Jump to content

Rootkit.0access removal


Recommended Posts

Scanned with Malawarebytes for about 3 or 4 times last week to find this virus, I didn't get rid of it because it wasn't a big deal. But now the random ads are starting to annoy me, so here.

DDS Txt:

.

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 7.0.6000.16982 BrowserJavaVersion: 10.5.1

Run by Jon at 12:20:39 on 2012-07-23

Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1033.18.1982.883 [GMT -7:00]

.

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\svchost.exe -k rpcss

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\SLsvc.exe

C:\Windows\system32\svchost.exe -k LocalService

C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Program Files\Google\Update\GoogleUpdate.exe

C:\Windows\system32\taskeng.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files\Steam\Steam.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork

C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Program Files\Sony\Content Manager Assistant\CMA.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Sony\Content Manager Assistant\CMAWatcher.exe

C:\Program Files\Windows Live\Contacts\wlcomm.exe

C:\Program Files\Common Files\Steam\SteamService.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

C:\Windows\system32\SearchIndexer.exe

C:\Windows\explorer.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

C:\Program Files\Mozilla Firefox\firefox.exe

\\.\globalroot\systemroot\Installer\{8493e406-45c9-5c3c-512a-105670ad2aec}\U

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe

C:\Windows\system32\wbem\wmiprvse.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=3071102

uWindow Title = Internet Explorer provided by Dell

mDefault_Page_URL = hxxp://www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=3071102

uInternet Settings,ProxyOverride = *.local

BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File

BHO: Java Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\oracle\javafx 2.1 runtime\bin\ssv.dll

BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll

BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\dell\bae\BAE.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\oracle\javafx 2.1 runtime\bin\jp2ssv.dll

uRun: [steam] "c:\program files\steam\steam.exe" -silent

uRun: [skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized

uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background

uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun

mRun: [RtHDVCpl] RtHDVCpl.exe

mRun: [iSUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start

mRun: [<NO NAME>]

mRun: [dscactivate] c:\dell\dsca.exe 3

mRun: [iSUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup

mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"

mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime

mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"

mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"

mRun: [OrderReminder] c:\program files\hewlett-packard\orderreminder\OrderReminder.exe

mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray

StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\conten~1.lnk - c:\program files\sony\content manager assistant\CMA.exe

IE: Free YouTube Download - c:\users\jon\appdata\roaming\dvdvideosoftiehelpers\freeytvdownloader.htm

IE: Free YouTube to MP3 Converter - c:\users\jon\appdata\roaming\dvdvideosoftiehelpers\freeyoutubetomp3converter.htm

IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC} - c:\program files\oracle\javafx 2.1 runtime\bin\jp2iexp.dll

IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab

TCP: DhcpNameServer = 75.75.75.75 75.75.76.76

TCP: Interfaces\{21ABC350-0DA0-49C9-AEF7-7D416E9BE7B3} : DhcpNameServer = 143.166.95.37 143.166.6.24

TCP: Interfaces\{E1F5296E-773E-43B3-A9AF-F3DEBDDFAE74} : DhcpNameServer = 75.75.75.75 75.75.76.76

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\users\jon\appdata\roaming\mozilla\firefox\profiles\kcus4kd2.default\

FF - prefs.js: browser.startup.homepage - youtube.com

FF - plugin: c:\program files\google\update\1.3.21.115\npGoogleUpdate3.dll

FF - plugin: c:\program files\oracle\javafx 2.1 runtime\bin\plugin2\npjp2.dll

FF - plugin: c:\programdata\zylom\zylomgamesplayer\npzylomgamesplayer.dll

FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_3_300_265.dll

FF - plugin: c:\windows\system32\npDeployJava1.dll

FF - plugin: c:\windows\system32\npmproxy.dll

.

============= SERVICES / DRIVERS ===============

.

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2012-7-4 242240]

R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-7-17 655944]

R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia update core\daemonu.exe [2012-6-30 1262400]

R2 Skype C2C Service;Skype C2C Service;c:\programdata\skype\toolbars\skype c2c service\c2c_service.exe [2012-7-5 3048136]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-7-17 22344]

R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2012-7-23 40776]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2012-7-21 136176]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-6-30 250056]

S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2012-7-21 136176]

S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-6-30 113120]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

.

=============== Created Last 30 ================

.

2012-07-23 19:04:16 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2012-07-23 18:43:47 -------- d-----w- C:\TDSSKiller_Quarantine

2012-07-21 15:30:39 -------- d-----w- c:\programdata\GameHouse

2012-07-21 15:30:12 -------- d-----w- c:\programdata\Trymedia

2012-07-21 15:29:01 -------- d-----w- c:\programdata\Zylom

2012-07-21 15:29:01 -------- d-----w- c:\program files\Zylom Games

2012-07-21 15:27:02 -------- d-----w- C:\GameHouse Games

2012-07-21 15:26:30 -------- d-----w- c:\program files\RealArcade

2012-07-17 20:34:56 -------- d-----w- c:\users\jon\appdata\roaming\Malwarebytes

2012-07-17 20:34:48 22344 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-07-17 20:34:48 -------- d-----w- c:\programdata\Malwarebytes

2012-07-17 20:34:48 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2012-07-16 03:12:57 -------- d-----w- c:\users\jon\appdata\roaming\AtomZombieData

2012-07-16 02:49:47 444952 ----a-w- c:\windows\system32\wrap_oal.dll

2012-07-16 02:49:47 109080 ----a-w- c:\windows\system32\OpenAL32.dll

2012-07-16 02:49:47 -------- d-----w- c:\program files\OpenAL

2012-07-16 02:39:23 -------- d-----w- c:\program files\common files\Wise Installation Wizard

2012-07-16 02:07:23 -------- d-sh--r- c:\users\jon\appdata\roaming\System32

2012-07-15 20:36:20 -------- d-----w- c:\users\jon\appdata\roaming\Mount&Blade

2012-07-08 07:54:08 -------- d-----w- c:\program files\Sony

2012-07-08 05:57:02 -------- d-----w- c:\users\jon\appdata\roaming\DVDVideoSoftIEHelpers

2012-07-08 05:55:25 405144 ----a-w- c:\windows\system32\Newtonsoft.Json.Net20.dll

2012-07-08 05:55:19 -------- d-----w- c:\program files\DVDVideoSoft

2012-07-08 05:55:19 -------- d-----w- c:\program files\common files\DVDVideoSoft

2012-07-08 05:44:41 -------- d-----w- c:\users\jon\appdata\roaming\HandBrake

2012-07-08 05:31:35 -------- d-----w- c:\users\jon\appdata\roaming\DVDVideoSoft

2012-07-07 03:54:28 -------- d-----w- c:\users\jon\appdata\roaming\The Path

2012-07-07 03:41:12 -------- d-----w- c:\users\jon\appdata\roaming\Larva Mortus Demo

2012-07-06 01:45:34 5030088 ----a-w- c:\program files\mozilla firefox\extensions\{82af8dca-6de9-405d-bd5e-43525bdad38a}\components\SkypeFfComponent.dll

2012-07-06 01:14:44 -------- d-----w- c:\users\jon\appdata\roaming\Carbon

2012-07-05 08:22:23 -------- d-----w- c:\users\jon\appdata\roaming\runic games

2012-07-05 05:28:09 -------- d-----w- c:\users\jon\appdata\local\Oblivion

2012-07-05 05:11:13 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys

2012-07-05 05:11:09 -------- d-----w- c:\users\jon\appdata\roaming\DAEMON Tools Lite

2012-07-05 05:11:06 -------- d-----w- c:\program files\DAEMON Tools Lite

2012-07-05 05:09:59 -------- d-----w- c:\programdata\DAEMON Tools Lite

2012-07-04 23:01:58 143360 ----a-r- c:\windows\apptune1018.exe

2012-07-04 23:01:54 86016 ----a-w- c:\windows\system32\ZSPOOL.DLL

2012-07-04 23:01:53 28672 ----a-w- c:\windows\system32\zlm.dll

2012-07-04 23:01:53 28672 ----a-w- c:\windows\system32\IMF32.DLL

2012-07-04 23:01:53 24576 ----a-w- c:\windows\system32\ZTAG32.DLL

2012-07-04 23:01:53 102400 ----a-w- c:\windows\system32\zlhp1018.dll

2012-07-04 23:01:52 49152 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\IMFPRINT.DLL

2012-07-04 23:01:50 -------- d--h--w- c:\program files\Zenographics

2012-07-04 22:59:15 106496 ----a-r- c:\windows\system32\VSHP1018.DLL

2012-07-04 22:59:14 442368 ----a-r- c:\windows\system32\ZSHP1018.EXE

2012-07-04 02:22:50 -------- d-----w- c:\programdata\KingsIsle Entertainment

2012-07-03 02:45:29 378368 ----a-w- c:\windows\system32\winhttp.dll

2012-07-03 02:44:40 268800 ----a-w- c:\windows\system32\es.dll

2012-07-03 01:15:50 -------- d-----w- c:\program files\uTorrent

2012-07-03 01:15:16 -------- d-----w- c:\users\jon\appdata\roaming\uTorrent

2012-07-03 00:29:58 -------- d-----w- c:\users\jon\appdata\roaming\fltk.org

2012-07-03 00:29:58 -------- d-----w- c:\programdata\fltk.org

2012-07-03 00:29:57 -------- d-----w- c:\users\jon\appdata\roaming\NVIDIA

2012-07-02 20:39:08 -------- d-----w- c:\programdata\Nexon

2012-07-02 20:29:01 -------- d-----w- c:\users\jon\appdata\roaming\NeopleLauncherDFO

2012-07-02 20:26:12 -------- d-----w- c:\users\jon\appdata\local\Adobe

2012-07-02 20:04:53 -------- d-----w- c:\program files\Microsoft XNA

2012-07-02 20:04:13 -------- d-----w- c:\program files\DirectX

2012-07-02 07:00:06 -------- d-----w- c:\program files\SystemRequirementsLab

2012-07-02 06:38:40 -------- d-----w- c:\program files\Oracle

2012-07-02 06:38:01 687504 ----a-w- c:\windows\system32\deployJava1.dll

2012-07-02 06:38:00 772504 ----a-w- c:\windows\system32\npDeployJava1.dll

2012-07-02 06:18:47 71680 ----a-w- c:\windows\system32\atl.dll

2012-07-02 06:18:18 297472 ----a-w- c:\windows\system32\gdi32.dll

2012-07-02 06:17:52 1060920 ----a-w- c:\windows\system32\drivers\ntfs.sys

2012-07-02 06:17:51 41984 ----a-w- c:\windows\system32\drivers\monitor.sys

2012-07-02 06:17:26 500736 ----a-w- c:\windows\system32\msdtcprx.dll

2012-07-02 06:17:26 30208 ----a-w- c:\windows\system32\xolehlp.dll

2012-07-02 06:16:58 156160 ----a-w- c:\windows\system32\wkssvc.dll

2012-07-02 06:16:28 36352 ----a-w- c:\windows\system32\tsgqec.dll

2012-07-02 06:16:28 1871872 ----a-w- c:\windows\system32\mstscax.dll

2012-07-02 06:16:28 116736 ----a-w- c:\windows\system32\aaclient.dll

2012-07-02 06:15:56 303616 ----a-w- c:\windows\system32\wmpeffects.dll

2012-07-02 06:15:00 713728 ----a-w- c:\windows\system32\timedate.cpl

2012-07-02 06:14:28 356864 ----a-w- c:\windows\system32\MediaMetadataHandler.dll

2012-07-02 06:13:33 150016 ----a-w- c:\program files\movie maker\MOVIEMK.exe

2012-07-02 06:13:32 23040 ----a-w- c:\program files\movie maker\WMM2EXT.dll

2012-07-02 06:13:32 195072 ----a-w- c:\program files\movie maker\WMM2AE.dll

2012-07-02 06:13:32 10922496 ----a-w- c:\program files\movie maker\MOVIEMK.dll

2012-07-02 06:12:20 80896 ----a-w- c:\windows\system32\MSNP.ax

2012-07-02 06:12:20 68608 ----a-w- c:\windows\system32\Mpeg2Data.ax

2012-07-02 06:12:20 57856 ----a-w- c:\windows\system32\MSDvbNP.ax

2012-07-02 06:12:20 428032 ----a-w- c:\windows\system32\EncDec.dll

2012-07-02 06:12:20 292352 ----a-w- c:\windows\system32\psisdecd.dll

2012-07-02 06:12:20 217088 ----a-w- c:\windows\system32\psisrndr.ax

2012-07-02 06:12:20 177152 ----a-w- c:\windows\system32\mpg2splt.ax

2012-07-02 06:12:20 1244672 ----a-w- c:\windows\system32\mcmde.dll

2012-07-02 06:10:23 2048 ----a-w- c:\windows\system32\tzres.dll

2012-07-02 06:09:48 696832 ----a-w- c:\windows\system32\localspl.dll

2012-07-02 06:08:58 45112 ----a-w- c:\windows\system32\drivers\pciidex.sys

2012-07-02 06:08:58 21560 ----a-w- c:\windows\system32\drivers\atapi.sys

2012-07-02 06:08:58 211000 ----a-w- c:\windows\system32\drivers\volsnap.sys

2012-07-02 06:08:58 15928 ----a-w- c:\windows\system32\drivers\pciide.sys

2012-07-02 06:08:58 154624 ----a-w- c:\windows\system32\drivers\nwifi.sys

2012-07-02 06:08:58 110136 ----a-w- c:\windows\system32\drivers\ataport.sys

2012-07-02 06:08:28 2923520 ----a-w- c:\windows\explorer.exe

2012-07-02 06:08:00 171520 ----a-w- c:\windows\system32\wintrust.dll

2012-07-02 06:07:33 494592 ----a-w- c:\windows\system32\kerberos.dll

2012-07-02 06:07:32 272384 ----a-w- c:\windows\system32\schannel.dll

2012-07-02 06:07:05 24064 ----a-w- c:\windows\system32\netcfg.exe

2012-07-02 06:03:33 1585664 ----a-w- c:\windows\system32\setupapi.dll

2012-07-02 06:01:56 654336 ----a-w- c:\windows\system32\printfilterpipelinesvc.exe

2012-07-02 06:00:37 25088 ----a-w- c:\windows\system32\drivers\tunnel.sys

2012-07-02 06:00:37 22016 ----a-w- c:\windows\system32\netiougc.exe

2012-07-02 06:00:37 179712 ----a-w- c:\windows\system32\iphlpsvc.dll

2012-07-02 06:00:37 167424 ----a-w- c:\windows\system32\tcpipcfg.dll

2012-07-02 06:00:37 15360 ----a-w- c:\windows\system32\drivers\TUNMP.SYS

2012-07-02 06:00:36 815104 ----a-w- c:\windows\system32\drivers\tcpip.sys

2012-07-02 06:00:10 454656 ----a-w- c:\program files\common files\system\msadc\msadce.dll

2012-07-02 05:59:49 9728 ----a-w- c:\windows\system32\LAPRXY.DLL

2012-07-02 05:59:49 223232 ----a-w- c:\windows\system32\WMASF.DLL

2012-07-02 05:59:49 2048 ----a-w- c:\windows\system32\asferror.dll

2012-07-02 05:59:31 25600 ----a-w- c:\windows\system32\amxread.dll

2012-07-02 05:59:31 14848 ----a-w- c:\windows\system32\apilogen.dll

2012-07-02 05:59:06 425472 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll

2012-07-02 05:59:05 712192 ----a-w- c:\windows\system32\WindowsCodecs.dll

2012-07-02 05:59:05 347136 ----a-w- c:\windows\system32\WindowsCodecsExt.dll

2012-07-02 05:58:11 97792 ----a-w- c:\windows\system32\cabview.dll

2012-07-02 05:56:50 61440 ----a-w- c:\windows\system32\ntprint.exe

2012-07-02 05:56:50 220160 ----a-w- c:\windows\system32\ntprint.dll

2012-07-02 05:56:49 1984512 ----a-w- c:\windows\system32\authui.dll

2012-07-02 05:56:49 120320 ----a-w- c:\windows\system32\dhcpcsvc6.dll

2012-07-02 05:56:49 10240 ----a-w- c:\windows\system32\dhcpcmonitor.dll

2012-07-02 05:56:47 69632 ----a-w- c:\windows\system32\sendmail.dll

2012-07-02 05:56:45 8138240 ----a-w- c:\windows\system32\ssBranded.scr

2012-07-02 05:56:06 441856 ----a-w- c:\windows\system32\win32spl.dll

2012-07-02 05:56:06 37376 ----a-w- c:\windows\system32\printcom.dll

2012-07-02 05:55:52 2031104 ----a-w- c:\windows\system32\win32k.sys

2012-07-02 05:55:38 14848 ----a-w- c:\windows\system32\wshrm.dll

2012-07-02 05:55:38 113664 ----a-w- c:\windows\system32\drivers\rmcast.sys

2012-07-02 05:55:18 43520 ----a-w- c:\windows\system32\msdxm.tlb

2012-07-02 05:55:18 313344 ----a-w- c:\windows\system32\wmpdxm.dll

2012-07-02 05:55:18 18432 ----a-w- c:\windows\system32\amcompat.tlb

2012-07-02 05:54:47 472576 ----a-w- c:\windows\system32\secproc.dll

2012-07-02 05:54:47 435712 ----a-w- c:\windows\system32\RMActivate_ssp.exe

2012-07-02 05:54:47 431104 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe

2012-07-02 05:54:47 312320 ----a-w- c:\windows\system32\msdrm.dll

2012-07-02 05:54:47 154624 ----a-w- c:\windows\system32\secproc_ssp_isv.dll

2012-07-02 05:54:47 154112 ----a-w- c:\windows\system32\secproc_ssp.dll

2012-07-02 05:54:46 523776 ----a-w- c:\windows\system32\RMActivate_isv.exe

2012-07-02 05:54:46 515584 ----a-w- c:\windows\system32\RMActivate.exe

2012-07-02 05:54:46 473088 ----a-w- c:\windows\system32\secproc_isv.dll

2012-07-02 05:54:30 66048 ----a-w- c:\program files\windows sidebar\sbdrop.dll

2012-07-02 05:54:29 1232896 ----a-w- c:\program files\windows sidebar\sidebar.exe

2012-07-02 05:54:29 11776 ----a-w- c:\windows\system32\sbunattend.exe

2012-07-02 05:53:41 83968 ----a-w- c:\windows\system32\dnsrslvr.dll

2012-07-02 05:53:41 24576 ----a-w- c:\windows\system32\dnscacheugc.exe

2012-07-02 05:49:44 97800 ----a-w- c:\windows\system32\infocardapi.dll

2012-07-02 05:49:44 622080 ----a-w- c:\windows\system32\icardagt.exe

2012-07-02 05:49:44 37384 ----a-w- c:\windows\system32\infocardcpl.cpl

2012-07-02 05:49:44 11264 ----a-w- c:\windows\system32\icardres.dll

2012-07-02 05:49:41 105016 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll

2012-07-02 05:49:39 781344 ----a-w- c:\windows\system32\PresentationNative_v0300.dll

2012-07-02 05:22:50 452440 ----a-w- c:\windows\system32\d3dx10_40.dll

2012-07-02 05:22:50 2036576 ----a-w- c:\windows\system32\D3DCompiler_40.dll

2012-07-02 05:22:48 4379984 ----a-w- c:\windows\system32\D3DX9_40.dll

2012-07-01 16:47:41 72704 ----a-w- c:\windows\system32\fontsub.dll

2012-07-01 16:47:41 34304 ----a-w- c:\windows\system32\atmlib.dll

2012-07-01 16:47:41 289792 ----a-w- c:\windows\system32\atmfd.dll

2012-07-01 16:47:41 24064 ----a-w- c:\windows\system32\lpk.dll

2012-07-01 16:47:41 156672 ----a-w- c:\windows\system32\t2embed.dll

2012-07-01 16:47:41 10240 ----a-w- c:\windows\system32\dciman32.dll

2012-07-01 16:44:54 61440 ----a-w- c:\windows\system32\winipsec.dll

2012-07-01 16:43:40 84992 ----a-w- c:\windows\system32\drivers\srvnet.sys

2012-07-01 16:43:40 306688 ----a-w- c:\windows\system32\drivers\srv.sys

2012-07-01 16:43:07 95232 ----a-w- c:\windows\system32\PortableDeviceClassExtension.dll

