Page 1 of 2 12 LastLast
Results 1 to 10 of 15
  1. #1
    Member
    Join Date
    Nov 2014
    Posts
    8
    Points
    0

    Default Virus problems... thanks for looking

    Hi, my mom has picked up a nasty virus on her computer and I've been helping her deal with it. I've used your site in the past with my own problems and had success every time so I convinced her to let me give it a go before she buys a new computer. I've ran SuperAntiSpyware, Malwarebytes several times and included the most recent logs. She has AVG2012 for anti-virus but I wasn't able to open it so I downloaded and ran Avast a couple times including a boot scan. I've followed all of the recommendations from all 3 programs and finally ran Hijackthis.
    SAS log-
    SUPERAntiSpyware Scan Log
    SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

    Generated 11/06/2014 at 07:28 PM

    Application Version : 6.0.1158
    Database Version : 11590

    Scan type : Complete Scan
    Total Scan Time : 00:32:14

    Operating System Information
    Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
    UAC Off - Administrator

    Memory items scanned : 516
    Memory threats detected : 0
    Registry items scanned : 72044
    Registry threats detected : 3
    File items scanned : 22599
    File threats detected : 66

    PUP.Ask Toolbar
    (x86) HKLM\SOFTWARE\AskPartnerNetwork\Toolbar
    (x86) HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}

    PUP.Coupon Printer for Windows
    (x86) HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}

    Adware.Tracking Cookie
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\GDFTK39A.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\GDFTK39A.txt [ /corptag.rotator.hadj7.adjuggler.net ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\1K4A79F6.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\1K4A79F6.txt [ /ads.betweendigital.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\VEJ1GHQH.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\VEJ1GHQH.txt [ /advertizenet.rotator.hadj7.adjuggler.net ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\WBFCJRMP.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\WBFCJRMP.txt [ /in.getclicky.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\49RVM7NQ.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\49RVM7NQ.txt [ /ad.yashi.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\FP58IQNH.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\FP58IQNH.txt [ /yadro.ru ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\RIEUTIZX.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\RIEUTIZX.txt [ /ad.mlnadvertising.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\QE3Z6WYZ.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\QE3Z6WYZ.txt [ /stats.paypal.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\1NQKIYW5.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\1NQKIYW5.txt [ /adtech.de ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\PS22HXCY.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\PS22HXCY.txt [ /atdmt.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\13EC57ZI.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\13EC57ZI.txt [ /www.crackflix.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\VZ4P1MMQ.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\VZ4P1MMQ.txt [ /adtechus.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\YWK7VG6N.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\YWK7VG6N.txt [ /ads.gamersmedia.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\ZQ8CPUNJ.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\ZQ8CPUNJ.txt [ /ads.gamersmedia.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\R66BOTZY.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\R66BOTZY.txt [ /ads.gamersmedia.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\URJFDCO0.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\URJFDCO0.txt [ /amazon-adsystem.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\XCTFK0FE.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\XCTFK0FE.txt [ /imrworldwide.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\O6QGXH9D.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\O6QGXH9D.txt [ /revenuemantra.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\25U8LAK7.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\25U8LAK7.txt [ /eclickz.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\0L49E15Z.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\0L49E15Z.txt [ /track.hubrus.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\SR0LSB0E.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\SR0LSB0E.txt [ /monetizemytraffic.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\6F63Z7GB.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\6F63Z7GB.txt [ /ads.thefashionfanatic.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\H879XDZ9.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\H879XDZ9.txt [ /zenovia.rotator.hadj1.adjuggler.net ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\KC9TPYTI.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\KC9TPYTI.txt [ /display.eclickz.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\BP3ZUIWP.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\BP3ZUIWP.txt [ /upttracking.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\YG049ZCV.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\YG049ZCV.txt [ /interclick.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\MUCLEZGN.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\MUCLEZGN.txt [ /crackflix.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\OUSSL9KR.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\OUSSL9KR.txt [ /clickbank.net ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\B829M6IS.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\B829M6IS.txt [ /c.clickprotects.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\RXJ4TL3Z.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\RXJ4TL3Z.txt [ /ads.pureleads.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\UUE4P73Q.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\UUE4P73Q.txt [ /app.videostat.com ]
    C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\S3PCXJML.txtC:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Cookies\S3PCXJML.txt [ /adultadworld.com ]
    .doubleclick.net [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    www.googleadservices.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .imrworldwide.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .serving-sys.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .serving-sys.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .serving-sys.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .serving-sys.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .ad.mlnadvertising.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .casalemedia.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .casalemedia.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .ru4.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .advertising.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .advertising.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .survey.g.doubleclick.net [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .mediaplex.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .mediaplex.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .mediaplex.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .revsci.net [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .revsci.net [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .revsci.net [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .revsci.net [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .doubleclick.net [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .casalemedia.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .casalemedia.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .casalemedia.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .casalemedia.com [ C:\USERS\WENDY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    secure-uk.imrworldwide.com [ C:\USERS\WENDY\APPDATA\LOCAL\TEMP\10C0\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\P32HVSAJ ]
    secure-uk.imrworldwide.com [ C:\USERS\WENDY\APPDATA\LOCAL\TEMP\2458\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\73YEVGMK ]
    d14.zedo.com [ C:\USERS\WENDY\APPDATA\LOCAL\TEMP\43C\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXJSD3E6 ]
    secure-uk.imrworldwide.com [ C:\USERS\WENDY\APPDATA\LOCAL\TEMP\500\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\HH4GRZZC ]
    secure-uk.imrworldwide.com [ C:\USERS\WENDY\APPDATA\LOCAL\TEMP\BD0\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\US4W6BSR ]
    adimages.scrippsnetworks.com [ C:\USERS\WENDY\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\QHKZZJ9R ]
    ads2.msads.net [ C:\USERS\WENDY\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\QHKZZJ9R ]
    s0.2mdn.net [ C:\USERS\WENDY\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\QHKZZJ9R ]

    ============
    End of Log
    ============
    Malwarebytes log-
    Malwarebytes Anti-Malware
    Malwarebytes | Free Anti-Malware & Internet Security Software

    Scan Date: 11/8/2014
    Scan Time: 10:55:07 AM
    Logfile: mal.txt
    Administrator: Yes

    Version: 0.00.0.0000
    Malware Database: v2014.11.08.03
    Rootkit Database: v2014.11.01.02
    License: Trial
    Malware Protection: Enabled
    Malicious Website Protection: Enabled
    Self-protection: Disabled

    OS: Windows 7 Service Pack 1
    CPU: x64
    File System: NTFS
    User: Wendy

    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 378181
    Time Elapsed: 27 min, 30 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Heuristics: Enabled
    PUP: Enabled
    PUM: Enabled

    Processes: 0
    (No malicious items detected)

    Modules: 0
    (No malicious items detected)

    Registry Keys: 2
    Backdoor.Bot, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, Quarantined, [668a97a1215b2511dc70805fe21fe41c],
    Backdoor.Bot, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, Quarantined, [668a97a1215b2511dc70805fe21fe41c],

    Registry Values: 0
    (No malicious items detected)

    Registry Data: 0
    (No malicious items detected)

    Folders: 0
    (No malicious items detected)

    Files: 3
    Backdoor.Bot, C:\Users\Wendy\AppData\Roaming\FrameworkUpdate7\GoogleUpdate.exe, Quarantined, [668a97a1215b2511dc70805fe21fe41c],
    Backdoor.Bot, C:\Users\Wendy\AppData\Local\Temp\E074.tmp, Quarantined, [c927d56387f561d5d775ae3117ea9c64],
    Backdoor.Bot, C:\Users\Wendy\AppData\Local\Temp\E7E3.tmp, Quarantined, [22ce49ef91ebdd5963e936a98f7213ed],

    Physical Sectors: 0
    (No malicious items detected)


    (end)
    Hijack this log-
    Logfile of Trend Micro HijackThis v2.0.5
    Scan saved at 11:30:24 AM, on 11/8/2014
    Platform: Windows 7 SP1 (WinNT 6.00.3505)
    MSIE: Internet Explorer v11.0 (11.00.9600.17344)

    FIREFOX: 26.0 (en-US)
    Boot mode: Normal

    Running processes:
    C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
    C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
    C:\ProgramData\Avg_Update_0814tb\0814tb_{14B84B92-B246-45AD-8C50-3A68B4E9DA9F}.exe
    C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
    C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe
    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    C:\Program Files\AVAST Software\Avast\avastui.exe
    C:\Users\Wendy\Downloads\HijackThis (2).exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
    C:\Windows\SysWOW64\DllHost.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = msn
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = msn
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    F2 - REG:system.ini: UserInit=userinit.exe,
    O1 - Hosts: ::1 localhost
    O1 - Hosts: 85.25.107.64 Google Analytics Official Website ? Web Analytics & Reporting.
    O1 - Hosts: 85.25.107.64 google-analytics.com.
    O1 - Hosts: 85.25.107.64 connect.facebook.net.
    O1 - Hosts: 94.242.254.156 Google Analytics Official Website ? Web Analytics & Reporting.
    O1 - Hosts: 94.242.254.156 google-analytics.com.
    O1 - Hosts: 94.242.254.156 connect.facebook.net.
    O1 - Hosts: 85.17.81.54 Google Analytics Official Website ? Web Analytics & Reporting.
    O1 - Hosts: 85.17.81.54 google-analytics.com.
    O1 - Hosts: 85.17.81.54 connect.facebook.net.
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll
    O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: Microsoft Live Search Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll
    O3 - Toolbar: Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
    O3 - Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
    O4 - HKLM\..\Run: [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
    O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    O4 - HKCU\..\Run: [AvgUpdater0814tb] C:\ProgramData\Avg_Update_0814tb\0814tb_{14B84B92-B246-45AD-8C50-3A68B4E9DA9F}.exe /SETINFO /CMPID=0814tb /INFORETRY=-74
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll
    O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll
    O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
    O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
    O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
    O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
    O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
    O23 - Service: vToolbarUpdater18.1.9 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe
    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    --
    End of file - 11229 bytes



    Let me know if I've left anything out or need to follow up with more info. Thanks in advance to anyone who tries to give me some help,
    Dave

  2. #2
    Member Spyware Fighter zep516's Avatar
    Join Date
    Dec 2005
    Location
    Pittsburgh, Pa
    Posts
    7,158
    Points
    1301

    Default

    Hello,

    Please read the instructions carefully. All tools must be downloaded to the desktop. If the tool it ends up in the downloads folder move it to the desktop. Also Right click every tool and "run as administrator."

    Please uninstall Avast for now, we can't have 2 Anti Virus programs running at that same time. Let me know you have done that.

    Next
    Please download Farbar Recovery Scan Tool and save it to your Desktop.

    Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. You need the 64Bit version.

    • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will produce a log called FRST.txt in the same directory the tool is run from.
    • Please copy and paste log back here.
    • The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

  3. #3
    Member
    Join Date
    Nov 2014
    Posts
    8
    Points
    0

    Default

    Thanks for such a fast response. I'm at home right now but will be working on the infected computer again tomorrow. A couple quick questions, the virus apparently disabled AVG2012 which is why I downloaded Avast, can I uninstall AVG instead? When I resubmit the logs would it be better to simply attach them or would you prefer a cut and paste? Sorry about not putting the tools on the desktop, I must have missed that in the instructions and will correct. Thanks again.

  4. #4
    Member Spyware Fighter zep516's Avatar
    Join Date
    Dec 2005
    Location
    Pittsburgh, Pa
    Posts
    7,158
    Points
    1301

    Default

    Hello,

    Cut an paste is what we want. No attachments please.

    Yes you may uninstall AVG, and use the AVG removal tool as shown Here. Scroll down to the AVG 2012 download an run it.

    The other tools you used are ok, But from here on out the tools that I ask you to download please save them to the desktop.

    What program told you that you have a virus ? What was the name of the virus ?

    Joe

  5. #5
    Member
    Join Date
    Nov 2014
    Posts
    8
    Points
    0

    Default

    Hi,
    I got AVG uninstalled and ran Farbar. I don't know the name of the virus and was actually just assuming there was one. By the time my mom asked for help her computer was so slow that it was almost unresponsive. The first thing I tried was System Restore but got a message that it had been made unavailable by the system administrator. When I tried to run her AVG I got the same message. In my limited experience these issues are the trademark of viruses. Sorry I don't have better information. Here are the logs you requested.


    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-11-2014 01
    Ran by Wendy (administrator) on WENDY-PC on 09-11-2014 12:22:13
    Running from C:\Users\Wendy\Desktop
    Loaded Profile: Wendy (Available profiles: Wendy)
    Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
    Internet Explorer Version 11
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
    (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
    (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
    (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\tv_w32.exe
    (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\tv_x64.exe
    (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
    (SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    () C:\ProgramData\Avg_Update_0814tb\0814tb_{14B84B92-B246-45AD-8C50-3A68B4E9DA9F}.exe
    (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
    (Hewlett-Packard) C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe
    (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    HKLM\...\Run: [PC-Doctor for Windows localizer] => C:\Program Files\PC-Doctor for Windows\localizer.exe [95728 2009-09-16] (PC-Doctor, Inc.)
    HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-07-26] (CANON INC.)
    HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-17] (CANON INC.)
    HKLM-x32\...\Run: [hpsysdrv] => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
    HKLM-x32\...\Run: [HP Software Update] => c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2008-12-08] (Hewlett-Packard)
    HKLM-x32\...\Run: [] => [X]
    HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [vProt] => "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
    HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
    HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5223016 2014-11-05] (AVAST Software)
    HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-10-21] (Hewlett-Packard)
    HKLM Group Policy restriction on software: C:\Program Files (x86)\Common Files\Symantec Shared <====== ATTENTION
    HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\AVAST Software <====== ATTENTION
    HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION
    HKLM Group Policy restriction on software: C:\Program Files (x86)\Symantec <====== ATTENTION
    HKLM Group Policy restriction on software: C:\Program Files (x86)\AVG <====== ATTENTION
    HKLM Group Policy restriction on software: C:\Program Files (x86)\AVG <====== ATTENTION
    HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION
    HKU\S-1-5-21-1112053591-31326686-398317036-1001\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [3872080 2010-04-16] (Microsoft Corporation)
    HKU\S-1-5-21-1112053591-31326686-398317036-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7767832 2014-10-01] (SUPERAntiSpyware)
    HKU\S-1-5-21-1112053591-31326686-398317036-1001\...\Run: [AvgUpdater0814tb] => C:\ProgramData\Avg_Update_0814tb\0814tb_{14B84B92-B246-45AD-8C50-3A68B4E9DA9F}.exe [2782744 2014-08-26] ()
    HKU\S-1-5-21-1112053591-31326686-398317036-1001\...409d6c4515e9\InprocServer32: [Default-shell32] C:\Users\Wendy\AppData\Local\Temp\siinqio\svnbcxq\wow64.dll ATTENTION! ====> ZeroAccess?
    HKU\S-1-5-21-1112053591-31326686-398317036-1001\...A8F59079A8D5}\localserver32: rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 239 more characters). <==== Poweliks!
    ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = msn
    HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
    HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF0E603286EF4CF01
    HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = msn
    HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = msn
    StartMenuInternet: IEXPLORE.EXE - iexplore.exe
    SearchScopes: HKLM-x32 - DefaultScope {cca2e567-1987-4100-a3c6-5b4267084510} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^YK^xdm030^S00743^us&si=21786&ptb=3ECB81D2-EFBE-495F-931D-C05B548564D7&psa=&ind=2012032111&st=sb&n=77ed2c6f&searchfor={searchTerms}
    SearchScopes: HKLM-x32 - {cca2e567-1987-4100-a3c6-5b4267084510} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^YK^xdm030^S00743^us&si=21786&ptb=3ECB81D2-EFBE-495F-931D-C05B548564D7&psa=&ind=2012032111&st=sb&n=77ed2c6f&searchfor={searchTerms}
    BHO: No Name -> {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} -> No File
    BHO: No Name -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
    BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
    BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
    BHO-x32: No Name -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
    BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
    BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
    BHO-x32: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
    BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
    BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
    BHO-x32: Microsoft Live Search Toolbar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll (Microsoft Corp.)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
    Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
    Toolbar: HKLM-x32 - Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll (Microsoft Corp.)
    Toolbar: HKLM-x32 - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} - No File
    Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
    Toolbar: HKCU - No Name - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
    Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
    DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
    Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
    Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll (AVG Secure Search)
    Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
    Tcpip\Parameters: [DhcpNameServer] 24.220.0.10 24.220.0.11

    FireFox:
    ========
    FF ProfilePath: C:\Users\Wendy\AppData\Roaming\Mozilla\Firefox\Profiles\l7908rge.default
    FF SelectedSearchEngine: Google
    FF DefaultSearchEngine: Google
    FF SearchEngineOrder.3: Bing
    FF Keyword.URL: https://www.google.com/search
    FF DefaultSearchUrl: https://www.google.com/search
    FF SearchEngineOrder.1: Google
    FF Homepage: https://www.google.com/
    FF NewTab: about:newtab
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
    FF Plugin: @microsoft.com/GENUINE -> disabled No File
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
    FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.9\\npsitesafety.dll No File
    FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
    FF Plugin-x32: @ei.TelevisionFanatic.com/Plugin -> C:\Program Files (x86)\TelevisionFanaticEI\Installr\1.bin\NP64EISB.dll (TelevisionFanatic)
    FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
    FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF SearchPlugin: C:\Users\Wendy\AppData\Roaming\Mozilla\Firefox\Profiles\l7908rge.default\searchplugins\bingp.xml
    FF SearchPlugin: C:\Users\Wendy\AppData\Roaming\Mozilla\Firefox\Profiles\l7908rge.default\searchplugins\google-avast.xml
    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
    FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.9.799
    FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
    FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-11-05]
    FF StartMenuInternet: FIREFOX.EXE - firefox.exe

    Chrome:
    =======
    CHR Profile: C:\Users\Wendy\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Wendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-11-04]
    CHR Extension: (Avast Online Security) - C:\Users\Wendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-11-06]
    CHR Extension: (Google Wallet) - C:\Users\Wendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-04]
    CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-05]
    CHR HKLM-x32\...\Chrome\Extension: [jmfkcklnlgedgbglfkkgedjfmejoahla] - C:\Program Files (x86)\AVG\AVG2012\Chrome\safesearch.crx [2014-11-05]

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-22] (SUPERAntiSpyware.com)
    R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-05] (AVAST Software)
    R2 HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [125440 2009-09-24] (Hewlett-Packard) [File not signed]
    R2 LightScribeService; c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-08-20] (Hewlett-Packard Company) [File not signed]
    R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
    R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
    S2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [X]

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-05] ()
    R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-05] (AVAST Software)
    R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-05] (AVAST Software)
    R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-05] ()
    R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-05] (AVAST Software)
    R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-05] (AVAST Software)
    R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-05] (AVAST Software)
    R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-05] ()
    R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
    R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-09] (Malwarebytes Corporation)
    R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-10-01] (Malwarebytes Corporation)
    R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
    R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

    ==================== NetSvcs (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


