API tools faq
paste
Guest User

Untitled

a guest
Sep 23rd, 2012
203
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 168.52 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 9/23/2012 12:24:13 PM - Run 1
  2. OTL by OldTimer - Version 3.2.66.0 Folder = C:\Users\Dipanshu\Desktop
  3. 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.0.8112.16421)
  5. Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
  6.  
  7. 3.93 Gb Total Physical Memory | 2.40 Gb Available Physical Memory | 60.94% Memory free
  8. 7.87 Gb Paging File | 6.33 Gb Available in Paging File | 80.47% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 451.07 Gb Total Space | 242.25 Gb Free Space | 53.70% Space Free | Partition Type: NTFS
  13.  
  14. Computer Name: DIPANSHU-PC | User Name: Dipanshu | Logged in as Administrator.
  15. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  16. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days
  17.  
  18. [color=#E56717]========== Processes (SafeList) ==========[/color]
  19.  
  20. PRC - [2012/09/23 11:54:51 | 000,601,600 | ---- | M] (OldTimer Tools) -- C:\Users\Dipanshu\Desktop\OTL.scr
  21. PRC - [2011/12/05 21:11:32 | 000,247,968 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil11e_ActiveX.exe
  22. PRC - [2011/06/15 17:33:20 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
  23. PRC - [2010/10/08 10:01:14 | 000,010,408 | ---- | M] (Microsoft) -- C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifierService.exe
  24. PRC - [2009/09/17 23:10:26 | 000,335,600 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
  25. PRC - [2009/09/17 12:06:00 | 000,410,864 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\STService.exe
  26. PRC - [2009/07/05 14:12:26 | 000,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
  27. PRC - [2009/06/24 15:21:38 | 000,409,744 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
  28. PRC - [2009/05/21 07:59:08 | 000,206,064 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
  29. PRC - [2007/09/11 00:43:54 | 000,067,488 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\apdproxy.exe
  30.  
  31.  
  32. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  33.  
  34. MOD - [2012/06/14 19:29:38 | 014,325,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\517358eb2fd962a942dd1ea6afc5b93e\PresentationFramework.ni.dll
  35. MOD - [2012/06/14 19:29:20 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\009c50fb69919b90fb233cb4c35d0ad7\System.Windows.Forms.ni.dll
  36. MOD - [2012/06/14 19:29:12 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\ebefde27b0ef7f39bb49c493b34a602c\System.Drawing.ni.dll
  37. MOD - [2012/06/14 19:28:52 | 012,218,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\e9d0ba41128f363f2390c7e630129c2b\PresentationCore.ni.dll
  38. MOD - [2012/05/12 03:37:35 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\fc626095c194be137bceb219934b06a7\PresentationFramework.Aero.ni.dll
  39. MOD - [2012/05/12 03:36:29 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\b68fdf2c95b93fc5006a092c11eed07c\WindowsBase.ni.dll
  40. MOD - [2012/05/12 03:36:23 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5c85c9c42e1b8a8760de82ecb4c7d582\System.Xml.ni.dll
  41. MOD - [2012/05/12 03:36:20 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cb079eab134fd1a752ad91db13274110\System.Configuration.ni.dll
  42. MOD - [2012/05/12 03:36:19 | 007,952,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\2ebb3c259eab50af565e3a8dba6ad20e\System.ni.dll
  43. MOD - [2012/05/12 03:36:09 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\5858678a79aae31262b0214424245d06\mscorlib.ni.dll
  44. MOD - [2009/09/17 12:06:00 | 000,410,864 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\STService.exe
  45. MOD - [2009/09/17 12:05:00 | 000,234,736 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\STFiles.dll
  46. MOD - [2009/09/17 12:05:00 | 000,128,240 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\STLog.dll
  47. MOD - [2009/09/17 12:05:00 | 000,121,072 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\STNLS.dll
  48. MOD - [2009/09/17 12:05:00 | 000,111,856 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\STPE.dll
  49. MOD - [2009/09/17 12:05:00 | 000,079,088 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\zlib1.dll
  50. MOD - [2009/09/17 12:05:00 | 000,074,992 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\STRegistry.dll
  51. MOD - [2009/09/17 12:05:00 | 000,025,840 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\STBRCCServCLR.dll
  52. MOD - [2009/09/17 12:05:00 | 000,025,840 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\SftBRCCPiped.dll
  53. MOD - [2009/09/17 12:05:00 | 000,025,840 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\SftBRCC.dll
  54. MOD - [2009/09/17 12:04:00 | 001,123,568 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\libxml2.dll
  55. MOD - [2009/09/17 12:04:00 | 000,115,952 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\PSTVdsDisk.dll
  56.  
  57.  
  58. [color=#E56717]========== Services (SafeList) ==========[/color]
  59.  
  60. SRV:[b]64bit:[/b] - [2011/08/06 23:31:50 | 000,276,248 | ---- | M] (Quick Heal Technologies (P) Ltd.) [Auto | Running] -- C:\Program Files\Quick Heal\Quick Heal Total Security\SCANWSCS.EXE -- (ScanWscS)
  61. SRV:[b]64bit:[/b] - [2011/08/06 23:31:50 | 000,254,920 | ---- | M] (Quick Heal Technologies (P) Ltd.) [Auto | Stopped] -- C:\Program Files\Quick Heal\Quick Heal Total Security\SAPISSVC.EXE -- (Core Scanning ServerEx)
  62. SRV:[b]64bit:[/b] - [2011/08/06 23:31:50 | 000,254,920 | ---- | M] (Quick Heal Technologies (P) Ltd.) [Auto | Running] -- C:\Program Files\Quick Heal\Quick Heal Total Security\SAPISSVC.EXE -- (Core Scanning Server)
  63. SRV:[b]64bit:[/b] - [2011/08/06 23:31:50 | 000,110,024 | ---- | M] (Quick Heal Technologies (P) Ltd.) [Auto | Running] -- C:\Program Files\Quick Heal\Quick Heal Total Security\QUHLPSVC.EXE -- (Quick Update Service)
  64. SRV:[b]64bit:[/b] - [2011/08/06 23:31:50 | 000,038,856 | ---- | M] (Quick Heal Technologies (P) Ltd.) [Auto | Running] -- C:\Program Files\Quick Heal\Quick Heal Total Security\EMLPROXY.EXE -- (Core Mail Protection)
  65. SRV:[b]64bit:[/b] - [2011/08/06 23:31:50 | 000,030,152 | ---- | M] (Quick Heal Technologies (P) Ltd.) [Auto | Running] -- C:\Program Files\Quick Heal\Quick Heal Total Security\OPSSVC.EXE -- (Online Protection System)
  66. SRV:[b]64bit:[/b] - [2009/07/13 18:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  67. SRV:[b]64bit:[/b] - [2009/07/01 17:54:02 | 000,864,032 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)
  68. SRV:[b]64bit:[/b] - [2009/06/28 21:44:38 | 000,240,128 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\stacsv64.exe -- (STacSV)
  69. SRV:[b]64bit:[/b] - [2009/06/09 09:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) [Disabled | Stopped] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService)
  70. SRV - [2012/09/05 18:26:40 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  71. SRV - [2012/07/13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  72. SRV - [2011/07/07 19:31:08 | 000,195,336 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
  73. SRV - [2011/06/15 17:33:20 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (BBUpdate)
  74. SRV - [2010/11/05 15:24:11 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
  75. SRV - [2010/10/11 00:28:12 | 000,135,168 | ---- | M] () [Disabled | Stopped] -- C:\Windows\SysWOW64\ChgService.exe -- (Change Modem Device Service)
  76. SRV - [2010/10/08 10:01:14 | 000,010,408 | ---- | M] (Microsoft) [Auto | Running] -- C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifierService.exe -- (AbsoluteNotifier)
  77. SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  78. SRV - [2009/12/05 03:30:19 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)
  79. SRV - [2009/12/05 03:29:31 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
  80. SRV - [2009/12/05 03:28:34 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe -- (Sound Blaster X-Fi MB Licensing Service)
  81. SRV - [2009/12/05 03:13:31 | 000,016,680 | ---- | M] (Citrix Online, a division of Citrix Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe -- (GoToAssist)
  82. SRV - [2009/09/17 12:05:00 | 000,656,624 | ---- | M] (SoftThinks) [Disabled | Stopped] -- C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe -- (SftService)
  83. SRV - [2009/07/05 14:12:26 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
  84. SRV - [2009/06/28 21:44:38 | 000,240,128 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe -- (STacSV)
  85. SRV - [2009/06/10 14:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  86. SRV - [2009/05/21 07:59:08 | 000,206,064 | ---- | M] (SupportSoft, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe -- (sprtsvc_DellSupportCenter)
  87. SRV - [2007/09/11 00:45:04 | 000,124,832 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor6.0)
  88.  
  89.  
  90. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  91.  
  92. DRV:[b]64bit:[/b] - [2012/08/12 20:59:24 | 000,112,248 | ---- | M] (Quick Heal Technologies (P) Ltd.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\wstif.sys -- (wstif)
  93. DRV:[b]64bit:[/b] - [2012/02/29 23:54:38 | 000,022,896 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  94. DRV:[b]64bit:[/b] - [2011/08/06 23:31:52 | 000,049,784 | ---- | M] (Quick Heal Technologies (P) Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wsnf.sys -- (wsnfmp)
  95. DRV:[b]64bit:[/b] - [2011/08/06 23:31:52 | 000,049,784 | ---- | M] (Quick Heal Technologies (P) Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wsnf.sys -- (wsnf)
  96. DRV:[b]64bit:[/b] - [2011/08/06 23:31:50 | 000,049,272 | ---- | M] (Quick Heal Technologies (P) Ltd.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\catflt.sys -- (catflt)
  97. DRV:[b]64bit:[/b] - [2011/08/06 23:31:50 | 000,040,056 | ---- | M] (Quick Heal Technologies (P) Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mscank64.sys -- (mscank)
  98. DRV:[b]64bit:[/b] - [2011/08/06 23:31:50 | 000,018,552 | ---- | M] (Quick Heal Technologies (P) Ltd.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\EMLTDI.SYS -- (EMLSS)
  99. DRV:[b]64bit:[/b] - [2011/07/29 13:41:52 | 000,064,120 | ---- | M] (Quick Heal Technologies (P) Ltd.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\ggc.sys -- (ggc)
  100. DRV:[b]64bit:[/b] - [2011/03/10 23:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  101. DRV:[b]64bit:[/b] - [2011/03/10 23:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  102. DRV:[b]64bit:[/b] - [2010/09/28 16:44:52 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
  103. DRV:[b]64bit:[/b] - [2010/08/25 20:36:04 | 010,611,552 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  104. DRV:[b]64bit:[/b] - [2010/02/25 05:55:24 | 000,126,080 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cmnsusbser.sys -- (cmnsusbser)
  105. DRV:[b]64bit:[/b] - [2009/07/13 18:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  106. DRV:[b]64bit:[/b] - [2009/07/13 18:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  107. DRV:[b]64bit:[/b] - [2009/07/13 18:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  108. DRV:[b]64bit:[/b] - [2009/07/13 18:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  109. DRV:[b]64bit:[/b] - [2009/07/13 16:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  110. DRV:[b]64bit:[/b] - [2009/07/09 03:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
  111. DRV:[b]64bit:[/b] - [2009/07/02 07:41:04 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
  112. DRV:[b]64bit:[/b] - [2009/07/02 07:41:04 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
  113. DRV:[b]64bit:[/b] - [2009/07/02 07:41:04 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)
  114. DRV:[b]64bit:[/b] - [2009/07/02 07:41:02 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
  115. DRV:[b]64bit:[/b] - [2009/06/28 21:44:38 | 000,487,424 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
  116. DRV:[b]64bit:[/b] - [2009/06/25 21:23:30 | 000,272,432 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  117. DRV:[b]64bit:[/b] - [2009/06/25 02:04:20 | 000,067,584 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimmpx64.sys -- (rimmptsk)
  118. DRV:[b]64bit:[/b] - [2009/06/25 01:38:52 | 000,057,856 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rixdpx64.sys -- (rismxdp)
  119. DRV:[b]64bit:[/b] - [2009/06/25 01:13:44 | 000,055,296 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimspx64.sys -- (rimsptsk)
  120. DRV:[b]64bit:[/b] - [2009/06/15 12:06:42 | 000,172,704 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)
  121. DRV:[b]64bit:[/b] - [2009/06/10 13:34:36 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a)
  122. DRV:[b]64bit:[/b] - [2009/06/10 13:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  123. DRV:[b]64bit:[/b] - [2009/06/10 13:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  124. DRV:[b]64bit:[/b] - [2009/06/10 13:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  125. DRV:[b]64bit:[/b] - [2009/06/10 13:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  126. DRV:[b]64bit:[/b] - [2009/05/25 13:13:10 | 000,138,752 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcHdmi.sys -- (IntcHdmiAddService)
  127. DRV:[b]64bit:[/b] - [2009/05/18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
  128. DRV:[b]64bit:[/b] - [2009/05/13 17:51:40 | 005,435,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETw5v64.sys -- (NETw5v64)
  129. DRV:[b]64bit:[/b] - [2008/07/23 23:34:34 | 000,115,328 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard)
  130. DRV:[b]64bit:[/b] - [2006/11/01 11:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
  131. DRV - [2009/07/13 18:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  132.  
  133.  
  134. [color=#E56717]========== Standard Registry (All) ==========[/color]
  135.  
  136.  
  137. [color=#E56717]========== Internet Explorer ==========[/color]
  138.  
  139. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  140. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  141. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
  142. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
  143. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
  144. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  145. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
  146. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  147. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {EB57CBB0-137C-475A-BF17-7FEB09B22AA6}
  148. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{EB57CBB0-137C-475A-BF17-7FEB09B22AA6}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
  149. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  150. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  151. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
  152. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
  153. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  154. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  155. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
  156. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  157. IE - HKLM\..\SearchScopes,DefaultScope = {2ED1E266-8645-4279-A68A-1A32B6C801F6}
  158. IE - HKLM\..\SearchScopes\{2ED1E266-8645-4279-A68A-1A32B6C801F6}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
  159.  
