API tools faq
paste
Guest User

Untitled

a guest
Nov 23rd, 2012
52
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 175.35 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 11/23/2012 10:34:14 AM - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\sipseal\Desktop
  3. 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.0.8112.16421)
  5. Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
  6.  
  7. 1.92 Gb Total Physical Memory | 0.44 Gb Available Physical Memory | 22.96% Memory free
  8. 3.83 Gb Paging File | 1.69 Gb Available in Paging File | 44.04% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 86.31 Gb Total Space | 54.45 Gb Free Space | 63.09% Space Free | Partition Type: NTFS
  13. Drive D: | 62.73 Gb Total Space | 23.14 Gb Free Space | 36.88% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: CF-W8GWDAJR | User Name: sipseal | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  17. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2012/11/23 10:04:23 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\sipseal\Desktop\OTL.scr
  22. PRC - [2012/11/22 23:57:12 | 000,379,392 | ---- | M] () -- C:\Program Files (x86)\Mendeley Desktop\MendeleyWordPlugin.exe
  23. PRC - [2012/09/09 09:42:59 | 000,874,896 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe
  24. PRC - [2012/08/24 12:23:02 | 000,079,384 | ---- | M] (Google) -- C:\Users\sipseal\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
  25. PRC - [2012/05/24 13:39:22 | 027,112,840 | ---- | M] (Dropbox, Inc.) -- C:\Users\sipseal\AppData\Roaming\Dropbox\bin\Dropbox.exe
  26. PRC - [2011/08/19 08:26:50 | 000,450,848 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
  27. PRC - [2010/03/03 20:16:06 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  28. PRC - [2010/03/03 20:16:04 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
  29. PRC - [2009/12/25 03:20:34 | 000,076,672 | ---- | M] (Panasonic Corporation) -- C:\Program Files (x86)\Panasonic\Selsussv\selsussv.exe
  30. PRC - [2009/12/03 07:18:48 | 000,718,208 | ---- | M] (Panasonic Corporation) -- C:\Program Files (x86)\Panasonic\PPopup\ppopup.exe
  31. PRC - [2009/10/12 20:28:02 | 000,235,392 | ---- | M] (Panasonic Corporation) -- C:\Program Files (x86)\Panasonic\pcinfo\PCInfoSV.exe
  32. PRC - [2009/09/30 03:25:56 | 000,046,912 | ---- | M] (Panasonic Corporation) -- C:\Program Files (x86)\Panasonic\pcinfo\PcInfoPi.exe
  33. PRC - [2009/09/28 06:12:02 | 000,366,912 | ---- | M] (Panasonic Corporation) -- C:\Program Files (x86)\Panasonic\WheelPad\TouchPad.exe
  34. PRC - [2009/08/09 21:53:38 | 001,064,768 | ---- | M] (Panasonic Corporation) -- C:\Program Files (x86)\Panasonic\Hotkey Appendix\hkeyapp.exe
  35. PRC - [2009/07/22 17:15:20 | 000,118,784 | ---- | M] () -- C:\Windows\SysWOW64\tskman.exe
  36. PRC - [2009/07/08 23:24:58 | 000,223,768 | ---- | M] (Intel Corporation) -- C:\Windows\SysWOW64\etmservice.exe
  37. PRC - [2009/06/30 06:20:46 | 000,050,496 | ---- | M] (Panasonic Corporation) -- C:\Program Files (x86)\Panasonic\PNotif\PNotif.exe
  38. PRC - [2009/03/05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
  39. PRC - [2009/01/26 14:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
  40.  
  41.  
  42. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  43.  
  44. MOD - [2012/11/22 23:57:12 | 000,379,392 | ---- | M] () -- C:\Program Files (x86)\Mendeley Desktop\MendeleyWordPlugin.exe
  45. MOD - [2012/11/20 20:59:10 | 000,527,360 | ---- | M] () -- C:\Users\sipseal\AppData\Roaming\tinlb.dll
  46. MOD - [2012/11/20 08:07:15 | 000,452,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\3a7eb7595728baf4078ec5f97b44180c\IAStorUtil.ni.dll
  47. MOD - [2012/11/20 07:23:59 | 011,833,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\03cfab5534482e8fc313ead6edc19100\System.Web.ni.dll
  48. MOD - [2012/11/20 07:23:47 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\413288993ff690e8251d2dbe32bee01f\System.Runtime.Remoting.ni.dll
  49. MOD - [2012/11/20 07:23:00 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d040079bc7148afeca03c5abb6fc3c61\System.Windows.Forms.ni.dll
  50. MOD - [2012/11/20 07:22:49 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\4e80768a2d88c7a333e43cbb7a6c0705\System.Drawing.ni.dll
  51. MOD - [2012/11/20 07:22:24 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\b311b783e1efaa9527f4c2c9680c44d1\WindowsBase.ni.dll
  52. MOD - [2012/11/20 07:22:15 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\25e672ea505e50ab058258ac72a54f02\System.Xml.ni.dll
  53. MOD - [2012/11/20 07:22:09 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c64ca3678261c8ffcd9e7efd1af6ed54\System.Configuration.ni.dll
  54. MOD - [2012/11/20 07:22:07 | 007,988,736 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9dd758ac0bf7358ac6e4720610fcc63c\System.ni.dll
  55. MOD - [2012/11/20 07:21:54 | 011,493,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\187d7c66735c533de851c76384f86912\mscorlib.ni.dll
  56. MOD - [2012/09/09 09:43:14 | 000,276,480 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwebmdec.dll
  57. MOD - [2012/09/09 09:43:14 | 000,064,000 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstautodetect.dll
  58. MOD - [2012/09/09 09:43:14 | 000,046,592 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwaveform.dll
  59. MOD - [2012/09/09 09:43:13 | 000,316,928 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstoggdec.dll
  60. MOD - [2012/09/09 09:43:13 | 000,168,448 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstffmpegcolorspace.dll
  61. MOD - [2012/09/09 09:43:13 | 000,078,336 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwavparse.dll
  62. MOD - [2012/09/09 09:43:13 | 000,076,800 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstdirectsound.dll
  63. MOD - [2012/09/09 09:43:13 | 000,045,568 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gsttypefindfunctions.dll
  64. MOD - [2012/09/09 09:43:12 | 000,783,360 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\gstreamer.dll
  65. MOD - [2012/09/09 09:43:12 | 000,099,840 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstcoreplugins.dll
  66. MOD - [2012/09/09 09:43:12 | 000,098,816 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioresample.dll
  67. MOD - [2012/09/09 09:43:12 | 000,098,816 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioconvert.dll
  68. MOD - [2012/09/09 09:43:12 | 000,068,608 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstdecodebin2.dll
  69. MOD - [2012/07/28 17:55:07 | 009,465,032 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_268.dll
  70. MOD - [2011/10/10 12:11:48 | 002,569,216 | ---- | M] () -- C:\Program Files (x86)\Mendeley Desktop\QtCore4.dll
  71. MOD - [2011/10/10 12:11:45 | 009,078,784 | ---- | M] () -- C:\Program Files (x86)\Mendeley Desktop\QtGui4.dll
  72. MOD - [2011/10/05 02:52:30 | 000,756,048 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSPTLS.DLL
  73. MOD - [2011/10/03 04:05:36 | 000,008,192 | ---- | M] () -- C:\Program Files (x86)\Java\jre6\bin\jp2native.dll
  74.  
  75.  
  76. [color=#E56717]========== Services (SafeList) ==========[/color]
  77.  
  78. SRV:[b]64bit:[/b] - [2012/09/12 20:21:48 | 000,368,896 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
  79. SRV:[b]64bit:[/b] - [2012/09/12 20:21:48 | 000,022,072 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
  80. SRV:[b]64bit:[/b] - [2009/08/12 04:07:28 | 000,111,616 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\AEADISRV.EXE -- (AEADIFilters)
  81. SRV:[b]64bit:[/b] - [2009/07/13 20:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  82. SRV:[b]64bit:[/b] - [2009/07/13 20:41:19 | 000,045,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lpdsvc.dll -- (LPDSVC)
  83. SRV:[b]64bit:[/b] - [2009/07/13 20:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  84. SRV:[b]64bit:[/b] - [2009/06/17 02:21:18 | 000,636,736 | ---- | M] (Panasonic Corporation) [Auto | Running] -- C:\Program Files\Panasonic\PPlanEx\opdoffsv.exe -- (OPDOFFSV)
  85. SRV - [2012/10/24 12:50:38 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  86. SRV - [2012/07/03 12:19:28 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  87. SRV - [2011/08/19 08:26:50 | 000,450,848 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv)
  88. SRV - [2010/03/21 20:05:56 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
  89. SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  90. SRV - [2010/03/03 20:16:06 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  91. SRV - [2009/12/25 03:20:34 | 000,076,672 | ---- | M] (Panasonic Corporation) [Auto | Running] -- C:\Program Files (x86)\Panasonic\Selsussv\selsussv.exe -- (SELSUSSV)
  92. SRV - [2009/10/12 20:28:02 | 000,235,392 | ---- | M] (Panasonic Corporation) [Auto | Running] -- C:\Program Files (x86)\Panasonic\pcinfo\PCInfoSV.exe -- (PcInfoSV)
  93. SRV - [2009/09/30 03:25:56 | 000,046,912 | ---- | M] (Panasonic Corporation) [Auto | Running] -- C:\Program Files (x86)\Panasonic\pcinfo\PcInfoPi.exe -- (PcInfoPi)
  94. SRV - [2009/07/22 17:15:20 | 000,118,784 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\tskman.exe -- (Task Manager Lite)
  95. SRV - [2009/07/08 23:24:58 | 000,223,768 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysWOW64\etmservice.exe -- (ETMService)
  96. SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  97. SRV - [2009/04/28 22:21:00 | 000,436,736 | ---- | M] (Conexant Systems, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\XAudio64.dll -- (HsfXAudioService)
  98.  
  99.  
  100. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  101.  
  102. DRV:[b]64bit:[/b] - [2012/08/30 21:03:48 | 000,128,456 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
  103. DRV:[b]64bit:[/b] - [2012/03/01 01:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  104. DRV:[b]64bit:[/b] - [2011/08/19 08:27:30 | 004,869,024 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64)
  105. DRV:[b]64bit:[/b] - [2011/07/29 12:54:56 | 000,016,776 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv)
  106. DRV:[b]64bit:[/b] - [2011/07/29 12:54:56 | 000,009,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv)
  107. DRV:[b]64bit:[/b] - [2011/03/11 01:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  108. DRV:[b]64bit:[/b] - [2011/03/11 01:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  109. DRV:[b]64bit:[/b] - [2010/11/20 08:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  110. DRV:[b]64bit:[/b] - [2010/11/20 06:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  111. DRV:[b]64bit:[/b] - [2010/11/20 04:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  112. DRV:[b]64bit:[/b] - [2010/03/03 18:51:40 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  113. DRV:[b]64bit:[/b] - [2009/12/09 08:10:40 | 000,032,768 | ---- | M] (Juniper Networks) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dsNcAdpt.sys -- (dsNcAdpt)
  114. DRV:[b]64bit:[/b] - [2009/08/13 01:53:50 | 007,370,176 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  115. DRV:[b]64bit:[/b] - [2009/08/12 04:07:28 | 000,475,136 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ADIHdAud.sys -- (ADIHdAudAddService)
  116. DRV:[b]64bit:[/b] - [2009/07/20 04:48:32 | 000,274,480 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  117. DRV:[b]64bit:[/b] - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  118. DRV:[b]64bit:[/b] - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  119. DRV:[b]64bit:[/b] - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  120. DRV:[b]64bit:[/b] - [2009/07/13 19:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
  121. DRV:[b]64bit:[/b] - [2009/07/13 18:21:48 | 000,038,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
  122. DRV:[b]64bit:[/b] - [2009/07/08 23:21:34 | 000,013,824 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtmDevFan.sys -- (EtmFan)
  123. DRV:[b]64bit:[/b] - [2009/07/08 23:20:20 | 000,023,552 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtmDevGen.sys -- (EtmDevGen)
  124. DRV:[b]64bit:[/b] - [2009/07/08 23:18:40 | 000,108,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtmDevGmch.sys -- (EtmGmchMem)
  125. DRV:[b]64bit:[/b] - [2009/07/08 23:16:54 | 000,032,256 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtmDevCpu.sys -- (EtmCpu)
  126. DRV:[b]64bit:[/b] - [2009/07/08 23:15:44 | 000,058,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtmDrvMgr.sys -- (EtmDrvMgr)
  127. DRV:[b]64bit:[/b] - [2009/06/29 22:50:22 | 000,066,112 | ---- | M] (Panasonic Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nmisc64.sys -- (NewMisc)
  128. DRV:[b]64bit:[/b] - [2009/06/12 05:19:58 | 000,287,960 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\e1y62x64.sys -- (e1yexpress)
  129. DRV:[b]64bit:[/b] - [2009/06/10 16:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92)
  130. DRV:[b]64bit:[/b] - [2009/06/10 16:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac)
  131. DRV:[b]64bit:[/b] - [2009/06/10 16:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA)
  132. DRV:[b]64bit:[/b] - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  133. DRV:[b]64bit:[/b] - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  134. DRV:[b]64bit:[/b] - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  135. DRV:[b]64bit:[/b] - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  136. DRV:[b]64bit:[/b] - [2009/05/13 19:51:40 | 005,435,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETw5v64.sys -- (netw5v64)
  137. DRV:[b]64bit:[/b] - [2009/04/28 22:21:00 | 000,010,240 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\XAudio64.sys -- (XAudio)
  138. DRV:[b]64bit:[/b] - [2009/03/09 21:49:10 | 000,028,992 | ---- | M] (Panasonic Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hotkey.sys -- (HOTKEY)
  139. DRV:[b]64bit:[/b] - [2009/02/12 09:24:00 | 001,485,824 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CAX_DPV.sys -- (HSF_DPV)
  140. DRV:[b]64bit:[/b] - [2009/02/12 09:20:00 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CAXHWAZL.sys -- (CAXHWAZL)
  141. DRV:[b]64bit:[/b] - [2009/02/12 09:19:00 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CAX_CNXT.sys -- (winachsf)
  142. DRV:[b]64bit:[/b] - [2006/06/17 17:27:00 | 000,017,024 | ---- | M] (Conexant) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mdmxsdk.sys -- (mdmxsdk)
  143. DRV - [2011/07/29 12:54:56 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv)
  144. DRV - [2011/07/29 12:54:56 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv)
  145. DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  146.  
  147.  
  148. [color=#E56717]========== Standard Registry (All) ==========[/color]
  149.  