    ==================== One Month Created Files and Folders ========

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2014-11-09 12:22 - 2014-11-09 12:26 - 00018434 _____ () C:\Users\Wendy\Desktop\FRST.txt
    2014-11-09 12:18 - 2014-11-09 12:22 - 00000000 ____D () C:\FRST
    2014-11-09 12:17 - 2014-11-09 12:17 - 02116096 _____ (Farbar) C:\Users\Wendy\Desktop\FRST64.exe
    2014-11-09 12:02 - 2014-11-09 12:13 - 00599044 _____ () C:\Users\Wendy\Desktop\avgremover.log
    2014-11-09 12:00 - 2014-11-09 12:00 - 03681088 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Wendy\Desktop\avg_remover_stf_x86_2015_5501.exe
    2014-11-09 11:59 - 2014-11-09 11:59 - 00002298 _____ () C:\Users\Wendy\Downloads\avg_update_msss_2012_1.zip
    2014-11-09 11:58 - 2014-11-09 11:59 - 00240480 _____ () C:\Users\Wendy\Downloads\avg_prp_sup__2012_0.exe
    2014-11-08 11:30 - 2014-11-08 11:30 - 00011231 _____ () C:\Users\Wendy\Desktop\hijackthis.log
    2014-11-08 11:20 - 2014-11-08 11:20 - 00388608 _____ (Trend Micro Inc.) C:\Users\Wendy\Downloads\HijackThis (2).exe
    2014-11-08 11:19 - 2014-11-08 11:19 - 00001158 _____ () C:\Users\Wendy\Desktop\Live PC Help.lnk
    2014-11-08 11:02 - 2014-11-08 11:02 - 00388608 _____ (Trend Micro Inc.) C:\Users\Wendy\Downloads\HijackThis (1).exe
    2014-11-08 11:02 - 2014-11-08 11:02 - 00003076 _____ () C:\Windows\System32\Tasks\Advanced-System Protector_startup
    2014-11-08 11:02 - 2014-11-08 11:02 - 00001043 _____ () C:\Users\Public\Desktop\Advanced-System Protector.lnk
    2014-11-08 11:02 - 2014-11-08 11:02 - 00000000 ____D () C:\Users\Wendy\AppData\Roaming\Systweak
    2014-11-08 11:02 - 2014-11-08 11:02 - 00000000 ____D () C:\Users\Wendy\AppData\Roaming\AdvancedSystemProtector
    2014-11-08 11:02 - 2014-11-08 11:02 - 00000000 ____D () C:\ProgramData\Systweak
    2014-11-08 11:02 - 2014-11-08 11:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
    2014-11-08 11:02 - 2014-11-08 11:02 - 00000000 ____D () C:\Program Files (x86)\ASP
    2014-11-08 11:02 - 2012-07-25 12:03 - 00016896 _____ () C:\Windows\system32\sasnative64.exe
    2014-11-08 11:01 - 2014-11-08 11:01 - 03437344 _____ (tuneuppro.com ) C:\Users\Wendy\Downloads\setup.exe
    2014-11-08 11:01 - 2014-10-29 15:42 - 00019736 _____ () C:\Windows\system32\roboot64.exe
    2014-11-08 10:58 - 2014-11-08 10:58 - 00001679 _____ () C:\Users\Wendy\Desktop\mal.txt
    2014-11-06 18:47 - 2014-11-08 11:03 - 00011300 _____ () C:\Users\Wendy\Downloads\hijackthis.log
    2014-11-06 11:17 - 2014-11-06 11:17 - 00388608 _____ (Trend Micro Inc.) C:\Users\Wendy\Downloads\HijackThis.exe
    2014-11-05 12:03 - 2014-11-05 12:03 - 00000000 ____D () C:\Users\Wendy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
    2014-11-05 12:01 - 2014-11-05 12:05 - 00000000 ____D () C:\Users\Wendy\AppData\Roaming\Dropbox
    2014-11-05 11:50 - 2014-11-05 11:50 - 00000000 ____D () C:\Users\Wendy\AppData\Roaming\AVAST Software
    2014-11-05 11:49 - 2014-11-05 11:49 - 00001970 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
    2014-11-05 11:49 - 2014-11-05 11:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
    2014-11-05 11:48 - 2014-11-09 11:53 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
    2014-11-05 11:47 - 2014-11-05 11:48 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
    2014-11-05 11:47 - 2014-11-05 11:48 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
    2014-11-05 11:47 - 2014-11-05 11:45 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
    2014-11-05 11:47 - 2014-11-05 11:45 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
    2014-11-05 11:47 - 2014-11-05 11:45 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
    2014-11-05 11:47 - 2014-11-05 11:45 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
    2014-11-05 11:47 - 2014-11-05 11:45 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
    2014-11-05 11:47 - 2014-11-05 11:45 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
    2014-11-05 11:46 - 2014-11-05 11:45 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
    2014-11-05 11:45 - 2014-11-05 11:45 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
    2014-11-05 11:40 - 2014-11-05 11:40 - 00000000 ____D () C:\Program Files\AVAST Software
    2014-11-05 11:38 - 2014-11-05 11:38 - 05004328 _____ (AVAST Software) C:\Users\Wendy\Downloads\avast_free_antivirus_setup_online.exe
    2014-11-05 11:38 - 2014-11-05 11:38 - 05004328 _____ (AVAST Software) C:\Users\Public\Desktop\avast_free_antivirus_setup_online.exe
    2014-11-04 20:32 - 2014-11-08 21:47 - 00003186 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForWendy
    2014-11-04 20:32 - 2014-11-08 21:47 - 00000332 _____ () C:\Windows\Tasks\HPCeeScheduleForWendy.job
    2014-11-04 15:43 - 2014-11-09 12:12 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
    2014-11-04 15:42 - 2014-11-04 15:42 - 00001104 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
    2014-11-04 15:42 - 2014-11-04 15:42 - 00000000 ____D () C:\ProgramData\Malwarebytes
    2014-11-04 15:42 - 2014-11-04 15:42 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
    2014-11-04 15:42 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
    2014-11-04 15:42 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
    2014-11-04 15:42 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
    2014-11-04 15:40 - 2014-11-04 15:40 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Wendy\Downloads\mbam-setup-2.0.3.1025.exe
    2014-11-04 12:55 - 2014-11-04 12:55 - 00000000 ____D () C:\SUPERDelete
    2014-11-04 12:49 - 2014-11-04 12:49 - 00000000 ____D () C:\Users\Wendy\AppData\Roaming\SUPERAntiSpyware.com
    2014-11-04 12:46 - 2014-11-04 12:46 - 00001814 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
    2014-11-04 12:45 - 2014-11-09 12:13 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
    2014-11-04 12:45 - 2014-11-04 12:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
    2014-11-04 12:45 - 2014-11-04 12:45 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
    2014-11-04 12:41 - 2014-11-04 12:42 - 20143256 _____ (SUPERAntiSpyware) C:\Users\Wendy\Downloads\SUPERAntiSpyware.exe
    2014-11-01 19:06 - 2014-11-04 20:36 - 00000000 ____D () C:\ProgramData\VidotOxopq
    2014-11-01 19:04 - 2014-11-04 20:36 - 00000000 ____D () C:\ProgramData\FezuBofe
    2014-11-01 15:36 - 2014-11-01 15:36 - 00292832 _____ () C:\Windows\Minidump\110114-62306-01.dmp
    2014-11-01 13:10 - 2014-11-01 19:11 - 00000160 ____H () C:\ProgramData\@system3.att
    2014-11-01 13:09 - 2014-11-07 14:42 - 00000000 ____D () C:\Users\Wendy\AppData\Roaming\FrameworkUpdate7
    2014-11-01 13:09 - 2014-11-01 20:18 - 00000000 ___HD () C:\629fb1f
    2014-11-01 13:09 - 2014-11-01 19:11 - 00000424 _____ () C:\ProgramData\@system.temp
    2014-11-01 13:09 - 2014-11-01 13:09 - 00000448 ____H () C:\Users\Wendy\AppData\Roaming\麽鎒駓覜
    2014-10-29 10:50 - 2014-10-29 10:50 - 00000028 _____ () C:\Windows\SysWOW64\u
    2014-10-28 20:39 - 2014-10-28 20:39 - 00003860 _____ () C:\Windows\System32\Tasks\{E38B6FC3-D1B3-9DE7-DC66-3F708FCDB35B}
    2014-10-28 20:39 - 2014-10-28 20:39 - 00000000 _____ () C:\Windows\system32\pkpbgl.dll
    2014-10-23 13:48 - 2014-11-04 12:56 - 00000000 ____D () C:\Users\Wendy\AppData\Local\AskPartnerNetwork
    2014-10-23 13:48 - 2014-11-04 12:56 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
    2014-10-23 13:48 - 2014-10-23 13:48 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
    2014-10-15 12:10 - 2014-10-06 20:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2014-10-15 12:10 - 2014-10-06 20:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2014-10-15 12:10 - 2014-09-28 18:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2014-10-15 12:10 - 2014-09-25 16:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2014-10-15 12:10 - 2014-09-25 16:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
    2014-10-15 12:10 - 2014-09-25 16:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
    2014-10-15 12:10 - 2014-09-25 16:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
    2014-10-15 12:10 - 2014-09-25 16:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2014-10-15 12:10 - 2014-09-25 16:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2014-10-15 12:10 - 2014-09-25 16:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2014-10-15 12:10 - 2014-09-18 20:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2014-10-15 12:10 - 2014-09-18 19:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2014-10-15 12:10 - 2014-09-18 19:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
    2014-10-15 12:10 - 2014-09-18 19:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2014-10-15 12:10 - 2014-09-18 19:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2014-10-15 12:10 - 2014-09-18 19:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2014-10-15 12:10 - 2014-09-18 19:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
    2014-10-15 12:10 - 2014-09-18 19:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
    2014-10-15 12:10 - 2014-09-18 19:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
    2014-10-15 12:10 - 2014-09-18 19:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2014-10-15 12:10 - 2014-09-18 19:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2014-10-15 12:10 - 2014-09-18 19:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
    2014-10-15 12:10 - 2014-09-18 19:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2014-10-15 12:10 - 2014-09-18 19:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
    2014-10-15 12:10 - 2014-09-18 19:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2014-10-15 12:10 - 2014-09-18 19:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
    2014-10-15 12:10 - 2014-09-18 19:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
    2014-10-15 12:10 - 2014-09-18 19:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
    2014-10-15 12:10 - 2014-09-18 19:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
    2014-10-15 12:10 - 2014-09-18 19:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2014-10-15 12:10 - 2014-09-18 19:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
    2014-10-15 12:10 - 2014-09-18 19:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2014-10-15 12:10 - 2014-09-18 19:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
    2014-10-15 12:10 - 2014-09-18 19:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
    2014-10-15 12:10 - 2014-09-18 19:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
    2014-10-15 12:10 - 2014-09-18 19:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2014-10-15 12:10 - 2014-09-18 18:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
    2014-10-15 12:10 - 2014-09-18 18:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2014-10-15 12:10 - 2014-09-18 18:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2014-10-15 12:10 - 2014-09-18 18:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
    2014-10-15 12:10 - 2014-09-18 18:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
    2014-10-15 12:10 - 2014-09-18 18:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
    2014-10-15 12:10 - 2014-09-18 18:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
    2014-10-15 12:10 - 2014-09-18 18:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
    2014-10-15 12:10 - 2014-09-18 18:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2014-10-15 12:10 - 2014-09-18 18:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2014-10-15 12:10 - 2014-09-18 18:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
    2014-10-15 12:10 - 2014-09-18 18:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
    2014-10-15 12:10 - 2014-09-18 18:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2014-10-15 12:10 - 2014-09-18 18:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
    2014-10-15 12:10 - 2014-09-18 18:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2014-10-15 12:10 - 2014-09-18 18:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
    2014-10-15 12:10 - 2014-09-18 18:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2014-10-15 12:10 - 2014-09-18 17:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2014-10-15 12:10 - 2014-09-18 17:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2014-10-15 12:10 - 2014-09-18 17:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2014-10-15 12:10 - 2014-09-18 17:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
    2014-10-15 12:10 - 2014-09-17 20:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
    2014-10-15 12:10 - 2014-09-17 19:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
    2014-10-15 12:10 - 2014-09-03 23:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
    2014-10-15 12:10 - 2014-09-03 23:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
    2014-10-15 12:10 - 2014-08-18 21:11 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
    2014-10-15 12:10 - 2014-08-18 21:10 - 00616352 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
    2014-10-15 12:10 - 2014-08-18 21:08 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
    2014-10-15 12:10 - 2014-08-18 21:08 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
    2014-10-15 12:10 - 2014-08-18 21:08 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
    2014-10-15 12:10 - 2014-08-18 21:07 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
    2014-10-15 12:10 - 2014-08-18 21:07 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
    2014-10-15 12:10 - 2014-08-18 21:07 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
    2014-10-15 12:10 - 2014-08-18 21:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
    2014-10-15 12:10 - 2014-08-18 21:07 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
    2014-10-15 12:10 - 2014-08-18 20:41 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
    2014-10-15 12:10 - 2014-08-18 20:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
    2014-10-15 12:10 - 2014-08-18 20:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
    2014-10-15 12:10 - 2014-07-06 20:07 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
    2014-10-15 12:10 - 2014-07-06 20:07 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
    2014-10-15 12:10 - 2014-07-06 20:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 05551032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2014-10-15 12:10 - 2014-07-06 20:06 - 04120576 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
    2014-10-15 12:10 - 2014-07-06 20:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
    2014-10-15 12:10 - 2014-07-06 20:06 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
    2014-10-15 12:10 - 2014-07-06 20:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
    2014-10-15 12:10 - 2014-07-06 20:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
    2014-10-15 12:10 - 2014-07-06 20:05 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
    2014-10-15 12:10 - 2014-07-06 20:05 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
    2014-10-15 12:10 - 2014-07-06 20:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
    2014-10-15 12:10 - 2014-07-06 19:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
    2014-10-15 12:10 - 2014-07-06 19:40 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 03208704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
    2014-10-15 12:10 - 2014-07-06 19:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
    2014-10-15 12:10 - 2014-07-06 19:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
    2014-10-15 12:10 - 2014-07-06 19:39 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
    2014-10-15 12:10 - 2014-07-06 19:39 - 03970488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
    2014-10-15 12:10 - 2014-07-06 19:39 - 03914680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
    2014-10-15 12:10 - 2014-07-06 19:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
    2014-10-15 12:10 - 2014-07-06 19:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
    2014-10-15 12:10 - 2014-07-06 19:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
    2014-10-15 12:10 - 2014-06-27 18:21 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
    2014-10-15 12:10 - 2014-06-27 18:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
    2014-10-15 12:10 - 2014-06-27 18:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
    2014-10-15 12:10 - 2014-06-18 16:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
    2014-10-15 12:10 - 2014-06-18 16:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
    2014-10-15 12:10 - 2014-06-18 16:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
    2014-10-15 12:10 - 2014-06-18 16:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
    2014-10-15 12:10 - 2014-06-18 16:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
    2014-10-15 12:10 - 2014-06-18 16:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
    2014-10-15 12:09 - 2014-09-12 19:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
    2014-10-15 12:09 - 2014-09-12 19:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
    2014-10-15 12:09 - 2014-07-16 20:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
    2014-10-15 12:09 - 2014-07-16 20:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
    2014-10-15 12:09 - 2014-07-16 20:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
    2014-10-15 12:09 - 2014-07-16 20:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
    2014-10-15 12:09 - 2014-07-16 20:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
    2014-10-15 12:09 - 2014-07-16 20:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
    2014-10-15 12:09 - 2014-07-16 20:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
    2014-10-15 12:09 - 2014-07-16 20:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
    2014-10-15 12:09 - 2014-07-16 19:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
    2014-10-15 12:09 - 2014-07-16 19:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
    2014-10-15 12:09 - 2014-07-16 19:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
    2014-10-15 12:09 - 2014-07-16 19:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
    2014-10-15 12:09 - 2014-07-16 19:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
    2014-10-15 12:09 - 2014-07-16 19:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
    2014-10-15 12:09 - 2014-07-16 19:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
    2014-10-15 12:09 - 2014-07-16 19:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2014-11-09 12:20 - 2009-07-13 22:45 - 00015792 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2014-11-09 12:20 - 2009-07-13 22:45 - 00015792 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2014-11-09 12:13 - 2010-05-23 15:47 - 00000000 ____D () C:\Users\Wendy\Tracing
    2014-11-09 12:13 - 2010-01-07 20:14 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Help & Tools
    2014-11-09 12:12 - 2013-11-22 12:59 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2014-11-09 12:12 - 2010-01-07 20:11 - 00676626 _____ () C:\Windows\PFRO.log
    2014-11-09 12:12 - 2009-07-13 23:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2014-11-09 12:12 - 2009-07-13 22:51 - 00108836 _____ () C:\Windows\setupact.log
    2014-11-09 11:54 - 2013-11-22 12:59 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2014-11-08 18:17 - 2009-07-13 23:13 - 00786578 _____ () C:\Windows\system32\PerfStringBackup.INI
    2014-11-08 18:13 - 2010-05-28 19:51 - 00000000 ____D () C:\Users\Wendy\AppData\Local\CrashDumps
    2014-11-07 16:38 - 2014-01-17 20:14 - 00000000 ____D () C:\Users\Wendy\Documents\2014 E-Bay Descriptions
    2014-11-06 11:16 - 2014-01-18 10:41 - 00001137 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
    2014-11-06 11:16 - 2014-01-18 10:41 - 00001137 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
    2014-11-05 11:40 - 2014-08-06 14:30 - 00000000 ____D () C:\ProgramData\AVAST Software
    2014-11-04 19:55 - 2010-06-01 22:53 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
    2014-11-04 12:55 - 2011-12-16 09:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coupons
    2014-11-01 15:36 - 2014-07-24 17:38 - 262860896 _____ () C:\Windows\MEMORY.DMP
    2014-11-01 15:36 - 2014-07-24 17:38 - 00000000 ____D () C:\Windows\Minidump
    2014-11-01 15:36 - 2009-07-13 23:08 - 00032558 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
    2014-11-01 13:09 - 2010-05-04 13:37 - 01940347 _____ () C:\Windows\WindowsUpdate.log
    2014-10-28 18:24 - 2010-05-23 14:43 - 00000000 ____D () C:\Users\Wendy\AppData\Roaming\HpUpdate
    2014-10-27 20:00 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\LiveKernelReports
    2014-10-27 15:24 - 2013-11-22 13:00 - 00002189 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
    2014-10-23 13:47 - 2013-11-22 10:16 - 00000000 ____D () C:\ProgramData\Oracle
    2014-10-23 13:46 - 2014-08-08 18:09 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
    2014-10-23 13:45 - 2014-01-24 12:58 - 00000000 ____D () C:\Program Files (x86)\Java
    2014-10-18 10:13 - 2011-04-18 14:12 - 00000000 ____D () C:\Users\Wendy\Desktop\2011-04-18 001
    2014-10-17 17:45 - 2013-11-22 12:59 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
    2014-10-17 17:45 - 2013-11-22 12:59 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
    2014-10-17 08:24 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\rescache
    2014-10-16 09:54 - 2009-07-13 22:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
    2014-10-16 09:53 - 2009-07-13 22:45 - 00428936 _____ () C:\Windows\system32\FNTCACHE.DAT
    2014-10-16 09:51 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
    2014-10-16 09:51 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\Dism
    2014-10-15 21:33 - 2010-05-23 15:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
    2014-10-15 21:29 - 2013-08-15 02:03 - 00000000 ____D () C:\Windows\system32\MRT
    2014-10-15 21:24 - 2010-05-23 16:05 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

    Some content of TEMP:
    ====================
    C:\Users\Wendy\AppData\Local\Temp\APNSetup.exe
    C:\Users\Wendy\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdfixii.dll
    C:\Users\Wendy\AppData\Local\Temp\fp_pl_pfs_installer.exe
    C:\Users\Wendy\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
    C:\Users\Wendy\AppData\Local\Temp\MSETUP4.EXE


    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2014-10-26 11:23

    ==================== End Of Log ============================

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-11-2014 01
    Ran by Wendy at 2014-11-09 12:31:38
    Running from C:\Users\Wendy\Desktop
    Boot Mode: Normal
    ==========================================================


    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: AVG Anti-Virus Free Edition 2012 (Enabled - Up to date) {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
    AS: AVG Anti-Virus Free Edition 2012 (Enabled - Up to date) {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    ==================== Installed Programs ======================

    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 2.1.0.0 - Adobe Systems Incorporated)
    Acrobat.com (x32 Version: 2.1.0 - Adobe Systems Incorporated) Hidden
    ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.2 - Hewlett-Packard) Hidden
    Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
    Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.9.900.170 - Adobe Systems Incorporated)
    Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.43 - Adobe Systems Incorporated)
    Adobe Reader XI (11.0.09) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
    Advanced-System Protector (HKLM-x32\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~4A5BE654_is1) (Version: 2.1.1000.14211 - systweak.com) <==== ATTENTION
    Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2206 - AVAST Software)
    Canon MP Navigator EX 3.0 (HKLM-x32\...\MP Navigator EX 3.0) (Version: - )
    Canon MP640 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP640_series) (Version: - )
    Canon MP640 series User Registration (HKLM-x32\...\Canon MP640 series User Registration) (Version: - )
    Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - )
    Canon Utilities My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - )
    Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version: - )
    Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
    Coupon Printer for Windows (HKLM-x32\...\Coupon Printer for Windows5.0.0.1) (Version: 5.0.0.1 - Coupons.com Incorporated)
    CyberLink DVD Suite Deluxe (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.2115 - CyberLink Corp.)
    DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904 - Microsoft) Hidden
    Dropbox (HKU\S-1-5-21-1112053591-31326686-398317036-1001\...\Dropbox) (Version: 2.10.41 - Dropbox, Inc.)
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)
    Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
    Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
    Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
    Hardware Diagnostic Tools (HKLM\...\PC-Doctor for Windows) (Version: 6.0.5247.34 - PC-Doctor, Inc.)
    HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.3.9512.3162 - Hewlett-Packard)
    HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.0.71 - WildTangent)
    HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562}) (Version: 2.10.0000 - Hewlett-Packard)
    HP Remote Solution (HKLM-x32\...\HP Remote Solution) (Version: 1.1.11.0 - Hewlett-Packard)
    HP Setup (HKLM-x32\...\{17B4760F-334B-475D-829F-1A3E94A6A4E6}) (Version: 1.2.3560.3170 - Hewlett-Packard)
    HP Support Assistant (HKLM-x32\...\{741CFE3A-1C0B-4A7D-8E08-5D78C911C09D}) (Version: 4.2.5.3 - Hewlett-Packard)
    HP Support Information (HKLM-x32\...\{B9A03B7B-E0FF-4FB3-BA83-762E58A1B0AA}) (Version: 10.1.0002 - Hewlett-Packard)
    HP Update (HKLM-x32\...\{D46D081B-F60E-467E-A7C4-117B70D76731}) (Version: 5.001.000.014 - Hewlett-Packard)
    HPAsset component for HP Active Support Library (x32 Version: 3.0.2.2 - Hewlett-Packard) Hidden
    Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
    Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
    Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
    LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2017 - CyberLink Corp.)
    LabelPrint (x32 Version: 2.5.2017 - CyberLink Corp.) Hidden
    Lexmark Z500-Z600 Series (HKLM-x32\...\Lexmark Z500-Z600 Series) (Version: - Lexmark International, Inc.)
    LightScribe System Software (HKLM-x32\...\{CC8E94A2-55C7-4460-953C-2A790180578C}) (Version: 1.18.8.1 - LightScribe)
    LSI PCI-SV92EX Soft Modem (HKLM\...\LSI Soft Modem) (Version: 2.2.98 - LSI Corporation)
    Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
    Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
    Microsoft Live Search Toolbar (HKLM-x32\...\{DF802C05-4660-418c-970C-B988ADB1D316}) (Version: 3.0.566.0 - Microsoft Live Search Toolbar)
    Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
    Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0019-0000-0000-0000000FF1CE}_PUBLISHER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
    Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
    Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
    Microsoft Office Outlook Connector (HKLM-x32\...\{95120000-0122-0409-0000-0000000FF1CE}) (Version: 12.0.6423.1000 - Microsoft Corporation)
    Microsoft Office PowerPoint Viewer 2007 (English) (HKLM-x32\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
    Microsoft Office Publisher 2007 (HKLM-x32\...\PUBLISHER) (Version: 12.0.6612.1000 - Microsoft Corporation)
    Microsoft Office Standard 2007 (HKLM-x32\...\STANDARD) (Version: 12.0.6612.1000 - Microsoft Corporation)
    Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
    Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
    Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Works (HKLM-x32\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
    Mozilla Firefox 26.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 26.0 (x86 en-US)) (Version: 26.0 - Mozilla)
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla)
    Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.20.0 - Symantec)
    NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.5 - NVIDIA Corporation)
    PictureMover (HKLM-x32\...\{1896E712-2B3D-45eb-BCE9-542742A51032}) (Version: 3.3.1.19 - Hewlett-Packard Company)
    PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
    Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3304 - CyberLink Corp.)
    Power2Go (x32 Version: 6.0.3304 - CyberLink Corp.) Hidden
    PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3503 - CyberLink Corp.)
    PowerDirector (x32 Version: 7.0.3503 - CyberLink Corp.) Hidden
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5938 - Realtek Semiconductor Corp.)
    Recovery Manager (x32 Version: 5.5.2216 - CyberLink Corp.) Hidden
    Search App by Ask (HKLM-x32\...\{4F524A2D-5350-4500-76A7-A758B70C1200}) (Version: 12.18.0.82 - APN, LLC) <==== ATTENTION
    SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1158 - SUPERAntiSpyware.com)
    TeamViewer 7 (HKLM-x32\...\TeamViewer 7) (Version: 7.0.13989 - TeamViewer)
    Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
    Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0019-0000-0000-0000000FF1CE}_PUBLISHER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
    Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
    Windows Driver Package - Scientific-Atlanta (USBCM) Net (06/10/2004 1.12.0.0000) (HKLM\...\9C6975C1801E1FD9353B8A42B5C15E8EA5E0B66E) (Version: 06/10/2004 1.12.0.0000 - Scientific-Atlanta)
    Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
    Windows Live Sign-in Assistant (HKLM-x32\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation)
    Windows Live Sync (HKLM-x32\...\{B10914FD-8812-47A4-85A1-50FCDE7F1F33}) (Version: 14.0.8117.416 - Microsoft Corporation)
    Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

    ==================== Custom CLSID (selected items): ==========================

    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

    CustomCLSID: HKU\S-1-5-21-1112053591-31326686-398317036-1001_Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\localserver32 -> rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 247 more characters). <==== Poweliks?
    CustomCLSID: HKU\S-1-5-21-1112053591-31326686-398317036-1001_Classes\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 -> C:\Users\Wendy\AppData\Local\Temp\siinqio\svnbcxq\wow64.dll No File

    ==================== Restore Points =========================

    23-07-2014 14:19:38 Scheduled Checkpoint
    24-07-2014 22:10:25 HPSF Restore Point
    24-07-2014 23:42:59 Windows Update
    25-07-2014 00:18:15 HPSF Restore Point
    01-08-2014 14:14:28 Scheduled Checkpoint

    ==================== Hosts content: ==========================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-13 20:34 - 2014-11-01 19:07 - 00001500 ____A C:\Windows\system32\Drivers\etc\hosts
    127.0.0.1 localhost
    85.25.107.64 Google Analytics Official Website ? Web Analytics & Reporting.
    85.25.107.64 google-analytics.com.
    85.25.107.64 connect.facebook.net.
    94.242.254.156 Google Analytics Official Website ? Web Analytics & Reporting.
    94.242.254.156 google-analytics.com.
    94.242.254.156 connect.facebook.net.
    85.17.81.54 Google Analytics Official Website ? Web Analytics & Reporting.
    85.17.81.54 google-analytics.com.
    85.17.81.54 connect.facebook.net.


