Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Malware removal 2nd computer - Post created for Bleepin Gringo


  • This topic is locked This topic is locked
34 replies to this topic

#1 nodiggity

nodiggity

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 18 February 2014 - 06:05 AM

As we talked about:

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-02-2014
Ran by 3one4 Events (administrator) on 3ONE4EVENTS-PC on 18-02-2014 06:02:45
Running from C:\Users\3one4 Events\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal
 
The only official download link for FRST:
Download link from any site other than Bleeping Computer is unpermitted or outdated.
 
==================== Processes (Whitelisted) =================
 
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
() C:\Program Files (x86)\Dell V310-V510 Series\dleamon.exe
() C:\Program Files (x86)\Dell V310-V510 Series\ezprint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
( ) C:\Windows\system32\dleacoms.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Ticket Technology by StubHub) C:\Program Files (x86)\Ticket Technology\POSNET Server\POSNET.Exchange.Service.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [dleamon.exe] - C:\Program Files (x86)\Dell V310-V510 Series\dleamon.exe [770728 2011-01-23] ()
HKLM\...\Run: [EzPrint] - C:\Program Files (x86)\Dell V310-V510 Series\ezprint.exe [139944 2011-01-23] ()
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [Dell V310-V510 Series] - C:\Program Files (x86)\Dell V310-V510 Series\fm3032.exe [316072 2011-01-23] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813712 2014-02-04] (LogMeIn Inc.)
Winlogon\Notify\GoToAssist Express Customer: C:\Program Files (x86)\Citrix\GoToAssist Remote Support Customer\594\g2ax_winlogonx64.dll (Citrix Online, a division of Citrix Systems, Inc.)
HKU\.DEFAULT\...\Run: [Bitdefender Wallet Agent] - "C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe"
HKU\.DEFAULT\...\Run: [Bitdefender Wallet] - "C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe" --hidden --nowizard
HKU\.DEFAULT\...\Run: [Bitdefender Wallet Application Agent] - "C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe"
 
==================== Internet (Whitelisted) ====================
 
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB03F12251529CF01
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: No Name - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -  No File
BHO-x32: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: Dell Toolbar - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll ()
BHO-x32: No Name - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -  No File
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: No Name - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -  No File
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Dell Toolbar - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 
FireFox:
========
FF ProfilePath: C:\Users\3one4 Events\AppData\Roaming\Mozilla\Firefox\Profiles\amc1zqs0.default-1392333658465
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Extension: Check4Change - C:\Users\3one4 Events\AppData\Roaming\Mozilla\Firefox\Profiles\amc1zqs0.default-1392333658465\Extensions\check4change-owner@mozdev.org.xpi [2014-02-14]
 
Chrome: 
=======
CHR Extension: (Adblock Plus) - C:\Users\3one4 Events\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-02-11]
CHR Extension: (Google Wallet) - C:\Users\3one4 Events\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-02]
CHR HKLM-x32\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx [2014-02-02]
 
==================== Services (Whitelisted) =================
 
S2 dleaCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\dleaserv.exe [45224 2010-05-21] ()
R2 dlea_device; C:\Windows\system32\dleacoms.exe [1047552 2009-12-09] ( )
R2 dlea_device; C:\Windows\SysWOW64\dleacoms.exe [598696 2010-05-21] ( )
R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [36936 2013-12-02] (CHENGDU YIWO Tech Development Co., Ltd)
S3 GoToAssist Remote Support Customer; C:\Program Files (x86)\Citrix\GoToAssist Remote Support Customer\594\g2ax_service.exe [610376 2014-02-10] (Citrix Online, a division of Citrix Systems, Inc.)
R2 Guard Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe [23624 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-04] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R2 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [192000 2012-12-29] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 POSNET Exchange; C:\Program Files (x86)\Ticket Technology\POSNET Server\POSNET.Exchange.Service.exe [610304 2013-12-17] (Ticket Technology by StubHub)
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025408 2014-01-09] (Enigma Software Group USA, LLC.)
S4 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [612864 2012-12-29] (Microsoft Corporation)
 