  150.  
  151. [color=#E56717]========== Internet Explorer ==========[/color]
  152.  
  153. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  154. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  155. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
  156. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
  157. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
  158. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  159. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
  160. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  161. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  162. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  163. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  164. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  165. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
  166. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
  167. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  168. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  169. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
  170. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  171. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  172. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  173.  
  174.  
  175. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  176.  
  177. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  178.  
  179. IE - HKU\S-1-5-19\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
  180.  
  181. IE - HKU\S-1-5-20\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
  182.  
  183. IE - HKU\S-1-5-21-3866111677-935689091-1683429776-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
  184. IE - HKU\S-1-5-21-3866111677-935689091-1683429776-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  185. IE - HKU\S-1-5-21-3866111677-935689091-1683429776-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.nytimes.com
  186. IE - HKU\S-1-5-21-3866111677-935689091-1683429776-1001\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
  187. IE - HKU\S-1-5-21-3866111677-935689091-1683429776-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  188. IE - HKU\S-1-5-21-3866111677-935689091-1683429776-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  189. IE - HKU\S-1-5-21-3866111677-935689091-1683429776-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  190.  
  191. [color=#E56717]========== FireFox ==========[/color]
  192.  
  193. FF - prefs.js..browser.startup.homepage: "http://www.google.com/calendar/"
  194. FF - prefs.js..extensions.enabledAddons: firefox@ghostery.com:2.8.3
  195. FF - prefs.js..extensions.enabledAddons: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20120926
  196. FF - prefs.js..extensions.enabledAddons: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.12
  197. FF - prefs.js..extensions.enabledAddons: {56702f58-5620-4c32-a906-4271537ab80f}:2.0.14
  198. FF - prefs.js..extensions.enabledAddons: {972ce4c6-7e08-4474-a285-3208198ce6fd}:16.0.2
  199. FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6
  200. FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20110323
  201. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
  202. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
  203. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
  204. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
  205. FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17
  206. FF - user.js - File not found
  207.  
  208. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_268.dll File not found
  209. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  210. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_268.dll ()
  211. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
  212. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  213. FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
  214. FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\sipseal\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
  215. FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\sipseal\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
  216. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\sipseal\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
  217. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\sipseal\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
  218.  
  219. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/11/01 06:38:13 | 000,000,000 | ---D | M]
  220. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/10/29 06:06:20 | 000,000,000 | ---D | M]
  221. FF - HKEY_LOCAL_MACHINE\software\mozilla\SeaMonkey 2.0.6\extensions\\Components: C:\Program Files (x86)\SeaMonkey\components
  222. FF - HKEY_LOCAL_MACHINE\software\mozilla\SeaMonkey 2.0.6\extensions\\Plugins: C:\Program Files (x86)\SeaMonkey\plugins
  223.  
  224. [2010/09/06 00:24:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\sipseal\AppData\Roaming\mozilla\Extensions
  225. [2010/09/06 00:24:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\sipseal\AppData\Roaming\mozilla\Extensions\{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}
  226. [2010/03/21 18:05:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\sipseal\AppData\Roaming\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
  227. [2012/11/23 10:06:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\sipseal\AppData\Roaming\mozilla\Firefox\Profiles\4udgjyrw.default\extensions
  228. [2012/10/03 22:17:42 | 000,000,000 | ---D | M] (WOT) -- C:\Users\sipseal\AppData\Roaming\mozilla\Firefox\Profiles\4udgjyrw.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
  229. [2012/11/22 17:45:19 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\sipseal\AppData\Roaming\mozilla\Firefox\Profiles\4udgjyrw.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
  230. [2012/09/21 06:24:18 | 000,000,000 | ---D | M] (Ghostery) -- C:\Users\sipseal\AppData\Roaming\mozilla\Firefox\Profiles\4udgjyrw.default\extensions\firefox@ghostery.com
  231. [2010/09/06 00:24:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\sipseal\AppData\Roaming\mozilla\SeaMonkey\Profiles\rlpvmcdr.default\extensions
  232. [2012/11/23 08:20:40 | 000,002,391 | ---- | M] () (No name found) -- C:\Users\sipseal\AppData\Roaming\mozilla\firefox\profiles\4udgjyrw.default\extensions\{56702f58-5620-4c32-a906-4271537ab80f}.xpi
  233. [2012/11/21 23:53:13 | 000,804,737 | ---- | M] () (No name found) -- C:\Users\sipseal\AppData\Roaming\mozilla\firefox\profiles\4udgjyrw.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  234. [2012/11/01 06:38:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
  235. [2012/11/01 06:38:13 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  236. [2012/10/24 12:50:58 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
  237. [2011/10/03 04:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
  238. [2006/10/26 19:12:16 | 000,016,192 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL
  239. [2012/07/30 13:52:13 | 000,103,904 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll
  240. [2012/08/08 20:19:46 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll
  241. [2012/08/08 20:19:47 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll
  242. [2012/08/08 20:19:47 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll
  243. [2012/08/08 20:19:48 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll
  244. [2012/08/08 20:19:48 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll
  245. [2012/08/08 20:19:49 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll
  246. [2012/08/08 20:19:49 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll
  247. [2012/10/24 12:50:17 | 000,001,607 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom.xml
  248. [2012/10/24 12:50:17 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
  249. [2012/10/24 12:50:17 | 000,001,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay.xml
  250. [2012/10/24 12:50:17 | 000,003,581 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\google.xml
  251. [2012/10/24 12:50:17 | 000,002,058 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
  252. [2012/10/24 12:50:17 | 000,001,391 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia.xml
  253. [2012/10/24 12:50:18 | 000,001,309 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo.xml
  254.  
  255. O1 HOSTS File: ([2012/11/12 21:50:32 | 000,444,833 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  256. O1 - Hosts: 127.0.0.1 www.007guard.com
  257. O1 - Hosts: 127.0.0.1 007guard.com
  258. O1 - Hosts: 127.0.0.1 008i.com
  259. O1 - Hosts: 127.0.0.1 www.008k.com
  260. O1 - Hosts: 127.0.0.1 008k.com
  261. O1 - Hosts: 127.0.0.1 www.00hq.com
  262. O1 - Hosts: 127.0.0.1 00hq.com
  263. O1 - Hosts: 127.0.0.1 010402.com
  264. O1 - Hosts: 127.0.0.1 www.032439.com
  265. O1 - Hosts: 127.0.0.1 032439.com
  266. O1 - Hosts: 127.0.0.1 www.0scan.com
  267. O1 - Hosts: 127.0.0.1 0scan.com
  268. O1 - Hosts: 127.0.0.1 1000gratisproben.com
  269. O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
  270. O1 - Hosts: 127.0.0.1 1001namen.com
  271. O1 - Hosts: 127.0.0.1 www.1001namen.com
  272. O1 - Hosts: 127.0.0.1 100888290cs.com
  273. O1 - Hosts: 127.0.0.1 www.100888290cs.com
  274. O1 - Hosts: 127.0.0.1 www.100sexlinks.com
  275. O1 - Hosts: 127.0.0.1 100sexlinks.com
  276. O1 - Hosts: 127.0.0.1 10sek.com
  277. O1 - Hosts: 127.0.0.1 www.10sek.com
  278. O1 - Hosts: 127.0.0.1 www.1-2005-search.com
  279. O1 - Hosts: 127.0.0.1 1-2005-search.com
  280. O1 - Hosts: 127.0.0.1 www.123fporn.info
  281. O1 - Hosts: 15276 more lines...
  282. O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
  283. O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
  284. O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
  285. O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  286. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
  287. O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  288. O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  289. O3 - HKU\S-1-5-21-3866111677-935689091-1683429776-1001\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  290. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
  291. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
  292. O4:[b]64bit:[/b] - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
  293. O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
  294. O4:[b]64bit:[/b] - HKLM..\Run: [PPlanEx] C:\Program Files\Panasonic\PPlanEx\PPlanEx.exe (Panasonic Corporation)
  295. O4:[b]64bit:[/b] - HKLM..\Run: [SoundMAX] C:\Program Files (x86)\Analog Devices\SoundMAX\soundmax.exe (Analog Devices, Inc.)
  296. O4:[b]64bit:[/b] - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated)
  297. O4:[b]64bit:[/b] - HKLM..\Run: [WSwitch] C:\Program Files\Panasonic\WSwitch\WSwitch.exe (Panasonic Corporation)
  298. O4 - HKLM..\Run: [] File not found
  299. O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
  300. O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
  301. O4 - HKLM..\Run: [Panasonic Hotkey Manager] C:\Program Files (x86)\Panasonic\Hotkey Appendix\hkeyapp.exe (Panasonic Corporation)
  302. O4 - HKLM..\Run: [PCinfo] C:\Program Files (x86)\Panasonic\pcinfo\PcInfoUt.exe (Panasonic Corporation)
  303. O4 - HKLM..\Run: [QuickTime Task] D:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
  304. O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.)
  305. O4 - HKU\S-1-5-19..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun File not found
  306. O4 - HKU\S-1-5-20..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun File not found
  307. O4 - HKU\S-1-5-21-3866111677-935689091-1683429776-1001..\Run: [Google Update] C:\Users\sipseal\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
  308. O4 - HKU\S-1-5-21-3866111677-935689091-1683429776-1001..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
  309. O4 - HKU\S-1-5-21-3866111677-935689091-1683429776-1001..\Run: [tinlb] C:\Users\sipseal\AppData\Roaming\tinlb.dll ()
  310. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  311. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  312. O4 - Startup: C:\Users\sipseal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\sipseal\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
  313. O4 - Startup: C:\Users\sipseal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
  314. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  315. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
  316. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 0
  317. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoAutorun = 1
  318. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
  319. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  320. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  321. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
  322. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
  323. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
  324. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
  325. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
  326. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
  327. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
  328. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
  329. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
  330. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
  331. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
  332. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
  333. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
  334. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
  335. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
  336. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
  337. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
  338. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
  339. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
  340. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
  341. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
  342. O7 - HKU\S-1-5-21-3866111677-935689091-1683429776-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
  343. O7 - HKU\S-1-5-21-3866111677-935689091-1683429776-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoAutorun = 1
  344. O8:[b]64bit:[/b] - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  345. O8:[b]64bit:[/b] - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  346. O8:[b]64bit:[/b] - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  347. O8:[b]64bit:[/b] - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  348. O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
  349. O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  350. O8 - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  351. O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  352. O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  353. O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
  354. O9:[b]64bit:[/b] - Extra Button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll (Apple Inc.)
  355. O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
  356. O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
  357. O9 - Extra Button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files (x86)\Bonjour\ExplorerPlugin.dll (Apple Inc.)
  358. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
  359. O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
  360. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative\nlaapi.dll (Microsoft Corporation)
  361. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation)
  362. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
  363. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
  364. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  365. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation)
  366. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  367. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  368. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  369. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  370. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  371. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  372. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  373. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  374. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  375. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  376. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  377. O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation)
  378. O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation)
  379. O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
  380. O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
  381. O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  382. O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation)
  383. O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  384. O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  385. O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  386. O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  387. O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  388. O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  389. O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  390. O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  391. O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  392. O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  393. O13[b]64bit:[/b] - gopher Prefix: missing
  394. O13 - gopher Prefix: missing
  395. O15 - HKU\S-1-5-21-3866111677-935689091-1683429776-1001\..Trusted Domains: intuit.com ([ttlc] https in Trusted sites)
  396. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
  397. O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
  398. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
  399. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  400. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{08B8ED23-201F-45B9-B756-36DFEA2AB2A9}: DhcpNameServer = 134.174.141.2 134.174.17.6
  401. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3E2926BD-7107-4742-B8D6-F73FCFE2AADD}: DhcpNameServer = 192.168.1.1
  402. O18:[b]64bit:[/b] - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  403. O18:[b]64bit:[/b] - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  404. O18:[b]64bit:[/b] - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
  405. O18:[b]64bit:[/b] - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  406. O18:[b]64bit:[/b] - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  407. O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
  408. O18:[b]64bit:[/b] - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  409. O18:[b]64bit:[/b] - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  410. O18:[b]64bit:[/b] - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
  411. O18:[b]64bit:[/b] - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  412. O18:[b]64bit:[/b] - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  413. O18:[b]64bit:[/b] - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  414. O18:[b]64bit:[/b] - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysNative\inetcomm.dll (Microsoft Corporation)
  415. O18:[b]64bit:[/b] - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  416. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  417. O18:[b]64bit:[/b] - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
  418. O18:[b]64bit:[/b] - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  419. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  420. O18:[b]64bit:[/b] - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
  421. O18:[b]64bit:[/b] - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  422. O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  423. O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  424. O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
  425. O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  426. O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  427. O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
  428. O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  429. O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  430. O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
  431. O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  432. O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  433. O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  434. O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation)
  435. O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  436. O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files (x86)\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
  437. O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
  438. O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  439. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  440. O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
  441. O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  442. O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  443. O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  444. O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  445. O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  446. O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
  447. O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
  448. O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
  449. O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  450. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  451. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  452. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
  453. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  454. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
  455. O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
  456. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  457. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  458. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  459. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
  460. O29:[b]64bit:[/b] - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
  461. O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
  462. O30:[b]64bit:[/b] - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
  463. O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
  464. O30:[b]64bit:[/b] - LSA: Security Packages - (kerberos) - C:\Windows\SysNative\kerberos.dll (Microsoft Corporation)
  465. O30:[b]64bit:[/b] - LSA: Security Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
  466. O30:[b]64bit:[/b] - LSA: Security Packages - (schannel) - C:\Windows\SysNative\schannel.dll (Microsoft Corporation)
  467. O30:[b]64bit:[/b] - LSA: Security Packages - (wdigest) - C:\Windows\SysNative\wdigest.dll (Microsoft Corporation)
  468. O30:[b]64bit:[/b] - LSA: Security Packages - (tspkg) - C:\Windows\SysNative\tspkg.dll (Microsoft Corporation)
  469. O30:[b]64bit:[/b] - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
  470. O30 - LSA: Security Packages - (kerberos) - C:\Windows\SysWow64\kerberos.dll (Microsoft Corporation)
  471. O30 - LSA: Security Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
  472. O30 - LSA: Security Packages - (schannel) - C:\Windows\SysWow64\schannel.dll (Microsoft Corporation)
  473. O30 - LSA: Security Packages - (wdigest) - C:\Windows\SysWow64\wdigest.dll (Microsoft Corporation)
  474. O30 - LSA: Security Packages - (tspkg) - C:\Windows\SysWow64\tspkg.dll (Microsoft Corporation)
  475. O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
  476. O31 - SafeBoot: AlternateShell - cmd.exe
  477. O32 - HKLM CDRom: AutoRun - 1
  478. O34 - HKLM BootExecute: (autocheck autochk *)
  479. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  480. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  481. O35 - HKLM\..comfile [open] -- "%1" %*
  482. O35 - HKLM\..exefile [open] -- "%1" %*
  483. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  484. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  485. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  486. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  487. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  488. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  489. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  490.  