    ==================== Scheduled Tasks (whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

    Task: {2F947F0D-92E7-4382-A949-07916498C392} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2014-10-21] (Microsoft)
    Task: {4566744E-5B6C-46FE-A241-8D3145E6E2F6} - System32\Tasks\Hewlett-Packard\HP Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2009-09-24] (Hewlett-Packard)
    Task: {4D478805-3146-44DE-9271-CA85FBD462DB} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
    Task: {556599FC-E31E-4C46-A6E4-4330EE9FCFE4} - System32\Tasks\{E38B6FC3-D1B3-9DE7-DC66-3F708FCDB35B} => C:\Windows\system32\kcuttpk.dll/s "C:\Windows\system32\kcuttpk.dll"
    Task: {79892907-194F-4A60-9367-B4E9255C19E0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-22] (Google Inc.)
    Task: {AAB5302E-687F-4B0F-8C36-12F531E0A37E} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-11-05] (AVAST Software)
    Task: {AB0A0F19-66CE-4136-B38B-51D657CC7370} - System32\Tasks\HPCeeScheduleForWendy => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2009-10-07] (Hewlett-Packard)
    Task: {ABFC96E4-FE2A-4243-9B68-99B0A0F40E32} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Ghost Resign Task => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\HPResignFileLoader.exe [2014-10-21] (Microsoft)
    Task: {D7546EAA-4FB8-4838-A404-4A08265A454D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-22] (Google Inc.)
    Task: {F76582C5-5DB7-4488-BFD1-BB6255A7033C} - System32\Tasks\Advanced-System Protector_startup => C:\Program Files (x86)\ASP\AdvancedSystemProtector.exe [2014-11-05] () <==== ATTENTION
    Task: {FA9B3C9B-D7DA-4314-9CAF-7165FBF8CDD9} - System32\Tasks\Hewlett-Packard\HP Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2009-09-24] (Hewlett-Packard)
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\HPCeeScheduleForWendy.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

    ==================== Loaded Modules (whitelisted) =============

    2014-08-26 17:06 - 2014-08-26 17:05 - 02782744 _____ () C:\ProgramData\Avg_Update_0814tb\0814tb_{14B84B92-B246-45AD-8C50-3A68B4E9DA9F}.exe
    2014-11-09 11:54 - 2014-11-09 11:54 - 02900992 _____ () C:\Program Files\AVAST Software\Avast\defs\14110900\algo.dll
    2014-11-05 11:44 - 2014-11-05 11:45 - 38561576 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
    2014-10-27 15:24 - 2014-10-21 22:04 - 01042760 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\libglesv2.dll
    2014-10-27 15:24 - 2014-10-21 22:04 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\libegl.dll
    2014-10-27 15:24 - 2014-10-21 22:04 - 08910664 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\pdf.dll
    2014-10-27 15:24 - 2014-10-21 22:04 - 01681224 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\ffmpegsumo.dll

    ==================== Alternate Data Streams (whitelisted) =========

    (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

    AlternateDataStreams: C:\Users\Wendy\Documents\Re_ Alltel Info.eml:OECustomProperty

    ==================== Safe Mode (whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


    ==================== EXE Association (whitelisted) =============

    (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


    ==================== MSCONFIG/TASK MANAGER disabled items =========

    (Currently there is no automatic fix for this section.)

    MSCONFIG\Services: AgereModemAudio => 2
    MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^PictureMover.lnk => C:\Windows\pss\PictureMover.lnk.CommonStartup
    MSCONFIG\startupreg: bbgvnkix => C:\Users\Wendy\AppData\Local\Temp\miafpgylm\raidloqxsik.exe
    MSCONFIG\startupreg: HP Remote Solution => %ProgramFiles%\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
    MSCONFIG\startupreg: HPADVISOR => C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW
    MSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
    MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
    MSCONFIG\startupreg: ROC_ROC_APR2013_AV => C:\Users\Wendy\AppData\Roaming\AVG April 2013 Campaign\AVG-Secure-Search-Update.exe /PROMPT --mid 5b9792d05e5d47d6b2d6a138faf4014a-6bfb6d3c5e0b1c1404441f485f76765a8d5952dc --CMPID ROC_APR2013_AV --CMPIDEXTRA 2012
    MSCONFIG\startupreg: TotalRecipeSearch Search Scope Monitor => "C:\PROGRA~2\TOTALR~2\bar\1.bin\14srchmn.exe" /m=2 /w /h
    MSCONFIG\startupreg: TotalRecipeSearch_14 Browser Plugin Loader => C:\PROGRA~2\TOTALR~2\bar\1.bin\14brmon.exe
    MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"

    ========================= Accounts: ==========================

    Administrator (S-1-5-21-1112053591-31326686-398317036-500 - Administrator - Disabled)
    Guest (S-1-5-21-1112053591-31326686-398317036-501 - Limited - Disabled)
    HomeGroupUser$ (S-1-5-21-1112053591-31326686-398317036-1002 - Limited - Enabled)
    Wendy (S-1-5-21-1112053591-31326686-398317036-1001 - Administrator - Enabled) => C:\Users\Wendy

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (11/09/2014 11:53:44 AM) (Source: Windows Backup) (EventID: 4103) (User: )
    Description: The backup did not complete because of an error writing to the backup location F:\. The error is: The backup location cannot be found or is not valid. Review your backup settings and check the backup location. (0x81000006).

    Error: (11/08/2014 06:12:27 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: iexplore.exe, version: 11.0.9600.17344, time stamp: 0x541b707b
    Faulting module name: msvcrt.dll, version: 7.0.7601.17744, time stamp: 0x4eeb033f
    Exception code: 0xc0000005
    Fault offset: 0x0000000000002853
    Faulting process id: 0x12c4
    Faulting application start time: 0xiexplore.exe0
    Faulting application path: iexplore.exe1
    Faulting module path: iexplore.exe2
    Report Id: iexplore.exe3

    Error: (11/07/2014 11:29:51 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: iexplore.exe, version: 11.0.9600.17344, time stamp: 0x541b707b
    Faulting module name: Flash64_11_9_900_170.ocx, version: 11.9.900.170, time stamp: 0x529b76a2
    Exception code: 0xc0000005
    Fault offset: 0x00000000000b96dd
    Faulting process id: 0x1fc8
    Faulting application start time: 0xiexplore.exe0
    Faulting application path: iexplore.exe1
    Faulting module path: iexplore.exe2
    Report Id: iexplore.exe3

    Error: (11/07/2014 02:39:50 PM) (Source: SideBySide) (EventID: 35) (User: )
    Description: Activation context generation failed for "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1".Error in manifest or policy file "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" on line WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
    Component identity found in manifest does not match the identity of the component requested.
    Reference is WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
    Definition is WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
    Please use sxstrace.exe for detailed diagnosis.

    Error: (11/07/2014 02:36:05 PM) (Source: SideBySide) (EventID: 63) (User: )
    Description: Activation context generation failed for "assemblyIdentity1".Error in manifest or policy file "assemblyIdentity2" on line assemblyIdentity3.
    The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.

    Error: (11/07/2014 02:14:25 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17344, time stamp: 0x541b707b
    Faulting module name: IEFRAME.dll, version: 11.0.9600.17351, time stamp: 0x54249c0e
    Exception code: 0xc0000005
    Fault offset: 0x000000000007c3de
    Faulting process id: 0xc0
    Faulting application start time: 0xIEXPLORE.EXE0
    Faulting application path: IEXPLORE.EXE1
    Faulting module path: IEXPLORE.EXE2
    Report Id: IEXPLORE.EXE3

    Error: (11/05/2014 03:26:29 PM) (Source: VSS) (EventID: 8193) (User: )
    Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007041d, The service did not respond to the start or control request in a timely fashion.
    .


    Operation:
    Instantiating VSS server

    Error: (11/05/2014 03:26:29 PM) (Source: VSS) (EventID: 13) (User: )
    Description: Volume Shadow Copy Service information: The COM Server with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and name IVssCoordinatorEx2 cannot be started. [0x8007041d, The service did not respond to the start or control request in a timely fashion.
    ]


    Operation:
    Instantiating VSS server

    Error: (11/05/2014 02:56:55 PM) (Source: VSS) (EventID: 8193) (User: )
    Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007041d, The service did not respond to the start or control request in a timely fashion.
    .


    Operation:
    Instantiating VSS server

    Error: (11/05/2014 02:56:55 PM) (Source: VSS) (EventID: 13) (User: )
    Description: Volume Shadow Copy Service information: The COM Server with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and name IVssCoordinatorEx2 cannot be started. [0x8007041d, The service did not respond to the start or control request in a timely fashion.
    ]


    Operation:
    Instantiating VSS server


    System errors:
    =============
    Error: (11/09/2014 00:14:05 PM) (Source: DCOM) (EventID: 10010) (User: )
    Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

    Error: (11/09/2014 00:12:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The vToolbarUpdater18.1.9 service failed to start due to the following error:
    %%2

    Error: (11/09/2014 00:09:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The vToolbarUpdater18.1.9 service terminated unexpectedly. It has done this 1 time(s).

    Error: (11/09/2014 00:02:06 PM) (Source: DCOM) (EventID: 10010) (User: )
    Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

    Error: (11/08/2014 11:15:03 AM) (Source: DCOM) (EventID: 10010) (User: )
    Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

    Error: (11/07/2014 07:15:44 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
    Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service.

    Error: (11/07/2014 04:06:59 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
    Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.

    Error: (11/07/2014 00:26:41 PM) (Source: DCOM) (EventID: 10010) (User: )
    Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

    Error: (11/07/2014 00:23:10 PM) (Source: EventLog) (EventID: 6008) (User: )
    Description: The previous system shutdown at 12:14:37 PM on ‎11/‎7/‎2014 was unexpected.

    Error: (11/07/2014 10:15:28 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
    Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the MBAMScheduler service.


    Microsoft Office Sessions:
    =========================
    Error: (11/02/2014 08:48:53 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
    Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 805 seconds with 780 seconds of active time. This session ended with a crash.

    Error: (11/02/2014 08:08:20 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
    Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 183 seconds with 120 seconds of active time. This session ended with a crash.

    Error: (01/08/2013 04:20:22 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
    Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 2 seconds with 0 seconds of active time. This session ended with a crash.

    Error: (12/04/2012 07:55:25 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
    Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 2 seconds with 0 seconds of active time. This session ended with a crash.

    Error: (07/02/2012 04:26:53 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
    Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 3 seconds with 0 seconds of active time. This session ended with a crash.

    Error: (03/09/2011 05:30:33 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
    Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 307 seconds with 300 seconds of active time. This session ended with a crash.


    ==================== Memory info ===========================

    Processor: AMD Athlon(tm) II X2 240 Processor
    Percentage of memory in use: 61%
    Total physical RAM: 2815.3 MB
    Available physical RAM: 1090.8 MB
    Total Pagefile: 5628.79 MB
    Available Pagefile: 3282.66 MB
    Total Virtual: 8192 MB
    Available Virtual: 8191.84 MB

    ==================== Drives ================================

    Drive c: (COMPAQ) (Fixed) (Total:455.79 GB) (Free:368.76 GB) NTFS
    Drive d: (FACTORY_IMAGE) (Fixed) (Total:9.87 GB) (Free:1.48 GB) NTFS ==>[System with boot components (obtained from reading drive)]

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (Size: 465.8 GB) (Disk ID: 1549F232)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=455.8 GB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=9.9 GB) - (Type=07 NTFS)

    ==================== End Of Log ============================

    Thanks again Joe,
    Dave

  6. #6
    Member Spyware Fighter zep516's Avatar
    Join Date
    Dec 2005
    Location
    Pittsburgh, Pa
    Posts
    7,158
    Points
    1301

    Default

    Hello,
    WARNING:

    One or more of the identified infections is a backdoor trojan/rootkit. Called Zero Access Rootkit.....
    This allows hackers to remotely control your computer, steal critical system information and download and execute files.

    If the infected computer was used for online banking, has credit card information or other sensitive data on it, you should immediately disconnect it from the Internet until your system is cleaned. ALL passwords should be changed immediately to include those used for banking, email, eBay, paypal and online forums. You should consider them to be compromised. You should change each password by using a clean computer and not the infected one. If not, an attacker may get the new passwords and transaction information. If using a router, you will need to reset it with a strong logon/password so the malware cannot gain control before connecting again. Banking and credit card institutions should be notified as soon as possible due to the possibility of the security breach.

    Though the Trojan has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of Trojan, the best course of action would be a reformat and reinstall of the OS.

    Because your computer was compromised please read the following links:

    How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

    When should I re-format? How should I reinstall?

    Drive d(FACTORY_IMAGE) (Fixed) (Total:9.87 GB) (Free:1.48 GB) NTFS ==>[System with boot components (obtained from reading drive)]

    Looks like you have a Factory Image on the "D" Partition. So you could use that to restore the Factory image. This is just like re-formatting or reinstalling windows. The computer returns to the same state when originally purchased. All your data is lost, anything you downloaded from the internet is lost too.


    If you would like to continue and try an clean it then:

    First

    Programs to remove.
    • Advanced-System Protector
    • Search App by Ask


    Next

    A few items to fix:

    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

    Open notepad (Start =>All Programs => Accessories => Notepad).
    Copy/Paste the contents of the code box below into Notepad. Please make sure you copy it all !

    Code:
    start
    cmd: ipconfig /flushdns
    HKLM-x32\...\Run: [] => [X]
    HKLM-x32\...\Run: [vProt] => "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
    HKLM Group Policy restriction on software: C:\Program Files (x86)\Common Files\Symantec Shared <====== ATTENTION
    HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\AVAST Software <====== ATTENTION
    HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION
    HKLM Group Policy restriction on software: C:\Program Files (x86)\Symantec <====== ATTENTION
    HKLM Group Policy restriction on software: C:\Program Files (x86)\AVG <====== ATTENTION
    HKLM Group Policy restriction on software: C:\Program Files (x86)\AVG <====== ATTENTION
    HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION
    HKU\S-1-5-21-1112053591-31326686-398317036-1001\...\Run: [AvgUpdater0814tb] => C:\ProgramData\Avg_Update_0814tb\0814tb_{14B84B92-B246-45AD-8C50-3A68B4E9DA9F}.exe [2782744 2014-08-26] ()
    HKU\S-1-5-21-1112053591-31326686-398317036-1001\...409d6c4515e9\InprocServer32: [Default-shell32] C:\Users\Wendy\AppData\Local\Temp\siinqio\svnbcxq\wow64.dll ATTENTION! ====> ZeroAccess?
    HKU\S-1-5-21-1112053591-31326686-398317036-1001\...A8F59079A8D5}\localserver32: rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 239 more characters). <==== Poweliks!
    ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => No File
    SearchScopes: HKLM-x32 - DefaultScope {cca2e567-1987-4100-a3c6-5b4267084510} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^YK^xdm030^S00743^us&si=21786&ptb=3ECB81D2-EFBE-495F-931D-C05B548564D7&psa=&ind=2012032111&st=sb&n=77ed2c6f&searchfor={searchTerms}
    SearchScopes: HKLM-x32 - {cca2e567-1987-4100-a3c6-5b4267084510} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^YK^xdm030^S00743^us&si=21786&ptb=3ECB81D2-EFBE-495F-931D-C05B548564D7&psa=&ind=2012032111&st=sb&n=77ed2c6f&searchfor={searchTerms}
    BHO: No Name -> {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} -> No File
    BHO: No Name -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
    BHO-x32: No Name -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
    BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
    BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
    Toolbar: HKLM-x32 - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} - No File
    Toolbar: HKCU - No Name - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
    Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
    Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll (AVG Secure Search)
    CHR HKLM-x32\...\Chrome\Extension: [jmfkcklnlgedgbglfkkgedjfmejoahla] - C:\Program Files (x86)\AVG\AVG2012\Chrome\safesearch.crx [2014-11-05]
    S2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [X]
    C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [X]
    2014-11-09 11:59 - 2014-11-09 11:59 - 00002298 _____ () C:\Users\Wendy\Downloads\avg_update_msss_2012_1.zip
    2014-11-09 11:58 - 2014-11-09 11:59 - 00240480 _____ () C:\Users\Wendy\Downloads\avg_prp_sup__2012_0.exe
    2014-11-08 11:19 - 2014-11-08 11:19 - 00001158 _____ () C:\Users\Wendy\Desktop\Live PC Help.lnk
    2014-11-01 13:10 - 2014-11-01 19:11 - 00000160 ____H () C:\ProgramData\@system3.att
    2014-11-08 11:02 - 2014-11-08 11:02 - 00003076 _____ () C:\Windows\System32\Tasks\Advanced-System Protector_startup
    2014-11-08 11:02 - 2014-11-08 11:02 - 00001043 _____ () C:\Users\Public\Desktop\Advanced-System Protector.lnk
    2014-11-08 11:02 - 2014-11-08 11:02 - 00000000 ____D () C:\Users\Wendy\AppData\Roaming\Systweak
    2014-11-08 11:02 - 2014-11-08 11:02 - 00000000 ____D () C:\Users\Wendy\AppData\Roaming\AdvancedSystemProtector
    2014-11-08 11:02 - 2014-11-08 11:02 - 00000000 ____D () C:\ProgramData\Systweak
    2014-11-08 11:02 - 2014-11-08 11:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
    2014-11-08 11:02 - 2014-11-08 11:02 - 00000000 ____D () C:\Program Files (x86)\ASP
    2014-11-08 11:01 - 2014-10-29 15:42 - 00019736 _____ () C:\Windows\system32\roboot64.exe
    2014-11-01 19:06 - 2014-11-04 20:36 - 00000000 ____D () C:\ProgramData\VidotOxopq
    2014-11-01 19:04 - 2014-11-04 20:36 - 00000000 ____D () C:\ProgramData\FezuBofe
    2014-11-01 13:09 - 2014-11-01 13:09 - 00000448 ____H () C:\Users\Wendy\AppData\Roaming\麽鎒駓覜
    2014-10-23 13:48 - 2014-11-04 12:56 - 00000000 ____D () C:\Users\Wendy\AppData\Local\AskPartnerNetwork
    2014-10-23 13:48 - 2014-11-04 12:56 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
    2014-10-23 13:48 - 2014-10-23 13:48 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
    C:\Users\Wendy\AppData\Local\Temp\APNSetup.exe
    C:\Users\Wendy\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdfixii.dll
    C:\Users\Wendy\AppData\Local\Temp\fp_pl_pfs_installer.exe
    C:\Users\Wendy\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
    C:\Users\Wendy\AppData\Local\Temp\MSETUP4.EXE
    AV: AVG Anti-Virus Free Edition 2012 (Enabled - Up to date) {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
    AS: AVG Anti-Virus Free Edition 2012 (Enabled - Up to date) {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
    CustomCLSID: HKU\S-1-5-21-1112053591-31326686-398317036-1001_Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\localserver32 -> rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 247 more characters). <==== Poweliks?
    CustomCLSID: HKU\S-1-5-21-1112053591-31326686-398317036-1001_Classes\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 -> C:\Users\Wendy\AppData\Local\Temp\siinqio\svnbcxq\wow64.dll No File
    Task: {F76582C5-5DB7-4488-BFD1-BB6255A7033C} - System32\Tasks\Advanced-System Protector_startup => C:\Program Files (x86)\ASP\AdvancedSystemProtector.exe [2014-11-05] () <==== ATTENTION
    2014-08-26 17:06 - 2014-08-26 17:05 - 02782744 _____ () C:\ProgramData\Avg_Update_0814tb\0814tb_{14B84B92-B246-45AD-8C50-3A68B4E9DA9F}.exe
    
    hosts:
    Emptytemp:
    reboot:
    end
    Click Format and ensure Wordwrap is unchecked.
    Save as Fixlist.txt to your Desktop (Must be in this location)
    Run FRST/FRST64 and press the Fix button just once and wait.
    If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
    The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

    Note: If the tool warns you about the version you're using being an outdated version please download and run the updated version.


    In your next reply post:

    • Fixlog.txt
    • A new FRST Log. Only 1 log will be generated this time




    Thanks
    Joe
    Last edited by zep516; 11-09-2014 at 11:38 PM.

  7. The Following User Says Thank You to zep516 For This Useful Post:


  8. #7
    Member
    Join Date
    Nov 2014
    Posts
    8
    Points
    0

    Default

    Thanks again for your help Joe, we decided to go with the restore factory image option. Luckily PayPal was the only thing they had to worry about and their account hadn't been compromised yet. I've been giving my parents a hard time for not even paying their bills on-line but I think I just lost that debate One final question, I backed up all of my moms pics and some documents onto an external hard drive, is it safe to put them back on her computer or could they be infected? If so is there a way to check/clean them?
    Dave

  9. #8
    Member Spyware Fighter zep516's Avatar
    Join Date
    Dec 2005
    Location
    Pittsburgh, Pa
    Posts
    7,158
    Points
    1301

    Default

    Good choice.

    I don't think you need to worry about picture files and document files so much. I would though scan the external drive with Avast free Anti Virus just as a precaution see below.