  160.  
  161. IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {2ED1E266-8645-4279-A68A-1A32B6C801F6}
  162. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  163.  
  164. IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {2ED1E266-8645-4279-A68A-1A32B6C801F6}
  165. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  166.  
  167. IE - HKU\S-1-5-19\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
  168.  
  169. IE - HKU\S-1-5-20\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
  170.  
  171. IE - HKU\S-1-5-21-2590862872-1370631997-422254541-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
  172. IE - HKU\S-1-5-21-2590862872-1370631997-422254541-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
  173. IE - HKU\S-1-5-21-2590862872-1370631997-422254541-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  174. IE - HKU\S-1-5-21-2590862872-1370631997-422254541-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/USCON/1
  175. IE - HKU\S-1-5-21-2590862872-1370631997-422254541-1000\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
  176. IE - HKU\S-1-5-21-2590862872-1370631997-422254541-1000\..\SearchScopes,DefaultScope = {2ED1E266-8645-4279-A68A-1A32B6C801F6}
  177. IE - HKU\S-1-5-21-2590862872-1370631997-422254541-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  178. IE - HKU\S-1-5-21-2590862872-1370631997-422254541-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  179.  
  180. [color=#E56717]========== FireFox ==========[/color]
  181.  
  182. FF - prefs.js..extensions.enabledAddons: {972ce4c6-7e08-4474-a285-3208198ce6fd}:15.0.1
  183. FF - user.js - File not found
  184.  
  185. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  186. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
  187. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
  188. FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
  189. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
  190. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  191. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
  192. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  193. FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
  194. FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.448: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
  195. FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
  196. FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
  197. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
  198. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
  199. FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Dipanshu\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
  200. FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Dipanshu\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
  201. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Dipanshu\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
  202. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Dipanshu\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
  203.  
  204. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/09/19 20:30:14 | 000,000,000 | ---D | M]
  205. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/09/19 20:46:49 | 000,000,000 | ---D | M]
  206.  
  207. [2012/09/19 20:30:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dipanshu\AppData\Roaming\Mozilla\Extensions
  208. [2012/09/19 20:30:14 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
  209. [2012/09/19 20:30:14 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  210. [2012/09/05 18:27:05 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
  211. [2007/04/10 17:21:08 | 000,163,256 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll
  212. [2012/09/05 18:26:22 | 000,001,607 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom.xml
  213. [2012/09/05 18:26:22 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
  214. [2012/09/05 18:26:22 | 000,001,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay.xml
  215. [2012/09/05 18:26:22 | 000,003,581 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\google.xml
  216. [2012/09/05 18:26:22 | 000,002,253 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
  217. [2012/09/05 18:26:22 | 000,001,391 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia.xml
  218. [2012/09/05 18:26:22 | 000,001,309 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo.xml
  219.  
  220. [color=#E56717]========== Chrome ==========[/color]
  221.  
  222. CHR - homepage:
  223. CHR - default_search_provider: Google (Enabled)
  224. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
  225. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
  226. CHR - homepage:
  227. CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Dipanshu\AppData\Local\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll
  228. CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Dipanshu\AppData\Local\Google\Chrome\Application\21.0.1180.89\gcswf32.dll
  229. CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
  230. CHR - plugin: Native Client (Enabled) = C:\Users\Dipanshu\AppData\Local\Google\Chrome\Application\21.0.1180.89\ppGoogleNaClPluginChrome.dll
  231. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Dipanshu\AppData\Local\Google\Chrome\Application\21.0.1180.89\pdf.dll
  232. CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
  233. CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
  234. CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
  235. CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
  236. CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
  237. CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
  238. CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
  239. CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
  240. CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
  241. CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
  242. CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Dipanshu\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
  243. CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Dipanshu\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
  244. CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
  245. CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
  246. CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll
  247. CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll
  248. CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll
  249. CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
  250. CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
  251. CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
  252.  
  253. Hosts file not found
  254. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
  255. O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
  256. O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
  257. O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
  258. O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
  259. O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
  260. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
  261. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  262. O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
  263. O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
  264. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  265. O3 - HKU\S-1-5-21-2590862872-1370631997-422254541-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
  266. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
  267. O4:[b]64bit:[/b] - HKLM..\Run: [Quick Heal Core UI] C:\Program Files\Quick Heal\Quick Heal Total Security\strtupap.exe (Quick Heal Technologies (P) Ltd.)
  268. O4:[b]64bit:[/b] - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
  269. O4:[b]64bit:[/b] - HKLM..\Run: [RunDLLEntry] C:\Windows\SysNative\AmbRunE.DLL (Creative Technology Ltd.)
  270. O4:[b]64bit:[/b] - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated)
  271. O4:[b]64bit:[/b] - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
  272. O4 - HKLM..\Run: [Absolute Notifier] C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifier.exe (Absolute Software)
  273. O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\apdproxy.exe (Adobe Systems Incorporated)
  274. O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
  275. O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
  276. O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
  277. O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
  278. O4 - HKLM..\Run: [VolPanel] C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
  279. O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  280. O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  281. O4 - HKLM..\RunOnce: [Launcher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe (Softthinks)
  282. O4 - HKLM..\RunOnce: [STToasterLauncher] C:\Program Files (x86)\Dell DataSafe Local Backup\ToasterLauncher.exe ()
  283. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  284. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  285. O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
  286. O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
  287. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  288. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  289. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
  290. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  291. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  292. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
  293. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
  294. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
  295. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
  296. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
  297. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
  298. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
  299. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
  300. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
  301. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
  302. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
  303. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
  304. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
  305. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
  306. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
  307. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
  308. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
  309. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
  310. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
  311. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
  312. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
  313. O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
  314. O8:[b]64bit:[/b] - Extra context menu item: Send image to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
  315. O8:[b]64bit:[/b] - Extra context menu item: Send page to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
  316. O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
  317. O8 - Extra context menu item: Send image to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
  318. O8 - Extra context menu item: Send page to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
  319. O9:[b]64bit:[/b] - Extra Button: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
  320. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
  321. O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
  322. O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
  323. O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
  324. O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
  325. O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
  326. O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
  327. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
  328. O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
  329. O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
  330. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative\nlaapi.dll (Microsoft Corporation)
  331. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  332. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation)
  333. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation)
  334. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
  335. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
  336. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Windows\SysNative\wshbth.dll (Microsoft Corporation)
  337. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  338. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  339. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  340. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  341. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  342. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  343. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  344. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  345. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  346. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  347. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  348. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000011 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  349. O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation)
  350. O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  351. O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation)
  352. O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation)
  353. O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
  354. O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
  355. O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysWOW64\wshbth.dll (Microsoft Corporation)
  356. O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  357. O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  358. O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  359. O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  360. O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  361. O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  362. O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  363. O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  364. O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  365. O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  366. O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  367. O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  368. O13[b]64bit:[/b] - gopher Prefix: missing
  369. O13 - gopher Prefix: missing
  370. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
  371. O16 - DPF: {2AB1C516-D654-4D3A-B3D6-2185BBCEB409} https://cvpn.uhc.com/+CSCOL+/relayp.cab (Cisco Systems WebVPN Relay Loader)
  372. O16 - DPF: {3D3B42C2-11BF-4732-A304-A01384B70D68} http://picasaweb.google.com/s/v/58.14/uploader2.cab (UploadListView Class)
  373. O16 - DPF: {700EF03F-A472-4D26-8ACB-300F4D04FD96} https://lojackforlaptops.absolute.com/ctmweb/testoc.cab (Recovery ActiveX Control Module)
  374. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
  375. O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
  376. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
  377. O16 - DPF: {E34F52FE-7769-46CE-8F8B-5E8ABAD2E9FC} https://cvpn.uhc.com/CACHE/sdesktop/install/binaries/instweb.cab (CSD ActiveX Installer)
  378. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.18.47.61 209.18.47.62
  379. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{827809C9-B783-4B67-8EE2-ACAB867C1DD2}: DhcpNameServer = 209.18.47.61 209.18.47.62
  380. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{827809C9-B783-4B67-8EE2-ACAB867C1DD2}: NameServer = 8.8.8.8,8.8.4.4
  381. O18:[b]64bit:[/b] - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  382. O18:[b]64bit:[/b] - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  383. O18:[b]64bit:[/b] - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
  384. O18:[b]64bit:[/b] - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  385. O18:[b]64bit:[/b] - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  386. O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
  387. O18:[b]64bit:[/b] - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  388. O18:[b]64bit:[/b] - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  389. O18:[b]64bit:[/b] - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
  390. O18:[b]64bit:[/b] - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  391. O18:[b]64bit:[/b] - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  392. O18:[b]64bit:[/b] - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  393. O18:[b]64bit:[/b] - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysNative\inetcomm.dll (Microsoft Corporation)
  394. O18:[b]64bit:[/b] - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  395. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  396. O18:[b]64bit:[/b] - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
  397. O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found
  398. O18:[b]64bit:[/b] - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  399. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  400. O18:[b]64bit:[/b] - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
  401. O18:[b]64bit:[/b] - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  402. O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
  403. O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  404. O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  405. O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
  406. O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  407. O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  408. O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
  409. O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  410. O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  411. O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
  412. O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  413. O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  414. O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  415. O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation)
  416. O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  417. O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files (x86)\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
  418. O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
  419. O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files (x86)\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
  420. O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  421. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  422. O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
  423. O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  424. O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
  425. O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  426. O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  427. O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  428. O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  429. O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
  430. O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
  431. O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
  432. O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  433. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (EXPLORER.EXE) - C:\Windows\explorer.exe (Microsoft Corporation)
  434. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  435. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
  436. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  437. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  438. O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
  439. O20:[b]64bit:[/b] - Winlogon\Notify\GoToAssist: DllName - (C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll) - File not found
  440. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  441. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  442. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  443. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
  444. O29:[b]64bit:[/b] - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
  445. O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
  446. O30:[b]64bit:[/b] - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
  447. O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
  448. O30:[b]64bit:[/b] - LSA: Security Packages - (kerberos) - C:\Windows\SysNative\kerberos.dll (Microsoft Corporation)
  449. O30:[b]64bit:[/b] - LSA: Security Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
  450. O30:[b]64bit:[/b] - LSA: Security Packages - (schannel) - C:\Windows\SysNative\schannel.dll (Microsoft Corporation)
  451. O30:[b]64bit:[/b] - LSA: Security Packages - (wdigest) - C:\Windows\SysNative\wdigest.dll (Microsoft Corporation)
  452. O30:[b]64bit:[/b] - LSA: Security Packages - (tspkg) - C:\Windows\SysNative\tspkg.dll (Microsoft Corporation)
  453. O30:[b]64bit:[/b] - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
  454. O30 - LSA: Security Packages - (kerberos) - C:\Windows\SysWow64\kerberos.dll (Microsoft Corporation)
  455. O30 - LSA: Security Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
  456. O30 - LSA: Security Packages - (schannel) - C:\Windows\SysWow64\schannel.dll (Microsoft Corporation)
  457. O30 - LSA: Security Packages - (wdigest) - C:\Windows\SysWow64\wdigest.dll (Microsoft Corporation)
  458. O30 - LSA: Security Packages - (tspkg) - C:\Windows\SysWow64\tspkg.dll (Microsoft Corporation)
  459. O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
  460. O31 - SafeBoot: AlternateShell - cmd.exe
  461. O32 - HKLM CDRom: AutoRun - 1
  462. O33 - MountPoints2\{40932ef0-5acc-11df-8639-d83bd51af248}\Shell - "" = AutoRun
  463. O33 - MountPoints2\{40932ef0-5acc-11df-8639-d83bd51af248}\Shell\AutoRun\command - "" = "E:\WD SmartWare.exe" autoplay=true
  464. O33 - MountPoints2\{5a5c1cb7-845a-11e0-9c36-806e6f6e6963}\Shell - "" = AutoRun
  465. O33 - MountPoints2\{5a5c1cb7-845a-11e0-9c36-806e6f6e6963}\Shell\AutoRun\command - "" = E:\AutoRun.exe
  466. O33 - MountPoints2\{5a5c1ccb-845a-11e0-9c36-f1a6f5ec1252}\Shell - "" = AutoRun
  467. O33 - MountPoints2\{5a5c1ccb-845a-11e0-9c36-f1a6f5ec1252}\Shell\AutoRun\command - "" = E:\AutoRun.exe
  468. O33 - MountPoints2\{fa103e67-83b3-11e0-9747-8a52930a9754}\Shell - "" = AutoRun
  469. O33 - MountPoints2\{fa103e67-83b3-11e0-9747-8a52930a9754}\Shell\AutoRun\command - "" = E:\AutoRun.exe
  470. O33 - MountPoints2\{fa103e6d-83b3-11e0-9747-8a52930a9754}\Shell - "" = AutoRun
  471. O33 - MountPoints2\{fa103e6d-83b3-11e0-9747-8a52930a9754}\Shell\AutoRun\command - "" = E:\AutoRun.exe
  472. O34 - HKLM BootExecute: (autocheck autochk *)
  473. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  474. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  475. O35 - HKLM\..comfile [open] -- "%1" %*
  476. O35 - HKLM\..exefile [open] -- "%1" %*
  477. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  478. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  479. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  480. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  481. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  482. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  483. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  484.  
  485.  
  486. MsConfig:64bit - StartUpFolder: C:^Users^Dipanshu^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dell Dock.lnk - C:\Program Files\Dell\DellDock\DellDock.exe - (Stardock Corporation)
  487. MsConfig:64bit - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
  488. MsConfig:64bit - StartUpReg: [b]Dell DataSafe Online[/b] - hkey= - key= - C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe ()
  489. MsConfig:64bit - StartUpReg: [b]Desktop Disc Tool[/b] - hkey= - key= - C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()
  490. MsConfig:64bit - StartUpReg: [b]iTunesHelper[/b] - hkey= - key= - C:\Program Files (x86)\iTunes\iTunesHelper.exe (Apple Inc.)