  491. NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
  492.  
  493. MsConfig:64bit - StartUpReg: [b]Acrobat Assistant 8.0[/b] - hkey= - key= - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
  494. MsConfig:64bit - StartUpReg: [b]Adobe Acrobat Speed Launcher[/b] - hkey= - key= - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
  495. MsConfig:64bit - StartUpReg: [b]Adobe ARM[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
  496. MsConfig:64bit - StartUpReg: [b]DSKEY[/b] - hkey= - key= - C:\Windows\SysWOW64\DsKey.exe ()
  497. MsConfig:64bit - StartUpReg: [b]GrooveMonitor[/b] - hkey= - key= - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
  498. MsConfig:64bit - StartUpReg: [b]KeyAccess[/b] - hkey= - key= - File not found
  499. MsConfig:64bit - StartUpReg: [b]setup[/b] - hkey= - key= - C:\Users\Public\Suds\Ugywv.exe ()
  500. MsConfig:64bit - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
  501. MsConfig:64bit - State: "startup" - Reg Error: Key error.
  502.  
  503. SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
  504. SafeBootMin:[b]64bit:[/b] Base - Driver Group
  505. SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
  506. SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
  507. SafeBootMin:[b]64bit:[/b] File system - Driver Group
  508. SafeBootMin:[b]64bit:[/b] Filter - Driver Group
  509. SafeBootMin:[b]64bit:[/b] HelpSvc - Service
  510. SafeBootMin:[b]64bit:[/b] MsMpSvc - C:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
  511. SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
  512. SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
  513. SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
  514. SafeBootMin:[b]64bit:[/b] sacsvr - Service
  515. SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
  516. SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
  517. SafeBootMin:[b]64bit:[/b] vmms - Service
  518. SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
  519. SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  520. SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  521. SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  522. SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  523. SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  524. SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  525. SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  526. SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  527. SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  528. SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  529. SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  530. SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  531. SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  532. SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  533. SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  534. SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  535. SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  536. SafeBootMin: Base - Driver Group
  537. SafeBootMin: Boot Bus Extender - Driver Group
  538. SafeBootMin: Boot file system - Driver Group
  539. SafeBootMin: File system - Driver Group
  540. SafeBootMin: Filter - Driver Group
  541. SafeBootMin: HelpSvc - Service
  542. SafeBootMin: PCI Configuration - Driver Group
  543. SafeBootMin: PNP Filter - Driver Group
  544. SafeBootMin: Primary disk - Driver Group
  545. SafeBootMin: sacsvr - Service
  546. SafeBootMin: SCSI Class - Driver Group
  547. SafeBootMin: System Bus Extender - Driver Group
  548. SafeBootMin: vmms - Service
  549. SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  550. SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  551. SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  552. SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  553. SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  554. SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  555. SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  556. SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  557. SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  558. SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  559. SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  560. SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  561. SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  562. SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  563. SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  564. SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  565. SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  566.  
  567. SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
  568. SafeBootNet:[b]64bit:[/b] Base - Driver Group
  569. SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
  570. SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
  571. SafeBootNet:[b]64bit:[/b] File system - Driver Group
  572. SafeBootNet:[b]64bit:[/b] Filter - Driver Group
  573. SafeBootNet:[b]64bit:[/b] HelpSvc - Service
  574. SafeBootNet:[b]64bit:[/b] Messenger - Service
  575. SafeBootNet:[b]64bit:[/b] MsMpSvc - C:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
  576. SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
  577. SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
  578. SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
  579. SafeBootNet:[b]64bit:[/b] Network - Driver Group
  580. SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
  581. SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
  582. SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
  583. SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
  584. SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
  585. SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
  586. SafeBootNet:[b]64bit:[/b] sacsvr - Service
  587. SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
  588. SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
  589. SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
  590. SafeBootNet:[b]64bit:[/b] TDI - Driver Group
  591. SafeBootNet:[b]64bit:[/b] vmms - Service
  592. SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
  593. SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
  594. SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  595. SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  596. SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  597. SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  598. SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  599. SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  600. SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  601. SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
  602. SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
  603. SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
  604. SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
  605. SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  606. SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  607. SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  608. SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  609. SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
  610. SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  611. SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  612. SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  613. SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  614. SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  615. SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  616. SafeBootNet: Base - Driver Group
  617. SafeBootNet: Boot Bus Extender - Driver Group
  618. SafeBootNet: Boot file system - Driver Group
  619. SafeBootNet: File system - Driver Group
  620. SafeBootNet: Filter - Driver Group
  621. SafeBootNet: HelpSvc - Service
  622. SafeBootNet: Messenger - Service
  623. SafeBootNet: NDIS Wrapper - Driver Group
  624. SafeBootNet: NetBIOSGroup - Driver Group
  625. SafeBootNet: NetDDEGroup - Driver Group
  626. SafeBootNet: Network - Driver Group
  627. SafeBootNet: NetworkProvider - Driver Group
  628. SafeBootNet: PCI Configuration - Driver Group
  629. SafeBootNet: PNP Filter - Driver Group
  630. SafeBootNet: PNP_TDI - Driver Group
  631. SafeBootNet: Primary disk - Driver Group
  632. SafeBootNet: rdsessmgr - Service
  633. SafeBootNet: sacsvr - Service
  634. SafeBootNet: SCSI Class - Driver Group
  635. SafeBootNet: Streams Drivers - Driver Group
  636. SafeBootNet: System Bus Extender - Driver Group
  637. SafeBootNet: TDI - Driver Group
  638. SafeBootNet: vmms - Service
  639. SafeBootNet: WudfUsbccidDriver - Driver
  640. SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  641. SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  642. SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  643. SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  644. SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  645. SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  646. SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  647. SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
  648. SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
  649. SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
  650. SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
  651. SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  652. SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  653. SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  654. SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  655. SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
  656. SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  657. SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  658. SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  659. SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  660. SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  661. SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  662.  
  663. ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
  664. ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
  665. ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
  666. ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
  667. ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
  668. ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
  669. ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
  670. ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
  671. ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
  672. ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
  673. ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
  674. ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
  675. ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
  676. ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
  677. ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
  678. ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
  679. ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
  680. ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
  681. ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
  682. ActiveX:[b]64bit:[/b] {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
  683. ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
  684. ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
  685. ActiveX:[b]64bit:[/b] >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
  686. ActiveX:[b]64bit:[/b] >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
  687. ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
  688. ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
  689. ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
  690. ActiveX: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
  691. ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
  692. ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
  693. ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
  694. ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
  695. ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
  696. ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
  697. ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
  698. ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
  699. ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
  700. ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
  701. ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
  702. ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
  703. ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
  704. ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
  705. ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
  706. ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
  707. ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player 9 ActiveX
  708. ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
  709. ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
  710. ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
  711. ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
  712. ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
  713. ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
  714.  
  715. Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  716. Drivers32:[b]64bit:[/b] vidc.i420 - lvcod64.dll (Logitech Inc.)
  717. Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  718. Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
  719. Drivers32: vidc.i420 - C:\Windows\SysWow64\lvcodec2.dll (Logitech Inc.)
  720.  
  721. [color=#E56717]========== Files/Folders - Created Within 90 Days ==========[/color]
  722.  
  723. [2012/11/23 10:04:20 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\sipseal\Desktop\OTL.scr
  724. [2012/11/23 08:40:09 | 000,688,992 | R--- | C] (Swearware) -- C:\Users\sipseal\Desktop\dds.com
  725. [2012/11/22 17:44:16 | 000,579,880 | ---- | C] (Juniper Networks) -- C:\Windows\SysNative\dsNcSmartCardProv.dll
  726. [2012/11/22 17:44:16 | 000,405,288 | ---- | C] (Juniper Networks) -- C:\Windows\SysNative\dsNcCredProv.dll
  727. [2012/11/22 17:43:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Juniper Networks
  728. [2012/11/22 17:42:48 | 000,000,000 | ---D | C] -- C:\Users\sipseal\AppData\Roaming\Juniper Networks
  729. [2012/11/21 14:27:55 | 000,000,000 | ---D | C] -- C:\Windows\rescache
  730. [2012/11/17 07:54:56 | 000,054,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfLdr.sys
  731. [2012/11/17 07:54:56 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wdfres.dll
  732. [2012/11/17 07:45:43 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  733. [2012/11/17 07:45:42 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  734. [2012/11/17 07:45:40 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  735. [2012/11/17 07:45:40 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  736. [2012/11/17 07:45:39 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  737. [2012/11/17 07:45:39 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  738. [2012/11/17 07:45:38 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
  739. [2012/11/17 07:45:38 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
  740. [2012/11/17 07:45:37 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  741. [2012/11/17 07:45:37 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  742. [2012/11/17 07:45:36 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  743. [2012/11/17 07:45:36 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  744. [2012/11/17 07:45:33 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  745. [2012/11/17 07:45:33 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  746. [2012/11/17 07:45:33 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  747. [2012/11/17 07:44:51 | 000,000,000 | -HSD | C] -- C:\Config.Msi
  748. [2012/11/17 07:40:44 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFPlatform.dll
  749. [2012/11/17 07:40:41 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFHost.exe
  750. [2012/11/17 07:40:41 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFCoinstaller.dll
  751. [2012/11/17 07:40:40 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFx.dll
  752. [2012/11/14 01:49:29 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcore6.dll
  753. [2012/11/14 01:49:28 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dhcpcore6.dll
  754. [2012/11/14 01:49:28 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcsvc6.dll
  755. [2012/11/14 01:49:06 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcorehc.dll
  756. [2012/11/14 01:49:06 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncsi.dll
  757. [2012/11/14 01:49:06 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncsi.dll
  758. [2012/11/14 01:49:05 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcorehc.dll
  759. [2012/11/14 01:49:04 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netevent.dll
  760. [2012/11/14 01:49:04 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netevent.dll
  761. [2012/11/14 01:48:36 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\synceng.dll
  762. [2012/11/14 01:48:36 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\synceng.dll
  763. [2012/11/12 21:38:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
  764. [2012/11/01 22:56:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lasergene
  765. [2012/11/01 22:56:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DNASTAR
  766. [2012/11/01 17:40:38 | 000,000,000 | ---D | C] -- C:\Users\sipseal\AppData\Local\DNASTAR
  767. [2012/11/01 17:19:17 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\DNASTAR
  768. [2012/11/01 17:18:00 | 000,000,000 | ---D | C] -- C:\Users\sipseal\Documents\SafeNet Sentinel
  769. [2012/11/01 17:18:00 | 000,000,000 | ---D | C] -- C:\ProgramData\SafeNet Sentinel
  770. [2012/11/01 17:18:00 | 000,000,000 | ---D | C] -- C:\ProgramData\DNASTAR
  771. [2012/11/01 07:12:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
  772. [2012/11/01 07:12:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\7-Zip
  773. [2012/11/01 07:08:45 | 000,000,000 | ---D | C] -- C:\Users\sipseal\AppData\Roaming\PerformerSoft
  774. [2012/11/01 07:08:44 | 000,019,000 | ---- | C] (PerformerSoft LLC) -- C:\Windows\SysNative\roboot64.exe
  775. [2012/11/01 07:08:20 | 000,000,000 | ---D | C] -- C:\Users\sipseal\AppData\Roaming\BitZipper
  776. [2012/11/01 06:38:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
  777. [2012/10/31 20:22:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master 9.1.1 Home Edition
  778. [2012/10/31 20:21:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EaseUS
  779. [2012/10/29 20:57:35 | 000,000,000 | ---D | C] -- C:\Users\sipseal\Desktop\Mendeley Temp
  780. [2012/10/29 06:06:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  781. [2012/10/10 06:50:38 | 005,559,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  782. [2012/10/10 06:50:36 | 003,914,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
  783. [2012/10/10 06:50:35 | 003,968,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
  784. [2012/10/10 06:50:22 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
  785. [2012/10/10 06:50:21 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
  786. [2012/10/10 06:50:21 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
  787. [2012/10/10 06:50:21 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
  788. [2012/10/10 06:50:18 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
  789. [2012/10/10 06:50:17 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
  790. [2012/10/10 06:50:16 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
  791. [2012/10/10 06:50:16 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
  792. [2012/10/10 06:50:15 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
  793. [2012/10/10 06:50:15 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
  794. [2012/10/10 06:50:15 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
  795. [2012/10/10 06:50:15 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
  796. [2012/10/10 06:50:14 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
  797. [2012/10/10 06:50:14 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
  798. [2012/10/10 06:50:14 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
  799. [2012/10/10 06:50:14 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
  800. [2012/10/10 06:50:14 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
  801. [2012/10/10 06:50:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
  802. [2012/10/10 06:50:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
  803. [2012/10/10 06:50:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
  804. [2012/10/10 06:50:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
  805. [2012/10/10 06:50:13 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
  806. [2012/10/10 06:50:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
  807. [2012/10/10 06:50:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
  808. [2012/10/10 06:50:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
  809. [2012/10/10 06:50:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
  810. [2012/10/10 06:50:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
  811. [2012/10/10 06:50:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
  812. [2012/10/10 06:50:12 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
  813. [2012/10/10 06:50:12 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
  814. [2012/10/10 06:50:12 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
  815. [2012/10/10 06:50:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
  816. [2012/10/10 06:50:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
  817. [2012/10/10 06:50:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
  818. [2012/10/10 06:50:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
  819. [2012/10/10 06:50:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
  820. [2012/10/10 06:50:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
  821. [2012/10/10 06:50:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
  822. [2012/10/10 06:50:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
  823. [2012/10/10 06:50:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
  824. [2012/10/10 06:50:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
  825. [2012/10/10 06:50:10 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
  826. [2012/10/10 06:50:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
  827. [2012/10/10 06:50:08 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
  828. [2012/10/10 06:50:07 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
  829. [2012/10/10 06:50:06 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
  830. [2012/10/10 06:50:05 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
  831. [2012/10/10 06:50:04 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
  832. [2012/10/10 06:50:04 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
  833. [2012/10/10 06:50:04 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
  834. [2012/10/10 06:50:03 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
  835. [2012/10/10 06:50:03 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
  836. [2012/10/10 06:50:03 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
  837. [2012/10/10 06:50:03 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
  838. [2012/10/10 06:50:03 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
  839. [2012/10/10 06:50:03 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
  840. [2012/10/10 06:50:03 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
  841. [2012/10/10 06:50:02 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
  842. [2012/10/10 06:50:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
  843. [2012/10/10 06:50:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
  844. [2012/10/10 06:50:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
  845. [2012/10/10 06:50:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
  846. [2012/10/10 06:50:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
  847. [2012/10/10 06:50:01 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
  848. [2012/10/10 06:50:01 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
  849. [2012/10/10 06:50:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
  850. [2012/10/10 06:49:59 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
  851. [2012/10/10 06:49:59 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
  852. [2012/10/10 06:49:58 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
  853. [2012/10/10 06:49:42 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
  854. [2012/10/10 06:49:13 | 001,464,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
  855. [2012/10/10 06:49:11 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
  856. [2012/09/25 20:32:19 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OxpsConverter.exe
  857. [2012/09/12 06:02:33 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\RNDISMP.sys
  858. [2012/09/12 06:02:22 | 000,574,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
  859. [2012/09/12 06:02:21 | 000,376,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
  860. [2012/09/12 06:02:20 | 000,288,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
  861. [2012/08/26 16:10:35 | 000,024,416 | R--- | C] (Adobe Systems Inc.) -- C:\Windows\SysNative\AdobePDFUI.dll
  862.  