==================== Drivers (Whitelisted) ====================
 
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [14872 2014-01-07] ()
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48200 2013-09-04] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
S4 RsFx0201; C:\Windows\System32\DRIVERS\RsFx0201.sys [336880 2012-10-20] (Microsoft Corporation)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-13] (Brother Industries Ltd.)
S1 A2DDA; \??\C:\EEK\RUN\a2ddax64.sys [X]
S3 cleanhlp; \??\C:\EEK\Run\cleanhlp64.sys [X]
S3 RtlWlanu; system32\DRIVERS\rtwlanu.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2014-02-18 06:02 - 2014-02-18 06:02 - 00010674 _____ () C:\Users\3one4 Events\Desktop\FRST.txt
2014-02-18 06:02 - 2014-02-18 06:02 - 00000000 ____D () C:\FRST
2014-02-18 06:01 - 2014-02-18 06:01 - 02152448 _____ (Farbar) C:\Users\3one4 Events\Desktop\FRST64.exe
2014-02-17 17:31 - 2014-02-17 17:32 - 00000000 ____D () C:\AdwCleaner
2014-02-17 17:31 - 2014-02-17 17:31 - 01241834 _____ () C:\Users\3one4 Events\Downloads\AdwCleaner.exe
2014-02-17 17:24 - 2014-02-17 17:24 - 01037530 _____ (Thisisu) C:\Users\3one4 Events\Downloads\JRT.exe
2014-02-17 17:02 - 2014-02-17 17:40 - 00000168 _____ () C:\Windows\setupact.log
2014-02-17 17:02 - 2014-02-17 17:02 - 00021770 _____ () C:\Windows\PFRO.log
2014-02-17 17:02 - 2014-02-17 17:02 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-17 16:35 - 2011-01-23 19:38 - 00002064 _____ () C:\Windows\system32\dlea.loc
2014-02-17 16:35 - 2010-05-04 17:44 - 00836608 _____ ( ) C:\Windows\system32\dleacoin.dll
2014-02-17 16:35 - 2009-12-09 15:32 - 00979968 _____ ( ) C:\Windows\system32\dleapmui.dll
2014-02-17 16:35 - 2009-12-09 15:27 - 01104384 _____ ( ) C:\Windows\system32\dleahbn3.dll
2014-02-17 16:35 - 2009-12-09 15:25 - 00607232 _____ ( ) C:\Windows\system32\dleacfg.exe
2014-02-17 16:35 - 2009-12-09 15:25 - 00547840 _____ ( ) C:\Windows\system32\dleahcp.dll
2014-02-17 16:35 - 2009-12-09 15:24 - 01371648 _____ ( ) C:\Windows\system32\dleacomc.dll
2014-02-17 16:35 - 2009-12-09 15:24 - 01047552 _____ ( ) C:\Windows\system32\dleacoms.exe
2014-02-17 16:35 - 2009-12-09 15:23 - 00516096 _____ ( ) C:\Windows\system32\dleaih.exe
2014-02-17 16:35 - 2009-11-26 03:54 - 00075264 _____ () C:\Windows\system32\dleacfg.dll
2014-02-17 16:35 - 2009-11-26 03:42 - 00008696 _____ () C:\Windows\system32\dleacommuilogo_rtl.bmp
2014-02-17 16:35 - 2009-11-26 03:42 - 00008696 _____ () C:\Windows\system32\dleacommuilogo.bmp
2014-02-17 16:35 - 2009-11-09 03:36 - 00245248 _____ () C:\Windows\system32\dleainsb.dll
2014-02-17 16:35 - 2009-11-09 03:36 - 00090624 _____ () C:\Windows\system32\dleainsr.dll
2014-02-17 16:35 - 2009-11-09 03:36 - 00073216 _____ () C:\Windows\system32\dleacub.dll
2014-02-17 16:35 - 2009-11-09 03:36 - 00040448 _____ () C:\Windows\system32\dleajswr.dll
2014-02-17 16:35 - 2009-11-09 03:36 - 00022016 _____ () C:\Windows\system32\dleacur.dll
2014-02-17 16:35 - 2009-11-09 03:35 - 00450048 _____ () C:\Windows\system32\dleains.dll
2014-02-17 16:35 - 2009-11-09 03:35 - 00378368 _____ () C:\Windows\system32\dleacu.dll
2014-02-17 16:35 - 2009-11-09 03:35 - 00298496 _____ () C:\Windows\system32\dleagrd.dll
2014-02-17 16:35 - 2009-11-09 03:06 - 00065536 _____ () C:\Windows\system32\dleagcfg.dll
2014-02-17 16:35 - 2009-10-21 05:06 - 00399360 _____ () C:\Windows\system32\dleacui.dll
2014-02-17 16:35 - 2009-10-21 05:06 - 00148480 _____ () C:\Windows\system32\dleacuir.dll
2014-02-17 16:35 - 2009-02-04 06:57 - 00065106 _____ () C:\Windows\system32\dleaprpr.chm
2014-02-17 16:35 - 2008-04-30 01:32 - 01462272 _____ (Microsoft Corporation) C:\Windows\system32\lxk_g.dll
2014-02-17 16:35 - 2008-04-30 01:32 - 00983121 _____ (Microsoft Corporation) C:\Windows\system32\lxk_gf.dll
2014-02-17 16:35 - 2008-03-04 21:55 - 00109056 _____ () C:\Windows\system32\dleavs.dll
2014-02-17 16:31 - 2014-02-17 16:31 - 00000071 _____ () C:\ProgramData\dlea.log
2014-02-17 16:31 - 2014-02-17 16:31 - 00000000 _____ () C:\ProgramData\LxWbGwLog.log
2014-02-17 16:31 - 2014-02-17 16:31 - 00000000 _____ () C:\ProgramData\cmn_upld.log
2014-02-17 16:19 - 2013-12-21 04:39 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-17 16:19 - 2013-12-21 02:56 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-17 16:19 - 2013-10-01 21:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-17 16:19 - 2013-10-01 21:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-17 16:19 - 2013-10-01 21:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-17 16:19 - 2013-10-01 20:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-17 16:19 - 2013-10-01 20:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-17 16:19 - 2013-10-01 20:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-17 16:19 - 2013-10-01 20:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-17 16:19 - 2013-10-01 19:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-02-17 16:19 - 2013-10-01 19:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-17 16:19 - 2013-10-01 19:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-17 16:19 - 2013-10-01 19:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-17 16:19 - 2013-10-01 19:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-17 16:19 - 2013-10-01 18:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-17 16:19 - 2013-10-01 18:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-17 16:19 - 2013-10-01 18:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-17 16:19 - 2013-10-01 17:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-17 16:19 - 2013-10-01 15:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-17 16:19 - 2013-10-01 15:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-17 16:18 - 2014-02-01 04:20 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-17 16:18 - 2014-02-01 04:18 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-17 16:18 - 2014-02-01 04:18 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-17 16:18 - 2014-02-01 04:18 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-17 16:18 - 2014-02-01 04:18 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-17 16:18 - 2014-02-01 04:18 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-17 16:18 - 2014-02-01 04:18 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-17 16:18 - 2014-02-01 02:57 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-17 16:18 - 2014-02-01 02:57 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-17 16:18 - 2014-02-01 02:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-17 16:18 - 2014-02-01 02:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-17 16:18 - 2014-02-01 02:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-17 16:18 - 2014-02-01 02:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-17 16:18 - 2014-02-01 02:40 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-17 16:18 - 2014-02-01 02:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-17 16:18 - 2014-02-01 01:45 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-17 16:18 - 2014-02-01 01:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-02-17 16:17 - 2014-02-01 04:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-17 16:17 - 2014-02-01 04:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-17 16:17 - 2014-02-01 04:18 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-17 16:17 - 2014-02-01 04:18 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-17 16:17 - 2014-02-01 04:18 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-17 16:17 - 2014-02-01 04:18 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-17 16:17 - 2014-02-01 04:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-17 16:17 - 2014-02-01 04:18 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-17 16:17 - 2014-02-01 02:58 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-17 16:17 - 2014-02-01 02:58 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-17 16:17 - 2014-02-01 02:57 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-17 16:17 - 2014-02-01 02:57 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-17 16:17 - 2014-02-01 02:57 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-17 16:17 - 2014-02-01 02:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-17 16:17 - 2014-02-01 02:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-17 16:17 - 2014-02-01 02:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-17 16:17 - 2013-09-24 21:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-02-17 16:17 - 2013-09-24 20:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-17 15:53 - 2014-02-17 15:53 - 00000000 ____D () C:\Windows\pss
2014-02-17 10:32 - 2014-02-17 10:32 - 01146118 _____ () C:\ProgramData\SPL3680.tmp
2014-02-17 08:28 - 2014-02-17 08:28 - 01153757 _____ () C:\ProgramData\SPL982C.tmp
2014-02-16 11:58 - 2014-02-16 11:58 - 00004096 ___SH () C:\{53EC335A-46FB-443B-885A-0FA2F7651A6E}.CBM
2014-02-16 11:11 - 2014-02-16 11:14 - 00301568 ___SH () C:\EUMONBMP.SYS
2014-02-15 19:20 - 2014-02-15 19:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-15 16:05 - 2013-09-04 11:32 - 00024136 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\system32\fbnative.exe
2014-02-15 10:37 - 2014-02-15 10:37 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-15 10:06 - 2013-12-31 18:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-15 10:06 - 2013-12-31 18:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-15 10:06 - 2013-12-24 18:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-15 10:06 - 2013-12-24 17:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-15 10:06 - 2013-12-05 21:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-15 10:06 - 2013-12-05 21:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-15 10:06 - 2013-12-05 21:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-15 10:06 - 2013-12-05 21:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-15 10:06 - 2013-12-03 21:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-15 10:06 - 2013-12-03 21:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-15 10:06 - 2013-12-03 21:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-15 10:06 - 2013-12-03 21:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-15 10:06 - 2013-12-03 21:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-15 10:06 - 2013-12-03 21:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-15 10:06 - 2013-12-03 21:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-15 10:06 - 2013-12-03 21:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-15 10:06 - 2013-12-03 21:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-15 10:06 - 2013-12-03 21:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-15 10:06 - 2013-12-03 21:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-15 10:06 - 2013-12-03 21:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-15 10:06 - 2013-12-03 21:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-15 10:06 - 2013-12-03 21:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-15 10:06 - 2013-12-03 20:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-15 10:06 - 2013-12-03 20:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-15 10:06 - 2013-12-03 20:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-15 10:06 - 2013-12-03 20:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-15 10:06 - 2013-11-26 03:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-15 10:06 - 2013-11-22 17:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-14 21:50 - 2014-02-16 11:11 - 00000000 ____D () C:\My Backups
2014-02-12 16:05 - 2014-02-17 17:14 - 00003860 _____ () C:\ProgramData\dleaJSW.log
2014-02-12 15:50 - 2014-02-12 15:50 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-02-12 15:50 - 2014-02-12 15:50 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-02-12 14:33 - 2014-02-12 14:33 - 00001919 _____ () C:\Users\Public\Desktop\Avant Browser.lnk
2014-02-12 14:33 - 2014-02-12 14:33 - 00000000 ____D () C:\Program Files (x86)\Avant Browser
2014-02-12 11:08 - 2014-02-12 11:08 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-02-11 17:15 - 2013-05-15 15:27 - 00594432 _____ (Realtek Semiconductor Corp. ) C:\Windows\system32\Rtlihvs.dll
2014-02-11 17:15 - 2013-05-15 15:27 - 00451072 _____ () C:\Windows\SysWOW64\ISSRemoveSP.exe
2014-02-11 12:35 - 2014-02-17 17:40 - 00002190 _____ () C:\ProgramData\dleascan.log
2014-02-11 12:34 - 2014-02-11 12:34 - 00000000 _____ () C:\asc_rdflag
2014-02-11 11:29 - 2014-02-17 16:31 - 00000000 ____D () C:\Windows\Minidump
2014-02-11 11:23 - 2014-02-17 21:50 - 01809488 _____ () C:\Windows\WindowsUpdate.log
2014-02-11 09:00 - 2014-02-11 09:05 - 00000000 ____D () C:\ProgramData\MFAData
2014-02-11 09:00 - 2014-02-11 09:00 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\MFAData
2014-02-11 09:00 - 2014-02-11 09:00 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Avg2014
2014-02-11 08:46 - 2014-02-11 08:46 - 00000385 _____ () C:\Users\3one4 Events\AppData\Roaminguser_gensett.xml
2014-02-11 08:36 - 2014-02-11 08:36 - 00002786 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-11 08:32 - 2014-02-11 08:32 - 00000385 _____ () C:\Windows\system32\user_gensett.xml
2014-02-11 08:31 - 2014-02-11 08:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-02-11 08:31 - 2014-02-11 08:31 - 00000000 ____D () C:\ProgramData\BDLogging
2014-02-11 08:31 - 2013-11-04 15:47 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll
2014-02-11 08:31 - 2009-07-15 00:21 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2014-02-11 08:31 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
2014-02-11 08:29 - 2014-02-11 08:29 - 00000000 _____ () C:\Windows\system32\BDSandBoxUISkin32.dll
2014-02-11 08:29 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUISkin.dll
2014-02-11 08:29 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUH.dll
2014-02-11 08:28 - 2014-02-11 08:28 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\QuickScan
2014-02-10 18:15 - 2014-02-13 18:28 - 00000000 ____D () C:\Windows\ERUNT
2014-02-10 15:13 - 2014-02-10 15:13 - 00000085 _____ () C:\Windows\wininit.ini
2014-02-10 12:20 - 2014-02-10 12:20 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-02-10 09:45 - 2014-02-17 17:41 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\LogMeIn Hamachi
2014-02-10 09:45 - 2014-02-10 09:45 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\LogMeIn
2014-02-10 09:45 - 2014-02-10 09:45 - 00000000 ____D () C:\ProgramData\LogMeIn
2014-02-10 09:44 - 2014-02-10 09:44 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-10 09:16 - 2014-02-10 09:16 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Citrix
2014-02-10 09:16 - 2014-02-10 09:16 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Citrix
2014-02-10 09:16 - 2014-02-10 09:16 - 00000000 ____D () C:\Program Files (x86)\Citrix
2014-02-04 15:05 - 2014-02-17 17:06 - 00000000 ____D () C:\Users\3one4 Events\Documents\Business
2014-02-04 14:22 - 2014-02-04 14:22 - 00000000 ____D () C:\CR+DotNet