    Using Avast Free Antivirus to Scan an External Hard Drive

    Then

    If you want once you get all back and running and files moved back, feel free to post another FRST Log report. Just like we did in post #2. Post both logs.

    Thanks
    Joe

  10. #9
    Member
    Join Date
    Nov 2014
    Posts
    8
    Points
    0

    Default

    160 some Windows updates later, I didn't realize how old her computer was. I've had to split the logs into two posts because I got and text too long error, hope I didn't screw something up. Thanks for looking

    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2014
    Ran by home (administrator) on HOME-PC on 12-11-2014 11:21:46
    Running from C:\Users\home\Desktop
    Loaded Profile: home (Available profiles: home)
    Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
    Internet Explorer Version 11
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
    (AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.10\ToolbarUpdater.exe
    () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.10\loggingserver.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe
    (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
    (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
    (Hewlett-Packard) C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
    () C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
    (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe
    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
    (AVG Secure Search) C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe
    (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
    (AVG Secure Search) C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe
    (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10c.exe
    (Microsoft Corporation) C:\Windows\System32\msiexec.exe
    (APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
    (APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
    (APN LLC.) C:\Users\home\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr.exe
    (APN LLC.) C:\Users\home\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr_x64.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [PC-Doctor for Windows localizer] => C:\Program Files\PC-Doctor for Windows\localizer.exe [95728 2009-09-16] (PC-Doctor, Inc.)
    HKLM-x32\...\Run: [hpsysdrv] => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
    HKLM-x32\...\Run: [HP Remote Solution] => C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe [656896 2009-08-24] (Hewlett-Packard)
    HKLM-x32\...\Run: [HP Software Update] => c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2008-12-08] (Hewlett-Packard)
    HKLM-x32\...\Run: [] => [X]
    HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [600936 2009-06-29] (Symantec Corporation)
    HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3649040 2014-10-17] (AVG Technologies CZ, s.r.o.)
    HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [3060248 2014-11-10] ()
    HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
    HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1942424 2014-10-10] (APN)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PictureMover.lnk
    ShortcutTarget: PictureMover.lnk -> C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe (Hewlett-Packard Company)

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Ask.com
    HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/CQDSK/1
    SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM - {9C91DE74-9191-4202-862D-807C47706800} URL = http://www.ask.com/web?q={searchTerms}&l=dis&o=uscqd
    SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM-x32 - {9C91DE74-9191-4202-862D-807C47706800} URL = http://www.ask.com/web?q={searchTerms}&l=dis&o=uscqd
    SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={6DF2FE81-D38B-451E-BDA1-B84E6432DD3F}&mid=d9953aa05f4c47d2ba6aa138faf4014a-6bfb6d3c5e0b1c1404441f485f76765a8d5952dc&lang=en&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-11-10 16:46:26&v=4.0.0.19&pid=wtu&sg=&sap=dsp&q={searchTerms}
    SearchScopes: HKCU - {9C91DE74-9191-4202-862D-807C47706800} URL = http://www.ask.com/web?q={searchTerms}&l=dis&o=uscqd
    BHO: Search App by Ask -> {4F524A2D-5350-4500-76A7-7A786E7484D7} -> C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport_x64.dll (APN LLC.)
    BHO-x32: Search App by Ask -> {4F524A2D-5350-4500-76A7-7A786E7484D7} -> C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll (APN LLC.)
    BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
    BHO-x32: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
    BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.0.0.19\AVG Web TuneUp.dll (AVG)
    BHO-x32: Microsoft Live Search Toolbar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll (Microsoft Corp.)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
    Toolbar: HKLM - Search App by Ask - {4F524A2D-5350-4500-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport_x64.dll (APN LLC.)
    Toolbar: HKLM-x32 - Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll (Microsoft Corp.)
    Toolbar: HKLM-x32 - Search App by Ask - {4F524A2D-5350-4500-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll (APN LLC.)
    Toolbar: HKU\S-1-5-21-3965147740-1908356936-1942508611-1000 -> No Name - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
    Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
    Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
    Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.10\ViProtocol.dll (AVG Secure Search)
    Tcpip\Parameters: [DhcpNameServer] 24.220.0.10 24.220.0.11

    FireFox:
    ========
    FF Plugin: @microsoft.com/GENUINE -> disabled No File
    FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.10\\npsitesafety.dll No File
    FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

    Chrome:
    =======

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-10-10] (APN LLC.)
    R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3487248 2014-10-17] (AVG Technologies CZ, s.r.o.)
    R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [298080 2014-10-16] (AVG Technologies CZ, s.r.o.)
    R2 HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [125440 2009-09-24] (Hewlett-Packard) [File not signed]
    R2 LightScribeService; c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-08-20] (Hewlett-Packard Company) [File not signed]
    R2 vToolbarUpdater18.1.10; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.10\ToolbarUpdater.exe [1849368 2014-11-10] (AVG Secure Search)

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)
    R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [262424 2014-10-07] (AVG Technologies CZ, s.r.o.)
    R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-18] (AVG Technologies CZ, s.r.o.)
    R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.)
    R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [313624 2014-07-18] (AVG Technologies CZ, s.r.o.)
    R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [124184 2014-10-05] (AVG Technologies CZ, s.r.o.)
    R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.)
    R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [274200 2014-10-10] (AVG Technologies CZ, s.r.o.)
    R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-11-10] (AVG Technologies)
    S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-13] (Brother Industries Ltd.)
    S3 PCDSRVC{F36B3A4C-F95654BD-06000000}_0; \??\c:\program files\pc-doctor for windows\pcdsrvc_x64.pkms [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


