:34 | 000,000,001 | ---- | C] () -- C:\Users\young\Documents\CryptoWall 2.0.html

[2015/01/21 15:19:16 | 000,148,910 | ---- | C] () -- C:\windows\hpoins19.dat

[2015/01/15 19:29:52 | 000,069,995 | ---- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\VT20150115.002

[2015/01/08 22:39:30 | 000,002,240 | ---- | C] () -- C:\Users\young\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk

[2015/01/08 22:39:29 | 000,002,140 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk

[2015/01/08 22:39:02 | 000,000,886 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job

[2015/01/08 22:39:01 | 000,000,882 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job

[2015/01/08 22:38:26 | 000,000,830 | ---- | C] () -- C:\windows\tasks\Adobe Flash Player Updater.job

[2015/01/07 09:46:37 | 000,001,020 | ---- | C] () -- C:\Users\young\AppData\Roaming\wklnhst.dat

[2015/01/01 15:59:48 | 001,715,072 | ---- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\Cat.DB

[2015/01/01 15:59:36 | 000,008,186 | ---- | C] () -- C:\windows\System32\drivers\SYMEVENT.CAT

[2015/01/01 15:59:36 | 000,000,806 | ---- | C] () -- C:\windows\System32\drivers\SYMEVENT.INF

[2015/01/01 15:59:22 | 000,002,542 | ---- | C] () -- C:\Users\Public\Desktop\Norton Security with Backup.lnk

[2015/01/01 15:57:58 | 000,042,291 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymVTcer.dat

[2015/01/01 15:57:58 | 000,009,931 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymELAM.cat

[2015/01/01 15:57:58 | 000,008,248 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymDS.cat

[2015/01/01 15:57:58 | 000,008,186 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\ccSetx86.cat

[2015/01/01 15:57:58 | 000,008,176 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymNet.cat

[2015/01/01 15:57:58 | 000,008,174 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymEFA.cat

[2015/01/01 15:57:58 | 000,008,172 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtspx.cat

[2015/01/01 15:57:58 | 000,008,168 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtsp.cat

[2015/01/01 15:57:58 | 000,008,168 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\iron.cat

[2015/01/01 15:57:58 | 000,003,434 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymEFA.inf

[2015/01/01 15:57:58 | 000,002,852 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymDS.inf

[2015/01/01 15:57:58 | 000,001,442 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\SymNet.inf

[2015/01/01 15:57:58 | 000,001,390 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtspx.inf

[2015/01/01 15:57:58 | 000,001,389 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\srtsp.inf

[2015/01/01 15:57:58 | 000,001,098 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\symELAM.inf

[2015/01/01 15:57:58 | 000,000,828 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\ccSetx86.inf

[2015/01/01 15:57:58 | 000,000,737 | R--- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\Iron.inf

[2015/01/01 15:57:57 | 000,000,172 | ---- | C] () -- C:\windows\System32\drivers\NSBU\1601000.009\isolate.ini

[2015/01/01 15:27:25 | 000,001,265 | ---- | C] () -- C:\Users\young\Desktop\Norton Installation Files.lnk

[2014/11/25 16:24:03 | 000,000,000 | -H-- | C] () -- C:\windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf

[2014/11/23 15:35:57 | 000,646,010 | ---- | C] () -- C:\Users\young\Documents\PostVirus-Spyware Status Report.mht

[2014/11/23 15:35:57 | 000,218,976 | ---- | C] () -- C:\Users\young\Documents\Ovarian Cancer.pdf

[2014/11/23 15:35:57 | 000,103,280 | ---- | C] () -- C:\Users\young\Documents\FTF_2014-03-31_1396298261486.pdf

[2014/11/23 15:35:57 | 000,047,312 | ---- | C] () -- C:\Users\young\Documents\STF_2014-03-31_1396298312156.pdf

[2014/11/23 15:35:57 | 000,000,438 | ---- | C] () -- C:\Users\young\Documents\Pictures - Shortcut.lnk

[2014/11/23 15:25:26 | 000,001,827 | ---- | C] () -- C:\Users\young\Desktop\Microsoft Office - Shortcut.lnk

[2014/11/23 15:25:25 | 000,000,172 | ---- | C] () -- C:\Users\young\Desktop\Genealogy, Family Trees and Family History Records online - Ancestry.com.url

[2014/11/22 10:53:03 | 000,419,992 | ---- | C] () -- C:\windows\System32\locale.nls

[2014/11/19 20:18:07 | 000,000,003 | ---- | C] () -- C:\windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

[2014/11/19 19:34:35 | 000,016,284 | ---- | C] () -- C:\windows\System32\ieuinit.inf

[2014/11/19 18:50:24 | 000,000,003 | ---- | C] () -- C:\windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