  863. [color=#E56717]========== Files - Modified Within 90 Days ==========[/color]
  864.  
  865. [2012/11/23 10:32:01 | 000,000,904 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3866111677-935689091-1683429776-1001UA.job
  866. [2012/11/23 10:04:23 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\sipseal\Desktop\OTL.scr
  867. [2012/11/23 08:40:13 | 000,688,992 | R--- | M] (Swearware) -- C:\Users\sipseal\Desktop\dds.com
  868. [2012/11/23 08:29:32 | 000,015,152 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  869. [2012/11/23 08:29:32 | 000,015,152 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  870. [2012/11/23 08:20:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  871. [2012/11/23 08:19:25 | 1543,548,928 | -HS- | M] () -- C:\hiberfil.sys
  872. [2012/11/23 08:12:29 | 000,000,852 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3866111677-935689091-1683429776-1001Core.job
  873. [2012/11/23 07:59:45 | 000,093,066 | ---- | M] () -- C:\Users\sipseal\Desktop\News_Royal_Society1.pdf
  874. [2012/11/21 22:54:04 | 000,000,340 | ---- | M] () -- C:\Windows\tasks\At2.job
  875. [2012/11/20 20:59:10 | 000,527,360 | ---- | M] () -- C:\Users\sipseal\AppData\Roaming\tinlb.dll
  876. [2012/11/20 07:13:02 | 000,419,456 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  877. [2012/11/17 07:57:26 | 000,740,814 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  878. [2012/11/17 07:57:26 | 000,624,412 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  879. [2012/11/17 07:57:26 | 000,106,756 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  880. [2012/11/16 14:35:35 | 000,000,266 | ---- | M] () -- C:\Users\sipseal\AppData\Local\STAR.trace
  881. [2012/11/12 21:50:32 | 000,444,833 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
  882. [2012/11/02 16:33:04 | 000,001,887 | ---- | M] () -- C:\Users\sipseal\Desktop\Lab - Shortcut.lnk
  883. [2012/10/31 20:25:07 | 000,000,964 | -H-- | M] () -- C:\Windows\EPMBatch.ept
  884. [2012/10/11 17:49:00 | 002,468,520 | ---- | M] () -- C:\Windows\SysWow64\BootMan.exe
  885. [2012/10/09 13:17:13 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcore6.dll
  886. [2012/10/09 13:17:13 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcsvc6.dll
  887. [2012/10/09 12:40:31 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\dhcpcore6.dll
  888. [2012/10/08 06:31:03 | 002,312,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  889. [2012/10/08 06:22:55 | 001,494,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  890. [2012/10/08 06:22:17 | 000,237,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
  891. [2012/10/08 06:18:22 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  892. [2012/10/08 06:17:35 | 000,599,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  893. [2012/10/08 06:17:26 | 000,816,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  894. [2012/10/08 06:15:59 | 000,729,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  895. [2012/10/08 06:13:54 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  896. [2012/10/08 06:09:39 | 000,248,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  897. [2012/10/08 02:47:44 | 001,427,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  898. [2012/10/08 02:46:32 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
  899. [2012/10/08 02:44:05 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  900. [2012/10/08 02:43:05 | 000,717,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  901. [2012/10/08 02:41:19 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  902. [2012/10/08 02:37:23 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  903. [2012/10/03 12:44:17 | 000,246,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\netcorehc.dll
  904. [2012/10/03 12:44:17 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\netevent.dll
  905. [2012/10/03 12:44:16 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ncsi.dll
  906. [2012/10/03 11:42:24 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\netcorehc.dll
  907. [2012/10/03 11:42:24 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\netevent.dll
  908. [2012/10/03 11:42:23 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ncsi.dll
  909. [2012/09/30 10:48:46 | 000,002,155 | ---- | M] () -- C:\Windows\epplauncher.mif
  910. [2012/09/29 19:54:26 | 000,025,928 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
  911. [2012/09/25 17:47:43 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\synceng.dll
  912. [2012/09/25 17:46:17 | 000,095,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\synceng.dll
  913. [2012/09/23 17:51:02 | 006,954,713 | ---- | M] () -- C:\Users\sipseal\Desktop\300PDF.pdf
  914. [2012/09/08 07:45:47 | 002,359,487 | ---- | M] () -- C:\Users\sipseal\Desktop\Epich_AbstractBook.pdf
  915. [2012/08/30 21:03:48 | 000,128,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\NisDrvWFP.sys
  916. [2012/08/30 13:03:45 | 005,559,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  917. [2012/08/30 12:12:02 | 003,968,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
  918. [2012/08/30 12:12:02 | 003,914,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
  919.  
  920. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  921.  
  922. [2012/11/23 07:59:45 | 000,093,066 | ---- | C] () -- C:\Users\sipseal\Desktop\News_Royal_Society1.pdf
  923. [2012/11/20 20:59:09 | 000,527,360 | ---- | C] () -- C:\Users\sipseal\AppData\Roaming\tinlb.dll
  924. [2012/11/17 07:55:00 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
  925. [2012/11/17 07:40:40 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
  926. [2012/11/01 17:17:59 | 000,000,266 | ---- | C] () -- C:\Users\sipseal\AppData\Local\STAR.trace
  927. [2012/11/01 06:38:43 | 000,001,159 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
  928. [2012/10/31 20:23:56 | 000,000,964 | -H-- | C] () -- C:\Windows\EPMBatch.ept
  929. [2012/10/31 20:22:10 | 003,316,736 | ---- | C] () -- C:\Windows\SysNative\BootMan.exe
  930. [2012/10/31 20:22:10 | 003,316,736 | ---- | C] () -- C:\Windows\SysNative\¸´¼þ BootMan.exe
  931. [2012/10/31 20:22:10 | 002,468,520 | ---- | C] () -- C:\Windows\SysWow64\BootMan.exe
  932. [2012/10/31 20:22:10 | 002,468,520 | ---- | C] () -- C:\Windows\SysWow64\¸´¼þ BootMan.exe
  933. [2012/10/31 20:22:10 | 000,100,232 | ---- | C] () -- C:\Windows\SysNative\setupempdrvx64.exe
  934. [2012/10/31 20:22:10 | 000,019,840 | ---- | C] () -- C:\Windows\SysWow64\EuEpmGdi.dll
  935. [2012/10/31 20:22:10 | 000,016,776 | ---- | C] () -- C:\Windows\SysNative\epmntdrv.sys
  936. [2012/10/31 20:22:10 | 000,016,256 | ---- | C] () -- C:\Windows\SysNative\EuEpmGdi.dll
  937. [2012/10/31 20:22:10 | 000,009,096 | ---- | C] () -- C:\Windows\SysNative\EuGdiDrv.sys
  938. [2012/10/31 20:22:09 | 000,086,408 | ---- | C] () -- C:\Windows\SysWow64\setupempdrv03.exe
  939. [2012/10/31 20:22:09 | 000,014,216 | ---- | C] () -- C:\Windows\SysWow64\epmntdrv.sys
  940. [2012/10/31 20:22:09 | 000,008,456 | ---- | C] () -- C:\Windows\SysWow64\EuGdiDrv.sys
  941. [2012/09/23 17:51:02 | 006,954,713 | ---- | C] () -- C:\Users\sipseal\Desktop\300PDF.pdf
  942. [2012/09/08 07:45:42 | 002,359,487 | ---- | C] () -- C:\Users\sipseal\Desktop\Epich_AbstractBook.pdf
  943. [2011/11/30 22:57:41 | 000,000,008 | -H-- | C] () -- C:\Users\sipseal\AppData\Local\L8457789110
  944. [2011/10/08 13:53:03 | 000,000,218 | ---- | C] () -- C:\Users\sipseal\.recently-used.xbel
  945. [2011/08/19 08:26:20 | 010,898,456 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll
  946. [2011/08/19 08:26:20 | 000,336,408 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll
  947. [2011/08/19 08:26:20 | 000,104,472 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe
  948. [2011/08/10 14:20:00 | 000,000,016 | -H-- | C] () -- C:\ProgramData\obtf504
  949. [2011/01/28 18:43:18 | 000,744,030 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  950. [2010/12/13 15:12:13 | 000,009,728 | ---- | C] () -- C:\Users\sipseal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  951. [2010/08/14 14:19:29 | 000,007,603 | ---- | C] () -- C:\Users\sipseal\AppData\Local\Resmon.ResmonCfg
  952. [2010/03/21 22:24:38 | 000,020,448 | ---- | C] () -- C:\Users\sipseal\AppData\Roaming\UserTile.png
  953. [2010/03/21 17:18:14 | 000,000,764 | RHS- | C] () -- C:\Users\sipseal\ntuser.pol
  954. [2010/03/21 17:16:46 | 000,000,764 | RHS- | C] () -- C:\ProgramData\ntuser.pol
  955.  
  956. [color=#E56717]========== ZeroAccess Check ==========[/color]
  957.  
  958. [2009/07/13 23:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  959.  
  960. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  961.  
  962. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  963.  
  964. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  965.  
  966. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  967.  
  968. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  969. "" = C:\Windows\SysNative\shell32.dll -- [2012/06/09 00:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
  970. "ThreadingModel" = Apartment
  971.  
  972. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  973. "" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 23:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
  974. "ThreadingModel" = Apartment
  975.  
  976. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  977. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 20:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  978. "ThreadingModel" = Free
  979.  
  980. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  981. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 07:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  982. "ThreadingModel" = Free
  983.  
  984. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  985. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 20:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  986. "ThreadingModel" = Both
  987.  
  988. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  989.  
  990. [color=#E56717]========== LOP Check ==========[/color]
  991.  
  992. [2011/10/09 03:12:04 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\AnvSoft
  993. [2012/11/14 23:18:13 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Ape
  994. [2012/11/01 07:11:20 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\BitZipper
  995. [2012/11/23 08:21:12 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Dropbox
  996. [2010/05/07 01:29:36 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\EndNote
  997. [2011/11/30 23:06:08 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\FileMaker Pro
  998. [2011/08/10 14:19:57 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\GraphPad Software
  999. [2011/10/08 13:51:52 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\gtk-2.0
  1000. [2010/03/24 10:43:29 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\JGsoft
  1001. [2012/11/23 08:24:07 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Juniper Networks
  1002. [2011/11/30 22:58:47 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Leadertech
  1003. [2010/03/21 13:50:47 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Opera
  1004. [2012/11/01 07:11:01 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\PerformerSoft
  1005. [2010/03/23 19:53:57 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\PhotoFiltre
  1006. [2011/09/02 16:28:04 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Textco Preferences
  1007. [2011/06/30 15:19:32 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\WaveMetrics
  1008.  
  1009. [color=#E56717]========== Purity Check ==========[/color]
  1010.  
  1011.  
  1012.  
  1013. [color=#E56717]========== Custom Scans ==========[/color]
  1014.  
  1015. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  1016. [2010/11/20 07:40:07 | 000,383,786 | RHS- | M] () -- C:\bootmgr
  1017. [2010/03/07 23:37:01 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
  1018. [2012/11/23 08:19:25 | 1543,548,928 | -HS- | M] () -- C:\hiberfil.sys
  1019. [2010/05/08 19:02:17 | 000,000,109 | ---- | M] () -- C:\mbam-error.txt
  1020. [2012/11/23 08:20:14 | 2058,067,968 | -HS- | M] () -- C:\pagefile.sys
  1021. [2010/03/07 13:30:36 | 000,486,564 | ---- | M] () -- C:\vcredist_x86.log
  1022.  
  1023. [color=#A23BEC]< %USERPROFILE%\*.* >[/color]
  1024. [2011/10/08 13:53:03 | 000,000,218 | ---- | M] () -- C:\Users\sipseal\.recently-used.xbel
  1025. [2011/07/15 00:38:47 | 000,000,642 | ---- | M] () -- C:\Users\sipseal\IJ_Prefs.txt
  1026. [2012/11/23 10:38:41 | 010,747,904 | -HS- | M] () -- C:\Users\sipseal\NTUSER.DAT
  1027. [2012/11/23 10:38:41 | 000,262,144 | -HS- | M] () -- C:\Users\sipseal\ntuser.dat.LOG1
  1028. [2010/03/07 17:35:40 | 000,000,000 | -HS- | M] () -- C:\Users\sipseal\ntuser.dat.LOG2
  1029. [2010/03/07 17:39:18 | 000,065,536 | -HS- | M] () -- C:\Users\sipseal\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
  1030. [2010/03/07 17:39:18 | 000,524,288 | -HS- | M] () -- C:\Users\sipseal\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
  1031. [2010/03/07 17:39:18 | 000,524,288 | -HS- | M] () -- C:\Users\sipseal\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
  1032. [2010/03/07 17:35:40 | 000,000,020 | -HS- | M] () -- C:\Users\sipseal\ntuser.ini
  1033. [2011/04/10 08:41:23 | 000,000,764 | RHS- | M] () -- C:\Users\sipseal\ntuser.pol
  1034.  
  1035. [color=#A23BEC]< %USERPROFILE%\temp\*.exe >[/color]
  1036.  