  491. MsConfig:64bit - StartUpReg: [b]msnmsgr[/b] - hkey= - key= - File not found
  492. MsConfig:64bit - StartUpReg: [b]PDVDDXSrv[/b] - hkey= - key= - C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
  493. MsConfig:64bit - StartUpReg: [b]QuickTime Task[/b] - hkey= - key= - C:\Program Files (x86)\QuickTime\QTTask.exe (Apple Inc.)
  494. MsConfig:64bit - StartUpReg: [b]TkBellExe[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
  495. MsConfig:64bit - State: "startup" - Reg Error: Key error.
  496. MsConfig:64bit - State: "services" - Reg Error: Key error.
  497.  
  498. SafeBootMin:[b]64bit:[/b] 35290842.sys - Driver
  499. SafeBootMin:[b]64bit:[/b] 54109489.sys - Driver
  500. SafeBootMin:[b]64bit:[/b] 55447221.sys - Driver
  501. SafeBootMin:[b]64bit:[/b] 76011458.sys - Driver
  502. SafeBootMin:[b]64bit:[/b] AppMgmt - Service
  503. SafeBootMin:[b]64bit:[/b] Base - Driver Group
  504. SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
  505. SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
  506. SafeBootMin:[b]64bit:[/b] File system - Driver Group
  507. SafeBootMin:[b]64bit:[/b] Filter - Driver Group
  508. SafeBootMin:[b]64bit:[/b] HelpSvc - Service
  509. SafeBootMin:[b]64bit:[/b] MCODS - Reg Error: Value error.
  510. SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
  511. SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
  512. SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
  513. SafeBootMin:[b]64bit:[/b] sacsvr - Service
  514. SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
  515. SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
  516. SafeBootMin:[b]64bit:[/b] vmms - Service
  517. SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
  518. SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  519. SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  520. SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  521. SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  522. SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  523. SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  524. SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  525. SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  526. SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  527. SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  528. SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  529. SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  530. SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  531. SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  532. SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  533. SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  534. SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  535. SafeBootMin: 35290842.sys - Driver
  536. SafeBootMin: 54109489.sys - Driver
  537. SafeBootMin: 55447221.sys - Driver
  538. SafeBootMin: 76011458.sys - Driver
  539. SafeBootMin: AppMgmt - Service
  540. SafeBootMin: Base - Driver Group
  541. SafeBootMin: Boot Bus Extender - Driver Group
  542. SafeBootMin: Boot file system - Driver Group
  543. SafeBootMin: File system - Driver Group
  544. SafeBootMin: Filter - Driver Group
  545. SafeBootMin: HelpSvc - Service
  546. SafeBootMin: MCODS - Reg Error: Value error.
  547. SafeBootMin: PCI Configuration - Driver Group
  548. SafeBootMin: PNP Filter - Driver Group
  549. SafeBootMin: Primary disk - Driver Group
  550. SafeBootMin: sacsvr - Service
  551. SafeBootMin: SCSI Class - Driver Group
  552. SafeBootMin: System Bus Extender - Driver Group
  553. SafeBootMin: vmms - Service
  554. SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  555. SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  556. SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  557. SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  558. SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  559. SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  560. SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  561. SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  562. SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  563. SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  564. SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  565. SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  566. SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  567. SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  568. SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  569. SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  570. SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  571.  
  572. SafeBootNet:[b]64bit:[/b] 35290842.sys - Driver
  573. SafeBootNet:[b]64bit:[/b] 54109489.sys - Driver
  574. SafeBootNet:[b]64bit:[/b] 55447221.sys - Driver
  575. SafeBootNet:[b]64bit:[/b] 76011458.sys - Driver
  576. SafeBootNet:[b]64bit:[/b] AppMgmt - Service
  577. SafeBootNet:[b]64bit:[/b] Base - Driver Group
  578. SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
  579. SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
  580. SafeBootNet:[b]64bit:[/b] File system - Driver Group
  581. SafeBootNet:[b]64bit:[/b] Filter - Driver Group
  582. SafeBootNet:[b]64bit:[/b] HelpSvc - Service
  583. SafeBootNet:[b]64bit:[/b] MCODS - Reg Error: Value error.
  584. SafeBootNet:[b]64bit:[/b] Messenger - Service
  585. SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
  586. SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
  587. SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
  588. SafeBootNet:[b]64bit:[/b] Network - Driver Group
  589. SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
  590. SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
  591. SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
  592. SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
  593. SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
  594. SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
  595. SafeBootNet:[b]64bit:[/b] sacsvr - Service
  596. SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
  597. SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
  598. SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
  599. SafeBootNet:[b]64bit:[/b] TDI - Driver Group
  600. SafeBootNet:[b]64bit:[/b] vmms - Service
  601. SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
  602. SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
  603. SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  604. SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  605. SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  606. SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  607. SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  608. SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  609. SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  610. SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
  611. SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
  612. SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
  613. SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
  614. SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  615. SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  616. SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  617. SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  618. SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
  619. SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  620. SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  621. SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  622. SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  623. SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  624. SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  625. SafeBootNet: 35290842.sys - Driver
  626. SafeBootNet: 54109489.sys - Driver
  627. SafeBootNet: 55447221.sys - Driver
  628. SafeBootNet: 76011458.sys - Driver
  629. SafeBootNet: AppMgmt - Service
  630. SafeBootNet: Base - Driver Group
  631. SafeBootNet: Boot Bus Extender - Driver Group
  632. SafeBootNet: Boot file system - Driver Group
  633. SafeBootNet: File system - Driver Group
  634. SafeBootNet: Filter - Driver Group
  635. SafeBootNet: GoToAssist - C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)
  636. SafeBootNet: HelpSvc - Service
  637. SafeBootNet: MCODS - Reg Error: Value error.
  638. SafeBootNet: Messenger - Service
  639. SafeBootNet: NDIS Wrapper - Driver Group
  640. SafeBootNet: NetBIOSGroup - Driver Group
  641. SafeBootNet: NetDDEGroup - Driver Group
  642. SafeBootNet: Network - Driver Group
  643. SafeBootNet: NetworkProvider - Driver Group
  644. SafeBootNet: PCI Configuration - Driver Group
  645. SafeBootNet: PNP Filter - Driver Group
  646. SafeBootNet: PNP_TDI - Driver Group
  647. SafeBootNet: Primary disk - Driver Group
  648. SafeBootNet: rdsessmgr - Service
  649. SafeBootNet: sacsvr - Service
  650. SafeBootNet: SCSI Class - Driver Group
  651. SafeBootNet: Streams Drivers - Driver Group
  652. SafeBootNet: System Bus Extender - Driver Group
  653. SafeBootNet: TDI - Driver Group
  654. SafeBootNet: vmms - Service
  655. SafeBootNet: WudfUsbccidDriver - Driver
  656. SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  657. SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  658. SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  659. SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  660. SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  661. SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  662. SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  663. SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
  664. SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
  665. SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
  666. SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
  667. SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  668. SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  669. SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  670. SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  671. SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
  672. SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  673. SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  674. SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  675. SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  676. SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  677. SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  678.  
  679. ActiveX:[b]64bit:[/b] {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
  680. ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
  681. ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
  682. ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
  683. ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
  684. ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
  685. ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
  686. ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
  687. ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
  688. ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
  689. ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
  690. ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
  691. ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
  692. ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
  693. ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
  694. ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
  695. ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
  696. ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
  697. ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
  698. ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
  699. ActiveX:[b]64bit:[/b] {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
  700. ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
  701. ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
  702. ActiveX:[b]64bit:[/b] >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
  703. ActiveX:[b]64bit:[/b] >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
  704. ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
  705. ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
  706. ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
  707. ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
  708. ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
  709. ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
  710. ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
  711. ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
  712. ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
  713. ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
  714. ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
  715. ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
  716. ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
  717. ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
  718. ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
  719. ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
  720. ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
  721. ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
  722. ActiveX: {9F0865A2-1A95-C48A-8869-7E0760A4F4ED} - Microsoft Windows Media Player 12.0
  723. ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
  724. ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
  725. ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
  726. ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
  727. ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
  728. ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
  729. ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
  730. ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
  731.  
  732. Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  733. Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  734. Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
  735.  
  736. [color=#E56717]========== Files/Folders - Created Within 90 Days ==========[/color]
  737.  
  738. [2012/09/23 11:54:51 | 000,601,600 | ---- | C] (OldTimer Tools) -- C:\Users\Dipanshu\Desktop\OTL.scr
  739. [2012/09/23 02:45:20 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  740. [2012/09/23 02:45:20 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  741. [2012/09/23 02:45:19 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  742. [2012/09/23 02:45:18 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  743. [2012/09/23 02:45:18 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  744. [2012/09/23 02:45:18 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  745. [2012/09/23 02:45:17 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  746. [2012/09/23 02:45:17 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  747. [2012/09/23 02:45:17 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
  748. [2012/09/23 02:45:17 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
  749. [2012/09/23 02:45:16 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  750. [2012/09/23 02:45:16 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  751. [2012/09/23 02:45:14 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  752. [2012/09/23 02:45:14 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  753. [2012/09/23 02:45:13 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  754. [2012/09/22 12:52:02 | 004,731,392 | ---- | C] (AVAST Software) -- C:\Users\Dipanshu\Desktop\aswMBR.exe
  755. [2012/09/22 12:50:02 | 000,815,693 | ---- | C] (Farbar) -- C:\Users\Dipanshu\Desktop\ListParts64.exe
  756. [2012/09/22 02:14:54 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
  757. [2012/09/22 02:06:33 | 002,212,440 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Dipanshu\Desktop\tdsskiller.exe
  758. [2012/09/21 10:31:40 | 000,607,260 | R--- | C] (Swearware) -- C:\Users\Dipanshu\Desktop\dds.com
  759. [2012/09/19 20:42:41 | 000,000,000 | ---D | C] -- C:\Users\Dipanshu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
  760. [2012/09/19 20:36:02 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
  761. [2012/09/19 20:30:23 | 000,000,000 | ---D | C] -- C:\Users\Dipanshu\AppData\Local\Mozilla
  762. [2012/09/19 20:30:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
  763. [2012/09/19 20:30:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
  764. [2012/09/19 20:30:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  765. [2012/09/16 10:46:09 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\svchost.exe
  766. [2012/09/15 11:13:34 | 000,000,000 | ---D | C] -- C:\Windows\pss
  767. [2012/09/13 15:03:11 | 000,000,000 | ---D | C] -- C:\Users\Dipanshu\AppData\Roaming\Mozilla
  768. [2012/09/11 19:48:26 | 000,574,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
  769. [2012/09/08 22:58:33 | 000,000,000 | ---D | C] -- C:\Users\Dipanshu\AppData\Roaming\dvdcss
  770. [2012/09/07 18:28:05 | 000,000,000 | ---D | C] -- C:\Windows\Sun
  771. [2012/09/05 22:48:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  772. [2012/09/05 22:48:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
  773. [2012/08/15 19:06:40 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
  774. [2012/08/15 19:06:37 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
  775. [2012/08/15 19:06:37 | 000,492,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll
  776. [2012/08/15 19:06:37 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\splwow64.exe
  777. [2012/08/15 19:06:36 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll
  778. [2012/08/15 19:06:36 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll
  779. [2012/08/15 19:06:36 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll
  780. [2012/08/15 19:06:27 | 000,956,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll
  781. [2012/08/12 20:48:36 | 000,040,056 | ---- | C] (Quick Heal Technologies (P) Ltd.) -- C:\Windows\SysNative\drivers\mscank64.sys
  782. [2012/08/12 20:48:29 | 000,018,552 | ---- | C] (Quick Heal Technologies (P) Ltd.) -- C:\Windows\SysNative\drivers\EMLTDI.SYS
  783. [2012/08/12 20:47:58 | 000,112,248 | ---- | C] (Quick Heal Technologies (P) Ltd.) -- C:\Windows\SysNative\drivers\wstif.sys
  784. [2012/08/12 20:47:58 | 000,049,784 | ---- | C] (Quick Heal Technologies (P) Ltd.) -- C:\Windows\SysNative\drivers\wsnf.sys
  785. [2012/08/12 20:46:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quick Heal Total Security
  786. [2012/08/12 20:44:49 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\gprodat
  787. [2012/08/12 20:43:29 | 000,064,120 | ---- | C] (Quick Heal Technologies (P) Ltd.) -- C:\Windows\SysNative\drivers\ggc.sys
  788. [2012/07/10 21:31:11 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
  789.  
  790. [color=#E56717]========== Files - Modified Within 90 Days ==========[/color]
  791.  