[2014/11/19 10:01:11 | 000,146,852 | ---- | C] () -- C:\windows\System32\systemsf.ebd

[2014/11/19 10:00:17 | 000,053,600 | ---- | C] () -- C:\windows\System32\dosx.exe

[2014/11/19 10:00:15 | 000,010,429 | ---- | C] () -- C:\windows\System32\ScavengeSpace.xml

[2014/11/19 10:00:08 | 000,105,559 | ---- | C] () -- C:\windows\System32\RacRules.xml

[2014/11/17 19:59:21 | 000,079,592 | ---- | C] () -- C:\Users\young\AppData\Local\GDIPFONTCACHEV1.DAT

[2014/11/17 19:58:23 | 000,001,428 | ---- | C] () -- C:\Users\young\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

[2014/11/17 19:57:26 | 000,000,017 | RHS- | C] () -- C:\windows\System32\drivers\fbd.sys

[2014/11/17 19:56:17 | 001,310,720 | -HS- | C] () -- C:\Users\young\NTUSER.DAT

[2014/11/17 19:56:17 | 000,524,288 | -HS- | C] () -- C:\Users\young\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms

[2014/11/17 19:56:17 | 000,524,288 | -HS- | C] () -- C:\Users\young\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms

[2014/11/17 19:56:17 | 000,065,536 | -HS- | C] () -- C:\Users\young\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf

[2014/11/17 19:56:17 | 000,000,290 | ---- | C] () -- C:\Users\young\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

[2014/11/17 19:56:17 | 000,000,272 | ---- | C] () -- C:\Users\young\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

[2014/11/17 19:56:17 | 000,000,020 | -HS- | C] () -- C:\Users\young\ntuser.ini

[2014/11/17 19:49:14 | 000,000,000 | ---- | C] () -- C:\windows\NDSTray.INI

[2014/11/17 19:32:31 | 000,045,056 | ---- | C] () -- C:\windows\System32\HWS_Ctrl.dll

[2014/11/17 19:30:30 | 000,000,000 | -H-- | C] () -- C:\windows\System32\drivers\Msft_Kernel_SynTP_01007.Wdf

[2014/11/17 19:27:19 | 000,073,728 | ---- | C] () -- C:\windows\System32\RtNicProp32.dll

[2014/11/17 19:26:03 | 000,000,520 | ---- | C] () -- C:\windows\System32\drivers\RTEQEX1.dat

[2014/11/17 19:26:03 | 000,000,520 | ---- | C] () -- C:\windows\System32\drivers\RTEQEX0.dat

[2014/11/17 19:21:43 | 000,219,120 | ---- | C] () -- C:\windows\System32\atiumdva.cap

[2014/11/17 19:21:43 | 000,197,654 | ---- | C] () -- C:\windows\System32\atiicdxx.dat

[2014/11/17 19:21:43 | 000,018,335 | ---- | C] () -- C:\windows\atiogl.xml

[2014/11/17 19:04:34 | 000,002,557 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office PowerPoint Viewer 2007.lnk

[2014/11/17 19:04:16 | 000,001,116 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works Task Launcher.lnk

[2014/11/17 18:57:35 | 000,000,000 | ---- | C] () -- C:\windows\ativpsrm.bin

[2014/11/17 18:56:07 | 1408,045,056 | -HS- | C] () -- C:\hiberfil.sys

========== ZeroAccess Check ==========

[2009/07/13 21:42:31 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2014/06/24 18:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 05:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/13 18:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

========== LOP Check ==========

[2015/01/21 19:54:09 | 000,000,000 | ---D | M] -- C:\Users\young\AppData\Roaming\ParetoLogic

[2015/01/07 09:46:45 | 000,000,000 | ---D | M] -- C:\Users\young\AppData\Roaming\Template

[2014/11/17 19:57:03 | 000,000,000 | ---D | M] -- C:\Users\young\AppData\Roaming\WinBatch

========== Purity Check ==========

< End of report >

Documents and pictures encrypted by RSA-2048 using Cryptowall 2.0 [Clo

#1
myoung0963

Posted 25 January 2015 - 12:18 PM

Advertisements

#2
Valinorum

Posted 26 January 2015 - 02:06 AM

#3
Valinorum

Posted 29 January 2015 - 10:28 PM

Similar Topics

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us

Documents and pictures encrypted by RSA-2048 using Cryptowall 2.0 [Clo

#1 myoung0963 Posted 25 January 2015 - 12:18 PM

Advertisements

#2 Valinorum Posted 26 January 2015 - 02:06 AM

#3 Valinorum Posted 29 January 2015 - 10:28 PM

Similar Topics

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us

Sign In

#1
myoung0963

Posted 25 January 2015 - 12:18 PM

#2
Valinorum

Posted 26 January 2015 - 02:06 AM

#3
Valinorum

Posted 29 January 2015 - 10:28 PM