[Alli06]

Hello!

 

So I'm needing some help removing a virus by the name of the "QSMPRK Virus" off of my computer because it's starting to effect it's speed and it will also cause random links to pop up in another tab. I'm afraid if I leave it it will ruin my new laptop, but I'm not prepared to download any questionable software that will make it worse. Please help. It would really be appreciated! Thank you!

 

~Alli

[Advertisements]

Hi Alli06,

Welcome to Geeks to Go. My name is dbreeze and I'll be helping you with this problem. Before I get into the removal of malware / correction of your problem, I need you to be aware of the following:

• Please read all of my response through at least once before attempting to follow the procedures described.I would recommend printing them out, if you can, as you can check off each step as you complete it. Also, as some of the cleaning may be done in Safe Mode and there will be no internet connection then, you will find that having the steps printed for reference speeds the cleaning process along. If there's anything you don't understand or isn't totally clear to you, please come back to me for clarification before you start those steps.
• All of the assistants and staff at Geeks to Go are here on a volunteer basis; please respect our time given to the cause of helping others.If you are going to be away for more than 4 days, please let me know here. (I will do the same for you.) We do realize that 'life happens' and situations arise unexpectedly; we just ask that you keep us up to date. That being said, please notice the following Geeks to Go rule:
• Posts that are not replied to in four (4) days will result in the topic being closed. We have not forgotten you; this is just an effort to keep the boards organized and flowing. To continue on your closed topic, please PM me or any Moderator to have the topic reactivated. If, at any time during our working together, I have not responded to you in 2 days (48 hours), then please PM me.
• Malware removal is a complex, multiple step process; please stay with me on this thread (don't start another thread) until I declare that your logs are clean and you are good to go. The absence of apparent issues does not mean your system is clean; I will tell you when everything looks good for you to go and help you remove the tools we have used.
• If any of the security programs on your system should give any warnings about the software tools I ask you to download and use, please do not be alarmed.All of the tools I will have you use are safe to use (as instructed) and malware free.
• While we strive to disrupt your system as little as possible, things happen.If you can, it would be best to back up your personal files now (if you do not already have a backup). You can store these on a CD/DVD, USB drive or stick, anywhere but on your same system. This will save you from possible anguish later if something unforeseen happens.
• Please do not run any other tools or scanners than what I ask you to.Some of the openly available software made for malware removal can make changes to your system that interfere with the cleaning of the malware, or even destroy your system. I will use only what the situation calls for and direct you in the proper use of that software.
• Please do not attach any log files to your replies unless I specifically ask you.Instead please copy and paste so as to include the log in your reply. You can do this in separate posts if it's easier for you.

Let's get started....

Please download Farbar Recovery Scan Tool 32bit and save it to your Desktop.

Please download Farbar Recovery Scan Tool 64bit and save it to your Desktop.

Only one of these will run on your system; that is the proper one to keep; you can delete the other FRST file.

• Right click the FRST file on your desktop and select "Run as Administrator..." (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• If an update is available, the program will inform you and download the update. Allow it do this please.
• Press the Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

[dbreeze]

Hi Alli06,

Welcome to Geeks to Go. My name is dbreeze and I'll be helping you with this problem. Before I get into the removal of malware / correction of your problem, I need you to be aware of the following:

• Please read all of my response through at least once before attempting to follow the procedures described.I would recommend printing them out, if you can, as you can check off each step as you complete it. Also, as some of the cleaning may be done in Safe Mode and there will be no internet connection then, you will find that having the steps printed for reference speeds the cleaning process along. If there's anything you don't understand or isn't totally clear to you, please come back to me for clarification before you start those steps.
• All of the assistants and staff at Geeks to Go are here on a volunteer basis; please respect our time given to the cause of helping others.If you are going to be away for more than 4 days, please let me know here. (I will do the same for you.) We do realize that 'life happens' and situations arise unexpectedly; we just ask that you keep us up to date. That being said, please notice the following Geeks to Go rule:
• Posts that are not replied to in four (4) days will result in the topic being closed. We have not forgotten you; this is just an effort to keep the boards organized and flowing. To continue on your closed topic, please PM me or any Moderator to have the topic reactivated. If, at any time during our working together, I have not responded to you in 2 days (48 hours), then please PM me.
• Malware removal is a complex, multiple step process; please stay with me on this thread (don't start another thread) until I declare that your logs are clean and you are good to go. The absence of apparent issues does not mean your system is clean; I will tell you when everything looks good for you to go and help you remove the tools we have used.
• If any of the security programs on your system should give any warnings about the software tools I ask you to download and use, please do not be alarmed.All of the tools I will have you use are safe to use (as instructed) and malware free.
• While we strive to disrupt your system as little as possible, things happen.If you can, it would be best to back up your personal files now (if you do not already have a backup). You can store these on a CD/DVD, USB drive or stick, anywhere but on your same system. This will save you from possible anguish later if something unforeseen happens.
• Please do not run any other tools or scanners than what I ask you to.Some of the openly available software made for malware removal can make changes to your system that interfere with the cleaning of the malware, or even destroy your system. I will use only what the situation calls for and direct you in the proper use of that software.
• Please do not attach any log files to your replies unless I specifically ask you.Instead please copy and paste so as to include the log in your reply. You can do this in separate posts if it's easier for you.

Let's get started....

Please download Farbar Recovery Scan Tool 32bit and save it to your Desktop.

Please download Farbar Recovery Scan Tool 64bit and save it to your Desktop.

Only one of these will run on your system; that is the proper one to keep; you can delete the other FRST file.

• Right click the FRST file on your desktop and select "Run as Administrator..." (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• If an update is available, the program will inform you and download the update. Allow it do this please.
• Press the Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

[Alli06]

Here's the FRST document:

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2015 01

Ran by Home (administrator) on HOME-PC on 21-02-2015 09:52:17

Running from C:\Users\Home\Downloads

Loaded Profiles: Home (Available profiles: Home)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)

Internet Explorer Version 8 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Realtek) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe

(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe

(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe

(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

(Intel® Corporation) C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe

(Red Bend Ltd.) C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe

(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe

(Intel® Corporation) C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe

() C:\Program Files\TOSHIBA\FlashCards\Hotkey\TCrdKBB.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe

(Intel Corporation) C:\Windows\System32\igfxext.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Seekar Ltd) C:\Program Files (x86)\Ares\Ares.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(SAMSUNG Electornics Co., Ltd.) C:\Users\Home\AppData\Roaming\VERIZON\UA_ar\UA.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe

(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

 

 

==================== Registry (Whitelisted) ==================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [] => [X]

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10134560 2010-03-22] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [896032 2010-03-22] (Realtek Semiconductor)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-03-10] (Synaptics Incorporated)

HKLM\...\Run: [ThpSrv] => C:\windows\system32\thpsrv /logon

HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [505768 2010-06-29] (TOSHIBA Corporation)

HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation)

HKLM\...\Run: [SmoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [508216 2009-07-28] (TOSHIBA Corporation)

HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [915320 2010-05-10] (TOSHIBA Corporation)

HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1519016 2010-07-28] (TOSHIBA Corporation)

HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [711576 2010-07-22] (TOSHIBA Corporation)

HKLM\...\Run: [SmartFaceVWatcher] => C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [238080 2009-10-19] (TOSHIBA Corporation)

HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1928976 2010-03-05] (Intel® Corporation)

HKLM\...\Run: [IntelWirelessWiMAX] => C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe [1441792 2010-06-08] (Intel® Corporation)

HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)

HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2010-02-05] (TOSHIBA Corporation)

HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [595816 2010-04-23] (TOSHIBA Corporation)

HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38304 2010-07-09] (TOSHIBA Corporation)

HKLM-x32\...\Run: [KeNotify] => C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2009-12-25] (TOSHIBA CORPORATION)

HKLM-x32\...\Run: [HWSetup] => C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [423936 2010-03-04] (TOSHIBA Electronics, Inc.)

HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1295736 2011-02-11] (TOSHIBA Corporation)

HKLM-x32\...\Run: [TWebCamera] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2454840 2010-05-01] (TOSHIBA CORPORATION.)

HKLM-x32\...\Run: [TSleepSrv] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe [252728 2010-04-01] (TOSHIBA)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-08-08] (AVAST Software)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-08-01] (Apple Inc.)

Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-642685601-3827844656-3507933702-1000\...\Run: [ares] => C:\Program Files (x86)\Ares\Ares.exe [2758656 2014-03-28] (Seekar Ltd)

HKU\S-1-5-21-642685601-3827844656-3507933702-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30878816 2014-12-11] (Skype Technologies S.A.)

HKU\S-1-5-21-642685601-3827844656-3507933702-1000\...\MountPoints2: {2e52f398-11ad-11e4-8182-88ae1df314e3} - E:\LaunchU3.exe -a

HKU\S-1-5-21-642685601-3827844656-3507933702-1000\...\MountPoints2: {2e52f3a4-11ad-11e4-8182-88ae1df314e3} - G:\LaunchU3.exe -a

HKU\S-1-5-21-642685601-3827844656-3507933702-1000\...\MountPoints2: {e3553607-d292-11e3-975a-88ae1df314e3} - E:\VZW_Software_upgrade_assistant.exe

HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\windows\System32\SPReview\SPReview.exe [301568 2015-02-13] (Microsoft Corporation)

Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk

ShortcutTarget: Best Buy pc app.lnk -> C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft)

Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk

ShortcutTarget: Best Buy pc app.lnk -> C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft)

Startup: C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Verizon Wireless Software Utility Application for Android – Samsung.lnk

ShortcutTarget: Verizon Wireless Software Utility Application for Android – Samsung.lnk -> C:\Users\Home\AppData\Roaming\VERIZON\UA_ar\UA.exe (SAMSUNG Electornics Co., Ltd.)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.yahoo.co...t&type=avastbcl

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\S-1-5-21-642685601-3827844656-3507933702-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://search.yahoo...p={searchTerms}

HKU\S-1-5-21-642685601-3827844656-3507933702-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.yahoo.co...t&type=avastbcl

HKU\S-1-5-21-642685601-3827844656-3507933702-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://start.toshiba.com/g/

HKU\S-1-5-21-642685601-3827844656-3507933702-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.yahoo.co...t&type=avastbcl

SearchScopes: HKLM -> DefaultScope {17128B0E-183F-484A-B7A3-9E3E1450F703} URL = http://www.google.co...ng}&rlz=1I7TSND

SearchScopes: HKLM -> {17128B0E-183F-484A-B7A3-9E3E1450F703} URL = http://www.google.co...ng}&rlz=1I7TSND

SearchScopes: HKLM-x32 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://search.yahoo...p={searchTerms}

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> {86F859E3-3478-4CDF-9872-E3A8420632C4} URL = http://www.google.co...ng}&rlz=1I7TSND

SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://search.yahoo...p={searchTerms}

SearchScopes: HKU\S-1-5-21-642685601-3827844656-3507933702-1000 -> DefaultScope {5AB55C9D-599C-4937-9AD1-649759614CB8} URL = http://www.google.co...ng}&rlz=1I7TSND

SearchScopes: HKU\S-1-5-21-642685601-3827844656-3507933702-1000 -> {5AB55C9D-599C-4937-9AD1-649759614CB8} URL = http://www.google.co...ng}&rlz=1I7TSND

SearchScopes: HKU\S-1-5-21-642685601-3827844656-3507933702-1000 -> {86F859E3-3478-4CDF-9872-E3A8420632C4} URL = 

SearchScopes: HKU\S-1-5-21-642685601-3827844656-3507933702-1000 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://search.yahoo...p={searchTerms}

BHO: No Name -> {41524553-2D56-3700-76A7-7A786E7484D7} ->  No File

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} ->  No File

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)

Toolbar: HKU\S-1-5-21-642685601-3827844656-3507933702-1000 -> No Name - {41524553-2D56-3700-76A7-7A786E7484D7} -  No File

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

 

FireFox:

========

FF ProfilePath: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\i9uit939.default

FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-30]

 

Chrome: 

=======

CHR HomePage: Default -> https://www.google.com/

CHR StartupUrls: Default -> "hxxp://www.google.com/", "hxxp://www.msn.com/?pc=U007&ocid=U007DHP", "hxxp://yahoo.com/"

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}

CHR Profile: C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Drive) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-14]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-17]

CHR Extension: (AdBlock) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-10-05]

CHR Extension: (Avast Online Security) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-04-30]

CHR Extension: (Google Wallet) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-30]

CHR Extension: (CrushArcade) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnhjnmacgahapmnnifmneapinilajfol [2015-02-07]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-04-30]

 

==================== Services (Whitelisted) =================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-30] (AVAST Software)

R2 DMAgent; C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe [408576 2010-06-07] (Red Bend Ltd.) [File not signed]

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] ()

R2 Realtek11nSU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [36864 2009-07-10] (Realtek) [File not signed]

R2 WiMAXAppSrv; C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe [911872 2010-06-07] (Intel® Corporation) [File not signed]

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)

 

==================== Drivers (Whitelisted) ====================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-04-30] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-30] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-30] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-30] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-16] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-16] (AVAST Software)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-16] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-04-30] ()

 

==================== NetSvcs (Whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

 

 

==================== One Month Created Files and Folders ========

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2015-02-21 09:52 - 2015-02-21 09:52 - 00019899 _____ () C:\Users\Home\Downloads\FRST.txt

2015-02-21 09:52 - 2015-02-21 09:52 - 00000000 ____D () C:\FRST

2015-02-21 09:51 - 2015-02-21 09:51 - 02086912 _____ (Farbar) C:\Users\Home\Downloads\FRST64.exe

2015-02-17 18:03 - 2015-02-17 18:03 - 00000000 ____D () C:\Users\Home\AppData\Roaming\InstallShield

2015-02-17 18:02 - 2015-02-17 18:03 - 13415176 _____ () C:\Users\Home\Downloads\TC10106100A.exe

2015-02-17 18:02 - 2015-02-17 18:02 - 13415176 _____ () C:\Users\Home\Downloads\TC10106100A (1).exe

2015-02-15 12:58 - 2015-02-21 09:15 - 00051499 _____ () C:\windows\IE11_main.log

2015-02-15 10:40 - 2014-06-30 17:24 - 00008856 _____ (Microsoft Corporation) C:\windows\system32\icardres.dll

2015-02-15 10:40 - 2014-06-30 17:14 - 00008856 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardres.dll

2015-02-15 10:40 - 2014-06-06 01:16 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe

2015-02-15 10:40 - 2014-06-06 01:12 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe

2015-02-15 10:40 - 2014-03-09 16:48 - 01389208 _____ (Microsoft Corporation) C:\windows\system32\icardagt.exe

2015-02-15 10:40 - 2014-03-09 16:48 - 00171160 _____ (Microsoft Corporation) C:\windows\system32\infocardapi.dll

2015-02-15 10:40 - 2014-03-09 16:47 - 00619672 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardagt.exe

2015-02-15 10:40 - 2014-03-09 16:47 - 00099480 _____ (Microsoft Corporation) C:\windows\SysWOW64\infocardapi.dll

2015-02-14 10:03 - 2014-05-14 11:23 - 02477536 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll

2015-02-14 10:03 - 2014-05-14 11:23 - 00058336 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe

2015-02-14 10:03 - 2014-05-14 11:23 - 00044512 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll

2015-02-14 10:03 - 2014-05-14 11:21 - 02620928 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll

2015-02-14 10:02 - 2014-05-14 11:23 - 00700384 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll

2015-02-14 10:02 - 2014-05-14 11:23 - 00581600 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll

2015-02-14 10:02 - 2014-05-14 11:23 - 00038880 _____ (Microsoft Corporation) C:\windows\system32\wups.dll

2015-02-14 10:02 - 2014-05-14 11:23 - 00036320 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll

2015-02-14 10:02 - 2014-05-14 11:20 - 00097792 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll

2015-02-14 10:02 - 2014-05-14 11:17 - 00092672 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll

2015-02-14 10:02 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll

2015-02-14 10:02 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll

2015-02-14 10:02 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe

2015-02-14 10:02 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe

2015-02-13 13:55 - 2015-02-13 13:55 - 00000000 ____D () C:\windows\system32\SPReview

2015-02-13 13:54 - 2015-02-13 13:54 - 00000000 ____D () C:\windows\system32\EventProviders

2015-02-12 15:13 - 2010-11-20 08:39 - 05066752 _____ (Microsoft Corporation) C:\windows\system32\AuthFWSnapin.dll

2015-02-12 15:13 - 2010-11-20 08:33 - 00299392 _____ (Microsoft Corporation) C:\windows\system32\mcupdate_GenuineIntel.dll

2015-02-12 15:13 - 2010-11-20 08:33 - 00273792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys

2015-02-12 15:13 - 2010-11-20 08:27 - 14633472 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 03860992 _____ (Microsoft Corporation) C:\windows\system32\UIRibbon.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 03650560 _____ (Microsoft Corporation) C:\windows\system32\MSVidCtl.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 03027968 _____ (Microsoft Corporation) C:\windows\system32\WMVCORE.DLL

2015-02-12 15:13 - 2010-11-20 08:27 - 03008000 _____ (Microsoft Corporation) C:\windows\system32\xpsservices.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 02086912 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 02018304 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 01888256 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL

2015-02-12 15:13 - 2010-11-20 08:27 - 01753088 _____ (Microsoft Corporation) C:\windows\system32\vssapi.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 01743360 _____ (Microsoft Corporation) C:\windows\system32\sysmain.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 01646080 _____ (Microsoft Corporation) C:\windows\system32\wevtsvc.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 01556992 _____ (Microsoft Corporation) C:\windows\system32\RacEngn.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 01326080 _____ (Microsoft Corporation) C:\windows\system32\NaturalLanguage6.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 01219584 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 01197056 _____ (Microsoft Corporation) C:\windows\system32\taskschd.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 01110016 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 00867840 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 00488448 _____ (Microsoft Corporation) C:\windows\system32\secproc.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 00485888 _____ (Microsoft Corporation) C:\windows\system32\secproc_isv.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 00263168 _____ (Microsoft Corporation) C:\windows\system32\spwizui.dll

2015-02-12 15:13 - 2010-11-20 08:27 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2015-02-12 15:13 - 2010-11-20 08:26 - 04120064 _____ (Microsoft Corporation) C:\windows\system32\mf.dll

2015-02-12 15:13 - 2010-11-20 08:26 - 03205120 _____ (Microsoft Corporation) C:\windows\system32\mmcndmgr.dll

2015-02-12 15:13 - 2010-11-20 08:26 - 02067456 _____ (Microsoft Corporation) C:\windows\system32\d3d9.dll

2015-02-12 15:13 - 2010-11-20 08:26 - 01866240 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll

2015-02-12 15:13 - 2010-11-20 08:26 - 01838080 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll

2015-02-12 15:13 - 2010-11-20 08:26 - 01340416 _____ (Microsoft Corporation) C:\windows\system32\diagperf.dll

2015-02-12 15:13 - 2010-11-20 08:26 - 00853504 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL

2015-02-12 15:13 - 2010-11-20 08:26 - 00828416 _____ (Microsoft Corporation) C:\windows\system32\MPSSVC.dll

2015-02-12 15:13 - 2010-11-20 08:25 - 03957760 _____ (Microsoft Corporation) C:\windows\system32\WinSAT.exe

2015-02-12 15:13 - 2010-11-20 08:25 - 01975296 _____ (Microsoft Corporation) C:\windows\system32\CertEnroll.dll

2015-02-12 15:13 - 2010-11-20 08:25 - 00902144 _____ (Microsoft Corporation) C:\windows\system32\d2d1.dll

2015-02-12 15:13 - 2010-11-20 08:25 - 00598016 _____ (Microsoft Corporation) C:\windows\system32\spinstall.exe

2015-02-12 15:13 - 2010-11-20 08:25 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_isv.exe

2015-02-12 15:13 - 2010-11-20 08:25 - 00359424 _____ (Microsoft Corporation) C:\windows\system32\RMActivate.exe

2015-02-12 15:13 - 2010-11-20 08:25 - 00301568 _____ (Microsoft Corporation) C:\windows\system32\spreview.exe

2015-02-12 15:13 - 2010-11-20 08:24 - 02872320 _____ (Microsoft Corporation) C:\windows\explorer.exe

2015-02-12 15:13 - 2010-11-20 07:32 - 05066752 _____ (Microsoft Corporation) C:\windows\SysWOW64\AuthFWSnapin.dll

2015-02-12 15:13 - 2010-11-20 07:21 - 11410432 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll

2015-02-12 15:13 - 2010-11-20 07:21 - 01115136 _____ (Microsoft Corporation) C:\windows\SysWOW64\RacEngn.dll

2015-02-12 15:13 - 2010-11-20 07:21 - 00423936 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc_isv.dll

2015-02-12 15:13 - 2010-11-20 07:20 - 00428032 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc.dll

2015-02-12 15:13 - 2010-11-20 07:19 - 03207680 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll

2015-02-12 15:13 - 2010-11-20 07:19 - 00954752 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfc40.dll

2015-02-12 15:13 - 2010-11-20 07:19 - 00954288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfc40u.dll

2015-02-12 15:13 - 2010-11-20 07:18 - 01334272 _____ (Microsoft Corporation) C:\windows\SysWOW64\CertEnroll.dll

2015-02-12 15:13 - 2010-11-20 07:18 - 01171456 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll

2015-02-12 15:13 - 2010-11-20 07:18 - 00739840 _____ (Microsoft Corporation) C:\windows\SysWOW64\d2d1.dll

2015-02-12 15:13 - 2010-11-20 07:17 - 00327168 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate_isv.exe

2015-02-12 15:13 - 2010-11-20 07:17 - 00322048 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate.exe

2015-02-12 15:13 - 2010-11-20 06:07 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbFlt.sys

2015-02-12 15:13 - 2010-11-20 06:05 - 00274944 _____ (Microsoft Corporation) C:\windows\system32\rdpdd.dll

2015-02-12 15:13 - 2010-11-04 21:20 - 00347904 _____ () C:\windows\system32\systemsf.ebd

2015-02-12 15:13 - 2010-11-04 20:58 - 01130824 _____ (Microsoft Corporation) C:\windows\SysWOW64\dfshim.dll

2015-02-12 15:13 - 2010-11-04 20:58 - 00297808 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscoree.dll

2015-02-12 15:13 - 2010-11-04 20:57 - 01942856 _____ (Microsoft Corporation) C:\windows\system32\dfshim.dll

2015-02-12 15:13 - 2010-11-04 20:57 - 00444752 _____ (Microsoft Corporation) C:\windows\system32\mscoree.dll

2015-02-12 15:13 - 2010-11-04 20:57 - 00048976 _____ (Microsoft Corporation) C:\windows\system32\netfxperf.dll

2015-02-12 15:13 - 2010-11-04 20:53 - 00320352 _____ (Microsoft Corporation) C:\windows\system32\PresentationHost.exe

2015-02-12 15:13 - 2010-11-04 20:53 - 00295264 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationHost.exe

2015-02-12 15:13 - 2010-11-04 20:53 - 00109928 _____ (Microsoft Corporation) C:\windows\system32\PresentationHostProxy.dll

2015-02-12 15:13 - 2010-11-04 20:53 - 00099176 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationHostProxy.dll

2015-02-12 15:12 - 2010-11-20 08:34 - 00295808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys

2015-02-12 15:12 - 2010-11-20 08:34 - 00215936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vhdmp.sys

2015-02-12 15:12 - 2010-11-20 08:34 - 00071552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volmgr.sys

2015-02-12 15:12 - 2010-11-20 08:33 - 00982912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys

2015-02-12 15:12 - 2010-11-20 08:33 - 00951680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys

2015-02-12 15:12 - 2010-11-20 08:33 - 00366976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msrpc.sys

2015-02-12 15:12 - 2010-11-20 08:33 - 00289664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys

2015-02-12 15:12 - 2010-11-20 08:33 - 00263040 _____ (Microsoft Corporation) C:\windows\system32\hal.dll

2015-02-12 15:12 - 2010-11-20 08:33 - 00184704 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys

2015-02-12 15:12 - 2010-11-20 08:33 - 00140672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msdsm.sys

2015-02-12 15:12 - 2010-11-20 08:33 - 00078720 _____ (Hewlett-Packard Company) C:\windows\system32\Drivers\HpSAMD.sys

2015-02-12 15:12 - 2010-11-20 08:32 - 00179072 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys

2015-02-12 15:12 - 2010-11-20 08:29 - 00345600 _____ (Microsoft Corporation) C:\windows\system32\fveapi.dll

2015-02-12 15:12 - 2010-11-20 08:28 - 00780008 _____ (Microsoft Corporation) C:\windows\system32\ci.dll

2015-02-12 15:12 - 2010-11-20 08:28 - 00298104 _____ (Microsoft Corporation) C:\windows\system32\bcryptprimitives.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 02851840 _____ (Microsoft Corporation) C:\windows\system32\themeui.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 02652160 _____ (Microsoft Corporation) C:\windows\system32\netshell.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 02543616 _____ (Microsoft Corporation) C:\windows\system32\wpdshext.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 02262528 _____ (Microsoft Corporation) C:\windows\system32\SyncCenter.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 02072576 _____ (Microsoft Corporation) C:\windows\system32\WMPEncEn.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 02055680 _____ (Microsoft Corporation) C:\windows\system32\Query.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01900544 _____ (Microsoft Corporation) C:\windows\system32\setupapi.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01808384 _____ (Microsoft Corporation) C:\windows\system32\pnidui.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01509888 _____ (Microsoft Corporation) C:\windows\system32\msdtctm.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01441280 _____ (Microsoft Corporation) C:\windows\system32\wlanpref.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01389056 _____ (Microsoft Corporation) C:\windows\system32\pla.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01363968 _____ (Microsoft Corporation) C:\windows\system32\wdc.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01281024 _____ (Microsoft Corporation) C:\windows\system32\werconcpl.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01243136 _____ (Microsoft Corporation) C:\windows\system32\WMNetMgr.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01212416 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01190400 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01160192 _____ (Microsoft Corporation) C:\windows\system32\MSMPEG2ENC.DLL

2015-02-12 15:12 - 2010-11-20 08:27 - 01158656 _____ (Microsoft Corporation) C:\windows\system32\webservices.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01098240 _____ (Microsoft Corporation) C:\windows\system32\Vault.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01082880 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01050624 _____ (Microsoft Corporation) C:\windows\system32\printui.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01026560 _____ (Microsoft Corporation) C:\windows\system32\mstime.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01024512 _____ (Microsoft Corporation) C:\windows\system32\wmpmde.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 01008128 _____ (Microsoft Corporation) C:\windows\system32\user32.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00933888 _____ (Microsoft Corporation) C:\windows\system32\sqlsrv32.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00849920 _____ (Microsoft Corporation) C:\windows\system32\qmgr.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00799744 _____ (Microsoft Corporation) C:\windows\system32\msftedit.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00758784 _____ (Microsoft Corporation) C:\windows\system32\samsrv.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00758272 _____ (Microsoft Corporation) C:\windows\system32\PortableDeviceApi.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00750080 _____ (Microsoft Corporation) C:\windows\system32\TSWorkspace.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00720896 _____ (Microsoft Corporation) C:\windows\system32\odbc32.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00695808 _____ (Microsoft Corporation) C:\windows\system32\netlogon.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00680960 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00658432 _____ (Microsoft Corporation) C:\windows\system32\PerfCenterCPL.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00625664 _____ (Microsoft Corporation) C:\windows\system32\mscms.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00605696 _____ (Microsoft Corporation) C:\windows\system32\wmpeffects.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00582656 _____ (Microsoft Corporation) C:\windows\system32\sxs.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00580096 _____ (Microsoft Corporation) C:\windows\system32\wiaservc.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00577536 _____ (Microsoft Corporation) C:\windows\system32\WSDApi.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00571904 _____ (Microsoft Corporation) C:\windows\system32\mspbda.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00552960 _____ (Microsoft Corporation) C:\windows\system32\msdri.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00524288 _____ (Microsoft Corporation) C:\windows\system32\wmicmiplugin.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00519680 _____ (Microsoft Corporation) C:\windows\system32\netcfgx.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00512000 _____ (Microsoft Corporation) C:\windows\system32\rpcss.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00501248 _____ (Microsoft Corporation) C:\windows\system32\WinSATAPI.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00481280 _____ (Microsoft Corporation) C:\windows\system32\wmpps.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00476160 _____ (Microsoft Corporation) C:\windows\system32\QAGENTRT.DLL

2015-02-12 15:12 - 2010-11-20 08:27 - 00475136 _____ (Microsoft Corporation) C:\windows\system32\wlangpui.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00473600 _____ (Microsoft Corporation) C:\windows\system32\taskcomp.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00457216 _____ (Microsoft Corporation) C:\windows\system32\msdrm.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00448512 _____ (Microsoft Corporation) C:\windows\system32\shlwapi.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00444416 _____ (Microsoft Corporation) C:\windows\system32\winhttp.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00429568 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00418816 _____ (Microsoft Corporation) C:\windows\system32\sppwinob.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00409600 _____ (Microsoft Corporation) C:\windows\system32\photowiz.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00406016 _____ (Microsoft Corporation) C:\windows\system32\scesrv.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00370688 _____ (Microsoft Corporation) C:\windows\system32\shsvcs.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00367104 _____ (Microsoft Corporation) C:\windows\system32\wcncsvc.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00344064 _____ (Microsoft Corporation) C:\windows\system32\rasmans.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00326144 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\netdiagfx.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00312832 _____ (Microsoft Corporation) C:\windows\system32\Wldap32.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00312320 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00303616 _____ (Microsoft Corporation) C:\windows\system32\scansetting.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00303616 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00299520 _____ (Microsoft Corporation) C:\windows\system32\tsmf.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00297984 _____ (Microsoft Corporation) C:\windows\system32\ws2_32.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00266240 _____ (Microsoft Corporation) C:\windows\system32\QAGENT.DLL

2015-02-12 15:12 - 2010-11-20 08:27 - 00264192 _____ (Microsoft Corporation) C:\windows\system32\upnp.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00263168 _____ (Microsoft Corporation) C:\windows\system32\vpnike.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00258560 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00257024 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00253440 _____ (Microsoft Corporation) C:\windows\system32\tcpipcfg.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00244224 _____ (Microsoft Corporation) C:\windows\system32\spp.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00236032 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\onex.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\winsta.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00232960 _____ (Microsoft Corporation) C:\windows\system32\scecli.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00229888 _____ (Microsoft Corporation) C:\windows\system32\XpsRasterService.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00223232 _____ (Microsoft Corporation) C:\windows\system32\QSHVHOST.DLL

2015-02-12 15:12 - 2010-11-20 08:27 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\ncsi.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00187904 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00183808 _____ (Microsoft Corporation) C:\windows\system32\prncache.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00165376 _____ (Microsoft Corporation) C:\windows\system32\netid.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00161792 _____ (Microsoft Corporation) C:\windows\system32\ocsetapi.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00148992 _____ (Microsoft Corporation) C:\windows\system32\t2embed.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00146944 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00121856 _____ (Microsoft Corporation) C:\windows\system32\SessEnv.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\thumbcache.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\userenv.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\nlaapi.dll

2015-02-12 15:12 - 2010-11-20 08:27 - 00046592 _____ (Microsoft Corporation) C:\windows\system32\msasn1.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 03391488 _____ (Microsoft Corporation) C:\windows\system32\dbgeng.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 01632256 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 01457664 _____ (Microsoft Corporation) C:\windows\system32\DxpTaskSync.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 01244160 _____ (Microsoft Corporation) C:\windows\system32\imapi2fs.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 01137664 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 01009152 _____ (Microsoft Corporation) C:\windows\system32\mcmde.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00934912 _____ (Microsoft Corporation) C:\windows\system32\FirewallControlPanel.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00787968 _____ (Microsoft Corporation) C:\windows\system32\d3d11.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00777728 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00675328 _____ (Microsoft Corporation) C:\windows\system32\DXPTaskRingtone.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00658944 _____ (Microsoft Corporation) C:\windows\system32\dxgi.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00630272 _____ (Microsoft Corporation) C:\windows\system32\evr.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\ipsmsnap.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00569344 _____ (Microsoft Corporation) C:\windows\system32\iphlpsvc.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00551936 _____ (Microsoft Corporation) C:\windows\system32\localsec.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00503296 _____ (Microsoft Corporation) C:\windows\system32\imapi2.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00501248 _____ (Microsoft Corporation) C:\windows\system32\IPSECSVC.DLL

2015-02-12 15:12 - 2010-11-20 08:26 - 00459776 _____ (Microsoft Corporation) C:\windows\system32\DXP.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00445952 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00422912 _____ (Microsoft Corporation) C:\windows\system32\drvstore.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00403968 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\mfds.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00348160 _____ (Microsoft Corporation) C:\windows\system32\eapp3hst.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00317952 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00303616 _____ (Microsoft Corporation) C:\windows\system32\eapphost.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00295936 _____ (Microsoft Corporation) C:\windows\system32\framedynos.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00281600 _____ (Microsoft) C:\windows\system32\DShowRdpFilter.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00279040 _____ (Microsoft Corporation) C:\windows\system32\framedyn.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00257024 _____ (Microsoft Corporation) C:\windows\system32\mfreadwrite.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00252928 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\hgprint.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00221184 _____ (Microsoft Corporation) C:\windows\system32\mprapi.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00217088 _____ (Microsoft Corporation) C:\windows\system32\iasrad.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00171520 _____ (Microsoft Corporation) C:\windows\system32\fde.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00166912 _____ (Microsoft Corporation) C:\windows\system32\inetpp.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00145920 _____ (Microsoft Corporation) C:\windows\system32\IPHLPAPI.DLL

2015-02-12 15:12 - 2010-11-20 08:26 - 00128512 _____ (Microsoft Corporation) C:\windows\system32\dwmredir.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll

2015-02-12 15:12 - 2010-11-20 08:26 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\dot3api.dll

2015-02-12 15:12 - 2010-11-20 08:25 - 01927680 _____ (Microsoft Corporation) C:\windows\system32\authui.dll

2015-02-12 15:12 - 2010-11-20 08:25 - 01796096 _____ (Microsoft Corporation) C:\windows\system32\certmgr.dll

2015-02-12 15:12 - 2010-11-20 08:25 - 01600512 _____ (Microsoft Corporation) C:\windows\system32\VSSVC.exe

2015-02-12 15:12 - 2010-11-20 08:25 - 01504256 _____ (Microsoft Corporation) C:\windows\system32\wbengine.exe

2015-02-12 15:12 - 2010-11-20 08:25 - 01116672 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe

2015-02-12 15:12 - 2010-11-20 08:25 - 00958464 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll

2015-02-12 15:12 - 2010-11-20 08:25 - 00897536 _____ (Microsoft Corporation) C:\windows\system32\azroles.dll

2015-02-12 15:12 - 2010-11-20 08:25 - 00705024 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL

2015-02-12 15:12 - 2010-11-20 08:25 - 00679424 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll

2015-02-12 15:12 - 2010-11-20 08:25 - 00594432 _____ (Microsoft Corporation) C:\windows\system32\comdlg32.dll

2015-02-12 15:12 - 2010-11-20 08:25 - 00559104 _____ (Microsoft Corporation) C:\windows\system32\spoolsv.exe

2015-02-12 15:12 - 2010-11-20 08:25 - 00533504 _____ (Microsoft Corporation) C:\windows\system32\vds.exe

2015-02-12 15:12 - 2010-11-20 08:25 - 00504320 _____ (Microsoft Corporation) C:\windows\system32\biocpl.dll

2015-02-12 15:12 - 2010-11-20 08:25 - 00464384 _____ (Microsoft Corporation) C:\windows\system32\taskeng.exe

2015-02-12 15:12 - 2010-11-20 08:25 - 00412160 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll

2015-02-12 15:12 - 2010-11-20 08:25 - 00405504 _____ (Microsoft Corporation) C:\windows\system32\wisptis.exe

2015-02-12 15:12 - 2010-11-20 08:25 - 00390656 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe

2015-02-12 15:12 - 2010-11-20 08:25 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\apphelp.dll

2015-02-12 15:12 - 2010-11-20 08:25 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\wusa.exe

2015-02-12 15:12 - 2010-11-20 08:25 - 00296448 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll

2015-02-12 15:12 - 2010-11-20 08:25 - 00285696 _____ (Microsoft Corporation) C:\windows\system32\schtasks.exe

2015-02-12 15:12 - 2010-11-20 08:25 - 00199168 _____ (Microsoft Corporation) C:\windows\system32\PkgMgr.exe

2015-02-12 15:12 - 2010-11-20 08:25 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\credui.dll

2015-02-12 15:12 - 2010-11-20 08:25 - 00186368 _____ (Microsoft Corporation) C:\windows\system32\ocsetup.exe

2015-02-12 15:12 - 2010-11-20 08:25 - 00128000 _____ (Microsoft) C:\windows\system32\Robocopy.exe

2015-02-12 15:12 - 2010-11-20 08:25 - 00067072 _____ (Microsoft Corporation) C:\windows\splwow64.exe

2015-02-12 15:12 - 2010-11-20 08:24 - 00850944 _____ (Microsoft Corporation) C:\windows\system32\mmsys.cpl

2015-02-12 15:12 - 2010-11-20 08:24 - 00689152 _____ (Microsoft Corporation) C:\windows\system32\FXSSVC.exe

2015-02-12 15:12 - 2010-11-20 08:24 - 00653312 _____ (Microsoft Corporation) C:\windows\system32\lpksetup.exe

2015-02-12 15:12 - 2010-11-20 08:24 - 00477696 _____ (Microsoft Corporation) C:\windows\system32\PhotoScreensaver.scr

2015-02-12 15:12 - 2010-11-20 08:24 - 00442368 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv

2015-02-12 15:12 - 2010-11-20 08:24 - 00378880 _____ (Microsoft Corporation) C:\windows\system32\msinfo32.exe

2015-02-12 15:12 - 2010-11-20 08:24 - 00345088 _____ (Microsoft Corporation) C:\windows\system32\cmd.exe

2015-02-12 15:12 - 2010-11-20 08:24 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\lsm.exe

2015-02-12 15:12 - 2010-11-20 08:24 - 00272896 _____ (Microsoft Corporation) C:\windows\system32\mcbuilder.exe

2015-02-12 15:12 - 2010-11-20 08:24 - 00122880 _____ (Microsoft Corporation) C:\windows\system32\aitagent.exe

2015-02-12 15:12 - 2010-11-20 07:55 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\cdd.dll

2015-02-12 15:12 - 2010-11-20 07:51 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll

2015-02-12 15:12 - 2010-11-20 07:23 - 00144768 _____ (Microsoft Corporation) C:\windows\SysWOW64\basecsp.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 02983424 _____ (Microsoft Corporation) C:\windows\SysWOW64\UIRibbon.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 02755072 _____ (Microsoft Corporation) C:\windows\SysWOW64\themeui.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 01712640 _____ (Microsoft Corporation) C:\windows\SysWOW64\xpsservices.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 01667584 _____ (Microsoft Corporation) C:\windows\SysWOW64\setupapi.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 01619456 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL

2015-02-12 15:12 - 2010-11-20 07:21 - 01363456 _____ (Microsoft Corporation) C:\windows\SysWOW64\Query.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 01175040 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 01128448 _____ (Microsoft Corporation) C:\windows\SysWOW64\vssapi.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 01010688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00778240 _____ (Microsoft Corporation) C:\windows\SysWOW64\sqlsrv32.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00646144 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00597504 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSWorkspace.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00505856 _____ (Microsoft Corporation) C:\windows\SysWOW64\taskschd.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00458752 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSDApi.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00381440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00380416 _____ (Microsoft Corporation) C:\windows\SysWOW64\sxs.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00352256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmpeffects.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00351232 _____ (Microsoft Corporation) C:\windows\SysWOW64\winhttp.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00350208 _____ (Microsoft Corporation) C:\windows\SysWOW64\shlwapi.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00335872 _____ (Microsoft Corporation) C:\windows\SysWOW64\WinSATAPI.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00305152 _____ (Microsoft Corporation) C:\windows\SysWOW64\taskcomp.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00270848 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsmf.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00269824 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wldap32.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00246272 _____ (Microsoft Corporation) C:\windows\SysWOW64\scansetting.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00228352 _____ (Microsoft Corporation) C:\windows\SysWOW64\stobject.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00206848 _____ (Microsoft Corporation) C:\windows\SysWOW64\ws2_32.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00206848 _____ (Microsoft Corporation) C:\windows\SysWOW64\upnp.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00204800 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00172544 _____ (Microsoft Corporation) C:\windows\SysWOW64\spp.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpchttp.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00113664 _____ (Microsoft Corporation) C:\windows\SysWOW64\SessEnv.dll

2015-02-12 15:12 - 2010-11-20 07:21 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\userenv.dll

2015-02-12 15:12 - 2010-11-20 07:20 - 02494464 _____ (Microsoft Corporation) C:\windows\SysWOW64\netshell.dll

2015-02-12 15:12 - 2010-11-20 07:20 - 01414144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ole32.dll

2015-02-12 15:12 - 2010-11-20 07:20 - 00988160 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll

2015-02-12 15:12 - 2010-11-20 07:20 - 00932352 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.dll

2015-02-12 15:12 - 2010-11-20 07:20 - 00801280 _____ (Microsoft Corporation) C:\windows\SysWOW64\NaturalLanguage6.dll

2015-02-12 15:12 - 2010-11-20 07:20 - 00573440 _____ (Microsoft Corporation) C:\windows\SysWOW64\odbc32.dll

2015-02-12 15:12 - 2010-11-20 07:20 - 00563712 _____ (Microsoft Corporation) C:\windows\SysWOW64\netlogon.dll

2015-02-12 15:12 - 2010-11-20 07:20 - 00547840 _____ (Microsoft Corporation) C:\windows\SysWOW64\PortableDeviceApi.dll

2015-02-12 15:12 - 2010-11-20 07:20 - 00406528 _____ (Microsoft Corporation) C:\windows\SysWOW64\netcfgx.dll

2015-02-12 15:12 - 2010-11-20 07:20 - 00152064 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncsi.dll

2015-02-12 15:12 - 2010-11-20 07:20 - 00116736 _____ (Microsoft Corporation) C:\windows\SysWOW64\prncache.dll

2015-02-12 15:12 - 2010-11-20 07:19 - 02291712 _____ (Microsoft Corporation) C:\windows\SysWOW64\MSVidCtl.dll

2015-02-12 15:12 - 2010-11-20 07:19 - 02151936 _____ (Microsoft Corporation) C:\windows\SysWOW64\mmcndmgr.dll

2015-02-12 15:12 - 2010-11-20 07:19 - 01493504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ExplorerFrame.dll

2015-02-12 15:12 - 2010-11-20 07:19 - 00732160 _____ (Microsoft Corporation) C:\windows\SysWOW64\imapi2fs.dll

2015-02-12 15:12 - 2010-11-20 07:19 - 00606208 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstime.dll

2015-02-12 15:12 - 2010-11-20 07:19 - 00488448 _____ (Microsoft Corporation) C:\windows\SysWOW64\evr.dll

2015-02-12 15:12 - 2010-11-20 07:19 - 00389120 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll

2015-02-12 15:12 - 2010-11-20 07:19 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\msdrm.dll

2015-02-12 15:12 - 2010-11-20 07:19 - 00296448 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfds.dll

2015-02-12 15:12 - 2010-11-20 07:19 - 00257024 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll

2015-02-12 15:12 - 2010-11-20 07:19 - 00232448 _____ (Microsoft Corporation) C:\windows\SysWOW64\mswsock.dll

2015-02-12 15:12 - 2010-11-20 07:19 - 00206336 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedynos.dll

2015-02-12 15:12 - 2010-11-20 07:19 - 00196608 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfreadwrite.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 02522624 _____ (Microsoft Corporation) C:\windows\SysWOW64\dbgeng.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 01828352 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d9.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 01792000 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 01555456 _____ (Microsoft Corporation) C:\windows\SysWOW64\certmgr.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 01371136 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmcore.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 00854016 _____ (Microsoft Corporation) C:\windows\SysWOW64\dbghelp.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 00762880 _____ (Microsoft Corporation) C:\windows\SysWOW64\azroles.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 00640512 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 00530432 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 00522752 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d11.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 00508416 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxgi.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 00485888 _____ (Microsoft Corporation) C:\windows\SysWOW64\comdlg32.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 00342016 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 00323072 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvstore.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 00295936 _____ (Microsoft Corporation) C:\windows\SysWOW64\apphelp.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 00254464 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 00252928 _____ (Microsoft) C:\windows\SysWOW64\DShowRdpFilter.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\credui.dll

2015-02-12 15:12 - 2010-11-20 07:18 - 00091136 _____ (Microsoft Corporation) C:\windows\SysWOW64\dot3api.dll

2015-02-12 15:12 - 2010-11-20 07:17 - 02616320 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe

2015-02-12 15:12 - 2010-11-20 07:17 - 01049600 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe

2015-02-12 15:12 - 2010-11-20 07:17 - 00302592 _____ (Microsoft Corporation) C:\windows\SysWOW64\cmd.exe

2015-02-12 15:12 - 2010-11-20 07:17 - 00220672 _____ (Microsoft Corporation) C:\windows\SysWOW64\mcbuilder.exe

2015-02-12 15:12 - 2010-11-20 07:17 - 00192000 _____ (Microsoft Corporation) C:\windows\SysWOW64\taskeng.exe

2015-02-12 15:12 - 2010-11-20 07:17 - 00176128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ie4uinit.exe

2015-02-12 15:12 - 2010-11-20 07:17 - 00142336 _____ (Microsoft Corporation) C:\windows\SysWOW64\net1.exe

2015-02-12 15:12 - 2010-11-20 07:16 - 00776192 _____ (Microsoft Corporation) C:\windows\SysWOW64\calc.exe

2015-02-12 15:12 - 2010-11-20 07:08 - 00833024 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll

2015-02-12 15:12 - 2010-11-20 07:08 - 00311296 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll

2015-02-12 15:12 - 2010-11-20 05:52 - 00129536 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rasl2tp.sys

2015-02-12 15:12 - 2010-11-20 05:52 - 00082944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ipfltdrv.sys

2015-02-12 15:12 - 2010-11-20 05:44 - 00229888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\1394ohci.sys

2015-02-12 15:12 - 2010-11-20 04:27 - 00309248 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdbss.sys

2015-02-12 15:12 - 2010-11-20 04:26 - 00328192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\udfs.sys

2015-02-12 15:12 - 2010-11-20 04:26 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys

2015-02-12 15:12 - 2010-11-20 04:25 - 00753664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys

2015-02-12 15:12 - 2010-11-20 04:23 - 00261632 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netbt.sys

2015-02-12 15:12 - 2010-11-20 04:21 - 00119296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys

2015-02-12 15:12 - 2010-11-04 20:58 - 00049488 _____ (Microsoft Corporation) C:\windows\SysWOW64\netfxperf.dll

2015-02-12 15:12 - 2009-07-13 20:16 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\tcpmonui.dll

2015-02-12 15:11 - 2010-11-20 08:44 - 01077248 _____ (Microsoft Corporation) C:\windows\system32\Narrator.exe

2015-02-12 15:11 - 2010-11-20 08:44 - 00133632 _____ (Microsoft Corporation) C:\windows\system32\NAPHLPR.DLL

2015-02-12 15:11 - 2010-11-20 08:34 - 00363392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volmgrx.sys

2015-02-12 15:11 - 2010-11-20 08:33 - 00213888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdyboost.sys

2015-02-12 15:11 - 2010-11-20 08:33 - 00171392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\scsiport.sys

2015-02-12 15:11 - 2010-11-20 08:33 - 00155008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpio.sys

2015-02-12 15:11 - 2010-11-20 08:33 - 00103808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sbp2port.sys

2015-02-12 15:11 - 2010-11-20 08:33 - 00094592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mountmgr.sys

2015-02-12 15:11 - 2010-11-20 08:33 - 00063360 _____ (Microsoft Corporation) C:\windows\system32\Drivers\termdd.sys

2015-02-12 15:11 - 2010-11-20 08:33 - 00031104 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msahci.sys

2015-02-12 15:11 - 2010-11-20 08:33 - 00014720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hwpolicy.sys

2015-02-12 15:11 - 2010-11-20 08:32 - 02217856 _____ (Microsoft Corporation) C:\windows\system32\bootres.dll

2015-02-12 15:11 - 2010-11-20 08:32 - 00334208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\acpi.sys

2015-02-12 15:11 - 2010-11-20 08:32 - 00155520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys

2015-02-12 15:11 - 2010-11-20 08:32 - 00112000 _____ (Microsoft Corporation) C:\windows\system32\consent.exe

2015-02-12 15:11 - 2010-11-20 08:28 - 00166784 _____ (Microsoft Corporation) C:\windows\system32\basecsp.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 02250752 _____ (Microsoft Corporation) C:\windows\system32\SensorsCpl.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 02193920 _____ (Microsoft Corporation) C:\windows\system32\themecpl.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 02146816 _____ (Microsoft Corporation) C:\windows\system32\networkmap.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 01689600 _____ (Microsoft Corporation) C:\windows\system32\netcenter.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 01672704 _____ (Microsoft Corporation) C:\windows\system32\networkexplorer.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\sdengin2.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00933376 _____ (Microsoft Corporation) C:\windows\system32\SmiEngine.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00898560 _____ (Microsoft Corporation) C:\windows\system32\OobeFldr.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00812032 _____ (Microsoft Corporation) C:\windows\system32\wpccpl.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00781312 _____ (Microsoft Corporation) C:\windows\system32\wmdrmsdk.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00769536 _____ (Microsoft Corporation) C:\windows\system32\sud.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00762368 _____ (Microsoft Corporation) C:\windows\system32\sdcpl.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00691200 _____ (Microsoft Corporation) C:\windows\system32\VAN.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00641024 _____ (Microsoft Corporation) C:\windows\system32\msscp.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00633344 _____ (Microsoft Corporation) C:\windows\system32\riched20.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00625664 _____ (Microsoft Corporation) C:\windows\system32\usercpl.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00611840 _____ (Microsoft Corporation) C:\windows\system32\wpd_ci.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00486400 _____ (Microsoft Corporation) C:\windows\system32\powercpl.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00483840 _____ (Microsoft Corporation) C:\windows\system32\StructuredQuery.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00462336 _____ (Microsoft Corporation) C:\windows\system32\wiadefui.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00455168 _____ (Microsoft Corporation) C:\windows\system32\nshipsec.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00451072 _____ (Microsoft Corporation) C:\windows\system32\shwebsvc.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00446976 _____ (Microsoft Corporation) C:\windows\system32\sqlcese30.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00445952 _____ (Microsoft Corporation) C:\windows\system32\spwizeng.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00421888 _____ (Microsoft Corporation) C:\windows\system32\termmgr.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00419840 _____ (Microsoft Corporation) C:\windows\system32\systemcpl.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00416256 _____ (Microsoft Corporation) C:\windows\system32\prnfldr.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00414720 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00414208 _____ (Microsoft Corporation) C:\windows\system32\wlanui.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00403968 _____ (Microsoft Corporation) C:\windows\system32\untfs.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00372736 _____ (Microsoft Corporation) C:\windows\system32\mtxclu.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00366080 _____ (Microsoft Corporation) C:\windows\system32\zipfldr.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00358400 _____ (Microsoft Corporation) C:\windows\system32\wmpdxm.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00357888 _____ (Microsoft Corporation) C:\windows\system32\sharemediacpl.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00344576 _____ (Microsoft Corporation) C:\windows\system32\ntprint.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\srchadmin.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\tapisrv.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00313856 _____ (Microsoft Corporation) C:\windows\system32\ReAgent.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00300032 _____ (Microsoft Corporation) C:\windows\system32\pdh.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00290304 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00270848 _____ (Microsoft Corporation) C:\windows\system32\srrstr.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00268288 _____ (Microsoft Corporation) C:\windows\system32\MSAC3ENC.DLL

2015-02-12 15:11 - 2010-11-20 08:27 - 00255488 _____ (Microsoft Corporation) C:\windows\system32\wavemsp.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\taskbarcpl.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00232448 _____ (Microsoft Corporation) C:\windows\system32\sppcomapi.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00225280 _____ (Microsoft Corporation) C:\windows\system32\SndVolSSO.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00223232 _____ (Microsoft Corporation) C:\windows\system32\wmpsrcwp.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00222720 _____ (Microsoft Corporation) C:\windows\system32\wwanconn.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00221696 _____ (Microsoft Corporation) C:\windows\system32\OnLineIDCpl.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00217600 _____ (Microsoft Corporation) C:\windows\system32\WinSCard.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00215552 _____ (Microsoft Corporation) C:\windows\system32\netiohlp.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00211456 _____ (Microsoft Corporation) C:\windows\system32\rasppp.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00207360 _____ (Microsoft Corporation) C:\windows\system32\sysclass.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00200192 _____ (Microsoft Corporation) C:\windows\system32\syncui.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00196608 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00193024 _____ (Microsoft Corporation) C:\windows\system32\netplwiz.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00189952 _____ (Microsoft Corporation) C:\windows\system32\SmartcardCredentialProvider.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00188928 _____ (Microsoft Corporation) C:\windows\system32\netjoin.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00187904 _____ (Microsoft Corporation) C:\windows\system32\provsvc.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00185856 _____ (Microsoft Corporation) C:\windows\system32\vdsutil.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00172544 _____ (Microsoft Corporation) C:\windows\system32\twext.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00170496 _____ (Microsoft Corporation) C:\windows\system32\sdrsvc.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\prntvpt.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00154624 _____ (Microsoft Corporation) C:\windows\system32\uxlib.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00153088 _____ (Microsoft Corporation) C:\windows\system32\remotepg.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00146944 _____ (Microsoft Corporation) C:\windows\system32\recovery.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00130048 _____ (Microsoft Corporation) C:\windows\system32\shsetup.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00129536 _____ (Microsoft Corporation) C:\windows\system32\ntlanman.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00128000 _____ (Microsoft Corporation) C:\windows\system32\srvcli.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00118784 _____ (Microsoft Corporation) C:\windows\system32\wkssvc.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00115200 _____ (Microsoft Corporation) C:\windows\system32\WPDShServiceObj.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\QUTIL.DLL

2015-02-12 15:11 - 2010-11-20 08:27 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\sppnp.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00095232 _____ (Microsoft Corporation) C:\windows\system32\regapi.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00092672 _____ (Microsoft Corporation) C:\windows\system32\TabSvc.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\nci.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00084480 _____ (Microsoft Corporation) C:\windows\system32\UserAccountControlSettings.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00082944 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\wkscli.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\rdpd3d.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00067584 _____ (Microsoft Corporation) C:\windows\system32\samcli.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\wsnmp32.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\ncryptui.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\RpcRtRemote.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\wscapi.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\rtutils.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\wwanprotdim.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00040960 _____ (Microsoft Corporation) C:\windows\system32\TsUsbGDCoInstaller.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\vpnikeapi.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\msvidc32.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\sisbkup.dll

2015-02-12 15:11 - 2010-11-20 08:27 - 00015360 _____ (Microsoft Corporation) C:\windows\system32\slwga.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 01202176 _____ (Microsoft Corporation) C:\windows\system32\DiagCpl.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 01066496 _____ (Microsoft Corporation) C:\windows\system32\Display.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00861184 _____ (Microsoft Corporation) C:\windows\system32\fontext.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00701440 _____ (Microsoft Corporation) C:\windows\system32\dsuiext.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00508928 _____ (Microsoft Corporation) C:\windows\system32\DeviceCenter.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00495104 _____ (Microsoft Corporation) C:\windows\system32\drmmgrtn.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00355328 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00345600 _____ (Microsoft Corporation) C:\windows\system32\MediaMetadataHandler.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00332288 _____ (Microsoft Corporation) C:\windows\system32\hgcpl.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00304128 _____ (Microsoft Corporation) C:\windows\system32\efscore.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00282624 _____ (Microsoft Corporation) C:\windows\system32\iTVData.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00281088 _____ (Microsoft Corporation) C:\windows\system32\iprtrmgr.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00279552 _____ (Microsoft Corporation) C:\windows\system32\dxdiagn.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00252416 _____ (Microsoft Corporation) C:\windows\system32\dot3svc.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00240640 _____ (Microsoft Corporation) C:\windows\system32\MFPlay.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00239616 _____ (Microsoft Corporation) C:\windows\system32\dskquoui.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00233984 _____ (Microsoft Corporation) C:\windows\system32\defaultlocationcpl.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00232448 _____ (Microsoft Corporation) C:\windows\system32\ListSvc.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00225280 _____ (Microsoft Corporation) C:\windows\system32\DevicePairingFolder.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00211456 _____ (Microsoft Corporation) C:\windows\system32\mprddm.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00186880 _____ (Microsoft Corporation) C:\windows\system32\logoncli.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00162816 _____ (Microsoft Corporation) C:\windows\system32\dps.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\dnscmmc.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00116224 _____ (Windows ® Codename Longhorn DDK provider) C:\windows\system32\fms.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\iasacct.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00078848 _____ (Microsoft Corporation) C:\windows\system32\hbaapi.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00072192 _____ (Microsoft Corporation) C:\windows\system32\fdeploy.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\dot3cfg.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00054272 _____ (Microsoft Corporation) C:\windows\system32\iyuv_32.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\lsmproxy.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00045056 _____ (Microsoft Corporation) C:\windows\system32\httpapi.dll