  1037. [color=#A23BEC]< %USERPROFILE%\AppData\Local\*.* >[/color]
  1038. [2010/12/16 03:07:20 | 000,009,728 | ---- | M] () -- C:\Users\sipseal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  1039. [2012/11/20 07:13:46 | 000,112,232 | ---- | M] () -- C:\Users\sipseal\AppData\Local\GDIPFONTCACHEV1.DAT
  1040. [2012/11/23 08:18:16 | 002,019,526 | -H-- | M] () -- C:\Users\sipseal\AppData\Local\IconCache.db
  1041. [2012/01/03 16:23:41 | 000,000,008 | -H-- | M] () -- C:\Users\sipseal\AppData\Local\L8457789110
  1042. [2011/03/18 18:59:54 | 000,007,603 | ---- | M] () -- C:\Users\sipseal\AppData\Local\Resmon.ResmonCfg
  1043. [2012/11/16 14:35:35 | 000,000,266 | ---- | M] () -- C:\Users\sipseal\AppData\Local\STAR.trace
  1044.  
  1045. [color=#A23BEC]< %USERPROFILE%\AppData\Local\*. >[/color]
  1046. [2010/03/21 20:19:19 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\Adobe
  1047. [2011/11/30 22:53:26 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\Apple
  1048. [2012/08/08 20:21:19 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\Apple Computer
  1049. [2010/03/07 17:35:40 | 000,000,000 | -HSD | M] -- C:\Users\sipseal\AppData\Local\Application Data
  1050. [2012/10/28 16:27:37 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\Diagnostics
  1051. [2012/11/01 22:57:51 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\DNASTAR
  1052. [2012/04/08 19:51:46 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\ElevatedDiagnostics
  1053. [2011/11/30 22:58:04 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\FileMaker
  1054. [2012/08/15 20:13:20 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\Google
  1055. [2010/03/07 17:35:40 | 000,000,000 | -HSD | M] -- C:\Users\sipseal\AppData\Local\History
  1056. [2011/01/17 00:28:01 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\IsolatedStorage
  1057. [2012/07/28 18:07:34 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\Macromedia
  1058. [2010/04/21 01:05:48 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\Mendeley Ltd
  1059. [2012/07/28 18:07:34 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\Microsoft
  1060. [2011/10/06 09:12:13 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\Microsoft Help
  1061. [2012/07/28 17:33:33 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\MicrosoftStore
  1062. [2010/09/06 00:24:24 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\Mozilla
  1063. [2010/03/21 13:50:47 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\Opera
  1064. [2012/11/05 06:14:14 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\Temp
  1065. [2010/03/07 17:35:40 | 000,000,000 | -HSD | M] -- C:\Users\sipseal\AppData\Local\Temporary Internet Files
  1066. [2011/08/11 09:08:15 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Local\VirtualStore
  1067.  
  1068. [color=#A23BEC]< %USERPROFILE%\AppData\Local\temp\*.exe >[/color]
  1069. [2012/02/12 22:21:18 | 000,136,176 | ---- | M] (Google Inc.) -- C:\Users\sipseal\AppData\Local\temp\GoogleUpdate.exe154c4b
  1070. [227 C:\Users\sipseal\AppData\Local\temp\*.tmp files -> C:\Users\sipseal\AppData\Local\temp\*.tmp -> ]
  1071.  
  1072. [color=#A23BEC]< %USERPROFILE%\AppData\Roaming\*.* >[/color]
  1073. [2011/09/27 15:24:24 | 000,025,088 | -HS- | M] () -- C:\Users\sipseal\AppData\Roaming\Thumbs.db
  1074. [2012/11/20 20:59:10 | 000,527,360 | ---- | M] () -- C:\Users\sipseal\AppData\Roaming\tinlb.dll
  1075. [2010/03/21 22:24:38 | 000,020,448 | ---- | M] () -- C:\Users\sipseal\AppData\Roaming\UserTile.png
  1076.  
  1077. [color=#A23BEC]< %USERPROFILE%\AppData\Roaming\*. >[/color]
  1078. [2010/03/21 20:21:14 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Adobe
  1079. [2011/10/09 03:12:04 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\AnvSoft
  1080. [2012/11/14 23:18:13 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Ape
  1081. [2012/08/20 16:32:28 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Apple Computer
  1082. [2012/11/01 07:11:20 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\BitZipper
  1083. [2012/11/23 08:21:12 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Dropbox
  1084. [2010/05/07 01:29:36 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\EndNote
  1085. [2011/11/30 23:06:08 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\FileMaker Pro
  1086. [2011/08/10 14:19:57 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\GraphPad Software
  1087. [2011/10/08 13:51:52 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\gtk-2.0
  1088. [2010/03/07 17:35:49 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Identities
  1089. [2010/04/07 02:02:37 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\InstallShield
  1090. [2010/10/13 22:33:34 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Intel Corporation
  1091. [2011/01/17 00:30:44 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Intuit
  1092. [2010/03/24 10:43:29 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\JGsoft
  1093. [2012/11/23 08:24:07 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Juniper Networks
  1094. [2011/11/30 22:58:47 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Leadertech
  1095. [2010/03/21 19:35:12 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Macromedia
  1096. [2010/03/21 19:32:25 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Malwarebytes
  1097. [2012/05/25 07:54:20 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\MathWorks
  1098. [2009/07/14 02:45:37 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Media Center Programs
  1099. [2012/07/28 18:07:34 | 000,000,000 | --SD | M] -- C:\Users\sipseal\AppData\Roaming\Microsoft
  1100. [2012/09/14 21:24:13 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Mozilla
  1101. [2010/03/21 13:50:47 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Opera
  1102. [2012/11/01 07:11:01 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\PerformerSoft
  1103. [2010/03/23 19:53:57 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\PhotoFiltre
  1104. [2012/11/09 22:55:15 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Skype
  1105. [2012/05/13 10:52:55 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\skypePM
  1106. [2010/03/23 08:31:26 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\SUPERAntiSpyware.com
  1107. [2011/09/02 16:28:04 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\Textco Preferences
  1108. [2011/06/30 15:19:32 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\WaveMetrics
  1109. [2010/04/24 23:27:56 | 000,000,000 | ---D | M] -- C:\Users\sipseal\AppData\Roaming\WinRAR
  1110.  
  1111. [color=#A23BEC]< %Public%\Documents\Softwrap\YOYOGAMESGM70FINAL\*.exe >[/color]
  1112.  
  1113. [color=#A23BEC]< %Public%\Documents\Fonts\*.exe >[/color]
  1114.  
  1115. [color=#A23BEC]< %Public%\Documents\Config\*.exe >[/color]
  1116.  
  1117. [color=#A23BEC]< %Public%\Documents\*.* >[/color]
  1118. [2009/07/13 23:54:24 | 000,000,278 | -HS- | M] () -- C:\Users\Public\Documents\desktop.ini
  1119.  
  1120. [color=#A23BEC]< %ProgramData%\*.* >[/color]
  1121. [2010/08/08 12:17:00 | 000,000,764 | RHS- | M] () -- C:\ProgramData\ntuser.pol
  1122. [2011/08/10 14:20:00 | 000,000,016 | -H-- | M] () -- C:\ProgramData\obtf504
  1123.  
  1124. [color=#A23BEC]< %ProgramData%\*. >[/color]
  1125. [2012/07/28 17:55:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe
  1126. [2011/11/30 22:53:17 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple
  1127. [2012/08/08 20:18:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer
  1128. [2009/07/14 00:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data
  1129. [2011/06/30 15:15:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Cisco
  1130. [2009/07/14 00:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop
  1131. [2012/11/01 17:40:39 | 000,000,000 | ---D | M] -- C:\ProgramData\DNASTAR
  1132. [2009/07/14 00:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents
  1133. [2009/07/14 00:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites
  1134. [2010/03/21 20:21:07 | 000,000,000 | ---D | M] -- C:\ProgramData\FLEXnet
  1135. [2011/09/21 23:20:21 | 000,000,000 | ---D | M] -- C:\ProgramData\GraphPad Software
  1136. [2011/09/02 07:31:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Hewlett-Packard
  1137. [2011/01/17 00:28:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Intuit
  1138. [2011/07/10 01:12:58 | 000,000,000 | ---D | M] -- C:\ProgramData\KeyAccess
  1139. [2010/03/21 19:32:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes
  1140. [2012/06/30 21:04:22 | 000,000,000 | --SD | M] -- C:\ProgramData\Microsoft
  1141. [2012/11/17 08:01:51 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft Help
  1142. [2012/05/12 10:09:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Mozilla
  1143. [2012/11/01 17:18:00 | 000,000,000 | ---D | M] -- C:\ProgramData\SafeNet Sentinel
  1144. [2012/08/01 19:34:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype
  1145. [2010/03/07 12:56:28 | 000,000,000 | ---D | M] -- C:\ProgramData\SonicFocus
  1146. [2012/11/13 16:00:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Spybot - Search & Destroy
  1147. [2009/07/14 00:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu
  1148. [2010/08/09 03:12:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Sun
  1149. [2010/03/23 08:31:32 | 000,000,000 | ---D | M] -- C:\ProgramData\SUPERAntiSpyware.com
  1150. [2009/07/14 00:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates
  1151.  
  1152. [color=#A23BEC]< %CommonProgramFiles%\*.* >[/color]
  1153.  
  1154. [color=#A23BEC]< %CommonProgramFiles%\ComObjects*.exe >[/color]
  1155.  
  1156. [color=#A23BEC]< %commonprogramfiles(x86)%\*.* >[/color]
  1157.  
  1158. [color=#A23BEC]< %programfiles%\*.* >[/color]
  1159. [2009/07/13 23:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini
  1160.  
  1161. [color=#A23BEC]< %programfiles%\*. >[/color]
  1162. [2012/11/01 07:12:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\7-Zip
  1163. [2010/03/21 19:49:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
  1164. [2010/03/07 12:56:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Analog Devices
  1165. [2012/08/08 20:17:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update
  1166. [2011/11/30 22:53:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour
  1167. [2012/10/31 19:53:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
  1168. [2012/11/01 22:56:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DNASTAR
  1169. [2012/10/31 20:21:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EaseUS
  1170. [2011/09/21 23:20:20 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\GraphPad
  1171. [2010/04/07 02:02:43 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
  1172. [2011/01/30 21:05:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel
  1173. [2012/11/20 06:55:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
  1174. [2010/03/21 20:36:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\iriver
  1175. [2011/10/24 19:39:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
  1176. [2012/11/22 17:44:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Juniper Networks
  1177. [2012/11/22 23:57:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mendeley Desktop
  1178. [2012/05/29 00:32:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
  1179. [2012/09/30 10:48:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Security Client
  1180. [2012/05/29 00:31:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio
  1181. [2012/05/29 00:27:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio 8
  1182. [2012/05/29 10:00:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Works
  1183. [2012/05/29 00:30:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
  1184. [2012/11/01 06:38:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox
  1185. [2012/10/29 14:56:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox.bak
  1186. [2012/11/01 06:38:42 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Maintenance Service
  1187. [2012/05/29 00:32:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
  1188. [2010/03/22 02:07:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSXML 4.0
  1189. [2010/03/22 02:19:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OlympusMicro
  1190. [2012/09/09 09:43:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Opera
  1191. [2010/03/07 13:35:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Panasonic
  1192. [2010/03/23 19:57:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PhotoFiltre
  1193. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
  1194. [2012/05/26 00:05:51 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype
  1195. [2012/11/20 07:11:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Spybot - Search & Destroy
  1196. [2009/07/13 23:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information
  1197. [2009/07/14 00:37:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
  1198. [2011/07/10 11:11:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
  1199. [2011/07/10 11:11:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
  1200. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
  1201. [2011/07/10 11:11:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
  1202. [2011/07/10 11:11:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
  1203. [2010/04/24 23:27:30 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WinRAR
  1204. [2010/03/21 17:30:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WinSCP3
  1205.  
  1206. [color=#A23BEC]< %ProgramFiles(x86)%\*.* >[/color]
  1207. [2009/07/13 23:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini
  1208.  
  1209. [color=#A23BEC]< %ProgramFiles(x86)%\*. >[/color]
  1210. [2012/11/01 07:12:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\7-Zip
  1211. [2010/03/21 19:49:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
  1212. [2010/03/07 12:56:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Analog Devices
  1213. [2012/08/08 20:17:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update
  1214. [2011/11/30 22:53:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour
  1215. [2012/10/31 19:53:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
  1216. [2012/11/01 22:56:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DNASTAR
  1217. [2012/10/31 20:21:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EaseUS
  1218. [2011/09/21 23:20:20 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\GraphPad
  1219. [2010/04/07 02:02:43 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
  1220. [2011/01/30 21:05:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel
  1221. [2012/11/20 06:55:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
  1222. [2010/03/21 20:36:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\iriver
  1223. [2011/10/24 19:39:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
  1224. [2012/11/22 17:44:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Juniper Networks
  1225. [2012/11/22 23:57:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mendeley Desktop
  1226. [2012/05/29 00:32:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
  1227. [2012/09/30 10:48:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Security Client
  1228. [2012/05/29 00:31:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio
  1229. [2012/05/29 00:27:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio 8
  1230. [2012/05/29 10:00:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Works
  1231. [2012/05/29 00:30:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
  1232. [2012/11/01 06:38:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox
  1233. [2012/10/29 14:56:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox.bak
  1234. [2012/11/01 06:38:42 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Maintenance Service
  1235. [2012/05/29 00:32:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
  1236. [2010/03/22 02:07:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSXML 4.0
  1237. [2010/03/22 02:19:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OlympusMicro
  1238. [2012/09/09 09:43:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Opera
  1239. [2010/03/07 13:35:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Panasonic
  1240. [2010/03/23 19:57:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PhotoFiltre
  1241. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
  1242. [2012/05/26 00:05:51 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype
  1243. [2012/11/20 07:11:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Spybot - Search & Destroy
  1244. [2009/07/13 23:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information
  1245. [2009/07/14 00:37:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
  1246. [2011/07/10 11:11:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
  1247. [2011/07/10 11:11:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
  1248. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
  1249. [2011/07/10 11:11:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
  1250. [2011/07/10 11:11:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
  1251. [2010/04/24 23:27:30 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WinRAR
  1252. [2010/03/21 17:30:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WinSCP3
  1253.  
  1254. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\AppData\Local\*.* >[/color]
  1255.  
  1256. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\AppData\Roaming\*.* >[/color]
  1257.  
  1258. [color=#A23BEC]< %windir%\SysWOW64\config\systemprofile\AppData\Local\*.* >[/color]
  1259.  
  1260. [color=#A23BEC]< %windir%\SysWOW64\config\systemprofile\AppData\Roaming\*.* >[/color]
  1261.  