  792. [2012/09/23 12:21:01 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  793. [2012/09/23 12:03:01 | 000,000,920 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2590862872-1370631997-422254541-1000UA.job
  794. [2012/09/23 11:55:57 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  795. [2012/09/23 11:55:57 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  796. [2012/09/23 11:54:51 | 000,601,600 | ---- | M] (OldTimer Tools) -- C:\Users\Dipanshu\Desktop\OTL.scr
  797. [2012/09/23 11:49:23 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  798. [2012/09/23 11:48:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  799. [2012/09/23 11:48:16 | 3168,419,840 | -HS- | M] () -- C:\hiberfil.sys
  800. [2012/09/23 00:48:16 | 000,000,472 | ---- | M] () -- C:\Windows\tasks\Quick Heal AntiMalware Scan.job
  801. [2012/09/23 00:48:00 | 000,000,448 | ---- | M] () -- C:\Windows\tasks\Resume Quickup Download.job
  802. [2012/09/22 15:49:30 | 000,000,512 | ---- | M] () -- C:\Users\Dipanshu\Desktop\MBR.dat
  803. [2012/09/22 12:52:20 | 004,731,392 | ---- | M] (AVAST Software) -- C:\Users\Dipanshu\Desktop\aswMBR.exe
  804. [2012/09/22 12:49:16 | 000,815,693 | ---- | M] (Farbar) -- C:\Users\Dipanshu\Desktop\ListParts64.exe
  805. [2012/09/22 02:30:28 | 000,007,603 | ---- | M] () -- C:\Users\Dipanshu\AppData\Local\Resmon.ResmonCfg
  806. [2012/09/22 02:06:37 | 002,212,440 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Dipanshu\Desktop\tdsskiller.exe
  807. [2012/09/21 11:02:00 | 000,000,868 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2590862872-1370631997-422254541-1000Core.job
  808. [2012/09/21 10:31:46 | 000,607,260 | R--- | M] (Swearware) -- C:\Users\Dipanshu\Desktop\dds.com
  809. [2012/09/19 20:42:44 | 000,002,386 | ---- | M] () -- C:\Users\Dipanshu\Desktop\Google Chrome.lnk
  810. [2012/09/19 20:30:18 | 000,001,132 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
  811. [2012/09/16 23:02:57 | 000,002,207 | ---- | M] () -- C:\quar.arc
  812. [2012/09/15 12:08:34 | 000,001,256 | ---- | M] () -- C:\Users\Dipanshu\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
  813. [2012/09/06 22:07:41 | 000,744,030 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  814. [2012/09/06 22:07:41 | 000,627,354 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  815. [2012/09/06 22:07:41 | 000,107,638 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  816. [2012/08/24 03:31:32 | 002,312,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  817. [2012/08/24 03:20:11 | 001,494,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  818. [2012/08/24 03:18:46 | 000,237,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
  819. [2012/08/24 03:14:45 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  820. [2012/08/24 03:14:34 | 000,816,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  821. [2012/08/24 03:13:29 | 000,599,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  822. [2012/08/24 03:11:57 | 000,729,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  823. [2012/08/24 03:10:14 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  824. [2012/08/24 03:04:06 | 000,248,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  825. [2012/08/23 23:51:02 | 001,427,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  826. [2012/08/23 23:49:57 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
  827. [2012/08/23 23:47:36 | 000,717,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  828. [2012/08/23 23:47:26 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  829. [2012/08/23 23:44:10 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  830. [2012/08/23 23:40:11 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  831. [2012/08/16 18:59:58 | 000,426,480 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  832. [2012/08/13 22:53:14 | 000,000,824 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\tmphosts
  833. [2012/08/12 20:59:24 | 000,112,248 | ---- | M] (Quick Heal Technologies (P) Ltd.) -- C:\Windows\SysNative\drivers\wstif.sys
  834. [2012/08/12 20:51:18 | 000,006,305 | ---- | M] () -- C:\Windows\regact.dat
  835. [2012/08/02 10:55:04 | 000,574,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
  836. [2012/07/26 00:08:10 | 000,726,444 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  837. [2012/07/04 15:04:36 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll
  838. [2012/07/04 15:01:38 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll
  839. [2012/07/04 14:23:55 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll
  840.  
  841. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  842.  
  843. [2012/09/22 14:41:06 | 000,000,512 | ---- | C] () -- C:\Users\Dipanshu\Desktop\MBR.dat
  844. [2012/09/19 20:42:44 | 000,002,386 | ---- | C] () -- C:\Users\Dipanshu\Desktop\Google Chrome.lnk
  845. [2012/09/19 20:30:18 | 000,001,144 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
  846. [2012/09/19 20:30:18 | 000,001,132 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
  847. [2012/09/16 23:02:56 | 000,002,207 | ---- | C] () -- C:\quar.arc
  848. [2012/09/06 22:07:41 | 000,744,030 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  849. [2012/08/12 20:51:18 | 000,006,305 | ---- | C] () -- C:\Windows\regact.dat
  850. [2012/08/12 20:48:37 | 000,000,472 | ---- | C] () -- C:\Windows\tasks\Quick Heal AntiMalware Scan.job
  851. [2012/08/12 20:48:17 | 000,000,448 | ---- | C] () -- C:\Windows\tasks\Resume Quickup Download.job
  852. [2012/01/02 03:06:31 | 000,002,828 | -HS- | C] () -- C:\Users\Dipanshu\AppData\Local\sqg56hj70vr8cyswsocq611864y4eqp516v88pljkc7
  853. [2012/01/02 03:06:31 | 000,002,828 | -HS- | C] () -- C:\ProgramData\sqg56hj70vr8cyswsocq611864y4eqp516v88pljkc7
  854. [2011/06/15 05:44:11 | 000,135,168 | ---- | C] () -- C:\Windows\SysWow64\ChgService.exe
  855. [2010/11/05 15:21:00 | 000,000,209 | ---- | C] () -- C:\Windows\ODBCINST.INI
  856. [2010/03/14 19:47:16 | 000,007,603 | ---- | C] () -- C:\Users\Dipanshu\AppData\Local\Resmon.ResmonCfg
  857. [2009/12/11 20:31:42 | 000,002,370 | ---- | C] () -- C:\Users\Dipanshu\AppData\Roaming\wklnhst.dat
  858. [2009/12/10 19:43:25 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
  859. [2009/12/09 20:23:08 | 000,002,164 | ---- | C] () -- C:\Users\Dipanshu\AppData\Roaming\install.dat
  860.  
  861. [color=#E56717]========== ZeroAccess Check ==========[/color]
  862.  
  863. [2009/07/13 21:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  864.  
  865. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  866.  
  867. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  868.  
  869. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  870. "" = C:\Windows\SysNative\shell32.dll -- [2012/06/08 22:30:56 | 014,165,504 | ---- | M] (Microsoft Corporation)
  871. "ThreadingModel" = Apartment
  872.  
  873. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  874. "" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 21:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
  875. "ThreadingModel" = Apartment
  876.  
  877. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  878. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 18:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  879. "ThreadingModel" = Both
  880.  
  881. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  882.  
  883. [color=#E56717]========== LOP Check ==========[/color]
  884.  
  885. [2009/12/20 19:49:22 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Absolute
  886. [2010/12/15 22:56:59 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Absolute Software
  887. [2012/01/02 03:06:54 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\B8457
  888. [2012/09/16 20:58:22 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\BitTorrent
  889. [2010/01/31 01:20:50 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Canon
  890. [2011/08/19 21:20:16 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Cisco
  891. [2010/12/08 00:14:59 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Easy Macro Recorder
  892. [2010/08/22 20:28:56 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\ICAClient
  893. [2009/12/11 20:38:05 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Template
  894.  
  895. [color=#E56717]========== Purity Check ==========[/color]
  896.  
  897.  
  898.  
  899. [color=#E56717]========== Custom Scans ==========[/color]
  900.  
  901. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  902. [2012/09/23 12:17:02 | 000,000,010 | ---- | M] () -- C:\COMMANDS.TXT
  903. [2009/12/05 04:49:53 | 000,003,534 | RH-- | M] () -- C:\dell.sdr
  904. [2012/09/23 11:48:16 | 3168,419,840 | -HS- | M] () -- C:\hiberfil.sys
  905. [2012/09/23 11:48:22 | 4224,561,152 | -HS- | M] () -- C:\pagefile.sys
  906. [2012/06/10 23:39:50 | 000,002,100 | ---- | M] () -- C:\qhdebug.log
  907. [2012/09/16 23:02:57 | 000,002,207 | ---- | M] () -- C:\quar.arc
  908. [2012/09/22 02:08:45 | 000,003,718 | ---- | M] () -- C:\TDSSKiller.2.8.10.0_22.09.2012_02.08.25_log.txt
  909. [2012/09/22 02:15:34 | 000,396,570 | ---- | M] () -- C:\TDSSKiller.2.8.10.0_22.09.2012_02.10.50_log.txt
  910. [2012/09/22 12:41:01 | 000,003,718 | ---- | M] () -- C:\TDSSKiller.2.8.10.0_22.09.2012_12.40.02_log.txt
  911. [2012/09/22 12:46:48 | 000,480,318 | ---- | M] () -- C:\TDSSKiller.2.8.10.0_22.09.2012_12.42.43_log.txt
  912. [2012/09/23 11:47:35 | 000,003,718 | ---- | M] () -- C:\TDSSKiller.2.8.10.0_23.09.2012_11.47.20_log.txt
  913. [2012/09/23 11:52:09 | 000,479,532 | ---- | M] () -- C:\TDSSKiller.2.8.10.0_23.09.2012_11.49.57_log.txt
  914.  
  915. [color=#A23BEC]< %USERPROFILE%\*.* >[/color]
  916. [2012/09/23 12:26:24 | 002,883,584 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat
  917. [2012/09/23 12:26:24 | 000,262,144 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat.LOG1
  918. [2009/12/09 20:18:33 | 000,000,000 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat.LOG2
  919. [2009/12/09 20:48:26 | 000,065,536 | -HS- | M] () -- C:\Users\Dipanshu\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
  920. [2009/12/09 20:48:26 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
  921. [2009/12/09 20:48:26 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
  922. [2012/01/02 03:21:54 | 000,065,536 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{03a0b8a2-352b-11e1-b48e-ad963d02e749}.TM.blf
  923. [2012/01/02 03:21:54 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{03a0b8a2-352b-11e1-b48e-ad963d02e749}.TMContainer00000000000000000001.regtrans-ms
  924. [2012/01/02 03:21:54 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{03a0b8a2-352b-11e1-b48e-ad963d02e749}.TMContainer00000000000000000002.regtrans-ms
  925. [2010/07/24 00:58:51 | 000,065,536 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{04866627-96d7-11df-a088-de90f8e3475b}.TM.blf
  926. [2010/07/24 00:58:51 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{04866627-96d7-11df-a088-de90f8e3475b}.TMContainer00000000000000000001.regtrans-ms
  927. [2010/07/24 00:58:51 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{04866627-96d7-11df-a088-de90f8e3475b}.TMContainer00000000000000000002.regtrans-ms
  928. [2010/03/21 23:23:52 | 000,065,536 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{1417f6d4-350a-11df-b6e7-b9f874628b42}.TM.blf
  929. [2010/03/21 23:23:52 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{1417f6d4-350a-11df-b6e7-b9f874628b42}.TMContainer00000000000000000001.regtrans-ms
  930. [2010/03/21 23:23:52 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{1417f6d4-350a-11df-b6e7-b9f874628b42}.TMContainer00000000000000000002.regtrans-ms
  931. [2012/06/10 23:39:46 | 000,065,536 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{20b61aa3-b2dc-11e1-8b91-e068d582d14c}.TM.blf
  932. [2012/06/10 23:39:46 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{20b61aa3-b2dc-11e1-8b91-e068d582d14c}.TMContainer00000000000000000001.regtrans-ms
  933. [2012/06/10 23:39:46 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{20b61aa3-b2dc-11e1-8b91-e068d582d14c}.TMContainer00000000000000000002.regtrans-ms
  934. [2012/09/20 23:57:58 | 000,065,536 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{530ace02-0378-11e2-9255-98ac4145f54a}.TM.blf
  935. [2012/09/20 23:57:58 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{530ace02-0378-11e2-9255-98ac4145f54a}.TMContainer00000000000000000001.regtrans-ms
  936. [2012/09/20 23:57:58 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{530ace02-0378-11e2-9255-98ac4145f54a}.TMContainer00000000000000000002.regtrans-ms
  937. [2010/07/25 01:44:29 | 000,065,536 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{7f0875fd-9754-11df-b30c-8a4648bdcc45}.TM.blf
  938. [2010/07/25 01:44:29 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{7f0875fd-9754-11df-b30c-8a4648bdcc45}.TMContainer00000000000000000001.regtrans-ms
  939. [2010/07/25 01:44:29 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{7f0875fd-9754-11df-b30c-8a4648bdcc45}.TMContainer00000000000000000002.regtrans-ms
  940. [2011/02/02 00:20:18 | 000,065,536 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{b4f5fb49-2e7d-11e0-a62c-ba23a779425b}.TM.blf
  941. [2011/02/02 00:20:18 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{b4f5fb49-2e7d-11e0-a62c-ba23a779425b}.TMContainer00000000000000000001.regtrans-ms
  942. [2011/02/02 00:20:18 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{b4f5fb49-2e7d-11e0-a62c-ba23a779425b}.TMContainer00000000000000000002.regtrans-ms
  943. [2010/03/03 23:56:10 | 000,065,536 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{d6bdc7cb-2740-11df-a70c-861b848ca45c}.TM.blf
  944. [2010/03/03 23:56:10 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{d6bdc7cb-2740-11df-a70c-861b848ca45c}.TMContainer00000000000000000001.regtrans-ms
  945. [2010/03/03 23:56:10 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{d6bdc7cb-2740-11df-a70c-861b848ca45c}.TMContainer00000000000000000002.regtrans-ms
  946. [2010/01/31 02:26:26 | 000,065,536 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{db22a64f-0e25-11df-92ac-c3fa9ceb8248}.TM.blf
  947. [2010/01/31 02:26:26 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{db22a64f-0e25-11df-92ac-c3fa9ceb8248}.TMContainer00000000000000000001.regtrans-ms
  948. [2010/01/31 02:26:26 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{db22a64f-0e25-11df-92ac-c3fa9ceb8248}.TMContainer00000000000000000002.regtrans-ms
  949. [2012/02/13 00:12:32 | 000,065,536 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{e3f5c213-54a0-11e1-8ea7-e2d40df5cf59}.TM.blf
  950. [2012/02/13 00:12:32 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{e3f5c213-54a0-11e1-8ea7-e2d40df5cf59}.TMContainer00000000000000000001.regtrans-ms
  951. [2012/02/13 00:12:32 | 000,524,288 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.dat{e3f5c213-54a0-11e1-8ea7-e2d40df5cf59}.TMContainer00000000000000000002.regtrans-ms
  952. [2009/12/09 20:18:34 | 000,000,020 | -HS- | M] () -- C:\Users\Dipanshu\ntuser.ini
  953.  
  954. [color=#A23BEC]< %USERPROFILE%\temp\*.exe >[/color]
  955.  