2015-02-12 15:11 - 2010-11-20 08:26 - 00041472 _____ (Microsoft Corporation) C:\windows\system32\mimefilt.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 03745792 _____ (Microsoft Corporation) C:\windows\system32\accessibilitycpl.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 03524608 _____ (Microsoft Corporation) C:\windows\system32\sppsvc.exe

2015-02-12 15:11 - 2010-11-20 08:25 - 01264640 _____ (Microsoft Corporation) C:\windows\system32\sdclt.exe

2015-02-12 15:11 - 2010-11-20 08:25 - 01065984 _____ (Microsoft Corporation) C:\windows\system32\cryptui.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00780800 _____ (Microsoft Corporation) C:\windows\system32\ActionCenter.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00749568 _____ (Microsoft Corporation) C:\windows\system32\batmeter.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00726528 _____ (Microsoft Corporation) C:\windows\system32\AuxiliaryDisplayCpl.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00549888 _____ (Microsoft Corporation) C:\windows\system32\ActionCenterCPL.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00472064 _____ (Microsoft Corporation) C:\windows\system32\azroleui.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00460800 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00349696 _____ (Microsoft Corporation) C:\windows\system32\slui.exe

2015-02-12 15:11 - 2010-11-20 08:25 - 00314368 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00279040 _____ (Microsoft Corporation) C:\windows\system32\sethc.exe

2015-02-12 15:11 - 2010-11-20 08:25 - 00273920 _____ (Microsoft Corporation) C:\windows\system32\SndVol.exe

2015-02-12 15:11 - 2010-11-20 08:25 - 00257024 _____ (Microsoft Corporation) C:\windows\system32\taskmgr.exe

2015-02-12 15:11 - 2010-11-20 08:25 - 00238080 _____ (Microsoft Corporation) C:\windows\system32\recdisc.exe

2015-02-12 15:11 - 2010-11-20 08:25 - 00168448 _____ (Microsoft Corporation) C:\windows\system32\bcdsrv.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00155136 _____ (Microsoft Corporation) C:\windows\system32\autoplay.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\net1.exe

2015-02-12 15:11 - 2010-11-20 08:25 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\cabview.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\AuxiliaryDisplayServices.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\AxInstSv.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00109568 _____ (Microsoft Corporation) C:\windows\system32\nslookup.exe

2015-02-12 15:11 - 2010-11-20 08:25 - 00095232 _____ (Microsoft Corporation) C:\windows\system32\cca.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00094720 _____ (Microsoft Corporation) C:\windows\system32\cabinet.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00088576 _____ (Microsoft Corporation) C:\windows\system32\setupcl.exe

2015-02-12 15:11 - 2010-11-20 08:25 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\asycfilt.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00080384 _____ (Microsoft Corporation) C:\windows\system32\certprop.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\taskhost.exe

2015-02-12 15:11 - 2010-11-20 08:25 - 00058368 _____ (Microsoft Corporation) C:\windows\system32\tzutil.exe

2015-02-12 15:11 - 2010-11-20 08:25 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\acppage.dll

2015-02-12 15:11 - 2010-11-20 08:25 - 00031744 _____ (Microsoft Corporation) C:\windows\system32\proquota.exe

2015-02-12 15:11 - 2010-11-20 08:25 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\userinit.exe

2015-02-12 15:11 - 2010-11-20 08:25 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll

2015-02-12 15:11 - 2010-11-20 08:24 - 01538560 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl

2015-02-12 15:11 - 2010-11-20 08:24 - 00957440 _____ (Microsoft Corporation) C:\windows\system32\mblctr.exe

2015-02-12 15:11 - 2010-11-20 08:24 - 00793088 _____ (Microsoft Corporation) C:\windows\system32\autoconv.exe

2015-02-12 15:11 - 2010-11-20 08:24 - 00777728 _____ (Microsoft Corporation) C:\windows\system32\autochk.exe

2015-02-12 15:11 - 2010-11-20 08:24 - 00763904 _____ (Microsoft Corporation) C:\windows\system32\autofmt.exe

2015-02-12 15:11 - 2010-11-20 08:24 - 00726528 _____ (Microsoft Corporation) C:\windows\system32\appwiz.cpl

2015-02-12 15:11 - 2010-11-20 08:24 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\bthprops.cpl

2015-02-12 15:11 - 2010-11-20 08:24 - 00684032 _____ (Microsoft Corporation) C:\windows\system32\TabletPC.cpl

2015-02-12 15:11 - 2010-11-20 08:24 - 00606208 _____ (Microsoft Corporation) C:\windows\system32\dfrgui.exe

2015-02-12 15:11 - 2010-11-20 08:24 - 00474112 _____ (Microsoft Corporation) C:\windows\system32\sysmon.ocx

2015-02-12 15:11 - 2010-11-20 08:24 - 00373248 _____ (Microsoft Corporation) C:\windows\system32\intl.cpl

2015-02-12 15:11 - 2010-11-20 08:24 - 00359936 _____ (Microsoft Corporation) C:\windows\system32\eudcedit.exe

2015-02-12 15:11 - 2010-11-20 08:24 - 00352768 _____ (Microsoft Corporation) C:\windows\system32\sysdm.cpl

2015-02-12 15:11 - 2010-11-20 08:24 - 00346112 _____ (Microsoft Corporation) C:\windows\system32\bcdedit.exe

2015-02-12 15:11 - 2010-11-20 08:24 - 00333824 _____ (Microsoft Corporation) C:\windows\system32\ssText3d.scr

2015-02-12 15:11 - 2010-11-20 08:24 - 00321536 _____ (Microsoft Corporation) C:\windows\system32\unimdm.tsp

2015-02-12 15:11 - 2010-11-20 08:24 - 00300032 _____ (Microsoft Corporation) C:\windows\system32\msconfig.exe

2015-02-12 15:11 - 2010-11-20 08:24 - 00250880 _____ (Microsoft Corporation) C:\windows\system32\ksproxy.ax

2015-02-12 15:11 - 2010-11-20 08:24 - 00217088 _____ (Microsoft Corporation) C:\windows\system32\wdmaud.drv

2015-02-12 15:11 - 2010-11-20 08:24 - 00196096 _____ (Microsoft Corporation) C:\windows\system32\VBICodec.ax

2015-02-12 15:11 - 2010-11-20 08:24 - 00175616 _____ (Microsoft Corporation) C:\windows\system32\bcdboot.exe

2015-02-12 15:11 - 2010-11-20 08:24 - 00173568 _____ (Microsoft Corporation) C:\windows\system32\powercfg.cpl

2015-02-12 15:11 - 2010-11-20 08:24 - 00128000 _____ (Microsoft Corporation) C:\windows\system32\msiexec.exe

2015-02-12 15:11 - 2010-11-20 08:24 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe

2015-02-12 15:11 - 2010-11-20 08:24 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\kstvtune.ax

2015-02-12 15:11 - 2010-11-20 08:24 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\WSTPager.ax

2015-02-12 15:11 - 2010-11-20 08:24 - 00091648 _____ (Microsoft Corporation) C:\windows\system32\isoburn.exe

2015-02-12 15:11 - 2010-11-20 08:24 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\ksxbar.ax

2015-02-12 15:11 - 2010-11-20 08:24 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\ftp.exe

2015-02-12 15:11 - 2010-11-20 07:36 - 00107008 _____ (Microsoft Corporation) C:\windows\SysWOW64\NAPHLPR.DLL

2015-02-12 15:11 - 2010-11-20 07:21 - 02311168 _____ (Microsoft Corporation) C:\windows\SysWOW64\wpdshext.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 02202624 _____ (Microsoft Corporation) C:\windows\SysWOW64\SensorsCpl.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 02157568 _____ (Microsoft Corporation) C:\windows\SysWOW64\themecpl.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 02146304 _____ (Microsoft Corporation) C:\windows\SysWOW64\SyncCenter.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 01624064 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPEncEn.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 01326592 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanpref.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 01227776 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdc.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 01003008 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMNetMgr.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00933376 _____ (Microsoft Corporation) C:\windows\SysWOW64\Vault.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00782336 _____ (Microsoft Corporation) C:\windows\SysWOW64\webservices.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00755200 _____ (Microsoft Corporation) C:\windows\SysWOW64\sud.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00738816 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmpmde.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00638976 _____ (Microsoft Corporation) C:\windows\SysWOW64\VAN.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00600064 _____ (Microsoft Corporation) C:\windows\SysWOW64\usercpl.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00473600 _____ (Microsoft Corporation) C:\windows\SysWOW64\riched20.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00428544 _____ (Microsoft Corporation) C:\windows\SysWOW64\shwebsvc.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00428032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00416768 _____ (Microsoft Corporation) C:\windows\SysWOW64\wiadefui.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00411648 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlangpui.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00410624 _____ (Microsoft Corporation) C:\windows\SysWOW64\systemcpl.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00410112 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanui.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00372224 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00363520 _____ (Microsoft Corporation) C:\windows\SysWOW64\StructuredQuery.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00352768 _____ (Microsoft Corporation) C:\windows\SysWOW64\termmgr.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00352768 _____ (Microsoft Corporation) C:\windows\SysWOW64\spwizeng.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00346624 _____ (Microsoft Corporation) C:\windows\SysWOW64\untfs.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00328192 _____ (Microsoft Corporation) C:\windows\SysWOW64\shsvcs.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00327680 _____ (Microsoft Corporation) C:\windows\SysWOW64\zipfldr.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00307712 _____ (Microsoft Corporation) C:\windows\SysWOW64\scesrv.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\srchadmin.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00276992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wcncsvc.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\ReAgent.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00242176 _____ (Microsoft Corporation) C:\windows\SysWOW64\tapisrv.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00222208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wavemsp.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\SndVolSSO.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00194048 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmm.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00193536 _____ (Microsoft Corporation) C:\windows\SysWOW64\sppcomapi.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00182272 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmpsrcwp.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00181760 _____ (Microsoft Corporation) C:\windows\SysWOW64\tcpipcfg.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00176640 _____ (Microsoft Corporation) C:\windows\SysWOW64\rasppp.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00175616 _____ (Microsoft Corporation) C:\windows\SysWOW64\scecli.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\syncui.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00156672 _____ (Microsoft Corporation) C:\windows\SysWOW64\winsta.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00152064 _____ (Microsoft Corporation) C:\windows\SysWOW64\SmartcardCredentialProvider.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00135168 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsRasterService.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00134656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WinSCard.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00111104 _____ (Microsoft Corporation) C:\windows\SysWOW64\shsetup.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\t2embed.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00082944 _____ (Microsoft Corporation) C:\windows\SysWOW64\thumbcache.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00072192 _____ (Microsoft Corporation) C:\windows\SysWOW64\regapi.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00051712 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscapi.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\samcli.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00046080 _____ (Microsoft Corporation) C:\windows\SysWOW64\RpcRtRemote.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00037376 _____ (Microsoft Corporation) C:\windows\SysWOW64\rtutils.dll

2015-02-12 15:11 - 2010-11-20 07:21 - 00019456 _____ (Microsoft Corporation) C:\windows\SysWOW64\sisbkup.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 02504192 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVCORE.DLL

2015-02-12 15:11 - 2010-11-20 07:20 - 02130944 _____ (Microsoft Corporation) C:\windows\SysWOW64\networkmap.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 01750528 _____ (Microsoft Corporation) C:\windows\SysWOW64\pnidui.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 01644032 _____ (Microsoft Corporation) C:\windows\SysWOW64\netcenter.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 01508864 _____ (Microsoft Corporation) C:\windows\SysWOW64\pla.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00859648 _____ (Microsoft Corporation) C:\windows\SysWOW64\OobeFldr.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00656384 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00600576 _____ (Microsoft Corporation) C:\windows\SysWOW64\PerfCenterCPL.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00441856 _____ (Microsoft Corporation) C:\windows\SysWOW64\powercpl.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00395264 _____ (Microsoft Corporation) C:\windows\SysWOW64\prnfldr.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00346112 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshipsec.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00324608 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00297472 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntprint.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00295424 _____ (Microsoft Corporation) C:\windows\SysWOW64\photowiz.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00225792 _____ (Microsoft Corporation) C:\windows\SysWOW64\netdiagfx.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00218112 _____ (Microsoft Corporation) C:\windows\SysWOW64\OnLineIDCpl.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00199168 _____ (Microsoft Corporation) C:\windows\SysWOW64\onex.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00175616 _____ (Microsoft Corporation) C:\windows\SysWOW64\netplwiz.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00171520 _____ (Microsoft Corporation) C:\windows\SysWOW64\QAGENT.DLL

2015-02-12 15:11 - 2010-11-20 07:20 - 00167936 _____ (Microsoft Corporation) C:\windows\SysWOW64\QSHVHOST.DLL

2015-02-12 15:11 - 2010-11-20 07:20 - 00166400 _____ (Microsoft Corporation) C:\windows\SysWOW64\netiohlp.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00165376 _____ (Microsoft Corporation) C:\windows\SysWOW64\provsvc.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00161792 _____ (Microsoft Corporation) C:\windows\SysWOW64\netjoin.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00120320 _____ (Microsoft Corporation) C:\windows\SysWOW64\prntvpt.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00117248 _____ (Microsoft Corporation) C:\windows\SysWOW64\netid.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00078848 _____ (Microsoft Corporation) C:\windows\SysWOW64\nci.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntlanman.dll

2015-02-12 15:11 - 2010-11-20 07:20 - 00052224 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00856576 _____ (Microsoft Corporation) C:\windows\SysWOW64\FirewallControlPanel.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00830464 _____ (Microsoft Corporation) C:\windows\SysWOW64\MSMPEG2ENC.DLL

2015-02-12 15:11 - 2010-11-20 07:19 - 00828928 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontext.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00592384 _____ (Microsoft Corporation) C:\windows\SysWOW64\msftedit.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00481792 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscms.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00429056 _____ (Microsoft Corporation) C:\windows\SysWOW64\localsec.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00400896 _____ (Microsoft Corporation) C:\windows\SysWOW64\ipsmsnap.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00392192 _____ (Microsoft Corporation) C:\windows\SysWOW64\imapi2.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00320512 _____ (Microsoft Corporation) C:\windows\SysWOW64\mtxclu.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00320512 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00312832 _____ (Microsoft Corporation) C:\windows\SysWOW64\hgcpl.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00271360 _____ (Microsoft Corporation) C:\windows\SysWOW64\iprtrmgr.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00268800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mprddm.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00266752 _____ (Microsoft Corporation) C:\windows\SysWOW64\MediaMetadataHandler.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00226304 _____ (Microsoft Corporation) C:\windows\SysWOW64\MSAC3ENC.DLL

2015-02-12 15:11 - 2010-11-20 07:19 - 00216576 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL

2015-02-12 15:11 - 2010-11-20 07:19 - 00213504 _____ (Microsoft Corporation) C:\windows\SysWOW64\MMDevAPI.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00202752 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedyn.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00186368 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\iasrad.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00167936 _____ (Microsoft Corporation) C:\windows\SysWOW64\msutb.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00148992 _____ (Microsoft Corporation) C:\windows\SysWOW64\ifsutil.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\logoncli.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00124416 _____ (Microsoft Corporation) C:\windows\SysWOW64\fde.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00114688 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\IPHLPAPI.DLL

2015-02-12 15:11 - 2010-11-20 07:19 - 00101888 _____ (Microsoft Corporation) C:\windows\SysWOW64\migisol.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00093696 _____ (Windows ® Codename Longhorn DDK provider) C:\windows\SysWOW64\fms.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00078848 _____ (Microsoft Corporation) C:\windows\SysWOW64\iasacct.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00066560 _____ (Microsoft Corporation) C:\windows\SysWOW64\hbaapi.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00059904 _____ (Microsoft Corporation) C:\windows\SysWOW64\fdeploy.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00044544 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00042496 _____ (Microsoft Corporation) C:\windows\SysWOW64\mimefilt.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\httpapi.dll

2015-02-12 15:11 - 2010-11-20 07:19 - 00034304 _____ (Microsoft Corporation) C:\windows\SysWOW64\msasn1.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 03727872 _____ (Microsoft Corporation) C:\windows\SysWOW64\accessibilitycpl.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 01400320 _____ (Microsoft Corporation) C:\windows\SysWOW64\DxpTaskSync.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 01040384 _____ (Microsoft Corporation) C:\windows\SysWOW64\Display.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 01003520 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptui.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00744448 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActionCenter.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00743424 _____ (Microsoft Corporation) C:\windows\SysWOW64\blackbox.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00740864 _____ (Microsoft Corporation) C:\windows\SysWOW64\batmeter.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00665600 _____ (Microsoft Corporation) C:\windows\SysWOW64\AuxiliaryDisplayCpl.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00630784 _____ (Microsoft Corporation) C:\windows\SysWOW64\DXPTaskRingtone.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00537600 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActionCenterCPL.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00484864 _____ (Microsoft Corporation) C:\windows\SysWOW64\DeviceCenter.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00333824 _____ (Microsoft Corporation) C:\windows\SysWOW64\dot3ui.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00314368 _____ (Microsoft Corporation) C:\windows\SysWOW64\azroleui.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00309760 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00257024 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpx.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00222208 _____ (Microsoft Corporation) C:\windows\SysWOW64\eapphost.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00220672 _____ (Microsoft Corporation) C:\windows\SysWOW64\defaultlocationcpl.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00205312 _____ (Microsoft Corporation) C:\windows\SysWOW64\efscore.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00202752 _____ (Microsoft Corporation) C:\windows\SysWOW64\activeds.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00196608 _____ (Microsoft Corporation) C:\windows\SysWOW64\dskquoui.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00195584 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00186880 _____ (Microsoft Corporation) C:\windows\SysWOW64\adsldp.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00146944 _____ (Microsoft Corporation) C:\windows\SysWOW64\autoplay.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00132608 _____ (Microsoft Corporation) C:\windows\SysWOW64\cabview.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\dnscmmc.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00082432 _____ (Microsoft Corporation) C:\windows\SysWOW64\dot3cfg.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00067584 _____ (Microsoft Corporation) C:\windows\SysWOW64\asycfilt.dll

2015-02-12 15:11 - 2010-11-20 07:18 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll

2015-02-12 15:11 - 2010-11-20 07:17 - 00586752 _____ (Microsoft Corporation) C:\windows\SysWOW64\dfrgui.exe

2015-02-12 15:11 - 2010-11-20 07:17 - 00314880 _____ (Microsoft Corporation) C:\windows\SysWOW64\wusa.exe

2015-02-12 15:11 - 2010-11-20 07:17 - 00314368 _____ (Microsoft Corporation) C:\windows\SysWOW64\SndVol.exe

2015-02-12 15:11 - 2010-11-20 07:17 - 00303104 _____ (Microsoft Corporation) C:\windows\SysWOW64\msinfo32.exe

2015-02-12 15:11 - 2010-11-20 07:17 - 00288256 _____ (Microsoft Corporation) C:\windows\SysWOW64\eudcedit.exe

2015-02-12 15:11 - 2010-11-20 07:17 - 00270336 _____ (Microsoft Corporation) C:\windows\SysWOW64\sethc.exe

2015-02-12 15:11 - 2010-11-20 07:17 - 00227328 _____ (Microsoft Corporation) C:\windows\SysWOW64\taskmgr.exe

2015-02-12 15:11 - 2010-11-20 07:17 - 00179712 _____ (Microsoft Corporation) C:\windows\SysWOW64\schtasks.exe

2015-02-12 15:11 - 2010-11-20 07:17 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe

2015-02-12 15:11 - 2010-11-20 07:17 - 00098816 _____ (Microsoft) C:\windows\SysWOW64\Robocopy.exe

2015-02-12 15:11 - 2010-11-20 07:17 - 00086528 _____ (Microsoft Corporation) C:\windows\SysWOW64\isoburn.exe

2015-02-12 15:11 - 2010-11-20 07:17 - 00066048 _____ (Microsoft Corporation) C:\windows\SysWOW64\w32tm.exe

2015-02-12 15:11 - 2010-11-20 07:17 - 00042496 _____ (Microsoft Corporation) C:\windows\SysWOW64\ftp.exe

2015-02-12 15:11 - 2010-11-20 07:17 - 00028672 _____ (Microsoft Corporation) C:\windows\SysWOW64\proquota.exe

2015-02-12 15:11 - 2010-11-20 07:17 - 00026624 _____ (Microsoft Corporation) C:\windows\SysWOW64\userinit.exe

2015-02-12 15:11 - 2010-11-20 07:16 - 01466368 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl

2015-02-12 15:11 - 2010-11-20 07:16 - 00905216 _____ (Microsoft Corporation) C:\windows\SysWOW64\mmsys.cpl

2015-02-12 15:11 - 2010-11-20 07:16 - 00692736 _____ (Microsoft Corporation) C:\windows\SysWOW64\bthprops.cpl

2015-02-12 15:11 - 2010-11-20 07:16 - 00679424 _____ (Microsoft Corporation) C:\windows\SysWOW64\autoconv.exe

2015-02-12 15:11 - 2010-11-20 07:16 - 00668160 _____ (Microsoft Corporation) C:\windows\SysWOW64\autochk.exe

2015-02-12 15:11 - 2010-11-20 07:16 - 00658944 _____ (Microsoft Corporation) C:\windows\SysWOW64\autofmt.exe

2015-02-12 15:11 - 2010-11-20 07:16 - 00649216 _____ (Microsoft Corporation) C:\windows\SysWOW64\appwiz.cpl

2015-02-12 15:11 - 2010-11-20 07:16 - 00516096 _____ (Microsoft Corporation) C:\windows\SysWOW64\main.cpl

2015-02-12 15:11 - 2010-11-20 07:16 - 00413696 _____ (Microsoft Corporation) C:\windows\SysWOW64\PhotoScreensaver.scr

2015-02-12 15:11 - 2010-11-20 07:16 - 00389632 _____ (Microsoft Corporation) C:\windows\SysWOW64\sysmon.ocx

2015-02-12 15:11 - 2010-11-20 07:16 - 00345088 _____ (Microsoft Corporation) C:\windows\SysWOW64\intl.cpl

2015-02-12 15:11 - 2010-11-20 07:16 - 00326656 _____ (Microsoft Corporation) C:\windows\SysWOW64\sysdm.cpl

2015-02-12 15:11 - 2010-11-20 07:16 - 00320000 _____ (Microsoft Corporation) C:\windows\SysWOW64\winspool.drv

2015-02-12 15:11 - 2010-11-20 07:16 - 00193536 _____ (Microsoft Corporation) C:\windows\SysWOW64\ksproxy.ax

2015-02-12 15:11 - 2010-11-20 07:16 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdmaud.drv

2015-02-12 15:11 - 2010-11-20 07:16 - 00068608 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSTPager.ax

2015-02-12 15:11 - 2010-11-20 06:04 - 00248832 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe

2015-02-12 15:11 - 2010-11-20 06:04 - 00039424 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys

2015-02-12 15:11 - 2010-11-20 05:52 - 00164352 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndiswan.sys

2015-02-12 15:11 - 2010-11-20 05:52 - 00111104 _____ (Microsoft Corporation) C:\windows\system32\Drivers\raspptp.sys

2015-02-12 15:11 - 2010-11-20 05:52 - 00088576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wanarp.sys

2015-02-12 15:11 - 2010-11-20 05:52 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndproxy.sys

2015-02-12 15:11 - 2010-11-20 05:44 - 00184960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys

2015-02-12 15:11 - 2010-11-20 05:43 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys

2015-02-12 15:11 - 2010-11-20 05:43 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\winusb.sys

2015-02-12 15:11 - 2010-11-20 05:33 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys

2015-02-12 15:11 - 2010-11-20 04:37 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sdbus.sys

2015-02-12 15:11 - 2010-11-04 21:11 - 00433512 _____ (Microsoft Corporation) C:\windows\system32\MCEWMDRMNDBootstrap.dll

2015-02-12 15:11 - 2010-11-04 21:11 - 00312168 _____ (Microsoft Corporation) C:\windows\SysWOW64\MCEWMDRMNDBootstrap.dll

2015-02-12 15:11 - 2010-11-04 20:58 - 00155472 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscorier.dll

2015-02-12 15:11 - 2010-11-04 20:58 - 00080720 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscories.dll

2015-02-12 15:11 - 2010-11-04 20:57 - 00154960 _____ (Microsoft Corporation) C:\windows\system32\mscorier.dll

2015-02-12 15:10 - 2010-11-20 08:44 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\NAPCRYPT.DLL

2015-02-12 15:10 - 2010-11-20 08:27 - 01911808 _____ (Microsoft Corporation) C:\windows\system32\OpcServices.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 01232896 _____ (Microsoft Corporation) C:\windows\system32\WMADMOD.DLL

2015-02-12 15:10 - 2010-11-20 08:27 - 01080320 _____ (Microsoft Corporation) C:\windows\system32\onexui.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00978944 _____ (Microsoft Corporation) C:\windows\system32\WMSPDMOD.DLL

2015-02-12 15:10 - 2010-11-20 08:27 - 00666112 _____ (Microsoft Corporation) C:\windows\system32\WMVSDECD.DLL

2015-02-12 15:10 - 2010-11-20 08:27 - 00636416 _____ (Microsoft Corporation) C:\windows\system32\wmdrmdev.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00594432 _____ (Microsoft Corporation) C:\windows\system32\wvc.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00527872 _____ (Microsoft Corporation) C:\windows\system32\wmdrmnet.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00435712 _____ (Microsoft Corporation) C:\windows\system32\PortableDeviceStatus.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00431104 _____ (Microsoft Corporation) C:\windows\system32\WPDSp.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00392192 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00337920 _____ (Microsoft Corporation) C:\windows\system32\raschap.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00325632 _____ (Microsoft Corporation) C:\windows\system32\msnetobj.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00254464 _____ (Microsoft Corporation) C:\windows\system32\qasf.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00250880 _____ (Microsoft Corporation) C:\windows\system32\qdv.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00238080 _____ (Microsoft Corporation) C:\windows\system32\mstask.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\PortableDeviceSyncProvider.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00222208 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\wpdwcn.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\vdsbas.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00181248 _____ (Microsoft Corporation) C:\windows\system32\qcap.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00145920 _____ (Microsoft Corporation) C:\windows\system32\sppc.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00143360 _____ (Microsoft Corporation) C:\windows\system32\mydocs.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\shacct.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00132608 _____ (Microsoft Corporation) C:\windows\system32\wmpshell.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00124928 _____ (Microsoft Corporation) C:\windows\system32\wiavideo.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00124416 _____ (Microsoft Corporation) C:\windows\system32\QSVRMGMT.DLL

2015-02-12 15:10 - 2010-11-20 08:27 - 00121856 _____ (Microsoft Corporation) C:\windows\system32\secproc_ssp_isv.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00121856 _____ (Microsoft Corporation) C:\windows\system32\secproc_ssp.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\QCLIPROV.DLL

2015-02-12 15:10 - 2010-11-20 08:27 - 00078848 _____ (Microsoft Corporation) C:\windows\system32\spbcd.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00073728 _____ (Microsoft Corporation) C:\windows\system32\tlscsp.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00073216 _____ (Microsoft Corporation) C:\windows\system32\unimdmat.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00072192 _____ (Microsoft Corporation) C:\windows\system32\napdsnap.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\vfwwdm32.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\WavDest.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\vss_ps.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00059904 _____ (Microsoft Corporation) C:\windows\system32\umb.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\odbcconf.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\PrintIsolationProxy.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\wshbth.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00037376 _____ (Microsoft Corporation) C:\windows\system32\shimgvw.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00036352 _____ (Microsoft Corporation) C:\windows\system32\wdiasqmmodule.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\msdmo.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\seclogon.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\netutils.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\shgina.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\wsdchngr.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\msyuv.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\schedcli.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00023040 _____ (Microsoft Corporation) C:\windows\system32\rdprefdrvapi.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00021504 _____ (Microsoft Corporation) C:\windows\system32\TRAPI.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00018944 _____ (Microsoft Corporation) C:\windows\system32\spopk.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\syssetup.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00016896 _____ (Microsoft Corporation) C:\windows\system32\muifontsetup.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\msrle32.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00015360 _____ (Microsoft Corporation) C:\windows\system32\nrpsrv.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\tsbyuv.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\wshirda.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\sscore.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\shunimpl.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00010752 _____ (Microsoft Corporation) C:\windows\system32\riched32.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00010240 _____ (Microsoft Corporation) C:\windows\system32\rdpcfgex.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00009728 _____ (Microsoft Corporation) C:\windows\system32\spwmp.dll

2015-02-12 15:10 - 2010-11-20 08:27 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\msdxm.ocx

2015-02-12 15:10 - 2010-11-20 08:27 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\dxmasf.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 01087488 _____ (Microsoft Corporation) C:\windows\system32\dbghelp.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00623104 _____ (Microsoft Corporation) C:\windows\system32\FXSAPI.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00434688 _____ (Microsoft Corporation) C:\windows\system32\FXSTIFF.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00313344 _____ (Microsoft Corporation) C:\windows\system32\dot3ui.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\iasrecst.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00194048 _____ (Microsoft Corporation) C:\windows\system32\itircl.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00180736 _____ (Microsoft Corporation) C:\windows\system32\ifsutil.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00144896 _____ (Microsoft Corporation) C:\windows\system32\EhStorAPI.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00125440 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00121344 _____ (Microsoft Corporation) C:\windows\system32\fphc.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00103936 _____ (Microsoft Corporation) C:\windows\system32\eappgnui.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00103936 _____ (Microsoft Corporation) C:\windows\system32\dot3msm.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00091648 _____ (Microsoft Corporation) C:\windows\system32\mapistub.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00091648 _____ (Microsoft Corporation) C:\windows\system32\mapi32.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00090624 _____ (Microsoft Corporation) C:\windows\system32\KMSVC.DLL

2015-02-12 15:10 - 2010-11-20 08:26 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\Mcx2Svc.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00074240 _____ (Microsoft Corporation) C:\windows\system32\fdProxy.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\inetmib1.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\luainstall.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\FXSMON.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00041472 _____ (Microsoft Corporation) C:\windows\system32\mciqtz32.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00037376 _____ (Microsoft Corporation) C:\windows\system32\iscsium.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\dsauth.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00027136 _____ (Microsoft Corporation) C:\windows\system32\HotStartUserAgent.dll

2015-02-12 15:10 - 2010-11-20 08:26 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\elsTrans.dll

2015-02-12 15:10 - 2010-11-20 08:25 - 00840192 _____ (Microsoft Corporation) C:\windows\system32\blackbox.dll

2015-02-12 15:10 - 2010-11-20 08:25 - 00395776 _____ (Microsoft Corporation) C:\windows\system32\nltest.exe

2015-02-12 15:10 - 2010-11-20 08:25 - 00306688 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_ssp.exe

2015-02-12 15:10 - 2010-11-20 08:25 - 00305152 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_ssp_isv.exe

2015-02-12 15:10 - 2010-11-20 08:25 - 00294912 _____ (Microsoft Corporation) C:\windows\system32\WindowsAnytimeUpgradeResults.exe

2015-02-12 15:10 - 2010-11-20 08:25 - 00293888 _____ (Microsoft Corporation) C:\windows\system32\wsqmcons.exe

2015-02-12 15:10 - 2010-11-20 08:25 - 00213504 _____ (Microsoft Corporation) C:\windows\system32\ActionQueue.dll

2015-02-12 15:10 - 2010-11-20 08:25 - 00172544 _____ (Microsoft Corporation) C:\windows\system32\perfmon.exe

2015-02-12 15:10 - 2010-11-20 08:25 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe

2015-02-12 15:10 - 2010-11-20 08:25 - 00089088 _____ (Microsoft Corporation) C:\windows\system32\amstream.dll

2015-02-12 15:10 - 2010-11-20 08:25 - 00078848 _____ (Microsoft Corporation) C:\windows\system32\tabcal.exe

2015-02-12 15:10 - 2010-11-20 08:25 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\CertPolEng.dll

2015-02-12 15:10 - 2010-11-20 08:25 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\takeown.exe

2015-02-12 15:10 - 2010-11-20 08:25 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\PnPUnattend.exe

2015-02-12 15:10 - 2010-11-20 08:25 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\runonce.exe

2015-02-12 15:10 - 2010-11-20 08:25 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\repair-bde.exe

2015-02-12 15:10 - 2010-11-20 08:25 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\MultiDigiMon.exe

2015-02-12 15:10 - 2010-11-20 08:25 - 00046080 _____ (Microsoft Corporation) C:\windows\system32\cscapi.dll

2015-02-12 15:10 - 2010-11-20 08:25 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\relog.exe

2015-02-12 15:10 - 2010-11-20 08:25 - 00031744 _____ (Microsoft Corporation) C:\windows\system32\AzSqlExt.dll

2015-02-12 15:10 - 2010-11-20 08:25 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\cscdll.dll

2015-02-12 15:10 - 2010-11-20 08:25 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe

2015-02-12 15:10 - 2010-11-20 08:25 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\bitsperf.dll

2015-02-12 15:10 - 2010-11-20 08:25 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\BWUnpairElevated.dll

2015-02-12 15:10 - 2010-11-20 08:25 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\browseui.dll

2015-02-12 15:10 - 2010-11-20 08:25 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\C_ISCII.DLL

2015-02-12 15:10 - 2010-11-20 08:25 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00899584 _____ (Microsoft Corporation) C:\windows\system32\Bubbles.scr

2015-02-12 15:10 - 2010-11-20 08:24 - 00497664 _____ (Microsoft Corporation) C:\windows\system32\main.cpl

2015-02-12 15:10 - 2010-11-20 08:24 - 00363520 _____ (Microsoft Corporation) C:\windows\system32\diskraid.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00242688 _____ (Microsoft Corporation) C:\windows\system32\Mystify.scr

2015-02-12 15:10 - 2010-11-20 08:24 - 00241664 _____ (Microsoft Corporation) C:\windows\system32\Ribbons.scr

2015-02-12 15:10 - 2010-11-20 08:24 - 00232448 _____ (Microsoft Corporation) C:\windows\system32\bitsadmin.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00166400 _____ (Microsoft Corporation) C:\windows\system32\diskpart.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\iscsicli.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00146944 _____ (Microsoft Corporation) C:\windows\system32\MdSched.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00133120 _____ (Microsoft Corporation) C:\windows\system32\Kswdmcap.ax

2015-02-12 15:10 - 2010-11-20 08:24 - 00130048 _____ (Microsoft Corporation) C:\windows\system32\desk.cpl

2015-02-12 15:10 - 2010-11-20 08:24 - 00104448 _____ (Microsoft Corporation) C:\windows\system32\logman.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\mobsync.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\cmstp.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\manage-bde.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\findstr.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00071168 _____ (Microsoft Corporation) C:\windows\bfsvc.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\djoin.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\g711codc.ax

2015-02-12 15:10 - 2010-11-20 08:24 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\vbisurf.ax

2015-02-12 15:10 - 2010-11-20 08:24 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\choice.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00027648 _____ (Microsoft Corporation) C:\windows\system32\LogonUI.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\FXSUNATD.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\fixmapi.exe

2015-02-12 15:10 - 2010-11-20 08:24 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe

2015-02-12 15:10 - 2010-11-20 08:16 - 12625920 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL

2015-02-12 15:10 - 2010-11-20 08:15 - 01164800 _____ (Microsoft Corporation) C:\windows\system32\UIRibbonRes.dll

2015-02-12 15:10 - 2010-11-20 08:14 - 00007680 _____ (Microsoft Corporation) C:\windows\system32\spwizres.dll

2015-02-12 15:10 - 2010-11-20 08:13 - 00147456 _____ (Microsoft Corporation) C:\windows\system32\RDPENCDD.dll

2015-02-12 15:10 - 2010-11-20 08:13 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\nlsbres.dll

2015-02-12 15:10 - 2010-11-20 08:12 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\pifmgr.dll

2015-02-12 15:10 - 2010-11-20 08:02 - 01148416 _____ (Microsoft Corporation) C:\windows\system32\IMJP10.IME

2015-02-12 15:10 - 2010-11-20 08:02 - 00457216 _____ (Microsoft Corporation) C:\windows\system32\imkr80.ime

2015-02-12 15:10 - 2010-11-20 08:02 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\KBDTUQ.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\KBDTUF.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\KBDSG.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\kbdlk41a.dll

2015-02-12 15:10 - 2010-11-20 08:02 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\KBDGKL.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\KBDCZ1.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007680 _____ (Microsoft Corporation) C:\windows\system32\KBDSF.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007680 _____ (Microsoft Corporation) C:\windows\system32\KBDPO.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007680 _____ (Microsoft Corporation) C:\windows\system32\KBDNEPR.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007680 _____ (Microsoft Corporation) C:\windows\system32\KBDINTAM.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007680 _____ (Microsoft Corporation) C:\windows\system32\KBDINBEN.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007680 _____ (Microsoft Corporation) C:\windows\system32\KBDGR1.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDUS.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDUGHR1.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTURME.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAJIK.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDMON.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDMAORI.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDLT1.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDINTEL.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDINORI.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDINMAR.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDINKAN.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDINHIN.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBULG.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBLR.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL

2015-02-12 15:10 - 2010-11-20 08:02 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDGEO.DLL

2015-02-12 15:10 - 2010-11-20 07:54 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\BlbEvents.dll

2015-02-12 15:10 - 2010-11-20 07:51 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-ums-l1-1-0.dll

2015-02-12 15:10 - 2010-11-20 07:36 - 00046080 _____ (Microsoft Corporation) C:\windows\SysWOW64\NAPCRYPT.DLL

2015-02-12 15:10 - 2010-11-20 07:21 - 00902656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMADMOD.DLL

2015-02-12 15:10 - 2010-11-20 07:21 - 00739328 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMSPDMOD.DLL

2015-02-12 15:10 - 2010-11-20 07:21 - 00616960 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmdrmsdk.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00541184 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVSDECD.DLL

2015-02-12 15:10 - 2010-11-20 07:21 - 00507392 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmdrmdev.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00444928 _____ (Microsoft Corporation) C:\windows\SysWOW64\wvc.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00436736 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmdrmnet.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00406528 _____ (Microsoft Corporation) C:\windows\SysWOW64\wimgapi.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00350720 _____ (Microsoft Corporation) C:\windows\SysWOW64\WPDSp.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00318976 _____ (Microsoft Corporation) C:\windows\SysWOW64\raschap.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00318464 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00309760 _____ (Microsoft Corporation) C:\windows\SysWOW64\sqlcese30.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00299520 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmpdxm.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00229376 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00198144 _____ (Microsoft Corporation) C:\windows\SysWOW64\wpdwcn.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00186368 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpencom.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00179712 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00160256 _____ (Microsoft Corporation) C:\windows\SysWOW64\vdsbas.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00146944 _____ (Microsoft Corporation) C:\windows\SysWOW64\remotepg.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\twext.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00144384 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmpps.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00118784 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxlib.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\setupcln.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00109568 _____ (Microsoft Corporation) C:\windows\SysWOW64\wiavideo.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00108032 _____ (Microsoft Corporation) C:\windows\SysWOW64\shacct.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00105984 _____ (Microsoft Corporation) C:\windows\SysWOW64\WPDShServiceObj.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00105472 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmpshell.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00100864 _____ (Microsoft Corporation) C:\windows\SysWOW64\sppinst.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00090112 _____ (Microsoft Corporation) C:\windows\SysWOW64\srvcli.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00085504 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc_ssp_isv.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00085504 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc_ssp.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\QUTIL.DLL

2015-02-12 15:10 - 2010-11-20 07:21 - 00078848 _____ (Microsoft Corporation) C:\windows\SysWOW64\UserAccountControlSettings.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00071168 _____ (Microsoft Corporation) C:\windows\SysWOW64\resutils.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\tlscsp.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastapi.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00065024 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\spbcd.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00059392 _____ (Microsoft Corporation) C:\windows\SysWOW64\unimdmat.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00056832 _____ (Microsoft Corporation) C:\windows\SysWOW64\vfwwdm32.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00052224 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpd3d.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00051712 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsnmp32.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00051200 _____ (Twain Working Group) C:\windows\twain_32.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wkscli.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00040448 _____ (Microsoft Corporation) C:\windows\SysWOW64\wtsapi32.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshbth.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00035840 _____ (Microsoft Corporation) C:\windows\SysWOW64\shimgvw.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00031744 _____ (Microsoft Corporation) C:\windows\SysWOW64\utildll.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\vpnikeapi.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00021504 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsdchngr.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00021504 _____ (Microsoft Corporation) C:\windows\SysWOW64\TRAPI.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00021504 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdprefdrvapi.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00020992 _____ (Microsoft Corporation) C:\windows\SysWOW64\shgina.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00019968 _____ (Microsoft Corporation) C:\windows\SysWOW64\spopk.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\schedcli.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00014848 _____ (Microsoft Corporation) C:\windows\SysWOW64\syssetup.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\slwga.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00012288 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsbyuv.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshirda.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00010752 _____ (Microsoft Corporation) C:\windows\SysWOW64\shunimpl.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00009728 _____ (Microsoft Corporation) C:\windows\SysWOW64\sscore.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00008704 _____ (Microsoft Corporation) C:\windows\SysWOW64\riched32.dll

2015-02-12 15:10 - 2010-11-20 07:21 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\msdxm.ocx

2015-02-12 15:10 - 2010-11-20 07:21 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxmasf.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 01661440 _____ (Microsoft Corporation) C:\windows\SysWOW64\networkexplorer.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 01160192 _____ (Microsoft Corporation) C:\windows\SysWOW64\OpcServices.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 01111552 _____ (Microsoft Corporation) C:\windows\SysWOW64\onexui.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00427520 _____ (Microsoft Corporation) C:\windows\SysWOW64\PortableDeviceStatus.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00283136 _____ (Microsoft Corporation) C:\windows\SysWOW64\qdv.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00236544 _____ (Microsoft Corporation) C:\windows\SysWOW64\pdh.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00206848 _____ (Microsoft Corporation) C:\windows\SysWOW64\qasf.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00190976 _____ (Microsoft Corporation) C:\windows\SysWOW64\qcap.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00183296 _____ (Microsoft Corporation) C:\windows\SysWOW64\PortableDeviceSyncProvider.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00174592 _____ (Microsoft Corporation) C:\windows\SysWOW64\ocsetapi.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00153088 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00136192 _____ (Microsoft Corporation) C:\windows\SysWOW64\mydocs.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00121344 _____ (Microsoft Corporation) C:\windows\SysWOW64\sppc.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00099328 _____ (Microsoft Corporation) C:\windows\SysWOW64\QSVRMGMT.DLL

2015-02-12 15:10 - 2010-11-20 07:20 - 00090112 _____ (Microsoft Corporation) C:\windows\SysWOW64\olepro32.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00077824 _____ (Microsoft Corporation) C:\windows\SysWOW64\olethk32.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\QCLIPROV.DLL

2015-02-12 15:10 - 2010-11-20 07:20 - 00068096 _____ (Microsoft Corporation) C:\windows\SysWOW64\napdsnap.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00060928 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncryptui.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00046592 _____ (Microsoft Corporation) C:\windows\SysWOW64\pdhui.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00040960 _____ (Microsoft Corporation) C:\windows\SysWOW64\odbcconf.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00022528 _____ (Microsoft Corporation) C:\windows\SysWOW64\netutils.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\perfts.dll

2015-02-12 15:10 - 2010-11-20 07:20 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\spwmp.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00504320 _____ (Microsoft Corporation) C:\windows\SysWOW64\msscp.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00265216 _____ (Microsoft Corporation) C:\windows\SysWOW64\msnetobj.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00219648 _____ (Microsoft Corporation) C:\windows\SysWOW64\iTVData.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00209920 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstask.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00202240 _____ (Microsoft Corporation) C:\windows\SysWOW64\input.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00195072 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00176128 _____ (Microsoft Corporation) C:\windows\SysWOW64\msorcl32.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00176128 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFPlay.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00158720 _____ (Microsoft Corporation) C:\windows\SysWOW64\mprapi.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00158720 _____ (Microsoft Corporation) C:\windows\SysWOW64\itircl.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00122880 _____ (Microsoft Corporation) C:\windows\SysWOW64\iasrecst.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00120320 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvfw32.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00098304 _____ (Microsoft Corporation) C:\windows\SysWOW64\fphc.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00096256 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00084480 _____ (Microsoft Corporation) C:\windows\SysWOW64\mciavi32.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00082944 _____ (Radius Inc.) C:\windows\SysWOW64\iccvid.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00076800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mapistub.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00076800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mapi32.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00064512 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetmib1.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\iyuv_32.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00041984 _____ (Microsoft Corporation) C:\windows\SysWOW64\luainstall.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\mciqtz32.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00034304 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00031744 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvidc32.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\msdmo.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00028672 _____ (Microsoft Corporation) C:\windows\SysWOW64\iscsium.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00022528 _____ (Microsoft Corporation) C:\windows\SysWOW64\msyuv.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00021504 _____ (Microsoft Corporation) C:\windows\SysWOW64\lsmproxy.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00013312 _____ (Microsoft Corporation) C:\windows\SysWOW64\muifontsetup.dll

2015-02-12 15:10 - 2010-11-20 07:19 - 00013312 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrle32.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00685056 _____ (Microsoft Corporation) C:\windows\SysWOW64\dsuiext.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00402944 _____ (Microsoft Corporation) C:\windows\SysWOW64\drmmgrtn.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00243712 _____ (Microsoft Corporation) C:\windows\SysWOW64\audiodev.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00242176 _____ (Microsoft Corporation) C:\windows\SysWOW64\eapp3hst.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00230912 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00211456 _____ (Microsoft Corporation) C:\windows\SysWOW64\DevicePairingFolder.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00210432 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxdiagn.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00128512 _____ (Microsoft Corporation) C:\windows\SysWOW64\EhStorAPI.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00115200 _____ (Microsoft Corporation) C:\windows\SysWOW64\dot3msm.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00094208 _____ (Microsoft Corporation) C:\windows\SysWOW64\eappgnui.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00091648 _____ (Microsoft Corporation) C:\windows\SysWOW64\avifil32.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\cabinet.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\amstream.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00066560 _____ (Microsoft Corporation) C:\windows\SysWOW64\cca.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00065024 _____ (Microsoft Corporation) C:\windows\SysWOW64\CertPolEng.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00045568 _____ (Microsoft Corporation) C:\windows\SysWOW64\acppage.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscapi.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\dsauth.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00028160 _____ (Microsoft Corporation) C:\windows\SysWOW64\AzSqlExt.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00023040 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscdll.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00022528 _____ (Microsoft Corporation) C:\windows\SysWOW64\elsTrans.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00019456 _____ (Microsoft Corporation) C:\windows\SysWOW64\bitsperf.dll

2015-02-12 15:10 - 2010-11-20 07:18 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\C_ISCII.DLL

2015-02-12 15:10 - 2010-11-20 07:18 - 00010752 _____ (Microsoft Corporation) C:\windows\SysWOW64\browseui.dll

2015-02-12 15:10 - 2010-11-20 07:17 - 00327680 _____ (Microsoft Corporation) C:\windows\SysWOW64\wimserv.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00280064 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate_ssp.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00278016 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate_ssp_isv.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00276480 _____ (Microsoft Corporation) C:\windows\SysWOW64\diskraid.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00209920 _____ (Microsoft Corporation) C:\windows\SysWOW64\PkgMgr.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00197632 _____ (Microsoft Corporation) C:\windows\SysWOW64\ocsetup.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00157184 _____ (Microsoft Corporation) C:\windows\SysWOW64\perfmon.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00144896 _____ (Microsoft Corporation) C:\windows\SysWOW64\iscsicli.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00133632 _____ (Microsoft Corporation) C:\windows\SysWOW64\diskpart.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00113152 _____ (Microsoft Corporation) C:\windows\SysWOW64\setupugc.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00101376 _____ (Microsoft Corporation) C:\windows\SysWOW64\mobsync.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00098304 _____ (Microsoft Corporation) C:\windows\SysWOW64\nslookup.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00095232 _____ (Microsoft Corporation) C:\windows\SysWOW64\logagent.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00084992 _____ (Microsoft Corporation) C:\windows\SysWOW64\cmstp.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00083968 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00082944 _____ (Microsoft Corporation) C:\windows\SysWOW64\logman.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\msiexec.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\MuiUnattend.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00062976 _____ (Microsoft Corporation) C:\windows\SysWOW64\findstr.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\takeown.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\runonce.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzutil.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00037888 _____ (Microsoft Corporation) C:\windows\SysWOW64\relog.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00034304 _____ (Microsoft Corporation) C:\windows\SysWOW64\unlodctr.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00028672 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFaultSecure.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\netiougc.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00024064 _____ (Microsoft Corporation) C:\windows\SysWOW64\netbtugc.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\ReAgentc.exe

2015-02-12 15:10 - 2010-11-20 07:17 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe

2015-02-12 15:10 - 2010-11-20 07:16 - 00878592 _____ (Microsoft Corporation) C:\windows\SysWOW64\Bubbles.scr

2015-02-12 15:10 - 2010-11-20 07:16 - 00293888 _____ (Microsoft Corporation) C:\windows\SysWOW64\ssText3d.scr

2015-02-12 15:10 - 2010-11-20 07:16 - 00281088 _____ (Microsoft Corporation) C:\windows\SysWOW64\unimdm.tsp

2015-02-12 15:10 - 2010-11-20 07:16 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\Mystify.scr

2015-02-12 15:10 - 2010-11-20 07:16 - 00220672 _____ (Microsoft Corporation) C:\windows\SysWOW64\Ribbons.scr

2015-02-12 15:10 - 2010-11-20 07:16 - 00186368 _____ (Microsoft Corporation) C:\windows\SysWOW64\bitsadmin.exe

2015-02-12 15:10 - 2010-11-20 07:16 - 00153600 _____ (Microsoft Corporation) C:\windows\SysWOW64\VBICodec.ax

2015-02-12 15:10 - 2010-11-20 07:16 - 00142336 _____ (Microsoft Corporation) C:\windows\SysWOW64\powercfg.cpl

2015-02-12 15:10 - 2010-11-20 07:16 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\desk.cpl

2015-02-12 15:10 - 2010-11-20 07:16 - 00107008 _____ (Microsoft Corporation) C:\windows\SysWOW64\Kswdmcap.ax

2015-02-12 15:10 - 2010-11-20 07:16 - 00084480 _____ (Microsoft Corporation) C:\windows\SysWOW64\kstvtune.ax

2015-02-12 15:10 - 2010-11-20 07:16 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\ksxbar.ax

2015-02-12 15:10 - 2010-11-20 07:16 - 00045568 _____ (Microsoft Corporation) C:\windows\SysWOW64\g711codc.ax

2015-02-12 15:10 - 2010-11-20 07:16 - 00033792 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbisurf.ax

2015-02-12 15:10 - 2010-11-20 07:08 - 12625408 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmploc.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00663040 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll

2015-02-12 15:10 - 2010-11-20 07:08 - 00119808 _____ (Microsoft Corporation) C:\windows\SysWOW64\imm32.dll

2015-02-12 15:10 - 2010-11-20 07:08 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTUQ.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTUF.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDSG.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\kbdlk41a.dll

2015-02-12 15:10 - 2010-11-20 07:08 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDGR1.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDGKL.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDCZ1.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDSF.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDPO.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDNEPR.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDINTAM.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDINORI.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDINMAR.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDINKAN.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDINHIN.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDINBEN.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDUS.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDUGHR1.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTURME.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAJIK.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDMON.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDMAORI.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDLT1.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDINTEL.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDGEO.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBULG.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBLR.DLL

2015-02-12 15:10 - 2010-11-20 07:08 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL

2015-02-12 15:10 - 2010-11-20 07:07 - 01164800 _____ (Microsoft Corporation) C:\windows\SysWOW64\UIRibbonRes.dll

2015-02-12 15:10 - 2010-11-20 07:07 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\spwizres.dll

2015-02-12 15:10 - 2010-11-20 07:06 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlsbres.dll

2015-02-12 15:10 - 2010-11-20 07:05 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\pifmgr.dll

2015-02-12 15:10 - 2010-11-20 07:00 - 01027584 _____ (Microsoft Corporation) C:\windows\SysWOW64\IMJP10.IME

2015-02-12 15:10 - 2010-11-20 07:00 - 00430080 _____ (Microsoft Corporation) C:\windows\SysWOW64\imkr80.ime

2015-02-12 15:10 - 2010-11-20 06:37 - 00031744 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbrpm.sys

2015-02-12 15:10 - 2010-11-20 06:34 - 00482816 _____ (Microsoft Corporation) C:\windows\system32\html.iec

2015-02-12 15:10 - 2010-11-20 05:52 - 00131584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pacer.sys

2015-02-12 15:10 - 2010-11-20 05:51 - 00125440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tunnel.sys

2015-02-12 15:10 - 2010-11-20 05:51 - 00045056 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpipreg.sys

2015-02-12 15:10 - 2010-11-20 05:50 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndisuio.sys

2015-02-12 15:10 - 2010-11-20 05:49 - 00386048 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec

2015-02-12 15:10 - 2010-11-20 05:49 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rmcast.sys

2015-02-12 15:10 - 2010-11-20 05:44 - 00350208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\HdAudio.sys

2015-02-12 15:10 - 2010-11-20 05:44 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\umbus.sys

2015-02-12 15:10 - 2010-11-20 05:44 - 00032896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBCAMD2.sys

2015-02-12 15:10 - 2010-11-20 05:43 - 00122368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys

2015-02-12 15:10 - 2010-11-20 05:43 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidusb.sys

2015-02-12 15:10 - 2010-11-20 05:34 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sffp_sd.sys

2015-02-12 15:10 - 2010-11-20 05:33 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\CompositeBus.sys

2015-02-12 15:10 - 2010-11-20 05:33 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\Drivers\kbdhid.sys

2015-02-12 15:10 - 2010-11-20 05:14 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys

2015-02-12 15:10 - 2010-11-20 05:09 - 00029696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\scfilter.sys

2015-02-12 15:10 - 2010-11-20 05:04 - 00078848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys

2015-02-12 15:10 - 2010-11-20 04:49 - 00258048 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgmms1.sys

2015-02-12 15:10 - 2010-11-20 04:30 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\acpipmi.sys

2015-02-12 15:10 - 2010-11-20 04:26 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dfsc.sys

2015-02-12 15:10 - 2010-11-20 04:22 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdi.sys

2015-02-12 15:10 - 2010-11-20 04:19 - 00147456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cdrom.sys

2015-02-12 15:10 - 2010-11-09 20:48 - 00010429 _____ () C:\windows\system32\ScavengeSpace.xml

2015-02-12 15:10 - 2010-11-04 21:20 - 00105559 _____ () C:\windows\SysWOW64\RacRules.xml

2015-02-12 15:10 - 2010-11-04 21:20 - 00105559 _____ () C:\windows\system32\RacRules.xml

2015-02-12 15:09 - 2010-11-20 08:26 - 00399872 _____ (Microsoft Corporation) C:\windows\system32\dpx.dll

2015-02-12 15:09 - 2010-11-20 07:21 - 00363008 _____ (Microsoft Corporation) C:\windows\SysWOW64\wbemcomn.dll

2015-02-12 15:09 - 2010-11-20 07:21 - 00189952 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdscore.dll

2015-02-12 15:09 - 2010-11-20 07:21 - 00189952 _____ (Microsoft Corporation) C:\windows\SysWOW64\sqmapi.dll

2015-02-12 15:09 - 2009-06-10 16:39 - 00001041 _____ () C:\windows\SysWOW64\tcpbidi.xml

2015-02-12 15:05 - 2010-11-20 08:27 - 00529408 _____ (Microsoft Corporation) C:\windows\system32\wbemcomn.dll