2012-07-01 16:43:07 241152 ----a-w- c:\windows\system32\PortableDeviceApi.dll

2012-07-01 16:43:07 160768 ----a-w- c:\windows\system32\PortableDeviceTypes.dll

2012-07-01 16:42:22 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE

2012-07-01 16:42:22 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE

2012-07-01 16:42:22 27136 ----a-w- c:\windows\system32\NETSTAT.EXE

2012-07-01 16:42:22 19968 ----a-w- c:\windows\system32\ARP.EXE

2012-07-01 16:42:22 17920 ----a-w- c:\windows\system32\ROUTE.EXE

2012-07-01 16:42:22 15360 ----a-w- c:\windows\system32\netevent.dll

2012-07-01 16:42:22 11264 ----a-w- c:\windows\system32\MRINFO.EXE

2012-07-01 16:42:22 103936 ----a-w- c:\windows\system32\netiohlp.dll

2012-07-01 16:42:22 10240 ----a-w- c:\windows\system32\finger.exe

2012-07-01 16:42:21 213592 ----a-w- c:\windows\system32\drivers\netio.sys

2012-07-01 16:41:30 704000 ----a-w- c:\windows\system32\PhotoScreensaver.scr

2012-07-01 16:41:30 356352 ----a-w- c:\windows\system32\wbem\wbemcomn.dll

2012-07-01 16:41:29 258232 ----a-w- c:\windows\system32\drivers\acpi.sys

2012-07-01 16:41:29 24064 ----a-w- c:\windows\system32\wtsapi32.dll

2012-07-01 16:41:27 542720 ----a-w- c:\windows\system32\sysmain.dll

2012-07-01 16:40:54 194560 ----a-w- c:\windows\system32\WebClnt.dll

2012-07-01 16:40:54 110080 ----a-w- c:\windows\system32\drivers\mrxdav.sys

2012-07-01 16:40:22 67584 ----a-w- c:\windows\system32\wlanhlp.dll

2012-07-01 16:40:22 502272 ----a-w- c:\windows\system32\wlansvc.dll

2012-07-01 16:40:22 47104 ----a-w- c:\windows\system32\wlanapi.dll

2012-07-01 16:40:22 297984 ----a-w- c:\windows\system32\wlansec.dll

2012-07-01 16:40:22 290816 ----a-w- c:\windows\system32\wlanmsm.dll

2012-07-01 16:40:22 123904 ----a-w- c:\windows\system32\L2SecHC.dll

2012-07-01 16:39:42 2048 ----a-w- c:\windows\system32\msxml3r.dll

2012-07-01 16:39:42 1260032 ----a-w- c:\windows\system32\msxml3.dll

2012-07-01 16:39:41 2048 ----a-w- c:\windows\system32\msxml6r.dll

2012-07-01 16:39:41 1406464 ----a-w- c:\windows\system32\msxml6.dll

2012-07-01 16:39:01 7680 ----a-w- c:\windows\system32\lsass.exe

2012-07-01 16:39:01 72704 ----a-w- c:\windows\system32\secur32.dll

2012-07-01 16:39:01 408136 ----a-w- c:\windows\system32\drivers\ksecdd.sys

2012-07-01 16:39:01 216576 ----a-w- c:\windows\system32\msv1_0.dll

2012-07-01 16:39:01 175104 ----a-w- c:\windows\system32\wdigest.dll

2012-07-01 16:39:01 1233920 ----a-w- c:\windows\system32\lsasrv.dll

2012-07-01 16:38:25 58368 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys

2012-07-01 16:38:25 211968 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys

2012-07-01 16:38:25 102400 ----a-w- c:\windows\system32\drivers\mrxsmb.sys

2012-07-01 16:37:51 98816 ----a-w- c:\windows\system32\mfps.dll

2012-07-01 16:37:51 52736 ----a-w- c:\windows\system32\rrinstaller.exe

2012-07-01 16:37:51 2855424 ----a-w- c:\windows\system32\mf.dll

2012-07-01 16:37:51 24576 ----a-w- c:\windows\system32\mfpmp.exe

2012-07-01 16:37:51 2048 ----a-w- c:\windows\system32\mferror.dll

2012-07-01 16:37:13 3502480 ----a-w- c:\windows\system32\ntkrnlpa.exe

2012-07-01 16:37:13 3468168 ----a-w- c:\windows\system32\ntoskrnl.exe

2012-07-01 16:36:08 434176 ----a-w- c:\windows\system32\vbscript.dll

2012-07-01 16:07:33 83968 ----a-w- c:\windows\system32\mscories.dll

2012-07-01 16:07:33 158720 ----a-w- c:\windows\system32\mscorier.dll

2012-07-01 15:57:16 28672 ----a-w- c:\windows\system32\Apphlpdm.dll

2012-07-01 15:57:14 4247552 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll

2012-07-01 15:57:14 1686528 ----a-w- c:\windows\system32\gameux.dll

2012-07-01 15:56:49 996352 ----a-w- c:\windows\system32\WMNetMgr.dll

2012-07-01 15:56:49 94720 ----a-w- c:\windows\system32\logagent.exe

2012-07-01 15:56:23 84480 ----a-w- c:\windows\system32\INETRES.dll

2012-07-01 15:56:23 737792 ----a-w- c:\windows\system32\inetcomm.dll

2012-07-01 15:56:09 60928 ----a-w- c:\windows\system32\msasn1.dll

2012-07-01 15:55:56 1645568 ----a-w- c:\windows\system32\connect.dll

2012-07-01 15:55:40 788992 ----a-w- c:\windows\system32\rpcrt4.dll

2012-07-01 15:55:14 396800 ----a-w- c:\windows\system32\drivers\http.sys

2012-07-01 15:55:14 31232 ----a-w- c:\windows\system32\httpapi.dll

2012-07-01 15:55:14 24064 ----a-w- c:\windows\system32\nshhttp.dll

2012-07-01 15:54:01 130048 ----a-w- c:\windows\system32\drivers\srv2.sys

2012-07-01 15:53:31 274432 ----a-w- c:\windows\system32\raschap.dll

2012-07-01 15:53:31 232960 ----a-w- c:\windows\system32\rastls.dll

2012-07-01 15:53:18 321536 ----a-w- c:\windows\system32\WSDApi.dll

2012-07-01 15:52:53 -------- d-----w- c:\program files\MSXML 4.0

2012-07-01 01:21:47 2565432 ----a-w- c:\programdata\microsoft\windows defender\definition updates\backup\mpengine.dll

2012-07-01 01:21:26 6762896 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{685ff6e8-7c39-4c1d-a2cc-c4b460d1161e}\mpengine.dll

2012-07-01 01:21:20 237072 ------w- c:\windows\system32\MpSigStub.exe

2012-07-01 01:12:41 -------- d-----w- c:\users\jon\appdata\roaming\DarkBlood ServiceNa

2012-07-01 00:23:06 -------- d-----w- c:\program files\Outspark

2012-06-30 23:45:55 -------- d-----w- c:\program files\iPod

2012-06-30 23:45:48 -------- d-----w- c:\program files\iTunes

2012-06-30 23:41:17 -------- d-----w- c:\program files\Bonjour

2012-06-30 23:34:47 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin7.dll

2012-06-30 23:34:47 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin6.dll

2012-06-30 23:34:47 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin5.dll

2012-06-30 23:34:47 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin4.dll

2012-06-30 23:34:47 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin3.dll

2012-06-30 23:34:47 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin2.dll

2012-06-30 23:34:47 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin.dll

2012-06-30 23:25:29 -------- d-----w- c:\users\jon\appdata\local\Apple Computer

2012-06-30 23:24:58 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys

2012-06-30 23:24:58 107368 ----a-w- c:\windows\system32\GEARAspi.dll

2012-06-30 23:24:10 -------- d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

2012-06-30 23:22:06 -------- d-----w- c:\users\jon\appdata\local\Apple

2012-06-30 23:18:39 -------- d-----w- c:\program files\Handbrake

2012-06-30 23:04:58 62272 ----a-w- c:\windows\system32\nvshext.dll

2012-06-30 23:04:57 645440 ----a-w- c:\windows\system32\nvvsvc.exe

2012-06-30 23:03:26 61248 ----a-w- c:\windows\system32\OpenCL.dll

2012-06-30 23:02:59 -------- d-----w- c:\programdata\NVIDIA Corporation

2012-06-30 22:59:59 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll

2012-06-30 22:50:49 65032 ----a-w- c:\windows\system32\XAPOFX1_0.dll

2012-06-30 22:49:59 261480 ----a-w- c:\windows\system32\xactengine2_7.dll

2012-06-30 22:47:16 -------- d-----w- C:\NVIDIA

2012-06-30 22:35:13 1130824 ----a-w- c:\windows\system32\dfshim.dll

2012-06-30 22:35:11 49472 ----a-w- c:\windows\system32\netfxperf.dll

2012-06-30 22:35:11 297808 ----a-w- c:\windows\system32\mscoree.dll

2012-06-30 22:35:11 295264 ----a-w- c:\windows\system32\PresentationHost.exe

2012-06-30 22:35:08 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll

2012-06-30 22:34:34 -------- d--h--w- c:\windows\msdownld.tmp

2012-06-30 22:34:25 -------- d-----w- c:\windows\system32\directx

2012-06-30 22:30:36 839680 ----a-w- c:\windows\system32\lameACM.acm

2012-06-30 22:30:36 650752 ----a-w- c:\windows\system32\xvidcore.dll

2012-06-30 22:30:36 4114432 ----a-w- c:\windows\system32\x264vfw.dll

2012-06-30 22:30:36 39936 ----a-w- c:\windows\system32\huffyuv.dll

2012-06-30 22:30:36 243200 ----a-w- c:\windows\system32\xvidvfw.dll

2012-06-30 22:30:36 216064 ----a-w- c:\windows\system32\lagarith.dll

2012-06-30 22:30:35 178688 ----a-w- c:\windows\system32\unrar.dll

2012-06-30 22:30:35 151552 ----a-w- c:\windows\system32\ac3acm.acm

2012-06-30 22:30:32 79872 ----a-w- c:\windows\system32\ff_vfw.dll

2012-06-30 22:30:28 -------- d-----w- c:\program files\K-Lite Codec Pack

2012-06-30 22:18:44 -------- d-----w- c:\users\jon\Tracing

2012-06-30 22:16:26 -------- d-----w- c:\program files\Microsoft

2012-06-30 22:16:06 -------- d-----w- c:\program files\Windows Live SkyDrive

2012-06-30 22:15:02 -------- d-----w- c:\windows\PCHEALTH

2012-06-30 22:11:59 -------- d-----w- C:\9113f7637558c95bd1bc

2012-06-30 22:11:55 -------- d-----w- c:\program files\common files\Windows Live

2012-06-30 22:10:10 -------- d-----w- C:\8fef31951be99ee8f701ab858f5f7456

2012-06-30 22:05:10 -------- d-----w- c:\users\jon\appdata\roaming\dynamite jack

2012-06-30 21:46:25 -------- d-----r- c:\program files\Skype

2012-06-30 21:44:29 -------- d-----w- c:\program files\common files\Steam

2012-06-30 21:44:25 -------- d-----w- c:\program files\Steam

2012-06-30 21:37:38 -------- d-----w- c:\users\jon\appdata\local\Macromedia

2012-06-30 21:37:21 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-06-30 21:37:21 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-06-30 21:16:10 -------- d-----w- c:\users\jon\appdata\local\SupportSoft

2012-06-30 14:29:22 -------- d-----w- c:\users\jon\Jeremy

2012-06-30 13:36:51 -------- d-----w- c:\users\jon\appdata\local\Microsoft Games

2012-06-30 08:21:21 -------- d-----w- c:\users\jon\appdata\local\Google

2012-06-30 08:17:27 -------- d-sh--we C:\Documents and Settings

.

==================== Find3M ====================

.

2012-07-02 06:03:10 5632 ----a-w- c:\windows\system32\drivers\en-us\sermouse.sys.mui

2012-07-02 06:01:57 549888 ----a-w- c:\windows\system32\rpcss.dll

2012-07-02 06:01:56 24576 ----a-w- c:\windows\system32\printfilterpipelineprxy.dll

2012-07-02 06:01:55 614912 ----a-w- c:\windows\system32\wbem\fastprox.dll

2012-07-02 06:01:55 501760 ----a-w- c:\windows\system32\wbem\WmiPrvSD.dll

2012-07-02 06:01:55 247296 ----a-w- c:\windows\system32\wbem\WmiPrvSE.exe

2012-07-02 06:01:55 130560 ----a-w- c:\windows\system32\wbem\WmiDcPrv.dll

2012-07-02 06:01:54 97280 ----a-w- c:\windows\system32\iasrecst.dll

2012-07-02 06:01:54 53248 ----a-w- c:\windows\system32\iasads.dll

2012-07-02 06:01:54 37888 ----a-w- c:\windows\system32\iasdatastore.dll

2012-07-02 06:01:54 158720 ----a-w- c:\windows\system32\sdohlp.dll

2012-07-02 06:01:25 62464 ----a-w- c:\windows\system32\l3codeca.acm

2012-07-02 06:01:25 220672 ----a-w- c:\windows\system32\l3codecp.acm

2012-07-02 05:59:31 40960 ----a-w- c:\windows\apppatch\apihex86.dll

2012-07-01 16:46:29 72704 ----a-w- c:\windows\system32\admparse.dll

2012-07-01 16:46:29 52736 ----a-w- c:\windows\apppatch\iebrshim.dll

2012-07-01 16:46:28 832512 ----a-w- c:\windows\system32\wininet.dll

2012-07-01 16:46:25 78336 ----a-w- c:\windows\system32\ieencode.dll

2012-07-01 16:46:25 48128 ----a-w- c:\windows\system32\mshtmler.dll

2012-07-01 16:46:25 389120 ----a-w- c:\windows\system32\html.iec

2012-07-01 16:46:24 1383424 ----a-w- c:\windows\system32\mshtml.tlb

2012-07-01 16:46:22 1830912 ----a-w- c:\windows\system32\inetcpl.cpl

2012-07-01 16:46:21 26624 ----a-w- c:\windows\system32\ieUnatt.exe

2012-07-01 16:46:19 56320 ----a-w- c:\windows\system32\iesetup.dll

2012-07-01 15:57:16 2560 ----a-w- c:\windows\apppatch\AcRes.dll

2012-07-01 15:57:15 537600 ----a-w- c:\windows\apppatch\AcLayers.dll

2012-07-01 15:57:15 449024 ----a-w- c:\windows\apppatch\AcSpecfc.dll

2012-07-01 15:57:15 2143744 ----a-w- c:\windows\apppatch\AcGenral.dll

2012-07-01 15:57:15 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll

2012-05-15 10:26:00 883008 ----a-w- c:\windows\system32\nvgenco32.dll

2012-05-15 10:26:00 5982528 ----a-w- c:\windows\system32\nvcuda.dll

2012-05-15 10:26:00 2524992 ----a-w- c:\windows\system32\nvcuvid.dll

2012-05-15 10:26:00 2445120 ----a-w- c:\windows\system32\nvcuvenc.dll

2012-05-15 10:26:00 2368832 ----a-w- c:\windows\system32\nvapi.dll

2012-05-15 10:26:00 19607872 ----a-w- c:\windows\system32\nvoglv32.dll

2012-05-15 10:26:00 17551680 ----a-w- c:\windows\system32\nvcompiler.dll

2012-05-15 10:26:00 15322432 ----a-w- c:\windows\system32\nvd3dum.dll

2012-05-15 10:26:00 11354944 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys

2012-05-15 10:26:00 1000768 ----a-w- c:\windows\system32\nvdispco32.dll

2012-05-15 09:28:49 108352 ----a-w- c:\windows\system32\nvmctray.dll

2012-05-15 09:28:48 3931456 ----a-w- c:\windows\system32\nvcpl.dll

2012-05-15 09:27:28 2759488 ----a-w- c:\windows\system32\nvsvc.dll

2012-04-25 19:11:36 4547944 ----a-w- c:\windows\system32\usbaaplrc.dll

2012-04-25 19:11:36 43520 ----a-w- c:\windows\system32\drivers\usbaapl.sys

.

============= FINISH: 12:21:30.33 ===============

Attach Text:

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-08-26.01)

.

Microsoft® Windows Vista™ Home Premium

Boot Device: \Device\HarddiskVolume2

Install Date: 11/2/2007 12:36:54 AM

System Uptime: 7/23/2012 11:35:06 AM (1 hours ago)

.

Motherboard: Dell Inc. | | 0RY206

Processor: AMD Athlon 64 X2 Dual Core Processor 4000+ | Socket AM2 | 2100/200mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 223 GiB total, 112.474 GiB free.

D: is CDROM ()

E: is CDROM ()

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP74: 7/18/2012 2:47:20 PM - Scheduled Checkpoint

RP75: 7/18/2012 4:55:32 PM - Installed DarkBloodOnline

RP76: 7/21/2012 10:08:05 AM - Scheduled Checkpoint

RP77: 7/22/2012 12:00:03 PM - Scheduled Checkpoint

RP78: 7/23/2012 11:46:45 AM - Removed Adobe Reader 8.1.0

.

==== Installed Programs ======================

.

µTorrent

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

AirMech

AOL Install

Apple Application Support

Apple Mobile Device Support

Apple Software Update

Atom Zombie Smasher

Audiosurf

Bonjour

Browser Address Error Redirector

Content Manager Assistant for PlayStation®

DAEMON Tools Lite

DarkBloodOnline

Dell DataSafe Online

Dell Support Center

Dell System Customization Wizard

DFOLauncher

Dungeon Fighter Online

Free Studio version 5.6.3.706

Games, Music, & Photos Launcher

Google Chrome

Google Update Helper

HandBrake 0.9.6

Hitogata Happa

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

HP OrderReminder

Internet Service Offers Launcher

iTunes

Java Auto Updater

Java 7 Update 5

Java SE Runtime Environment 6

JavaFX 2.1.1

K-Lite Mega Codec Pack 8.9.5

LaserJet 1018

Malwarebytes Anti-Malware version 1.62.0.1300

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft Application Error Reporting

Microsoft Choice Guard

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

Microsoft Works

Microsoft XNA Framework Redistributable 4.0

Mozilla Firefox 14.0.1 (x86 en-US)

Mozilla Maintenance Service

MSVCRT

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

NVIDIA Control Panel 301.42

NVIDIA Graphics Driver 301.42

NVIDIA Install Application

NVIDIA PhysX

NVIDIA Update 1.8.15

NVIDIA Update Components

NVIDIANetworkDiagnostic

OpenAL

Plants vs. Zombies

Product Documentation Launcher

QuickTime

Realtek High Definition Audio Driver

Roxio Creator Audio

Roxio Creator BDAV Plugin

Roxio Creator Copy

Roxio Creator Data

Roxio Creator DE

Roxio Creator Tools

Roxio Express Labeler

Roxio MyDVD DE

Roxio Update Manager

Skype Click to Call

Skype™ 5.5

Sonic Activation Module

Steam

System Requirements Lab CYRI

The Elder Scrolls III: Morrowind

User's Guides

Web Games Player Plugin

Windows Live Call

Windows Live Communications Platform

Windows Live Essentials

Windows Live Messenger

Windows Live Sign-in Assistant

Windows Live Upload Tool

WinRAR 4.01 (32-bit)

Wizard101

.

==== Event Viewer Messages From Past Week ========

.

7/23/2012 12:23:14 AM, Error: EventLog [6008] - The previous system shutdown at 12:21:15 AM on 7/23/2012 was unexpected.

7/16/2012 6:16:04 PM, Error: EventLog [6008] - The previous system shutdown at 6:12:14 PM on 7/16/2012 was unexpected.

7/16/2012 12:14:58 PM, Error: Service Control Manager [7023] - The Computer Browser service terminated with the following error: The specified service does not exist as an installed service.

7/16/2012 12:14:58 PM, Error: Service Control Manager [7003] - The IPsec Policy Agent service depends the following service: BFE. This service might not be installed.

7/16/2012 12:14:58 PM, Error: Service Control Manager [7003] - The IKE and AuthIP IPsec Keying Modules service depends the following service: BFE. This service might not be installed.

7/16/2012 12:14:58 PM, Error: Service Control Manager [7000] - The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

7/16/2012 12:12:57 PM, Error: ACPI [6] - IRQARB: ACPI BIOS does not contain an IRQ for the device in PCI slot 9, function 0. Please contact your system vendor for technical assistance.

7/16/2012 12:12:57 PM, Error: ACPI [6] - IRQARB: ACPI BIOS does not contain an IRQ for the device in PCI slot 11, function 0. Please contact your system vendor for technical assistance.

.

==== End Of File ===========================

Link to post
Share on other sites

Welcome to the forum.

Before we proceed further, please uninstall or disable uTorrent and any other peer-to-peer filesharing app.

Continued use of filesharing or ill-advised downloads will surely re-infect your system.

Risks of File-Sharing Technology.

P2P file sharing: Know the risks

It's also against our policy:

http://forums.malwarebytes.org/index.php?showtopic=97700

----------------------------------------

Then........

Please remove any usb or external drives from the computer before you run this scan!

Please download and run RogueKiller to your desktop.

For Windows XP, double-click to start.

For Vista or Windows 7, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.

Click Scan to scan the system.

When the scan completes > Close out the program > Don't Fix anything!

Don't run any other options, they're not all bad!!!!!!!

Post back the report which should be located on your desktop.

MrC

Link to post
Share on other sites

Sorry was cooking, you shouldn't generalize and say that torrents are used for only pirating, but I see where you are getting at. I have uninstalled utorrent.

Nonetheless, here is the report:

RogueKiller V7.6.4 [07/17/2012] by Tigzy

mail: tigzyRK<at>gmail<dot>com

Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/

Blog: http://tigzyrk.blogspot.com

Operating System: Windows Vista (6.0.6000 ) 32 bits version

Started in : Normal mode

User: Jon [Admin rights]

Mode: Scan -- Date: 07/23/2012 13:38:15

¤¤¤ Bad processes: 1 ¤¤¤

[sUSP PATH] c2c_service.exe -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -> KILLED [TermProc]

¤¤¤ Registry Entries: 2 ¤¤¤

[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND

[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

[ZeroAccess][FILE] @ : c:\windows\installer\{8493e406-45c9-5c3c-512a-105670ad2aec}\@ --> FOUND

[ZeroAccess][FOLDER] U : c:\windows\installer\{8493e406-45c9-5c3c-512a-105670ad2aec}\U --> FOUND

[ZeroAccess][FOLDER] L : c:\windows\installer\{8493e406-45c9-5c3c-512a-105670ad2aec}\L --> FOUND

[ZeroAccess][FILE] @ : c:\users\jon\appdata\local\{8493e406-45c9-5c3c-512a-105670ad2aec}\@ --> FOUND

[ZeroAccess][FOLDER] U : c:\users\jon\appdata\local\{8493e406-45c9-5c3c-512a-105670ad2aec}\U --> FOUND

[ZeroAccess][FOLDER] L : c:\users\jon\appdata\local\{8493e406-45c9-5c3c-512a-105670ad2aec}\L --> FOUND

[susp.ASLR][ASLR WIPED-OFF] services.exe : c:\windows\system32\services.exe --> CANNOT FIX

[ZeroAccess][sig found] services.exe : c:\windows\system32\services.exe --> CANNOT FIX

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ Infection : ZeroAccess ¤¤¤

¤¤¤ HOSTS File: ¤¤¤

127.0.0.1 localhost

::1 localhost

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: ST325082 0AS SCSI Disk Device +++++

--- User ---

[MBR] 7cf5f5a68f2ac6c5be6f08b684a7045f

[bSP] e4f1a3792e18a93ded96ab613143948a : Windows Vista MBR Code

Partition table:

0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 81920 | Size: 10240 Mo

1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 21053440 | Size: 228137 Mo

User = LL1 ... OK!