  956. [color=#A23BEC]< %USERPROFILE%\AppData\Local\*.* >[/color]
  957. [2011/06/24 20:27:01 | 000,112,688 | ---- | M] () -- C:\Users\Dipanshu\AppData\Local\GDIPFONTCACHEV1.DAT
  958. [2012/09/23 11:47:36 | 003,850,597 | -H-- | M] () -- C:\Users\Dipanshu\AppData\Local\IconCache.db
  959. [2012/09/22 02:30:28 | 000,007,603 | ---- | M] () -- C:\Users\Dipanshu\AppData\Local\Resmon.ResmonCfg
  960. [2012/01/02 03:07:13 | 000,002,828 | -HS- | M] () -- C:\Users\Dipanshu\AppData\Local\sqg56hj70vr8cyswsocq611864y4eqp516v88pljkc7
  961.  
  962. [color=#A23BEC]< %USERPROFILE%\AppData\Local\*. >[/color]
  963. [2010/11/03 19:26:36 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Absolute_Software
  964. [2010/11/07 01:13:55 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Adobe
  965. [2010/12/03 19:22:58 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Apple
  966. [2010/12/10 20:15:45 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Apple Computer
  967. [2009/12/09 20:18:33 | 000,000,000 | -HSD | M] -- C:\Users\Dipanshu\AppData\Local\Application Data
  968. [2009/12/11 21:03:38 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Apps
  969. [2009/12/09 20:23:13 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Broadcom
  970. [2011/08/19 21:20:19 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Cisco
  971. [2010/08/08 19:43:46 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Citrix
  972. [2009/12/09 20:23:25 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\DataSafeOnline
  973. [2009/12/11 21:03:49 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Deployment
  974. [2012/05/17 21:01:34 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Diagnostics
  975. [2011/09/18 03:21:22 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\ElevatedDiagnostics
  976. [2010/10/22 21:34:35 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Google
  977. [2009/12/09 20:18:33 | 000,000,000 | -HSD | M] -- C:\Users\Dipanshu\AppData\Local\History
  978. [2012/09/19 21:43:32 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Microsoft
  979. [2010/02/13 00:25:21 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Microsoft Games
  980. [2011/06/15 05:56:38 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Microsoft Help
  981. [2012/09/19 20:30:23 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Mozilla
  982. [2010/12/09 21:08:25 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\PowerDVD DX
  983. [2012/09/23 11:49:25 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\SoftThinks
  984. [2009/12/09 20:23:19 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Stardock_Corporation
  985. [2009/12/09 20:23:10 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\SupportSoft
  986. [2012/09/23 12:13:06 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\Temp
  987. [2009/12/09 20:18:33 | 000,000,000 | -HSD | M] -- C:\Users\Dipanshu\AppData\Local\Temporary Internet Files
  988. [2010/01/03 11:50:35 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Local\VirtualStore
  989.  
  990. [color=#A23BEC]< %USERPROFILE%\AppData\Local\temp\*.exe >[/color]
  991. [2012/09/22 02:06:37 | 002,212,440 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Dipanshu\AppData\Local\temp\BF7A8858-56BC-429D-AA44-628FDF4E075B.exe
  992. [2012/09/22 02:06:37 | 002,212,440 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Dipanshu\AppData\Local\temp\C8BFD1FC-4F07-4330-9287-0F94EF2C3D2C.exe
  993. [3 C:\Users\Dipanshu\AppData\Local\temp\*.tmp files -> C:\Users\Dipanshu\AppData\Local\temp\*.tmp -> ]
  994.  
  995. [color=#A23BEC]< %USERPROFILE%\AppData\Roaming\*.* >[/color]
  996. [2009/12/20 19:49:21 | 000,002,164 | ---- | M] () -- C:\Users\Dipanshu\AppData\Roaming\install.dat
  997. [2012/05/20 11:23:24 | 000,002,370 | ---- | M] () -- C:\Users\Dipanshu\AppData\Roaming\wklnhst.dat
  998.  
  999. [color=#A23BEC]< %USERPROFILE%\AppData\Roaming\*. >[/color]
  1000. [2009/12/20 19:49:22 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Absolute
  1001. [2010/12/15 22:56:59 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Absolute Software
  1002. [2012/07/14 17:34:12 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Adobe
  1003. [2010/12/03 19:25:48 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Apple Computer
  1004. [2012/01/02 03:06:54 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\B8457
  1005. [2012/09/16 20:58:22 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\BitTorrent
  1006. [2010/01/31 01:20:50 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Canon
  1007. [2011/08/19 21:20:16 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Cisco
  1008. [2009/12/09 20:41:13 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Creative
  1009. [2009/12/09 20:26:11 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\CyberLink
  1010. [2009/12/09 20:23:35 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Dell
  1011. [2012/09/10 22:33:07 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\dvdcss
  1012. [2010/12/08 00:14:59 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Easy Macro Recorder
  1013. [2010/08/22 20:28:56 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\ICAClient
  1014. [2009/12/09 20:22:34 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Identities
  1015. [2009/12/09 20:33:25 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Macromedia
  1016. [2009/07/14 00:44:38 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Media Center Programs
  1017. [2009/12/19 23:42:55 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Media Player Classic
  1018. [2012/09/06 11:54:17 | 000,000,000 | --SD | M] -- C:\Users\Dipanshu\AppData\Roaming\Microsoft
  1019. [2012/09/19 20:30:35 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Mozilla
  1020. [2010/03/06 23:24:54 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Real
  1021. [2009/12/09 20:42:31 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Reallusion
  1022. [2009/12/09 20:23:16 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Roxio
  1023. [2012/09/20 21:28:41 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Skype
  1024. [2012/09/05 20:05:45 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\skypePM
  1025. [2009/12/11 20:38:05 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\Template
  1026. [2009/12/31 19:31:31 | 000,000,000 | ---D | M] -- C:\Users\Dipanshu\AppData\Roaming\WinRAR
  1027.  
  1028. [color=#A23BEC]< %Public%\Documents\Softwrap\YOYOGAMESGM70FINAL\*.exe >[/color]
  1029.  
  1030. [color=#A23BEC]< %Public%\Documents\Fonts\*.exe >[/color]
  1031.  
  1032. [color=#A23BEC]< %Public%\Documents\Config\*.exe >[/color]
  1033.  
  1034. [color=#A23BEC]< %Public%\Documents\*.* >[/color]
  1035. [2009/07/13 21:54:24 | 000,000,278 | -HS- | M] () -- C:\Users\Public\Documents\desktop.ini
  1036.  
  1037. [color=#A23BEC]< %ProgramData%\*.* >[/color]
  1038. [2010/10/08 10:01:06 | 000,000,003 | ---- | M] () -- C:\ProgramData\AbsoluteNotifier.txt
  1039. [2009/12/10 19:43:25 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat
  1040. [2012/01/02 03:07:13 | 000,002,828 | -HS- | M] () -- C:\ProgramData\sqg56hj70vr8cyswsocq611864y4eqp516v88pljkc7
  1041.  
  1042. [color=#A23BEC]< %ProgramData%\*. >[/color]
  1043. [2010/11/05 15:27:31 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe
  1044. [2010/12/03 19:22:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple
  1045. [2010/12/03 19:24:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer
  1046. [2009/07/13 22:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data
  1047. [2009/12/09 20:42:31 | 000,000,000 | ---D | M] -- C:\ProgramData\Creative
  1048. [2009/12/05 03:28:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Creative Labs
  1049. [2009/12/13 00:29:12 | 000,000,000 | ---D | M] -- C:\ProgramData\CyberLink
  1050. [2009/12/09 20:22:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Dell
  1051. [2009/07/13 22:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop
  1052. [2009/07/13 22:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents
  1053. [2009/07/13 22:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites
  1054. [2012/09/10 22:33:10 | 000,000,000 | ---D | M] -- C:\ProgramData\FLEXnet
  1055. [2009/12/05 03:33:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Macrovision
  1056. [2011/03/17 09:54:28 | 000,000,000 | ---D | M] -- C:\ProgramData\McAfee
  1057. [2012/09/16 22:54:00 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft
  1058. [2012/09/11 22:49:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft Help
  1059. [2011/12/26 20:10:28 | 000,000,000 | ---D | M] -- C:\ProgramData\mN01300GbElO01300
  1060. [2012/09/19 20:30:16 | 000,000,000 | ---D | M] -- C:\ProgramData\Mozilla
  1061. [2009/12/05 03:18:33 | 000,000,000 | ---D | M] -- C:\ProgramData\PCDr
  1062. [2011/11/27 20:46:59 | 000,000,000 | ---D | M] -- C:\ProgramData\PhotoStitch
  1063. [2010/03/06 23:25:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Real
  1064. [2012/09/10 22:28:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype
  1065. [2009/12/05 03:33:17 | 000,000,000 | ---D | M] -- C:\ProgramData\Sonic
  1066. [2009/07/13 22:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu
  1067. [2010/05/18 19:23:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Sun
  1068. [2009/12/05 03:18:36 | 000,000,000 | ---D | M] -- C:\ProgramData\SupportSoft
  1069. [2011/08/29 20:09:15 | 000,000,000 | ---D | M] -- C:\ProgramData\TEMP
  1070. [2009/07/13 22:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates
  1071. [2009/12/05 03:33:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Uninstall
  1072. [2010/12/03 19:24:29 | 000,000,000 | ---D | M] -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
  1073.  
  1074. [color=#A23BEC]< %CommonProgramFiles%\*.* >[/color]
  1075.  
  1076. [color=#A23BEC]< %CommonProgramFiles%\ComObjects*.exe >[/color]
  1077.  
  1078. [color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
  1079. [2009/07/13 21:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini
  1080.  
  1081. [color=#A23BEC]< %PROGRAMFILES%\*. >[/color]
  1082. [2010/10/15 21:42:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Absolute Software
  1083. [2010/11/05 15:21:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
  1084. [2010/11/05 15:18:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe Photoshop Setup
  1085. [2010/12/03 19:22:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update
  1086. [2009/12/12 00:20:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\BitTorrent
  1087. [2010/12/03 19:22:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour
  1088. [2010/01/31 01:11:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Canon
  1089. [2009/12/05 03:13:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Citrix
  1090. [2012/09/10 22:28:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
  1091. [2009/12/05 03:30:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Creative
  1092. [2009/12/05 03:30:30 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Creative Installation Information
  1093. [2009/12/05 03:25:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Creative Live! Cam
  1094. [2009/12/05 03:18:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CyberLink
  1095. [2009/12/05 03:39:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell
  1096. [2012/09/23 11:49:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell DataSafe Local Backup
  1097. [2009/12/05 03:16:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell DataSafe Online
  1098. [2009/12/05 03:18:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell Support Center
  1099. [2009/12/05 03:26:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell Webcam
  1100. [2010/01/30 22:35:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DivX
  1101. [2010/12/08 00:14:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Easy Macro Recorder
  1102. [2011/11/26 15:31:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
  1103. [2011/05/21 07:12:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Huawei Access Manager
  1104. [2009/12/05 03:30:48 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
  1105. [2012/09/23 11:29:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
  1106. [2010/12/03 19:24:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\iTunes
  1107. [2011/10/02 16:13:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
  1108. [2009/12/27 14:47:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\LFLInstall
  1109. [2011/03/17 09:54:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\McAfee
  1110. [2011/08/18 23:18:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft
  1111. [2009/12/05 03:16:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
  1112. [2011/06/15 06:01:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
  1113. [2012/05/12 03:29:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight
  1114. [2009/12/05 03:23:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
  1115. [2009/12/05 03:24:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Sync Framework
  1116. [2011/06/15 06:01:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio
  1117. [2011/06/15 05:58:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio 8
  1118. [2012/02/25 01:21:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Works
  1119. [2011/06/15 06:00:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
  1120. [2011/06/15 05:44:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MMX310G 3G USB Manager
  1121. [2012/09/19 21:43:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox
  1122. [2012/09/19 20:30:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Maintenance Service
  1123. [2011/06/15 06:01:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
  1124. [2010/12/03 19:23:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\QuickTime
  1125. [2009/12/13 00:33:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Real
  1126. [2009/07/13 22:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
  1127. [2009/12/05 03:33:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Roxio
  1128. [2012/09/10 22:28:29 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype
  1129. [2009/07/13 21:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information
  1130. [2012/09/10 22:33:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VideoLAN
  1131. [2009/07/13 22:37:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
  1132. [2011/08/18 23:19:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live
  1133. [2009/12/05 03:22:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live SkyDrive
  1134. [2010/12/16 20:25:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
  1135. [2010/10/14 19:32:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
  1136. [2009/07/13 22:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
  1137. [2009/07/13 22:37:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
  1138. [2009/07/13 22:32:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
  1139. [2009/07/13 22:37:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Sidebar
  1140. [2010/01/30 22:35:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Xvid
  1141.  
  1142. [color=#A23BEC]< %ProgramFiles(x86)%\*.* >[/color]
  1143. [2009/07/13 21:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini
  1144.  