2015-02-12 15:05 - 2010-11-20 08:27 - 00244736 _____ (Microsoft Corporation) C:\windows\system32\sqmapi.dll

2015-02-10 20:53 - 2015-02-03 22:04 - 00609280 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll

2015-02-10 20:53 - 2015-02-03 22:03 - 00894976 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll

2015-02-10 20:53 - 2015-02-03 22:03 - 00762368 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll

2015-02-10 20:53 - 2015-02-03 22:03 - 00414720 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll

2015-02-10 20:53 - 2015-01-27 18:23 - 01239720 _____ (Microsoft Corporation) C:\windows\system32\aitstatic.exe

2015-02-08 18:30 - 2015-02-17 16:40 - 00000000 ___RD () C:\Users\Home\Dropbox

2015-02-08 18:24 - 2015-02-08 18:25 - 00355528 _____ (Dropbox, Inc.) C:\Users\Home\Downloads\DropboxInstaller.exe

2015-02-01 14:21 - 2015-02-01 14:21 - 00001977 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk

2015-01-29 15:56 - 2015-01-29 15:56 - 00000000 ____D () C:\Users\Home\AppData\Roaming\RenPy

2015-01-29 15:20 - 2015-02-01 17:15 - 00000000 ____D () C:\Users\Home\Desktop\WarioDate!-1.0-all

2015-01-29 15:16 - 2015-01-29 15:20 - 252518741 _____ () C:\Users\Home\Desktop\WarioDate!-1.1-all.zip

2015-01-29 15:15 - 2015-01-29 15:15 - 00000000 ____D () C:\Users\Home\AppData\Local\Macromedia

2015-01-29 15:10 - 2015-01-29 15:14 - 252518741 _____ () C:\Users\Home\Downloads\Unconfirmed 293833.crdownload

 

==================== One Month Modified Files and Folders =======

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2015-02-21 09:52 - 2009-07-13 23:45 - 00016304 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-02-21 09:52 - 2009-07-13 23:45 - 00016304 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-02-21 09:48 - 2014-04-29 14:10 - 01628831 _____ () C:\windows\WindowsUpdate.log

2015-02-21 09:47 - 2014-06-11 09:28 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Skype

2015-02-21 09:44 - 2014-04-29 14:30 - 00000050 _____ () C:\windows\system32\SupplicantTest.log

2015-02-21 09:43 - 2009-07-14 00:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT

2015-02-21 09:43 - 2009-07-13 23:51 - 00065917 _____ () C:\windows\setupact.log

2015-02-21 09:16 - 2014-04-30 10:41 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job

2015-02-21 09:15 - 2010-08-29 23:44 - 00000898 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-02-19 17:01 - 2009-07-14 00:13 - 00726316 _____ () C:\windows\system32\PerfStringBackup.INI

2015-02-17 19:07 - 2009-07-13 23:45 - 00275712 _____ () C:\windows\system32\FNTCACHE.DAT

2015-02-17 19:06 - 2010-08-30 00:00 - 00007744 _____ () C:\windows\PFRO.log

2015-02-17 18:04 - 2014-04-29 11:56 - 00058016 _____ () C:\Users\Home\AppData\Local\GDIPFONTCACHEV1.DAT

2015-02-17 16:38 - 2014-04-30 11:18 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Dropbox

2015-02-17 16:33 - 2014-11-07 17:18 - 00000000 ____D () C:\Program Files (x86)\Steam

2015-02-15 19:12 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\rescache

2015-02-14 20:53 - 2014-04-30 10:45 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update

2015-02-13 21:04 - 2009-07-14 00:09 - 00000000 ____D () C:\windows\System32\Tasks\WPD

2015-02-13 20:56 - 2009-07-14 02:45 - 00000000 ____D () C:\Program Files\Windows Journal

2015-02-13 20:56 - 2009-07-14 00:32 - 00000000 ____D () C:\Program Files\Windows Sidebar

2015-02-13 20:56 - 2009-07-14 00:32 - 00000000 ____D () C:\Program Files\Windows Portable Devices

2015-02-13 20:56 - 2009-07-14 00:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer

2015-02-13 20:56 - 2009-07-14 00:32 - 00000000 ____D () C:\Program Files\Windows Defender

2015-02-13 20:56 - 2009-07-14 00:32 - 00000000 ____D () C:\Program Files\DVD Maker

2015-02-13 20:56 - 2009-07-14 00:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar

2015-02-13 20:56 - 2009-07-14 00:32 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices

2015-02-13 20:56 - 2009-07-14 00:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer

2015-02-13 20:56 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\SysWOW64\sppui

2015-02-13 20:56 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\SysWOW64\Setup

2015-02-13 20:56 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\SysWOW64\oobe

2015-02-13 20:56 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\SysWOW64\migwiz

2015-02-13 20:56 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\SysWOW64\manifeststore

2015-02-13 20:56 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\SysWOW64\Dism

2015-02-13 20:56 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\SysWOW64\AdvancedInstallers

2015-02-13 20:56 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\servicing

2015-02-13 20:56 - 2009-07-13 22:20 - 00000000 ____D () C:\Program Files\Common Files\System

2015-02-13 20:55 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\system32\sppui

2015-02-13 20:55 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\system32\Setup

2015-02-13 20:55 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\system32\oobe

2015-02-13 20:55 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\system32\migwiz

2015-02-13 20:55 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\system32\manifeststore

2015-02-13 20:55 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\system32\Dism

2015-02-13 20:55 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\system32\AdvancedInstallers

2015-02-13 20:55 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\PolicyDefinitions

2015-02-13 14:07 - 2009-07-13 21:36 - 00175616 _____ (Microsoft Corporation) C:\windows\system32\msclmd.dll

2015-02-13 14:07 - 2009-07-13 21:36 - 00152576 _____ (Microsoft Corporation) C:\windows\SysWOW64\msclmd.dll

2015-02-11 15:21 - 2014-12-10 15:42 - 00000000 ____D () C:\windows\system32\appraiser

2015-02-11 15:21 - 2014-07-10 02:00 - 00000000 ___SD () C:\windows\system32\CompatTel

2015-02-08 18:30 - 2014-04-29 11:54 - 00000000 ____D () C:\Users\Home

2015-02-05 16:16 - 2014-04-30 10:41 - 00701616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe

2015-02-05 16:16 - 2014-04-30 10:41 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-02-05 16:16 - 2014-04-30 10:41 - 00003768 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater

2015-02-03 21:09 - 2010-08-29 23:44 - 00003894 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-02-03 21:09 - 2010-08-29 23:44 - 00003642 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-02-03 21:09 - 2010-08-29 23:44 - 00000894 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-02-01 17:15 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\registration

 

Some content of TEMP:

====================

C:\Users\Home\AppData\Local\Temp\AutoRun.exe

C:\Users\Home\AppData\Local\Temp\AutoRunGUI.dll

C:\Users\Home\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdignpv.dll

C:\Users\Home\AppData\Local\Temp\i4jdel0.exe

 

 

==================== Bamital & volsnap Check =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

 

 

LastRegBack: 2015-02-14 15:19

 

==================== End Of Log ============================

[Alli06]

And here is the Addition Document:

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-02-2015 01

Ran by Home at 2015-02-21 09:53:57

Running from C:\Users\Home\Downloads

Boot Mode: Normal

==========================================================

 

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

 

==================== Installed Programs ======================

 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 16.0.0.245 - Adobe Systems Incorporated)

Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Reader 9.3 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A93000000001}) (Version: 9.3.0 - Adobe Systems Incorporated)

Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Arch Luna Online - Luna Plus version 2.1 (HKLM-x32\...\{AB539475-72ED-4463-928A-8CED8A06A0F1}_is1) (Version: 2.1 - Arch Luna (Jaren))

Ares 2.2.8 (HKLM-x32\...\Ares) (Version: 2.2.8-Build#3052 - Seekar Ltd)

avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2018 - Avast Software)

Best Buy pc app (Version: 3.0.0.0 - Best Buy) Hidden

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Chivalry: Medieval Warfare (HKLM-x32\...\Steam App 219640) (Version:  - Torn Banner Studios)

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version:  - )

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.115 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

Intel WiMAX Tutorial (HKLM\...\{4F26C164-9373-4974-8F43-E0F2176AF937}) (Version: 1.5.4.0 - Intel Corporation)

Intel® Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2119 - Intel Corporation)

Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)

Intel® PROSet/Wireless WiFi Software (HKLM\...\{D16A2127-B927-4379-B153-3DEC091E4EEB}) (Version: 13.02.1000 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.5.7.1002 - Intel Corporation)

Intel® PROSet/Wireless WiMAX Software (HKLM\...\{6548B189-BEA4-4041-80E0-AEB60548E046}) (Version: 2.03.0005 - Intel Corporation)

Intel® Wireless Display (HKLM\...\{C298FF86-AB23-4B58-AC53-A23383C07B3A}) (Version: 1.2.20.0 - Intel Corporation)

iTunes (HKLM\...\{77DE5105-D05E-448C-96CB-7FA381903753}) (Version: 11.3.1.2 - Apple Inc.)

Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.44.1 - JMicron Technology Corp.)

Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40624.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 34.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 en-US)) (Version: 34.0.5 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)

Norton Internet Security (HKLM-x32\...\NIS) (Version: 18.0.0.128 - Symantec Corporation)

PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)

Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.20.503.2010 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6069 - Realtek Semiconductor Corp.)

REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{9C049499-055C-4a0c-A916-1D8CA1FF45EB}) (Version: 1.00.0134 - REALTEK Semiconductor Corp.)

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.24.999 - SAMSUNG Electronics Co., Ltd.)

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.8.1 - Synaptics Incorporated)

Synthesia (HKLM-x32\...\Synthesia) (Version: 9 - Synthesia LLC)

Tabletop Simulator (HKLM-x32\...\Steam App 286160) (Version:  - Berserk Games)

The Sims™ 3 (HKLM-x32\...\Steam App 47890) (Version:  - The Sims Studio)

TOSHIBA Application Installer (HKLM-x32\...\{970472D0-F5F9-4158-A6E3-1AE49EFEF2D3}) (Version: 9.0.1.1 - TOSHIBA)

TOSHIBA Assist (HKLM-x32\...\{1B87C40B-A60B-4EF3-9A68-706CF4B69978}) (Version: 3.00.11 - TOSHIBA CORPORATION)

Toshiba Book Place (HKLM-x32\...\{BB51B753-9A0C-4D1D-B3EF-A1B936F55796}) (Version: 2.0.3977.0 - K-NFB Reading Technology, Inc.)

TOSHIBA Bulletin Board (HKLM-x32\...\InstallShield_{C14518AF-1A0F-4D39-8011-69BAA01CD380}) (Version: 1.6.08.64 - TOSHIBA Corporation)

TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.2 for x64 - TOSHIBA Corporation)

TOSHIBA DVD PLAYER (HKLM-x32\...\{6C5F3BDC-0A1B-4436-A696-5939629D5C31}) (Version: 3.01.2.12-A - TOSHIBA Corporation)

TOSHIBA eco Utility (HKLM-x32\...\InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}) (Version: 1.2.18.64 - TOSHIBA Corporation)

TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.3.64 - TOSHIBA Corporation)

TOSHIBA Flash Cards Support Utility (HKLM-x32\...\InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}) (Version: 1.63.0.6C - TOSHIBA CORPORATION)

TOSHIBA Hardware Setup (HKLM-x32\...\InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}) (Version: 1.63.0.26C - TOSHIBA CORPORATION)

TOSHIBA HDD Protection (HKLM\...\{94A90C69-71C1-470A-88F5-AA47ECC96B40}) (Version: 2.2.0.4 - TOSHIBA Corporation)

TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.6 - TOSHIBA Corporation)

TOSHIBA Media Controller (HKLM-x32\...\{983CD6FE-8320-4B80-A8F6-0D0366E0AA22}) (Version: 1.0.80.8.64 - TOSHIBA CORPORATION)

TOSHIBA Media Controller Plug-in (HKLM-x32\...\{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}) (Version: 1.0.5.11 - TOSHIBA CORPORATION)

TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.7.1.64 - TOSHIBA Corporation)

TOSHIBA Quality Application (HKLM-x32\...\{E69992ED-A7F6-406C-9280-1C156417BC49}) (Version: 1.0.3 - TOSHIBA)

TOSHIBA Recovery Media Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.0.4 for x64 - TOSHIBA Corporation)

TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{24811C12-F4A9-4D0F-8494-A7B8FE46123C}) (Version: 1.7.16.64 - TOSHIBA Corporation)

TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.2.9 - TOSHIBA)

TOSHIBA Sleep Utility (HKLM-x32\...\{654F7484-88C5-46DC-AB32-C66BCB0E2102}) (Version: 1.4.1.2 - TOSHIBA Corporation)

TOSHIBA Supervisor Password (HKLM-x32\...\InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}) (Version: 1.63.0.9C - TOSHIBA CORPORATION)

TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.3.14.64 - TOSHIBA Corporation)

TOSHIBA Web Camera Application (HKLM-x32\...\{5E6F6CF3-BACC-4144-868C-E14622C658F3}) (Version: 1.1.1.16 - TOSHIBA Corporation)

ToshibaRegistration (HKLM-x32\...\{5AF550B4-BB67-4E7E-82F1-2C4300279050}) (Version: 1.0.4 - Toshiba)

Town of Salem (HKLM-x32\...\Steam App 334230) (Version:  - BlankMediaGames)

Utility Common Driver (x32 Version: 1.0.52.1C - TOSHIBA) Hidden

Verizon Wireless Software Upgrade Assistant - Samsung(ar) (HKLM-x32\...\{EE296443-E401-43D2-9864-1C63AD8D376E}) (Version: 2.14.0410 - Samsung Electronics Co., Ltd.)

Verizon Wireless Software Utility Application for Android - Samsung (HKLM-x32\...\{69258FD1-F4EE-475A-83D1-BF68C8029592}) (Version: 2.14.0402 - Samsung Electronics Co., Ltd.)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)

Windows Live Sign-in Assistant (HKLM-x32\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation)

Windows Live Sync (HKLM-x32\...\{B10914FD-8812-47A4-85A1-50FCDE7F1F33}) (Version: 14.0.8117.416 - Microsoft Corporation)

Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

WinRAR 5.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

 

==================== Custom CLSID (selected items): ==========================

 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

 

CustomCLSID: HKU\S-1-5-21-642685601-3827844656-3507933702-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Home\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay No File

 

==================== Restore Points  =========================

 

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

 

==================== Scheduled Tasks (whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

 

Task: {1F3F3077-AF81-4C8E-923F-B930D0D5FAB4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.)

Task: {258C8FEC-5D32-49FA-9B43-B6710B90A066} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-30] (AVAST Software)

Task: {7730A16D-FA75-4CF3-9BFC-BB444FEBA863} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {81F692DA-3B0E-4219-8511-20D727903E24} - System32\Tasks\{21434FFB-32B8-4301-991F-A1D2EA8F81B1} => pcalua.exe -a E:\toshiba\saw0v230.exe -d E:\toshiba

Task: {BBEAE3C3-F5CD-4346-BED7-4EEFBD462B3D} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)

Task: {D9E09E95-42E5-45A1-A0C8-AB0959DEECF8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

 

==================== Loaded Modules (whitelisted) ==============

 

2010-03-05 11:21 - 2010-03-05 11:21 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll

2010-04-07 18:07 - 2010-04-07 18:07 - 09468728 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll

2009-11-03 15:26 - 2009-11-03 15:26 - 00053560 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll

2010-03-03 16:15 - 2010-03-03 16:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF10.dll

2010-03-03 16:15 - 2010-03-03 16:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF11.dll

2010-08-29 23:37 - 2009-06-22 17:40 - 00022328 _____ () C:\Program Files\TOSHIBA\Toshiba Assist\NotifyX.dll

2009-03-12 21:08 - 2009-03-12 21:08 - 00048640 _____ () C:\Program Files (x86)\Toshiba\PCDiag\NotifyPCD.dll

2009-07-25 19:38 - 2009-07-25 19:38 - 00017800 _____ () C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll

2010-03-05 11:21 - 2010-03-05 11:21 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll

2010-03-12 17:41 - 2010-03-12 17:41 - 00417080 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\TcrdKBB.exe

2010-02-05 19:44 - 2010-02-05 19:44 - 00079192 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll

2015-02-21 08:24 - 2015-02-21 08:24 - 02911744 _____ () C:\Program Files\AVAST Software\Avast\defs\15022100\algo.dll

2014-04-23 15:05 - 2014-04-23 15:05 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-04-23 15:04 - 2014-04-23 15:04 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2014-04-29 16:51 - 2009-08-28 16:38 - 00131072 _____ () C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\EnumDevLib.dll

2014-04-30 10:41 - 2014-04-30 10:41 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2015-02-19 17:38 - 2015-02-17 17:44 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\libglesv2.dll

2015-02-19 17:38 - 2015-02-17 17:44 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\libegl.dll

2015-02-19 17:39 - 2015-02-17 17:44 - 09171272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\pdf.dll

2015-02-19 17:39 - 2015-02-17 17:44 - 14965064 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\PepperFlash\pepflashplayer.dll

 

==================== Alternate Data Streams (whitelisted) =========

 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

 

 

==================== Safe Mode (whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

 

==================== EXE Association (whitelisted) ===============

 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

 

 

==================== Other Areas ============================

 

(Currently there is no automatic fix for this section.)

 

HKU\S-1-5-21-642685601-3827844656-3507933702-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Home\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.1.1

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

(Currently there is no automatic fix for this section.)

 

 

==================== Accounts: =============================

 

Administrator (S-1-5-21-642685601-3827844656-3507933702-500 - Administrator - Disabled)

Guest (S-1-5-21-642685601-3827844656-3507933702-501 - Limited - Disabled)

Home (S-1-5-21-642685601-3827844656-3507933702-1000 - Administrator - Enabled) => C:\Users\Home

 

==================== Faulty Device Manager Devices =============

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (02/21/2015 09:48:05 AM) (Source: ESENT) (EventID: 447) (User: )

Description: wuaueng.dll (1012) SUS20ClientDataStore: A bad page link (error -327) has been detected in a B-Tree (ObjectId: 8, PgnoRoot: 35) of database C:\windows\SoftwareDistribution\DataStore\DataStore.edb (4233 => 481, wuaueng.dll0).

 

Error: (02/21/2015 09:02:12 AM) (Source: SideBySide) (EventID: 35) (User: )

Description: Activation context generation failed for "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1".Error in manifest or policy file "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" on line WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.

Component identity found in manifest does not match the identity of the component requested.

Reference is WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".

Definition is WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".

Please use sxstrace.exe for detailed diagnosis.

 

Error: (02/20/2015 04:04:18 PM) (Source: SideBySide) (EventID: 35) (User: )

Description: Activation context generation failed for "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1".Error in manifest or policy file "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" on line WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.

Component identity found in manifest does not match the identity of the component requested.

Reference is WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".

Definition is WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".

Please use sxstrace.exe for detailed diagnosis.