2014-02-04 13:52 - 2014-02-04 13:52 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\IsolatedStorage
2014-02-04 13:03 - 2014-02-04 13:03 - 00000314 _____ () C:\Users\3one4 Events\Desktop\POSNet 2.0.appref-ms
2014-02-04 13:03 - 2014-02-04 13:03 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ticket Technology
2014-02-04 12:40 - 2014-02-12 15:17 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-04 12:39 - 2014-02-10 09:45 - 00000000 ____D () C:\Program Files (x86)\Ticket Technology
2014-02-04 12:25 - 2014-02-04 12:25 - 00000000 ____D () C:\Program Files (x86)\Business Objects
2014-02-04 12:23 - 2013-12-23 12:16 - 00000064 _____ () C:\Posnet.dmk
2014-02-04 12:11 - 2014-02-04 12:11 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Microsoft_Corporation
2014-02-04 12:07 - 2014-02-15 09:59 - 00000000 ____D () C:\Users\MSSQLSERVER
2014-02-04 12:07 - 2014-02-12 15:57 - 00000000 ____D () C:\Users\3one4 Events\Documents\SQL Server Management Studio
2014-02-04 12:07 - 2014-02-04 12:07 - 00000020 ___SH () C:\Users\MSSQLSERVER\ntuser.ini
2014-02-04 12:07 - 2014-02-04 03:04 - 00000000 ____D () C:\Users\MSSQLSERVER\AppData\Local\Microsoft Help
2014-02-04 12:07 - 2012-02-11 11:02 - 00045656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL11.MSSQLSERVER-sqlagtctr.dll
2014-02-04 12:07 - 2012-02-11 09:44 - 00054360 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL11.MSSQLSERVER-sqlagtctr.dll
2014-02-04 12:07 - 2009-07-13 23:54 - 00000000 ___RD () C:\Users\MSSQLSERVER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-04 12:07 - 2009-07-13 23:49 - 00000000 ___RD () C:\Users\MSSQLSERVER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-04 12:06 - 2012-02-11 11:03 - 00082520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQLSERVER-sqlctr11.1.3000.0.dll
2014-02-04 12:06 - 2012-02-11 09:46 - 00180312 _____ (Microsoft Corporation) C:\Windows\system32\hadrres.dll
2014-02-04 12:06 - 2012-02-11 09:46 - 00082520 _____ (Microsoft Corporation) C:\Windows\system32\fssres.dll
2014-02-04 12:06 - 2012-02-11 09:44 - 00095832 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQLSERVER-sqlctr11.1.3000.0.dll
2014-02-04 12:05 - 2014-02-04 12:05 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services
2014-02-04 12:04 - 2014-02-04 12:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-02-04 12:02 - 2014-02-04 12:02 - 00000000 ____D () C:\Windows\system32\RsFx
2014-02-04 12:00 - 2014-02-04 12:00 - 00000000 ____D () C:\Users\3one4 Events\Documents\Visual Studio 2010
2014-02-04 11:59 - 2014-02-04 12:01 - 00000000 ____D () C:\Windows\SysWOW64\1033
2014-02-04 11:59 - 2014-02-04 11:59 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 10.0
2014-02-04 11:57 - 2014-02-04 12:01 - 00000000 ____D () C:\Windows\system32\1033
2014-02-04 11:57 - 2014-02-04 11:57 - 00000000 ____D () C:\Windows\symbols
2014-02-04 11:57 - 2014-02-04 11:57 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 10.0
2014-02-04 11:57 - 2014-02-04 11:57 - 00000000 ____D () C:\Program Files\Microsoft Help Viewer
2014-02-04 11:57 - 2014-02-04 11:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft SDKs
2014-02-04 11:50 - 2014-02-04 12:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-02-04 11:46 - 2014-02-04 12:03 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2014-02-04 11:38 - 2014-02-04 11:46 - 00000000 ____D () C:\Program Files (x86)\POSNet Install Files
2014-02-04 11:28 - 2014-02-13 17:06 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\LogMeIn Rescue Applet
2014-02-04 10:31 - 2014-02-04 10:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-02-04 10:11 - 2014-02-15 10:42 - 00909596 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-04 09:30 - 2014-02-15 10:47 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-04 09:30 - 2014-02-15 10:46 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-04 03:08 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-02-04 03:04 - 2014-02-04 03:04 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-02-04 03:04 - 2014-02-04 03:04 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-02-03 12:38 - 2014-02-12 15:50 - 00001945 _____ () C:\Windows\epplauncher.mif
2014-02-03 12:28 - 2014-02-03 12:28 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-02-03 12:28 - 2014-02-03 12:28 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-02-03 12:28 - 2014-02-03 12:28 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-02-03 12:28 - 2014-02-03 12:28 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-02-03 12:28 - 2014-02-03 12:28 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2014-02-03 12:28 - 2014-02-03 12:28 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-02-03 12:28 - 2014-02-03 12:28 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-02-03 10:58 - 2014-02-03 11:02 - 00001518 _____ () C:\Users\Public\Documents\AcStd7_0_0.ini
2014-02-03 10:58 - 2014-02-03 11:02 - 00000091 _____ () C:\Users\Public\Documents\AcStd7_0_0.sta
2014-02-03 10:57 - 2014-02-03 10:57 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\AdobeUM
2014-02-03 10:12 - 2013-11-23 13:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-02-03 10:12 - 2013-11-23 12:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-02-03 10:12 - 2013-08-01 21:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-02-03 10:12 - 2013-08-01 21:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-02-03 10:12 - 2013-08-01 21:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-02-03 10:12 - 2013-08-01 20:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 20:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-02-03 10:12 - 2013-08-01 19:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-02-03 10:12 - 2013-08-01 19:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 19:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 19:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-02-03 10:12 - 2013-08-01 19:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2014-02-03 10:12 - 2013-04-17 02:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-02-03 10:12 - 2013-04-17 01:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-02-03 10:12 - 2012-02-11 01:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-02-03 10:12 - 2012-02-11 01:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2014-02-03 10:12 - 2011-03-11 01:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2014-02-03 10:12 - 2011-03-11 01:41 - 00189824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-02-03 10:12 - 2011-03-11 01:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2014-02-03 10:12 - 2011-03-11 01:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2014-02-03 10:12 - 2011-03-11 01:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2014-02-03 10:12 - 2011-03-11 01:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2014-02-03 10:12 - 2011-03-11 01:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-02-03 10:12 - 2011-03-11 01:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2014-02-03 10:12 - 2011-03-11 00:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2014-02-03 10:12 - 2011-03-11 00:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2014-02-03 10:12 - 2011-03-10 23:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-02-03 10:12 - 2011-02-25 01:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-02-03 10:12 - 2011-02-25 00:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-02-03 10:11 - 2013-08-28 21:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-02-03 10:11 - 2013-08-28 21:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-02-03 10:11 - 2013-08-28 21:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-02-03 10:11 - 2013-08-28 21:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-02-03 10:11 - 2013-08-28 21:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-02-03 10:11 - 2013-08-28 20:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-02-03 10:11 - 2013-08-28 20:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-02-03 10:11 - 2013-08-28 20:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-02-03 10:11 - 2013-08-28 20:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-02-03 10:11 - 2013-08-28 20:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-02-03 10:11 - 2013-08-28 20:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-02-03 10:11 - 2013-08-28 19:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-02-03 10:11 - 2013-08-28 19:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-02-03 10:11 - 2013-08-28 19:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-02-03 10:11 - 2013-08-28 19:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-02-03 10:06 - 2014-02-03 10:06 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Avant Downloader
2014-02-03 05:24 - 2014-02-03 05:24 - 00000000 ____D () C:\Program Files (x86)\PlotSoft
2014-02-03 05:13 - 2014-02-03 05:13 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\V310-V510 Series
2014-02-03 05:12 - 2014-02-04 03:27 - 00001415 _____ () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-03 04:56 - 2013-05-10 00:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-02-03 04:56 - 2013-05-10 00:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-02-03 04:56 - 2013-05-09 23:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-02-03 04:56 - 2013-05-09 23:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-03 04:33 - 2014-02-03 04:33 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-03 04:33 - 2014-02-03 04:33 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-02-03 04:33 - 2014-02-03 04:33 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-02-03 04:33 - 2014-02-03 04:33 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-02-03 04:33 - 2014-02-03 04:33 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-02-03 04:33 - 2014-02-03 04:33 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-02-03 04:33 - 2014-02-03 04:33 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-02-03 04:33 - 2014-02-03 04:33 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-02-03 04:30 - 2014-02-03 04:30 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-03 04:11 - 2014-02-03 04:11 - 00000000 ____D () C:\ProgramData\Ezprint
2014-02-03 04:09 - 2014-02-17 17:15 - 00000000 ____D () C:\ProgramData\Dl_cats
2014-02-03 04:07 - 2014-02-03 04:07 - 00000000 ____D () C:\ProgramData\V310-V510 Series
2014-02-03 04:07 - 2010-05-21 17:20 - 00295080 _____ () C:\Windows\system32\DLEAwupd.exe
2014-02-03 04:07 - 2010-02-22 05:11 - 00509952 _____ () C:\Windows\system32\DLEAwupd.dll
2014-02-03 04:07 - 2009-12-31 01:17 - 00053760 _____ () C:\Windows\system32\DLEAPMON.DLL
2014-02-03 04:07 - 2009-12-31 01:17 - 00021504 _____ () C:\Windows\system32\DLEAFXPU.DLL
2014-02-03 04:07 - 2009-12-31 01:17 - 00003584 _____ () C:\Windows\system32\DLEAPMRC.DLL
2014-02-03 04:07 - 2009-01-13 08:15 - 05709824 _____ () C:\Windows\system32\DLEAoem.dll
2014-02-03 04:06 - 2014-02-17 17:02 - 00000000 ____D () C:\Program Files (x86)\Dell V310-V510 Series
2014-02-03 04:06 - 2014-02-17 16:36 - 00210684 _____ () C:\Windows\system32\LexFiles.ulf
2014-02-03 04:06 - 2014-02-03 04:07 - 00000000 ____D () C:\Program Files\Dell
2014-02-03 04:06 - 2014-02-03 04:06 - 00000000 ____D () C:\Program Files\Dell Printable Web
2014-02-03 04:06 - 2014-02-03 04:06 - 00000000 ____D () C:\Program Files (x86)\Dell Toolbar
2014-02-03 04:06 - 2014-02-03 04:06 - 00000000 ____D () C:\Program Files (x86)\Dell PC Fax
2014-02-03 04:06 - 2011-01-23 19:38 - 00002064 _____ () C:\Windows\SysWOW64\dlea.loc
2014-02-03 04:06 - 2010-05-21 17:19 - 00598696 _____ ( ) C:\Windows\SysWOW64\dleacoms.exe
2014-02-03 04:06 - 2010-05-21 17:19 - 00373416 _____ ( ) C:\Windows\SysWOW64\dleacfg.exe
2014-02-03 04:06 - 2010-05-21 17:19 - 00324264 _____ ( ) C:\Windows\SysWOW64\dleaih.exe
2014-02-03 04:06 - 2010-03-09 03:58 - 00344064 _____ () C:\Windows\SysWOW64\dleacomx.dll
2014-02-03 04:06 - 2009-12-09 15:28 - 01631744 _____ ( ) C:\Windows\system32\dleaserv.dll
2014-02-03 04:06 - 2009-12-09 15:26 - 01331712 _____ ( ) C:\Windows\system32\dleausb1.dll
2014-02-03 04:06 - 2009-12-09 15:24 - 00892416 _____ ( ) C:\Windows\system32\dlealmpm.dll
2014-02-03 04:06 - 2009-12-09 15:24 - 00579584 _____ ( ) C:\Windows\system32\dleacomm.dll
2014-02-03 04:06 - 2009-12-09 15:23 - 00557568 _____ ( ) C:\Windows\system32\dleainpa.dll
2014-02-03 04:06 - 2009-12-09 15:23 - 00515584 _____ ( ) C:\Windows\system32\dleaiesc.dll
2014-02-03 04:06 - 2009-12-09 15:23 - 00495616 _____ () C:\Windows\system32\DLEAinst.dll
2014-02-03 04:06 - 2009-12-09 14:47 - 00643072 _____ ( ) C:\Windows\SysWOW64\dleapmui.dll
2014-02-03 04:06 - 2009-12-09 14:43 - 01048576 _____ ( ) C:\Windows\SysWOW64\dleaserv.dll
2014-02-03 04:06 - 2009-12-09 14:41 - 00688128 _____ ( ) C:\Windows\SysWOW64\dleahbn3.dll
2014-02-03 04:06 - 2009-12-09 14:40 - 00847872 _____ ( ) C:\Windows\SysWOW64\dleausb1.dll
2014-02-03 04:06 - 2009-12-09 14:36 - 00577536 _____ ( ) C:\Windows\SysWOW64\dlealmpm.dll
2014-02-03 04:06 - 2009-12-09 14:36 - 00372736 _____ ( ) C:\Windows\SysWOW64\dleacomm.dll
2014-02-03 04:06 - 2009-12-09 14:35 - 00802816 _____ ( ) C:\Windows\SysWOW64\dleacomc.dll
2014-02-03 04:06 - 2009-12-09 14:35 - 00364544 _____ ( ) C:\Windows\SysWOW64\dleainpa.dll
2014-02-03 04:06 - 2009-12-09 14:35 - 00344064 _____ ( ) C:\Windows\SysWOW64\dleaiesc.dll
2014-02-03 04:06 - 2009-12-09 14:34 - 00331776 _____ () C:\Windows\SysWOW64\DLEAinst.dll
2014-02-03 04:06 - 2009-11-26 03:49 - 00086180 _____ () C:\Windows\SysWOW64\DLEAcfg.dll
2014-02-03 04:06 - 2009-11-09 03:06 - 00262144 _____ () C:\Windows\SysWOW64\dleainsb.dll
2014-02-03 04:06 - 2009-11-09 03:06 - 00253952 _____ () C:\Windows\SysWOW64\dleacu.dll
2014-02-03 04:06 - 2009-11-09 03:06 - 00106496 _____ () C:\Windows\SysWOW64\dleainsr.dll
2014-02-03 04:06 - 2009-11-09 03:06 - 00090112 _____ () C:\Windows\SysWOW64\dleacub.dll
2014-02-03 04:06 - 2009-11-09 03:06 - 00057344 _____ () C:\Windows\SysWOW64\dleajswr.dll
2014-02-03 04:06 - 2009-11-09 03:06 - 00036864 _____ () C:\Windows\SysWOW64\dleacur.dll
2014-02-03 04:06 - 2009-11-09 03:05 - 00323584 _____ () C:\Windows\SysWOW64\dleains.dll
2014-02-03 04:05 - 2014-02-17 16:35 - 00000000 ____D () C:\Program Files\Dell V310-V510 Series
2014-02-03 04:05 - 2013-10-29 21:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-02-03 04:05 - 2013-10-29 21:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-02-03 04:05 - 2013-07-09 00:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-02-03 04:05 - 2013-07-08 23:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-02-03 04:05 - 2013-07-04 07:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-02-03 04:05 - 2013-07-04 06:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-02-03 04:05 - 2013-04-12 09:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-02-03 04:05 - 2013-03-19 00:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-02-03 04:05 - 2013-03-19 00:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2014-02-03 04:05 - 2013-02-27 01:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-02-03 04:05 - 2013-02-27 00:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-02-03 04:05 - 2009-02-20 03:50 - 00381440 _____ () C:\Windows\system32\dleasm.dll