    ==================== One Month Created Files and Folders ========

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2014-11-12 11:21 - 2014-11-12 11:22 - 00012070 _____ () C:\Users\home\Desktop\FRST.txt
    2014-11-12 11:21 - 2014-11-12 11:21 - 00000000 ____D () C:\Users\home\AppData\Local\AskPartnerNetwork
    2014-11-12 11:21 - 2014-11-12 11:21 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
    2014-11-12 11:21 - 2014-11-12 11:21 - 00000000 ____D () C:\ProgramData\APN
    2014-11-12 11:21 - 2014-11-12 11:21 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
    2014-11-12 11:19 - 2014-11-12 11:19 - 00000000 ____D () C:\ProgramData\Sun
    2014-11-12 11:19 - 2014-11-12 11:18 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
    2014-11-12 11:18 - 2014-11-12 11:19 - 00000000 ____D () C:\ProgramData\Oracle
    2014-11-12 11:18 - 2014-11-12 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
    2014-11-12 11:18 - 2014-11-12 11:18 - 00000000 ____D () C:\Program Files (x86)\Java
    2014-11-12 11:15 - 2014-11-12 11:21 - 00000000 ____D () C:\FRST
    2014-11-12 11:15 - 2014-11-12 11:15 - 02116096 _____ (Farbar) C:\Users\home\Desktop\FRST64.exe
    2014-11-12 11:15 - 2014-11-12 11:15 - 00003180 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForhome
    2014-11-12 11:15 - 2014-11-12 11:15 - 00000328 _____ () C:\Windows\Tasks\HPCeeScheduleForhome.job
    2014-11-12 11:12 - 2014-11-12 11:13 - 00000000 ____D () C:\Users\home\AppData\Roaming\HpUpdate
    2014-11-12 11:12 - 2014-11-12 11:13 - 00000000 ____D () C:\Users\home\AppData\Roaming\HP Support Assistant
    2014-11-11 22:46 - 2014-11-11 23:01 - 00000000 ____D () C:\Users\home\AppData\Local\Microsoft Games
    2014-11-11 22:37 - 2014-11-11 22:37 - 00000000 __SHD () C:\Users\home\AppData\Local\EmieUserList
    2014-11-11 22:37 - 2014-11-11 22:37 - 00000000 __SHD () C:\Users\home\AppData\Local\EmieSiteList
    2014-11-11 22:37 - 2014-11-11 22:37 - 00000000 __SHD () C:\Users\home\AppData\Local\EmieBrowserModeList
    2014-11-11 18:51 - 2014-09-04 20:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
    2014-11-11 18:51 - 2014-09-04 19:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
    2014-11-11 18:51 - 2014-08-28 20:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
    2014-11-11 18:51 - 2014-05-08 03:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
    2014-11-11 18:30 - 2013-10-01 20:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
    2014-11-11 18:30 - 2013-10-01 20:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
    2014-11-11 18:30 - 2013-10-01 20:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
    2014-11-11 18:30 - 2013-10-01 19:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
    2014-11-11 18:30 - 2013-10-01 19:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
    2014-11-11 18:30 - 2013-10-01 19:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
    2014-11-11 18:30 - 2013-10-01 19:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
    2014-11-11 18:30 - 2013-10-01 18:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
    2014-11-11 18:30 - 2013-10-01 18:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
    2014-11-11 18:30 - 2013-10-01 18:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
    2014-11-11 18:30 - 2013-10-01 18:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
    2014-11-11 18:30 - 2013-10-01 18:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
    2014-11-11 18:30 - 2013-10-01 17:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
    2014-11-11 18:30 - 2013-10-01 17:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
    2014-11-11 18:30 - 2013-10-01 17:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
    2014-11-11 18:30 - 2013-10-01 16:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
    2014-11-11 18:29 - 2012-08-23 08:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
    2014-11-11 18:29 - 2012-08-23 08:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
    2014-11-11 18:29 - 2012-08-23 05:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
    2014-11-11 18:29 - 2012-08-23 04:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
    2014-11-11 17:43 - 2014-06-26 20:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
    2014-11-11 17:43 - 2014-06-26 19:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
    2014-11-11 17:41 - 2014-11-05 11:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
    2014-11-11 17:41 - 2014-11-05 11:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
    2014-11-11 17:41 - 2014-11-05 11:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
    2014-11-11 17:41 - 2014-10-13 20:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
    2014-11-11 17:41 - 2014-10-13 20:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
    2014-11-11 17:41 - 2014-10-13 20:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2014-11-11 17:41 - 2014-10-13 20:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
    2014-11-11 17:41 - 2014-10-13 20:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
    2014-11-11 17:41 - 2014-10-13 19:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
    2014-11-11 17:41 - 2014-10-13 19:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
    2014-11-11 17:41 - 2014-10-13 19:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
    2014-11-11 17:41 - 2014-10-13 19:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
    2014-11-11 17:41 - 2014-10-02 20:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
    2014-11-11 17:41 - 2014-10-02 20:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
    2014-11-11 17:41 - 2014-10-02 20:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
    2014-11-11 17:41 - 2014-10-02 20:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
    2014-11-11 17:41 - 2014-10-02 20:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
    2014-11-11 17:41 - 2014-10-02 19:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
    2014-11-11 17:41 - 2014-10-02 19:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
    2014-11-11 17:41 - 2014-10-02 19:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
    2014-11-11 17:41 - 2014-08-11 20:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
    2014-11-11 17:41 - 2014-08-11 19:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
    2014-11-11 17:41 - 2013-11-23 12:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
    2014-11-11 17:41 - 2013-11-23 11:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
    2014-11-11 17:41 - 2011-02-25 00:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe
    2014-11-11 17:41 - 2011-02-24 23:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
    2014-11-11 17:40 - 2014-11-05 21:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
    2014-11-11 17:40 - 2014-10-17 20:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
    2014-11-11 17:40 - 2014-10-17 19:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
    2014-11-11 17:40 - 2014-08-21 00:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
    2014-11-11 17:40 - 2014-08-21 00:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
    2014-11-11 17:40 - 2014-08-21 00:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
    2014-11-11 17:40 - 2014-08-21 00:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
    2014-11-11 17:40 - 2014-07-08 20:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
    2014-11-11 17:40 - 2014-07-08 20:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
    2014-11-11 17:40 - 2014-07-08 20:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
    2014-11-11 17:40 - 2014-07-08 20:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
    2014-11-11 17:40 - 2014-07-08 20:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
    2014-11-11 17:40 - 2014-07-08 19:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
    2014-11-11 17:40 - 2014-07-08 19:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
    2014-11-11 17:40 - 2014-07-08 19:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
    2014-11-11 17:40 - 2014-07-08 19:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
    2014-11-11 17:40 - 2014-07-08 19:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
    2014-11-11 17:40 - 2014-07-08 16:38 - 00419992 _____ () C:\Windows\system32\locale.nls
    2014-11-11 17:40 - 2014-07-08 16:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
    2014-11-11 17:40 - 2014-06-23 21:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
    2014-11-11 17:40 - 2014-06-23 20:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
    2014-11-11 17:40 - 2013-11-26 02:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
    2014-11-11 17:40 - 2013-11-22 16:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
    2014-11-11 17:39 - 2014-10-09 18:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2014-11-11 17:39 - 2014-09-19 03:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2014-11-11 17:39 - 2014-09-19 03:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
    2014-11-11 17:39 - 2014-09-19 03:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
    2014-11-11 17:39 - 2014-09-19 03:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
    2014-11-11 17:39 - 2014-09-19 03:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
    2014-11-11 17:39 - 2014-09-19 03:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
    2014-11-11 17:39 - 2014-09-19 03:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
    2014-11-11 17:39 - 2014-09-19 03:23 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
    2014-11-11 17:39 - 2014-09-19 03:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
    2014-11-11 17:39 - 2014-09-19 03:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
    2014-11-11 17:39 - 2014-09-19 03:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
    2014-11-11 17:39 - 2014-09-19 03:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
    2014-11-11 17:39 - 2014-09-19 03:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
    2014-11-11 17:39 - 2014-09-19 03:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
    2014-11-11 17:39 - 2014-02-03 20:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
    2014-11-11 17:38 - 2014-10-13 20:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
    2014-11-11 17:38 - 2014-10-13 19:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
    2014-11-11 17:38 - 2014-02-03 20:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
    2014-11-11 17:38 - 2012-02-11 00:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
    2014-11-11 17:38 - 2012-02-11 00:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
    2014-11-11 17:38 - 2011-03-11 00:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
    2014-11-11 17:38 - 2011-03-11 00:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
    2014-11-11 17:38 - 2011-03-11 00:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
    2014-11-11 17:38 - 2011-03-11 00:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
    2014-11-11 17:38 - 2011-03-11 00:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
    2014-11-11 17:38 - 2011-03-11 00:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
    2014-11-11 17:38 - 2011-03-11 00:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
    2014-11-11 17:38 - 2011-03-10 23:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
    2014-11-11 17:38 - 2011-03-10 23:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
    2014-11-11 17:38 - 2011-03-10 22:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
    2014-11-11 17:37 - 2014-10-24 19:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
    2014-11-11 17:37 - 2014-10-24 19:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
    2014-11-11 15:29 - 2013-05-09 23:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
    2014-11-11 15:29 - 2013-05-09 22:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
    2014-11-11 15:29 - 2013-05-09 22:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
    2014-11-11 15:28 - 2013-05-09 23:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
    2014-11-11 15:12 - 2014-11-11 17:52 - 00773536 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
    2014-11-11 14:56 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
    2014-11-11 14:49 - 2014-11-11 14:49 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
    2014-11-11 14:49 - 2014-11-11 14:49 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2014-11-11 14:49 - 2014-11-11 14:49 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2014-11-11 14:49 - 2014-11-11 14:49 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2014-11-11 14:49 - 2014-11-11 14:49 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
    2014-11-11 14:49 - 2014-11-11 14:49 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
    2014-11-11 14:49 - 2014-11-11 14:49 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
    2014-11-11 14:49 - 2014-11-11 14:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
    2014-11-11 14:49 - 2014-11-11 14:49 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
    2014-11-11 14:49 - 2014-11-11 14:49 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
    2014-11-11 14:49 - 2014-11-11 14:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
    2014-11-11 14:49 - 2014-11-11 14:49 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
    2014-11-11 14:49 - 2014-11-11 14:49 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
    2014-11-11 14:36 - 2014-11-11 14:36 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
    2014-11-11 14:29 - 2014-11-11 14:56 - 00014002 _____ () C:\Windows\IE11_main.log
    2014-11-11 12:38 - 2012-07-25 21:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
    2014-11-11 12:38 - 2012-07-25 21:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
    2014-11-11 12:38 - 2012-07-25 21:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
    2014-11-11 12:38 - 2012-07-25 21:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
    2014-11-11 12:38 - 2012-07-25 21:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
    2014-11-11 12:38 - 2012-07-25 20:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
    2014-11-11 12:38 - 2012-07-25 20:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
    2014-11-11 12:38 - 2012-06-02 08:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
    2014-11-11 12:20 - 2012-03-01 00:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
    2014-11-11 12:20 - 2012-03-01 00:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
    2014-11-11 12:20 - 2012-02-29 23:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
    2014-11-11 12:10 - 2014-06-30 16:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
    2014-11-11 12:10 - 2014-06-30 16:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
    2014-11-11 12:10 - 2014-03-09 15:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
    2014-11-11 12:10 - 2014-03-09 15:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
    2014-11-11 12:10 - 2014-03-09 15:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
    2014-11-11 12:10 - 2014-03-09 15:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
    2014-11-11 12:09 - 2014-06-06 00:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
    2014-11-11 12:09 - 2014-06-06 00:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
    2014-11-11 12:06 - 2013-12-03 20:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
    2014-11-11 12:05 - 2014-03-04 03:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2014-11-11 12:05 - 2014-03-04 03:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
    2014-11-11 12:05 - 2014-03-04 03:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
    2014-11-11 12:05 - 2014-03-04 03:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
    2014-11-11 12:05 - 2014-03-04 03:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
    2014-11-11 12:05 - 2014-03-04 03:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
    2014-11-11 12:05 - 2014-03-04 03:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
    2014-11-11 12:05 - 2014-03-04 03:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
    2014-11-11 12:05 - 2014-03-04 03:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
    2014-11-11 12:05 - 2014-03-04 03:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
    2014-11-11 12:05 - 2014-03-04 03:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
    2014-11-11 12:05 - 2014-03-04 03:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
    2014-11-11 12:05 - 2014-03-04 03:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
    2014-11-11 12:05 - 2014-03-04 03:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
    2014-11-11 12:05 - 2014-03-04 03:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
    2014-11-11 12:05 - 2014-03-04 03:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
    2014-11-11 12:05 - 2014-03-04 03:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
    2014-11-11 12:05 - 2014-03-04 03:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
    2014-11-11 12:05 - 2014-03-04 03:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
    2014-11-11 12:05 - 2013-12-03 20:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
    2014-11-11 12:05 - 2013-12-03 20:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
    2014-11-11 12:05 - 2013-12-03 20:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
    2014-11-11 12:05 - 2013-12-03 20:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
    2014-11-11 12:05 - 2013-12-03 20:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
    2014-11-11 12:05 - 2013-12-03 20:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
    2014-11-11 12:05 - 2013-12-03 20:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
    2014-11-11 12:05 - 2013-12-03 20:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
    2014-11-11 12:05 - 2013-12-03 20:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
    2014-11-11 12:05 - 2013-12-03 20:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
    2014-11-11 12:05 - 2013-12-03 20:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
    2014-11-11 12:05 - 2013-12-03 20:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
    2014-11-11 12:05 - 2013-12-03 20:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
    2014-11-11 12:05 - 2013-12-03 19:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
    2014-11-11 12:05 - 2013-12-03 19:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
    2014-11-11 12:05 - 2013-12-03 19:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
    2014-11-11 12:05 - 2013-12-03 19:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
    2014-11-11 12:05 - 2013-08-01 20:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
    2014-11-11 12:05 - 2013-08-01 20:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
    2014-11-11 12:05 - 2013-08-01 19:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
    2014-11-11 12:05 - 2013-08-01 18:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
    2014-11-11 12:04 - 2014-01-28 20:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
    2014-11-11 12:04 - 2014-01-28 20:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
    2014-11-11 12:04 - 2011-12-30 00:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
    2014-11-11 12:04 - 2011-12-29 23:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
    2014-11-11 12:04 - 2011-11-17 00:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
    2014-11-11 12:04 - 2011-11-16 23:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
    2014-11-11 12:04 - 2011-05-03 23:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
    2014-11-11 12:04 - 2011-05-03 23:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
    2014-11-11 12:04 - 2011-05-03 23:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
    2014-11-11 12:04 - 2011-05-03 23:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
    2014-11-11 12:04 - 2011-05-03 23:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
    2014-11-11 12:04 - 2011-05-03 23:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
    2014-11-11 12:04 - 2011-05-03 23:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
    2014-11-11 12:04 - 2011-05-03 23:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
    2014-11-11 12:04 - 2011-05-03 23:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
    2014-11-11 12:04 - 2011-05-03 22:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
    2014-11-11 12:04 - 2011-05-03 22:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
    2014-11-11 12:04 - 2011-05-03 22:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
    2014-11-11 12:04 - 2011-05-03 22:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
    2014-11-11 12:04 - 2011-05-03 22:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
    2014-11-11 12:04 - 2011-05-03 22:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
    2014-11-11 12:04 - 2011-05-03 22:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
    2014-11-11 12:04 - 2011-05-03 22:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
    2014-11-11 12:04 - 2011-05-03 22:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
    2014-11-11 12:03 - 2014-01-27 20:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
    2014-11-11 12:03 - 2013-07-08 23:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
    2014-11-11 12:03 - 2013-07-08 22:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
    2014-11-11 12:03 - 2013-03-18 23:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
    2014-11-11 12:03 - 2010-12-23 04:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
    2014-11-11 12:03 - 2010-12-23 04:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
    2014-11-11 12:03 - 2010-12-23 04:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
    2014-11-11 12:03 - 2010-12-22 23:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
    2014-11-11 12:03 - 2010-12-22 23:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
    2014-11-11 12:03 - 2010-12-22 23:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
    2014-11-11 12:02 - 2014-08-01 05:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
    2014-11-11 12:02 - 2014-08-01 05:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
    2014-11-11 12:02 - 2013-10-03 20:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
    2014-11-11 12:02 - 2013-10-03 19:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
    2014-11-11 12:02 - 2012-10-09 12:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
    2014-11-11 12:02 - 2012-10-09 12:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
    2014-11-11 12:02 - 2012-10-09 11:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
    2014-11-11 12:02 - 2012-10-09 11:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
    2014-11-11 12:02 - 2011-06-15 04:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
    2014-11-11 12:02 - 2011-06-15 04:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
    2014-11-11 12:02 - 2011-06-15 04:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
    2014-11-11 12:02 - 2011-06-15 04:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
    2014-11-11 12:02 - 2011-06-15 02:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
    2014-11-11 12:02 - 2011-06-15 02:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
    2014-11-11 12:02 - 2011-06-15 02:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
    2014-11-11 12:02 - 2011-06-15 02:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
    2014-11-11 12:02 - 2011-06-15 02:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
    2014-11-11 12:01 - 2014-03-26 08:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
    2014-11-11 12:01 - 2014-03-26 08:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
    2014-11-11 12:01 - 2014-03-26 08:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
    2014-11-11 12:01 - 2014-03-26 08:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
    2014-11-11 12:01 - 2013-10-18 20:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
    2014-11-11 12:01 - 2013-10-18 19:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
    2014-11-11 12:01 - 2013-10-05 14:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
    2014-11-11 12:01 - 2013-10-05 13:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
    2014-11-11 12:01 - 2013-07-08 23:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
    2014-11-11 12:01 - 2013-07-08 23:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
    2014-11-11 12:01 - 2013-07-08 22:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
    2014-11-11 12:01 - 2013-07-08 22:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
    2014-11-11 12:01 - 2013-04-25 17:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
    2014-11-11 12:01 - 2013-03-31 16:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
    2014-11-11 12:01 - 2011-07-08 20:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
    2014-11-11 12:01 - 2011-06-15 23:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
    2014-11-11 12:01 - 2011-06-15 22:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
    2014-11-11 12:01 - 2011-04-26 20:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
    2014-11-11 12:01 - 2011-04-26 20:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
    2014-11-11 12:01 - 2011-03-11 00:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
    2014-11-11 12:01 - 2011-03-11 00:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
    2014-11-11 12:01 - 2011-03-10 23:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
    2014-11-11 12:01 - 2011-03-10 23:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
    2014-11-11 12:00 - 2014-06-18 16:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
    2014-11-11 12:00 - 2014-06-18 16:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
    2014-11-11 12:00 - 2014-06-18 16:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
    2014-11-11 12:00 - 2014-06-18 16:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
    2014-11-11 12:00 - 2014-06-18 16:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
    2014-11-11 12:00 - 2014-06-18 16:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
    2014-11-11 12:00 - 2014-06-06 04:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
    2014-11-11 12:00 - 2014-06-06 03:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
    2014-11-11 12:00 - 2014-04-24 20:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
    2014-11-11 12:00 - 2014-04-24 20:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
    2014-11-11 12:00 - 2014-04-04 20:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
    2014-11-11 12:00 - 2014-04-04 20:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
    2014-11-11 12:00 - 2013-11-26 05:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
    2014-11-11 12:00 - 2013-10-29 20:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
    2014-11-11 12:00 - 2013-10-29 20:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
    2014-11-11 12:00 - 2013-10-03 20:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
    2014-11-11 12:00 - 2013-10-03 20:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
    2014-11-11 12:00 - 2013-10-03 19:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
    2014-11-11 12:00 - 2013-10-03 19:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
    2014-11-11 12:00 - 2013-06-05 23:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
    2014-11-11 12:00 - 2013-06-05 23:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
    2014-11-11 12:00 - 2013-06-05 23:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
    2014-11-11 12:00 - 2013-06-05 23:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
    2014-11-11 12:00 - 2013-06-05 22:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
    2014-11-11 12:00 - 2013-06-05 22:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
    2014-11-11 12:00 - 2013-06-05 22:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
    2014-11-11 12:00 - 2013-06-05 21:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
    2014-11-11 12:00 - 2013-06-05 21:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
    2014-11-11 12:00 - 2013-06-05 21:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
    2014-11-11 12:00 - 2012-08-22 12:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
    2014-11-11 12:00 - 2012-07-04 14:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
    2014-11-11 12:00 - 2012-04-30 23:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
    2014-11-11 12:00 - 2011-10-25 23:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
    2014-11-11 12:00 - 2011-10-25 22:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
    2014-11-11 11:59 - 2013-11-26 19:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
    2014-11-11 11:59 - 2013-11-26 19:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
    2014-11-11 11:59 - 2013-11-26 19:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
    2014-11-11 11:59 - 2013-11-26 19:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
    2014-11-11 11:59 - 2013-11-26 19:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
    2014-11-11 11:59 - 2013-11-26 19:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
    2014-11-11 11:59 - 2013-11-26 19:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
    2014-11-11 11:58 - 2014-06-17 20:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
    2014-11-11 11:58 - 2014-06-17 19:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
    2014-11-11 11:58 - 2014-05-30 00:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
    2014-11-11 11:58 - 2013-08-28 20:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
    2014-11-11 11:58 - 2013-08-28 20:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
    2014-11-11 11:58 - 2013-08-28 20:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
    2014-11-11 11:58 - 2013-08-28 19:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
    2014-11-11 11:58 - 2013-08-28 19:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
    2014-11-11 11:58 - 2013-08-28 19:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
    2014-11-11 11:58 - 2012-01-04 04:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
    2014-11-11 11:58 - 2012-01-04 02:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
    2014-11-11 11:57 - 2012-12-07 07:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
    2014-11-11 11:57 - 2012-12-07 07:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
    2014-11-11 11:57 - 2012-12-07 06:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
    2014-11-11 11:57 - 2012-12-07 06:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
    2014-11-11 11:57 - 2012-12-07 05:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
    2014-11-11 11:57 - 2012-12-07 05:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
    2014-11-11 11:57 - 2012-12-07 05:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
    2014-11-11 11:57 - 2012-12-07 05:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
    2014-11-11 11:57 - 2012-12-07 05:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
    2014-11-11 11:57 - 2012-12-07 05:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
    2014-11-11 11:57 - 2012-12-07 05:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
    2014-11-11 11:57 - 2012-12-07 05:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
    2014-11-11 11:57 - 2012-12-07 05:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
    2014-11-11 11:57 - 2012-12-07 05:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
    2014-11-11 11:57 - 2012-12-07 05:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
    2014-11-11 11:57 - 2012-12-07 05:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
    2014-11-11 11:57 - 2012-12-07 05:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
    2014-11-11 11:57 - 2012-12-07 05:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
    2014-11-11 11:57 - 2012-12-07 04:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
    2014-11-11 11:57 - 2012-12-07 04:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
    2014-11-11 11:57 - 2012-12-07 04:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
    2014-11-11 11:57 - 2012-12-07 04:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
    2014-11-11 11:57 - 2012-12-07 04:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
    2014-11-11 11:57 - 2012-12-07 04:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
    2014-11-11 11:57 - 2012-12-07 04:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
    2014-11-11 11:57 - 2012-12-07 04:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
    2014-11-11 11:57 - 2012-12-07 04:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
    2014-11-11 11:57 - 2012-12-07 04:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
    2014-11-11 11:57 - 2012-12-07 04:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
    2014-11-11 11:57 - 2012-12-07 04:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
    2014-11-11 11:57 - 2012-12-07 04:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
    2014-11-11 11:57 - 2012-12-07 04:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
    2014-11-11 11:56 - 2013-07-04 06:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
    2014-11-11 11:56 - 2013-07-04 05:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
    2014-11-11 11:55 - 2013-09-07 20:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
    2014-11-11 11:55 - 2013-09-07 20:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
    2014-11-11 11:55 - 2013-08-04 20:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
    2014-11-11 11:55 - 2013-06-25 16:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
    2014-11-11 11:55 - 2012-11-28 16:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
    2014-11-11 11:55 - 2012-11-28 16:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
    2014-11-11 11:55 - 2012-11-28 16:56 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
    2014-11-11 11:55 - 2012-10-03 11:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
    2014-11-11 11:55 - 2012-10-03 11:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
    2014-11-11 11:55 - 2012-10-03 11:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
    2014-11-11 11:55 - 2012-10-03 11:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
    2014-11-11 11:55 - 2012-10-03 11:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
    2014-11-11 11:55 - 2012-10-03 11:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
    2014-11-11 11:55 - 2012-10-03 10:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
    2014-11-11 11:55 - 2012-10-03 10:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
    2014-11-11 11:55 - 2012-10-03 10:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
    2014-11-11 11:55 - 2012-10-03 10:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
    2014-11-11 11:55 - 2012-01-13 01:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
    2014-11-11 11:55 - 2011-08-16 23:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
    2014-11-11 11:55 - 2011-08-16 23:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
    2014-11-11 11:55 - 2011-08-16 22:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
    2014-11-11 11:55 - 2011-08-16 22:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
    2014-11-11 11:54 - 2014-06-15 20:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
    2014-11-11 11:54 - 2013-07-25 03:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
    2014-11-11 11:54 - 2013-07-25 02:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
    2014-11-11 11:54 - 2013-07-12 04:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
    2014-11-11 11:54 - 2013-07-04 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
    2014-11-11 11:54 - 2013-07-04 06:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
    2014-11-11 11:54 - 2013-07-04 05:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
    2014-11-11 11:54 - 2013-07-04 05:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
    2014-11-11 11:54 - 2013-07-04 04:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
    2014-11-11 11:54 - 2013-04-10 00:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
    2014-11-11 11:54 - 2012-08-21 15:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
    2014-11-11 11:54 - 2011-04-28 21:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
    2014-11-11 11:54 - 2011-04-28 21:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
    2014-11-11 11:54 - 2011-04-28 21:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
    2014-11-11 11:54 - 2011-03-03 00:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
    2014-11-11 11:54 - 2011-03-03 00:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
    2014-11-11 11:54 - 2011-03-03 00:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
    2014-11-11 11:54 - 2011-03-02 23:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
    2014-11-11 11:54 - 2011-03-02 23:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
    2014-11-11 11:54 - 2011-02-03 05:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
    2014-11-11 11:53 - 2014-09-24 20:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
    2014-11-11 11:53 - 2014-09-24 19:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
    2014-11-11 11:53 - 2013-07-02 22:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
    2014-11-11 11:53 - 2013-07-02 22:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
    2014-11-11 11:53 - 2013-07-02 22:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
    2014-11-11 11:53 - 2013-02-11 22:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
    2014-11-11 11:53 - 2012-11-01 23:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
    2014-11-11 11:53 - 2012-11-01 23:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
    2014-11-11 11:53 - 2012-03-17 01:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
    2014-11-11 11:29 - 2014-06-03 04:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
    2014-11-11 11:29 - 2014-06-03 04:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
    2014-11-11 11:29 - 2014-06-03 04:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
    2014-11-11 11:29 - 2014-06-03 03:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
    2014-11-11 11:29 - 2014-06-03 03:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
    2014-11-11 11:29 - 2014-02-03 20:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
    2014-11-11 11:29 - 2014-02-03 20:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
    2014-11-11 11:29 - 2014-02-03 20:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
    2014-11-11 11:29 - 2014-02-03 20:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
    2014-11-11 11:29 - 2014-02-03 20:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
    2014-11-11 11:29 - 2013-02-26 23:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
    2014-11-11 11:28 - 2014-07-16 20:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
    2014-11-11 11:28 - 2014-07-16 20:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
    2014-11-11 11:28 - 2014-07-16 20:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
    2014-11-11 11:28 - 2014-07-16 19:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
    2014-11-11 11:28 - 2014-07-16 19:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
    2014-11-11 11:28 - 2014-07-16 19:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
    2014-11-11 11:28 - 2014-06-24 20:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
    2014-11-11 11:28 - 2014-06-24 19:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
    2014-11-11 11:28 - 2013-01-24 00:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
    2014-11-11 11:28 - 2012-04-25 23:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
    2014-11-11 11:28 - 2012-04-25 23:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
    2014-11-11 11:27 - 2014-03-04 03:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
    2014-11-11 11:27 - 2014-03-04 03:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
    2014-11-11 11:27 - 2014-03-04 03:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
    2014-11-11 11:27 - 2014-03-04 03:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
    2014-11-11 11:27 - 2014-03-04 03:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
    2014-11-11 11:27 - 2014-03-04 03:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
    2014-11-11 11:27 - 2014-03-04 03:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
    2014-11-11 11:27 - 2014-03-04 03:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