 

Error: (02/19/2015 05:35:28 PM) (Source: SideBySide) (EventID: 35) (User: )

Description: Activation context generation failed for "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1".Error in manifest or policy file "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" on line WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.

Component identity found in manifest does not match the identity of the component requested.

Reference is WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".

Definition is WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".

Please use sxstrace.exe for detailed diagnosis.

 

Error: (02/18/2015 09:12:20 PM) (Source: SideBySide) (EventID: 35) (User: )

Description: Activation context generation failed for "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1".Error in manifest or policy file "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" on line WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.

Component identity found in manifest does not match the identity of the component requested.

Reference is WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".

Definition is WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".

Please use sxstrace.exe for detailed diagnosis.

 

Error: (02/18/2015 08:35:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Local Hostname Home-PC.local already in use; will try Home-PC-2.local instead

 

Error: (02/18/2015 08:35:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: ProbeCount 1; will deregister    4 Home-PC.local. Addr 192.168.1.8

 

Error: (02/18/2015 08:35:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.6:5353    4 Home-PC.local. Addr 192.168.1.6

 

Error: (02/18/2015 08:29:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Local Hostname Home-PC.local already in use; will try Home-PC-2.local instead

 

Error: (02/18/2015 08:29:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: ProbeCount 1; will deregister    4 Home-PC.local. Addr 192.168.1.8

 

 

System errors:

=============

Error: (02/21/2015 09:52:03 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: NT AUTHORITY)

Description: 0x8000002a45\??\C:\System Volume Information\Syscache.hve

 

Error: (02/21/2015 09:48:10 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x80071a91: Security Update for Windows 7 for x64-based Systems (KB2978668).

 

Error: (02/21/2015 09:48:10 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x80071a91: Update for Windows 7 for x64-based Systems (KB2852386).

 

Error: (02/21/2015 09:48:10 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x80071a91: Security Update for Windows 7 for x64-based Systems (KB3013455).

 

Error: (02/21/2015 09:48:10 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x80071a91: Security Update for Windows 7 for x64-based Systems (KB3031432).

 

Error: (02/21/2015 09:48:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x80071a91: Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 for x64-based Systems (KB2832414).

 

Error: (02/21/2015 09:48:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x80071a91: Security Update for Windows 7 for x64-based Systems (KB3006226).

 

Error: (02/21/2015 09:48:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x80071a91: Security Update for Windows 7 for x64-based Systems (KB2855844).

 

Error: (02/21/2015 09:48:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x80071a91: Security Update for Windows 7 for x64-based Systems (KB2813430).

 

Error: (02/21/2015 09:48:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x80071a91: Update for Windows 7 for x64-based Systems (KB3008627).

 

 

Microsoft Office Sessions:

=========================

Error: (02/21/2015 09:48:05 AM) (Source: ESENT) (EventID: 447) (User: )

Description: wuaueng.dll1012SUS20ClientDataStore: -327835C:\windows\SoftwareDistribution\DataStore\DataStore.edb42334810

 

Error: (02/21/2015 09:02:12 AM) (Source: SideBySide) (EventID: 35) (User: )

Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

 

Error: (02/20/2015 04:04:18 PM) (Source: SideBySide) (EventID: 35) (User: )

Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

 

Error: (02/19/2015 05:35:28 PM) (Source: SideBySide) (EventID: 35) (User: )

Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

 

Error: (02/18/2015 09:12:20 PM) (Source: SideBySide) (EventID: 35) (User: )

Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

 

Error: (02/18/2015 08:35:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Local Hostname Home-PC.local already in use; will try Home-PC-2.local instead

 

Error: (02/18/2015 08:35:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: ProbeCount 1; will deregister    4 Home-PC.local. Addr 192.168.1.8

 

Error: (02/18/2015 08:35:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.6:5353    4 Home-PC.local. Addr 192.168.1.6

 

Error: (02/18/2015 08:29:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Local Hostname Home-PC.local already in use; will try Home-PC-2.local instead

 

Error: (02/18/2015 08:29:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: ProbeCount 1; will deregister    4 Home-PC.local. Addr 192.168.1.8

 

 

==================== Memory info =========================== 

 

Processor: Intel® Core™ i3 CPU M 370 @ 2.40GHz

Percentage of memory in use: 55%

Total physical RAM: 3890.67 MB

Available physical RAM: 1744.09 MB

Total Pagefile: 7779.53 MB

Available Pagefile: 5408.92 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB

 

==================== Drives ================================

 

Drive c: (TI105957W0F) (Fixed) (Total:452.7 GB) (Free:370.96 GB) NTFS ==>[System with boot components (obtained from reading drive)]

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 8E5B4D01)

Partition 1: (Active) - (Size=1.5 GB) - (Type=27)

Partition 2: (Not Active) - (Size=452.7 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=11.6 GB) - (Type=17)

 

==================== End Of Log ============================

[dbreeze]

Thank you for the logs; let's get started cleaning.

FIRST >>>>

Open notepad. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy. Paste this into the open notepad. Save it to your desktop as fixlist.txt
 

start
CreateRestorePoint:
CloseProcesses:
HKLM\...\Run: [] => [X]
HKU\S-1-5-21-642685601-3827844656-3507933702-1000\...\MountPoints2: {2e52f398-11ad-11e4-8182-88ae1df314e3} - E:\LaunchU3.exe -a
HKU\S-1-5-21-642685601-3827844656-3507933702-1000\...\MountPoints2: {2e52f3a4-11ad-11e4-8182-88ae1df314e3} - G:\LaunchU3.exe -a
HKU\S-1-5-21-642685601-3827844656-3507933702-1000\...\MountPoints2: {e3553607-d292-11e3-975a-88ae1df314e3} - E:\VZW_Software_upgrade_assistant.exe
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-642685601-3827844656-3507933702-1000 -> {86F859E3-3478-4CDF-9872-E3A8420632C4} URL =
BHO: No Name -> {41524553-2D56-3700-76A7-7A786E7484D7} -> No File
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
Toolbar: HKU\S-1-5-21-642685601-3827844656-3507933702-1000 -> No Name - {41524553-2D56-3700-76A7-7A786E7484D7} - No File
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CustomCLSID: HKU\S-1-5-21-642685601-3827844656-3507933702-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Home\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay No File
Task: {81F692DA-3B0E-4219-8511-20D727903E24} - System32\Tasks\{21434FFB-32B8-4301-991F-A1D2EA8F81B1} => pcalua.exe -a E:\toshiba\saw0v230.exe -d E:\toshiba
2015-01-29 15:10 - 2015-01-29 15:14 - 252518741 _____ () C:\Users\Home\Downloads\Unconfirmed 293833.crdownload
C:\Users\Home\AppData\Local\Temp\AutoRun.exe
C:\Users\Home\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Home\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdignpv.dll
C:\Users\Home\AppData\Local\Temp\i4jdel0.exe
C:\Users\Home\AppData\Roaming\Dropbox\bin\Dropbox.exe
Reboot:
end

NOTE. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST64 by right clicking on the FRST64.exe file, selecting "Run as Administrator..". The User Account Control may open up; if it does, select Yes to continue to let FRST open and load.

The tool will check for an updated version of itself every time it loads; please allow it to do this and the program will either inform you it is downloading an updated copy (and to wait until it is safe to continue) or show nothing (meaning there is no update found) and you can continue on. Press the Fix button just once and wait. The tool will create a restore point, process the script and ask for a restart of your system.

If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.

When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.


SECOND >>>>

AdwCleaner by Xplode

Download AdwCleaner from here or from here. Save the file to the desktop.


NOTE: If you are using IE 8 or above you may get a warning that stops the program from downloading. Just click on the warning and allow the download to complete.

Close all open windows and browsers.

• Vista/7/8 users: Right click the AdwCleaner icon on the desktop, click Run as administrator and accept the UAC prompt to run AdwCleaner.
  You will see the following console:
  
  
• Click the Scan button and wait for the scan to finish.
• After the Scan has finished the window may or may not show what it found and above, in the progress bar, you will see: Pending. Please uncheck elements you don't want to remove.
• When the Scan has finished the Scan button will be grayed out and the Clean button will be activated.
• Click the Clean button.
• Everything checked will be deleted.
• When the program has finished cleaning a report appears.
• Once done it will ask to reboot, allow this
  
  
• On reboot a log will be produced please copy / paste that in your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[S0].txt

Optional:

NOTE: If you see AVG Secure Search being targeted for deletion, Here's Why and Here. You can always Reinstall it.


Information to Reply with >>>>

• The Fixlog.txt log text.
• The AdwCleaner[S#].txt log text.
• How is your system running now?

[Alli06]

AdwCleaner file:

 

# AdwCleaner v4.111 - Logfile created 22/02/2015 at 17:27:27

# Updated 18/02/2015 by Xplode

# Database : 2015-02-18.3 [Server]

# Operating system : Windows 7 Home Premium Service Pack 1 (x64)

# Username : Home - HOME-PC

# Running from : C:\Users\Home\Desktop\AdwCleaner.exe

# Option : Cleaning

 

***** [ Services ] *****

 

 

***** [ Files / Folders ] *****

 

Folder Deleted : C:\ProgramData\apn

Folder Deleted : C:\ProgramData\Partner

Folder Deleted : C:\Users\Home\AppData\Local\Temp\apn

File Deleted : C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage

File Deleted : C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage-journal

 

***** [ Scheduled tasks ] *****

 

 

***** [ Shortcuts ] *****

 

 

***** [ Registry ] *****

 

[x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{41524553-2D56-3700-76A7-7A786E7484D7}

[x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}

Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}

[x] Not Deleted : HKCU\Software\systweak

[x] Not Deleted : HKLM\SOFTWARE\systweak

[x] Not Deleted : [x64] HKCU\Software\systweak

[x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride]

 

***** [ Web browsers ] *****

 

-\\ Internet Explorer v8.0.7601.17514

 

 

-\\ Mozilla Firefox v34.0.5 (x86 en-US)

 

 

-\\ Google Chrome v40.0.2214.115

 

 

*************************

 

AdwCleaner[R0].txt - [1730 bytes] - [22/02/2015 17:21:33]

AdwCleaner[S0].txt - [1678 bytes] - [22/02/2015 17:27:27]

 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1737  bytes] ##########

 

Fixlog: 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 22-02-2015

Ran by Home at 2015-02-22 17:03:14 Run:1

Running from C:\Users\Home\Desktop

Loaded Profiles: Home (Available profiles: Home)

Boot Mode: Normal

==============================================

 

Content of fixlist:

*****************

start

CreateRestorePoint:

CloseProcesses:

HKLM\...\Run: [] => [X]

HKU\S-1-5-21-642685601-3827844656-3507933702-1000\...\MountPoints2: {2e52f398-11ad-11e4-8182-88ae1df314e3} - E:\LaunchU3.exe -a

HKU\S-1-5-21-642685601-3827844656-3507933702-1000\...\MountPoints2: {2e52f3a4-11ad-11e4-8182-88ae1df314e3} - G:\LaunchU3.exe -a

HKU\S-1-5-21-642685601-3827844656-3507933702-1000\...\MountPoints2: {e3553607-d292-11e3-975a-88ae1df314e3} - E:\VZW_Software_upgrade_assistant.exe

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-21-642685601-3827844656-3507933702-1000 -> {86F859E3-3478-4CDF-9872-E3A8420632C4} URL =

BHO: No Name -> {41524553-2D56-3700-76A7-7A786E7484D7} -> No File

BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File

Toolbar: HKU\S-1-5-21-642685601-3827844656-3507933702-1000 -> No Name - {41524553-2D56-3700-76A7-7A786E7484D7} - No File

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}

CustomCLSID: HKU\S-1-5-21-642685601-3827844656-3507933702-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Home\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay No File

Task: {81F692DA-3B0E-4219-8511-20D727903E24} - System32\Tasks\{21434FFB-32B8-4301-991F-A1D2EA8F81B1} => pcalua.exe -a E:\toshiba\saw0v230.exe -d E:\toshiba

2015-01-29 15:10 - 2015-01-29 15:14 - 252518741 _____ () C:\Users\Home\Downloads\Unconfirmed 293833.crdownload

C:\Users\Home\AppData\Local\Temp\AutoRun.exe

C:\Users\Home\AppData\Local\Temp\AutoRunGUI.dll

C:\Users\Home\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdignpv.dll

C:\Users\Home\AppData\Local\Temp\i4jdel0.exe

C:\Users\Home\AppData\Roaming\Dropbox\bin\Dropbox.exe

Reboot:

end

*****************

 

Restore point was successfully created.

Processes closed successfully.

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.

"HKU\S-1-5-21-642685601-3827844656-3507933702-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2e52f398-11ad-11e4-8182-88ae1df314e3}" => Key deleted successfully.

HKCR\CLSID\{2e52f398-11ad-11e4-8182-88ae1df314e3} => Key not found. 

"HKU\S-1-5-21-642685601-3827844656-3507933702-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2e52f3a4-11ad-11e4-8182-88ae1df314e3}" => Key deleted successfully.

HKCR\CLSID\{2e52f3a4-11ad-11e4-8182-88ae1df314e3} => Key not found. 

"HKU\S-1-5-21-642685601-3827844656-3507933702-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e3553607-d292-11e3-975a-88ae1df314e3}" => Key deleted successfully.

HKCR\CLSID\{e3553607-d292-11e3-975a-88ae1df314e3} => Key not found. 

"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.

HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. 

"HKU\S-1-5-21-642685601-3827844656-3507933702-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{86F859E3-3478-4CDF-9872-E3A8420632C4}" => Key deleted successfully.

HKCR\CLSID\{86F859E3-3478-4CDF-9872-E3A8420632C4} => Key not found. 

"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41524553-2D56-3700-76A7-7A786E7484D7}" => Key deleted successfully.

HKCR\CLSID\{41524553-2D56-3700-76A7-7A786E7484D7} => Key not found. 

"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}" => Key deleted successfully.

HKCR\Wow6432Node\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB} => Key not found. 

HKU\S-1-5-21-642685601-3827844656-3507933702-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{41524553-2D56-3700-76A7-7A786E7484D7} => value deleted successfully.

HKCR\CLSID\{41524553-2D56-3700-76A7-7A786E7484D7} => Key not found. 

"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.

"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.

Chrome DefaultSuggestURL deleted successfully.

"HKU\S-1-5-21-642685601-3827844656-3507933702-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{81F692DA-3B0E-4219-8511-20D727903E24}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{81F692DA-3B0E-4219-8511-20D727903E24}" => Key deleted successfully.

C:\Windows\System32\Tasks\{21434FFB-32B8-4301-991F-A1D2EA8F81B1} => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{21434FFB-32B8-4301-991F-A1D2EA8F81B1}" => Key deleted successfully.

C:\Users\Home\Downloads\Unconfirmed 293833.crdownload => Moved successfully.

C:\Users\Home\AppData\Local\Temp\AutoRun.exe => Moved successfully.

C:\Users\Home\AppData\Local\Temp\AutoRunGUI.dll => Moved successfully.

C:\Users\Home\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdignpv.dll => Moved successfully.

C:\Users\Home\AppData\Local\Temp\i4jdel0.exe => Moved successfully.

"C:\Users\Home\AppData\Roaming\Dropbox\bin\Dropbox.exe" => File/Directory not found.

 

 

The system needed a reboot. 

 

==== End of Fixlog 17:04:09 ====

 

Now, I will let you know in a day or two to see if it's gone. It likes to pop up websites in different tabs, so to really know it's gone, I would have to wait and see if it pops up anymore. Ill let you know if it's gone.

[Alli06]

wait, nvm......it just popped up. It's still there. The funny thing is that the scanner never found it. I looked under "google chrome" and it found nothing. It didn't find anything linked to it.

 

Edit: I just got rid of something in my "tools" in Google Chrome. Ill see if it got rid of it. If I get the pop up again I'll let you know.

Edited by Alli06, 22 February 2015 - 04:47 PM.

[dbreeze]

First Step >>>>

==> Multiple Antivirus Programs Installed <==

In checking the logs you have posted, it seems you have multiple antivirus programs installed on your system. From the logs it looks like the following is on your system:

• Norton Internet Security- from the data in the logs, this is an older, disabled version of a paid product
• Avast Free Antivirus - this program seems to be loading fine at system start up

Why is this BAD?
This is not an advisable situation for several reasons; slowdown of your system because of the drain of resources for the additional scanners, conflicts of the real-time scanners to access the same object for scanning, multiple exceptions that have to be made for the various scanners to even try to function on the same system. The end result is this is a case of "more actually equals less"; you are less protected with multiple Antivirus programs (those with real-time scanning always enabled) than just a single Antivirus program.

What to do now
First, check to see if any of the paid products are still current / not expired.

Next, decide on which program stays and which programs to uninstall.

IF any of the paid antivirus software is NOT expired, you are safe to choose one of those. Non-expired subscriptions will still get current AV definitions and have the scanning functions active; expired subscriptions do not get current definitions and the scanners are de-activated, so you are unprotected with expired subscriptions.

IF all of the paid subscription software is expired, a Free software solution is preferred to none at all (expired subscription software is the same (at best) as none at all; you are not protected with an expired subscription for a paid antivirus software). We recommend a FREE solution (Avast! free) because we want users to be protected; the FREE version doesn't have a subscription that expires (and leaves the user un-protected), uses less resources on the user's system (it doesn't include all the extras that the paid versions of Avast do) but still offers a good level of protection from virus and malware.

How do I get back to being protected?
Basically, you should uninstall one of the two programs and use any cleanup uninstall utility program those vendors provide to make sure there are no left-over remains (registry entries, files, drivers, etc.) on your system. This will remove any possible interference of the two uninstalled programs to the security program that remains. Because some of the cleanup utilities ask you to run them in Safe Mode (which does not have network access) you should download them first before starting the uninstalling processes.

Step 1 - Download the Uninstall / clean up utilities (save the file(s) on your desktop): You only need to download the utility for the programs you want to uninstall; I listed both here for your convenience.

• Norton Removal Tool - link for Norton Removal Tool
• Avast - link for Avast uninstall tool

Step 2 - Uninstall the programs you don't want to keep - using the standard uninstall process followed by the uninstall utility

When you have finished with the removal steps (removing one of the two antivirus programs and running their cleaning utilities), please restart your system.

 

Second Step >>>>

 

Malwarebytes' Anti-Malware
Please download the latest version of Malwarebytes' Anti-Malware from Here

Double Click on the mbam-setup.exe file to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• When the main screen opens, if the database is out of date, you can click on the Fix Now banner or the Update Now link
• 
• Once the program has loaded and updated, select "Scan Now >>" to start the scan.
• 
• The scan may take some time to finish, so please be patient.
• If any malware is found, make sure that everything is checked, and click Remove Selected.
• When the scan is complete, click View detailed log >> to view the results.
• 
• The report screen will open
• 
• At the bottom click on Export and select as txt file, save the file to your desktop and click OK.  When the export is complete, select OPEN.
• 
• The log file will be opened in your default text file viewer (usually Notepad); select the whole text (Ctrl + A) and copy (Ctrl + c) it to paste here in a reply.

If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.
 

 

 

 

[dbreeze]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.