2014-02-03 04:05 - 2009-02-20 03:50 - 00028672 _____ () C:\Windows\SysWOW64\DLEAsmr.dll
2014-02-03 04:05 - 2009-02-20 03:50 - 00028672 _____ () C:\Windows\system32\dleasmr.dll
2014-02-03 04:05 - 2009-02-20 03:49 - 00299008 _____ () C:\Windows\SysWOW64\DLEAsm.dll
2014-02-03 04:04 - 2013-11-11 21:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-02-03 04:04 - 2013-11-11 21:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-02-03 04:04 - 2013-10-18 21:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-02-03 04:04 - 2013-10-18 20:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-02-03 04:04 - 2013-10-05 15:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-02-03 04:04 - 2013-10-05 14:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-02-03 04:04 - 2013-10-03 21:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-02-03 04:04 - 2013-10-03 21:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-02-03 04:04 - 2013-10-03 21:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-02-03 04:04 - 2013-10-03 21:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-02-03 04:04 - 2013-10-03 20:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-02-03 04:04 - 2013-10-03 20:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-02-03 04:04 - 2013-10-03 20:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-02-03 04:04 - 2013-10-03 20:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-02-03 04:04 - 2013-09-27 20:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-02-03 04:04 - 2013-09-24 21:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-02-03 04:04 - 2013-09-24 21:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-02-03 04:04 - 2013-09-24 21:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-02-03 04:04 - 2013-09-24 21:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-02-03 04:04 - 2013-09-24 21:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-02-03 04:04 - 2013-09-24 21:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-02-03 04:04 - 2013-09-24 21:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-02-03 04:04 - 2013-09-24 21:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-02-03 04:04 - 2013-09-24 20:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-02-03 04:04 - 2013-09-24 20:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-02-03 04:04 - 2013-09-24 20:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-02-03 04:04 - 2013-09-24 20:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-02-03 04:04 - 2013-09-24 20:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-02-03 04:04 - 2013-08-04 21:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2014-02-03 04:04 - 2013-07-09 00:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-02-03 04:04 - 2013-07-09 00:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-02-03 04:04 - 2013-07-08 23:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-02-03 04:04 - 2013-07-08 23:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2014-02-03 04:04 - 2013-07-04 07:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-02-03 04:04 - 2013-06-06 00:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-02-03 04:04 - 2013-06-06 00:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-02-03 04:04 - 2013-06-06 00:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-02-03 04:04 - 2013-06-06 00:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-02-03 04:04 - 2013-06-05 23:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-02-03 04:04 - 2013-06-05 23:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-02-03 04:04 - 2013-06-05 23:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-02-03 04:04 - 2013-06-05 22:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-02-03 04:04 - 2013-06-05 22:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-02-03 04:04 - 2013-06-05 22:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-02-03 04:03 - 2014-02-03 04:03 - 00001453 _____ () C:\Users\3one4 Events\Desktop\Insomniac Browser.lnk
2014-02-03 04:03 - 2014-02-03 04:03 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Insomniac Browser
2014-02-03 04:03 - 2013-11-26 20:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-02-03 04:03 - 2013-11-26 20:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-02-03 04:03 - 2013-11-26 20:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-02-03 04:03 - 2013-11-26 20:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-02-03 04:03 - 2013-11-26 20:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-02-03 04:03 - 2013-11-26 20:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-02-03 04:03 - 2013-11-26 20:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-02-03 04:03 - 2013-10-11 21:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-02-03 04:03 - 2013-10-11 21:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-02-03 04:03 - 2013-10-11 21:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-02-03 04:03 - 2013-10-11 21:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-02-03 04:03 - 2013-10-11 21:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-02-03 04:03 - 2013-07-25 04:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-02-03 04:03 - 2013-07-25 03:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-02-03 04:03 - 2013-07-12 05:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-02-03 04:03 - 2013-07-09 00:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-02-03 04:03 - 2013-07-08 23:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-02-03 04:03 - 2013-07-04 07:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-02-03 04:03 - 2013-07-04 07:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-02-03 04:03 - 2013-07-04 06:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-02-03 04:03 - 2013-07-04 06:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-02-03 04:03 - 2013-07-04 05:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-02-03 04:03 - 2013-07-02 23:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-02-03 04:03 - 2013-07-02 23:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-02-03 04:03 - 2013-06-25 17:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-02-03 04:03 - 2013-06-14 23:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-02-03 04:03 - 2013-04-25 18:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-02-03 04:03 - 2013-03-31 17:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-02-03 04:03 - 2013-02-11 23:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-02-03 04:03 - 2012-11-22 22:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-02-03 04:03 - 2012-11-01 00:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-02-03 04:03 - 2012-10-31 23:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-02-03 04:02 - 2014-02-03 04:02 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Webatix
2014-02-03 04:02 - 2013-11-26 05:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-02-03 04:02 - 2013-09-07 21:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-02-03 04:02 - 2013-09-07 21:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-02-03 04:02 - 2013-06-04 01:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-02-03 04:02 - 2013-06-03 23:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-02-03 04:02 - 2013-04-26 00:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-02-03 04:02 - 2013-04-25 23:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2014-02-03 04:02 - 2012-12-07 08:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-02-03 04:02 - 2012-12-07 08:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-02-03 04:02 - 2012-12-07 07:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-02-03 04:02 - 2012-12-07 07:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2014-02-03 04:02 - 2012-12-07 06:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2014-02-03 04:02 - 2012-12-07 06:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2014-02-03 04:02 - 2012-12-07 06:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2014-02-03 04:02 - 2012-12-07 06:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2014-02-03 04:02 - 2012-12-07 06:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2014-02-03 04:02 - 2012-12-07 06:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2014-02-03 04:02 - 2012-12-07 06:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2014-02-03 04:02 - 2012-12-07 06:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2014-02-03 04:02 - 2012-12-07 06:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2014-02-03 04:02 - 2012-12-07 06:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2014-02-03 04:02 - 2012-12-07 06:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2014-02-03 04:02 - 2012-12-07 06:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2014-02-03 04:02 - 2012-12-07 06:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2014-02-03 04:02 - 2012-12-07 06:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2014-02-03 04:02 - 2012-12-07 05:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2014-02-03 04:02 - 2012-12-07 05:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2014-02-03 04:02 - 2012-12-07 05:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2014-02-03 04:02 - 2012-12-07 05:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2014-02-03 04:02 - 2012-12-07 05:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2014-02-03 04:02 - 2012-12-07 05:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2014-02-03 04:02 - 2012-12-07 05:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2014-02-03 04:02 - 2012-12-07 05:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2014-02-03 04:02 - 2012-12-07 05:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2014-02-03 04:02 - 2012-12-07 05:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2014-02-03 04:02 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2014-02-03 04:02 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2014-02-03 04:02 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2014-02-03 04:02 - 2012-12-07 05:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2014-02-03 04:02 - 2012-11-22 00:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-02-03 04:02 - 2012-11-21 23:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-02-03 04:01 - 2013-07-20 05:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-03 04:01 - 2013-07-20 05:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-02-03 04:01 - 2012-11-30 00:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-02-03 04:01 - 2012-11-30 00:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-02-03 04:01 - 2012-11-30 00:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-02-03 04:00 - 2013-11-26 06:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-02-03 04:00 - 2013-10-02 21:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-02-03 04:00 - 2013-10-02 21:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-02-03 04:00 - 2013-09-07 21:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-02-03 04:00 - 2013-07-25 21:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-02-03 04:00 - 2013-07-25 21:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-02-03 04:00 - 2013-07-25 20:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-02-03 04:00 - 2013-07-25 20:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2014-02-03 04:00 - 2013-01-24 01:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-02-03 04:00 - 2013-01-03 01:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-02-03 03:59 - 2013-10-11 21:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-02-03 03:59 - 2013-10-11 21:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-02-03 03:59 - 2013-10-11 21:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-02-03 03:59 - 2013-10-11 21:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-02-03 03:59 - 2013-10-11 20:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-02-03 03:59 - 2013-10-11 20:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-02-03 03:59 - 2013-10-11 20:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-02-03 03:59 - 2013-10-11 20:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-02-03 03:59 - 2013-05-13 00:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2014-02-03 03:59 - 2013-05-12 22:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-02-03 03:59 - 2013-05-12 22:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2014-02-03 03:59 - 2013-05-12 22:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2014-02-03 03:58 - 2013-05-10 00:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2014-02-03 03:58 - 2013-05-09 22:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2014-02-03 03:53 - 2013-08-01 07:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-02-03 03:53 - 2013-04-10 01:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-02-03 03:53 - 2011-02-03 06:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-02-03 03:52 - 2014-02-04 09:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-02-03 03:52 - 2014-02-03 03:52 - 00000000 ____D () C:\Windows\PCHEALTH
2014-02-03 03:52 - 2013-08-27 20:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-02-03 03:48 - 2014-02-05 06:12 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-02-03 03:48 - 2014-02-03 03:48 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-02-03 03:46 - 2014-02-03 03:46 - 00000000 ___RD () C:\MSOCache
2014-02-03 03:29 - 2014-02-11 12:34 - 79851520 _____ () C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2014-02-03 03:29 - 2014-02-11 12:34 - 43868160 _____ () C:\Windows\system32\config\COMPONENTS.iodefrag.bak
2014-02-03 03:29 - 2014-02-11 12:34 - 02412544 _____ () C:\Windows\system32\config\DEFAULT.iodefrag.bak
2014-02-03 03:29 - 2014-02-11 12:34 - 00106496 _____ () C:\Windows\system32\config\SAM.iodefrag.bak
2014-02-03 03:29 - 2014-02-11 12:34 - 00036864 _____ () C:\Windows\system32\config\SECURITY.iodefrag.bak
2014-02-03 03:11 - 2014-02-03 03:11 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-02-03 03:11 - 2014-02-03 03:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-02-03 03:10 - 2014-02-03 03:10 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-02-03 03:10 - 2014-02-03 03:10 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2014-02-03 03:09 - 2014-02-03 03:09 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-02-03 03:09 - 2014-02-03 03:09 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-02-03 03:09 - 2014-02-03 03:09 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-02-03 03:09 - 2014-02-03 03:09 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-02-03 03:09 - 2014-02-03 03:09 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-02-03 03:09 - 2014-02-03 03:09 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-02-03 03:09 - 2014-02-03 03:09 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-02-03 03:09 - 2014-02-03 03:09 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2014-02-03 03:08 - 2014-02-03 03:08 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-02-03 03:08 - 2014-02-03 03:08 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-02-03 03:08 - 2014-02-03 03:08 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-02-03 03:07 - 2014-02-03 03:07 - 00000000 ____D () C:\Windows\erdnt