    2014-11-11 11:27 - 2014-03-04 03:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
    2014-11-11 11:27 - 2014-03-04 02:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
    2014-11-11 11:27 - 2014-03-04 02:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
    2014-11-11 11:27 - 2014-01-23 20:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
    2014-11-11 11:27 - 2013-08-01 20:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 20:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 19:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
    2014-11-11 11:27 - 2013-08-01 18:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 18:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 18:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
    2014-11-11 11:27 - 2013-08-01 18:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
    2014-11-11 11:27 - 2013-07-25 20:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
    2014-11-11 11:27 - 2013-07-25 19:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
    2014-11-11 11:27 - 2012-05-05 02:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
    2014-11-11 11:27 - 2012-05-05 01:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
    2014-11-11 11:27 - 2011-12-16 02:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
    2014-11-11 11:27 - 2011-12-16 01:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
    2014-11-11 11:27 - 2011-02-05 11:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
    2014-11-11 11:27 - 2011-02-05 11:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
    2014-11-11 11:27 - 2011-02-05 11:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
    2014-11-11 11:27 - 2011-02-05 11:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
    2014-11-11 11:27 - 2011-02-05 11:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
    2014-11-11 11:27 - 2011-02-05 11:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
    2014-11-11 11:27 - 2011-02-05 11:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
    2014-11-11 11:26 - 2014-09-09 16:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
    2014-11-11 11:26 - 2014-09-09 15:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
    2014-11-11 11:26 - 2014-09-03 23:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
    2014-11-11 11:26 - 2014-09-03 23:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
    2014-11-11 11:26 - 2013-07-20 04:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
    2014-11-11 11:26 - 2013-07-20 04:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
    2014-11-11 11:26 - 2013-05-12 23:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
    2014-11-11 11:26 - 2013-05-12 21:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
    2014-11-11 11:26 - 2013-05-12 21:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
    2014-11-11 11:26 - 2013-05-12 21:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
    2014-11-11 11:26 - 2013-05-09 23:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
    2014-11-11 11:26 - 2013-05-09 21:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
    2014-11-11 11:26 - 2013-04-25 23:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
    2014-11-11 11:26 - 2013-04-25 22:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
    2014-11-11 11:26 - 2012-11-22 21:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
    2014-11-11 11:26 - 2012-09-25 16:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
    2014-11-11 11:26 - 2012-09-25 16:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
    2014-11-11 11:26 - 2012-07-04 16:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
    2014-11-11 11:26 - 2012-07-04 16:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
    2014-11-11 11:26 - 2012-07-04 16:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
    2014-11-11 11:26 - 2012-07-04 15:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
    2014-11-11 11:26 - 2012-07-04 15:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
    2014-11-11 11:26 - 2011-05-24 05:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
    2014-11-11 11:26 - 2011-05-24 04:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
    2014-11-11 11:26 - 2011-05-24 04:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
    2014-11-11 11:26 - 2011-05-24 04:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
    2014-11-11 11:26 - 2011-05-24 04:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
    2014-11-11 11:26 - 2011-05-02 23:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
    2014-11-11 11:26 - 2011-05-02 22:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
    2014-11-11 11:26 - 2011-02-12 05:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
    2014-11-11 11:25 - 2014-08-22 20:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
    2014-11-11 11:25 - 2014-08-22 19:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
    2014-11-11 11:25 - 2014-04-11 20:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
    2014-11-11 11:25 - 2014-04-11 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
    2014-11-11 11:25 - 2014-04-11 20:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
    2014-11-11 11:25 - 2014-04-11 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
    2014-11-11 11:25 - 2014-04-11 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
    2014-11-11 11:25 - 2013-10-11 20:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
    2014-11-11 11:25 - 2013-10-11 20:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
    2014-11-11 11:25 - 2013-10-11 20:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
    2014-11-11 11:25 - 2013-10-11 20:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
    2014-11-11 11:25 - 2013-10-11 19:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
    2014-11-11 11:25 - 2013-10-11 19:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
    2014-11-11 11:25 - 2013-10-11 19:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
    2014-11-11 11:25 - 2013-10-11 19:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
    2014-11-11 11:25 - 2013-07-04 06:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
    2014-11-11 11:25 - 2012-05-13 23:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
    2014-11-11 11:25 - 2011-10-15 00:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
    2014-11-11 11:25 - 2011-10-14 23:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
    2014-11-11 11:25 - 2011-02-22 22:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
    2014-11-11 11:25 - 2011-02-18 04:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
    2014-11-11 11:25 - 2011-02-17 23:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
    2014-11-11 11:24 - 2013-10-11 20:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
    2014-11-11 11:24 - 2013-10-11 20:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
    2014-11-11 11:24 - 2013-10-11 20:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
    2014-11-11 11:24 - 2013-10-11 20:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
    2014-11-11 11:24 - 2013-10-11 20:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
    2014-11-11 11:24 - 2013-08-27 19:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
    2014-11-11 11:24 - 2012-06-06 00:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
    2014-11-11 11:24 - 2012-06-05 23:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
    2014-11-11 11:24 - 2011-08-26 23:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
    2014-11-11 11:24 - 2011-08-26 22:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
    2014-11-11 11:23 - 2014-07-13 20:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
    2014-11-11 11:23 - 2014-07-13 19:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
    2014-11-11 11:15 - 2012-02-17 00:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
    2014-11-11 11:15 - 2012-02-16 23:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
    2014-11-11 11:15 - 2012-02-16 22:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
    2014-11-11 11:06 - 2014-05-14 10:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
    2014-11-11 11:06 - 2014-05-14 10:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
    2014-11-11 11:06 - 2014-05-14 10:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
    2014-11-11 11:06 - 2014-05-14 10:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
    2014-11-11 11:06 - 2014-05-14 10:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
    2014-11-11 11:06 - 2014-05-14 10:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
    2014-11-11 11:06 - 2014-05-14 10:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
    2014-11-11 11:06 - 2014-05-14 10:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
    2014-11-11 11:06 - 2014-05-14 10:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
    2014-11-11 11:06 - 2014-05-14 10:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
    2014-11-11 11:06 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
    2014-11-11 11:06 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
    2014-11-11 11:06 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
    2014-11-11 11:06 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
    2014-11-10 20:00 - 2014-11-10 20:01 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
    2014-11-10 19:37 - 2010-04-24 07:00 - 00336896 _____ (CANON INC.) C:\Windows\system32\CNMLMA2.DLL
    2014-11-10 19:36 - 2014-11-10 19:36 - 00004988 _____ () C:\Windows\System32\Tasks\PCDRScheduledMaintenance
    2014-11-10 19:36 - 2014-11-10 19:36 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
    2014-11-10 19:36 - 2014-11-10 19:36 - 00000000 ____D () C:\Windows\system32\SPReview
    2014-11-10 19:36 - 2014-11-10 18:04 - 00000544 _____ () C:\Windows\Tasks\PCDRScheduledMaintenance.job
    2014-11-10 19:35 - 2014-11-10 19:35 - 00000000 ____D () C:\Windows\system32\EventProviders
    2014-11-10 19:20 - 2010-11-04 19:57 - 00048976 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
    2014-11-10 19:19 - 2010-11-20 07:39 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll
    2014-11-10 19:19 - 2010-11-20 07:33 - 00299392 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 03860992 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 03650560 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 03027968 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
    2014-11-10 19:19 - 2010-11-20 07:27 - 03008000 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 02652160 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 02543616 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 02086912 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 02018304 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 01900544 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 01753088 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 01646080 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 01556992 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 01509888 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 01326080 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 01281024 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 01212416 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 01197056 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 01098240 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 01008128 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00867840 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00849920 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00695808 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00577536 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00481280 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL
    2014-11-10 19:19 - 2010-11-20 07:27 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL
    2014-11-10 19:19 - 2010-11-20 07:27 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll
    2014-11-10 19:19 - 2010-11-20 07:27 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
    2014-11-10 19:19 - 2010-11-20 07:26 - 04120064 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
    2014-11-10 19:19 - 2010-11-20 07:26 - 03391488 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
    2014-11-10 19:19 - 2010-11-20 07:26 - 03205120 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
    2014-11-10 19:19 - 2010-11-20 07:26 - 02067456 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
    2014-11-10 19:19 - 2010-11-20 07:26 - 01866240 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
    2014-11-10 19:19 - 2010-11-20 07:26 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
    2014-11-10 19:19 - 2010-11-20 07:26 - 01340416 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll
    2014-11-10 19:19 - 2010-11-20 07:26 - 01244160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
    2014-11-10 19:19 - 2010-11-20 07:26 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
    2014-11-10 19:19 - 2010-11-20 07:26 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
    2014-11-10 19:19 - 2010-11-20 07:26 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
    2014-11-10 19:19 - 2010-11-20 07:26 - 00317952 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
    2014-11-10 19:19 - 2010-11-20 07:26 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll
    2014-11-10 19:19 - 2010-11-20 07:26 - 00281600 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll
    2014-11-10 19:19 - 2010-11-20 07:25 - 03957760 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe
    2014-11-10 19:19 - 2010-11-20 07:25 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
    2014-11-10 19:19 - 2010-11-20 07:25 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll
    2014-11-10 19:19 - 2010-11-20 07:25 - 01600512 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
    2014-11-10 19:19 - 2010-11-20 07:25 - 01504256 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
    2014-11-10 19:19 - 2010-11-20 07:25 - 00958464 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
    2014-11-10 19:19 - 2010-11-20 07:25 - 00897536 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll
    2014-11-10 19:19 - 2010-11-20 07:25 - 00705024 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
    2014-11-10 19:19 - 2010-11-20 07:25 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe
    2014-11-10 19:19 - 2010-11-20 07:25 - 00594432 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
    2014-11-10 19:19 - 2010-11-20 07:25 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
    2014-11-10 19:19 - 2010-11-20 07:25 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
    2014-11-10 19:19 - 2010-11-20 07:25 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe
    2014-11-10 19:19 - 2010-11-20 07:24 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe
    2014-11-10 19:19 - 2010-11-20 07:24 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe
    2014-11-10 19:19 - 2010-11-20 07:24 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe
    2014-11-10 19:19 - 2010-11-20 06:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthFWSnapin.dll
    2014-11-10 19:19 - 2010-11-20 06:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
    2014-11-10 19:19 - 2010-11-20 06:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
    2014-11-10 19:19 - 2010-11-20 06:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RacEngn.dll
    2014-11-10 19:19 - 2010-11-20 06:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
    2014-11-10 19:19 - 2010-11-20 06:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll
    2014-11-10 19:19 - 2010-11-20 06:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
    2014-11-10 19:19 - 2010-11-20 06:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
    2014-11-10 19:19 - 2010-11-20 06:20 - 01414144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
    2014-11-10 19:19 - 2010-11-20 06:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbc32.dll
    2014-11-10 19:19 - 2010-11-20 06:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
    2014-11-10 19:19 - 2010-11-20 06:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
    2014-11-10 19:19 - 2010-11-20 06:19 - 03207680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
    2014-11-10 19:19 - 2010-11-20 06:19 - 02291712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
    2014-11-10 19:19 - 2010-11-20 06:19 - 01493504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
    2014-11-10 19:19 - 2010-11-20 06:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40.dll
    2014-11-10 19:19 - 2010-11-20 06:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40u.dll
    2014-11-10 19:19 - 2010-11-20 06:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
    2014-11-10 19:19 - 2010-11-20 06:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
    2014-11-10 19:19 - 2010-11-20 06:18 - 01371136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
    2014-11-10 19:19 - 2010-11-20 06:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
    2014-11-10 19:19 - 2010-11-20 06:18 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
    2014-11-10 19:19 - 2010-11-20 06:18 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
    2014-11-10 19:19 - 2010-11-20 06:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3api.dll
    2014-11-10 19:19 - 2010-11-20 05:05 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll
    2014-11-10 19:19 - 2010-11-20 03:25 - 00753664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
    2014-11-10 19:19 - 2010-11-20 03:23 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
    2014-11-10 19:19 - 2010-11-20 03:21 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
    2014-11-10 19:19 - 2010-11-04 20:20 - 00347904 _____ () C:\Windows\system32\systemsf.ebd
    2014-11-10 19:19 - 2010-11-04 19:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
    2014-11-10 19:19 - 2010-11-04 19:57 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
    2014-11-10 19:19 - 2010-11-04 19:53 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
    2014-11-10 19:19 - 2010-11-04 19:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
    2014-11-10 19:19 - 2010-11-04 19:53 - 00109928 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
    2014-11-10 19:19 - 2010-11-04 19:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
    2014-11-10 19:19 - 2009-07-13 19:16 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpmonui.dll
    2014-11-10 19:18 - 2010-11-20 07:44 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe
    2014-11-10 19:18 - 2010-11-20 07:34 - 00295808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
    2014-11-10 19:18 - 2010-11-20 07:34 - 00215936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
    2014-11-10 19:18 - 2010-11-20 07:34 - 00071552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
    2014-11-10 19:18 - 2010-11-20 07:33 - 00366976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
    2014-11-10 19:18 - 2010-11-20 07:33 - 00289664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
    2014-11-10 19:18 - 2010-11-20 07:33 - 00263040 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
    2014-11-10 19:18 - 2010-11-20 07:33 - 00184704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
    2014-11-10 19:18 - 2010-11-20 07:33 - 00140672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys
    2014-11-10 19:18 - 2010-11-20 07:33 - 00103808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys
    2014-11-10 19:18 - 2010-11-20 07:33 - 00078720 _____ (Hewlett-Packard Company) C:\Windows\system32\Drivers\HpSAMD.sys
    2014-11-10 19:18 - 2010-11-20 07:33 - 00063360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys
    2014-11-10 19:18 - 2010-11-20 07:33 - 00031104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys
    2014-11-10 19:18 - 2010-11-20 07:32 - 00334208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
    2014-11-10 19:18 - 2010-11-20 07:32 - 00179072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
    2014-11-10 19:18 - 2010-11-20 07:29 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
    2014-11-10 19:18 - 2010-11-20 07:28 - 00780008 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
    2014-11-10 19:18 - 2010-11-20 07:28 - 00298104 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
    2014-11-10 19:18 - 2010-11-20 07:28 - 00166784 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 02262528 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 02250752 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 02193920 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 02072576 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 01808384 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 01689600 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 01363968 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 01243136 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
    2014-11-10 19:18 - 2010-11-20 07:27 - 01158656 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 01082880 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 01050624 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 01024512 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00933888 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00799744 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00691200 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00633344 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00605696 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00582656 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00418816 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00253440 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
    2014-11-10 19:18 - 2010-11-20 07:27 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL
    2014-11-10 19:18 - 2010-11-20 07:27 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll
    2014-11-10 19:18 - 2010-11-20 07:27 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 01457664 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00934912 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00551936 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
    2014-11-10 19:18 - 2010-11-20 07:26 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
    2014-11-10 19:18 - 2010-11-20 07:26 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00116224 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\fms.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll
    2014-11-10 19:18 - 2010-11-20 07:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll
    2014-11-10 19:18 - 2010-11-20 07:25 - 01264640 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
    2014-11-10 19:18 - 2010-11-20 07:25 - 00974336 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe
    2014-11-10 19:18 - 2010-11-20 07:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll
    2014-11-10 19:18 - 2010-11-20 07:25 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
    2014-11-10 19:18 - 2010-11-20 07:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll
    2014-11-10 19:18 - 2010-11-20 07:25 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
    2014-11-10 19:18 - 2010-11-20 07:25 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
    2014-11-10 19:18 - 2010-11-20 07:25 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
    2014-11-10 19:18 - 2010-11-20 07:25 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
    2014-11-10 19:18 - 2010-11-20 07:25 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
    2014-11-10 19:18 - 2010-11-20 07:25 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll
    2014-11-10 19:18 - 2010-11-20 07:25 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
    2014-11-10 19:18 - 2010-11-20 07:25 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe
    2014-11-10 19:18 - 2010-11-20 07:25 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll
    2014-11-10 19:18 - 2010-11-20 07:25 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
    2014-11-10 19:18 - 2010-11-20 07:25 - 00128000 _____ (Microsoft) C:\Windows\system32\Robocopy.exe
    2014-11-10 19:18 - 2010-11-20 07:25 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe
    2014-11-10 19:18 - 2010-11-20 07:24 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
    2014-11-10 19:18 - 2010-11-20 07:24 - 00793088 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
    2014-11-10 19:18 - 2010-11-20 07:24 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
    2014-11-10 19:18 - 2010-11-20 07:24 - 00763904 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
    2014-11-10 19:18 - 2010-11-20 07:24 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
    2014-11-10 19:18 - 2010-11-20 07:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe
    2014-11-10 19:18 - 2010-11-20 07:24 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl
    2014-11-10 19:18 - 2010-11-20 07:24 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
    2014-11-10 19:18 - 2010-11-20 07:24 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
    2014-11-10 19:18 - 2010-11-20 07:24 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
    2014-11-10 19:18 - 2010-11-20 07:24 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe
    2014-11-10 19:18 - 2010-11-20 07:24 - 00300032 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe
    2014-11-10 19:18 - 2010-11-20 07:24 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax
    2014-11-10 19:18 - 2010-11-20 07:24 - 00272896 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
    2014-11-10 19:18 - 2010-11-20 07:24 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv
    2014-11-10 19:18 - 2010-11-20 07:24 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
    2014-11-10 19:18 - 2010-11-20 07:24 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe
    2014-11-10 19:18 - 2010-11-20 06:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\basecsp.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncCenter.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsservices.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPEncEn.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 01175040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webservices.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqlsrv32.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlangpui.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxs.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpeffects.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shlwapi.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSATAPI.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsvcs.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskcomp.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srchadmin.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scansetting.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpipcfg.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spp.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\regapi.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
    2014-11-10 19:18 - 2010-11-20 06:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samcli.dll
    2014-11-10 19:18 - 2010-11-20 06:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVCORE.DLL
    2014-11-10 19:18 - 2010-11-20 06:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
    2014-11-10 19:18 - 2010-11-20 06:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pnidui.dll
    2014-11-10 19:18 - 2010-11-20 06:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pla.dll
    2014-11-10 19:18 - 2010-11-20 06:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
    2014-11-10 19:18 - 2010-11-20 06:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
    2014-11-10 19:18 - 2010-11-20 06:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NaturalLanguage6.dll
    2014-11-10 19:18 - 2010-11-20 06:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceApi.dll
    2014-11-10 19:18 - 2010-11-20 06:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercpl.dll
    2014-11-10 19:18 - 2010-11-20 06:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netdiagfx.dll
    2014-11-10 19:18 - 2010-11-20 06:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\onex.dll
    2014-11-10 19:18 - 2010-11-20 06:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL
    2014-11-10 19:18 - 2010-11-20 06:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll
    2014-11-10 19:18 - 2010-11-20 06:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prncache.dll
    2014-11-10 19:18 - 2010-11-20 06:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll
    2014-11-10 19:18 - 2010-11-20 06:19 - 00830464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
    2014-11-10 19:18 - 2010-11-20 06:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2fs.dll
    2014-11-10 19:18 - 2010-11-20 06:19 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
    2014-11-10 19:18 - 2010-11-20 06:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ipsmsnap.dll
    2014-11-10 19:18 - 2010-11-20 06:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2.dll
    2014-11-10 19:18 - 2010-11-20 06:19 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
    2014-11-10 19:18 - 2010-11-20 06:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
    2014-11-10 19:18 - 2010-11-20 06:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedynos.dll
    2014-11-10 19:18 - 2010-11-20 06:19 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedyn.dll
    2014-11-10 19:18 - 2010-11-20 06:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
    2014-11-10 19:18 - 2010-11-20 06:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msutb.dll
    2014-11-10 19:18 - 2010-11-20 06:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fde.dll
    2014-11-10 19:18 - 2010-11-20 06:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IPHLPAPI.DLL
    2014-11-10 19:18 - 2010-11-20 06:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hbaapi.dll
    2014-11-10 19:18 - 2010-11-20 06:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mimefilt.dll
    2014-11-10 19:18 - 2010-11-20 06:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msasn1.dll
    2014-11-10 19:18 - 2010-11-20 06:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certmgr.dll
    2014-11-10 19:18 - 2010-11-20 06:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
    2014-11-10 19:18 - 2010-11-20 06:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroles.dll
    2014-11-10 19:18 - 2010-11-20 06:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXPTaskRingtone.dll
    2014-11-10 19:18 - 2010-11-20 06:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
    2014-11-10 19:18 - 2010-11-20 06:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
    2014-11-10 19:18 - 2010-11-20 06:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
    2014-11-10 19:18 - 2010-11-20 06:18 - 00252928 _____ (Microsoft) C:\Windows\SysWOW64\DShowRdpFilter.dll
    2014-11-10 19:18 - 2010-11-20 06:18 - 00222208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
    2014-11-10 19:18 - 2010-11-20 06:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
    2014-11-10 19:18 - 2010-11-20 06:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
    2014-11-10 19:18 - 2010-11-20 06:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe
    2014-11-10 19:18 - 2010-11-20 06:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe
    2014-11-10 19:18 - 2010-11-20 06:17 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
    2014-11-10 19:18 - 2010-11-20 06:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\net1.exe
    2014-11-10 19:18 - 2010-11-20 06:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\proquota.exe
    2014-11-10 19:18 - 2010-11-20 06:16 - 00776192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe
    2014-11-10 19:18 - 2010-11-20 06:16 - 00679424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe
    2014-11-10 19:18 - 2010-11-20 06:16 - 00668160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
    2014-11-10 19:18 - 2010-11-20 06:16 - 00658944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe
    2014-11-10 19:18 - 2010-11-20 06:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
    2014-11-10 19:18 - 2010-11-20 06:08 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
    2014-11-10 19:18 - 2010-11-20 04:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys
    2014-11-10 19:18 - 2010-11-20 04:52 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys
    2014-11-10 19:18 - 2010-11-20 04:52 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\raspptp.sys
    2014-11-10 19:18 - 2010-11-20 04:52 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
    2014-11-10 19:18 - 2010-11-20 04:52 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipfltdrv.sys
    2014-11-10 19:18 - 2010-11-20 04:44 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys
    2014-11-10 19:18 - 2010-11-20 04:33 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
    2014-11-10 19:18 - 2010-11-20 03:27 - 00309248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
    2014-11-10 19:18 - 2010-11-20 03:26 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
    2014-11-10 19:18 - 2010-11-04 19:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
    2014-11-10 19:17 - 2010-11-20 07:44 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL
    2014-11-10 19:17 - 2010-11-20 07:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL
    2014-11-10 19:17 - 2010-11-20 07:34 - 00363392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
    2014-11-10 19:17 - 2010-11-20 07:33 - 00213888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
    2014-11-10 19:17 - 2010-11-20 07:33 - 00171392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys
    2014-11-10 19:17 - 2010-11-20 07:33 - 00155008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys
    2014-11-10 19:17 - 2010-11-20 07:33 - 00094592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
    2014-11-10 19:17 - 2010-11-20 07:33 - 00014720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys
    2014-11-10 19:17 - 2010-11-20 07:32 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 02146816 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 01911808 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 01672704 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
    2014-11-10 19:17 - 2010-11-20 07:27 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
    2014-11-10 19:17 - 2010-11-20 07:27 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00898560 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00812032 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00781312 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
    2014-11-10 19:17 - 2010-11-20 07:27 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00636416 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00594432 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00527872 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00451072 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00435712 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00431104 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00403968 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00344576 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00300032 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
    2014-11-10 19:17 - 2010-11-20 07:27 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00221696 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
    2014-11-10 19:17 - 2010-11-20 07:27 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
    2014-11-10 19:17 - 2010-11-20 07:27 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 01087488 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00861184 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00623104 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00240640 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll
    2014-11-10 19:17 - 2010-11-20 07:26 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 03745792 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 03524608 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 01065984 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00840192 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00749568 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00549888 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00472064 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\amstream.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\takeown.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll
    2014-11-10 19:17 - 2010-11-20 07:25 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe
    2014-11-10 19:17 - 2010-11-20 07:25 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
    2014-11-10 19:17 - 2010-11-20 07:24 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe
    2014-11-10 19:17 - 2010-11-20 07:24 - 00899584 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr
    2014-11-10 19:17 - 2010-11-20 07:24 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl
    2014-11-10 19:17 - 2010-11-20 07:24 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
    2014-11-10 19:17 - 2010-11-20 07:24 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl
    2014-11-10 19:17 - 2010-11-20 07:24 - 00474112 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
    2014-11-10 19:17 - 2010-11-20 07:24 - 00373248 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl
    2014-11-10 19:17 - 2010-11-20 07:24 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe
    2014-11-10 19:17 - 2010-11-20 07:24 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl
    2014-11-10 19:17 - 2010-11-20 07:24 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
    2014-11-10 19:17 - 2010-11-20 07:24 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr
    2014-11-10 19:17 - 2010-11-20 07:24 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
    2014-11-10 19:17 - 2010-11-20 07:24 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
    2014-11-10 19:17 - 2010-11-20 07:24 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr
    2014-11-10 19:17 - 2010-11-20 07:24 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr
    2014-11-10 19:17 - 2010-11-20 07:24 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe
    2014-11-10 19:17 - 2010-11-20 07:24 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax
    2014-11-10 19:17 - 2010-11-20 07:24 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
    2014-11-10 19:17 - 2010-11-20 07:24 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
    2014-11-10 19:17 - 2010-11-20 07:24 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe
    2014-11-10 19:17 - 2010-11-20 07:24 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax
    2014-11-10 19:17 - 2010-11-20 07:24 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\desk.cpl
    2014-11-10 19:17 - 2010-11-20 07:24 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
    2014-11-10 19:17 - 2010-11-20 07:24 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax
    2014-11-10 19:17 - 2010-11-20 07:24 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
    2014-11-10 19:17 - 2010-11-20 07:24 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax
    2014-11-10 19:17 - 2010-11-20 07:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax
    2014-11-10 19:17 - 2010-11-20 07:24 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe
    2014-11-10 19:17 - 2010-11-20 07:24 - 00071168 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe
    2014-11-10 19:17 - 2010-11-20 07:24 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax
    2014-11-10 19:17 - 2010-11-20 07:24 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
    2014-11-10 19:17 - 2010-11-20 06:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NAPHLPR.DLL
    2014-11-10 19:17 - 2010-11-20 06:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NAPCRYPT.DLL
    2014-11-10 19:17 - 2010-11-20 06:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsCpl.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanpref.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMNetMgr.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Vault.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00902656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
    2014-11-10 19:17 - 2010-11-20 06:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00738816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00616960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmdev.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\riched20.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shwebsvc.dll