Error reading LL2 MBR!

Finished : << RKreport[1].txt >>

RKreport[1].txt

still working on that malawarebytes log... it's taking quite awhile, feel free to tell me whether or not you need it.

Link to post
Share on other sites

Sorry was cooking, you shouldn't generalize and say that torrents are used for only pirating, but I see where you are getting at. I have uninstalled utorrent.

It's the forums policy not mine, I just volunteer my free time here to help you, I'm not part of the staff on this forum.

--------------------------------

Being you have Vista, I'm not sure this will work...but give it a try.

Your computer is infected with a nasty rootkit. Please read the following information first.

You're infected with Rootkit.ZeroAccess, a BackDoor Trojan.

BACKDOOR WARNING

------------------------------

One or more of the identified infections is known to use a backdoor.

This allows hackers to remotely control your computer, steal critical system information and download and execute files.

I would advice you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Though the infection has been identified and because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:

How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

http://www.dslreports.com/faq/10451

When Should I Format, How Should I Reinstall

http://www.dslreports.com/faq/10063

I will try my best to clean this machine but I can't guarantee that it will be 100% secure afterwards.

Let me know what you decide to do. If you decide to go through with the cleanup, please proceed with the following steps.

-----------------------------------------

Please make sure system restore is running and create a new restore point before continuing!

For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.

For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

How to tell > 32 or 64 bit

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account an click Next.

To enter System Recovery Options by using Windows installation disc:

  • Insert the installation disc.
  • Restart your computer.
  • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
  • Click Repair your computer.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.

On the System Recovery Options menu you will get the following options:



    • Startup Repair
      System Restore
      Windows Complete PC Restore
      Windows Memory Diagnostic Tool
      Command Prompt

    [*]Select Command Prompt

    [*]In the command window type in notepad and press Enter.

    [*]The notepad opens. Under File menu select Open.

    [*]Select "Computer" and find your flash drive letter and close the notepad.

    [*]In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter

    Note: Replace letter e with the drive letter of your flash drive.

    [*]The tool will start to run.

    [*]When the tool opens click Yes to disclaimer.

    [*]Press Scan button.

    [*]FRST will let you know when the scan is complete and has written the FRST.txt to file, close out this message, then type the following into the search box:

    services.exe

    [*]Now press the Search button

    [*]When the search is complete, search.txt will also be written to your USB

    [*]Type exit and reboot the computer normally

    [*]Please copy and paste both logs in your reply.(FRST.txt and Search.txt)

MrC

Link to post
Share on other sites

Had some problems, but it should be fine:

Here's the FRST scan:

Scan result of Farbar Recovery Scan Tool (FRST written by Farbar) Version: 20-07-2012 01

Ran by SYSTEM at 23-07-2012 14:41:39

Running from D:\

Windows Vista Home Premium (X86) OS Language: English(US)

The current controlset is ControlSet001

========================== Registry (Whitelisted) =============

HKLM\...\Run: [RtHDVCpl] RtHDVCpl.exe [x]

HKLM\...\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start [81920 2006-10-03] (Macrovision Corporation)

HKLM\...\Run: [] [x]

HKLM\...\Run: [dscactivate] c:\dell\dsca.exe 3 [16384 2007-07-30] ( )

HKLM\...\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup [221184 2006-10-03] (Macrovision Corporation)

HKLM\...\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-05-30] (Apple Inc.)

HKLM\...\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime [421888 2012-04-18] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" [421776 2012-06-07] (Apple Inc.)

HKLM\...\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [252296 2012-01-17] (Sun Microsystems, Inc.)

HKLM\...\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe [98304 2006-01-30] (Hewlett-Packard)

HKLM\...\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray [462920 2012-07-03] (Malwarebytes Corporation)

HKU\Jon\...\Run: [steam] "C:\Program Files\Steam\steam.exe" -silent [1242448 2012-06-30] (Valve Corporation)

HKU\Jon\...\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized [19550344 2011-10-13] (Skype Technologies S.A.)

HKU\Jon\...\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background [3872080 2010-04-16] (Microsoft Corporation)

HKU\Jon\...\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun [3671872 2012-04-17] (DT Soft Ltd)

Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76

Startup: C:\Users\All Users\Start Menu\Programs\Startup\Content Manager Assistant for PlayStation®.lnk

ShortcutTarget: Content Manager Assistant for PlayStation®.lnk -> C:\Program Files\Sony\Content Manager Assistant\CMA.exe (Sony Computer Entertainment Inc.)

================================ Services (Whitelisted) ==================

2 Eventlog; C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [22016 2006-11-02] (Microsoft Corporation)

2 MBAMService; "C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe" [655944 2012-07-03] (Malwarebytes Corporation)

3 MozillaMaintenance; "C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe" [113120 2012-07-18] (Mozilla Foundation)

2 nvUpdatusService; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [1262400 2012-05-15] (NVIDIA Corporation)

2 Skype C2C Service; "C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe" [3048136 2012-07-05] (Skype Technologies S.A.)

========================== Drivers (Whitelisted) =============

1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2012-07-04] (DT Soft Ltd)

1 eeCtrl; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [387384 2007-08-21] (Symantec Corporation)

3 MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [22344 2012-07-03] (Malwarebytes Corporation)

4 blbdrive; C:\Windows\system32\drivers\blbdrive.sys [x]

3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [x]

3 IpInIp; C:\Windows\System32\DRIVERS\ipinip.sys [x]

3 NwlnkFlt; C:\Windows\System32\DRIVERS\nwlnkflt.sys [x]

3 NwlnkFwd; C:\Windows\System32\DRIVERS\nwlnkfwd.sys [x]

3 XDva398; \??\C:\Windows\system32\XDva398.sys [x]

========================== NetSvcs (Whitelisted) ===========

============ One Month Created Files and Folders ==============

2012-07-23 13:14 - 2012-07-23 13:14 - 00000000 ____D C:\FRST

2012-07-23 13:13 - 2012-07-23 13:13 - 00892164 ____A (Farbar) C:\Users\Jon\Desktop\FRST.exe

2012-07-23 12:54 - 2012-07-23 13:25 - 00000000 ____D C:\Users\Jon\Desktop\Virus help

2012-07-23 10:43 - 2012-07-23 10:43 - 00000000 ____D C:\TDSSKiller_Quarantine

2012-07-21 07:30 - 2012-07-21 07:30 - 00000000 ____D C:\Users\All Users\Trymedia

2012-07-21 07:30 - 2012-07-21 07:30 - 00000000 ____D C:\Users\All Users\GameHouse

2012-07-21 07:29 - 2012-07-21 07:29 - 00000000 ____D C:\Users\All Users\Zylom

2012-07-21 07:29 - 2012-07-21 07:29 - 00000000 ____D C:\Program Files\Zylom Games

2012-07-21 07:28 - 2012-07-23 13:36 - 00000876 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2012-07-21 07:28 - 2012-07-23 12:38 - 00000880 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2012-07-21 07:28 - 2012-07-21 07:39 - 00001973 ____A C:\Users\Public\Desktop\Google Chrome.lnk

2012-07-21 07:27 - 2012-07-21 07:29 - 00000000 ____D C:\GameHouse Games

2012-07-21 07:26 - 2012-07-21 07:26 - 00000000 ____D C:\Program Files\RealArcade

2012-07-18 16:01 - 2012-07-18 16:01 - 00001828 ____A C:\Users\Public\Desktop\DarkBlood Online.lnk

2012-07-18 14:56 - 2012-07-18 15:48 - 1965558630 ____A (Acresso Software Inc.) C:\Users\Jon\Desktop\DarkBloodSetup_120718.exe

2012-07-18 00:08 - 2012-07-18 00:16 - 00000000 ____D C:\Users\Jon\Downloads\[Commie] Kore wa Zombie Desu ka? of the Dead [H264 1280x720] 01-10END

2012-07-17 21:53 - 2012-07-20 11:16 - 00000000 ____D C:\Users\Jon\Desktop\Takeo_Ischi-Import_Hit_Aus_Japan-DE-2003-ALPMP3

2012-07-17 12:34 - 2012-07-17 12:34 - 00000908 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2012-07-17 12:34 - 2012-07-17 12:34 - 00000000 ____D C:\Users\Jon\AppData\Roaming\Malwarebytes

2012-07-17 12:34 - 2012-07-17 12:34 - 00000000 ____D C:\Users\All Users\Malwarebytes

2012-07-17 12:34 - 2012-07-17 12:34 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2012-07-17 12:34 - 2012-07-03 12:46 - 00022344 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys

2012-07-16 15:19 - 2012-07-22 21:26 - 00000499 ____A C:\Users\Jon\Desktop\Steam Summer Sale.txt

2012-07-15 19:12 - 2012-07-15 19:14 - 00000000 ____D C:\Users\Jon\AppData\Roaming\AtomZombieData

2012-07-15 18:49 - 2012-07-15 18:49 - 00444952 ____A (Creative Labs) C:\Windows\System32\wrap_oal.dll

2012-07-15 18:49 - 2012-07-15 18:49 - 00109080 ____A (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\System32\OpenAL32.dll

2012-07-15 18:49 - 2012-07-15 18:49 - 00000000 ____D C:\Program Files\OpenAL

2012-07-15 18:39 - 2012-07-15 18:39 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard

2012-07-15 12:36 - 2012-07-15 12:40 - 00000000 ____D C:\Users\Jon\AppData\Roaming\Mount&Blade

2012-07-14 07:38 - 2012-07-14 07:38 - 00000062 ____A C:\Users\Jon\Desktop\Welcome to Petpet Park.URL

2012-07-08 22:38 - 2012-07-08 22:51 - 00000000 ____D C:\Users\Jon\Desktop\???!?????? ??!??!???2 (In Game OST)

2012-07-07 23:54 - 2012-07-08 00:16 - 00000000 ____D C:\Users\Jon\Documents\PS Vita

2012-07-07 23:54 - 2012-07-07 23:54 - 00000000 ____D C:\Users\Jon\AppData\Roaming\Sony Corporation

2012-07-07 23:54 - 2012-07-07 23:54 - 00000000 ____D C:\Program Files\Sony

2012-07-07 21:57 - 2012-07-07 21:57 - 00000000 ____D C:\Users\Jon\AppData\Roaming\DVDVideoSoftIEHelpers

2012-07-07 21:56 - 2012-07-07 21:56 - 00001034 ____A C:\Users\Jon\Desktop\DVDVideoSoft Free Studio.lnk

2012-07-07 21:55 - 2012-07-07 21:55 - 00000000 ____D C:\Program Files\DVDVideoSoft

2012-07-07 21:55 - 2012-07-07 21:55 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft

2012-07-07 21:55 - 2012-06-22 15:32 - 00405144 ____A (Newtonsoft) C:\Windows\System32\Newtonsoft.Json.Net20.dll

2012-07-07 21:44 - 2012-07-22 07:42 - 00000000 ____D C:\Users\Jon\AppData\Roaming\HandBrake

2012-07-07 21:44 - 2012-07-07 21:44 - 00003649 ____A C:\Users\Jon\Desktop\[absolute.animeblogger.net]vitasettings v1.00.plist

2012-07-07 21:31 - 2012-07-07 21:57 - 00000000 ____D C:\Users\Jon\AppData\Roaming\DVDVideoSoft

2012-07-07 21:30 - 2012-07-07 21:30 - 00000818 ____A C:\Users\UpdatusUser\Desktop\Handbrake.lnk

2012-07-07 21:30 - 2012-07-07 21:30 - 00000818 ____A C:\Users\Jon\Desktop\Handbrake.lnk

2012-07-07 17:46 - 2012-07-08 13:24 - 00000000 ____D C:\Users\Jon\Downloads\Kore wa Zombie desu ka

2012-07-07 15:37 - 2012-07-17 17:58 - 00000000 ____D C:\Users\Jon\Downloads\[HorribleSubs] Kimi to Boku 2nd season 01-13END [720p]

2012-07-06 19:54 - 2012-07-06 19:54 - 00000000 ____D C:\Users\Jon\Documents\The Path

2012-07-06 19:54 - 2012-07-06 19:54 - 00000000 ____D C:\Users\Jon\AppData\Roaming\The Path

2012-07-06 19:41 - 2012-07-06 19:54 - 00000000 ____D C:\Users\Jon\AppData\Roaming\Larva Mortus Demo

2012-07-05 17:14 - 2012-07-05 17:14 - 00000000 ____D C:\Users\Jon\AppData\Roaming\Carbon

2012-07-05 00:22 - 2012-07-05 00:22 - 00000000 ____D C:\Users\Jon\AppData\Roaming\runic games

2012-07-04 21:28 - 2012-07-04 21:37 - 00000000 ____D C:\Users\Jon\AppData\Local\Oblivion

2012-07-04 21:12 - 2012-07-04 21:12 - 00001737 ____A C:\Users\Public\Desktop\DAEMON Tools Lite.lnk

2012-07-04 21:11 - 2012-07-04 21:28 - 00000000 ____D C:\Users\Jon\AppData\Roaming\DAEMON Tools Lite

2012-07-04 21:11 - 2012-07-04 21:11 - 00242240 ____A (DT Soft Ltd) C:\Windows\System32\Drivers\dtsoftbus01.sys

2012-07-04 21:11 - 2012-07-04 21:11 - 00000000 ____D C:\Program Files\DAEMON Tools Lite

2012-07-04 21:09 - 2012-07-04 21:28 - 00000000 ____D C:\Users\All Users\DAEMON Tools Lite

2012-07-04 15:02 - 2012-07-04 15:02 - 00000308 ____A C:\Windows\System32\zhp1018.log

2012-07-04 15:01 - 2012-07-04 15:02 - 00000000 ____D C:\Program Files\Hewlett-Packard

2012-07-04 15:01 - 2012-07-04 15:01 - 00000000 ___HD C:\Program Files\Zenographics

2012-07-04 15:01 - 2006-01-30 08:00 - 00143360 ___RA (Zenographics) C:\Windows\apptune1018.exe

2012-07-04 15:01 - 2006-01-30 08:00 - 00102400 ____A (Zenographics, Inc.) C:\Windows\System32\zlhp1018.dll

2012-07-04 15:01 - 2006-01-30 08:00 - 00086016 ____A (Zenographics, Inc.) C:\Windows\System32\ZSPOOL.DLL

2012-07-04 15:01 - 2006-01-30 08:00 - 00028672 ____A (Zenographics, Inc.) C:\Windows\System32\zlm.dll

2012-07-04 15:01 - 2006-01-30 08:00 - 00028672 ____A (Zenographics, Inc.) C:\Windows\System32\IMF32.DLL

2012-07-04 15:01 - 2006-01-30 08:00 - 00024576 ____A (Zenographics, Inc.) C:\Windows\System32\ZTAG32.DLL

2012-07-04 14:59 - 2006-01-30 08:00 - 00442368 ___RA () C:\Windows\System32\ZSHP1018.EXE

2012-07-04 14:59 - 2006-01-30 08:00 - 00129092 ___RA C:\Windows\System32\hp1018.img

2012-07-04 14:59 - 2006-01-30 08:00 - 00106496 ___RA C:\Windows\System32\VSHP1018.DLL

2012-07-04 14:59 - 2006-01-30 08:00 - 00007280 ___RA C:\Windows\System32\ZSHP1018.HLP

2012-07-03 19:30 - 2012-07-03 19:30 - 00000000 ____D C:\Windows\Sun

2012-07-03 18:22 - 2012-07-03 18:22 - 00000761 ____A C:\Users\Public\Desktop\Play Wizard101.lnk

2012-07-03 18:22 - 2012-07-03 18:22 - 00000000 ____D C:\Users\All Users\KingsIsle Entertainment

2012-07-03 15:01 - 2012-07-03 23:06 - 00000000 ____D C:\Users\Jon\Desktop\Albums

2012-07-03 14:53 - 2012-07-20 22:10 - 00000000 ____D C:\Users\Jon\Desktop\[Album] Hi-Fi CAMP - 1st BEST [090819] - just_wind

2012-07-02 18:45 - 2009-08-24 04:47 - 00378368 ____A (Microsoft Corporation) C:\Windows\System32\winhttp.dll

2012-07-02 18:44 - 2008-04-19 00:13 - 00268800 ____A (Microsoft Corporation) C:\Windows\System32\es.dll

2012-07-02 16:29 - 2012-07-02 16:29 - 00000000 ____D C:\Users\Jon\Documents\Amnesia

2012-07-02 16:29 - 2012-07-02 16:29 - 00000000 ____D C:\Users\Jon\AppData\Roaming\NVIDIA

2012-07-02 16:29 - 2012-07-02 16:29 - 00000000 ____D C:\Users\Jon\AppData\Roaming\fltk.org

2012-07-02 16:29 - 2012-07-02 16:29 - 00000000 ____D C:\Users\All Users\fltk.org

2012-07-02 12:39 - 2012-07-02 12:39 - 00000000 ____D C:\Users\All Users\Nexon

2012-07-02 12:29 - 2012-07-06 15:47 - 00000000 ____D C:\Users\Jon\AppData\Roaming\NeopleLauncherDFO

2012-07-02 12:26 - 2012-07-23 10:47 - 00000000 ____D C:\Users\Jon\AppData\Local\Adobe

2012-07-02 12:05 - 2012-07-04 21:28 - 00000000 ____D C:\Users\Jon\Documents\My Games

2012-07-02 12:04 - 2012-07-02 12:04 - 00000000 ____D C:\Program Files\Microsoft XNA

2012-07-02 12:04 - 2012-07-02 12:04 - 00000000 ____D C:\Program Files\DirectX

2012-07-02 11:59 - 2012-07-02 11:59 - 00000000 ____D C:\Program Files\Microsoft.NET

2012-07-02 11:53 - 2012-07-05 19:45 - 00040359 ____A C:\Windows\DirectX.log

2012-07-01 23:00 - 2012-07-01 23:00 - 00000000 ____D C:\Program Files\SystemRequirementsLab

2012-07-01 22:59 - 2012-07-01 22:59 - 00000000 ____D C:\Users\Jon\AppData\Roaming\SystemRequirementsLab

2012-07-01 22:39 - 2012-07-01 22:39 - 00000000 ____D C:\Users\All Users\Sun

2012-07-01 22:38 - 2012-07-01 22:38 - 00000000 ____D C:\Program Files\Oracle

2012-07-01 22:38 - 2012-05-04 18:29 - 00772504 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll

2012-07-01 22:38 - 2012-05-04 18:29 - 00687504 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll

2012-07-01 22:38 - 2012-05-04 18:29 - 00227720 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe

2012-07-01 22:37 - 2012-07-01 22:37 - 00174064 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe

2012-07-01 22:37 - 2012-07-01 22:37 - 00174064 ____A (Oracle Corporation) C:\Windows\System32\java.exe

2012-07-01 22:18 - 2012-07-01 22:18 - 00297472 ____A (Microsoft Corporation) C:\Windows\System32\gdi32.dll

2012-07-01 22:18 - 2012-07-01 22:18 - 00071680 ____A (Microsoft Corporation) C:\Windows\System32\atl.dll

2012-07-01 22:17 - 2012-07-01 22:17 - 01060920 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys

2012-07-01 22:17 - 2012-07-01 22:17 - 00500736 ____A (Microsoft Corporation) C:\Windows\System32\msdtcprx.dll

2012-07-01 22:17 - 2012-07-01 22:17 - 00041984 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\monitor.sys

2012-07-01 22:17 - 2012-07-01 22:17 - 00030208 ____A (Microsoft Corporation) C:\Windows\System32\xolehlp.dll

2012-07-01 22:16 - 2012-07-01 22:16 - 01871872 ____A (Microsoft Corporation) C:\Windows\System32\mstscax.dll

2012-07-01 22:16 - 2012-07-01 22:16 - 00156160 ____A (Microsoft Corporation) C:\Windows\System32\wkssvc.dll

2012-07-01 22:16 - 2012-07-01 22:16 - 00116736 ____A (Microsoft Corporation) C:\Windows\System32\aaclient.dll

2012-07-01 22:16 - 2012-07-01 22:16 - 00036352 ____A (Microsoft Corporation) C:\Windows\System32\tsgqec.dll

2012-07-01 22:15 - 2012-07-01 22:15 - 00713728 ____A (Microsoft Corporation) C:\Windows\System32\timedate.cpl

2012-07-01 22:15 - 2012-07-01 22:15 - 00303616 ____A (Microsoft Corporation) C:\Windows\System32\wmpeffects.dll

2012-07-01 22:14 - 2012-07-01 22:14 - 00425472 ____A (Microsoft Corporation) C:\Windows\System32\netapi32.dll

2012-07-01 22:14 - 2012-07-01 22:14 - 00356864 ____A (Microsoft Corporation) C:\Windows\System32\MediaMetadataHandler.dll

2012-07-01 22:12 - 2012-07-01 22:12 - 01244672 ____A (Microsoft Corporation) C:\Windows\System32\mcmde.dll

2012-07-01 22:12 - 2012-07-01 22:12 - 00428032 ____A (Microsoft Corporation) C:\Windows\System32\EncDec.dll

2012-07-01 22:12 - 2012-07-01 22:12 - 00292352 ____A (Microsoft Corporation) C:\Windows\System32\psisdecd.dll

2012-07-01 22:12 - 2012-07-01 22:12 - 00217088 ____A (Microsoft Corporation) C:\Windows\System32\psisrndr.ax

2012-07-01 22:12 - 2012-07-01 22:12 - 00177152 ____A (Microsoft Corporation) C:\Windows\System32\mpg2splt.ax

2012-07-01 22:12 - 2012-07-01 22:12 - 00080896 ____A (Microsoft Corporation) C:\Windows\System32\MSNP.ax