2014-02-03 03:05 - 2014-02-03 03:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2014-02-03 03:05 - 2014-02-03 03:05 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2014-02-03 03:05 - 2014-02-03 03:05 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2014-02-03 03:05 - 2014-02-03 03:05 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-02-03 03:03 - 2014-02-03 03:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2014-02-03 03:01 - 2014-02-03 03:01 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-02-03 03:01 - 2014-02-03 03:01 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-02-03 03:00 - 2014-02-03 03:00 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-02-03 03:00 - 2014-02-03 03:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-02-03 02:58 - 2014-02-05 06:14 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-03 02:58 - 2014-02-03 02:58 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-02-03 02:58 - 2014-02-03 02:58 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-02-03 02:58 - 2014-02-03 02:58 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2014-02-03 02:58 - 2014-02-03 02:58 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2014-02-03 02:58 - 2014-02-03 02:58 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2014-02-03 02:58 - 2014-02-03 02:58 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Microsoft Help
2014-02-03 02:57 - 2014-02-03 02:57 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2014-02-03 02:56 - 2014-02-03 02:56 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-02-03 02:56 - 2014-02-03 02:56 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-02-03 02:56 - 2014-02-03 02:56 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2014-02-03 02:54 - 2014-02-03 02:54 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2014-02-03 02:54 - 2014-02-03 02:54 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2014-02-03 02:53 - 2014-02-03 10:58 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Adobe
2014-02-03 02:53 - 2014-02-03 03:47 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Adobe
2014-02-03 02:53 - 2014-02-03 02:53 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-02-03 02:53 - 2014-02-03 02:53 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-02-03 02:53 - 2014-02-03 02:53 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2014-02-03 02:52 - 2014-02-03 02:52 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-02-03 02:52 - 2014-02-03 02:52 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-02-03 02:52 - 2014-02-03 02:52 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-02-03 02:51 - 2014-02-03 02:51 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-02-03 02:51 - 2014-02-03 02:51 - 00000000 ____D () C:\Windows\SysWOW64\spool
2014-02-03 02:51 - 2014-02-03 02:51 - 00000000 ____D () C:\Users\Public\Documents\Adobe PDF
2014-02-03 02:51 - 2014-02-03 02:51 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-03 02:51 - 2014-02-03 02:51 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-02-03 02:50 - 2014-02-03 02:50 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-02-03 02:50 - 2014-02-03 02:50 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-02-03 02:50 - 2014-02-03 02:50 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-02-03 02:48 - 2014-02-03 02:48 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-02-03 02:48 - 2014-02-03 02:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2014-02-03 02:48 - 2014-02-03 02:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-02-03 02:47 - 2014-02-03 02:47 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2014-02-03 02:47 - 2014-02-03 02:47 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2014-02-03 02:47 - 2014-02-03 02:47 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2014-02-03 02:47 - 2014-02-03 02:47 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2014-02-03 02:47 - 2014-02-03 02:47 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2014-02-03 02:47 - 2014-02-03 02:47 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2014-02-03 02:46 - 2014-02-03 02:46 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-02-03 02:46 - 2014-02-03 02:46 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-02-03 02:46 - 2014-02-03 02:46 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-02-03 02:46 - 2014-02-03 02:46 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2014-02-03 02:46 - 2014-02-03 02:46 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-02-03 02:46 - 2014-02-03 02:46 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-02-03 02:45 - 2014-02-03 02:45 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-02-03 02:45 - 2014-02-03 02:45 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2014-02-03 02:45 - 2014-02-03 02:45 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2014-02-03 02:45 - 2014-02-03 02:45 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2014-02-03 02:45 - 2014-02-03 02:45 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2014-02-03 02:45 - 2014-02-03 02:45 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2014-02-03 02:44 - 2014-02-03 02:44 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2014-02-03 02:43 - 2014-02-03 02:43 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2014-02-03 02:43 - 2014-02-03 02:43 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-02-03 02:43 - 2014-02-03 02:43 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-02-03 02:43 - 2014-02-03 02:43 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2014-02-03 02:43 - 2014-02-03 02:43 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2014-02-03 02:43 - 2014-02-03 02:43 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-02-03 02:43 - 2014-02-03 02:43 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-02-03 02:43 - 2014-02-03 02:43 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2014-02-03 02:43 - 2014-02-03 02:43 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2014-02-03 02:43 - 2014-02-03 02:43 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2014-02-03 02:42 - 2014-02-03 02:42 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-02-03 02:42 - 2014-02-03 02:42 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-02-03 02:42 - 2014-02-03 02:42 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-02-03 02:42 - 2014-02-03 02:42 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-02-03 02:42 - 2014-02-03 02:42 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-02-03 02:42 - 2014-02-03 02:42 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-02-03 02:41 - 2014-02-17 15:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-03 02:41 - 2014-02-15 09:54 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Mozilla
2014-02-03 02:41 - 2014-02-03 02:41 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-02-03 02:41 - 2014-02-03 02:41 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-02-03 02:41 - 2014-02-03 02:41 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2014-02-03 02:41 - 2014-02-03 02:41 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-02-03 02:41 - 2014-02-03 02:41 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-02-03 02:41 - 2014-02-03 02:41 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-02-03 02:41 - 2014-02-03 02:41 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2014-02-03 02:41 - 2014-02-03 02:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2014-02-03 02:41 - 2014-02-03 02:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2014-02-03 02:41 - 2014-02-03 02:41 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2014-02-03 02:41 - 2014-02-03 02:41 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2014-02-03 02:41 - 2014-02-03 02:41 - 00001149 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-03 02:41 - 2014-02-03 02:41 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Mozilla
2014-02-03 02:41 - 2014-02-03 02:41 - 00000000 ____D () C:\ProgramData\Mozilla
2014-02-03 02:40 - 2014-02-03 02:40 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-02-03 02:40 - 2014-02-03 02:40 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-02-03 02:40 - 2014-02-03 02:40 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-02-03 02:40 - 2014-02-03 02:40 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-02-03 02:40 - 2014-02-03 02:40 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2014-02-03 02:40 - 2014-02-03 02:40 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2014-02-03 02:40 - 2014-02-03 02:40 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2014-02-03 02:38 - 2013-06-27 18:05 - 00027456 _____ (IObit) C:\Windows\system32\RegistryDefragBootTime.exe
2014-02-03 02:34 - 2014-02-03 02:34 - 43868160 _____ () C:\Windows\system32\config\COMPONENTS.iobit
2014-02-03 02:34 - 2014-02-03 02:34 - 40259584 _____ () C:\Windows\system32\config\SOFTWARE.iobit
2014-02-03 02:34 - 2014-02-03 02:34 - 00208896 _____ () C:\Windows\system32\config\DEFAULT.iobit
2014-02-03 02:34 - 2014-02-03 02:34 - 00028672 _____ () C:\Windows\system32\config\SAM.iobit
2014-02-03 02:34 - 2014-02-03 02:34 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iobit
2014-02-03 02:25 - 2014-02-15 13:06 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\IObit
2014-02-03 02:25 - 2014-02-10 12:44 - 00000000 ____D () C:\ProgramData\ProductData
2014-02-03 01:54 - 2014-02-04 10:32 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Apple Computer
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Apple Computer
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Apple
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\Program Files\iTunes
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\Program Files\iPod
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-02-03 01:54 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-02-03 01:53 - 2014-02-03 01:54 - 00000000 ____D () C:\ProgramData\Apple
2014-02-03 01:53 - 2014-02-03 01:53 - 00000000 ____D () C:\Program Files\Bonjour
2014-02-03 01:53 - 2014-02-03 01:53 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-02-02 20:07 - 2014-02-02 20:07 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-02-02 20:06 - 2014-02-02 20:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-02-02 20:03 - 2014-02-17 17:03 - 00000000 ____D () C:\Windows\Panther
2014-02-02 18:31 - 2013-09-04 11:24 - 00189000 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\system32\Drivers\EuFdDisk.sys
2014-02-02 18:31 - 2013-09-04 11:24 - 00061000 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\system32\Drivers\eubakup.sys
2014-02-02 18:31 - 2013-09-04 11:24 - 00048200 _____ () C:\Windows\system32\Drivers\EUBKMON.sys
2014-02-02 18:31 - 2013-09-04 11:24 - 00018504 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\system32\Drivers\eudskacs.sys
2014-02-02 18:29 - 2014-02-02 18:29 - 00000000 ____D () C:\Program Files (x86)\EaseUS
2014-02-02 18:20 - 2014-02-18 05:32 - 00000910 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-02 18:20 - 2014-02-17 18:32 - 00000906 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-02 18:20 - 2014-02-17 17:42 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Deployment
2014-02-02 18:20 - 2014-02-10 18:27 - 00003906 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-02 18:20 - 2014-02-10 18:27 - 00003654 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-02 18:20 - 2014-02-03 14:27 - 00002185 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-02 18:20 - 2014-02-02 18:20 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Google
2014-02-02 18:20 - 2014-02-02 18:20 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Apps\2.0
2014-02-02 18:20 - 2014-02-02 18:20 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-02 14:33 - 2014-02-04 12:39 - 00072440 _____ () C:\Users\3one4 Events\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-02 14:32 - 2014-02-02 14:32 - 00000000 ____D () C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP
2014-02-02 14:32 - 2014-02-02 14:32 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-02-02 14:32 - 2014-02-02 14:32 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-02-02 14:32 - 2012-06-22 11:01 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys
2014-02-02 14:27 - 2014-02-02 14:27 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Malwarebytes
2014-02-02 14:27 - 2014-02-02 14:27 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-02 14:27 - 2014-02-02 14:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-02 14:27 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-02 14:27 - 2012-02-17 01:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-02-02 14:27 - 2012-02-17 00:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-02-02 14:27 - 2012-02-16 23:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-02-02 14:23 - 2014-02-15 09:58 - 00000000 ___RD () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-02 14:23 - 2014-02-03 05:13 - 00000000 ___RD () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-02 14:23 - 2014-02-02 14:23 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\VirtualStore
2014-02-02 14:23 - 2012-06-02 17:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-02-02 14:23 - 2012-06-02 17:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-02-02 14:23 - 2012-06-02 17:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-02-02 14:23 - 2012-06-02 17:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-02-02 14:23 - 2012-06-02 17:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-02-02 14:23 - 2012-06-02 17:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-02-02 14:23 - 2012-06-02 17:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-02-02 14:23 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-02-02 14:23 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-02-02 14:22 - 2014-02-15 09:59 - 00000000 ____D () C:\Users\3one4 Events
2014-02-02 14:22 - 2014-02-02 14:22 - 00000020 ___SH () C:\Users\3one4 Events\ntuser.ini
2014-02-02 14:22 - 2009-07-13 23:54 - 00000000 ___RD () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-02 14:22 - 2009-07-13 23:49 - 00000000 ___RD () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-02 12:29 - 2014-02-02 14:22 - 00000000 ____D () C:\Recovery
2014-01-31 16:19 - 2013-10-18 15:01 - 00285747 _____ () C:\shldr
2014-01-31 16:19 - 2013-10-18 15:01 - 00008192 _____ () C:\shldr.mbr
 