  1145. [color=#A23BEC]< %ProgramFiles(x86)%\*. >[/color]
  1146. [2010/10/15 21:42:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Absolute Software
  1147. [2010/11/05 15:21:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
  1148. [2010/11/05 15:18:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe Photoshop Setup
  1149. [2010/12/03 19:22:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update
  1150. [2009/12/12 00:20:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\BitTorrent
  1151. [2010/12/03 19:22:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour
  1152. [2010/01/31 01:11:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Canon
  1153. [2009/12/05 03:13:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Citrix
  1154. [2012/09/10 22:28:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
  1155. [2009/12/05 03:30:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Creative
  1156. [2009/12/05 03:30:30 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Creative Installation Information
  1157. [2009/12/05 03:25:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Creative Live! Cam
  1158. [2009/12/05 03:18:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CyberLink
  1159. [2009/12/05 03:39:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell
  1160. [2012/09/23 11:49:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell DataSafe Local Backup
  1161. [2009/12/05 03:16:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell DataSafe Online
  1162. [2009/12/05 03:18:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell Support Center
  1163. [2009/12/05 03:26:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell Webcam
  1164. [2010/01/30 22:35:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DivX
  1165. [2010/12/08 00:14:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Easy Macro Recorder
  1166. [2011/11/26 15:31:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
  1167. [2011/05/21 07:12:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Huawei Access Manager
  1168. [2009/12/05 03:30:48 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
  1169. [2012/09/23 11:29:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
  1170. [2010/12/03 19:24:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\iTunes
  1171. [2011/10/02 16:13:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
  1172. [2009/12/27 14:47:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\LFLInstall
  1173. [2011/03/17 09:54:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\McAfee
  1174. [2011/08/18 23:18:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft
  1175. [2009/12/05 03:16:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
  1176. [2011/06/15 06:01:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
  1177. [2012/05/12 03:29:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight
  1178. [2009/12/05 03:23:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
  1179. [2009/12/05 03:24:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Sync Framework
  1180. [2011/06/15 06:01:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio
  1181. [2011/06/15 05:58:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio 8
  1182. [2012/02/25 01:21:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Works
  1183. [2011/06/15 06:00:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
  1184. [2011/06/15 05:44:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MMX310G 3G USB Manager
  1185. [2012/09/19 21:43:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox
  1186. [2012/09/19 20:30:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Maintenance Service
  1187. [2011/06/15 06:01:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
  1188. [2010/12/03 19:23:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\QuickTime
  1189. [2009/12/13 00:33:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Real
  1190. [2009/07/13 22:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
  1191. [2009/12/05 03:33:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Roxio
  1192. [2012/09/10 22:28:29 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype
  1193. [2009/07/13 21:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information
  1194. [2012/09/10 22:33:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VideoLAN
  1195. [2009/07/13 22:37:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
  1196. [2011/08/18 23:19:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live
  1197. [2009/12/05 03:22:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live SkyDrive
  1198. [2010/12/16 20:25:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
  1199. [2010/10/14 19:32:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
  1200. [2009/07/13 22:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
  1201. [2009/07/13 22:37:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
  1202. [2009/07/13 22:32:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
  1203. [2009/07/13 22:37:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Sidebar
  1204. [2010/01/30 22:35:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Xvid
  1205.  
  1206. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\AppData\Local\*.* >[/color]
  1207.  
  1208. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\AppData\Roaming\*.* >[/color]
  1209.  
  1210. [color=#A23BEC]< %windir%\SysWOW64\config\systemprofile\AppData\Local\*.* >[/color]
  1211.  
  1212. [color=#A23BEC]< %windir%\SysWOW64\config\systemprofile\AppData\Roaming\*.* >[/color]
  1213.  
  1214. [color=#A23BEC]< %windir%\ServiceProfiles\LocalService\AppData\Local\Temp\*.tlb >[/color]
  1215.  
  1216. [color=#A23BEC]< %windir%\ServiceProfiles\NetworkService\AppData\Local\Temp\*.tlb >[/color]
  1217.  
  1218. [color=#A23BEC]< %windir%\temp\*.exe >[/color]
  1219.  
  1220. [color=#A23BEC]< %windir%\minidump\*.* >[/color]
  1221.  
  1222. [color=#A23BEC]< %windir%\*. >[/color]
  1223. [2009/07/13 22:32:39 | 000,000,000 | ---D | M] -- C:\Windows\addins
  1224. [2012/09/19 21:43:34 | 000,000,000 | ---D | M] -- C:\Windows\AppCompat
  1225. [2012/09/19 21:43:34 | 000,000,000 | ---D | M] -- C:\Windows\AppPatch
  1226. [2012/09/19 21:43:36 | 000,000,000 | R-SD | M] -- C:\Windows\assembly
  1227. [2012/09/19 21:43:37 | 000,000,000 | ---D | M] -- C:\Windows\Boot
  1228. [2012/09/19 21:43:37 | 000,000,000 | ---D | M] -- C:\Windows\Branding
  1229. [2012/09/19 21:45:28 | 000,000,000 | ---D | M] -- C:\Windows\Cursors
  1230. [2012/09/16 21:01:17 | 000,000,000 | ---D | M] -- C:\Windows\debug
  1231. [2012/09/19 21:43:37 | 000,000,000 | ---D | M] -- C:\Windows\diagnostics
  1232. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\DigitalLocker
  1233. [2011/08/19 21:19:54 | 000,000,000 | ---D | M] -- C:\Windows\Downloaded Program Files
  1234. [2012/09/19 21:45:28 | 000,000,000 | ---D | M] -- C:\Windows\ehome
  1235. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\en-US
  1236. [2012/09/19 21:45:29 | 000,000,000 | R-SD | M] -- C:\Windows\Fonts
  1237. [2012/09/19 21:43:37 | 000,000,000 | ---D | M] -- C:\Windows\Globalization
  1238. [2012/09/19 21:43:38 | 000,000,000 | ---D | M] -- C:\Windows\Help
  1239. [2012/09/19 21:43:38 | 000,000,000 | ---D | M] -- C:\Windows\IME
  1240. [2012/09/19 21:44:53 | 000,000,000 | ---D | M] -- C:\Windows\inf
  1241. [2012/09/19 20:46:49 | 000,000,000 | -HSD | M] -- C:\Windows\Installer
  1242. [2009/07/13 22:32:39 | 000,000,000 | ---D | M] -- C:\Windows\L2Schemas
  1243. [2012/09/17 17:17:13 | 000,000,000 | ---D | M] -- C:\Windows\LiveKernelReports
  1244. [2012/02/28 19:19:29 | 000,000,000 | ---D | M] -- C:\Windows\Logs
  1245. [2012/09/19 21:43:39 | 000,000,000 | ---D | M] -- C:\Windows\LoJackInstaller
  1246. [2012/09/19 21:45:28 | 000,000,000 | R-SD | M] -- C:\Windows\Media
  1247. [2012/09/19 21:43:48 | 000,000,000 | ---D | M] -- C:\Windows\Microsoft.NET
  1248. [2012/09/11 22:16:48 | 000,000,000 | ---D | M] -- C:\Windows\Minidump
  1249. [2011/06/15 05:45:31 | 000,000,000 | ---D | M] -- C:\Windows\ModemLogs
  1250. [2009/07/13 22:32:40 | 000,000,000 | ---D | M] -- C:\Windows\Offline Web Pages
  1251. [2009/12/09 20:17:55 | 000,000,000 | ---D | M] -- C:\Windows\Panther
  1252. [2009/12/05 03:21:27 | 000,000,000 | ---D | M] -- C:\Windows\PCHEALTH
  1253. [2012/09/19 21:43:50 | 000,000,000 | ---D | M] -- C:\Windows\Performance
  1254. [2012/09/19 21:43:50 | 000,000,000 | ---D | M] -- C:\Windows\PLA
  1255. [2012/09/19 21:43:50 | 000,000,000 | ---D | M] -- C:\Windows\PolicyDefinitions
  1256. [2012/09/23 12:17:02 | 000,000,000 | ---D | M] -- C:\Windows\Prefetch
  1257. [2012/09/15 11:13:34 | 000,000,000 | ---D | M] -- C:\Windows\pss
  1258. [2012/09/19 21:44:20 | 000,000,000 | ---D | M] -- C:\Windows\registration
  1259. [2012/09/19 21:43:50 | 000,000,000 | ---D | M] -- C:\Windows\rescache
  1260. [2012/09/19 21:43:50 | 000,000,000 | ---D | M] -- C:\Windows\Resources
  1261. [2009/07/13 19:35:47 | 000,000,000 | ---D | M] -- C:\Windows\SchCache
  1262. [2012/09/19 21:43:50 | 000,000,000 | ---D | M] -- C:\Windows\schemas
  1263. [2012/09/19 21:43:50 | 000,000,000 | ---D | M] -- C:\Windows\security
  1264. [2009/07/13 21:45:47 | 000,000,000 | ---D | M] -- C:\Windows\ServiceProfiles
  1265. [2012/09/19 21:43:59 | 000,000,000 | ---D | M] -- C:\Windows\servicing
  1266. [2012/09/19 21:43:59 | 000,000,000 | ---D | M] -- C:\Windows\Setup
  1267. [2012/09/19 21:45:29 | 000,000,000 | ---D | M] -- C:\Windows\ShellNew
  1268. [2009/12/10 20:48:01 | 000,000,000 | ---D | M] -- C:\Windows\SoftwareDistribution
  1269. [2012/09/19 21:43:59 | 000,000,000 | ---D | M] -- C:\Windows\Speech
  1270. [2012/09/07 18:28:05 | 000,000,000 | ---D | M] -- C:\Windows\Sun
  1271. [2009/07/13 19:36:55 | 000,000,000 | ---D | M] -- C:\Windows\system
  1272. [2012/09/23 11:30:08 | 000,000,000 | ---D | M] -- C:\Windows\System32
  1273. [2012/09/23 11:49:25 | 000,000,000 | ---D | M] -- C:\Windows\SysWOW64
  1274. [2009/07/13 21:57:13 | 000,000,000 | ---D | M] -- C:\Windows\TAPI
  1275. [2012/09/19 21:45:29 | 000,000,000 | ---D | M] -- C:\Windows\Tasks
  1276. [2012/09/23 12:23:17 | 000,000,000 | ---D | M] -- C:\Windows\Temp
  1277. [2009/07/13 19:34:33 | 000,000,000 | ---D | M] -- C:\Windows\tracing
  1278. [2009/07/13 22:32:39 | 000,000,000 | ---D | M] -- C:\Windows\twain_32
  1279. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\Vss
  1280. [2009/10/29 12:33:29 | 000,000,000 | ---D | M] -- C:\Windows\Web
  1281. [2012/09/23 11:29:50 | 000,000,000 | ---D | M] -- C:\Windows\winsxs
  1282.  
  1283. [color=#A23BEC]< %windir%\installer\*. >[/color]
  1284.  
  1285. [color=#A23BEC]< %windir%\system32\*. >[/color]
  1286. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\0409
  1287. [2009/07/13 20:20:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\AdvancedInstallers
  1288. [2009/07/13 20:20:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\ar-SA
  1289. [2009/07/13 20:20:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\bg-BG
  1290. [2009/07/13 19:35:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot
  1291. [2009/07/13 19:35:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot2
  1292. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\com
  1293. [2012/09/19 21:44:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\config
  1294. [2009/07/13 20:20:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\cs-CZ
  1295. [2009/07/13 20:20:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\da-DK
  1296. [2009/07/13 20:20:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE
  1297. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\Dism
  1298. [2009/12/05 04:43:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers
  1299. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore
  1300. [2009/07/13 20:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\el-GR
  1301. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\en
  1302. [2012/06/14 19:25:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US
  1303. [2009/07/13 20:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\es-ES
  1304. [2009/07/13 20:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\et-EE
  1305. [2009/07/13 20:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\fi-FI
  1306. [2009/07/13 20:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\fr-FR
  1307. [2009/07/13 22:32:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\FxsTmp
  1308. [2009/07/13 19:34:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\GroupPolicy
  1309. [2009/07/13 19:34:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\GroupPolicyUsers
  1310. [2009/07/13 20:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\he-IL
  1311. [2009/07/13 20:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\hr-HR
  1312. [2009/07/13 20:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\hu-HU
  1313. [2009/07/13 20:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\icsxml
  1314. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME
  1315. [2009/07/13 19:36:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\inetsrv
  1316. [2009/07/13 20:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\InstallShield
  1317. [2009/07/13 20:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\it-IT
  1318. [2009/07/13 20:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\ja-JP
  1319. [2009/07/13 20:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\ko-KR
  1320. [2009/12/05 04:59:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\Lang
  1321. [2009/07/13 22:32:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles
  1322. [2009/07/13 20:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\lt-LT
  1323. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\lv-LV
  1324. [2009/12/05 03:06:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\Macromed
  1325. [2009/07/13 20:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\manifeststore
  1326. [2012/09/23 11:29:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration
  1327. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz
  1328. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\Msdtc
  1329. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\MUI
  1330. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\nb-NO
  1331. [2009/07/13 19:34:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\NDF
  1332. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\NetworkList
  1333. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\nl-NL
  1334. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\oobe
  1335. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\pl-PL
  1336. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\Printing_Admin_Scripts
  1337. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\pt-BR
  1338. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\pt-PT
  1339. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\ras
  1340. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\Recovery
  1341. [2009/07/13 22:32:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\restore
  1342. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\ro-RO
  1343. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\ru-RU
  1344. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\Setup
  1345. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\sk-SK
  1346. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\sl-SI
  1347. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\slmgr
  1348. [2009/07/13 22:32:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech
  1349. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp
  1350. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\sppui
  1351. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\sr-Latn-CS
  1352. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\sv-SE
  1353. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\sysprep
  1354. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks
  1355. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\th-TH
  1356. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\tr-TR
  1357. [2009/07/13 20:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\uk-UA
  1358. [2010/03/07 10:45:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\Wat
  1359. [2010/01/30 22:35:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem
  1360. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\WCN
  1361. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi
  1362. [2009/07/13 22:32:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell
  1363. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\winrm
  1364. [2009/12/05 04:59:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\x64
  1365. [2009/07/13 20:20:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\zh-CN
  1366. [2009/07/13 20:20:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\zh-HK
  1367. [2009/07/13 20:20:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\zh-TW
  1368.  