2012-07-01 22:12 - 2012-07-01 22:12 - 00068608 ____A (Microsoft Corporation) C:\Windows\System32\Mpeg2Data.ax

2012-07-01 22:12 - 2012-07-01 22:12 - 00057856 ____A (Microsoft Corporation) C:\Windows\System32\MSDvbNP.ax

2012-07-01 22:11 - 2012-07-01 22:11 - 11315712 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll

2012-07-01 22:10 - 2012-07-01 22:10 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll

2012-07-01 22:09 - 2012-07-01 22:09 - 00696832 ____A (Microsoft Corporation) C:\Windows\System32\localspl.dll

2012-07-01 22:08 - 2012-07-01 22:08 - 02923520 ____A (Microsoft Corporation) C:\Windows\explorer.exe

2012-07-01 22:08 - 2012-07-01 22:08 - 00211000 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\volsnap.sys

2012-07-01 22:08 - 2012-07-01 22:08 - 00171520 ____A (Microsoft Corporation) C:\Windows\System32\wintrust.dll

2012-07-01 22:08 - 2012-07-01 22:08 - 00154624 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\nwifi.sys

2012-07-01 22:08 - 2012-07-01 22:08 - 00110136 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ataport.sys

2012-07-01 22:08 - 2012-07-01 22:08 - 00045112 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\pciidex.sys

2012-07-01 22:08 - 2012-07-01 22:08 - 00021560 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\atapi.sys

2012-07-01 22:08 - 2012-07-01 22:08 - 00015928 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\pciide.sys

2012-07-01 22:07 - 2012-07-01 22:07 - 00494592 ____A (Microsoft Corporation) C:\Windows\System32\kerberos.dll

2012-07-01 22:07 - 2012-07-01 22:07 - 00272384 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll

2012-07-01 22:07 - 2012-07-01 22:07 - 00024064 ____A (Microsoft Corporation) C:\Windows\System32\netcfg.exe

2012-07-01 22:06 - 2012-07-01 22:06 - 12240896 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0007.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 11722752 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0001.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 09892864 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons000a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 09845248 ____A (Microsoft Corporation) C:\Windows\System32\NlsData000a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 07964672 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0024.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 07042560 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons081a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 06917120 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0c1a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 06781440 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0019.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 06585856 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons001b.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 06346240 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons001d.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 06237696 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons000c.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 06224896 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0027.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 06014976 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons001a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 05791232 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0026.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 05654528 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons000f.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 05499904 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0022.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 05090816 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0416.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 05071872 ____A (Microsoft Corporation) C:\Windows\System32\NlsModels0011.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 05031936 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0816.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04981248 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0013.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04874240 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0009.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04616192 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0414.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04495360 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0019.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04493312 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0816.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04493312 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0416.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04493312 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0414.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04493312 ____A (Microsoft Corporation) C:\Windows\System32\NlsData001d.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04493312 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0010.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04175872 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0010.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04164096 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0002.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04093440 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons004c.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04045824 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons003e.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03464704 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0013.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03419136 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons004a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03331072 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0018.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData004e.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData004c.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData004b.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData004a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0049.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0047.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0046.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0045.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0039.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0020.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02655232 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0011.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02644480 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0009.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02641408 ____A (Microsoft Corporation) C:\Windows\System32\NlsData000c.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02597888 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0001.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02466816 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0011.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02340864 ____A (Microsoft Corporation) C:\Windows\System32\NlsData000d.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0007.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02136064 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0021.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01972736 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons004e.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01965056 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0027.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0c1a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData081a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0026.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0024.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData001b.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData001a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0018.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData000f.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0003.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0002.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01808896 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0046.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01799168 ____A (Microsoft Corporation) C:\Windows\System32\NlsData003e.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01799168 ____A (Microsoft Corporation) C:\Windows\System32\NlsData002a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01799168 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0022.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01799168 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0021.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01793536 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0045.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01782272 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0039.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01722368 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons000d.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01702912 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons004b.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01558016 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0049.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01523200 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0000.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01452544 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0003.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01411072 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0047.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01236992 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0020.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 00797696 ____A (Microsoft Corporation) C:\Windows\System32\NaturalLanguage6.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 00004096 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons002a.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 01585664 ____A (Microsoft Corporation) C:\Windows\System32\setupapi.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00944184 ____A (Microsoft Corporation) C:\Windows\System32\winload.exe

2012-07-01 22:03 - 2012-07-01 22:03 - 00905400 ____A (Microsoft Corporation) C:\Windows\System32\winresume.exe

2012-07-01 22:03 - 2012-07-01 22:03 - 00620088 ____A (Microsoft Corporation) C:\Windows\System32\ci.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00613888 ____A (Microsoft Corporation) C:\Windows\System32\wpd_ci.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00595456 ____A (Microsoft Corporation) C:\Windows\System32\schedsvc.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00558080 ____A (Microsoft Corporation) C:\Windows\System32\oleaut32.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00495160 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\Wdf01000.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00371712 ____A (Microsoft Corporation) C:\Windows\System32\srcore.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00313856 ____A (Microsoft Corporation) C:\Windows\System32\rstrui.exe

2012-07-01 22:03 - 2012-07-01 22:03 - 00260096 ____A (Microsoft Corporation) C:\Windows\System32\dpx.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00224824 ____A (Microsoft Corporation) C:\Windows\System32\clfs.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00221696 ____A (Microsoft Corporation) C:\Windows\System32\umpnpmgr.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00115200 ____A (Microsoft Corporation) C:\Windows\System32\loadperf.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00101888 ____A (Microsoft Corporation) C:\Windows\System32\drvinst.exe

2012-07-01 22:03 - 2012-07-01 22:03 - 00054784 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\i8042prt.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00040960 ____A (Microsoft Corporation) C:\Windows\System32\srclient.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00039424 ____A (Microsoft Corporation) C:\Windows\System32\lodctr.exe

2012-07-01 22:03 - 2012-07-01 22:03 - 00035384 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\WdfLdr.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00035384 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\kbdclass.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00035328 ____A (Microsoft Corporation) C:\Windows\System32\dispci.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00034360 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mouclass.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00032256 ____A (Microsoft Corporation) C:\Windows\System32\unlodctr.exe

2012-07-01 22:03 - 2012-07-01 22:03 - 00019968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\sermouse.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00019456 ____A (Microsoft Corporation) C:\Windows\System32\cfgmgr32.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00019000 ____A (Microsoft Corporation) C:\Windows\System32\kd1394.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00017408 ____A (Microsoft Corporation) C:\Windows\System32\prflbmsg.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00016384 ____A (Microsoft Corporation) C:\Windows\System32\srdelayed.exe

2012-07-01 22:03 - 2012-07-01 22:03 - 00015872 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mouhid.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00015872 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\kbdhid.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\batt.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00007168 ____A (Microsoft Corporation) C:\Windows\System32\f3ahvoas.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00006656 ____A (Microsoft Corporation) C:\Windows\System32\kbd106n.dll

2012-07-01 22:01 - 2012-07-01 22:01 - 00654336 ____A (Microsoft Corporation) C:\Windows\System32\printfilterpipelinesvc.exe

2012-07-01 22:01 - 2012-07-01 22:01 - 00549888 ____A (Microsoft Corporation) C:\Windows\System32\rpcss.dll

2012-07-01 22:01 - 2012-07-01 22:01 - 00512000 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll

2012-07-01 22:01 - 2012-07-01 22:01 - 00220672 ____A (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codecp.acm

2012-07-01 22:01 - 2012-07-01 22:01 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\sdohlp.dll

2012-07-01 22:01 - 2012-07-01 22:01 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\iasrecst.dll

2012-07-01 22:01 - 2012-07-01 22:01 - 00062464 ____A (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm

2012-07-01 22:01 - 2012-07-01 22:01 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\iasads.dll

2012-07-01 22:01 - 2012-07-01 22:01 - 00037888 ____A (Microsoft Corporation) C:\Windows\System32\iasdatastore.dll

2012-07-01 22:01 - 2012-07-01 22:01 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\printfilterpipelineprxy.dll

2012-07-01 22:00 - 2012-07-01 22:00 - 00815104 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys

2012-07-01 22:00 - 2012-07-01 22:00 - 00179712 ____A (Microsoft Corporation) C:\Windows\System32\iphlpsvc.dll

2012-07-01 22:00 - 2012-07-01 22:00 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\tcpipcfg.dll

2012-07-01 22:00 - 2012-07-01 22:00 - 00025088 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tunnel.sys

2012-07-01 22:00 - 2012-07-01 22:00 - 00022016 ____A (Microsoft Corporation) C:\Windows\System32\netiougc.exe

2012-07-01 22:00 - 2012-07-01 22:00 - 00015360 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\TUNMP.SYS

2012-07-01 21:59 - 2012-07-01 21:59 - 00875520 ____A (Microsoft Corporation) C:\Windows\System32\kernel32.dll

2012-07-01 21:59 - 2012-07-01 21:59 - 00712192 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll

2012-07-01 21:59 - 2012-07-01 21:59 - 00425472 ____A (Microsoft Corporation) C:\Windows\System32\PhotoMetadataHandler.dll

2012-07-01 21:59 - 2012-07-01 21:59 - 00347136 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll

2012-07-01 21:59 - 2012-07-01 21:59 - 00223232 ____A (Microsoft Corporation) C:\Windows\System32\WMASF.DLL

2012-07-01 21:59 - 2012-07-01 21:59 - 00025600 ____A (Microsoft Corporation) C:\Windows\System32\amxread.dll

2012-07-01 21:59 - 2012-07-01 21:59 - 00014848 ____A (Microsoft Corporation) C:\Windows\System32\apilogen.dll

2012-07-01 21:59 - 2012-07-01 21:59 - 00009728 ____A (Microsoft Corporation) C:\Windows\System32\LAPRXY.DLL

2012-07-01 21:59 - 2012-07-01 21:59 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\asferror.dll

2012-07-01 21:58 - 2012-07-01 21:58 - 00097792 ____A (Microsoft Corporation) C:\Windows\System32\cabview.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 08138240 ____A (Microsoft Corporation) C:\Windows\System32\ssBranded.scr

2012-07-01 21:56 - 2012-07-01 21:56 - 01984512 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 00220160 ____A (Microsoft Corporation) C:\Windows\System32\ntprint.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 00204800 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcsvc.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 00120320 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcsvc6.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 00069632 ____A (Microsoft Corporation) C:\Windows\System32\sendmail.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 00061440 ____A (Microsoft Corporation) C:\Windows\System32\ntprint.exe

2012-07-01 21:56 - 2012-07-01 21:56 - 00037376 ____A (Microsoft Corporation) C:\Windows\System32\printcom.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 00010240 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcmonitor.dll

2012-07-01 21:55 - 2012-07-01 21:55 - 02031104 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys

2012-07-01 21:55 - 2012-07-01 21:55 - 00313344 ____A (Microsoft Corporation) C:\Windows\System32\wmpdxm.dll

2012-07-01 21:55 - 2012-07-01 21:55 - 00113664 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rmcast.sys

2012-07-01 21:55 - 2012-07-01 21:55 - 00043520 ____A (Microsoft Corporation) C:\Windows\System32\msdxm.tlb

2012-07-01 21:55 - 2012-07-01 21:55 - 00018432 ____A (Microsoft Corporation) C:\Windows\System32\amcompat.tlb

2012-07-01 21:55 - 2012-07-01 21:55 - 00014848 ____A (Microsoft Corporation) C:\Windows\System32\wshrm.dll

2012-07-01 21:54 - 2012-07-01 21:54 - 00523776 ____A (Microsoft Corporation) C:\Windows\System32\RMActivate_isv.exe

2012-07-01 21:54 - 2012-07-01 21:54 - 00515584 ____A (Microsoft Corporation) C:\Windows\System32\RMActivate.exe

2012-07-01 21:54 - 2012-07-01 21:54 - 00473088 ____A (Microsoft Corporation) C:\Windows\System32\secproc_isv.dll

2012-07-01 21:54 - 2012-07-01 21:54 - 00472576 ____A (Microsoft Corporation) C:\Windows\System32\secproc.dll

2012-07-01 21:54 - 2012-07-01 21:54 - 00435712 ____A (Microsoft Corporation) C:\Windows\System32\RMActivate_ssp.exe

2012-07-01 21:54 - 2012-07-01 21:54 - 00431104 ____A (Microsoft Corporation) C:\Windows\System32\RMActivate_ssp_isv.exe

2012-07-01 21:54 - 2012-07-01 21:54 - 00312320 ____A (Microsoft Corporation) C:\Windows\System32\msdrm.dll

2012-07-01 21:54 - 2012-07-01 21:54 - 00154624 ____A (Microsoft Corporation) C:\Windows\System32\secproc_ssp_isv.dll

2012-07-01 21:54 - 2012-07-01 21:54 - 00154112 ____A (Microsoft Corporation) C:\Windows\System32\secproc_ssp.dll

2012-07-01 21:54 - 2012-07-01 21:54 - 00011776 ____A (Microsoft Corporation) C:\Windows\System32\sbunattend.exe

2012-07-01 21:53 - 2012-07-01 21:53 - 00162816 ____A (Microsoft Corporation) C:\Windows\System32\dnsapi.dll

2012-07-01 21:53 - 2012-07-01 21:53 - 00083968 ____A (Microsoft Corporation) C:\Windows\System32\dnsrslvr.dll

2012-07-01 21:53 - 2012-07-01 21:53 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\dnscacheugc.exe

2012-07-01 21:49 - 2012-07-01 21:49 - 00781344 ____A (Microsoft Corporation) C:\Windows\System32\PresentationNative_v0300.dll

2012-07-01 21:49 - 2012-07-01 21:49 - 00622080 ____A (Microsoft Corporation) C:\Windows\System32\icardagt.exe

2012-07-01 21:49 - 2012-07-01 21:49 - 00105016 ____A (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll

2012-07-01 21:49 - 2012-07-01 21:49 - 00097800 ____A (Microsoft Corporation) C:\Windows\System32\infocardapi.dll

2012-07-01 21:49 - 2012-07-01 21:49 - 00037384 ____A (Microsoft Corporation) C:\Windows\System32\infocardcpl.cpl

2012-07-01 21:49 - 2012-07-01 21:49 - 00011264 ____A (Microsoft Corporation) C:\Windows\System32\icardres.dll

2012-07-01 21:22 - 2008-10-15 05:22 - 04379984 ____A (Microsoft Corporation) C:\Windows\System32\D3DX9_40.dll

2012-07-01 21:22 - 2008-10-15 05:22 - 02036576 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_40.dll

2012-07-01 21:22 - 2008-10-15 05:22 - 00452440 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_40.dll

2012-07-01 08:47 - 2012-07-01 08:47 - 00289792 ____A (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll

2012-07-01 08:47 - 2012-07-01 08:47 - 00156672 ____A (Microsoft Corporation) C:\Windows\System32\t2embed.dll

2012-07-01 08:47 - 2012-07-01 08:47 - 00072704 ____A (Microsoft Corporation) C:\Windows\System32\fontsub.dll

2012-07-01 08:47 - 2012-07-01 08:47 - 00034304 ____A (Adobe Systems) C:\Windows\System32\atmlib.dll

2012-07-01 08:47 - 2012-07-01 08:47 - 00024064 ____A (Microsoft Corporation) C:\Windows\System32\lpk.dll

2012-07-01 08:47 - 2012-07-01 08:47 - 00010240 ____A (Microsoft Corporation) C:\Windows\System32\dciman32.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 06067200 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 03599360 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 02452872 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat

2012-07-01 08:46 - 2012-07-01 08:46 - 01830912 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl

2012-07-01 08:46 - 2012-07-01 08:46 - 01383424 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2012-07-01 08:46 - 2012-07-01 08:46 - 01168384 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00832512 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00671232 ____A (Microsoft Corporation) C:\Windows\System32\mstime.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00477696 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00459264 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00389120 ____A (Microsoft Corporation) C:\Windows\System32\html.iec

2012-07-01 08:46 - 2012-07-01 08:46 - 00385024 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00380928 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00347136 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00268288 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\ieaksie.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00214528 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00180736 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00161792 ____A (Microsoft Corporation) C:\Windows\System32\ieakui.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00124928 ____A (Microsoft Corporation) C:\Windows\System32\advpack.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00078336 ____A (Microsoft Corporation) C:\Windows\System32\ieencode.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00072704 ____A (Microsoft Corporation) C:\Windows\System32\admparse.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00070656 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe

2012-07-01 08:46 - 2012-07-01 08:46 - 00063488 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00056320 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00048128 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00044544 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00044544 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00026624 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe

2012-07-01 08:44 - 2012-07-01 08:44 - 00619008 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys

2012-07-01 08:44 - 2012-07-01 08:44 - 00564736 ____A (Microsoft Corporation) C:\Windows\System32\msftedit.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00467456 ____A (Microsoft Corporation) C:\Windows\System32\riched20.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00384000 ____A (Microsoft Corporation) C:\Windows\System32\netcfgx.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00361984 ____A (Microsoft Corporation) C:\Windows\System32\IPSECSVC.DLL

2012-07-01 08:44 - 2012-07-01 08:44 - 00286208 ____A (Microsoft Corporation) C:\Windows\System32\ipnathlp.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00272896 ____A (Microsoft Corporation) C:\Windows\System32\polstore.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00134656 ____A (Microsoft Corporation) C:\Windows\System32\dps.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00077824 ____A (Microsoft Corporation) C:\Windows\System32\rascfg.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\pacer.sys

2012-07-01 08:44 - 2012-07-01 08:44 - 00061952 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\wanarp.sys

2012-07-01 08:44 - 2012-07-01 08:44 - 00061440 ____A (Microsoft Corporation) C:\Windows\System32\winipsec.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00052736 ____A (Microsoft Corporation) C:\Windows\System32\rasdiag.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00049664 ____A (Microsoft Corporation) C:\Windows\System32\ndptsp.tsp

2012-07-01 08:44 - 2012-07-01 08:44 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ndproxy.sys

2012-07-01 08:44 - 2012-07-01 08:44 - 00038400 ____A (Microsoft Corporation) C:\Windows\System32\kmddsp.tsp

2012-07-01 08:44 - 2012-07-01 08:44 - 00036864 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00033280 ____A (Microsoft Corporation) C:\Windows\System32\traffic.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00032768 ____A (Microsoft Corporation) C:\Windows\System32\rasmxs.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00028672 ____A (Microsoft Corporation) C:\Windows\System32\FwRemoteSvr.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00022016 ____A (Microsoft Corporation) C:\Windows\System32\rasser.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00020480 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ndistapi.sys

2012-07-01 08:44 - 2012-07-01 08:44 - 00015360 ____A (Microsoft Corporation) C:\Windows\System32\pacerprf.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\wshqos.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\icsunattend.exe

2012-07-01 08:44 - 2012-07-01 08:44 - 00008192 ____A (Microsoft Corporation) C:\Windows\System32\riched32.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00001820 ____A C:\Windows\System32\rasctrnm.h

2012-07-01 08:43 - 2012-07-01 08:43 - 00306688 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srv.sys

2012-07-01 08:43 - 2012-07-01 08:43 - 00241152 ____A (Microsoft Corporation) C:\Windows\System32\PortableDeviceApi.dll

2012-07-01 08:43 - 2012-07-01 08:43 - 00160768 ____A (Microsoft Corporation) C:\Windows\System32\PortableDeviceTypes.dll

2012-07-01 08:43 - 2012-07-01 08:43 - 00095232 ____A (Microsoft Corporation) C:\Windows\System32\PortableDeviceClassExtension.dll

2012-07-01 08:43 - 2012-07-01 08:43 - 00084992 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srvnet.sys

2012-07-01 08:42 - 2012-07-01 08:42 - 00213592 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys

2012-07-01 08:42 - 2012-07-01 08:42 - 00103936 ____A (Microsoft Corporation) C:\Windows\System32\netiohlp.dll

2012-07-01 08:42 - 2012-07-01 08:42 - 00027136 ____A (Microsoft Corporation) C:\Windows\System32\NETSTAT.EXE

2012-07-01 08:42 - 2012-07-01 08:42 - 00019968 ____A (Microsoft Corporation) C:\Windows\System32\ARP.EXE

2012-07-01 08:42 - 2012-07-01 08:42 - 00017920 ____A (Microsoft Corporation) C:\Windows\System32\ROUTE.EXE

2012-07-01 08:42 - 2012-07-01 08:42 - 00015360 ____A (Microsoft Corporation) C:\Windows\System32\netevent.dll

2012-07-01 08:42 - 2012-07-01 08:42 - 00011264 ____A (Microsoft Corporation) C:\Windows\System32\MRINFO.EXE

2012-07-01 08:42 - 2012-07-01 08:42 - 00010240 ____A (Microsoft Corporation) C:\Windows\System32\finger.exe

2012-07-01 08:42 - 2012-07-01 08:42 - 00009728 ____A (Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE

2012-07-01 08:42 - 2012-07-01 08:42 - 00008704 ____A (Microsoft Corporation) C:\Windows\System32\HOSTNAME.EXE

2012-07-01 08:41 - 2012-07-01 08:41 - 00704000 ____A (Microsoft Corporation) C:\Windows\System32\PhotoScreensaver.scr

2012-07-01 08:41 - 2012-07-01 08:41 - 00542720 ____A (Microsoft Corporation) C:\Windows\System32\sysmain.dll

2012-07-01 08:41 - 2012-07-01 08:41 - 00258232 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\acpi.sys

2012-07-01 08:41 - 2012-07-01 08:41 - 00024064 ____A (Microsoft Corporation) C:\Windows\System32\wtsapi32.dll

2012-07-01 08:40 - 2012-07-01 08:40 - 01657350 ____A C:\Windows\System32\wlan.tmf

2012-07-01 08:40 - 2012-07-01 08:40 - 00502272 ____A (Microsoft Corporation) C:\Windows\System32\wlansvc.dll

2012-07-01 08:40 - 2012-07-01 08:40 - 00297984 ____A (Microsoft Corporation) C:\Windows\System32\wlansec.dll