  1262. [color=#A23BEC]< %windir%\ServiceProfiles\LocalService\AppData\Local\Temp\*.tlb >[/color]
  1263.  
  1264. [color=#A23BEC]< %windir%\ServiceProfiles\NetworkService\AppData\Local\Temp\*.tlb >[/color]
  1265.  
  1266. [color=#A23BEC]< %windir%\temp\*.exe >[/color]
  1267.  
  1268. [color=#A23BEC]< %windir%\*. >[/color]
  1269. [2009/07/14 00:32:39 | 000,000,000 | ---D | M] -- C:\Windows\addins
  1270. [2009/07/13 22:20:08 | 000,000,000 | ---D | M] -- C:\Windows\AppCompat
  1271. [2012/10/13 17:43:56 | 000,000,000 | ---D | M] -- C:\Windows\AppPatch
  1272. [2012/11/20 20:25:34 | 000,000,000 | R-SD | M] -- C:\Windows\assembly
  1273. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Windows\Boot
  1274. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Windows\Branding
  1275. [2010/03/07 23:39:06 | 000,000,000 | ---D | M] -- C:\Windows\CSC
  1276. [2009/07/14 00:32:39 | 000,000,000 | ---D | M] -- C:\Windows\Cursors
  1277. [2012/11/17 12:00:18 | 000,000,000 | ---D | M] -- C:\Windows\debug
  1278. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Windows\diagnostics
  1279. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\DigitalLocker
  1280. [2012/11/23 08:24:16 | 000,000,000 | ---D | M] -- C:\Windows\Downloaded Program Files
  1281. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\en-US
  1282. [2012/11/20 06:54:57 | 000,000,000 | R-SD | M] -- C:\Windows\Fonts
  1283. [2009/07/14 02:50:14 | 000,000,000 | ---D | M] -- C:\Windows\Globalization
  1284. [2009/07/14 00:37:44 | 000,000,000 | ---D | M] -- C:\Windows\Help
  1285. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\IME
  1286. [2012/11/23 08:23:58 | 000,000,000 | ---D | M] -- C:\Windows\inf
  1287. [2012/11/23 07:58:20 | 000,000,000 | -HSD | M] -- C:\Windows\Installer
  1288. [2009/07/14 00:32:39 | 000,000,000 | ---D | M] -- C:\Windows\L2Schemas
  1289. [2010/05/12 23:55:14 | 000,000,000 | ---D | M] -- C:\Windows\LiveKernelReports
  1290. [2012/07/07 11:00:14 | 000,000,000 | ---D | M] -- C:\Windows\Logs
  1291. [2009/07/14 00:32:40 | 000,000,000 | R-SD | M] -- C:\Windows\Media
  1292. [2012/11/20 20:26:10 | 000,000,000 | ---D | M] -- C:\Windows\Microsoft.NET
  1293. [2012/05/30 11:03:31 | 000,000,000 | ---D | M] -- C:\Windows\Minidump
  1294. [2009/07/13 21:34:34 | 000,000,000 | ---D | M] -- C:\Windows\ModemLogs
  1295. [2009/07/14 00:32:40 | 000,000,000 | ---D | M] -- C:\Windows\Offline Web Pages
  1296. [2012/07/07 11:00:16 | 000,000,000 | ---D | M] -- C:\Windows\Panther
  1297. [2012/05/29 00:30:41 | 000,000,000 | ---D | M] -- C:\Windows\PCHEALTH
  1298. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Windows\Performance
  1299. [2009/07/13 22:20:10 | 000,000,000 | ---D | M] -- C:\Windows\PLA
  1300. [2012/11/20 06:55:03 | 000,000,000 | ---D | M] -- C:\Windows\PolicyDefinitions
  1301. [2012/03/16 01:17:32 | 000,000,000 | ---D | M] -- C:\Windows\Prefetch
  1302. [2009/07/13 22:20:11 | 000,000,000 | ---D | M] -- C:\Windows\Registration
  1303. [2012/11/21 14:28:37 | 000,000,000 | ---D | M] -- C:\Windows\rescache
  1304. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Windows\Resources
  1305. [2009/07/13 21:35:47 | 000,000,000 | ---D | M] -- C:\Windows\SchCache
  1306. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Windows\schemas
  1307. [2009/07/14 02:46:31 | 000,000,000 | ---D | M] -- C:\Windows\security
  1308. [2009/07/13 23:45:47 | 000,000,000 | ---D | M] -- C:\Windows\ServiceProfiles
  1309. [2012/07/05 19:41:16 | 000,000,000 | ---D | M] -- C:\Windows\servicing
  1310. [2009/07/13 23:45:50 | 000,000,000 | ---D | M] -- C:\Windows\Setup
  1311. [2012/05/29 00:31:42 | 000,000,000 | ---D | M] -- C:\Windows\ShellNew
  1312. [2010/03/22 02:05:07 | 000,000,000 | ---D | M] -- C:\Windows\SoftwareDistribution
  1313. [2009/07/14 00:37:44 | 000,000,000 | ---D | M] -- C:\Windows\Speech
  1314. [2009/07/13 21:36:55 | 000,000,000 | ---D | M] -- C:\Windows\system
  1315. [2012/11/22 17:44:16 | 000,000,000 | ---D | M] -- C:\Windows\System32
  1316. [2012/11/23 08:24:00 | 000,000,000 | ---D | M] -- C:\Windows\SysWOW64
  1317. [2009/07/13 23:57:13 | 000,000,000 | ---D | M] -- C:\Windows\TAPI
  1318. [2012/11/01 07:11:03 | 000,000,000 | ---D | M] -- C:\Windows\Tasks
  1319. [2012/11/23 08:19:21 | 000,000,000 | ---D | M] -- C:\Windows\Temp
  1320. [2011/01/28 18:42:29 | 000,000,000 | ---D | M] -- C:\Windows\TempC363DA45-5B98-3748-45DA-C2A81F128C74-Signatures
  1321. [2009/07/13 21:34:33 | 000,000,000 | ---D | M] -- C:\Windows\tracing
  1322. [2009/07/14 00:32:39 | 000,000,000 | ---D | M] -- C:\Windows\twain_32
  1323. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\Vss
  1324. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Windows\Web
  1325. [2012/11/20 07:13:24 | 000,000,000 | ---D | M] -- C:\Windows\winsxs
  1326.  
  1327. [color=#A23BEC]< %windir%\installer\*. >[/color]
  1328. [2010/03/07 13:30:33 | 000,000,000 | -HSD | M] -- C:\Windows\installer\$PatchCache$
  1329. [2012/08/08 20:19:29 | 000,000,000 | ---D | M] -- C:\Windows\installer\{0E64B098-8018-4256-BA23-C316A43AD9B0}
  1330. [2010/03/07 13:26:09 | 000,000,000 | ---D | M] -- C:\Windows\installer\{1C72F683-A972-4BD1-A9C3-0863731C7798}
  1331. [2010/08/09 03:12:04 | 000,000,000 | ---D | M] -- C:\Windows\installer\{26A24AE4-039D-4CA4-87B4-2F83216020FF}
  1332. [2011/12/28 05:15:36 | 000,000,000 | ---D | M] -- C:\Windows\installer\{612C34C7-5E90-47D8-9B5C-0F717DD82726}
  1333. [2012/08/08 20:17:47 | 000,000,000 | ---D | M] -- C:\Windows\installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
  1334. [2010/03/22 02:07:05 | 000,000,000 | ---D | M] -- C:\Windows\installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
  1335. [2012/05/29 00:29:21 | 000,000,000 | ---D | M] -- C:\Windows\installer\{90120000-002A-0000-1000-0000000FF1CE}
  1336. [2012/11/17 08:01:50 | 000,000,000 | ---D | M] -- C:\Windows\installer\{90120000-0030-0000-0000-0000000FF1CE}
  1337. [2012/05/30 06:28:55 | 000,000,000 | ---D | M] -- C:\Windows\installer\{90120000-006E-0409-0000-0000000FF1CE}
  1338. [2010/03/07 13:25:26 | 000,000,000 | ---D | M] -- C:\Windows\installer\{99733131-7B00-4E5C-8991-113CD61D8E2F}
  1339. [2012/05/01 07:12:11 | 000,000,000 | ---D | M] -- C:\Windows\installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}
  1340. [2012/08/26 16:10:00 | 000,000,000 | ---D | M] -- C:\Windows\installer\{AC76BA86-1033-0000-7760-000000000004}
  1341. [2012/09/30 10:48:38 | 000,000,000 | ---D | M] -- C:\Windows\installer\{C78D3032-9DFD-41D0-9DE9-58EAE750CBA4}
  1342. [2011/11/30 22:53:32 | 000,000,000 | ---D | M] -- C:\Windows\installer\{DAE239CE-EB9D-4EB3-B0D4-528D6BAA48FD}
  1343. [2012/05/25 06:09:32 | 000,000,000 | ---D | M] -- C:\Windows\installer\{DC4C464D-416A-4F42-B212-8B744C1BB4AE}
  1344. [2012/08/01 19:34:40 | 000,000,000 | ---D | M] -- C:\Windows\installer\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}
  1345. [2010/03/22 02:07:33 | 000,000,000 | ---D | M] -- C:\Windows\installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
  1346.  
  1347. [color=#A23BEC]< %windir%\system32\*. >[/color]
  1348. [2010/05/12 06:04:13 | 000,000,000 | -HSD | M] -- C:\Windows\system32\%APPDATA%
  1349. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\0409
  1350. [2011/11/30 23:00:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\1070
  1351. [2011/07/10 11:10:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\AdvancedInstallers
  1352. [2009/07/13 22:20:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\ar-SA
  1353. [2009/07/13 22:20:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\bg-BG
  1354. [2009/07/13 21:35:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot
  1355. [2009/07/13 21:35:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot2
  1356. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\com
  1357. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\config
  1358. [2011/07/10 11:10:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\cs-CZ
  1359. [2011/07/10 11:10:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\da-DK
  1360. [2009/07/13 22:20:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE
  1361. [2011/07/10 11:10:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\Dism
  1362. [2011/10/23 08:10:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers
  1363. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore
  1364. [2009/07/13 22:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\el-GR
  1365. [2011/07/10 11:10:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\en
  1366. [2012/11/20 06:55:05 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US
  1367. [2011/07/10 11:10:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\es-ES
  1368. [2009/07/13 22:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\et-EE
  1369. [2009/07/13 22:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\fi-FI
  1370. [2009/07/13 22:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\fr-FR
  1371. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\FxsTmp
  1372. [2009/07/13 21:34:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\GroupPolicy
  1373. [2009/07/13 21:34:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\GroupPolicyUsers
  1374. [2009/07/13 22:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\he-IL
  1375. [2009/07/13 22:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\hr-HR
  1376. [2009/07/13 22:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\hu-HU
  1377. [2009/07/13 22:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\icsxml
  1378. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME
  1379. [2009/07/13 21:36:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\inetsrv
  1380. [2009/07/13 22:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\InstallShield
  1381. [2009/07/13 22:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\it-IT
  1382. [2009/07/13 22:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\ja-JP
  1383. [2009/07/13 22:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\ko-KR
  1384. [2010/03/07 12:57:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\LANG
  1385. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles
  1386. [2009/07/13 22:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\lt-LT
  1387. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\lv-LV
  1388. [2010/03/21 19:34:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\Macromed
  1389. [2011/07/10 11:10:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\manifeststore
  1390. [2012/11/20 06:55:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration
  1391. [2011/07/10 11:10:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz
  1392. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\Msdtc
  1393. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\MUI
  1394. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\nb-NO
  1395. [2009/07/13 21:34:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\NDF
  1396. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\NetworkList
  1397. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\nl-NL
  1398. [2011/07/10 11:10:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\oobe
  1399. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\pl-PL
  1400. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\Printing_Admin_Scripts
  1401. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\pt-BR
  1402. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\pt-PT
  1403. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\ras
  1404. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\Recovery
  1405. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\restore
  1406. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\ro-RO
  1407. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\ru-RU
  1408. [2010/03/07 12:56:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\sda
  1409. [2011/07/10 11:10:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\Setup
  1410. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\sk-SK
  1411. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\sl-SI
  1412. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\slmgr
  1413. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech
  1414. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp
  1415. [2011/07/10 11:10:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\sppui
  1416. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\sr-Latn-CS
  1417. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\sv-SE
  1418. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\sysprep
  1419. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks
  1420. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\th-TH
  1421. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\tr-TR
  1422. [2009/07/13 22:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\uk-UA
  1423. [2010/04/12 02:01:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\Wat
  1424. [2011/07/10 11:10:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem
  1425. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\WCN
  1426. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi
  1427. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell
  1428. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\winrm
  1429. [2010/03/07 12:57:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\x64
  1430. [2009/07/13 22:20:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\zh-CN
  1431. [2009/07/13 22:20:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\zh-HK
  1432. [2009/07/13 22:20:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\zh-TW
  1433.  