  1369. [color=#A23BEC]< %windir%\sysnative\*. >[/color]
  1370. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\0409
  1371. [2009/07/13 20:20:11 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\AdvancedInstallers
  1372. [2009/07/13 20:20:11 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ar-SA
  1373. [2009/07/13 20:20:11 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\bg-BG
  1374. [2012/09/19 21:44:00 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Boot
  1375. [2012/09/23 02:45:53 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\catroot
  1376. [2012/09/23 02:46:08 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\catroot2
  1377. [2012/09/19 21:45:00 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\CodeIntegrity
  1378. [2012/09/19 21:44:10 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\com
  1379. [2012/09/23 12:02:09 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\config
  1380. [2009/07/13 20:20:13 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\cs-CZ
  1381. [2009/07/13 20:20:13 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\da-DK
  1382. [2009/07/13 20:20:13 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\de-DE
  1383. [2012/09/19 21:44:10 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Dism
  1384. [2012/09/23 11:49:59 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\drivers
  1385. [2012/09/19 21:45:29 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\DriverStore
  1386. [2010/12/03 19:24:30 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\DRVSTORE
  1387. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\el-GR
  1388. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\en
  1389. [2012/06/19 19:03:45 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\en-US
  1390. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\es-ES
  1391. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\et-EE
  1392. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\fi-FI
  1393. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\fr-FR
  1394. [2012/04/02 20:14:30 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\FxsTmp
  1395. [2012/09/07 08:14:55 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\gprodat
  1396. [2009/07/13 19:34:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\GroupPolicy
  1397. [2009/07/13 19:34:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\GroupPolicyUsers
  1398. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\he-IL
  1399. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\hr-HR
  1400. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\hu-HU
  1401. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ias
  1402. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\icsxml
  1403. [2009/07/13 20:20:11 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\IME
  1404. [2009/07/13 19:36:55 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\inetsrv
  1405. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\it-IT
  1406. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ja-JP
  1407. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ko-KR
  1408. [2010/06/16 18:51:57 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\LogFiles
  1409. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\lt-LT
  1410. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\lv-LV
  1411. [2011/12/04 21:49:08 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Macromed
  1412. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\manifeststore
  1413. [2009/12/05 03:10:44 | 000,000,000 | --SD | M] -- C:\Windows\sysnative\Microsoft
  1414. [2012/09/23 11:29:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\migration
  1415. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\migwiz
  1416. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Msdtc
  1417. [2009/07/13 22:37:45 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\MUI
  1418. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\nb-NO
  1419. [2012/04/07 19:48:49 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\NDF
  1420. [2009/07/13 20:20:11 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\NetworkList
  1421. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\nl-NL
  1422. [2009/12/09 20:18:50 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\oem
  1423. [2009/10/29 12:31:18 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\oobe
  1424. [2009/07/13 20:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\pl-PL
  1425. [2009/07/13 22:37:45 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Printing_Admin_Scripts
  1426. [2009/07/13 20:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\pt-BR
  1427. [2009/07/13 20:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\pt-PT
  1428. [2009/07/13 20:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ras
  1429. [2009/12/05 04:43:28 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Recovery
  1430. [2009/12/05 03:15:43 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\restore
  1431. [2009/07/13 20:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ro-RO
  1432. [2009/07/13 20:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ru-RU
  1433. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Setup
  1434. [2009/07/13 20:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sk-SK
  1435. [2009/07/13 20:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sl-SI
  1436. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\slmgr
  1437. [2009/07/13 20:20:13 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\SMI
  1438. [2009/07/13 22:32:38 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Speech
  1439. [2009/07/13 21:53:31 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\spool
  1440. [2009/07/13 20:20:13 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\spp
  1441. [2009/07/13 20:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sppui
  1442. [2009/07/13 20:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sr-Latn-CS
  1443. [2009/12/05 05:00:32 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\SRSLabs
  1444. [2009/07/13 20:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sv-SE
  1445. [2012/06/10 00:09:59 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sysprep
  1446. [2012/09/19 21:45:00 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Tasks
  1447. [2009/07/13 20:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\th-TH
  1448. [2009/07/13 20:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\tr-TR
  1449. [2009/07/13 20:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\uk-UA
  1450. [2010/03/07 10:45:38 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Wat
  1451. [2012/09/17 17:10:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\wbem
  1452. [2009/07/13 22:37:45 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\WCN
  1453. [2012/04/04 18:37:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\wdi
  1454. [2012/09/19 21:45:29 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\wfp
  1455. [2009/07/13 22:32:38 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\WinBioDatabase
  1456. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\WinBioPlugIns
  1457. [2009/07/13 22:32:38 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\WindowsPowerShell
  1458. [2009/07/13 20:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\winevt
  1459. [2009/07/13 22:37:46 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\winrm
  1460. [2009/07/13 20:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\zh-CN
  1461. [2009/07/13 20:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\zh-HK
  1462. [2009/07/13 20:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\zh-TW
  1463.  
  1464. [color=#A23BEC]< %Temp%\smtmp\1\*.* >[/color]
  1465.  
  1466. [color=#A23BEC]< %Temp%\smtmp\2\*.* >[/color]
  1467.  
  1468. [color=#A23BEC]< %Temp%\smtmp\3\*.* >[/color]
  1469.  
  1470. [color=#A23BEC]< %Temp%\smtmp\4\*.* >[/color]
  1471.  
  1472. [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
  1473.  
  1474. [color=#A23BEC]< %systemroot%\syswow64\*.dll /lockedfiles >[/color]
  1475.  
  1476. [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
  1477.  
  1478. [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /90 >[/color]
  1479.  
  1480. [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]
  1481.  
  1482. [color=#A23BEC]< %systemroot%\syswow64\drivers\*.sys /90 >[/color]
  1483.  
  1484. [color=#A23BEC]< %systemroot%\syswow64\drivers\*.sys /lockedfiles >[/color]
  1485.  
  1486. [color=#A23BEC]< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >[/color]
  1487.  
  1488. [color=#A23BEC]< %systemroot%\*. /rp /s >[/color]
  1489.  
  1490. [color=#A23BEC]< %systemroot%\assembly\tmp\*.* /S /MD5 >[/color]
  1491.  
  1492. [color=#A23BEC]< %systemroot%\assembly\temp\*.* /S /MD5 >[/color]
  1493.  
  1494. [color=#A23BEC]< %systemroot%\assembly\GAC\*.ini >[/color]
  1495.  
  1496. [color=#A23BEC]< %systemroot%\assembly\GAC_32\*.ini >[/color]
  1497.  
  1498. [color=#A23BEC]< %systemroot%\assembly\GAC_64\*.ini >[/color]
  1499.  
  1500. [color=#A23BEC]< %SystemRoot%\assembly\GAC_MSIL\*.ini >[/color]
  1501.  
  1502. [color=#A23BEC]< wsSystemRoot|l,n,u,@;True;False;True;$,{ /fn >[/color]
  1503.  
  1504. [color=#A23BEC]< %systemdrive%\$Recycle.Bin|@;true;true;true /fp >[/color]
  1505.  
  1506. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24} /s >[/color]
  1507. "" = PSFactoryBuffer
  1508. [HKEY_CLASSES_ROOT\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32]
  1509. "" = %systemroot%\system32\wbem\wbemsvc.dll -- [2009/07/13 18:16:17 | 000,047,616 | ---- | M] (Microsoft Corporation)
  1510. "ThreadingModel" = Both
  1511.  
  1512. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s >[/color]
  1513.  
  1514. [color=#A23BEC]< HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} /s >[/color]
  1515.  
  1516. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s >[/color]
  1517.  
  1518. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} /s >[/color]
  1519. "" = MruPidlList
  1520. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  1521. "" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 21:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
  1522. "ThreadingModel" = Apartment
  1523.  
  1524. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8} /s >[/color]
  1525. "" = Start Menu Pin
  1526. "ImplementsVerbs" = startpin;startunpin
  1527. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\InProcServer32]
  1528. "" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 21:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
  1529. "ThreadingModel" = Apartment
  1530.  
  1531. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24} /s >[/color]
  1532. "" = PSFactoryBuffer
  1533. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32]
  1534. "" = %systemroot%\system32\wbem\wbemsvc.dll -- [2009/07/13 18:16:17 | 000,047,616 | ---- | M] (Microsoft Corporation)
  1535. "ThreadingModel" = Both
  1536.  
  1537. [color=#A23BEC]< HKEY_CLASSES_ROOT\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F} /s >[/color]
  1538. "" = Microsoft WBEM _WbemFetchRefresherMgr Proxy Helper
  1539. [HKEY_CLASSES_ROOT\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InprocServer32]
  1540. "" = %systemroot%\system32\wbem\fastprox.dll -- [2009/07/13 18:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
  1541. "ThreadingModel" = Free
  1542.  
  1543. [color=#A23BEC]< HKEY_CLASSES_ROOT\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9} /s >[/color]
  1544. "" = ShellFolder for CD Burning
  1545. [HKEY_CLASSES_ROOT\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  1546. "" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 21:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
  1547. "ThreadingModel" = Apartment
  1548. [HKEY_CLASSES_ROOT\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\MergedFolder]
  1549. "Attributes" = 0x0
  1550. "AttributeMask" = 0xffffffff
  1551. "Location" = @shell32.dll,-12591 -- [2012/06/08 21:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
  1552. "ConflictOverlayIcon" = %SystemRoot%\system32\imageres.dll,-169 -- [2009/07/13 18:06:03 | 020,268,032 | ---- | M] (Microsoft Corporation)
  1553.  
  1554. [color=#A23BEC]< HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9} /s >[/color]
  1555.  
  1556. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5839FCA9-774D-42A1-ACDA-D6A79037F57F} /s >[/color]
  1557. "" = Microsoft WBEM _WbemFetchRefresherMgr Proxy Helper
  1558. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InprocServer32]
  1559. "" = %systemroot%\system32\wbem\fastprox.dll -- [2009/07/13 18:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
  1560. "ThreadingModel" = Free
  1561.  
  1562. [color=#A23BEC]< HKEY_CURRENT_USER\Software\Classes\clsid\{12d0253a-7c96-815c-11e0-3034bbd97cc0}] /s >[/color]
  1563.  
  1564. [color=#A23BEC]< HKEY_CURRENT_USER\Software\MSOLoad /s >[/color]
  1565.  
  1566. [color=#A23BEC]< type c:\diskreport.txt /c >[/color]
  1567. Microsoft DiskPart version 6.1.7600
  1568. Copyright (C) 1999-2008 Microsoft Corporation.
  1569. On computer: DIPANSHU-PC
  1570. Volume ### Ltr Label Fs Type Size Status Info
  1571. ---------- --- ----------- ----- ---------- ------- --------- --------
  1572. Volume 0 D DVD-ROM 0 B No Media
  1573. Volume 1 RECOVERY NTFS Partition 14 GB Healthy System
  1574. Volume 2 C OS NTFS Partition 451 GB Healthy Boot
  1575.  
  1576. [color=#A23BEC]< MD5 for: AFD.SYS >[/color]
  1577. [2011/12/27 20:59:24 | 000,498,688 | ---- | M] (Microsoft Corporation) MD5=1C7857B62DE5994A75B054A9FD4C3825 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17752_none_35e10b89752ee0f5\afd.sys
  1578. [2011/12/27 21:01:36 | 000,498,176 | ---- | M] (Microsoft Corporation) MD5=36A14FD1A23F57046361733B792CA8DB -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.21887_none_364f3a028e605345\afd.sys
  1579. [2011/04/24 19:44:02 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=6EF20DDF3172E97D69F596FB90602F29 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16802_none_3430bc3977dfec2d\afd.sys
  1580. [2009/07/13 16:21:42 | 000,500,224 | ---- | M] (Microsoft Corporation) MD5=B9384E03479D2506BC924C16A3DB87BC -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16385_none_33dd3439781e25f7\afd.sys
  1581. [2011/12/27 21:01:12 | 000,499,200 | ---- | M] (Microsoft Corporation) MD5=CCA39961E76B491DDF44B1E90FC8971D -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.21115_none_34b263fe91032456\afd.sys
  1582. [2010/11/20 02:23:34 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=D31DC7A16DEA4A9BAF179F3D6FBDB38C -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17514_none_360e4801750ca991\afd.sys
  1583. [2011/04/24 19:34:03 | 000,499,200 | ---- | M] (Microsoft Corporation) MD5=D5B031C308A409A0A576BFF4CF083D30 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17603_none_3618198975057170\afd.sys
  1584. [2011/12/27 20:59:11 | 000,499,200 | ---- | M] (Microsoft Corporation) MD5=DB9D6C6B2CD95A9CA414D045B627422E -- C:\Windows\SysNative\drivers\afd.sys
  1585. [2011/12/27 20:59:11 | 000,499,200 | ---- | M] (Microsoft Corporation) MD5=DB9D6C6B2CD95A9CA414D045B627422E -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16937_none_34154fcd77f3bbda\afd.sys
  1586. [2011/04/24 20:09:35 | 000,499,200 | ---- | M] (Microsoft Corporation) MD5=F4AD06143EAC303F55D0E86C40802976 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.21712_none_3695e61e8e2c13d4\afd.sys
  1587. [2011/04/24 19:44:27 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=FBFF8B7C9D116229E9208A0D1CAEB49B -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.20951_none_3483491e9126fe55\afd.sys
  1588.  
  1589. [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
  1590. [2009/07/13 18:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
  1591. [2009/07/13 18:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
  1592. [2009/07/13 18:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
  1593. [2009/07/13 18:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
  1594.  
  1595. [color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color]
  1596. [2009/07/13 18:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
  1597. [2009/07/13 18:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
  1598. [2009/07/13 18:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
  1599. [2009/07/13 18:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
  1600.  
  1601. [color=#A23BEC]< MD5 for: CSC.SYS >[/color]
  1602. [2009/07/13 16:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) MD5=4A6173C2279B498CD8F57CAE504564CB -- C:\Windows\winsxs\amd64_microsoft-windows-offlinefiles-core_31bf3856ad364e35_6.1.7600.16385_none_fa3d3a8e759850bd\csc.sys
  1603. [2010/11/20 02:27:13 | 000,514,560 | ---- | M] (Microsoft Corporation) MD5=54DA3DFD29ED9F1619B6F53F3CE55E49 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-offlinefiles-core_31bf3856ad364e35_6.1.7601.17514_none_fc6e4e567286d457\csc.sys
  1604.  