2012-07-01 08:40 - 2012-07-01 08:40 - 00290816 ____A (Microsoft Corporation) C:\Windows\System32\wlanmsm.dll

2012-07-01 08:40 - 2012-07-01 08:40 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\WebClnt.dll

2012-07-01 08:40 - 2012-07-01 08:40 - 00123904 ____A (Microsoft Corporation) C:\Windows\System32\L2SecHC.dll

2012-07-01 08:40 - 2012-07-01 08:40 - 00110080 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys

2012-07-01 08:40 - 2012-07-01 08:40 - 00067584 ____A (Microsoft Corporation) C:\Windows\System32\wlanhlp.dll

2012-07-01 08:40 - 2012-07-01 08:40 - 00047104 ____A (Microsoft Corporation) C:\Windows\System32\wlanapi.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 01406464 ____A (Microsoft Corporation) C:\Windows\System32\msxml6.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 01260032 ____A (Microsoft Corporation) C:\Windows\System32\msxml3.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 01233920 ____A (Microsoft Corporation) C:\Windows\System32\lsasrv.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 00408136 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys

2012-07-01 08:39 - 2012-07-01 08:39 - 00216576 ____A (Microsoft Corporation) C:\Windows\System32\msv1_0.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 00175104 ____A (Microsoft Corporation) C:\Windows\System32\wdigest.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 00072704 ____A (Microsoft Corporation) C:\Windows\System32\secur32.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 00007680 ____A (Microsoft Corporation) C:\Windows\System32\lsass.exe

2012-07-01 08:39 - 2012-07-01 08:39 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\msxml6r.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\msxml3r.dll

2012-07-01 08:38 - 2012-07-01 08:38 - 00211968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys

2012-07-01 08:38 - 2012-07-01 08:38 - 00102400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys

2012-07-01 08:38 - 2012-07-01 08:38 - 00058368 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys

2012-07-01 08:37 - 2012-07-01 08:37 - 03502480 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe

2012-07-01 08:37 - 2012-07-01 08:37 - 03468168 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe

2012-07-01 08:37 - 2012-07-01 08:37 - 02855424 ____A (Microsoft Corporation) C:\Windows\System32\mf.dll

2012-07-01 08:37 - 2012-07-01 08:37 - 02433536 ____A (Microsoft Corporation) C:\Windows\System32\WMVCORE.DLL

2012-07-01 08:37 - 2012-07-01 08:37 - 00098816 ____A (Microsoft Corporation) C:\Windows\System32\mfps.dll

2012-07-01 08:37 - 2012-07-01 08:37 - 00052736 ____A (Microsoft Corporation) C:\Windows\System32\rrinstaller.exe

2012-07-01 08:37 - 2012-07-01 08:37 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\mfpmp.exe

2012-07-01 08:37 - 2012-07-01 08:37 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\mferror.dll

2012-07-01 08:36 - 2012-07-01 08:36 - 00434176 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll

2012-07-01 08:09 - 2012-07-01 21:43 - 28835840 ____A C:\Windows\ocsetup_install_NetFx3.etl

2012-07-01 08:09 - 2012-07-01 21:43 - 00327680 ____A C:\Windows\ocsetup_cbs_install_NetFx3.perf

2012-07-01 08:09 - 2012-07-01 21:43 - 00065536 ____A C:\Windows\ocsetup_cbs_install_NetFx3.dpx

2012-07-01 08:07 - 2012-07-01 08:07 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\mscorier.dll

2012-07-01 08:07 - 2012-07-01 08:07 - 00083968 ____A (Microsoft Corporation) C:\Windows\System32\mscories.dll

2012-07-01 07:57 - 2012-07-01 07:57 - 04247552 ____A (Microsoft) C:\Windows\System32\GameUXLegacyGDFs.dll

2012-07-01 07:57 - 2012-07-01 07:57 - 01686528 ____A (Microsoft Corporation) C:\Windows\System32\gameux.dll

2012-07-01 07:57 - 2012-07-01 07:57 - 00028672 ____A (Microsoft Corporation) C:\Windows\System32\Apphlpdm.dll

2012-07-01 07:56 - 2012-07-01 07:56 - 00996352 ____A (Microsoft Corporation) C:\Windows\System32\WMNetMgr.dll

2012-07-01 07:56 - 2012-07-01 07:56 - 00737792 ____A (Microsoft Corporation) C:\Windows\System32\inetcomm.dll

2012-07-01 07:56 - 2012-07-01 07:56 - 00094720 ____A (Microsoft Corporation) C:\Windows\System32\logagent.exe

2012-07-01 07:56 - 2012-07-01 07:56 - 00084480 ____A (Microsoft Corporation) C:\Windows\System32\INETRES.dll

2012-07-01 07:56 - 2012-07-01 07:56 - 00060928 ____A (Microsoft Corporation) C:\Windows\System32\msasn1.dll

2012-07-01 07:55 - 2012-07-01 07:55 - 01645568 ____A (Microsoft Corporation) C:\Windows\System32\connect.dll

2012-07-01 07:55 - 2012-07-01 07:55 - 00788992 ____A (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll

2012-07-01 07:55 - 2012-07-01 07:55 - 00396800 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\http.sys

2012-07-01 07:55 - 2012-07-01 07:55 - 00031232 ____A (Microsoft Corporation) C:\Windows\System32\httpapi.dll

2012-07-01 07:55 - 2012-07-01 07:55 - 00024064 ____A (Microsoft Corporation) C:\Windows\System32\nshhttp.dll

2012-07-01 07:54 - 2012-07-01 07:54 - 00130048 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srv2.sys

2012-07-01 07:53 - 2012-07-01 07:53 - 00321536 ____A (Microsoft Corporation) C:\Windows\System32\WSDApi.dll

2012-07-01 07:53 - 2012-07-01 07:53 - 00281316 ____A C:\Windows\msxml4-KB954430-enu.LOG

2012-07-01 07:53 - 2012-07-01 07:53 - 00274432 ____A (Microsoft Corporation) C:\Windows\System32\raschap.dll

2012-07-01 07:53 - 2012-07-01 07:53 - 00232960 ____A (Microsoft Corporation) C:\Windows\System32\rastls.dll

2012-07-01 07:52 - 2012-07-01 07:53 - 00288576 ____A C:\Windows\msxml4-KB973688-enu.LOG

2012-07-01 07:52 - 2012-07-01 07:52 - 00000000 ____D C:\Program Files\MSXML 4.0

2012-07-01 07:51 - 2012-07-01 07:51 - 10622464 ____A (Microsoft Corporation) C:\Windows\System32\wmp.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 08147968 ____A (Microsoft Corporation) C:\Windows\System32\wmploc.DLL

2012-07-01 07:51 - 2012-07-01 07:51 - 01327616 ____A (Microsoft Corporation) C:\Windows\System32\quartz.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00750080 ____A (Microsoft Corporation) C:\Windows\System32\qmgr.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00604672 ____A (Microsoft Corporation) C:\Windows\System32\WMSPDMOD.DLL

2012-07-01 07:51 - 2012-07-01 07:51 - 00311296 ____A (Microsoft Corporation) C:\Windows\System32\unregmp2.exe

2012-07-01 07:51 - 2012-07-01 07:51 - 00123904 ____A (Microsoft Corporation) C:\Windows\System32\msvfw32.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00088576 ____A (Microsoft Corporation) C:\Windows\System32\avifil32.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00082944 ____A (Microsoft Corporation) C:\Windows\System32\mciavi32.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\avicap32.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00050176 ____A (Microsoft Corporation) C:\Windows\System32\iyuv_32.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00031232 ____A (Microsoft Corporation) C:\Windows\System32\msvidc32.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00022528 ____A (Microsoft Corporation) C:\Windows\System32\msyuv.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00013312 ____A (Microsoft Corporation) C:\Windows\System32\msrle32.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00011776 ____A (Microsoft Corporation) C:\Windows\System32\tsbyuv.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00007680 ____A (Microsoft Corporation) C:\Windows\System32\spwmp.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00004096 ____A (Microsoft Corporation) C:\Windows\System32\msdxm.ocx

2012-07-01 07:51 - 2012-07-01 07:51 - 00004096 ____A (Microsoft Corporation) C:\Windows\System32\dxmasf.dll

2012-06-30 17:21 - 2012-02-23 09:18 - 00237072 ____N (Microsoft Corporation) C:\Windows\System32\MpSigStub.exe

2012-06-30 17:12 - 2012-06-30 18:52 - 00000000 ____D C:\Users\Jon\AppData\Roaming\DarkBlood ServiceNa

2012-06-30 16:23 - 2012-06-30 16:23 - 00000000 ____D C:\Program Files\Outspark

2012-06-30 15:46 - 2012-06-30 15:46 - 00001666 ____A C:\Users\Public\Desktop\iTunes.lnk

2012-06-30 15:45 - 2012-06-30 15:46 - 00000000 ____D C:\Program Files\iTunes

2012-06-30 15:45 - 2012-06-30 15:45 - 00000000 ____D C:\Program Files\iPod

2012-06-30 15:41 - 2012-06-30 15:41 - 00000000 ____D C:\Program Files\Bonjour

2012-06-30 15:34 - 2012-06-30 15:34 - 00001728 ____A C:\Users\Public\Desktop\QuickTime Player.lnk

2012-06-30 15:33 - 2012-06-30 15:34 - 00000000 ____D C:\Program Files\QuickTime

2012-06-30 15:25 - 2012-06-30 17:06 - 00000000 ____D C:\Users\Jon\AppData\Roaming\Apple Computer

2012-06-30 15:25 - 2012-06-30 15:25 - 00000000 ____D C:\Users\Jon\AppData\Local\Apple Computer

2012-06-30 15:24 - 2012-06-30 15:24 - 00000000 ____D C:\Users\All Users\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

2012-06-30 15:24 - 2009-05-18 12:17 - 00026600 ____A (GEAR Software Inc.) C:\Windows\System32\Drivers\GEARAspiWDM.sys

2012-06-30 15:24 - 2008-04-17 11:12 - 00107368 ____A (GEAR Software Inc.) C:\Windows\System32\GEARAspi.dll

2012-06-30 15:22 - 2012-06-30 15:45 - 00000000 ____D C:\Users\All Users\Apple Computer

2012-06-30 15:22 - 2012-06-30 15:22 - 00000000 ____D C:\Users\Jon\AppData\Local\Apple

2012-06-30 15:22 - 2012-06-30 15:22 - 00000000 ____D C:\Program Files\Apple Software Update

2012-06-30 15:19 - 2012-06-30 15:45 - 00000000 ____D C:\Program Files\Common Files\Apple

2012-06-30 15:19 - 2012-06-30 15:43 - 00000000 ____D C:\Users\All Users\Apple

2012-06-30 15:18 - 2012-07-07 21:30 - 00000000 ____D C:\Program Files\Handbrake

2012-06-30 15:05 - 2012-06-30 15:05 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini

2012-06-30 15:05 - 2012-06-30 15:05 - 00000000 ____D C:\Users\All Users\NVIDIA

2012-06-30 15:04 - 2012-05-15 01:28 - 00645440 ____A (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

2012-06-30 15:04 - 2012-05-15 01:28 - 00062272 ____A (NVIDIA Corporation) C:\Windows\System32\nvshext.dll

2012-06-30 15:03 - 2012-05-15 02:26 - 00061248 ____A (Khronos Group) C:\Windows\System32\OpenCL.dll

2012-06-30 15:02 - 2012-06-30 15:02 - 00000000 ____D C:\Users\All Users\NVIDIA Corporation

2012-06-30 15:00 - 2012-05-15 02:26 - 19607872 ____A (NVIDIA Corporation) C:\Windows\System32\nvoglv32.dll

2012-06-30 15:00 - 2010-06-02 03:55 - 00527192 ____A (Microsoft Corporation) C:\Windows\System32\XAudio2_7.dll

2012-06-30 15:00 - 2010-06-02 03:55 - 00239960 ____A (Microsoft Corporation) C:\Windows\System32\xactengine3_7.dll

2012-06-30 15:00 - 2010-06-02 03:55 - 00074072 ____A (Microsoft Corporation) C:\Windows\System32\XAPOFX1_5.dll

2012-06-30 15:00 - 2010-05-26 10:41 - 02106216 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_43.dll

2012-06-30 15:00 - 2010-05-26 10:41 - 01998168 ____A (Microsoft Corporation) C:\Windows\System32\D3DX9_43.dll

2012-06-30 15:00 - 2010-05-26 10:41 - 01868128 ____A (Microsoft Corporation) C:\Windows\System32\d3dcsx_43.dll

2012-06-30 15:00 - 2010-05-26 10:41 - 00470880 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_43.dll

2012-06-30 15:00 - 2010-05-26 10:41 - 00248672 ____A (Microsoft Corporation) C:\Windows\System32\d3dx11_43.dll

2012-06-30 15:00 - 2010-02-04 09:01 - 00528216 ____A (Microsoft Corporation) C:\Windows\System32\XAudio2_6.dll

2012-06-30 15:00 - 2010-02-04 09:01 - 00238936 ____A (Microsoft Corporation) C:\Windows\System32\xactengine3_6.dll

2012-06-30 15:00 - 2010-02-04 09:01 - 00074072 ____A (Microsoft Corporation) C:\Windows\System32\XAPOFX1_4.dll

2012-06-30 15:00 - 2010-02-04 09:01 - 00022360 ____A (Microsoft Corporation) C:\Windows\System32\X3DAudio1_7.dll

2012-06-30 15:00 - 2009-09-04 16:44 - 00515416 ____A (Microsoft Corporation) C:\Windows\System32\XAudio2_5.dll

2012-06-30 15:00 - 2009-09-04 16:44 - 00238936 ____A (Microsoft Corporation) C:\Windows\System32\xactengine3_5.dll

2012-06-30 14:59 - 2012-05-15 02:26 - 17551680 ____A (NVIDIA Corporation) C:\Windows\System32\nvcompiler.dll

2012-06-30 14:59 - 2012-05-15 02:26 - 11354944 ____A (NVIDIA Corporation) C:\Windows\System32\Drivers\nvlddmkm.sys

2012-06-30 14:59 - 2012-05-15 02:26 - 05982528 ____A (NVIDIA Corporation) C:\Windows\System32\nvcuda.dll

2012-06-30 14:59 - 2012-05-15 02:26 - 02524992 ____A (NVIDIA Corporation) C:\Windows\System32\nvcuvid.dll

2012-06-30 14:59 - 2012-05-15 02:26 - 02445120 ____A (NVIDIA Corporation) C:\Windows\System32\nvcuvenc.dll

2012-06-30 14:59 - 2012-05-15 02:26 - 01000768 ____A (NVIDIA Corporation) C:\Windows\System32\nvdispco32.dll

2012-06-30 14:59 - 2012-05-15 02:26 - 00883008 ____A (NVIDIA Corporation) C:\Windows\System32\nvgenco32.dll

2012-06-30 14:59 - 2012-05-15 02:26 - 00011190 ____A C:\Windows\System32\nvinfo.pb

2012-06-30 14:59 - 2009-09-04 16:44 - 00069464 ____A (Microsoft Corporation) C:\Windows\System32\XAPOFX1_3.dll

2012-06-30 14:59 - 2009-09-04 16:29 - 05501792 ____A (Microsoft Corporation) C:\Windows\System32\d3dcsx_42.dll

2012-06-30 14:59 - 2009-09-04 16:29 - 01974616 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_42.dll

2012-06-30 14:59 - 2009-09-04 16:29 - 01892184 ____A (Microsoft Corporation) C:\Windows\System32\D3DX9_42.dll

2012-06-30 14:59 - 2009-09-04 16:29 - 00453456 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_42.dll

2012-06-30 14:59 - 2009-09-04 16:29 - 00235344 ____A (Microsoft Corporation) C:\Windows\System32\d3dx11_42.dll

2012-06-30 14:59 - 2009-03-16 13:18 - 00517448 ____A (Microsoft Corporation) C:\Windows\System32\XAudio2_4.dll

2012-06-30 14:59 - 2009-03-16 13:18 - 00235352 ____A (Microsoft Corporation) C:\Windows\System32\xactengine3_4.dll

2012-06-30 14:59 - 2009-03-16 13:18 - 00022360 ____A (Microsoft Corporation) C:\Windows\System32\X3DAudio1_6.dll

2012-06-30 14:59 - 2009-03-09 14:27 - 04178264 ____A (Microsoft Corporation) C:\Windows\System32\D3DX9_41.dll

2012-06-30 14:59 - 2009-03-09 14:27 - 01846632 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_41.dll

2012-06-30 14:59 - 2009-03-09 14:27 - 00453456 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_41.dll

2012-06-30 14:59 - 2008-10-27 09:04 - 00514384 ____A (Microsoft Corporation) C:\Windows\System32\XAudio2_3.dll

2012-06-30 14:59 - 2008-10-27 09:04 - 00235856 ____A (Microsoft Corporation) C:\Windows\System32\xactengine3_3.dll

2012-06-30 14:59 - 2008-10-27 09:04 - 00070992 ____A (Microsoft Corporation) C:\Windows\System32\XAPOFX1_2.dll

2012-06-30 14:59 - 2008-10-27 09:04 - 00023376 ____A (Microsoft Corporation) C:\Windows\System32\X3DAudio1_5.dll

2012-06-30 14:59 - 2008-07-31 09:41 - 00238088 ____A (Microsoft Corporation) C:\Windows\System32\xactengine3_2.dll

2012-06-30 14:59 - 2008-07-31 09:41 - 00068616 ____A (Microsoft Corporation) C:\Windows\System32\XAPOFX1_1.dll

2012-06-30 14:59 - 2008-07-31 09:40 - 00509448 ____A (Microsoft Corporation) C:\Windows\System32\XAudio2_2.dll

2012-06-30 14:59 - 2008-07-10 10:01 - 00467984 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_39.dll

2012-06-30 14:59 - 2008-07-10 10:00 - 03851784 ____A (Microsoft Corporation) C:\Windows\System32\D3DX9_39.dll

2012-06-30 14:59 - 2008-07-10 10:00 - 01493528 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_39.dll

2012-06-30 14:50 - 2008-05-30 13:19 - 00507400 ____A (Microsoft Corporation) C:\Windows\System32\XAudio2_1.dll

2012-06-30 14:50 - 2008-05-30 13:18 - 00238088 ____A (Microsoft Corporation) C:\Windows\System32\xactengine3_1.dll

2012-06-30 14:50 - 2008-05-30 13:17 - 00065032 ____A C:\Windows\System32\XAPOFX1_0.dll

2012-06-30 14:50 - 2008-05-30 13:17 - 00025608 ____A C:\Windows\System32\X3DAudio1_4.dll

2012-06-30 14:50 - 2008-05-30 13:11 - 03850760 ____A (Microsoft Corporation) C:\Windows\System32\D3DX9_38.dll

2012-06-30 14:50 - 2008-05-30 13:11 - 01491992 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_38.dll

2012-06-30 14:50 - 2008-05-30 13:11 - 00467984 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_38.dll

2012-06-30 14:50 - 2008-03-05 15:03 - 00479752 ____A (Microsoft Corporation) C:\Windows\System32\XAudio2_0.dll

2012-06-30 14:50 - 2008-03-05 15:03 - 00238088 ____A (Microsoft Corporation) C:\Windows\System32\xactengine3_0.dll

2012-06-30 14:50 - 2008-03-05 15:00 - 00025608 ____A (Microsoft Corporation) C:\Windows\System32\X3DAudio1_3.dll

2012-06-30 14:50 - 2008-03-05 14:56 - 03786760 ____A (Microsoft Corporation) C:\Windows\System32\D3DX9_37.dll

2012-06-30 14:50 - 2008-03-05 14:56 - 01420824 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_37.dll

2012-06-30 14:50 - 2008-02-05 22:07 - 00462864 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_37.dll

2012-06-30 14:50 - 2007-10-22 02:39 - 00267272 ____A (Microsoft Corporation) C:\Windows\System32\xactengine2_10.dll

2012-06-30 14:50 - 2007-10-22 02:37 - 00017928 ____A (Microsoft Corporation) C:\Windows\System32\X3DAudio1_2.dll

2012-06-30 14:50 - 2007-10-12 14:14 - 03734536 ____A (Microsoft Corporation) C:\Windows\System32\d3dx9_36.dll

2012-06-30 14:50 - 2007-10-12 14:14 - 01374232 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_36.dll

2012-06-30 14:50 - 2007-10-02 08:56 - 00444776 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_36.dll

2012-06-30 14:50 - 2007-07-19 23:57 - 00267112 ____A (Microsoft Corporation) C:\Windows\System32\xactengine2_9.dll

2012-06-30 14:50 - 2007-07-19 17:14 - 03727720 ____A (Microsoft Corporation) C:\Windows\System32\d3dx9_35.dll

2012-06-30 14:50 - 2007-07-19 17:14 - 01358192 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_35.dll

2012-06-30 14:50 - 2007-07-19 17:14 - 00444776 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_35.dll

2012-06-30 14:50 - 2007-06-20 19:46 - 00266088 ____A (Microsoft Corporation) C:\Windows\System32\xactengine2_8.dll

2012-06-30 14:50 - 2007-05-16 15:45 - 03497832 ____A (Microsoft Corporation) C:\Windows\System32\d3dx9_34.dll

2012-06-30 14:50 - 2007-05-16 15:45 - 01124720 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_34.dll

2012-06-30 14:50 - 2007-05-16 15:45 - 00443752 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_34.dll

2012-06-30 14:50 - 2007-04-04 17:53 - 00081768 ____A C:\Windows\System32\xinput1_3.dll

2012-06-30 14:49 - 2007-04-04 17:55 - 00261480 ____A (Microsoft Corporation) C:\Windows\System32\xactengine2_7.dll

2012-06-30 14:49 - 2007-03-15 15:57 - 00443752 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_33.dll

2012-06-30 14:49 - 2007-03-12 15:42 - 03495784 ____A (Microsoft Corporation) C:\Windows\System32\d3dx9_33.dll