  1434. [color=#A23BEC]< %windir%\sysnative\*. >[/color]
  1435. [2011/08/11 07:45:57 | 000,000,000 | -HSD | M] -- C:\Windows\sysnative\%APPDATA%
  1436. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\0409
  1437. [2011/07/10 11:10:42 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\AdvancedInstallers
  1438. [2011/07/02 21:00:29 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\appmgmt
  1439. [2009/07/13 22:20:11 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ar-SA
  1440. [2009/07/13 22:20:11 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\bg-BG
  1441. [2011/07/10 11:10:18 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Boot
  1442. [2012/11/23 08:23:58 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\catroot
  1443. [2012/11/20 07:13:19 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\catroot2
  1444. [2010/03/07 23:53:12 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\CodeIntegrity
  1445. [2009/07/14 00:37:45 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\com
  1446. [2012/11/23 08:35:17 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\config
  1447. [2011/07/10 11:10:42 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\cs-CZ
  1448. [2011/07/10 11:10:43 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\da-DK
  1449. [2009/07/13 22:20:13 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\de-DE
  1450. [2011/07/10 11:10:40 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Dism
  1451. [2012/11/23 08:19:23 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\drivers
  1452. [2012/11/23 08:23:58 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\DriverStore
  1453. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\el-GR
  1454. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\en
  1455. [2012/11/20 06:55:05 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\en-US
  1456. [2011/07/10 11:10:42 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\es-ES
  1457. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\et-EE
  1458. [2011/07/10 10:42:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\EventProviders
  1459. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\fi-FI
  1460. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\fr-FR
  1461. [2009/07/14 00:09:04 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\FxsTmp
  1462. [2010/03/21 17:14:19 | 000,000,000 | -H-D | M] -- C:\Windows\sysnative\GroupPolicy
  1463. [2009/07/13 21:34:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\GroupPolicyUsers
  1464. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\he-IL
  1465. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\hr-HR
  1466. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\hu-HU
  1467. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ias
  1468. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\icsxml
  1469. [2009/07/13 22:20:11 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\IME
  1470. [2009/07/13 21:36:55 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\inetsrv
  1471. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\it-IT
  1472. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ja-JP
  1473. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ko-KR
  1474. [2010/03/21 14:29:19 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\LogFiles
  1475. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\lt-LT
  1476. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\lv-LV
  1477. [2011/11/17 12:13:07 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Macromed
  1478. [2011/07/10 11:10:42 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\manifeststore
  1479. [2009/07/13 23:45:42 | 000,000,000 | --SD | M] -- C:\Windows\sysnative\Microsoft
  1480. [2012/11/20 06:55:03 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\migration
  1481. [2011/07/10 11:10:40 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\migwiz
  1482. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Msdtc
  1483. [2009/07/14 00:37:45 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\MUI
  1484. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\nb-NO
  1485. [2012/02/24 00:04:00 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\NDF
  1486. [2009/07/13 22:20:11 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\NetworkList
  1487. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\nl-NL
  1488. [2011/07/10 11:10:42 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\oobe
  1489. [2009/07/13 22:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\pl-PL
  1490. [2009/07/14 00:37:45 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Printing_Admin_Scripts
  1491. [2009/07/13 22:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\pt-BR
  1492. [2009/07/13 22:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\pt-PT
  1493. [2009/07/13 22:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ras
  1494. [2010/03/07 10:47:40 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Recovery
  1495. [2010/03/07 11:28:23 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\restore
  1496. [2009/07/13 22:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ro-RO
  1497. [2009/07/13 22:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ru-RU
  1498. [2011/07/10 11:10:42 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Setup
  1499. [2009/07/13 22:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sk-SK
  1500. [2009/07/13 22:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sl-SI
  1501. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\slmgr
  1502. [2009/07/13 22:20:13 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\SMI
  1503. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Speech
  1504. [2009/07/13 23:53:31 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\spool
  1505. [2009/07/13 22:20:13 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\spp
  1506. [2011/07/10 11:10:42 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sppui
  1507. [2011/07/10 10:46:00 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\SPReview
  1508. [2009/07/13 22:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sr-Latn-CS
  1509. [2009/07/13 22:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sv-SE
  1510. [2010/03/07 23:41:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sysprep
  1511. [2012/11/01 17:21:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Tasks
  1512. [2009/07/13 22:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\th-TH
  1513. [2009/07/13 22:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\tr-TR
  1514. [2009/07/13 22:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\uk-UA
  1515. [2010/04/12 02:01:26 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Wat
  1516. [2012/11/20 06:55:04 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\wbem
  1517. [2009/07/14 00:37:45 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\WCN
  1518. [2011/04/06 03:07:53 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\wdi
  1519. [2009/07/14 00:09:49 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\wfp
  1520. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\WinBioDatabase
  1521. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\WinBioPlugIns
  1522. [2009/07/14 00:32:38 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\WindowsPowerShell
  1523. [2009/07/13 22:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\winevt
  1524. [2009/07/14 00:37:46 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\winrm
  1525. [2009/07/13 22:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\zh-CN
  1526. [2009/07/13 22:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\zh-HK
  1527. [2009/07/13 22:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\zh-TW
  1528.  
  1529. [color=#A23BEC]< %Temp%\smtmp\1\*.* >[/color]
  1530.  
  1531. [color=#A23BEC]< %Temp%\smtmp\2\*.* >[/color]
  1532.  
  1533. [color=#A23BEC]< %Temp%\smtmp\3\*.* >[/color]
  1534.  
  1535. [color=#A23BEC]< %Temp%\smtmp\4\*.* >[/color]
  1536.  
  1537. [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
  1538.  
  1539. [color=#A23BEC]< %systemroot%\syswow64\*.dll /lockedfiles >[/color]
  1540.  
  1541. [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
  1542.  
  1543. [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /90 >[/color]
  1544.  
  1545. [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]
  1546.  
  1547. [color=#A23BEC]< %systemroot%\syswow64\drivers\*.sys /90 >[/color]
  1548.  
  1549. [color=#A23BEC]< %systemroot%\syswow64\drivers\*.sys /lockedfiles >[/color]
  1550.  
  1551. [color=#A23BEC]< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >[/color]
  1552.  
  1553. [color=#A23BEC]< %systemroot%\*. /rp /s >[/color]
  1554.  
  1555. [color=#A23BEC]< %systemroot%\assembly\tmp\*.* /S /MD5 >[/color]
  1556.  
  1557. [color=#A23BEC]< %systemroot%\assembly\temp\*.* /S /MD5 >[/color]
  1558.  
  1559. [color=#A23BEC]< %systemroot%\assembly\GAC\*.ini >[/color]
  1560.  
  1561. [color=#A23BEC]< %systemroot%\assembly\GAC_32\*.ini >[/color]
  1562.  
  1563. [color=#A23BEC]< %systemroot%\assembly\GAC_64\*.ini >[/color]
  1564.  
  1565. [color=#A23BEC]< %SystemRoot%\assembly\GAC_MSIL\*.ini >[/color]
  1566.  
  1567. [color=#A23BEC]< wsSystemRoot|l,n,u,@;True;False;True;$,{ /fn >[/color]
  1568.  
  1569. [color=#A23BEC]< %systemdrive%\$Recycle.Bin|@;true;true;true /fp >[/color]
  1570.  
  1571. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24} /s >[/color]
  1572. "" = PSFactoryBuffer
  1573. [HKEY_CLASSES_ROOT\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32]
  1574. "" = %systemroot%\system32\wbem\wbemsvc.dll -- [2009/07/13 20:16:17 | 000,047,616 | ---- | M] (Microsoft Corporation)
  1575. "ThreadingModel" = Both
  1576.  
  1577. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s >[/color]
  1578.  
  1579. [color=#A23BEC]< HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} /s >[/color]
  1580.  
  1581. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s >[/color]
  1582.  
  1583. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} /s >[/color]
  1584. "" = MruPidlList
  1585. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  1586. "" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 23:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
  1587. "ThreadingModel" = Apartment
  1588.  
  1589. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8} /s >[/color]
  1590. "" = Start Menu Pin
  1591. "ImplementsVerbs" = startpin;startunpin
  1592. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\InProcServer32]
  1593. "" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 23:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
  1594. "ThreadingModel" = Apartment
  1595.  
  1596. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24} /s >[/color]
  1597. "" = PSFactoryBuffer
  1598. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32]
  1599. "" = %systemroot%\system32\wbem\wbemsvc.dll -- [2009/07/13 20:16:17 | 000,047,616 | ---- | M] (Microsoft Corporation)
  1600. "ThreadingModel" = Both
  1601.  
  1602. [color=#A23BEC]< HKEY_CLASSES_ROOT\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F} /s >[/color]
  1603. "" = Microsoft WBEM _WbemFetchRefresherMgr Proxy Helper
  1604. [HKEY_CLASSES_ROOT\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InprocServer32]
  1605. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 07:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  1606. "ThreadingModel" = Free
  1607.  
  1608. [color=#A23BEC]< HKEY_CLASSES_ROOT\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9} /s >[/color]
  1609. "" = ShellFolder for CD Burning
  1610. [HKEY_CLASSES_ROOT\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  1611. "" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 23:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
  1612. "ThreadingModel" = Apartment
  1613. [HKEY_CLASSES_ROOT\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\MergedFolder]
  1614. "Attributes" = 0x0
  1615. "AttributeMask" = 0xffffffff
  1616. "Location" = @shell32.dll,-12591 -- [2012/06/08 23:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
  1617. "ConflictOverlayIcon" = %SystemRoot%\system32\imageres.dll,-169 -- [2009/07/13 20:06:03 | 020,268,032 | ---- | M] (Microsoft Corporation)
  1618.  
  1619. [color=#A23BEC]< HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9} /s >[/color]
  1620.  
  1621. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5839FCA9-774D-42A1-ACDA-D6A79037F57F} /s >[/color]
  1622. "" = Microsoft WBEM _WbemFetchRefresherMgr Proxy Helper
  1623. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InprocServer32]
  1624. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 07:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  1625. "ThreadingModel" = Free
  1626.  
  1627. [color=#A23BEC]< HKEY_CURRENT_USER\Software\Classes\clsid\{12d0253a-7c96-815c-11e0-3034bbd97cc0}] /s >[/color]
  1628.  
  1629. [color=#A23BEC]< HKEY_CURRENT_USER\Software\MSOLoad /s >[/color]
  1630.  
  1631. [color=#A23BEC]< bcdedit /enum all /v >C:\boot.txt /c >[/color]
  1632.  
  1633. [color=#A23BEC]< type c:\diskreport.txt /c >[/color]
  1634. Microsoft DiskPart version 6.1.7601
  1635. Copyright (C) 1999-2008 Microsoft Corporation.
  1636. On computer: CF-W8GWDAJR
  1637. Volume ### Ltr Label Fs Type Size Status Info
  1638. ---------- --- ----------- ----- ---------- ------- --------- --------
  1639. Volume 0 C NTFS Partition 86 GB Healthy System
  1640. Volume 1 D NTFS Partition 62 GB Healthy
  1641.  
  1642. [color=#A23BEC]< MD5 for: AFD.SYS >[/color]
  1643. [2011/12/27 22:59:24 | 000,498,688 | ---- | M] (Microsoft Corporation) MD5=1C7857B62DE5994A75B054A9FD4C3825 -- C:\Windows\SysNative\drivers\afd.sys
  1644. [2011/12/27 22:59:24 | 000,498,688 | ---- | M] (Microsoft Corporation) MD5=1C7857B62DE5994A75B054A9FD4C3825 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17752_none_35e10b89752ee0f5\afd.sys
  1645. [2011/12/27 23:01:36 | 000,498,176 | ---- | M] (Microsoft Corporation) MD5=36A14FD1A23F57046361733B792CA8DB -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.21887_none_364f3a028e605345\afd.sys
  1646. [2011/04/24 21:44:02 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=6EF20DDF3172E97D69F596FB90602F29 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16802_none_3430bc3977dfec2d\afd.sys
  1647. [2009/07/13 18:21:42 | 000,500,224 | ---- | M] (Microsoft Corporation) MD5=B9384E03479D2506BC924C16A3DB87BC -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16385_none_33dd3439781e25f7\afd.sys
  1648. [2011/12/27 23:01:12 | 000,499,200 | ---- | M] (Microsoft Corporation) MD5=CCA39961E76B491DDF44B1E90FC8971D -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.21115_none_34b263fe91032456\afd.sys
  1649. [2010/11/20 04:23:34 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=D31DC7A16DEA4A9BAF179F3D6FBDB38C -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17514_none_360e4801750ca991\afd.sys
  1650. [2011/04/24 21:34:03 | 000,499,200 | ---- | M] (Microsoft Corporation) MD5=D5B031C308A409A0A576BFF4CF083D30 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17603_none_3618198975057170\afd.sys
  1651. [2011/12/27 22:59:11 | 000,499,200 | ---- | M] (Microsoft Corporation) MD5=DB9D6C6B2CD95A9CA414D045B627422E -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16937_none_34154fcd77f3bbda\afd.sys
  1652. [2011/04/24 22:09:35 | 000,499,200 | ---- | M] (Microsoft Corporation) MD5=F4AD06143EAC303F55D0E86C40802976 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.21712_none_3695e61e8e2c13d4\afd.sys
  1653. [2011/04/24 21:44:27 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=FBFF8B7C9D116229E9208A0D1CAEB49B -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.20951_none_3483491e9126fe55\afd.sys
  1654.  
  1655. [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
  1656. [2009/07/13 20:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
  1657. [2009/07/13 20:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
  1658. [2009/07/13 20:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
  1659. [2009/07/13 20:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
  1660.  
  1661. [color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color]
  1662. [2009/07/13 20:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
  1663. [2009/07/13 20:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
  1664. [2009/07/13 20:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
  1665. [2009/07/13 20:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
  1666.  
  1667. [color=#A23BEC]< MD5 for: CSC.SYS >[/color]
  1668. [2009/07/13 18:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) MD5=4A6173C2279B498CD8F57CAE504564CB -- C:\Windows\winsxs\amd64_microsoft-windows-offlinefiles-core_31bf3856ad364e35_6.1.7600.16385_none_fa3d3a8e759850bd\csc.sys
  1669. [2010/11/20 04:27:13 | 000,514,560 | ---- | M] (Microsoft Corporation) MD5=54DA3DFD29ED9F1619B6F53F3CE55E49 -- C:\Windows\SysNative\drivers\csc.sys
  1670. [2010/11/20 04:27:13 | 000,514,560 | ---- | M] (Microsoft Corporation) MD5=54DA3DFD29ED9F1619B6F53F3CE55E49 -- C:\Windows\winsxs\amd64_microsoft-windows-offlinefiles-core_31bf3856ad364e35_6.1.7601.17514_none_fc6e4e567286d457\csc.sys
  1671.  
  1672. [color=#A23BEC]< MD5 for: DFSC.SYS >[/color]
  1673. [2009/07/13 18:23:44 | 000,102,400 | ---- | M] (Microsoft Corporation) MD5=3F1DC527070ACB87E40AFE46EF6DA749 -- C:\Windows\winsxs\amd64_microsoft-windows-dfsclient_31bf3856ad364e35_6.1.7600.16385_none_e38f1f84ffcceb85\dfsc.sys
  1674. [2011/04/26 21:45:11 | 000,102,400 | ---- | M] (Microsoft Corporation) MD5=59E1C75E5DDBB70BF5A9C6A34D31B4AC -- C:\Windows\winsxs\amd64_microsoft-windows-dfsclient_31bf3856ad364e35_6.1.7600.20953_none_e43734fe18d3f691\dfsc.sys
  1675. [2010/11/20 04:26:32 | 000,102,400 | ---- | M] (Microsoft Corporation) MD5=9BB2EF44EAA163B29C4A4587887A0FE4 -- C:\Windows\SysNative\drivers\dfsc.sys
  1676. [2010/11/20 04:26:32 | 000,102,400 | ---- | M] (Microsoft Corporation) MD5=9BB2EF44EAA163B29C4A4587887A0FE4 -- C:\Windows\winsxs\amd64_microsoft-windows-dfsclient_31bf3856ad364e35_6.1.7601.17514_none_e5c0334cfcbb6f1f\dfsc.sys
  1677. [2011/04/26 21:57:40 | 000,102,400 | ---- | M] (Microsoft Corporation) MD5=9C253CE7311CA60FC11C774692A13208 -- C:\Windows\winsxs\amd64_microsoft-windows-dfsclient_31bf3856ad364e35_6.1.7600.16804_none_e3e4a818ff8ce469\dfsc.sys
  1678.  