  1605. [color=#A23BEC]< MD5 for: DFSC.SYS >[/color]
  1606. [2009/07/13 16:23:44 | 000,102,400 | ---- | M] (Microsoft Corporation) MD5=3F1DC527070ACB87E40AFE46EF6DA749 -- C:\Windows\winsxs\amd64_microsoft-windows-dfsclient_31bf3856ad364e35_6.1.7600.16385_none_e38f1f84ffcceb85\dfsc.sys
  1607. [2011/04/26 19:45:11 | 000,102,400 | ---- | M] (Microsoft Corporation) MD5=59E1C75E5DDBB70BF5A9C6A34D31B4AC -- C:\Windows\winsxs\amd64_microsoft-windows-dfsclient_31bf3856ad364e35_6.1.7600.20953_none_e43734fe18d3f691\dfsc.sys
  1608. [2010/11/20 02:26:32 | 000,102,400 | ---- | M] (Microsoft Corporation) MD5=9BB2EF44EAA163B29C4A4587887A0FE4 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-dfsclient_31bf3856ad364e35_6.1.7601.17514_none_e5c0334cfcbb6f1f\dfsc.sys
  1609. [2011/04/26 19:57:40 | 000,102,400 | ---- | M] (Microsoft Corporation) MD5=9C253CE7311CA60FC11C774692A13208 -- C:\Windows\SysNative\drivers\dfsc.sys
  1610. [2011/04/26 19:57:40 | 000,102,400 | ---- | M] (Microsoft Corporation) MD5=9C253CE7311CA60FC11C774692A13208 -- C:\Windows\winsxs\amd64_microsoft-windows-dfsclient_31bf3856ad364e35_6.1.7600.16804_none_e3e4a818ff8ce469\dfsc.sys
  1611.  
  1612. [color=#A23BEC]< MD5 for: DISK.SYS >[/color]
  1613. [2009/07/13 18:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\SysNative\drivers\disk.sys
  1614. [2009/07/13 18:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\SysNative\DriverStore\FileRepository\disk.inf_amd64_neutral_10ce25bbc5a9cc43\disk.sys
  1615. [2009/07/13 18:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\winsxs\amd64_disk.inf_31bf3856ad364e35_6.1.7600.16385_none_55bb738b8ddd8a01\disk.sys
  1616.  
  1617. [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
  1618. [2011/02/25 23:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\explorer.exe
  1619. [2011/02/25 23:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
  1620. [2011/02/25 22:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
  1621. [2009/07/13 18:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
  1622. [2011/02/25 22:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
  1623. [2009/10/30 22:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
  1624. [2011/02/25 22:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\SysWOW64\explorer.exe
  1625. [2011/02/25 22:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
  1626. [2011/02/24 23:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
  1627. [2011/02/25 23:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
  1628. [2010/11/20 05:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
  1629. [2009/08/02 23:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
  1630. [2011/02/24 22:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
  1631. [2009/10/30 23:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
  1632. [2009/08/02 22:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
  1633. [2010/11/20 06:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
  1634. [2009/10/30 23:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
  1635. [2009/08/02 22:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
  1636. [2009/07/13 18:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
  1637. [2009/10/30 23:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
  1638. [2011/02/25 23:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
  1639. [2009/08/02 23:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
  1640.  
  1641. [color=#A23BEC]< MD5 for: I8042PRT.SYS >[/color]
  1642. [2009/07/13 16:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\SysNative\drivers\i8042prt.sys
  1643. [2009/07/13 16:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\SysNative\DriverStore\FileRepository\keyboard.inf_amd64_neutral_423c286802951189\i8042prt.sys
  1644. [2009/07/13 16:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\SysNative\DriverStore\FileRepository\msmouse.inf_amd64_neutral_7a5f47d3150cc0eb\i8042prt.sys
  1645. [2009/07/13 16:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\winsxs\amd64_keyboard.inf_31bf3856ad364e35_6.1.7600.16385_none_f3435f7ff2a9f325\i8042prt.sys
  1646. [2009/07/13 16:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\winsxs\amd64_keyboard.inf_31bf3856ad364e35_6.1.7601.17514_none_f5747347ef9876bf\i8042prt.sys
  1647. [2009/07/13 16:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\winsxs\amd64_msmouse.inf_31bf3856ad364e35_6.1.7600.16385_none_aa28fd23ec0c39f9\i8042prt.sys
  1648.  
  1649. [color=#A23BEC]< MD5 for: LSASS.EXE >[/color]
  1650. [2009/07/13 18:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_023f7c69767c3edd\lsass.exe
  1651. [2009/07/13 18:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_023e7e05767d22ad\lsass.exe
  1652. [2009/07/13 18:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_02bd4ae48fa2de68\lsass.exe
  1653. [2009/07/13 18:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe
  1654. [2011/11/16 23:20:34 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0A10B74FBB437FF9A23F1D5DE4446A83 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_04c1204e8cb39c3f\lsass.exe
  1655. [2011/11/17 00:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\SysNative\lsass.exe
  1656. [2011/11/17 00:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16915_none_028b374176436a30\lsass.exe
  1657. [2011/11/17 00:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.17035_none_02756f8b7653d554\lsass.exe
  1658. [2012/06/04 00:51:10 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=79C908CAA6F43021EB05F4C733A927D1 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_04f609a88c8c279c\lsass.exe
  1659. [2012/06/01 22:30:31 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=BF63CE11A25F3509129888710D5111FC -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21225_none_0309de288f695654\lsass.exe
  1660. [2011/11/16 23:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_0466c45b7371f20d\lsass.exe
  1661. [2011/11/16 23:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_044756c773895c5e\lsass.exe
  1662. [2011/11/16 23:42:52 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=D21BD47E528CD62E79311FB5DF0150E6 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21092_none_02bb2a0a8fa4d398\lsass.exe
  1663.  
  1664. [color=#A23BEC]< MD5 for: NETBT.SYS >[/color]
  1665. [2010/11/20 02:23:20 | 000,261,632 | ---- | M] (Microsoft Corporation) MD5=09594D1089C523423B32A4229263F068 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-netbt_31bf3856ad364e35_6.1.7601.17514_none_be8acdd10de3b1a6\netbt.sys
  1666. [2009/07/13 16:21:29 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=9162B273A44AB9DCE5B44362731D062A -- C:\Windows\SysNative\drivers\netbt.sys
  1667. [2009/07/13 16:21:29 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=9162B273A44AB9DCE5B44362731D062A -- C:\Windows\winsxs\amd64_microsoft-windows-netbt_31bf3856ad364e35_6.1.7600.16385_none_bc59ba0910f52e0c\netbt.sys
  1668.  
  1669. [color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
  1670. [2009/07/13 18:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\SysNative\netlogon.dll
  1671. [2009/07/13 18:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
  1672. [2010/11/20 06:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
  1673. [2010/11/20 05:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
  1674. [2009/07/13 18:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
  1675. [2009/07/13 18:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll
  1676.  
  1677. [color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
  1678. [2009/07/13 18:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
  1679. [2009/07/13 18:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
  1680. [2009/07/13 18:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\SysNative\scecli.dll
  1681. [2009/07/13 18:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
  1682. [2010/11/20 05:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
  1683. [2010/11/20 06:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
  1684.  
  1685. [color=#A23BEC]< MD5 for: SERIAL.SYS >[/color]
  1686. [2009/07/13 17:00:40 | 000,094,208 | ---- | M] (Microsoft Corporation) MD5=C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 -- C:\Windows\SysNative\drivers\serial.sys
  1687. [2009/07/13 17:00:40 | 000,094,208 | ---- | M] (Microsoft Corporation) MD5=C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 -- C:\Windows\SysNative\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\serial.sys
  1688. [2009/07/13 17:00:40 | 000,094,208 | ---- | M] (Microsoft Corporation) MD5=C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 -- C:\Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\serial.sys
  1689.  
  1690. [color=#A23BEC]< MD5 for: SERVICES.EXE >[/color]
  1691. [2009/07/13 18:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
  1692. [2009/07/13 18:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
  1693.  
  1694. [color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
  1695. [2009/07/13 18:14:45 | 000,020,480 | ---- | M] (Microsoft Corporation) MD5=2CEFF13ACE25A40BD8D97654944297CD -- C:\Windows\svchost.exe
  1696. [2009/07/13 18:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
  1697. [2009/07/13 18:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
  1698. [2009/07/13 18:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
  1699. [2009/07/13 18:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe
  1700.  
  1701. [color=#A23BEC]< MD5 for: TCPIP.SYS >[/color]
  1702. [2011/04/24 22:28:24 | 001,893,248 | ---- | M] (Microsoft Corporation) MD5=1F748D5439B65E0BEBD92F65048F030D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_0fb918de99201ffb\tcpip.sys
  1703. [2011/09/29 10:41:37 | 001,912,176 | ---- | M] (Microsoft Corporation) MD5=3810F06A4D74A7D62641EE73D6B3C660 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_11c6e9949627e69c\tcpip.sys
  1704. [2010/11/20 06:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
  1705. [2011/06/20 23:16:55 | 001,888,128 | ---- | M] (Microsoft Corporation) MD5=5279D4DD69C7C71524B8E7A5746D15CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20992_none_0f8ed978993fa916\tcpip.sys
  1706. [2010/06/13 23:39:16 | 001,889,152 | ---- | M] (Microsoft Corporation) MD5=542C6767C68C9D6AAACA59436B0D15C2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_0fd0b57e990e2079\tcpip.sys
  1707. [2012/03/30 03:19:17 | 001,877,872 | ---- | M] (Microsoft Corporation) MD5=5EFD096DEF47F8B88EF591DA92143440 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21178_none_0faa5514992a39a7\tcpip.sys
  1708. [2011/04/24 22:32:22 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=61DC720BB065D607D5823F13D2A64321 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_0f668bf97fd90dd3\tcpip.sys
  1709. [2012/03/30 04:09:53 | 001,895,280 | ---- | M] (Microsoft Corporation) MD5=624C5B3AA4C99B3184BB922D9ECE3FF0 -- C:\Windows\SysNative\drivers\tcpip.sys
  1710. [2012/03/30 04:09:53 | 001,895,280 | ---- | M] (Microsoft Corporation) MD5=624C5B3AA4C99B3184BB922D9ECE3FF0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16986_none_0f140fa780164fde\tcpip.sys
  1711. [2012/03/30 03:26:36 | 001,901,424 | ---- | M] (Microsoft Corporation) MD5=885B202006EE17AE99B9FBCEC9AF88C9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_11a27a8e9643d23a\tcpip.sys
  1712. [2010/06/13 23:37:36 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=90A2D722CF64D911879D6C4A4F802A4D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_0f59b7ad7fe2fcc8\tcpip.sys
  1713. [2009/07/13 18:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
  1714. [2011/04/24 22:33:51 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=92CE29D95AC9DD2D0EE9061D551BA250 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_114de9497cfe9316\tcpip.sys
  1715. [2011/06/20 23:20:30 | 001,914,752 | ---- | M] (Microsoft Corporation) MD5=A0EB71E0DC047C7CC95CD6AB4036296E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21754_none_11a276c29643d7ec\tcpip.sys
  1716. [2011/09/29 09:17:51 | 001,886,064 | ---- | M] (Microsoft Corporation) MD5=AC3E29880DB5659532A1AA3439304A43 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21060_none_0fad20ca992955d7\tcpip.sys
  1717. [2012/03/30 04:35:47 | 001,918,320 | ---- | M] (Microsoft Corporation) MD5=ACB82BDA8F46C84F465C1AFA517DC4B9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_114ceccb7cff740d\tcpip.sys
  1718. [2011/04/24 23:16:34 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=B77977AEB2FF159D01DB08A309989C5F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_11cbb5de9625357a\tcpip.sys
  1719. [2011/06/20 23:27:14 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=B9D87C7707F058AC652A398CD28DE14B -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16839_none_0f4d1e3b7feb1307\tcpip.sys
  1720. [2011/06/20 23:34:00 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=F0E98C00A09FDF791525829A1D14240F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17638_none_11327af77d12659c\tcpip.sys
  1721. [2011/09/29 09:24:44 | 001,897,328 | ---- | M] (Microsoft Corporation) MD5=F18F56EFC0BFB9C87BA01C37B27F4DA5 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16889_none_0f170e9f80139ebc\tcpip.sys
  1722. [2011/09/29 09:29:28 | 001,923,952 | ---- | M] (Microsoft Corporation) MD5=FC62769E7BFF2896035AEED399108162 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_10f09b257d43f3eb\tcpip.sys
  1723.  
  1724. [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
  1725. [2010/11/20 05:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
  1726. [2009/07/13 18:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
  1727. [2009/07/13 18:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
  1728. [2009/07/13 18:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe
  1729. [2009/07/13 18:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
  1730. [2010/11/20 06:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
  1731.  
  1732. [color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color]
  1733. [2010/11/20 06:34:02 | 000,295,808 | ---- | M] (Microsoft Corporation) MD5=0D08D2F3B3FF84E433346669B5E0F639 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_volume.inf_31bf3856ad364e35_6.1.7601.17514_none_73dcbcf012b4850e\volsnap.sys
  1734. [2009/07/13 18:45:55 | 000,294,992 | ---- | M] (Microsoft Corporation) MD5=58F82EED8CA24B461441F9C3E4F0BF5C -- C:\Windows\SysNative\drivers\volsnap.sys
  1735. [2009/07/13 18:45:55 | 000,294,992 | ---- | M] (Microsoft Corporation) MD5=58F82EED8CA24B461441F9C3E4F0BF5C -- C:\Windows\SysNative\DriverStore\FileRepository\volume.inf_amd64_neutral_1b1a512d99c5b72c\volsnap.sys
  1736. [2009/07/13 18:45:55 | 000,294,992 | ---- | M] (Microsoft Corporation) MD5=58F82EED8CA24B461441F9C3E4F0BF5C -- C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.1.7600.16385_none_71aba92815c60174\volsnap.sys
  1737.  
  1738. [color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
  1739. [2009/07/13 18:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
  1740. [2009/07/13 18:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
  1741. [2009/07/13 18:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
  1742. [2009/07/13 18:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
  1743.  
  1744. [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
  1745. [2010/11/20 06:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
  1746. [2009/07/13 18:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
  1747. [2009/10/28 00:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
  1748. [2009/10/27 23:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SysNative\winlogon.exe
  1749. [2009/10/27 23:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
  1750.  
  1751. < End of report >
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!