2012-06-30 14:49 - 2007-03-12 15:42 - 01123696 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_33.dll

2012-06-30 14:49 - 2007-03-05 11:42 - 00015128 ____A (Microsoft Corporation) C:\Windows\System32\x3daudio1_1.dll

2012-06-30 14:49 - 2007-01-24 14:27 - 00255848 ____A (Microsoft Corporation) C:\Windows\System32\xactengine2_6.dll

2012-06-30 14:49 - 2006-12-08 11:02 - 00251672 ____A (Microsoft Corporation) C:\Windows\System32\xactengine2_5.dll

2012-06-30 14:49 - 2006-11-29 12:06 - 03426072 ____A (Microsoft Corporation) C:\Windows\System32\d3dx9_32.dll

2012-06-30 14:49 - 2006-11-29 12:06 - 00440080 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10.dll

2012-06-30 14:49 - 2006-09-28 15:05 - 02414360 ____A (Microsoft Corporation) C:\Windows\System32\d3dx9_31.dll

2012-06-30 14:49 - 2006-09-28 15:05 - 00237848 ____A (Microsoft Corporation) C:\Windows\System32\xactengine2_4.dll

2012-06-30 14:49 - 2006-07-28 08:30 - 00236824 ____A (Microsoft Corporation) C:\Windows\System32\xactengine2_3.dll

2012-06-30 14:49 - 2006-07-28 08:30 - 00062744 ____A C:\Windows\System32\xinput1_2.dll

2012-06-30 14:49 - 2006-05-31 06:24 - 00230168 ____A (Microsoft Corporation) C:\Windows\System32\xactengine2_2.dll

2012-06-30 14:49 - 2006-03-31 11:40 - 02388176 ____A (Microsoft Corporation) C:\Windows\System32\d3dx9_30.dll

2012-06-30 14:49 - 2006-03-31 11:39 - 00229584 ____A (Microsoft Corporation) C:\Windows\System32\xactengine2_1.dll

2012-06-30 14:49 - 2006-03-31 11:39 - 00062672 ____A C:\Windows\System32\xinput1_1.dll

2012-06-30 14:49 - 2006-02-03 07:43 - 02332368 ____A (Microsoft Corporation) C:\Windows\System32\d3dx9_29.dll

2012-06-30 14:49 - 2006-02-03 07:42 - 00230096 ____A (Microsoft Corporation) C:\Windows\System32\xactengine2_0.dll

2012-06-30 14:49 - 2006-02-03 07:41 - 00014032 ____A (Microsoft Corporation) C:\Windows\System32\x3daudio1_0.dll

2012-06-30 14:49 - 2005-12-05 17:09 - 02323664 ____A (Microsoft Corporation) C:\Windows\System32\d3dx9_28.dll

2012-06-30 14:49 - 2005-07-22 18:59 - 02319568 ____A (Microsoft Corporation) C:\Windows\System32\d3dx9_27.dll

2012-06-30 14:49 - 2005-05-26 14:34 - 02297552 ____A (Microsoft Corporation) C:\Windows\System32\d3dx9_26.dll

2012-06-30 14:49 - 2005-03-18 16:19 - 02337488 ____A (Microsoft Corporation) C:\Windows\System32\d3dx9_25.dll

2012-06-30 14:49 - 2005-02-05 18:45 - 02222800 ____A (Microsoft Corporation) C:\Windows\System32\d3dx9_24.dll

2012-06-30 14:47 - 2012-06-30 14:47 - 00000000 ____D C:\NVIDIA

2012-06-30 14:45 - 2012-06-30 14:45 - 00000000 ____D C:\Users\Jon\Documents\My Received Files

2012-06-30 14:35 - 2012-06-30 14:35 - 01130824 ____A (Microsoft Corporation) C:\Windows\System32\dfshim.dll

2012-06-30 14:35 - 2012-06-30 14:35 - 00297808 ____A (Microsoft Corporation) C:\Windows\System32\mscoree.dll

2012-06-30 14:35 - 2012-06-30 14:35 - 00295264 ____A (Microsoft Corporation) C:\Windows\System32\PresentationHost.exe

2012-06-30 14:35 - 2012-06-30 14:35 - 00099176 ____A (Microsoft Corporation) C:\Windows\System32\PresentationHostProxy.dll

2012-06-30 14:35 - 2012-06-30 14:35 - 00049472 ____A (Microsoft Corporation) C:\Windows\System32\netfxperf.dll

2012-06-30 14:34 - 2012-06-30 15:00 - 00000000 ____D C:\Windows\System32\directx

2012-06-30 14:34 - 2012-06-30 14:56 - 00000000 ___HD C:\Windows\msdownld.tmp

2012-06-30 14:30 - 2012-06-30 14:31 - 00000000 ____D C:\Program Files\K-Lite Codec Pack

2012-06-30 14:30 - 2012-06-25 10:00 - 00079872 ____A C:\Windows\System32\ff_vfw.dll

2012-06-30 14:30 - 2012-06-09 09:21 - 00178688 ____A C:\Windows\System32\unrar.dll

2012-06-30 14:30 - 2012-05-21 13:48 - 00000415 ____A C:\Windows\System32\lame_acm.xml

2012-06-30 14:30 - 2012-03-25 11:04 - 04114432 ____A (x264vfw project) C:\Windows\System32\x264vfw.dll

2012-06-30 14:30 - 2011-12-21 09:14 - 00151552 ____A (fccHandler) C:\Windows\System32\ac3acm.acm

2012-06-30 14:30 - 2011-12-07 09:32 - 00216064 ____A ( ) C:\Windows\System32\lagarith.dll

2012-06-30 14:30 - 2011-06-24 06:44 - 00243200 ____A C:\Windows\System32\xvidvfw.dll

2012-06-30 14:30 - 2011-06-24 06:28 - 00650752 ____A C:\Windows\System32\xvidcore.dll

2012-06-30 14:30 - 2008-09-24 10:41 - 00839680 ____A (http://www.mp3dev.org/) C:\Windows\System32\lameACM.acm

2012-06-30 14:30 - 2004-05-18 10:16 - 00039936 ____A (Disappearing Inc.) C:\Windows\System32\huffyuv.dll

2012-06-30 14:18 - 2012-07-23 13:37 - 00000000 ____D C:\Users\Jon\Tracing

2012-06-30 14:16 - 2012-06-30 14:16 - 00000000 ____D C:\Program Files\Windows Live SkyDrive

2012-06-30 14:15 - 2012-06-30 14:16 - 00000000 ____D C:\Program Files\Windows Live

2012-06-30 14:15 - 2012-06-30 14:15 - 00000000 ____D C:\Windows\PCHEALTH

2012-06-30 14:11 - 2012-06-30 14:12 - 00000000 ____D C:\9113f7637558c95bd1bc

2012-06-30 14:11 - 2012-06-30 14:11 - 00000000 ____D C:\Program Files\Common Files\Windows Live

2012-06-30 14:10 - 2012-06-30 14:10 - 00000000 ____D C:\8fef31951be99ee8f701ab858f5f7456

2012-06-30 14:05 - 2012-06-30 14:05 - 00000000 ____D C:\Users\Jon\AppData\Roaming\dynamite jack

2012-06-30 13:46 - 2012-07-23 13:37 - 00000000 ____D C:\Users\Jon\AppData\Roaming\Skype

2012-06-30 13:46 - 2012-07-22 19:33 - 00000000 ____D C:\Users\All Users\Skype

2012-06-30 13:46 - 2012-06-30 13:46 - 00001878 ____A C:\Users\Public\Desktop\Skype.lnk

2012-06-30 13:46 - 2012-06-30 13:46 - 00000000 ___RD C:\Program Files\Skype

2012-06-30 13:44 - 2012-07-23 13:37 - 00000000 ____D C:\Program Files\Steam

2012-06-30 13:44 - 2012-07-03 13:55 - 00000000 ____D C:\Users\Jon\AppData\Roaming\WinRAR

2012-06-30 13:44 - 2012-06-30 13:54 - 00000000 ____D C:\Program Files\Common Files\Steam

2012-06-30 13:44 - 2012-06-30 13:44 - 00000788 ____A C:\Users\Public\Desktop\Steam.lnk

2012-06-30 13:44 - 2012-06-30 13:44 - 00000000 ____D C:\Program Files\WinRAR

2012-06-30 13:37 - 2012-07-23 13:24 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job

2012-06-30 13:37 - 2012-07-15 18:12 - 00426184 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe

2012-06-30 13:37 - 2012-07-15 18:12 - 00070344 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl

2012-06-30 13:37 - 2012-07-06 17:19 - 00000000 ____D C:\Users\Jon\AppData\Roaming\Adobe

2012-06-30 13:37 - 2012-06-30 13:37 - 00000000 ____D C:\Users\Jon\AppData\Roaming\Macromedia

2012-06-30 13:37 - 2012-06-30 13:37 - 00000000 ____D C:\Users\Jon\AppData\Local\Macromedia

2012-06-30 13:32 - 2012-07-19 09:01 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2012-06-30 13:32 - 2012-07-18 11:19 - 00000000 ____D C:\Program Files\Mozilla Firefox

2012-06-30 13:32 - 2012-06-30 13:32 - 00000848 ____A C:\Users\Public\Desktop\Mozilla Firefox.lnk

2012-06-30 13:32 - 2012-06-30 13:32 - 00000000 ____D C:\Users\Jon\AppData\Roaming\Mozilla

2012-06-30 13:32 - 2012-06-30 13:32 - 00000000 ____D C:\Users\Jon\AppData\Local\Mozilla

2012-06-30 13:32 - 2012-06-30 13:32 - 00000000 ____D C:\Users\All Users\Mozilla

2012-06-30 13:16 - 2012-06-30 13:16 - 00000000 ____D C:\Users\Jon\AppData\Local\SupportSoft

2012-06-30 13:12 - 2012-06-30 13:12 - 00000000 ____D C:\Users\Jon\Desktop\DFO Skill Builds

2012-06-30 06:30 - 2012-06-30 13:26 - 00000000 ____D C:\Users\Jon\AppData\Roaming\Google

2012-06-30 06:29 - 2012-06-30 17:07 - 00000000 ____D C:\Users\Jon\Jeremy

2012-06-30 05:36 - 2012-06-30 06:38 - 00000000 ____D C:\Users\Jon\AppData\Local\Microsoft Games

2012-06-30 00:23 - 2012-07-08 20:45 - 00027136 ____A C:\Users\Jon\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2012-06-30 00:21 - 2012-07-21 07:30 - 00000000 ____D C:\Users\Jon\AppData\Local\Google

2012-06-30 00:21 - 2012-07-01 13:22 - 00081816 ____A C:\Users\Jon\AppData\Local\GDIPFONTCACHEV1.DAT

2012-06-30 00:21 - 2012-06-30 00:21 - 00000000 ____D C:\Users\Jon\Documents\My Google Gadgets

2012-06-30 00:20 - 2012-07-21 07:26 - 00000000 ____D C:\users\Jon

2012-06-30 00:20 - 2012-07-06 17:19 - 00000000 ____D C:\Users\Jon\AppData\Local\VirtualStore

2012-06-30 00:20 - 2012-06-30 00:20 - 00000020 ___SH C:\Users\Jon\ntuser.ini

Post is too long will continue

Link to post
Share on other sites

continuation:

============ 3 Months Modified Files ========================

2012-07-23 13:37 - 2006-11-02 05:01 - 00019776 ____A C:\Windows\Tasks\SCHEDLGU.TXT

2012-07-23 13:37 - 2006-11-02 05:01 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2012-07-23 13:36 - 2012-07-21 07:28 - 00000876 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2012-07-23 13:36 - 2006-11-02 04:47 - 00003472 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2012-07-23 13:36 - 2006-11-02 04:47 - 00003472 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2012-07-23 13:32 - 2007-11-02 00:06 - 00077074 ____A C:\Windows\PFRO.log

2012-07-23 13:29 - 2006-11-02 02:33 - 00389848 ____A C:\Windows\System32\PerfStringBackup.INI

2012-07-23 13:24 - 2012-06-30 13:37 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job

2012-07-23 13:13 - 2012-07-23 13:13 - 00892164 ____A (Farbar) C:\Users\Jon\Desktop\FRST.exe

2012-07-23 12:38 - 2012-07-21 07:28 - 00000880 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2012-07-22 21:26 - 2012-07-16 15:19 - 00000499 ____A C:\Users\Jon\Desktop\Steam Summer Sale.txt

2012-07-21 07:39 - 2012-07-21 07:28 - 00001973 ____A C:\Users\Public\Desktop\Google Chrome.lnk

2012-07-18 16:01 - 2012-07-18 16:01 - 00001828 ____A C:\Users\Public\Desktop\DarkBlood Online.lnk

2012-07-18 15:48 - 2012-07-18 14:56 - 1965558630 ____A (Acresso Software Inc.) C:\Users\Jon\Desktop\DarkBloodSetup_120718.exe

2012-07-17 12:34 - 2012-07-17 12:34 - 00000908 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2012-07-15 18:49 - 2012-07-15 18:49 - 00444952 ____A (Creative Labs) C:\Windows\System32\wrap_oal.dll

2012-07-15 18:49 - 2012-07-15 18:49 - 00109080 ____A (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\System32\OpenAL32.dll

2012-07-15 18:12 - 2012-06-30 13:37 - 00426184 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe

2012-07-15 18:12 - 2012-06-30 13:37 - 00070344 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl

2012-07-15 18:12 - 2007-11-01 23:36 - 01051359 ____A C:\Windows\WindowsUpdate.log

2012-07-14 07:38 - 2012-07-14 07:38 - 00000062 ____A C:\Users\Jon\Desktop\Welcome to Petpet Park.URL

2012-07-11 18:56 - 2006-11-02 02:24 - 57442464 ____A (Microsoft Corporation) C:\Windows\System32\mrt.exe

2012-07-08 20:53 - 2006-11-02 04:52 - 00027975 ____A C:\Windows\setupact.log

2012-07-08 20:45 - 2012-06-30 00:23 - 00027136 ____A C:\Users\Jon\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2012-07-07 21:56 - 2012-07-07 21:56 - 00001034 ____A C:\Users\Jon\Desktop\DVDVideoSoft Free Studio.lnk

2012-07-07 21:44 - 2012-07-07 21:44 - 00003649 ____A C:\Users\Jon\Desktop\[absolute.animeblogger.net]vitasettings v1.00.plist

2012-07-07 21:30 - 2012-07-07 21:30 - 00000818 ____A C:\Users\UpdatusUser\Desktop\Handbrake.lnk

2012-07-07 21:30 - 2012-07-07 21:30 - 00000818 ____A C:\Users\Jon\Desktop\Handbrake.lnk

2012-07-05 19:45 - 2012-07-02 11:53 - 00040359 ____A C:\Windows\DirectX.log

2012-07-04 21:12 - 2012-07-04 21:12 - 00001737 ____A C:\Users\Public\Desktop\DAEMON Tools Lite.lnk

2012-07-04 21:11 - 2012-07-04 21:11 - 00242240 ____A (DT Soft Ltd) C:\Windows\System32\Drivers\dtsoftbus01.sys

2012-07-04 15:02 - 2012-07-04 15:02 - 00000308 ____A C:\Windows\System32\zhp1018.log

2012-07-03 18:22 - 2012-07-03 18:22 - 00000761 ____A C:\Users\Public\Desktop\Play Wizard101.lnk

2012-07-03 12:46 - 2012-07-17 12:34 - 00022344 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys

2012-07-01 22:37 - 2012-07-01 22:37 - 00174064 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe

2012-07-01 22:37 - 2012-07-01 22:37 - 00174064 ____A (Oracle Corporation) C:\Windows\System32\java.exe

2012-07-01 22:24 - 2006-11-02 04:50 - 00000749 __RAH C:\Windows\WindowsShell.Manifest

2012-07-01 22:24 - 2006-11-02 04:50 - 00000174 __ASH C:\Users\Public\desktop.ini

2012-07-01 22:24 - 2006-11-02 04:50 - 00000174 __ASH C:\users\desktop.ini

2012-07-01 22:24 - 2006-11-02 04:50 - 00000174 __ASH C:\Program Files\desktop.ini

2012-07-01 22:23 - 2006-11-02 04:47 - 00320392 ____A C:\Windows\System32\FNTCACHE.DAT

2012-07-01 22:18 - 2012-07-01 22:18 - 00297472 ____A (Microsoft Corporation) C:\Windows\System32\gdi32.dll

2012-07-01 22:18 - 2012-07-01 22:18 - 00071680 ____A (Microsoft Corporation) C:\Windows\System32\atl.dll

2012-07-01 22:17 - 2012-07-01 22:17 - 01060920 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys

2012-07-01 22:17 - 2012-07-01 22:17 - 00500736 ____A (Microsoft Corporation) C:\Windows\System32\msdtcprx.dll

2012-07-01 22:17 - 2012-07-01 22:17 - 00041984 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\monitor.sys

2012-07-01 22:17 - 2012-07-01 22:17 - 00030208 ____A (Microsoft Corporation) C:\Windows\System32\xolehlp.dll

2012-07-01 22:16 - 2012-07-01 22:16 - 01871872 ____A (Microsoft Corporation) C:\Windows\System32\mstscax.dll

2012-07-01 22:16 - 2012-07-01 22:16 - 00156160 ____A (Microsoft Corporation) C:\Windows\System32\wkssvc.dll

2012-07-01 22:16 - 2012-07-01 22:16 - 00116736 ____A (Microsoft Corporation) C:\Windows\System32\aaclient.dll

2012-07-01 22:16 - 2012-07-01 22:16 - 00036352 ____A (Microsoft Corporation) C:\Windows\System32\tsgqec.dll

2012-07-01 22:15 - 2012-07-01 22:15 - 00713728 ____A (Microsoft Corporation) C:\Windows\System32\timedate.cpl

2012-07-01 22:15 - 2012-07-01 22:15 - 00303616 ____A (Microsoft Corporation) C:\Windows\System32\wmpeffects.dll

2012-07-01 22:14 - 2012-07-01 22:14 - 00425472 ____A (Microsoft Corporation) C:\Windows\System32\netapi32.dll

2012-07-01 22:14 - 2012-07-01 22:14 - 00356864 ____A (Microsoft Corporation) C:\Windows\System32\MediaMetadataHandler.dll

2012-07-01 22:12 - 2012-07-01 22:12 - 01244672 ____A (Microsoft Corporation) C:\Windows\System32\mcmde.dll

2012-07-01 22:12 - 2012-07-01 22:12 - 00428032 ____A (Microsoft Corporation) C:\Windows\System32\EncDec.dll

2012-07-01 22:12 - 2012-07-01 22:12 - 00292352 ____A (Microsoft Corporation) C:\Windows\System32\psisdecd.dll

2012-07-01 22:12 - 2012-07-01 22:12 - 00217088 ____A (Microsoft Corporation) C:\Windows\System32\psisrndr.ax

2012-07-01 22:12 - 2012-07-01 22:12 - 00177152 ____A (Microsoft Corporation) C:\Windows\System32\mpg2splt.ax

2012-07-01 22:12 - 2012-07-01 22:12 - 00080896 ____A (Microsoft Corporation) C:\Windows\System32\MSNP.ax

2012-07-01 22:12 - 2012-07-01 22:12 - 00068608 ____A (Microsoft Corporation) C:\Windows\System32\Mpeg2Data.ax

2012-07-01 22:12 - 2012-07-01 22:12 - 00057856 ____A (Microsoft Corporation) C:\Windows\System32\MSDvbNP.ax

2012-07-01 22:11 - 2012-07-01 22:11 - 11315712 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll

2012-07-01 22:10 - 2012-07-01 22:10 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll

2012-07-01 22:09 - 2012-07-01 22:09 - 00696832 ____A (Microsoft Corporation) C:\Windows\System32\localspl.dll

2012-07-01 22:08 - 2012-07-01 22:08 - 02923520 ____A (Microsoft Corporation) C:\Windows\explorer.exe

2012-07-01 22:08 - 2012-07-01 22:08 - 00211000 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\volsnap.sys

2012-07-01 22:08 - 2012-07-01 22:08 - 00171520 ____A (Microsoft Corporation) C:\Windows\System32\wintrust.dll

2012-07-01 22:08 - 2012-07-01 22:08 - 00154624 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\nwifi.sys

2012-07-01 22:08 - 2012-07-01 22:08 - 00110136 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ataport.sys

2012-07-01 22:08 - 2012-07-01 22:08 - 00045112 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\pciidex.sys

2012-07-01 22:08 - 2012-07-01 22:08 - 00021560 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\atapi.sys

2012-07-01 22:08 - 2012-07-01 22:08 - 00015928 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\pciide.sys

2012-07-01 22:07 - 2012-07-01 22:07 - 00494592 ____A (Microsoft Corporation) C:\Windows\System32\kerberos.dll

2012-07-01 22:07 - 2012-07-01 22:07 - 00272384 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll

2012-07-01 22:07 - 2012-07-01 22:07 - 00024064 ____A (Microsoft Corporation) C:\Windows\System32\netcfg.exe