==================== One Month Modified Files and Folders =======
 
2014-02-18 06:02 - 2014-02-18 06:02 - 00010674 _____ () C:\Users\3one4 Events\Desktop\FRST.txt
2014-02-18 06:02 - 2014-02-18 06:02 - 00000000 ____D () C:\FRST
2014-02-18 06:01 - 2014-02-18 06:01 - 02152448 _____ (Farbar) C:\Users\3one4 Events\Desktop\FRST64.exe
2014-02-18 05:32 - 2014-02-02 18:20 - 00000910 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-17 21:54 - 2009-07-13 23:45 - 00021904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-17 21:54 - 2009-07-13 23:45 - 00021904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-17 21:50 - 2014-02-11 11:23 - 01809488 _____ () C:\Windows\WindowsUpdate.log
2014-02-17 19:31 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\rescache
2014-02-17 18:32 - 2014-02-02 18:20 - 00000906 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-17 17:45 - 2009-07-14 00:13 - 00917474 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-17 17:42 - 2014-02-02 18:20 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Deployment
2014-02-17 17:41 - 2014-02-10 09:45 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\LogMeIn Hamachi
2014-02-17 17:40 - 2014-02-17 17:02 - 00000168 _____ () C:\Windows\setupact.log
2014-02-17 17:40 - 2014-02-11 12:35 - 00002190 _____ () C:\ProgramData\dleascan.log
2014-02-17 17:40 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-17 17:32 - 2014-02-17 17:31 - 00000000 ____D () C:\AdwCleaner
2014-02-17 17:31 - 2014-02-17 17:31 - 01241834 _____ () C:\Users\3one4 Events\Downloads\AdwCleaner.exe
2014-02-17 17:24 - 2014-02-17 17:24 - 01037530 _____ (Thisisu) C:\Users\3one4 Events\Downloads\JRT.exe
2014-02-17 17:15 - 2014-02-03 04:09 - 00000000 ____D () C:\ProgramData\Dl_cats
2014-02-17 17:14 - 2014-02-12 16:05 - 00003860 _____ () C:\ProgramData\dleaJSW.log
2014-02-17 17:06 - 2014-02-04 15:05 - 00000000 ____D () C:\Users\3one4 Events\Documents\Business
2014-02-17 17:03 - 2014-02-02 20:03 - 00000000 ____D () C:\Windows\Panther
2014-02-17 17:02 - 2014-02-17 17:02 - 00021770 _____ () C:\Windows\PFRO.log
2014-02-17 17:02 - 2014-02-17 17:02 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-17 17:02 - 2014-02-03 04:06 - 00000000 ____D () C:\Program Files (x86)\Dell V310-V510 Series
2014-02-17 16:36 - 2014-02-03 04:06 - 00210684 _____ () C:\Windows\system32\LexFiles.ulf
2014-02-17 16:35 - 2014-02-03 04:05 - 00000000 ____D () C:\Program Files\Dell V310-V510 Series
2014-02-17 16:31 - 2014-02-17 16:31 - 00000071 _____ () C:\ProgramData\dlea.log
2014-02-17 16:31 - 2014-02-17 16:31 - 00000000 _____ () C:\ProgramData\LxWbGwLog.log
2014-02-17 16:31 - 2014-02-17 16:31 - 00000000 _____ () C:\ProgramData\cmn_upld.log
2014-02-17 16:31 - 2014-02-11 11:29 - 00000000 ____D () C:\Windows\Minidump
2014-02-17 15:58 - 2014-02-03 02:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-17 15:58 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-02-17 15:53 - 2014-02-17 15:53 - 00000000 ____D () C:\Windows\pss
2014-02-17 10:32 - 2014-02-17 10:32 - 01146118 _____ () C:\ProgramData\SPL3680.tmp
2014-02-17 08:28 - 2014-02-17 08:28 - 01153757 _____ () C:\ProgramData\SPL982C.tmp
2014-02-16 11:58 - 2014-02-16 11:58 - 00004096 ___SH () C:\{53EC335A-46FB-443B-885A-0FA2F7651A6E}.CBM
2014-02-16 11:14 - 2014-02-16 11:11 - 00301568 ___SH () C:\EUMONBMP.SYS
2014-02-16 11:11 - 2014-02-14 21:50 - 00000000 ____D () C:\My Backups
2014-02-15 19:21 - 2014-02-15 19:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-15 13:06 - 2014-02-03 02:25 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\IObit
2014-02-15 10:47 - 2014-02-04 09:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-15 10:46 - 2014-02-04 09:30 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-15 10:42 - 2014-02-04 10:11 - 00909596 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-15 10:37 - 2014-02-15 10:37 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-15 09:59 - 2014-02-04 12:07 - 00000000 ____D () C:\Users\MSSQLSERVER
2014-02-15 09:59 - 2014-02-02 14:22 - 00000000 ____D () C:\Users\3one4 Events
2014-02-15 09:58 - 2014-02-02 14:23 - 00000000 ___RD () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-15 09:58 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\AppCompat
2014-02-15 09:57 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\registration
2014-02-15 09:54 - 2014-02-03 02:41 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Mozilla
2014-02-13 18:28 - 2014-02-10 18:15 - 00000000 ____D () C:\Windows\ERUNT
2014-02-13 17:06 - 2014-02-04 11:28 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\LogMeIn Rescue Applet
2014-02-12 15:57 - 2014-02-04 12:07 - 00000000 ____D () C:\Users\3one4 Events\Documents\SQL Server Management Studio
2014-02-12 15:50 - 2014-02-12 15:50 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-02-12 15:50 - 2014-02-12 15:50 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-02-12 15:50 - 2014-02-03 12:38 - 00001945 _____ () C:\Windows\epplauncher.mif
2014-02-12 15:17 - 2014-02-04 12:40 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-12 14:33 - 2014-02-12 14:33 - 00001919 _____ () C:\Users\Public\Desktop\Avant Browser.lnk
2014-02-12 14:33 - 2014-02-12 14:33 - 00000000 ____D () C:\Program Files (x86)\Avant Browser
2014-02-12 11:08 - 2014-02-12 11:08 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-02-11 12:34 - 2014-02-11 12:34 - 00000000 _____ () C:\asc_rdflag
2014-02-11 12:34 - 2014-02-03 03:29 - 79851520 _____ () C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2014-02-11 12:34 - 2014-02-03 03:29 - 43868160 _____ () C:\Windows\system32\config\COMPONENTS.iodefrag.bak
2014-02-11 12:34 - 2014-02-03 03:29 - 02412544 _____ () C:\Windows\system32\config\DEFAULT.iodefrag.bak
2014-02-11 12:34 - 2014-02-03 03:29 - 00106496 _____ () C:\Windows\system32\config\SAM.iodefrag.bak
2014-02-11 12:34 - 2014-02-03 03:29 - 00036864 _____ () C:\Windows\system32\config\SECURITY.iodefrag.bak
2014-02-11 09:05 - 2014-02-11 09:00 - 00000000 ____D () C:\ProgramData\MFAData
2014-02-11 09:00 - 2014-02-11 09:00 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\MFAData
2014-02-11 09:00 - 2014-02-11 09:00 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Avg2014
2014-02-11 08:46 - 2014-02-11 08:46 - 00000385 _____ () C:\Users\3one4 Events\AppData\Roaminguser_gensett.xml
2014-02-11 08:36 - 2014-02-11 08:36 - 00002786 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-11 08:32 - 2014-02-11 08:32 - 00000385 _____ () C:\Windows\system32\user_gensett.xml
2014-02-11 08:31 - 2014-02-11 08:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-02-11 08:31 - 2014-02-11 08:31 - 00000000 ____D () C:\ProgramData\BDLogging
2014-02-11 08:29 - 2014-02-11 08:29 - 00000000 _____ () C:\Windows\system32\BDSandBoxUISkin32.dll
2014-02-11 08:28 - 2014-02-11 08:28 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\QuickScan
2014-02-11 08:16 - 2009-07-14 00:08 - 00005378 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-10 18:27 - 2014-02-02 18:20 - 00003906 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-10 18:27 - 2014-02-02 18:20 - 00003654 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-10 15:13 - 2014-02-10 15:13 - 00000085 _____ () C:\Windows\wininit.ini
2014-02-10 12:44 - 2014-02-03 02:25 - 00000000 ____D () C:\ProgramData\ProductData
2014-02-10 12:20 - 2014-02-10 12:20 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-02-10 09:45 - 2014-02-10 09:45 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\LogMeIn
2014-02-10 09:45 - 2014-02-10 09:45 - 00000000 ____D () C:\ProgramData\LogMeIn
2014-02-10 09:45 - 2014-02-04 12:39 - 00000000 ____D () C:\Program Files (x86)\Ticket Technology
2014-02-10 09:44 - 2014-02-10 09:44 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-10 09:16 - 2014-02-10 09:16 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Citrix
2014-02-10 09:16 - 2014-02-10 09:16 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Citrix
2014-02-10 09:16 - 2014-02-10 09:16 - 00000000 ____D () C:\Program Files (x86)\Citrix
2014-02-08 22:19 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-05 06:14 - 2014-02-03 02:58 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-05 06:12 - 2014-02-03 03:48 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-02-04 14:45 - 2009-07-13 23:45 - 00313280 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-04 14:22 - 2014-02-04 14:22 - 00000000 ____D () C:\CR+DotNet
2014-02-04 13:52 - 2014-02-04 13:52 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\IsolatedStorage
2014-02-04 13:03 - 2014-02-04 13:03 - 00000314 _____ () C:\Users\3one4 Events\Desktop\POSNet 2.0.appref-ms
2014-02-04 13:03 - 2014-02-04 13:03 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ticket Technology
2014-02-04 12:39 - 2014-02-02 14:33 - 00072440 _____ () C:\Users\3one4 Events\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-04 12:25 - 2014-02-04 12:25 - 00000000 ____D () C:\Program Files (x86)\Business Objects
2014-02-04 12:11 - 2014-02-04 12:11 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Microsoft_Corporation
2014-02-04 12:07 - 2014-02-04 12:07 - 00000020 ___SH () C:\Users\MSSQLSERVER\ntuser.ini
2014-02-04 12:05 - 2014-02-04 12:05 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services
2014-02-04 12:04 - 2014-02-04 12:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-02-04 12:03 - 2014-02-04 11:46 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2014-02-04 12:02 - 2014-02-04 12:02 - 00000000 ____D () C:\Windows\system32\RsFx
2014-02-04 12:02 - 2009-07-13 22:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-02-04 12:01 - 2014-02-04 11:59 - 00000000 ____D () C:\Windows\SysWOW64\1033
2014-02-04 12:01 - 2014-02-04 11:57 - 00000000 ____D () C:\Windows\system32\1033
2014-02-04 12:01 - 2014-02-04 11:50 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-02-04 12:00 - 2014-02-04 12:00 - 00000000 ____D () C:\Users\3one4 Events\Documents\Visual Studio 2010
2014-02-04 11:59 - 2014-02-04 11:59 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 10.0
2014-02-04 11:57 - 2014-02-04 11:57 - 00000000 ____D () C:\Windows\symbols
2014-02-04 11:57 - 2014-02-04 11:57 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 10.0
2014-02-04 11:57 - 2014-02-04 11:57 - 00000000 ____D () C:\Program Files\Microsoft Help Viewer
2014-02-04 11:57 - 2014-02-04 11:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft SDKs
2014-02-04 11:46 - 2014-02-04 11:38 - 00000000 ____D () C:\Program Files (x86)\POSNet Install Files
2014-02-04 10:32 - 2014-02-03 01:54 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Apple Computer
2014-02-04 10:31 - 2014-02-04 10:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-02-04 09:42 - 2014-02-03 03:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-02-04 03:27 - 2014-02-03 05:12 - 00001415 _____ () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-04 03:04 - 2014-02-04 12:07 - 00000000 ____D () C:\Users\MSSQLSERVER\AppData\Local\Microsoft Help
2014-02-04 03:04 - 2014-02-04 03:04 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-02-04 03:04 - 2014-02-04 03:04 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-02-03 14:27 - 2014-02-02 18:20 - 00002185 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-03 12:28 - 2014-02-03 12:28 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-02-03 12:28 - 2014-02-03 12:28 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-02-03 12:28 - 2014-02-03 12:28 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-02-03 12:28 - 2014-02-03 12:28 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-02-03 12:28 - 2014-02-03 12:28 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2014-02-03 12:28 - 2014-02-03 12:28 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-02-03 12:28 - 2014-02-03 12:28 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-02-03 11:02 - 2014-02-03 10:58 - 00001518 _____ () C:\Users\Public\Documents\AcStd7_0_0.ini
2014-02-03 11:02 - 2014-02-03 10:58 - 00000091 _____ () C:\Users\Public\Documents\AcStd7_0_0.sta
2014-02-03 10:58 - 2014-02-03 02:53 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Adobe
2014-02-03 10:57 - 2014-02-03 10:57 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\AdobeUM
2014-02-03 10:06 - 2014-02-03 10:06 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Avant Downloader
2014-02-03 05:28 - 2014-01-03 14:39 - 00000000 ____D () C:\359
2014-02-03 05:24 - 2014-02-03 05:24 - 00000000 ____D () C:\Program Files (x86)\PlotSoft
2014-02-03 05:13 - 2014-02-03 05:13 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\V310-V510 Series
2014-02-03 05:13 - 2014-02-02 14:23 - 00000000 ___RD () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-03 05:01 - 2009-07-14 00:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-02-03 05:01 - 2009-07-14 00:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-02-03 05:00 - 2011-04-12 03:28 - 00000000 ____D () C:\Program Files\Windows Journal
2014-02-03 05:00 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-02-03 05:00 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-02-03 05:00 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-02-03 05:00 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-02-03 04:33 - 2014-02-03 04:33 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-03 04:33 - 2014-02-03 04:33 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-03 04:33 - 2014-02-03 04:33 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-02-03 04:33 - 2014-02-03 04:33 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-02-03 04:33 - 2014-02-03 04:33 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-02-03 04:33 - 2014-02-03 04:33 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-02-03 04:33 - 2014-02-03 04:33 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-02-03 04:33 - 2014-02-03 04:33 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-02-03 04:33 - 2014-02-03 04:33 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-02-03 04:33 - 2014-02-03 04:33 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-02-03 04:33 - 2014-02-03 04:33 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-02-03 04:30 - 2014-02-03 04:30 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-03 04:30 - 2014-02-03 04:30 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-03 04:11 - 2014-02-03 04:11 - 00000000 ____D () C:\ProgramData\Ezprint
2014-02-03 04:07 - 2014-02-03 04:07 - 00000000 ____D () C:\ProgramData\V310-V510 Series
2014-02-03 04:07 - 2014-02-03 04:06 - 00000000 ____D () C:\Program Files\Dell
2014-02-03 04:06 - 2014-02-03 04:06 - 00000000 ____D () C:\Program Files\Dell Printable Web
2014-02-03 04:06 - 2014-02-03 04:06 - 00000000 ____D () C:\Program Files (x86)\Dell Toolbar
2014-02-03 04:06 - 2014-02-03 04:06 - 00000000 ____D () C:\Program Files (x86)\Dell PC Fax
2014-02-03 04:03 - 2014-02-03 04:03 - 00001453 _____ () C:\Users\3one4 Events\Desktop\Insomniac Browser.lnk
2014-02-03 04:03 - 2014-02-03 04:03 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Insomniac Browser
2014-02-03 04:02 - 2014-02-03 04:02 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Webatix
2014-02-03 04:00 - 2009-07-13 22:20 - 00000000 ___RD () C:\Users\Default
2014-02-03 03:52 - 2014-02-03 03:52 - 00000000 ____D () C:\Windows\PCHEALTH
2014-02-03 03:48 - 2014-02-03 03:48 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-02-03 03:48 - 2011-04-12 03:28 - 00000000 ____D () C:\Windows\ShellNew
2014-02-03 03:47 - 2014-02-03 02:53 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Adobe
2014-02-03 03:46 - 2014-02-03 03:46 - 00000000 ___RD () C:\MSOCache