  11. #10
    Member
    Join Date
    Nov 2014
    Posts
    8
    Points
    0

    Default

    2014-11-10 19:17 - 2010-11-20 06:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiadefui.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00410624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanui.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\termmgr.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizeng.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDSp.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\raschap.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqlcese30.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00307712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpdxm.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tapisrv.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wavemsp.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdwcn.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcomapi.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpsrcwp.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasppp.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scecli.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vdsbas.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\syncui.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remotepg.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twext.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxlib.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiavideo.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShServiceObj.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpshell.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srvcli.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QUTIL.DLL
    2014-11-10 19:17 - 2010-11-20 06:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserAccountControlSettings.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdmat.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpd3d.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RpcRtRemote.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wtsapi32.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtutils.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\utildll.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vpnikeapi.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sisbkup.dll
    2014-11-10 19:17 - 2010-11-20 06:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\networkmap.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\networkexplorer.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcenter.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpcServices.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\onexui.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OobeFldr.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PerfCenterCPL.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceStatus.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnfldr.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshipsec.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\photowiz.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OnLineIDCpl.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qcap.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceSyncProvider.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetapi.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QAGENT.DLL
    2014-11-10 19:17 - 2010-11-20 06:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\provsvc.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netjoin.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prntvpt.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netid.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL
    2014-11-10 19:17 - 2010-11-20 06:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nci.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olethk32.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntlanman.dll
    2014-11-10 19:17 - 2010-11-20 06:20 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptui.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00856576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallControlPanel.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontext.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00592384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00429056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\localsec.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxclu.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hgcpl.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtrmgr.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprddm.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MediaMetadataHandler.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAC3ENC.DLL
    2014-11-10 19:17 - 2010-11-20 06:19 - 00219648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iTVData.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstask.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasrad.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprapi.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00148992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ifsutil.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logoncli.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvfw32.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fphc.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00093696 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\SysWOW64\fms.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciavi32.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasacct.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdeploy.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\httpapi.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvidc32.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsium.dll
    2014-11-10 19:17 - 2010-11-20 06:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lsmproxy.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 03727872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\accessibilitycpl.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 01400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DxpTaskSync.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 01040384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 01003520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00744448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00743424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00740864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\batmeter.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00685056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsuiext.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuxiliaryDisplayCpl.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00537600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenterCPL.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00484864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceCenter.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00402944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00333824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3ui.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroleui.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00257024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpx.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\audiodev.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00242176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\defaultlocationcpl.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00211456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairingFolder.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxdiagn.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00205312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efscore.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\activeds.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dskquoui.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsldp.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoplay.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabview.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00115200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3msm.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscmmc.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\avifil32.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3cfg.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\acppage.dll
    2014-11-10 19:17 - 2010-11-20 06:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscapi.dll
    2014-11-10 19:17 - 2010-11-20 06:17 - 00586752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfrgui.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimserv.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eudcedit.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00276480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskraid.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sethc.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskmgr.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PkgMgr.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetup.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfmon.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00098816 _____ (Microsoft) C:\Windows\SysWOW64\Robocopy.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nslookup.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logagent.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\isoburn.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w32tm.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\takeown.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\runonce.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzutil.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ftp.exe
    2014-11-10 19:17 - 2010-11-20 06:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userinit.exe
    2014-11-10 19:17 - 2010-11-20 06:16 - 00905216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmsys.cpl
    2014-11-10 19:17 - 2010-11-20 06:16 - 00878592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Bubbles.scr
    2014-11-10 19:17 - 2010-11-20 06:16 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl
    2014-11-10 19:17 - 2010-11-20 06:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appwiz.cpl
    2014-11-10 19:17 - 2010-11-20 06:16 - 00516096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\main.cpl
    2014-11-10 19:17 - 2010-11-20 06:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoScreensaver.scr
    2014-11-10 19:17 - 2010-11-20 06:16 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
    2014-11-10 19:17 - 2010-11-20 06:16 - 00345088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl
    2014-11-10 19:17 - 2010-11-20 06:16 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysdm.cpl
    2014-11-10 19:17 - 2010-11-20 06:16 - 00293888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ssText3d.scr
    2014-11-10 19:17 - 2010-11-20 06:16 - 00281088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdm.tsp
    2014-11-10 19:17 - 2010-11-20 06:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mystify.scr
    2014-11-10 19:17 - 2010-11-20 06:16 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Ribbons.scr
    2014-11-10 19:17 - 2010-11-20 06:16 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSNP.ax
    2014-11-10 19:17 - 2010-11-20 06:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
    2014-11-10 19:17 - 2010-11-20 06:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bitsadmin.exe
    2014-11-10 19:17 - 2010-11-20 06:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdmaud.drv
    2014-11-10 19:17 - 2010-11-20 06:16 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl
    2014-11-10 19:17 - 2010-11-20 06:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Kswdmcap.ax
    2014-11-10 19:17 - 2010-11-20 06:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kstvtune.ax
    2014-11-10 19:17 - 2010-11-20 06:16 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mpeg2Data.ax
    2014-11-10 19:17 - 2010-11-20 06:16 - 00068608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSTPager.ax
    2014-11-10 19:17 - 2010-11-20 04:52 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
    2014-11-10 19:17 - 2010-11-20 04:50 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndisuio.sys
    2014-11-10 19:17 - 2010-11-20 04:49 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
    2014-11-10 19:17 - 2010-11-20 04:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umbus.sys
    2014-11-10 19:17 - 2010-11-04 20:11 - 00433512 _____ (Microsoft Corporation) C:\Windows\system32\MCEWMDRMNDBootstrap.dll
    2014-11-10 19:17 - 2010-11-04 20:11 - 00312168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCEWMDRMNDBootstrap.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 01080320 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\QCLIPROV.DLL
    2014-11-10 19:16 - 2010-11-20 07:27 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\napdsnap.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\msdmo.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\shgina.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\TRAPI.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\wshirda.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\riched32.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\rdpcfgex.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
    2014-11-10 19:16 - 2010-11-20 07:27 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
    2014-11-10 19:16 - 2010-11-20 07:27 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
    2014-11-10 19:16 - 2010-11-20 07:26 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll
    2014-11-10 19:16 - 2010-11-20 07:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll
    2014-11-10 19:16 - 2010-11-20 07:26 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
    2014-11-10 19:16 - 2010-11-20 07:26 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll
    2014-11-10 19:16 - 2010-11-20 07:26 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
    2014-11-10 19:16 - 2010-11-20 07:26 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll
    2014-11-10 19:16 - 2010-11-20 07:26 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\KMSVC.DLL
    2014-11-10 19:16 - 2010-11-20 07:26 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll
    2014-11-10 19:16 - 2010-11-20 07:26 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll
    2014-11-10 19:16 - 2010-11-20 07:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\luainstall.dll
    2014-11-10 19:16 - 2010-11-20 07:26 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\FXSMON.dll
    2014-11-10 19:16 - 2010-11-20 07:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz32.dll
    2014-11-10 19:16 - 2010-11-20 07:26 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dsauth.dll
    2014-11-10 19:16 - 2010-11-20 07:26 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\HotStartUserAgent.dll
    2014-11-10 19:16 - 2010-11-20 07:26 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll
    2014-11-10 19:16 - 2010-11-20 07:25 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\CertPolEng.dll
    2014-11-10 19:16 - 2010-11-20 07:25 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\repair-bde.exe
    2014-11-10 19:16 - 2010-11-20 07:25 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe
    2014-11-10 19:16 - 2010-11-20 07:25 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
    2014-11-10 19:16 - 2010-11-20 07:25 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll
    2014-11-10 19:16 - 2010-11-20 07:25 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll
    2014-11-10 19:16 - 2010-11-20 07:25 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\BWUnpairElevated.dll
    2014-11-10 19:16 - 2010-11-20 07:25 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll
    2014-11-10 19:16 - 2010-11-20 07:25 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL
    2014-11-10 19:16 - 2010-11-20 07:24 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
    2014-11-10 19:16 - 2010-11-20 07:24 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\iscsicli.exe
    2014-11-10 19:16 - 2010-11-20 07:24 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\mobsync.exe
    2014-11-10 19:16 - 2010-11-20 07:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\cmstp.exe
    2014-11-10 19:16 - 2010-11-20 07:24 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
    2014-11-10 19:16 - 2010-11-20 07:24 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax
    2014-11-10 19:16 - 2010-11-20 07:24 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe
    2014-11-10 19:16 - 2010-11-20 07:24 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\djoin.exe
    2014-11-10 19:16 - 2010-11-20 07:24 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\g711codc.ax
    2014-11-10 19:16 - 2010-11-20 07:24 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\vbisurf.ax
    2014-11-10 19:16 - 2010-11-20 07:24 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\choice.exe
    2014-11-10 19:16 - 2010-11-20 07:24 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\LogonUI.exe
    2014-11-10 19:16 - 2010-11-20 07:24 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\FXSUNATD.exe
    2014-11-10 19:16 - 2010-11-20 07:24 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
    2014-11-10 19:16 - 2010-11-20 07:15 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
    2014-11-10 19:16 - 2010-11-20 07:14 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll
    2014-11-10 19:16 - 2010-11-20 07:13 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\RDPENCDD.dll
    2014-11-10 19:16 - 2010-11-20 07:13 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
    2014-11-10 19:16 - 2010-11-20 07:12 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\pifmgr.dll
    2014-11-10 19:16 - 2010-11-20 07:02 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
    2014-11-10 19:16 - 2010-11-20 07:02 - 00457216 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
    2014-11-10 19:16 - 2010-11-20 07:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUQ.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUF.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDSG.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\kbdlk41a.dll
    2014-11-10 19:16 - 2010-11-20 07:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDGKL.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ1.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDSF.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDPO.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDNEPR.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR1.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDUS.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR1.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTURME.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAJIK.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDMON.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAORI.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT1.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBULG.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBLR.DLL
    2014-11-10 19:16 - 2010-11-20 07:02 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGEO.DLL
    2014-11-10 19:16 - 2010-11-20 06:58 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll
    2014-11-10 19:16 - 2010-11-20 06:54 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\BlbEvents.dll
    2014-11-10 19:16 - 2010-11-20 06:51 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
    2014-11-10 19:16 - 2010-11-20 06:21 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
    2014-11-10 19:16 - 2010-11-20 06:21 - 00436736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmnet.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpps.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppinst.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vfwwdm32.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsnmp32.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wkscli.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimgvw.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsdchngr.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TRAPI.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdprefdrvapi.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shgina.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spopk.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schedcli.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\syssetup.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsbyuv.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshirda.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shunimpl.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\riched32.dll
    2014-11-10 19:16 - 2010-11-20 06:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
    2014-11-10 19:16 - 2010-11-20 06:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
    2014-11-10 19:16 - 2010-11-20 06:20 - 00283136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdv.dll
    2014-11-10 19:16 - 2010-11-20 06:20 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mydocs.dll
    2014-11-10 19:16 - 2010-11-20 06:20 - 00121344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
    2014-11-10 19:16 - 2010-11-20 06:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QCLIPROV.DLL
    2014-11-10 19:16 - 2010-11-20 06:20 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\napdsnap.dll
    2014-11-10 19:16 - 2010-11-20 06:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdhui.dll
    2014-11-10 19:16 - 2010-11-20 06:20 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
    2014-11-10 19:16 - 2010-11-20 06:20 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netutils.dll
    2014-11-10 19:16 - 2010-11-20 06:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfts.dll
    2014-11-10 19:16 - 2010-11-20 06:20 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
    2014-11-10 19:16 - 2010-11-20 06:19 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
    2014-11-10 19:16 - 2010-11-20 06:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
    2014-11-10 19:16 - 2010-11-20 06:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
    2014-11-10 19:16 - 2010-11-20 06:19 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasrecst.dll
    2014-11-10 19:16 - 2010-11-20 06:19 - 00082944 _____ (Radius Inc.) C:\Windows\SysWOW64\iccvid.dll
    2014-11-10 19:16 - 2010-11-20 06:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetmib1.dll
    2014-11-10 19:16 - 2010-11-20 06:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iyuv_32.dll
    2014-11-10 19:16 - 2010-11-20 06:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\luainstall.dll
    2014-11-10 19:16 - 2010-11-20 06:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciqtz32.dll
    2014-11-10 19:16 - 2010-11-20 06:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdmo.dll
    2014-11-10 19:16 - 2010-11-20 06:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msyuv.dll
    2014-11-10 19:16 - 2010-11-20 06:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\muifontsetup.dll
    2014-11-10 19:16 - 2010-11-20 06:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrle32.dll
    2014-11-10 19:16 - 2010-11-20 06:18 - 00128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EhStorAPI.dll
    2014-11-10 19:16 - 2010-11-20 06:18 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
    2014-11-10 19:16 - 2010-11-20 06:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabinet.dll
    2014-11-10 19:16 - 2010-11-20 06:18 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\amstream.dll
    2014-11-10 19:16 - 2010-11-20 06:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cca.dll
    2014-11-10 19:16 - 2010-11-20 06:18 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertPolEng.dll
    2014-11-10 19:16 - 2010-11-20 06:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsauth.dll
    2014-11-10 19:16 - 2010-11-20 06:18 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzSqlExt.dll
    2014-11-10 19:16 - 2010-11-20 06:18 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscdll.dll
    2014-11-10 19:16 - 2010-11-20 06:18 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elsTrans.dll
    2014-11-10 19:16 - 2010-11-20 06:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bitsperf.dll
    2014-11-10 19:16 - 2010-11-20 06:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_ISCII.DLL
    2014-11-10 19:16 - 2010-11-20 06:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browseui.dll
    2014-11-10 19:16 - 2010-11-20 06:17 - 00144896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsicli.exe
    2014-11-10 19:16 - 2010-11-20 06:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskpart.exe
    2014-11-10 19:16 - 2010-11-20 06:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mobsync.exe
    2014-11-10 19:16 - 2010-11-20 06:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmstp.exe
    2014-11-10 19:16 - 2010-11-20 06:17 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MuiUnattend.exe
    2014-11-10 19:16 - 2010-11-20 06:17 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findstr.exe
    2014-11-10 19:16 - 2010-11-20 06:17 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
    2014-11-10 19:16 - 2010-11-20 06:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unlodctr.exe
    2014-11-10 19:16 - 2010-11-20 06:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
    2014-11-10 19:16 - 2010-11-20 06:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiougc.exe
    2014-11-10 19:16 - 2010-11-20 06:17 - 00024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
    2014-11-10 19:16 - 2010-11-20 06:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
    2014-11-10 19:16 - 2010-11-20 06:16 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VBICodec.ax
    2014-11-10 19:16 - 2010-11-20 06:16 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\desk.cpl
    2014-11-10 19:16 - 2010-11-20 06:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSDvbNP.ax
    2014-11-10 19:16 - 2010-11-20 06:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksxbar.ax
    2014-11-10 19:16 - 2010-11-20 06:16 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\g711codc.ax
    2014-11-10 19:16 - 2010-11-20 06:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbisurf.ax
    2014-11-10 19:16 - 2010-11-20 06:08 - 00119808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imm32.dll
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTUQ.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTUF.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDSG.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdlk41a.dll
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDGR1.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDGKL.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDCZ1.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDSF.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDPO.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDNEPR.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINTAM.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINORI.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINMAR.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINKAN.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINHIN.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINBEN.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDUS.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDUGHR1.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTURME.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAJIK.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDMON.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDMAORI.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDLT1.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINTEL.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDGEO.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBULG.DLL
    2014-11-10 19:16 - 2010-11-20 06:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBLR.DLL
    2014-11-10 19:16 - 2010-11-20 06:07 - 01164800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
    2014-11-10 19:16 - 2010-11-20 06:07 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizres.dll
    2014-11-10 19:16 - 2010-11-20 06:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
    2014-11-10 19:16 - 2010-11-20 06:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pifmgr.dll
    2014-11-10 19:16 - 2010-11-20 06:00 - 01027584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10.IME
    2014-11-10 19:16 - 2010-11-20 06:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imkr80.ime
    2014-11-10 19:16 - 2010-11-20 05:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnaddr.dll
    2014-11-10 19:16 - 2010-11-20 05:37 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbrpm.sys
    2014-11-10 19:16 - 2010-11-20 04:52 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
    2014-11-10 19:16 - 2010-11-20 04:51 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
    2014-11-10 19:16 - 2010-11-20 04:44 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys
    2014-11-10 19:16 - 2010-11-20 04:43 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
    2014-11-10 19:16 - 2010-11-20 04:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
    2014-11-10 19:16 - 2010-11-20 04:34 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
    2014-11-10 19:16 - 2010-11-20 04:33 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CompositeBus.sys
    2014-11-10 19:16 - 2010-11-20 04:33 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
    2014-11-10 19:16 - 2010-11-20 04:14 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
    2014-11-10 19:16 - 2010-11-20 04:09 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys
    2014-11-10 19:16 - 2010-11-20 04:04 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
    2014-11-10 19:16 - 2010-11-20 03:30 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpipmi.sys
    2014-11-10 19:16 - 2010-11-20 03:26 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
    2014-11-10 19:16 - 2010-11-20 03:22 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdi.sys
    2014-11-10 19:16 - 2010-11-20 03:19 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys
    2014-11-10 19:16 - 2010-11-09 19:48 - 00010429 _____ () C:\Windows\system32\ScavengeSpace.xml
    2014-11-10 19:16 - 2010-11-04 20:20 - 00105559 _____ () C:\Windows\SysWOW64\RacRules.xml
    2014-11-10 19:16 - 2010-11-04 20:20 - 00105559 _____ () C:\Windows\system32\RacRules.xml
    2014-11-10 19:15 - 2010-11-20 07:26 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll
    2014-11-10 19:15 - 2010-11-20 06:21 - 00363008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wbemcomn.dll
    2014-11-10 19:15 - 2010-11-20 06:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdscore.dll
    2014-11-10 19:15 - 2009-06-10 15:39 - 00001041 _____ () C:\Windows\SysWOW64\tcpbidi.xml
    2014-11-10 19:11 - 2010-11-20 07:27 - 00529408 _____ (Microsoft Corporation) C:\Windows\system32\wbemcomn.dll
    2014-11-10 18:46 - 2014-11-11 08:46 - 00000000 ____D () C:\ProgramData\AVG Security Toolbar
    2014-11-10 18:46 - 2014-11-11 08:43 - 00000000 ____D () C:\Users\home\AppData\Local\AVG Web TuneUp
    2014-11-10 18:46 - 2014-11-10 18:46 - 00000000 ____D () C:\ProgramData\AVG Secure Search
    2014-11-10 18:46 - 2014-11-10 18:46 - 00000000 ____D () C:\Program Files (x86)\AVG Web TuneUp
    2014-11-10 18:46 - 2014-11-10 18:45 - 00050976 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
    2014-11-10 18:43 - 2014-11-10 18:51 - 00009316 _____ () C:\Users\home\AppData\Roaming\Comma Separated Values (Windows).EML
    2014-11-10 18:42 - 2014-11-10 18:46 - 00000000 ____D () C:\ProgramData\AVG Web TuneUp
    2014-11-10 18:42 - 2014-11-10 18:42 - 00038427 _____ () C:\Users\home\AppData\Roaming\Comma Separated Values (Windows).ADR
    2014-11-10 18:36 - 2014-11-10 18:36 - 00000000 ___SD () C:\Users\home\Documents\My Data Sources
    2014-11-10 18:36 - 2014-11-10 18:36 - 00000000 ___RD () C:\Users\home\Documents\My Stationery
    2014-11-10 18:36 - 2014-11-10 18:36 - 00000000 ____D () C:\Users\home\Documents\WELCA
    2014-11-10 18:36 - 2014-11-10 18:36 - 00000000 ____D () C:\Users\home\Documents\Updater5
    2014-11-10 18:36 - 2014-11-10 18:36 - 00000000 ____D () C:\Users\home\Documents\Turbo Lister Backup
    2014-11-10 18:36 - 2014-11-10 18:36 - 00000000 ____D () C:\Users\home\Documents\Tax Folder
    2014-11-10 18:36 - 2014-11-10 18:36 - 00000000 ____D () C:\Users\home\Documents\Symantec
    2014-11-10 18:36 - 2014-11-10 18:36 - 00000000 ____D () C:\Users\home\Documents\Software Folder
    2014-11-10 18:36 - 2014-11-10 18:36 - 00000000 ____D () C:\Users\home\Documents\Questers
    2014-11-10 18:36 - 2014-11-10 18:36 - 00000000 ____D () C:\Users\home\Documents\Fax
    2014-11-10 18:36 - 2014-11-10 18:36 - 00000000 ____D () C:\Users\home\Documents\2010 E-Bay Descriptions
    2014-11-10 18:36 - 2014-11-10 18:36 - 00000000 ____D () C:\Users\home\Documents\2009 E-Bay Descriptions
    2014-11-10 18:36 - 2014-08-08 19:46 - 00693248 _____ () C:\Users\home\Documents\Publication 2.pub
    2014-11-10 18:36 - 2014-07-31 17:34 - 00076288 _____ () C:\Users\home\Documents\2012 Booklet 3.pub
    2014-11-10 18:36 - 2014-07-23 09:16 - 00076800 _____ () C:\Users\home\Documents\2012 Booklet 2.pub
    2014-11-10 18:36 - 2014-07-15 15:08 - 00074240 _____ () C:\Users\home\Documents\2012 Booklet 1.pub
    2014-11-10 18:36 - 2014-07-10 14:48 - 00071168 _____ () C:\Users\home\Documents\2012 Booklet 1A.pub
    2014-11-10 18:36 - 2013-08-14 11:20 - 00000359 _____ () C:\Users\home\Documents\Recycle Bin - Shortcut.lnk
    2014-11-10 18:36 - 2012-04-19 22:06 - 00016416 _____ () C:\Users\home\Documents\Judy Flood - Copy of mom's inventory.xlsx
    2014-11-10 18:36 - 2010-06-10 23:59 - 00002071 _____ () C:\Users\home\Documents\Windows Photo Gallery.lnk
    2014-11-10 18:36 - 2010-02-03 18:05 - 00004462 _____ () C:\Users\home\Documents\Re_ Alltel Info.eml
    2014-11-10 18:36 - 2008-01-20 14:49 - 00000000 ____D () C:\Users\home\Documents\Turbo Lister
    2014-11-10 18:36 - 2007-02-03 03:20 - 00000372 _____ () C:\Users\home\Documents\spider.sav
    2014-11-10 18:36 - 2006-12-17 14:39 - 25405142 _____ () C:\Users\home\Documents\Backup.reg
    2014-11-10 18:35 - 2014-11-10 18:35 - 00000000 ____D () C:\Users\home\Documents\Daren's Folder
    2014-11-10 18:35 - 2014-11-10 18:35 - 00000000 ____D () C:\Users\home\Documents\Christmas Letters
    2014-11-10 18:35 - 2014-11-10 18:35 - 00000000 ____D () C:\Users\home\Documents\2014 E-Bay Descriptions
    2014-11-10 18:35 - 2014-11-10 18:35 - 00000000 ____D () C:\Users\home\Documents\2013 E-Bay Descriptions
    2014-11-10 18:35 - 2014-11-10 18:35 - 00000000 ____D () C:\Users\home\Documents\2012 E-Bay Descriptions
    2014-11-10 18:35 - 2014-11-10 18:35 - 00000000 ____D () C:\Users\home\Documents\2011 E-Bay Descriptions
    2014-11-10 18:35 - 2014-11-10 18:35 - 00000000 ____D () C:\Users\home\Documents\2011 Appraisals
    2014-11-10 18:34 - 2014-11-11 18:09 - 00000000 ___SD () C:\Windows\system32\CompatTel
    2014-11-10 18:32 - 2014-11-10 18:32 - 00002693 _____ () C:\Users\home\Desktop\Microsoft Office Word 2007.lnk
    2014-11-10 18:32 - 2014-11-10 18:32 - 00002693 _____ () C:\Users\home\Desktop\Microsoft Office Outlook 2007.lnk
    2014-11-10 18:21 - 2014-11-10 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
    2014-11-10 18:20 - 2014-11-10 18:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
    2014-11-10 18:19 - 2014-11-10 18:29 - 00000000 ____D () C:\ProgramData\Microsoft Help
    2014-11-10 18:19 - 2014-11-10 18:19 - 00000000 ____D () C:\Users\home\AppData\Local\Microsoft Help
    2014-11-10 18:19 - 2014-11-10 18:19 - 00000000 ____D () C:\Program Files\Microsoft Office
    2014-11-10 18:18 - 2014-11-10 18:18 - 00000000 __RHD () C:\MSOCache
    2014-11-10 18:16 - 2009-09-17 11:13 - 00328192 _____ (CANON INC.) C:\Windows\system32\CNC640L.dll
    2014-11-10 18:16 - 2009-09-17 11:12 - 00303104 _____ (CANON INC.) C:\Windows\SysWOW64\CNC640L.dll
    2014-11-10 18:16 - 2009-04-03 18:01 - 01321984 _____ (CANON INC.) C:\Windows\system32\CNC640C.dll
    2014-11-10 18:16 - 2009-04-03 18:00 - 00092672 _____ (CANON INC.) C:\Windows\system32\CNC640I.dll
    2014-11-10 18:16 - 2009-04-03 17:57 - 00106496 _____ (CANON INC.) C:\Windows\SysWOW64\CNC640U.dll
    2014-11-10 18:16 - 2008-12-25 18:23 - 00013312 _____ () C:\Windows\SysWOW64\CNC173FD.TBL
    2014-11-10 18:16 - 2008-12-25 18:23 - 00013312 _____ () C:\Windows\system32\CNC173FD.TBL
    2014-11-10 18:16 - 2008-08-25 20:02 - 00017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.dll
    2014-11-10 18:16 - 2008-08-25 20:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll
    2014-11-10 18:14 - 2014-11-11 17:48 - 00000000 ____D () C:\Windows\system32\MRT
    2014-11-10 18:14 - 2014-11-11 17:45 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2014-11-10 18:13 - 2011-04-09 00:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
    2014-11-10 18:13 - 2011-04-08 23:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
    2014-11-10 18:09 - 2014-11-12 11:15 - 00000000 ____D () C:\Users\home\AppData\Local\Hewlett-Packard
    2014-11-10 18:09 - 2014-11-11 17:20 - 00001423 _____ () C:\Users\home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    2014-11-10 18:09 - 2014-11-10 18:09 - 00003702 _____ () C:\Windows\System32\Tasks\RecoveryCDWin7
    2014-11-10 18:09 - 2014-11-10 18:09 - 00003606 _____ () C:\Windows\System32\Tasks\InternetServiceOffers
    2014-11-10 18:09 - 2014-11-10 18:09 - 00003510 _____ () C:\Windows\System32\Tasks\Registration
    2014-11-10 18:09 - 2014-11-10 18:09 - 00003290 _____ () C:\Windows\System32\Tasks\RMCreator
    2014-11-10 18:09 - 2014-11-10 18:09 - 00000000 ____D () C:\Users\home\AppData\Roaming\PictureMover
    2014-11-10 18:09 - 2014-11-10 18:09 - 00000000 ____D () C:\Users\home\AppData\Local\VirtualStore
    2014-11-10 18:08 - 2014-11-11 22:22 - 00116376 _____ () C:\Users\home\AppData\Local\GDIPFONTCACHEV1.DAT
    2014-11-10 18:07 - 2014-11-12 11:12 - 00000000 ____D () C:\Users\home\AppData\Roaming\Hewlett-Packard
    2014-11-10 18:07 - 2014-11-10 18:07 - 00001685 __RSH () C:\Windows\SysWOW64\Drivers\103C_HP_CPC_AY138AA-ABA CQ5320Y_YC_0Pres_QMXX017_EA1NAv6PrA3_49_INarra6_SPEGATRON CORPORATION_V6.01_B5.20_T100315_WUH0_L409_M2816_J500_7AMD_8Athlon II X2 240_92.8_#100523_N10DE03EF_Z11C10630_G10DE03D0.MRK
    2014-11-10 18:07 - 2014-11-10 18:07 - 00001685 __RSH () C:\Windows\system32\Drivers\103C_HP_CPC_AY138AA-ABA CQ5320Y_YC_0Pres_QMXX017_EA1NAv6PrA3_49_INarra6_SPEGATRON CORPORATION_V6.01_B5.20_T100315_WUH0_L409_M2816_J500_7AMD_8Athlon II X2 240_92.8_#100523_N10DE03EF_Z11C10630_G10DE03D0.MRK
    2014-11-10 18:07 - 2014-11-10 18:07 - 00001196 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Snapfish Photos - FREE - 1st 30 Prints.lnk
    2014-11-10 18:07 - 2014-11-10 18:07 - 00000000 ____D () C:\Users\Public\Symantec
    2014-11-10 18:07 - 2014-11-10 18:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\User Guides
    2014-11-10 18:07 - 2014-11-10 18:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Try Microsoft Office for 60 days
    2014-11-10 18:07 - 2010-01-07 20:46 - 00002310 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Software Store.lnk
    2014-11-10 18:07 - 2010-01-07 20:46 - 00002284 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
    2014-11-10 18:07 - 2010-01-07 20:46 - 00002278 _____ () C:\Users\Public\Desktop\eBay.lnk
    2014-11-10 18:07 - 2010-01-07 20:46 - 00002278 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Trials for QuickBooks, Quicken and TurboTax.lnk
    2014-11-10 18:07 - 2010-01-07 20:46 - 00002132 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Install Rhapsody.lnk
    2014-11-10 18:07 - 2010-01-07 20:46 - 00000183 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pandora Internet Radio.url
    2014-11-10 18:06 - 2014-11-12 04:24 - 02051721 _____ () C:\Windows\WindowsUpdate.log
    2014-11-10 18:06 - 2014-11-10 18:09 - 00000000 ____D () C:\Users\home
    2014-11-10 18:06 - 2014-11-10 18:06 - 00000020 ___SH () C:\Users\home\ntuser.ini
    2014-11-10 18:06 - 2009-07-13 22:54 - 00000000 ___RD () C:\Users\home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
    2014-11-10 18:06 - 2009-07-13 22:49 - 00000000 ___RD () C:\Users\home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
    2014-11-10 18:02 - 2014-11-10 18:02 - 00000000 ____D () C:\Users\home\AppData\Roaming\AVG2015
    2014-11-10 18:01 - 2014-11-10 18:02 - 00000000 ____D () C:\ProgramData\AVG2015
    2014-11-10 18:01 - 2014-11-10 18:01 - 00000971 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
    2014-11-10 18:01 - 2014-11-10 18:01 - 00000000 ___HD () C:\$AVG
    2014-11-10 18:01 - 2014-11-10 18:01 - 00000000 ____D () C:\Users\home\AppData\Roaming\TuneUp Software
    2014-11-10 18:01 - 2014-11-10 18:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
    2014-11-10 18:01 - 2014-11-10 18:01 - 00000000 ____D () C:\Program Files (x86)\AVG
    2014-11-10 17:59 - 2014-11-12 08:48 - 00000000 ____D () C:\ProgramData\MFAData
    2014-11-10 17:59 - 2014-11-10 18:09 - 00000000 ____D () C:\Users\home\AppData\Local\Avg2015
    2014-11-10 17:59 - 2014-11-10 17:59 - 00000000 ____D () C:\Users\home\AppData\Local\MFAData
    2014-11-10 17:59 - 2014-11-10 17:59 - 00000000 ____D () C:\ProgramData\Recovery
    2014-11-10 17:52 - 2014-11-04 16:30 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
    2014-11-10 17:40 - 2014-11-10 17:40 - 00000000 ____D () C:\Users\home\AppData\Roaming\Macromedia
    2014-11-10 17:40 - 2014-11-10 17:40 - 00000000 ____D () C:\Users\home\AppData\Roaming\Adobe
    2014-11-10 17:39 - 2014-11-10 17:39 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information
    2014-11-10 17:39 - 2014-11-10 17:39 - 00000000 ___HD () C:\ProgramData\CanonBJ
    2014-11-10 17:39 - 2014-11-10 17:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP640 series