  1679. [color=#A23BEC]< MD5 for: DISK.SYS >[/color]
  1680. [2009/07/13 20:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\SysNative\drivers\disk.sys
  1681. [2009/07/13 20:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\SysNative\DriverStore\FileRepository\disk.inf_amd64_neutral_10ce25bbc5a9cc43\disk.sys
  1682. [2009/07/13 20:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\winsxs\amd64_disk.inf_31bf3856ad364e35_6.1.7600.16385_none_55bb738b8ddd8a01\disk.sys
  1683.  
  1684. [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
  1685. [2011/02/26 01:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
  1686. [2011/02/26 00:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
  1687. [2009/07/13 20:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
  1688. [2011/02/26 00:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
  1689. [2009/10/31 00:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
  1690. [2011/02/26 00:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
  1691. [2011/02/25 01:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
  1692. [2011/02/25 01:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
  1693. [2011/02/26 01:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
  1694. [2010/11/20 07:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
  1695. [2009/08/03 01:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
  1696. [2011/02/25 00:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
  1697. [2011/02/25 00:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
  1698. [2009/10/31 01:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
  1699. [2009/08/03 00:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
  1700. [2010/11/20 08:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
  1701. [2009/10/31 01:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
  1702. [2009/08/03 00:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
  1703. [2009/07/13 20:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
  1704. [2009/10/31 01:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
  1705. [2011/02/26 01:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
  1706. [2009/08/03 01:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
  1707.  
  1708. [color=#A23BEC]< MD5 for: I8042PRT.SYS >[/color]
  1709. [2009/07/13 18:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\SysNative\drivers\i8042prt.sys
  1710. [2009/07/13 18:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\SysNative\DriverStore\FileRepository\keyboard.inf_amd64_neutral_0684fdc43059f486\i8042prt.sys
  1711. [2009/07/13 18:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\SysNative\DriverStore\FileRepository\msmouse.inf_amd64_neutral_7a5f47d3150cc0eb\i8042prt.sys
  1712. [2009/07/13 18:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\winsxs\amd64_keyboard.inf_31bf3856ad364e35_6.1.7600.16385_none_f3435f7ff2a9f325\i8042prt.sys
  1713. [2009/07/13 18:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\winsxs\amd64_keyboard.inf_31bf3856ad364e35_6.1.7601.17514_none_f5747347ef9876bf\i8042prt.sys
  1714. [2009/07/13 18:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\winsxs\amd64_msmouse.inf_31bf3856ad364e35_6.1.7600.16385_none_aa28fd23ec0c39f9\i8042prt.sys
  1715.  
  1716. [color=#A23BEC]< MD5 for: IASTOR.SYS >[/color]
  1717. [2009/06/04 05:54:36 | 000,408,600 | ---- | M] (Intel Corporation) MD5=1D004CB1DA6323B1F55CAEF7F94B61D9 -- C:\Windows\SysNative\DriverStore\FileRepository\iaahci.inf_amd64_neutral_7fb62b08f6b7117a\iaStor.sys
  1718. [2010/03/03 18:51:40 | 000,540,696 | ---- | M] (Intel Corporation) MD5=ABBF174CB394F5C437410A788B7E404A -- C:\Windows\SysNative\drivers\iaStor.sys
  1719. [2010/03/03 18:51:40 | 000,540,696 | ---- | M] (Intel Corporation) MD5=ABBF174CB394F5C437410A788B7E404A -- C:\Windows\SysNative\DriverStore\FileRepository\iaahci.inf_amd64_neutral_78ebae21a80aa2b4\iaStor.sys
  1720.  
  1721. [color=#A23BEC]< MD5 for: LSASS.EXE >[/color]
  1722. [2009/07/13 20:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_023f7c69767c3edd\lsass.exe
  1723. [2009/07/13 20:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_023e7e05767d22ad\lsass.exe
  1724. [2009/07/13 20:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_02bd4ae48fa2de68\lsass.exe
  1725. [2009/07/13 20:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe
  1726. [2011/11/17 01:20:34 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0A10B74FBB437FF9A23F1D5DE4446A83 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_04c1204e8cb39c3f\lsass.exe
  1727. [2011/11/17 02:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16915_none_028b374176436a30\lsass.exe
  1728. [2011/11/17 02:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.17035_none_02756f8b7653d554\lsass.exe
  1729. [2012/06/04 02:51:10 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=79C908CAA6F43021EB05F4C733A927D1 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_04f609a88c8c279c\lsass.exe
  1730. [2012/06/02 00:30:31 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=BF63CE11A25F3509129888710D5111FC -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21225_none_0309de288f695654\lsass.exe
  1731. [2011/11/17 01:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\SysNative\lsass.exe
  1732. [2011/11/17 01:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_0466c45b7371f20d\lsass.exe
  1733. [2011/11/17 01:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_044756c773895c5e\lsass.exe
  1734. [2011/11/17 01:42:52 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=D21BD47E528CD62E79311FB5DF0150E6 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21092_none_02bb2a0a8fa4d398\lsass.exe
  1735.  
  1736. [color=#A23BEC]< MD5 for: NETBT.SYS >[/color]
  1737. [2010/11/20 04:23:20 | 000,261,632 | ---- | M] (Microsoft Corporation) MD5=09594D1089C523423B32A4229263F068 -- C:\Windows\SysNative\drivers\netbt.sys
  1738. [2010/11/20 04:23:20 | 000,261,632 | ---- | M] (Microsoft Corporation) MD5=09594D1089C523423B32A4229263F068 -- C:\Windows\winsxs\amd64_microsoft-windows-netbt_31bf3856ad364e35_6.1.7601.17514_none_be8acdd10de3b1a6\netbt.sys
  1739. [2009/07/13 18:21:29 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=9162B273A44AB9DCE5B44362731D062A -- C:\Windows\winsxs\amd64_microsoft-windows-netbt_31bf3856ad364e35_6.1.7600.16385_none_bc59ba0910f52e0c\netbt.sys
  1740.  
  1741. [color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
  1742. [2009/07/13 20:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
  1743. [2010/11/20 08:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
  1744. [2010/11/20 08:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
  1745. [2010/11/20 07:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
  1746. [2010/11/20 07:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
  1747. [2009/07/13 20:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll
  1748.  
  1749. [color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
  1750. [2009/07/13 20:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
  1751. [2009/07/13 20:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
  1752. [2010/11/20 07:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
  1753. [2010/11/20 07:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
  1754. [2010/11/20 08:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
  1755. [2010/11/20 08:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
  1756.  
  1757. [color=#A23BEC]< MD5 for: SERIAL.SYS >[/color]
  1758. [2009/07/13 19:00:40 | 000,094,208 | ---- | M] (Brother Industries Ltd.) MD5=C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 -- C:\Windows\SysNative\drivers\serial.sys
  1759. [2009/07/13 19:00:40 | 000,094,208 | ---- | M] (Brother Industries Ltd.) MD5=C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 -- C:\Windows\SysNative\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\serial.sys
  1760. [2009/07/13 19:00:40 | 000,094,208 | ---- | M] (Brother Industries Ltd.) MD5=C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 -- C:\Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\serial.sys
  1761.  
  1762. [color=#A23BEC]< MD5 for: SERVICES.EXE >[/color]
  1763. [2009/07/13 20:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
  1764. [2009/07/13 20:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
  1765.  
  1766. [color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
  1767. [2009/07/13 20:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
  1768. [2009/07/13 20:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
  1769. [2009/07/13 20:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
  1770. [2009/07/13 20:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe
  1771.  
  1772. [color=#A23BEC]< MD5 for: TCPIP.SYS >[/color]
  1773. [2011/04/25 00:28:24 | 001,893,248 | ---- | M] (Microsoft Corporation) MD5=1F748D5439B65E0BEBD92F65048F030D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_0fb918de99201ffb\tcpip.sys
  1774. [2012/10/03 12:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\SysNative\drivers\tcpip.sys
  1775. [2012/10/03 12:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
  1776. [2011/09/29 12:41:37 | 001,912,176 | ---- | M] (Microsoft Corporation) MD5=3810F06A4D74A7D62641EE73D6B3C660 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_11c6e9949627e69c\tcpip.sys
  1777. [2010/11/20 08:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
  1778. [2011/06/21 01:16:55 | 001,888,128 | ---- | M] (Microsoft Corporation) MD5=5279D4DD69C7C71524B8E7A5746D15CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20992_none_0f8ed978993fa916\tcpip.sys
  1779. [2010/06/14 01:39:16 | 001,889,152 | ---- | M] (Microsoft Corporation) MD5=542C6767C68C9D6AAACA59436B0D15C2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_0fd0b57e990e2079\tcpip.sys
  1780. [2012/03/30 05:19:17 | 001,877,872 | ---- | M] (Microsoft Corporation) MD5=5EFD096DEF47F8B88EF591DA92143440 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21178_none_0faa5514992a39a7\tcpip.sys
  1781. [2011/04/25 00:32:22 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=61DC720BB065D607D5823F13D2A64321 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_0f668bf97fd90dd3\tcpip.sys
  1782. [2012/03/30 06:09:53 | 001,895,280 | ---- | M] (Microsoft Corporation) MD5=624C5B3AA4C99B3184BB922D9ECE3FF0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16986_none_0f140fa780164fde\tcpip.sys
  1783. [2012/08/22 13:06:13 | 001,901,936 | ---- | M] (Microsoft Corporation) MD5=7880A26B7D3B96FDA8EFD9F985036B1D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22097_none_117a13de9661c145\tcpip.sys
  1784. [2010/04/09 06:06:28 | 001,898,376 | ---- | M] (Microsoft Corporation) MD5=7FC877A25796D8ADF539E64703FCA7E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16569_none_0f2ca8c580036f65\tcpip.sys
  1785. [2012/03/30 05:26:36 | 001,901,424 | ---- | M] (Microsoft Corporation) MD5=885B202006EE17AE99B9FBCEC9AF88C9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_11a27a8e9643d23a\tcpip.sys
  1786. [2010/06/14 01:37:36 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=90A2D722CF64D911879D6C4A4F802A4D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_0f59b7ad7fe2fcc8\tcpip.sys
  1787. [2009/07/13 20:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
  1788. [2011/04/25 00:33:51 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=92CE29D95AC9DD2D0EE9061D551BA250 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_114de9497cfe9316\tcpip.sys
  1789. [2011/06/21 01:20:30 | 001,914,752 | ---- | M] (Microsoft Corporation) MD5=A0EB71E0DC047C7CC95CD6AB4036296E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21754_none_11a276c29643d7ec\tcpip.sys
  1790. [2010/04/09 02:56:29 | 001,892,232 | ---- | M] (Microsoft Corporation) MD5=A9C0F786AC1F736891D05CE0A1D29DEB -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20687_none_0f9ea52499331463\tcpip.sys
  1791. [2011/09/29 11:17:51 | 001,886,064 | ---- | M] (Microsoft Corporation) MD5=AC3E29880DB5659532A1AA3439304A43 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21060_none_0fad20ca992955d7\tcpip.sys
  1792. [2012/03/30 06:35:47 | 001,918,320 | ---- | M] (Microsoft Corporation) MD5=ACB82BDA8F46C84F465C1AFA517DC4B9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_114ceccb7cff740d\tcpip.sys
  1793. [2011/04/25 01:16:34 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=B77977AEB2FF159D01DB08A309989C5F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_11cbb5de9625357a\tcpip.sys
  1794. [2011/06/21 01:27:14 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=B9D87C7707F058AC652A398CD28DE14B -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16839_none_0f4d1e3b7feb1307\tcpip.sys
  1795. [2012/10/03 12:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
  1796. [2011/06/21 01:34:00 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=F0E98C00A09FDF791525829A1D14240F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17638_none_11327af77d12659c\tcpip.sys
  1797. [2011/09/29 11:24:44 | 001,897,328 | ---- | M] (Microsoft Corporation) MD5=F18F56EFC0BFB9C87BA01C37B27F4DA5 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16889_none_0f170e9f80139ebc\tcpip.sys
  1798. [2012/08/22 13:12:50 | 001,913,200 | ---- | M] (Microsoft Corporation) MD5=F782CAD3CEDBB3F9FFE3BF2775D92DDC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17939_none_113380f37d117668\tcpip.sys
  1799. [2011/09/29 11:29:28 | 001,923,952 | ---- | M] (Microsoft Corporation) MD5=FC62769E7BFF2896035AEED399108162 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_10f09b257d43f3eb\tcpip.sys
  1800.  
  1801. [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
  1802. [2010/11/20 07:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
  1803. [2010/11/20 07:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
  1804. [2009/07/13 20:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
  1805. [2009/07/13 20:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
  1806. [2010/11/20 08:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
  1807. [2010/11/20 08:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
  1808.  
  1809. [color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color]
  1810. [2010/11/20 08:34:02 | 000,295,808 | ---- | M] (Microsoft Corporation) MD5=0D08D2F3B3FF84E433346669B5E0F639 -- C:\Windows\SysNative\drivers\volsnap.sys
  1811. [2010/11/20 08:34:02 | 000,295,808 | ---- | M] (Microsoft Corporation) MD5=0D08D2F3B3FF84E433346669B5E0F639 -- C:\Windows\SysNative\DriverStore\FileRepository\volume.inf_amd64_neutral_df8bea40ac96ca21\volsnap.sys
  1812. [2010/11/20 08:34:02 | 000,295,808 | ---- | M] (Microsoft Corporation) MD5=0D08D2F3B3FF84E433346669B5E0F639 -- C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.1.7601.17514_none_73dcbcf012b4850e\volsnap.sys
  1813. [2009/07/13 20:45:55 | 000,294,992 | ---- | M] (Microsoft Corporation) MD5=58F82EED8CA24B461441F9C3E4F0BF5C -- C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.1.7600.16385_none_71aba92815c60174\volsnap.sys
  1814.  
  1815. [color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
  1816. [2009/07/13 20:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
  1817. [2009/07/13 20:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
  1818. [2009/07/13 20:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
  1819. [2009/07/13 20:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
  1820.  
  1821. [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
  1822. [2010/11/20 08:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
  1823. [2010/11/20 08:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
  1824. [2009/07/13 20:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
  1825. [2009/10/28 02:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
  1826. [2009/10/28 01:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
  1827.  
  1828. < End of report >
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!