2014-02-03 03:32 - 2009-07-13 22:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-02-03 03:11 - 2014-02-03 03:11 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-02-03 03:11 - 2014-02-03 03:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-02-03 03:10 - 2014-02-03 03:10 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-02-03 03:10 - 2014-02-03 03:10 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2014-02-03 03:09 - 2014-02-03 03:09 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-02-03 03:09 - 2014-02-03 03:09 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-02-03 03:09 - 2014-02-03 03:09 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-02-03 03:09 - 2014-02-03 03:09 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-02-03 03:09 - 2014-02-03 03:09 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-02-03 03:09 - 2014-02-03 03:09 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-02-03 03:09 - 2014-02-03 03:09 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-02-03 03:09 - 2014-02-03 03:09 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2014-02-03 03:08 - 2014-02-03 03:08 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-02-03 03:08 - 2014-02-03 03:08 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-02-03 03:08 - 2014-02-03 03:08 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-02-03 03:07 - 2014-02-03 03:07 - 00000000 ____D () C:\Windows\erdnt
2014-02-03 03:05 - 2014-02-03 03:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2014-02-03 03:05 - 2014-02-03 03:05 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2014-02-03 03:05 - 2014-02-03 03:05 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2014-02-03 03:05 - 2014-02-03 03:05 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-02-03 03:03 - 2014-02-03 03:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2014-02-03 03:03 - 2014-02-03 03:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2014-02-03 03:01 - 2014-02-03 03:01 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-02-03 03:01 - 2014-02-03 03:01 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-02-03 03:00 - 2014-02-03 03:00 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-02-03 03:00 - 2014-02-03 03:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-02-03 02:58 - 2014-02-03 02:58 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-02-03 02:58 - 2014-02-03 02:58 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-02-03 02:58 - 2014-02-03 02:58 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2014-02-03 02:58 - 2014-02-03 02:58 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2014-02-03 02:58 - 2014-02-03 02:58 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2014-02-03 02:58 - 2014-02-03 02:58 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Microsoft Help
2014-02-03 02:57 - 2014-02-03 02:57 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2014-02-03 02:56 - 2014-02-03 02:56 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-02-03 02:56 - 2014-02-03 02:56 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-02-03 02:56 - 2014-02-03 02:56 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2014-02-03 02:54 - 2014-02-03 02:54 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2014-02-03 02:54 - 2014-02-03 02:54 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2014-02-03 02:53 - 2014-02-03 02:53 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-02-03 02:53 - 2014-02-03 02:53 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-02-03 02:53 - 2014-02-03 02:53 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2014-02-03 02:52 - 2014-02-03 02:52 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-02-03 02:52 - 2014-02-03 02:52 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-02-03 02:52 - 2014-02-03 02:52 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-02-03 02:51 - 2014-02-03 02:51 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-02-03 02:51 - 2014-02-03 02:51 - 00000000 ____D () C:\Windows\SysWOW64\spool
2014-02-03 02:51 - 2014-02-03 02:51 - 00000000 ____D () C:\Users\Public\Documents\Adobe PDF
2014-02-03 02:51 - 2014-02-03 02:51 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-03 02:51 - 2014-02-03 02:51 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-02-03 02:50 - 2014-02-03 02:50 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-02-03 02:50 - 2014-02-03 02:50 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-02-03 02:50 - 2014-02-03 02:50 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-02-03 02:48 - 2014-02-03 02:48 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-02-03 02:48 - 2014-02-03 02:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2014-02-03 02:48 - 2014-02-03 02:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-02-03 02:47 - 2014-02-03 02:47 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2014-02-03 02:47 - 2014-02-03 02:47 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2014-02-03 02:47 - 2014-02-03 02:47 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2014-02-03 02:47 - 2014-02-03 02:47 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2014-02-03 02:47 - 2014-02-03 02:47 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2014-02-03 02:47 - 2014-02-03 02:47 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2014-02-03 02:46 - 2014-02-03 02:46 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-02-03 02:46 - 2014-02-03 02:46 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-02-03 02:46 - 2014-02-03 02:46 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-02-03 02:46 - 2014-02-03 02:46 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2014-02-03 02:46 - 2014-02-03 02:46 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-02-03 02:46 - 2014-02-03 02:46 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-02-03 02:45 - 2014-02-03 02:45 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-02-03 02:45 - 2014-02-03 02:45 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2014-02-03 02:45 - 2014-02-03 02:45 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2014-02-03 02:45 - 2014-02-03 02:45 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2014-02-03 02:45 - 2014-02-03 02:45 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2014-02-03 02:45 - 2014-02-03 02:45 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2014-02-03 02:44 - 2014-02-03 02:44 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2014-02-03 02:44 - 2014-02-03 02:44 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2014-02-03 02:43 - 2014-02-03 02:43 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2014-02-03 02:43 - 2014-02-03 02:43 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-02-03 02:43 - 2014-02-03 02:43 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-02-03 02:43 - 2014-02-03 02:43 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2014-02-03 02:43 - 2014-02-03 02:43 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2014-02-03 02:43 - 2014-02-03 02:43 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-02-03 02:43 - 2014-02-03 02:43 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-02-03 02:43 - 2014-02-03 02:43 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2014-02-03 02:43 - 2014-02-03 02:43 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2014-02-03 02:43 - 2014-02-03 02:43 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2014-02-03 02:43 - 2014-02-03 02:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2014-02-03 02:42 - 2014-02-03 02:42 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-02-03 02:42 - 2014-02-03 02:42 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-02-03 02:42 - 2014-02-03 02:42 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-02-03 02:42 - 2014-02-03 02:42 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-02-03 02:42 - 2014-02-03 02:42 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-02-03 02:42 - 2014-02-03 02:42 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-02-03 02:41 - 2014-02-03 02:41 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-02-03 02:41 - 2014-02-03 02:41 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-02-03 02:41 - 2014-02-03 02:41 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2014-02-03 02:41 - 2014-02-03 02:41 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-02-03 02:41 - 2014-02-03 02:41 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-02-03 02:41 - 2014-02-03 02:41 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-02-03 02:41 - 2014-02-03 02:41 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2014-02-03 02:41 - 2014-02-03 02:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2014-02-03 02:41 - 2014-02-03 02:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2014-02-03 02:41 - 2014-02-03 02:41 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2014-02-03 02:41 - 2014-02-03 02:41 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2014-02-03 02:41 - 2014-02-03 02:41 - 00001149 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-03 02:41 - 2014-02-03 02:41 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Mozilla
2014-02-03 02:41 - 2014-02-03 02:41 - 00000000 ____D () C:\ProgramData\Mozilla
2014-02-03 02:40 - 2014-02-03 02:40 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-02-03 02:40 - 2014-02-03 02:40 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-02-03 02:40 - 2014-02-03 02:40 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-02-03 02:40 - 2014-02-03 02:40 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-02-03 02:40 - 2014-02-03 02:40 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2014-02-03 02:40 - 2014-02-03 02:40 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2014-02-03 02:40 - 2014-02-03 02:40 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2014-02-03 02:40 - 2014-02-03 02:40 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2014-02-03 02:34 - 2014-02-03 02:34 - 43868160 _____ () C:\Windows\system32\config\COMPONENTS.iobit
2014-02-03 02:34 - 2014-02-03 02:34 - 40259584 _____ () C:\Windows\system32\config\SOFTWARE.iobit
2014-02-03 02:34 - 2014-02-03 02:34 - 00208896 _____ () C:\Windows\system32\config\DEFAULT.iobit
2014-02-03 02:34 - 2014-02-03 02:34 - 00028672 _____ () C:\Windows\system32\config\SAM.iobit
2014-02-03 02:34 - 2014-02-03 02:34 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iobit
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Apple Computer
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Apple
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\Program Files\iTunes
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\Program Files\iPod
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-02-03 01:54 - 2014-02-03 01:54 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-02-03 01:54 - 2014-02-03 01:53 - 00000000 ____D () C:\ProgramData\Apple
2014-02-03 01:53 - 2014-02-03 01:53 - 00000000 ____D () C:\Program Files\Bonjour
2014-02-03 01:53 - 2014-02-03 01:53 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-02-02 20:07 - 2014-02-02 20:07 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-02-02 20:06 - 2014-02-02 20:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-02-02 20:05 - 2011-04-12 03:28 - 00000000 ____D () C:\Windows\CSC
2014-02-02 20:03 - 2009-07-14 00:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-02-02 20:03 - 2009-07-14 00:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-02-02 18:29 - 2014-02-02 18:29 - 00000000 ____D () C:\Program Files (x86)\EaseUS
2014-02-02 18:20 - 2014-02-02 18:20 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Google
2014-02-02 18:20 - 2014-02-02 18:20 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\Apps\2.0
2014-02-02 18:20 - 2014-02-02 18:20 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-02 17:08 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-02-02 14:32 - 2014-02-02 14:32 - 00000000 ____D () C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP
2014-02-02 14:32 - 2014-02-02 14:32 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-02-02 14:32 - 2014-02-02 14:32 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-02-02 14:27 - 2014-02-02 14:27 - 00000000 ____D () C:\Users\3one4 Events\AppData\Roaming\Malwarebytes
2014-02-02 14:27 - 2014-02-02 14:27 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-02 14:27 - 2014-02-02 14:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-02 14:23 - 2014-02-02 14:23 - 00000000 ____D () C:\Users\3one4 Events\AppData\Local\VirtualStore
2014-02-02 14:22 - 2014-02-02 14:22 - 00000020 ___SH () C:\Users\3one4 Events\ntuser.ini
2014-02-02 14:22 - 2014-02-02 12:29 - 00000000 ____D () C:\Recovery
2014-02-02 14:22 - 2009-07-14 00:32 - 00000000 ____D () C:\Windows\system32\restore
2014-02-02 14:22 - 2009-07-13 22:20 - 00000000 ___RD () C:\Users\Public\Libraries
2014-02-02 14:22 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\Recovery
2014-02-01 04:20 - 2014-02-17 16:18 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-01 04:19 - 2014-02-17 16:17 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-01 04:19 - 2014-02-17 16:17 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-01 04:18 - 2014-02-17 16:18 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-01 04:18 - 2014-02-17 16:18 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-01 04:18 - 2014-02-17 16:18 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-01 04:18 - 2014-02-17 16:18 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-01 04:18 - 2014-02-17 16:18 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-01 04:18 - 2014-02-17 16:18 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-01 04:18 - 2014-02-17 16:17 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-01 04:18 - 2014-02-17 16:17 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-01 04:18 - 2014-02-17 16:17 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-01 04:18 - 2014-02-17 16:17 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-01 04:18 - 2014-02-17 16:17 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-01 04:18 - 2014-02-17 16:17 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-01 02:58 - 2014-02-17 16:17 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-01 02:58 - 2014-02-17 16:17 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-01 02:57 - 2014-02-17 16:18 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-01 02:57 - 2014-02-17 16:18 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-01 02:57 - 2014-02-17 16:18 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-01 02:57 - 2014-02-17 16:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-01 02:57 - 2014-02-17 16:18 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-01 02:57 - 2014-02-17 16:18 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-01 02:57 - 2014-02-17 16:17 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-01 02:57 - 2014-02-17 16:17 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-01 02:57 - 2014-02-17 16:17 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-01 02:57 - 2014-02-17 16:17 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-01 02:57 - 2014-02-17 16:17 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-01 02:57 - 2014-02-17 16:17 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-01 02:40 - 2014-02-17 16:18 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-01 02:34 - 2014-02-17 16:18 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-01 01:45 - 2014-02-17 16:18 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-01 01:38 - 2014-02-17 16:18 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-19 02:33 - 2010-11-20 22:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
 