2012-07-01 22:06 - 2012-07-01 22:06 - 12240896 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0007.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 11722752 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0001.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 09892864 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons000a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 09845248 ____A (Microsoft Corporation) C:\Windows\System32\NlsData000a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 07964672 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0024.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 07042560 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons081a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 06917120 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0c1a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 06781440 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0019.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 06585856 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons001b.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 06346240 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons001d.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 06237696 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons000c.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 06224896 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0027.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 06014976 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons001a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 05791232 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0026.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 05654528 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons000f.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 05499904 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0022.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 05090816 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0416.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 05071872 ____A (Microsoft Corporation) C:\Windows\System32\NlsModels0011.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 05031936 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0816.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04981248 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0013.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04874240 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0009.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04616192 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0414.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04495360 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0019.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04493312 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0816.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04493312 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0416.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04493312 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0414.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04493312 ____A (Microsoft Corporation) C:\Windows\System32\NlsData001d.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04493312 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0010.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04175872 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0010.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04164096 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0002.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04093440 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons004c.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 04045824 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons003e.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03464704 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0013.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03419136 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons004a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03331072 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0018.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData004e.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData004c.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData004b.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData004a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0049.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0047.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0046.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0045.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0039.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 03102720 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0020.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02655232 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0011.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02644480 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0009.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02641408 ____A (Microsoft Corporation) C:\Windows\System32\NlsData000c.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02597888 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0001.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02466816 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0011.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02340864 ____A (Microsoft Corporation) C:\Windows\System32\NlsData000d.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0007.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 02136064 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0021.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01972736 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons004e.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01965056 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0027.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0c1a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData081a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0026.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0024.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData001b.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData001a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0018.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData000f.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0003.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01963520 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0002.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01808896 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0046.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01799168 ____A (Microsoft Corporation) C:\Windows\System32\NlsData003e.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01799168 ____A (Microsoft Corporation) C:\Windows\System32\NlsData002a.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01799168 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0022.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01799168 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0021.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01793536 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0045.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01782272 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0039.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01722368 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons000d.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01702912 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons004b.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01558016 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0049.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01523200 ____A (Microsoft Corporation) C:\Windows\System32\NlsData0000.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01452544 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0003.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01411072 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0047.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 01236992 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons0020.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 00797696 ____A (Microsoft Corporation) C:\Windows\System32\NaturalLanguage6.dll

2012-07-01 22:06 - 2012-07-01 22:06 - 00004096 ____A (Microsoft Corporation) C:\Windows\System32\NlsLexicons002a.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 01585664 ____A (Microsoft Corporation) C:\Windows\System32\setupapi.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00944184 ____A (Microsoft Corporation) C:\Windows\System32\winload.exe

2012-07-01 22:03 - 2012-07-01 22:03 - 00905400 ____A (Microsoft Corporation) C:\Windows\System32\winresume.exe

2012-07-01 22:03 - 2012-07-01 22:03 - 00620088 ____A (Microsoft Corporation) C:\Windows\System32\ci.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00613888 ____A (Microsoft Corporation) C:\Windows\System32\wpd_ci.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00595456 ____A (Microsoft Corporation) C:\Windows\System32\schedsvc.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00558080 ____A (Microsoft Corporation) C:\Windows\System32\oleaut32.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00495160 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\Wdf01000.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00371712 ____A (Microsoft Corporation) C:\Windows\System32\srcore.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00313856 ____A (Microsoft Corporation) C:\Windows\System32\rstrui.exe

2012-07-01 22:03 - 2012-07-01 22:03 - 00260096 ____A (Microsoft Corporation) C:\Windows\System32\dpx.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00224824 ____A (Microsoft Corporation) C:\Windows\System32\clfs.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00221696 ____A (Microsoft Corporation) C:\Windows\System32\umpnpmgr.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00115200 ____A (Microsoft Corporation) C:\Windows\System32\loadperf.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00101888 ____A (Microsoft Corporation) C:\Windows\System32\drvinst.exe

2012-07-01 22:03 - 2012-07-01 22:03 - 00054784 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\i8042prt.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00040960 ____A (Microsoft Corporation) C:\Windows\System32\srclient.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00039424 ____A (Microsoft Corporation) C:\Windows\System32\lodctr.exe

2012-07-01 22:03 - 2012-07-01 22:03 - 00035384 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\WdfLdr.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00035384 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\kbdclass.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00035328 ____A (Microsoft Corporation) C:\Windows\System32\dispci.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00034360 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mouclass.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00032256 ____A (Microsoft Corporation) C:\Windows\System32\unlodctr.exe

2012-07-01 22:03 - 2012-07-01 22:03 - 00019968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\sermouse.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00019456 ____A (Microsoft Corporation) C:\Windows\System32\cfgmgr32.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00019000 ____A (Microsoft Corporation) C:\Windows\System32\kd1394.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00017408 ____A (Microsoft Corporation) C:\Windows\System32\prflbmsg.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00016384 ____A (Microsoft Corporation) C:\Windows\System32\srdelayed.exe

2012-07-01 22:03 - 2012-07-01 22:03 - 00015872 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mouhid.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00015872 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\kbdhid.sys

2012-07-01 22:03 - 2012-07-01 22:03 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\batt.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00007168 ____A (Microsoft Corporation) C:\Windows\System32\f3ahvoas.dll

2012-07-01 22:03 - 2012-07-01 22:03 - 00006656 ____A (Microsoft Corporation) C:\Windows\System32\kbd106n.dll

2012-07-01 22:01 - 2012-07-01 22:01 - 00654336 ____A (Microsoft Corporation) C:\Windows\System32\printfilterpipelinesvc.exe

2012-07-01 22:01 - 2012-07-01 22:01 - 00549888 ____A (Microsoft Corporation) C:\Windows\System32\rpcss.dll

2012-07-01 22:01 - 2012-07-01 22:01 - 00512000 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll

2012-07-01 22:01 - 2012-07-01 22:01 - 00220672 ____A (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codecp.acm

2012-07-01 22:01 - 2012-07-01 22:01 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\sdohlp.dll

2012-07-01 22:01 - 2012-07-01 22:01 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\iasrecst.dll

2012-07-01 22:01 - 2012-07-01 22:01 - 00062464 ____A (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm

2012-07-01 22:01 - 2012-07-01 22:01 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\iasads.dll

2012-07-01 22:01 - 2012-07-01 22:01 - 00037888 ____A (Microsoft Corporation) C:\Windows\System32\iasdatastore.dll

2012-07-01 22:01 - 2012-07-01 22:01 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\printfilterpipelineprxy.dll

2012-07-01 22:00 - 2012-07-01 22:00 - 00815104 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys

2012-07-01 22:00 - 2012-07-01 22:00 - 00179712 ____A (Microsoft Corporation) C:\Windows\System32\iphlpsvc.dll

2012-07-01 22:00 - 2012-07-01 22:00 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\tcpipcfg.dll

2012-07-01 22:00 - 2012-07-01 22:00 - 00025088 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tunnel.sys

2012-07-01 22:00 - 2012-07-01 22:00 - 00022016 ____A (Microsoft Corporation) C:\Windows\System32\netiougc.exe

2012-07-01 22:00 - 2012-07-01 22:00 - 00015360 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\TUNMP.SYS

2012-07-01 21:59 - 2012-07-01 21:59 - 00875520 ____A (Microsoft Corporation) C:\Windows\System32\kernel32.dll

2012-07-01 21:59 - 2012-07-01 21:59 - 00712192 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll

2012-07-01 21:59 - 2012-07-01 21:59 - 00425472 ____A (Microsoft Corporation) C:\Windows\System32\PhotoMetadataHandler.dll

2012-07-01 21:59 - 2012-07-01 21:59 - 00347136 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll

2012-07-01 21:59 - 2012-07-01 21:59 - 00223232 ____A (Microsoft Corporation) C:\Windows\System32\WMASF.DLL

2012-07-01 21:59 - 2012-07-01 21:59 - 00025600 ____A (Microsoft Corporation) C:\Windows\System32\amxread.dll

2012-07-01 21:59 - 2012-07-01 21:59 - 00014848 ____A (Microsoft Corporation) C:\Windows\System32\apilogen.dll

2012-07-01 21:59 - 2012-07-01 21:59 - 00009728 ____A (Microsoft Corporation) C:\Windows\System32\LAPRXY.DLL

2012-07-01 21:59 - 2012-07-01 21:59 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\asferror.dll

2012-07-01 21:58 - 2012-07-01 21:58 - 00097792 ____A (Microsoft Corporation) C:\Windows\System32\cabview.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 08138240 ____A (Microsoft Corporation) C:\Windows\System32\ssBranded.scr

2012-07-01 21:56 - 2012-07-01 21:56 - 01984512 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 00220160 ____A (Microsoft Corporation) C:\Windows\System32\ntprint.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 00204800 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcsvc.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 00120320 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcsvc6.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 00069632 ____A (Microsoft Corporation) C:\Windows\System32\sendmail.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 00061440 ____A (Microsoft Corporation) C:\Windows\System32\ntprint.exe

2012-07-01 21:56 - 2012-07-01 21:56 - 00037376 ____A (Microsoft Corporation) C:\Windows\System32\printcom.dll

2012-07-01 21:56 - 2012-07-01 21:56 - 00010240 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcmonitor.dll

2012-07-01 21:55 - 2012-07-01 21:55 - 02031104 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys

2012-07-01 21:55 - 2012-07-01 21:55 - 00313344 ____A (Microsoft Corporation) C:\Windows\System32\wmpdxm.dll

2012-07-01 21:55 - 2012-07-01 21:55 - 00113664 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rmcast.sys

2012-07-01 21:55 - 2012-07-01 21:55 - 00043520 ____A (Microsoft Corporation) C:\Windows\System32\msdxm.tlb

2012-07-01 21:55 - 2012-07-01 21:55 - 00018432 ____A (Microsoft Corporation) C:\Windows\System32\amcompat.tlb

2012-07-01 21:55 - 2012-07-01 21:55 - 00014848 ____A (Microsoft Corporation) C:\Windows\System32\wshrm.dll

2012-07-01 21:54 - 2012-07-01 21:54 - 00523776 ____A (Microsoft Corporation) C:\Windows\System32\RMActivate_isv.exe

2012-07-01 21:54 - 2012-07-01 21:54 - 00515584 ____A (Microsoft Corporation) C:\Windows\System32\RMActivate.exe

2012-07-01 21:54 - 2012-07-01 21:54 - 00473088 ____A (Microsoft Corporation) C:\Windows\System32\secproc_isv.dll

2012-07-01 21:54 - 2012-07-01 21:54 - 00472576 ____A (Microsoft Corporation) C:\Windows\System32\secproc.dll

2012-07-01 21:54 - 2012-07-01 21:54 - 00435712 ____A (Microsoft Corporation) C:\Windows\System32\RMActivate_ssp.exe

2012-07-01 21:54 - 2012-07-01 21:54 - 00431104 ____A (Microsoft Corporation) C:\Windows\System32\RMActivate_ssp_isv.exe

2012-07-01 21:54 - 2012-07-01 21:54 - 00312320 ____A (Microsoft Corporation) C:\Windows\System32\msdrm.dll

2012-07-01 21:54 - 2012-07-01 21:54 - 00154624 ____A (Microsoft Corporation) C:\Windows\System32\secproc_ssp_isv.dll

2012-07-01 21:54 - 2012-07-01 21:54 - 00154112 ____A (Microsoft Corporation) C:\Windows\System32\secproc_ssp.dll

2012-07-01 21:54 - 2012-07-01 21:54 - 00011776 ____A (Microsoft Corporation) C:\Windows\System32\sbunattend.exe

2012-07-01 21:53 - 2012-07-01 21:53 - 00162816 ____A (Microsoft Corporation) C:\Windows\System32\dnsapi.dll

2012-07-01 21:53 - 2012-07-01 21:53 - 00083968 ____A (Microsoft Corporation) C:\Windows\System32\dnsrslvr.dll

2012-07-01 21:53 - 2012-07-01 21:53 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\dnscacheugc.exe

2012-07-01 21:49 - 2012-07-01 21:49 - 00781344 ____A (Microsoft Corporation) C:\Windows\System32\PresentationNative_v0300.dll

2012-07-01 21:49 - 2012-07-01 21:49 - 00622080 ____A (Microsoft Corporation) C:\Windows\System32\icardagt.exe

2012-07-01 21:49 - 2012-07-01 21:49 - 00105016 ____A (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll

2012-07-01 21:49 - 2012-07-01 21:49 - 00097800 ____A (Microsoft Corporation) C:\Windows\System32\infocardapi.dll

2012-07-01 21:49 - 2012-07-01 21:49 - 00037384 ____A (Microsoft Corporation) C:\Windows\System32\infocardcpl.cpl

2012-07-01 21:49 - 2012-07-01 21:49 - 00011264 ____A (Microsoft Corporation) C:\Windows\System32\icardres.dll

2012-07-01 21:43 - 2012-07-01 08:09 - 28835840 ____A C:\Windows\ocsetup_install_NetFx3.etl

2012-07-01 21:43 - 2012-07-01 08:09 - 00327680 ____A C:\Windows\ocsetup_cbs_install_NetFx3.perf

2012-07-01 21:43 - 2012-07-01 08:09 - 00065536 ____A C:\Windows\ocsetup_cbs_install_NetFx3.dpx

2012-07-01 13:22 - 2012-06-30 00:21 - 00081816 ____A C:\Users\Jon\AppData\Local\GDIPFONTCACHEV1.DAT

2012-07-01 08:47 - 2012-07-01 08:47 - 00289792 ____A (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll

2012-07-01 08:47 - 2012-07-01 08:47 - 00156672 ____A (Microsoft Corporation) C:\Windows\System32\t2embed.dll

2012-07-01 08:47 - 2012-07-01 08:47 - 00072704 ____A (Microsoft Corporation) C:\Windows\System32\fontsub.dll

2012-07-01 08:47 - 2012-07-01 08:47 - 00034304 ____A (Adobe Systems) C:\Windows\System32\atmlib.dll

2012-07-01 08:47 - 2012-07-01 08:47 - 00024064 ____A (Microsoft Corporation) C:\Windows\System32\lpk.dll

2012-07-01 08:47 - 2012-07-01 08:47 - 00010240 ____A (Microsoft Corporation) C:\Windows\System32\dciman32.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 06067200 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 03599360 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 02452872 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat

2012-07-01 08:46 - 2012-07-01 08:46 - 01830912 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl

2012-07-01 08:46 - 2012-07-01 08:46 - 01383424 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2012-07-01 08:46 - 2012-07-01 08:46 - 01168384 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00832512 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00671232 ____A (Microsoft Corporation) C:\Windows\System32\mstime.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00477696 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00459264 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00389120 ____A (Microsoft Corporation) C:\Windows\System32\html.iec

2012-07-01 08:46 - 2012-07-01 08:46 - 00385024 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00380928 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00347136 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00268288 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\ieaksie.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00214528 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00180736 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00161792 ____A (Microsoft Corporation) C:\Windows\System32\ieakui.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00124928 ____A (Microsoft Corporation) C:\Windows\System32\advpack.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00078336 ____A (Microsoft Corporation) C:\Windows\System32\ieencode.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00072704 ____A (Microsoft Corporation) C:\Windows\System32\admparse.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00070656 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe

2012-07-01 08:46 - 2012-07-01 08:46 - 00063488 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00056320 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00048128 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00044544 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00044544 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll

2012-07-01 08:46 - 2012-07-01 08:46 - 00026624 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe

2012-07-01 08:44 - 2012-07-01 08:44 - 00619008 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys

2012-07-01 08:44 - 2012-07-01 08:44 - 00564736 ____A (Microsoft Corporation) C:\Windows\System32\msftedit.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00467456 ____A (Microsoft Corporation) C:\Windows\System32\riched20.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00384000 ____A (Microsoft Corporation) C:\Windows\System32\netcfgx.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00361984 ____A (Microsoft Corporation) C:\Windows\System32\IPSECSVC.DLL

2012-07-01 08:44 - 2012-07-01 08:44 - 00286208 ____A (Microsoft Corporation) C:\Windows\System32\ipnathlp.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00272896 ____A (Microsoft Corporation) C:\Windows\System32\polstore.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00134656 ____A (Microsoft Corporation) C:\Windows\System32\dps.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00077824 ____A (Microsoft Corporation) C:\Windows\System32\rascfg.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\pacer.sys

2012-07-01 08:44 - 2012-07-01 08:44 - 00061952 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\wanarp.sys

2012-07-01 08:44 - 2012-07-01 08:44 - 00061440 ____A (Microsoft Corporation) C:\Windows\System32\winipsec.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00052736 ____A (Microsoft Corporation) C:\Windows\System32\rasdiag.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00049664 ____A (Microsoft Corporation) C:\Windows\System32\ndptsp.tsp

2012-07-01 08:44 - 2012-07-01 08:44 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ndproxy.sys

2012-07-01 08:44 - 2012-07-01 08:44 - 00038400 ____A (Microsoft Corporation) C:\Windows\System32\kmddsp.tsp

2012-07-01 08:44 - 2012-07-01 08:44 - 00036864 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00033280 ____A (Microsoft Corporation) C:\Windows\System32\traffic.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00032768 ____A (Microsoft Corporation) C:\Windows\System32\rasmxs.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00028672 ____A (Microsoft Corporation) C:\Windows\System32\FwRemoteSvr.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00022016 ____A (Microsoft Corporation) C:\Windows\System32\rasser.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00020480 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ndistapi.sys

2012-07-01 08:44 - 2012-07-01 08:44 - 00015360 ____A (Microsoft Corporation) C:\Windows\System32\pacerprf.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\wshqos.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\icsunattend.exe

2012-07-01 08:44 - 2012-07-01 08:44 - 00008192 ____A (Microsoft Corporation) C:\Windows\System32\riched32.dll

2012-07-01 08:44 - 2012-07-01 08:44 - 00001820 ____A C:\Windows\System32\rasctrnm.h

2012-07-01 08:43 - 2012-07-01 08:43 - 00306688 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srv.sys

2012-07-01 08:43 - 2012-07-01 08:43 - 00241152 ____A (Microsoft Corporation) C:\Windows\System32\PortableDeviceApi.dll

2012-07-01 08:43 - 2012-07-01 08:43 - 00160768 ____A (Microsoft Corporation) C:\Windows\System32\PortableDeviceTypes.dll

2012-07-01 08:43 - 2012-07-01 08:43 - 00095232 ____A (Microsoft Corporation) C:\Windows\System32\PortableDeviceClassExtension.dll

2012-07-01 08:43 - 2012-07-01 08:43 - 00084992 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srvnet.sys

2012-07-01 08:42 - 2012-07-01 08:42 - 00213592 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys

2012-07-01 08:42 - 2012-07-01 08:42 - 00103936 ____A (Microsoft Corporation) C:\Windows\System32\netiohlp.dll

2012-07-01 08:42 - 2012-07-01 08:42 - 00027136 ____A (Microsoft Corporation) C:\Windows\System32\NETSTAT.EXE

2012-07-01 08:42 - 2012-07-01 08:42 - 00019968 ____A (Microsoft Corporation) C:\Windows\System32\ARP.EXE

2012-07-01 08:42 - 2012-07-01 08:42 - 00017920 ____A (Microsoft Corporation) C:\Windows\System32\ROUTE.EXE

2012-07-01 08:42 - 2012-07-01 08:42 - 00015360 ____A (Microsoft Corporation) C:\Windows\System32\netevent.dll

2012-07-01 08:42 - 2012-07-01 08:42 - 00011264 ____A (Microsoft Corporation) C:\Windows\System32\MRINFO.EXE

2012-07-01 08:42 - 2012-07-01 08:42 - 00010240 ____A (Microsoft Corporation) C:\Windows\System32\finger.exe

2012-07-01 08:42 - 2012-07-01 08:42 - 00009728 ____A (Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE

2012-07-01 08:42 - 2012-07-01 08:42 - 00008704 ____A (Microsoft Corporation) C:\Windows\System32\HOSTNAME.EXE

2012-07-01 08:41 - 2012-07-01 08:41 - 00704000 ____A (Microsoft Corporation) C:\Windows\System32\PhotoScreensaver.scr

2012-07-01 08:41 - 2012-07-01 08:41 - 00542720 ____A (Microsoft Corporation) C:\Windows\System32\sysmain.dll

2012-07-01 08:41 - 2012-07-01 08:41 - 00258232 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\acpi.sys

2012-07-01 08:41 - 2012-07-01 08:41 - 00024064 ____A (Microsoft Corporation) C:\Windows\System32\wtsapi32.dll

2012-07-01 08:40 - 2012-07-01 08:40 - 01657350 ____A C:\Windows\System32\wlan.tmf

2012-07-01 08:40 - 2012-07-01 08:40 - 00502272 ____A (Microsoft Corporation) C:\Windows\System32\wlansvc.dll

2012-07-01 08:40 - 2012-07-01 08:40 - 00297984 ____A (Microsoft Corporation) C:\Windows\System32\wlansec.dll

2012-07-01 08:40 - 2012-07-01 08:40 - 00290816 ____A (Microsoft Corporation) C:\Windows\System32\wlanmsm.dll

2012-07-01 08:40 - 2012-07-01 08:40 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\WebClnt.dll

2012-07-01 08:40 - 2012-07-01 08:40 - 00123904 ____A (Microsoft Corporation) C:\Windows\System32\L2SecHC.dll

2012-07-01 08:40 - 2012-07-01 08:40 - 00110080 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys

2012-07-01 08:40 - 2012-07-01 08:40 - 00067584 ____A (Microsoft Corporation) C:\Windows\System32\wlanhlp.dll

2012-07-01 08:40 - 2012-07-01 08:40 - 00047104 ____A (Microsoft Corporation) C:\Windows\System32\wlanapi.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 01406464 ____A (Microsoft Corporation) C:\Windows\System32\msxml6.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 01260032 ____A (Microsoft Corporation) C:\Windows\System32\msxml3.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 01233920 ____A (Microsoft Corporation) C:\Windows\System32\lsasrv.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 00408136 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys

2012-07-01 08:39 - 2012-07-01 08:39 - 00216576 ____A (Microsoft Corporation) C:\Windows\System32\msv1_0.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 00175104 ____A (Microsoft Corporation) C:\Windows\System32\wdigest.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 00072704 ____A (Microsoft Corporation) C:\Windows\System32\secur32.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 00007680 ____A (Microsoft Corporation) C:\Windows\System32\lsass.exe

2012-07-01 08:39 - 2012-07-01 08:39 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\msxml6r.dll

2012-07-01 08:39 - 2012-07-01 08:39 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\msxml3r.dll

2012-07-01 08:38 - 2012-07-01 08:38 - 00211968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys

2012-07-01 08:38 - 2012-07-01 08:38 - 00102400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys

2012-07-01 08:38 - 2012-07-01 08:38 - 00058368 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys

2012-07-01 08:37 - 2012-07-01 08:37 - 03502480 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe

2012-07-01 08:37 - 2012-07-01 08:37 - 03468168 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe

2012-07-01 08:37 - 2012-07-01 08:37 - 02855424 ____A (Microsoft Corporation) C:\Windows\System32\mf.dll

2012-07-01 08:37 - 2012-07-01 08:37 - 02433536 ____A (Microsoft Corporation) C:\Windows\System32\WMVCORE.DLL

2012-07-01 08:37 - 2012-07-01 08:37 - 00098816 ____A (Microsoft Corporation) C:\Windows\System32\mfps.dll

2012-07-01 08:37 - 2012-07-01 08:37 - 00052736 ____A (Microsoft Corporation) C:\Windows\System32\rrinstaller.exe

2012-07-01 08:37 - 2012-07-01 08:37 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\mfpmp.exe

2012-07-01 08:37 - 2012-07-01 08:37 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\mferror.dll

2012-07-01 08:36 - 2012-07-01 08:36 - 00434176 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll

2012-07-01 08:07 - 2012-07-01 08:07 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\mscorier.dll

2012-07-01 08:07 - 2012-07-01 08:07 - 00083968 ____A (Microsoft Corporation) C:\Windows\System32\mscories.dll

2012-07-01 07:57 - 2012-07-01 07:57 - 04247552 ____A (Microsoft) C:\Windows\System32\GameUXLegacyGDFs.dll

2012-07-01 07:57 - 2012-07-01 07:57 - 01686528 ____A (Microsoft Corporation) C:\Windows\System32\gameux.dll

2012-07-01 07:57 - 2012-07-01 07:57 - 00028672 ____A (Microsoft Corporation) C:\Windows\System32\Apphlpdm.dll

2012-07-01 07:56 - 2012-07-01 07:56 - 00996352 ____A (Microsoft Corporation) C:\Windows\System32\WMNetMgr.dll

2012-07-01 07:56 - 2012-07-01 07:56 - 00737792 ____A (Microsoft Corporation) C:\Windows\System32\inetcomm.dll

2012-07-01 07:56 - 2012-07-01 07:56 - 00094720 ____A (Microsoft Corporation) C:\Windows\System32\logagent.exe

2012-07-01 07:56 - 2012-07-01 07:56 - 00084480 ____A (Microsoft Corporation) C:\Windows\System32\INETRES.dll

2012-07-01 07:56 - 2012-07-01 07:56 - 00060928 ____A (Microsoft Corporation) C:\Windows\System32\msasn1.dll

2012-07-01 07:55 - 2012-07-01 07:55 - 01645568 ____A (Microsoft Corporation) C:\Windows\System32\connect.dll

2012-07-01 07:55 - 2012-07-01 07:55 - 00788992 ____A (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll

2012-07-01 07:55 - 2012-07-01 07:55 - 00396800 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\http.sys

2012-07-01 07:55 - 2012-07-01 07:55 - 00031232 ____A (Microsoft Corporation) C:\Windows\System32\httpapi.dll

2012-07-01 07:55 - 2012-07-01 07:55 - 00024064 ____A (Microsoft Corporation) C:\Windows\System32\nshhttp.dll

2012-07-01 07:54 - 2012-07-01 07:54 - 00130048 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srv2.sys

2012-07-01 07:53 - 2012-07-01 07:53 - 00321536 ____A (Microsoft Corporation) C:\Windows\System32\WSDApi.dll

2012-07-01 07:53 - 2012-07-01 07:53 - 00281316 ____A C:\Windows\msxml4-KB954430-enu.LOG

2012-07-01 07:53 - 2012-07-01 07:53 - 00274432 ____A (Microsoft Corporation) C:\Windows\System32\raschap.dll

2012-07-01 07:53 - 2012-07-01 07:53 - 00232960 ____A (Microsoft Corporation) C:\Windows\System32\rastls.dll

2012-07-01 07:53 - 2012-07-01 07:52 - 00288576 ____A C:\Windows\msxml4-KB973688-enu.LOG

2012-07-01 07:51 - 2012-07-01 07:51 - 10622464 ____A (Microsoft Corporation) C:\Windows\System32\wmp.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 08147968 ____A (Microsoft Corporation) C:\Windows\System32\wmploc.DLL

2012-07-01 07:51 - 2012-07-01 07:51 - 01327616 ____A (Microsoft Corporation) C:\Windows\System32\quartz.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00750080 ____A (Microsoft Corporation) C:\Windows\System32\qmgr.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00604672 ____A (Microsoft Corporation) C:\Windows\System32\WMSPDMOD.DLL

2012-07-01 07:51 - 2012-07-01 07:51 - 00311296 ____A (Microsoft Corporation) C:\Windows\System32\unregmp2.exe

2012-07-01 07:51 - 2012-07-01 07:51 - 00123904 ____A (Microsoft Corporation) C:\Windows\System32\msvfw32.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00088576 ____A (Microsoft Corporation) C:\Windows\System32\avifil32.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00082944 ____A (Microsoft Corporation) C:\Windows\System32\mciavi32.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\avicap32.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00050176 ____A (Microsoft Corporation) C:\Windows\System32\iyuv_32.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00031232 ____A (Microsoft Corporation) C:\Windows\System32\msvidc32.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00022528 ____A (Microsoft Corporation) C:\Windows\System32\msyuv.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00013312 ____A (Microsoft Corporation) C:\Windows\System32\msrle32.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00011776 ____A (Microsoft Corporation) C:\Windows\System32\tsbyuv.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00007680 ____A (Microsoft Corporation) C:\Windows\System32\spwmp.dll

2012-07-01 07:51 - 2012-07-01 07:51 - 00004096 ____A (Microsoft Corporation) C:\Windows\System32\msdxm.ocx

2012-07-01 07:51 - 2012-07-01 07:51 - 00004096 ____A (Microsoft Corporation) C:\Windows\System32\dxmasf.dll

2012-06-30 15:46 - 2012-06-30 15:46 - 00001666 ____A C:\Users\Public\Desktop\iTunes.lnk

2012-06-30 15:34 - 2012-06-30 15:34 - 00001728 ____A C:\Users\Public\Desktop\QuickTime Player.lnk

2012-06-30 15:05 - 2012-06-30 15:05 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini

2012-06-30 14:35 - 2012-06-30 14:35 - 01130824 ____A (Microsoft Corporation) C:\Windows\System32\dfshim.dll

2012-06-30 14:35 - 2012-06-30 14:35 - 00297808 ____A (Microsoft Corporation) C:\Windows\System32\mscoree.dll

2012-06-30 14:35 - 2012-06-30 14:35 - 00295264 ____A (Microsoft Corporation) C:\Windows\System32\PresentationHost.exe

2012-06-30 14:35 - 2012-06-30 14:35 - 00099176 ____A (Microsoft Corporation) C:\Windows\System32\PresentationHostProxy.dll

2012-06-30 14:35 - 2012-06-30 14:35 - 00049472 ____A (Microsoft Corporation) C:\Windows\System32\netfxperf.dll

2012-06-30 13:46 - 2012-06-30 13:46 - 00001878 ____A C:\Users\Public\Desktop\Skype.lnk

2012-06-30 13:44 - 2012-06-30 13:44 - 00000788 ____A C:\Users\Public\Desktop\Steam.lnk

2012-06-30 13:32 - 2012-06-30 13:32 - 00000848 ____A C:\Users\Public\Desktop\Mozilla Firefox.lnk

2012-06-30 00:20 - 2012-06-30 00:20 - 00000020 ___SH C:\Users\Jon\ntuser.ini

2012-06-25 10:00 - 2012-06-30 14:30 - 00079872 ____A C:\Windows\System32\ff_vfw.dll

2012-06-22 15:32 - 2012-07-07 21:55 - 00405144 ____A (Newtonsoft) C:\Windows\System32\Newtonsoft.Json.Net20.dll

2012-06-09 09:21 - 2012-06-30 14:30 - 00178688 ____A C:\Windows\System32\unrar.dll

2012-05-21 13:48 - 2012-06-30 14:30 - 00000415 ____A C:\Windows\System32\lame_acm.xml

2012-05-15 02:26 - 2012-06-30 15:03 - 00061248 ____A (Khronos Group) C:\Windows\System32\OpenCL.dll

2012-05-15 02:26 - 2012-06-30 15:00 - 19607872 ____A (NVIDIA Corporation) C:\Windows\System32\nvoglv32.dll

2012-05-15 02:26 - 2012-06-30 14:59 - 17551680 ____A (NVIDIA Corporation) C:\Windows\System32\nvcompiler.dll

2012-05-15 02:26 - 2012-06-30 14:59 - 11354944 ____A (NVIDIA Corporation) C:\Windows\System32\Drivers\nvlddmkm.sys

2012-05-15 02:26 - 2012-06-30 14:59 - 05982528 ____A (NVIDIA Corporation) C:\Windows\System32\nvcuda.dll

2012-05-15 02:26 - 2012-06-30 14:59 - 02524992 ____A (NVIDIA Corporation) C:\Windows\System32\nvcuvid.dll

2012-05-15 02:26 - 2012-06-30 14:59 - 02445120 ____A (NVIDIA Corporation) C:\Windows\System32\nvcuvenc.dll

2012-05-15 02:26 - 2012-06-30 14:59 - 01000768 ____A (NVIDIA Corporation) C:\Windows\System32\nvdispco32.dll

2012-05-15 02:26 - 2012-06-30 14:59 - 00883008 ____A (NVIDIA Corporation) C:\Windows\System32\nvgenco32.dll

2012-05-15 02:26 - 2012-06-30 14:59 - 00011190 ____A C:\Windows\System32\nvinfo.pb

2012-05-15 02:26 - 2007-11-02 07:18 - 15322432 ____A (NVIDIA Corporation) C:\Windows\System32\nvd3dum.dll

2012-05-15 02:26 - 2007-11-02 07:18 - 02368832 ____A (NVIDIA Corporation) C:\Windows\System32\nvapi.dll

2012-05-15 01:28 - 2012-06-30 15:04 - 00645440 ____A (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

2012-05-15 01:28 - 2012-06-30 15:04 - 00062272 ____A (NVIDIA Corporation) C:\Windows\System32\nvshext.dll

2012-05-15 01:28 - 2007-11-02 07:18 - 03931456 ____A (NVIDIA Corporation) C:\Windows\System32\nvcpl.dll

2012-05-15 01:28 - 2007-11-02 07:18 - 00108352 ____A (NVIDIA Corporation) C:\Windows\System32\nvmctray.dll

2012-05-15 01:27 - 2007-11-02 07:18 - 02759488 ____A (NVIDIA Corporation) C:\Windows\System32\nvsvc.dll

2012-05-04 18:29 - 2012-07-01 22:38 - 00772504 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll

2012-05-04 18:29 - 2012-07-01 22:38 - 00687504 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll

2012-05-04 18:29 - 2012-07-01 22:38 - 00227720 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe

2012-04-25 11:11 - 2012-04-25 11:11 - 04547944 ____A (Apple, Inc.) C:\Windows\System32\usbaaplrc.dll

2012-04-25 11:11 - 2012-04-25 11:11 - 00043520 ____A (Apple, Inc.) C:\Windows\System32\Drivers\usbaapl.sys

ZeroAccess:

C:\Windows\Installer\{8493e406-45c9-5c3c-512a-105670ad2aec}

C:\Windows\Installer\{8493e406-45c9-5c3c-512a-105670ad2aec}\@

C:\Windows\Installer\{8493e406-45c9-5c3c-512a-105670ad2aec}\L

C:\Windows\Installer\{8493e406-45c9-5c3c-512a-105670ad2aec}\U

C:\Windows\Installer\{8493e406-45c9-5c3c-512a-105670ad2aec}\U\00000001.@

C:\Windows\Installer\{8493e406-45c9-5c3c-512a-105670ad2aec}\U\80000000.@

C:\Windows\Installer\{8493e406-45c9-5c3c-512a-105670ad2aec}\U\800000cb.@

ZeroAccess:

C:\Users\Jon\AppData\Local\{8493e406-45c9-5c3c-512a-105670ad2aec}

C:\Users\Jon\AppData\Local\{8493e406-45c9-5c3c-512a-105670ad2aec}\@

C:\Users\Jon\AppData\Local\{8493e406-45c9-5c3c-512a-105670ad2aec}\L

C:\Users\Jon\AppData\Local\{8493e406-45c9-5c3c-512a-105670ad2aec}\U

========================= Known DLLs (Whitelisted) ============

========================= Bamital & volsnap Check ============

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe

[2006-11-02 00:35] - [2006-11-02 01:45] - 0279552 ____A (Microsoft Corporation) A246A7052A70C2E1BE4F7E54DF31E4DF

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK

HKLM\...\exefile\DefaultIcon: %1 => OK

HKLM\...\exefile\open\command: "%1" %* => OK

========================= Memory info ======================

Percentage of memory in use: 13%

Total physical RAM: 1981.88 MB

Available physical RAM: 1722.93 MB

Total Pagefile: 1915.61 MB

Available Pagefile: 1772.39 MB

Total Virtual: 2047.88 MB

Available Virtual: 1982.35 MB

======================= Partitions =========================

1 Drive c: (OS) (Fixed) (Total:222.79 GB) (Free:112.42 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

2 Drive d: () (Removable) (Total:0.94 GB) (Free:0.14 GB) FAT

4 Drive x: (RECOVERY) (Fixed) (Total:10 GB) (Free:6.08 GB) NTFS

Disk ### Status Size Free Dyn Gpt

-------- ---------- ------- ------- --- ---

Disk 0 Online 233 GB 41 MB

Disk 1 Online 960 MB 0 B

Partitions of Disk 0:

===============

Partition ### Type Size Offset

------------- ---------------- ------- -------

Partition 1 OEM 10 GB 40 MB

Partition 2 Primary 223 GB 10 GB

==================================================================================

Disk: 0

Partition 1

Type : DE

Hidden: Yes

Active: No

Volume ### Ltr Label Fs Type Size Status Info

---------- --- ----------- ----- ---------- ------- --------- --------

* Volume 3 X RECOVERY NTFS Partition 10 GB Healthy Hidden

==================================================================================

Disk: 0

Partition 2

Type : 07

Hidden: No

Active: Yes

Volume ### Ltr Label Fs Type Size Status Info

---------- --- ----------- ----- ---------- ------- --------- --------

* Volume 0 C OS NTFS Partition 223 GB Healthy

==================================================================================

Partitions of Disk 1:

===============

Partition ### Type Size Offset

------------- ---------------- ------- -------

Partition 1 Primary 960 MB 16 KB

==================================================================================

Disk: 1

Partition 1

Type : 06

Hidden: No

Active: Yes

Volume ### Ltr Label Fs Type Size Status Info

---------- --- ----------- ----- ---------- ------- --------- --------

* Volume 2 D FAT Removable 960 MB Healthy

==================================================================================

==========================================================

Last Boot: 2012-07-23 10:41

======================= End Of Log ==========================

Here's the search one:

Farbar Recovery Scan Tool Version: 20-07-2012 01

Ran by SYSTEM at 2012-07-23 15:05:25

Running from E:\

================== Search: "services.exe" ===================

C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6000.16386_none_cd28fe6bd05df036\services.exe

[2006-11-02 00:35] - [2006-11-02 01:45] - 0279552 ____A (Microsoft Corporation) 329CF3C97CE4C19375C8ABCABAE258B0

C:\Windows\System32\services.exe

[2006-11-02 00:35] - [2006-11-02 01:45] - 0279552 ____A (Microsoft Corporation) 329CF3C97CE4C19375C8ABCABAE258B0

=== End Of Search ===

Link to post
Share on other sites

Malawarebytes has also finished the log:

Malwarebytes Anti-Malware (Trial) 1.62.0.1300

www.malwarebytes.org

Database version: v2012.07.22.08

Windows Vista x86 NTFS

Internet Explorer 7.0.6000.16982

Jon :: JON-PC [administrator]

Protection: Enabled

7/23/2012 12:27:57 PM

mbam-log-2012-07-23 (14-24-47).txt

Scan type: Full scan (C:\|)

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 349135

Time elapsed: 1 hour(s), 55 minute(s), 16 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 1

C:\Windows\Installer\{8493e406-45c9-5c3c-512a-105670ad2aec}\U\800000cb.@ (Rootkit.0Access) -> No action taken.

(end)

(Note: I did take action but it came back again)

Link to post
Share on other sites

OK, here you go......Please carefully carry out this procedure!!!!!!

Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it on the flashdrive as fixlist.txt


C:\Windows\Installer\{8493e406-45c9-5c3c-512a-105670ad2aec}
C:\Users\Jon\AppData\Local\{8493e406-45c9-5c3c-512a-105670ad2aec}
Replace: C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6000.16386_none_cd28fe6bd05df036\services.exe C:\Windows\System32\services.exe

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

On Vista or Windows 7: Now please enter System Recovery Options.

Run FRST64 or FRST (which ever one you're using) and press the Fix button just once and wait.

The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.

MrC

Link to post
Share on other sites

here's the fixlog:

Fix result of Farbar Recovery Tool (FRST written by Farbar) Version: 20-07-2012 01

Ran by SYSTEM at 2012-07-23 16:49:20 Run:1

Running from D:\

==============================================

C:\Windows\Installer\{8493e406-45c9-5c3c-512a-105670ad2aec} moved successfully.

C:\Users\Jon\AppData\Local\{8493e406-45c9-5c3c-512a-105670ad2aec} moved successfully.

C:\Windows\System32\services.exe moved successfully.

C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6000.16386_none_cd28fe6bd05df036\services.exe copied successfully to C:\Windows\System32\services.exe

==== End of Fixlog ====

Link to post
Share on other sites

Well Done.....lets run ComboFix to cleanup any other malware.......

Please download and run ComboFix.

The most important things to remember when running it is to disable all your malware programs and run Combofix from your desktop.

Please visit this webpage for download links, and instructions for running ComboFix

http://www.bleepingc...to-use-combofix

Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Information on disabling your malware programs can be found Here.

Make sure you run ComboFix from your desktop.

Give it at least 30-45 minutes to finish if needed.

Please include the C:\ComboFix.txt in your next reply for further review.

---------->NOTE<----------

If you get the message Illegal operation attempted on registry key that has been marked for deletion after you run ComboFix....please reboot the computer, this should resolve the problem. You may have to do this several times if needed.

MrC

Link to post
Share on other sites

First time I used combofix it was fine, but I forgot to save the log and turn off my firewall, so I restarted my computer and now ComboFix won't even start. It says this:

C:\Users\Jon\Desktop\ComboFix.exe

The directory name is invalid

I'm not sure what the problem is, any idea how to get it to work again? I've tried restarting my computer several times.

Link to post
Share on other sites

To uninstall ComboFix.....

Press the Windows logo key + R to bring up the "run box"

Copy and paste next command in the field:

ComboFix /uninstall

Make sure there's a space between Combofix and /

cf2.jpg

or rename it to Uninstall.exe and double click it.

MrC

Link to post
Share on other sites

yeah it won't uninstall for some reason either, it just says the directory is invalid.

Is it really a big deal if it stays in my computer? Just wondering.

Combofix worked all it's process and everything, I just forgot to save the log, sorry about that.

Link to post
Share on other sites

Oh wow, I don't see combofix.exe in here, but it seems to have all its' folders and stuff.

Doesn't seem to have the log either, but it has "Combo-fix quarantined files", it's just three things. Not sure if they matter but I'll post it here:

2012-07-24 01:58:44 . 2012-07-24 01:58:44 6,677 ----a-w- C:\Qoobox\Quarantine\Registry_backups\tcpip.reg

2012-07-24 01:49:58 . 2012-07-24 01:52:48 62 ----a-w- C:\Qoobox\Quarantine\catchme.log

2008-04-11 15:03:48 . 2008-04-11 15:03:48 562,688 ----a-w- C:\Qoobox\Quarantine\C\install.exe.vir

Also, do I just delete everything in here? At the moment I'm just leaving it alone though.

Link to post
Share on other sites

Here's the log:

Malwarebytes Anti-Malware (Trial) 1.62.0.1300

www.malwarebytes.org

Database version: v2012.07.24.11

Windows Vista x86 NTFS

Internet Explorer 7.0.6000.16982

Jon :: JON-PC [administrator]

Protection: Enabled

7/24/2012 3:05:27 PM

mbam-log-2012-07-24 (15-05-27).txt

Scan type: Full scan (C:\|)

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 346983

Time elapsed: 1 hour(s), 21 minute(s), 23 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 1

C:\FRST\Quarantine\{8493e406-45c9-5c3c-512a-105670ad2aec}\U\800000cb.@ (Rootkit.0Access) -> Quarantined and deleted successfully.

(end)

(sorry did a full scan xD)

Oh and the computer is running fine, I don't have the problem anymore of the rootkit playing random ads, so I'm assuming it's gone

Link to post
Share on other sites

Great thumbsup.gif

A little clean up to do....

Please Uninstall ComboFix: (if you used it)

Press the Windows logo key + R to bring up the "run box"

Copy and paste next command in the field:

ComboFix /uninstall

Make sure there's a space between Combofix and /

cf2.jpg

Then hit enter.

This will uninstall Combofix, delete its related folders and files, hide file extensions, hide the system/hidden files and clears System Restore cache and create new Restore point

---------------------------------

Please download OTL from one of the links below: (you may already have OTL on the system)

http://oldtimer.geekstogo.com/OTL.exe

http://oldtimer.geekstogo.com/OTL.com

Save it to your desktop.

Run OTL and hit the CleanUp button. (This will cleanup the tools and logs used including itself)

Any other programs or logs you can manually delete.

IE: RogueKiller.exe, RKreport.txt, RK_Quarantine folder, etc....

-------------------------------

Any questions...please post back.

If you think I've helped you, please leave a comment > click on my avatar picture > click Profile Feed.

Take a look at My Preventive Maintenance to avoid being infected again.

Good Luck and Thanks for using the forum, MrC

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.