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2014-11-11 19:57 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\rescache
    2014-11-11 19:56 - 2009-07-13 22:45 - 00015792 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2014-11-11 19:56 - 2009-07-13 22:45 - 00015792 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2014-11-11 19:07 - 2009-07-13 23:13 - 00781494 _____ () C:\Windows\system32\PerfStringBackup.INI
    2014-11-11 19:00 - 2009-07-13 23:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2014-11-11 19:00 - 2009-07-13 22:51 - 00020860 _____ () C:\Windows\setupact.log
    2014-11-11 18:33 - 2009-07-13 21:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
    2014-11-11 18:32 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
    2014-11-11 18:12 - 2009-07-13 22:45 - 00428944 _____ () C:\Windows\system32\FNTCACHE.DAT
    2014-11-11 17:07 - 2009-07-14 01:45 - 00000000 ____D () C:\Program Files\Windows Journal
    2014-11-11 17:07 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
    2014-11-11 17:07 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
    2014-11-11 17:07 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\zh-HK
    2014-11-11 17:07 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\tr-TR
    2014-11-11 17:07 - 2009-07-13 21:20 - 00000000 ____D () C:\Program Files\Common Files\System
    2014-11-11 17:06 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files\Windows Defender
    2014-11-11 17:06 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
    2014-11-11 17:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
    2014-11-11 17:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\Dism
    2014-11-11 17:03 - 2010-01-07 20:11 - 00319514 _____ () C:\Windows\PFRO.log
    2014-11-10 21:00 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
    2014-11-10 21:00 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files\Windows Portable Devices
    2014-11-10 21:00 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
    2014-11-10 21:00 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files\DVD Maker
    2014-11-10 21:00 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
    2014-11-10 21:00 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices
    2014-11-10 21:00 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
    2014-11-10 21:00 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\sppui
    2014-11-10 21:00 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup
    2014-11-10 21:00 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe
    2014-11-10 21:00 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz
    2014-11-10 21:00 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\manifeststore
    2014-11-10 21:00 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\AdvancedInstallers
    2014-11-10 21:00 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\sppui
    2014-11-10 21:00 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\Setup
    2014-11-10 21:00 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\oobe
    2014-11-10 21:00 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\migwiz
    2014-11-10 21:00 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\manifeststore
    2014-11-10 21:00 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
    2014-11-10 21:00 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\servicing
    2014-11-10 20:58 - 2009-07-13 20:36 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
    2014-11-10 20:58 - 2009-07-13 20:36 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll
    2014-11-10 20:51 - 2010-01-07 20:54 - 00000000 ____D () C:\ProgramData\Norton
    2014-11-10 20:01 - 2010-01-07 20:18 - 00000000 ____D () C:\ProgramData\NVIDIA
    2014-11-10 19:59 - 2010-01-07 20:09 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
    2014-11-10 19:47 - 2010-01-07 20:09 - 00000000 ____D () C:\Program Files\LSI SoftModem
    2014-11-10 19:37 - 2009-07-13 21:20 - 00000000 __RHD () C:\Users\Public\Libraries
    2014-11-10 19:36 - 2010-01-07 20:05 - 00000000 ___HD () C:\hp
    2014-11-10 18:24 - 2010-01-07 20:35 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
    2014-11-10 18:24 - 2009-07-14 01:45 - 00000000 ____D () C:\Windows\ShellNew
    2014-11-10 18:20 - 2009-07-13 21:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
    2014-11-10 18:19 - 2009-07-13 20:34 - 00000478 _____ () C:\Windows\win.ini
    2014-11-10 18:18 - 2009-07-13 23:32 - 00000000 ____D () C:\Windows\system32\restore
    2014-11-10 18:17 - 2009-07-13 21:20 - 00000000 __RSD () C:\Windows\Media
    2014-11-10 18:07 - 2010-01-07 20:46 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services
    2014-11-10 18:07 - 2010-01-07 20:42 - 00000000 ___RD () C:\Program Files (x86)\Online Services
    2014-11-10 18:06 - 2010-01-07 20:05 - 00000000 ____D () C:\Windows\Panther
    2014-11-10 18:03 - 2010-01-07 20:33 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
    2014-11-10 18:01 - 2010-01-07 20:10 - 00003540 _____ () C:\Windows\TSSysprep.log
    2014-11-10 18:01 - 2009-07-13 22:46 - 00002790 _____ () C:\Windows\DtcInstall.log
    2014-11-10 17:59 - 2009-07-13 23:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
    2014-11-10 17:59 - 2009-07-13 23:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template

    Some content of TEMP:
    ====================
    C:\Users\home\AppData\Local\Temp\APNSetup.exe


    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2010-01-07 20:08

    ==================== End Of Log ============================


    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2014
    Ran by home at 2014-11-12 11:23:11
    Running from C:\Users\home\Desktop
    Boot Mode: Normal
    ==========================================================


    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
    AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

    ==================== Installed Programs ======================

    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.1 - Hewlett-Packard) Hidden
    Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.32.18 - Adobe Systems Incorporated)
    AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5557 - AVG Technologies)
    AVG 2015 (Version: 15.0.4213 - AVG Technologies) Hidden
    AVG 2015 (Version: 15.0.5557 - AVG Technologies) Hidden
    AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.0.0.19 - AVG Technologies)
    Canon MP640 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP640_series) (Version: - )
    Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
    CyberLink DVD Suite Deluxe (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.2115 - CyberLink Corp.)
    DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904 - Microsoft) Hidden
    Hardware Diagnostic Tools (HKLM\...\PC-Doctor for Windows) (Version: 6.0.5247.34 - PC-Doctor, Inc.)
    HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.3.9512.3162 - Hewlett-Packard)
    HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.0.71 - WildTangent)
    HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562}) (Version: 2.10.0000 - Hewlett-Packard)
    HP Remote Solution (HKLM-x32\...\HP Remote Solution) (Version: 1.1.11.0 - Hewlett-Packard)
    HP Setup (HKLM-x32\...\{17B4760F-334B-475D-829F-1A3E94A6A4E6}) (Version: 1.2.3560.3170 - Hewlett-Packard)
    HP Support Assistant (HKLM-x32\...\{741CFE3A-1C0B-4A7D-8E08-5D78C911C09D}) (Version: 4.2.5.3 - Hewlett-Packard)
    HP Support Information (HKLM-x32\...\{B9A03B7B-E0FF-4FB3-BA83-762E58A1B0AA}) (Version: 10.1.0002 - Hewlett-Packard)
    HP Update (HKLM-x32\...\{D46D081B-F60E-467E-A7C4-117B70D76731}) (Version: 5.001.000.014 - Hewlett-Packard)
    HPAsset component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
    Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
    Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
    LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2017 - CyberLink Corp.)
    LabelPrint (x32 Version: 2.5.2017 - CyberLink Corp.) Hidden
    LightScribe System Software (HKLM-x32\...\{CC8E94A2-55C7-4460-953C-2A790180578C}) (Version: 1.18.8.1 - LightScribe)
    LSI PCI-SV92EX Soft Modem (HKLM\...\LSI Soft Modem) (Version: 2.2.100 - LSI Corporation)
    Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
    Microsoft Live Search Toolbar (HKLM-x32\...\{DF802C05-4660-418c-970C-B988ADB1D316}) (Version: 3.0.566.0 - Microsoft Live Search Toolbar)
    Microsoft Office Home and Student 60 day trial (HKLM\...\OfficeTrial) (Version: - )
    Microsoft Office Outlook 2007 (HKLM-x32\...\OUTLOOK) (Version: 12.0.4518.1014 - Microsoft Corporation)
    Microsoft Office PowerPoint Viewer 2007 (English) (HKLM-x32\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
    Microsoft Office Publisher 2007 (HKLM-x32\...\PUBLISHER) (Version: 12.0.4518.1014 - Microsoft Corporation)
    Microsoft Office Standard 2007 (HKLM-x32\...\STANDARD) (Version: 12.0.4518.1014 - Microsoft Corporation)
    Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40624.0 - Microsoft Corporation)
    Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Works (HKLM-x32\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
    Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.20.0 - Symantec)
    NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.11.9739 - NVIDIA Corporation)
    NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.58.36 - NVIDIA Corporation)
    PictureMover (HKLM-x32\...\{1896E712-2B3D-45eb-BCE9-542742A51032}) (Version: 3.3.1.19 - Hewlett-Packard Company)
    PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
    Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3304 - CyberLink Corp.)
    Power2Go (x32 Version: 6.0.3304 - CyberLink Corp.) Hidden
    PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3503 - CyberLink Corp.)
    PowerDirector (x32 Version: 7.0.3503 - CyberLink Corp.) Hidden
    PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6531 - Realtek Semiconductor Corp.)
    Recovery Manager (x32 Version: 5.5.2216 - CyberLink Corp.) Hidden
    Search App by Ask (HKLM-x32\...\{4F524A2D-5350-4500-76A7-A758B70C1200}) (Version: 12.18.0.82 - APN, LLC) <==== ATTENTION
    Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
    Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
    Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
    Windows Live Sign-in Assistant (HKLM-x32\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation)
    Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
    Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

    ==================== Custom CLSID (selected items): ==========================

    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


    ==================== Restore Points =========================

    11-11-2014 17:05:51 Windows Update
    11-11-2014 18:08:25 Windows Update
    11-11-2014 23:41:57 Windows Update
    12-11-2014 00:27:09 Windows Update
    12-11-2014 00:51:42 Windows Update
    12-11-2014 01:04:55 Windows Update

    ==================== Hosts content: ==========================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-13 20:34 - 2009-06-10 15:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

    ==================== Scheduled Tasks (whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

    Task: {12066D20-9442-43BA-AEEE-D835B8A5548E} - System32\Tasks\RecoveryCDWin7 => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2009-10-20] ()
    Task: {198A3F71-A0CA-455B-AC7C-42B0AE32FECC} - System32\Tasks\HPCeeScheduleForhome => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2009-10-07] (Hewlett-Packard)
    Task: {80E6045B-A492-47C6-958A-3667BFB1BE1A} - System32\Tasks\Hewlett-Packard\HP Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2009-09-24] (Hewlett-Packard)
    Task: {A499EEFE-76FE-4AFA-998C-D3A5C668E184} - System32\Tasks\Microsoft\Windows\SetupSQMTask => C:\Windows\SYSTEM32\OOBE\SETUPSQM.EXE [2009-07-13] (Microsoft Corporation)
    Task: {BD4B3917-51C8-473B-9B28-877E82545E90} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2009-10-20] ()
    Task: {DEEC54A0-2CF3-4ABD-BA88-A1C60ABF68EA} - System32\Tasks\Hewlett-Packard\HP Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2009-09-24] (Hewlett-Packard)
    Task: {EB8DF6E8-1394-4025-9840-2C027409D901} - System32\Tasks\PCDRScheduledMaintenance => C:\Program Files\PC-Doctor for Windows\pcdrcui.exe [2009-09-18] (PC-Doctor, Inc.)
    Task: {F5EBA029-A7B1-4B8F-8ABF-5F79BA840212} - System32\Tasks\RMCreator => C:\Program Files (x86)\Hewlett-Packard\Recovery\Reminder.exe [2009-10-16] (CyberLink)
    Task: {F84C672E-3303-46B1-AB69-FAB95B07601F} - System32\Tasks\InternetServiceOffers => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2009-10-20] ()
    Task: {FEE8D1EF-4087-4ACE-94D6-AB4A87902571} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
    Task: C:\Windows\Tasks\HPCeeScheduleForhome.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
    Task: C:\Windows\Tasks\PCDRScheduledMaintenance.job => C:\Program Files\PC-Doctor for Windows\pcdrcui.exe

    ==================== Loaded Modules (whitelisted) =============

    2014-11-10 18:46 - 2014-11-10 18:45 - 00159768 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.10\loggingserver.exe
    2014-11-10 18:46 - 2014-11-10 18:45 - 03060248 _____ () C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
    2014-11-10 18:46 - 2014-11-10 18:45 - 00519704 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.10\log4cplusU.dll
    2014-11-10 18:09 - 2009-06-03 14:34 - 03764224 _____ () C:\Users\home\AppData\Roaming\PictureMover\Bin\Core.dll
    2009-07-13 15:03 - 2009-07-13 19:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
    2014-11-10 18:09 - 2009-06-03 14:43 - 01703936 _____ () C:\Users\home\AppData\Roaming\PictureMover\EN-US\Presentation.dll
    2014-11-10 18:46 - 2014-11-10 18:45 - 01685528 _____ () C:\Program Files (x86)\AVG Web TuneUp\TBAPI.dll
    2014-11-10 18:46 - 2014-11-10 18:45 - 40630296 _____ () C:\Program Files (x86)\AVG Web TuneUp\libcef.dll
    2006-10-26 23:30 - 2006-10-26 23:30 - 00065312 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\ColleagueImport.dll
    2006-10-27 17:35 - 2006-10-27 17:35 - 00436512 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll
    2006-10-27 17:16 - 2006-10-27 17:16 - 00138512 _____ () C:\Program Files (x86)\Microsoft Office\Office12\OUTLCTL.DLL

    ==================== Alternate Data Streams (whitelisted) =========

    (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

    AlternateDataStreams: C:\Users\home\Documents\Re_ Alltel Info.eml:OECustomProperty

    ==================== Safe Mode (whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


    ==================== EXE Association (whitelisted) =============

    (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


    ==================== MSCONFIG/TASK MANAGER disabled items =========

    (Currently there is no automatic fix for this section.)


    ========================= Accounts: ==========================

    Administrator (S-1-5-21-3965147740-1908356936-1942508611-500 - Administrator - Disabled)
    Guest (S-1-5-21-3965147740-1908356936-1942508611-501 - Limited - Disabled)
    home (S-1-5-21-3965147740-1908356936-1942508611-1000 - Administrator - Enabled) => C:\Users\home
    HomeGroupUser$ (S-1-5-21-3965147740-1908356936-1942508611-1002 - Limited - Enabled)

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (11/11/2014 05:09:51 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: avgidsagent.exe, version: 15.0.0.5557, time stamp: 0x54402583
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x732671fc
    Faulting process id: 0x60c
    Faulting application start time: 0xavgidsagent.exe0
    Faulting application path: avgidsagent.exe1
    Faulting module path: avgidsagent.exe2
    Report Id: avgidsagent.exe3

    Error: (11/11/2014 05:09:48 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: avgdumpx.exe, version: 15.0.0.5557, time stamp: 0x544022ef
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x732671fc
    Faulting process id: 0xb80
    Faulting application start time: 0xavgdumpx.exe0
    Faulting application path: avgdumpx.exe1
    Faulting module path: avgdumpx.exe2
    Report Id: avgdumpx.exe3

    Error: (11/11/2014 05:09:48 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: loggingserver.exe, version: 4.0.0.19, time stamp: 0x51d41c91
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x732671fc
    Faulting process id: 0x648
    Faulting application start time: 0xloggingserver.exe0
    Faulting application path: loggingserver.exe1
    Faulting module path: loggingserver.exe2
    Report Id: loggingserver.exe3

    Error: (11/11/2014 05:09:45 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: ToolbarUpdater.exe, version: 4.0.0.19, time stamp: 0x5450bba3
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x732671fc
    Faulting process id: 0x77c
    Faulting application start time: 0xToolbarUpdater.exe0
    Faulting application path: ToolbarUpdater.exe1
    Faulting module path: ToolbarUpdater.exe2
    Report Id: ToolbarUpdater.exe3

    Error: (11/11/2014 05:09:42 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: LSSrvc.exe, version: 1.18.8.1, time stamp: 0x4a8db089
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x732671fc
    Faulting process id: 0x650
    Faulting application start time: 0xLSSrvc.exe0
    Faulting application path: LSSrvc.exe1
    Faulting module path: LSSrvc.exe2
    Report Id: LSSrvc.exe3

    Error: (11/11/2014 05:08:08 PM) (Source: .NET Runtime) (EventID: 0) (User: )
    Description: .NET Runtime version : 2.0.50727.5420 -

    Error: (11/11/2014 05:07:08 PM) (Source: .NET Runtime) (EventID: 0) (User: )
    Description: .NET Runtime version : 2.0.50727.5420 -

    Error: (11/11/2014 11:04:51 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: iexplore.exe, version: 8.0.7601.17514, time stamp: 0x4ce79912
    Faulting module name: Flash10c.ocx, version: 10.0.32.18, time stamp: 0x4a613d79
    Exception code: 0xc0000005
    Fault offset: 0x001579a2
    Faulting process id: 0x11e8
    Faulting application start time: 0xiexplore.exe0
    Faulting application path: iexplore.exe1
    Faulting module path: iexplore.exe2
    Report Id: iexplore.exe3

    Error: (11/11/2014 09:13:40 AM) (Source: SideBySide) (EventID: 35) (User: )
    Description: Activation context generation failed for "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1".Error in manifest or policy file "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" on line WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
    Component identity found in manifest does not match the identity of the component requested.
    Reference is WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
    Definition is WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
    Please use sxstrace.exe for detailed diagnosis.

    Error: (11/10/2014 09:02:07 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: loggingserver.exe, version: 4.0.0.19, time stamp: 0x51d41c91
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x74bf6cc4
    Faulting process id: 0x5dc
    Faulting application start time: 0xloggingserver.exe0
    Faulting application path: loggingserver.exe1
    Faulting module path: loggingserver.exe2
    Report Id: loggingserver.exe3


    System errors:
    =============
    Error: (11/11/2014 06:55:18 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
    Description: Installation Failure: Windows failed to install the following update with error 0x80070308: Security Update for Windows 7 for x64-based Systems (KB2965788).

    Error: (11/11/2014 06:53:22 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
    Description: Installation Failure: Windows failed to install the following update with error 0x80070308: Update for Windows 7 for x64-based Systems (KB2923545).

    Error: (11/11/2014 06:53:09 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
    Description: Installation Failure: Windows failed to install the following update with error 0x80070308: Security Update for Windows 7 for x64-based Systems (KB2984981).

    Error: (11/11/2014 06:37:45 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
    Description: The AVGIDSAgent service did not shut down properly after receiving a preshutdown control.

    Error: (11/11/2014 05:22:46 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
    Description: Installation Failure: Windows failed to install the following update with error 0x80242016: Update for Internet Explorer 8 Compatibility View List for Windows 7 for x64-based Systems (KB2598845).

    Error: (11/11/2014 05:15:24 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
    Description: The Windows Defender service terminated with the following error:
    %%-2147024882

    Error: (11/11/2014 05:14:09 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
    Description: The AVGIDSAgent service did not shut down properly after receiving a preshutdown control.

    Error: (11/11/2014 05:09:48 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The vToolbarUpdater18.1.10 service terminated unexpectedly. It has done this 1 time(s).

    Error: (11/11/2014 05:09:46 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The LightScribeService Direct Disc Labeling Service service terminated unexpectedly. It has done this 1 time(s).

    Error: (11/11/2014 05:09:35 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
    Description: The AVGIDSAgent service did not shut down properly after receiving a preshutdown control.


    Microsoft Office Sessions:
    =========================

    ==================== Memory info ===========================

    Processor: AMD Athlon(tm) II X2 240 Processor
    Percentage of memory in use: 52%
    Total physical RAM: 2815.3 MB
    Available physical RAM: 1330.86 MB
    Total Pagefile: 5628.79 MB
    Available Pagefile: 3487.43 MB
    Total Virtual: 8192 MB
    Available Virtual: 8191.83 MB

    ==================== Drives ================================

    Drive c: (COMPAQ) (Fixed) (Total:455.79 GB) (Free:407.72 GB) NTFS
    Drive d: (FACTORY_IMAGE) (Fixed) (Total:9.87 GB) (Free:1.48 GB) NTFS ==>[System with boot components (obtained from reading drive)]
    Drive g: (Backup Drive) (Fixed) (Total:139.15 GB) (Free:92.68 GB) NTFS
    Drive h: (DATA) (Fixed) (Total:142.94 GB) (Free:138.13 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (Size: 465.8 GB) (Disk ID: 1549F232)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=455.8 GB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=9.9 GB) - (Type=07 NTFS)

    ========================================================
    Disk: 1 (Size: 298.1 GB) (Disk ID: AA661926)
    Partition 1: (Not Active) - (Size=16 GB) - (Type=27)
    Partition 2: (Active) - (Size=139.2 GB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=142.9 GB) - (Type=07 NTFS)

    ==================== End Of Log ============================

Page 1 of 2 12 LastLast