Some content of TEMP:
====================
C:\Users\3one4 Events\AppData\Local\Temp\Quarantine.exe
 
 
==================== Bamital & volsnap Check =================
 
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 
LastRegBack: 2014-02-18 00:15
 
==================== End Of Log ============================


BC AdBot (Login to Remove)

 


m

#2 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:08:34 PM

Posted 18 February 2014 - 01:52 PM


Hello nodiggity

report looks good but we will do a cleanup anyway

Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!

  • Please do not run any tools unless instructed to do so.
    • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
  • Please do not attach logs or use code boxes, just copy and paste the text.
    • Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.
  • Please read every post completely before doing anything.
    • Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
  • Please provide feedback about your experience as we go.
    • A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.
NOTE: At the top of your post, click on the "Follow This Topic" Button, make sure that the "Receive notification" box is checked and that it is set to "Instantly" - This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.


These are the programs I would like you to run next, if you have any problems with one of these just skip it and move on to the next one.

-AdwCleaner-

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.
-Junkware-Removal-Tool-

Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
When they are complete let me have the two reports and let me know how things are running.

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#3 nodiggity

nodiggity
  • Topic Starter

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 18 February 2014 - 02:02 PM

# AdwCleaner v3.019 - Report created 18/02/2014 at 13:59:53
# Updated 17/02/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : 3one4 Events - 3ONE4EVENTS-PC
# Running from : C:\Users\3one4 Events\Downloads\AdwCleaner.exe
# Option : Clean
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v10.0.9200.16798
 
 
-\\ Mozilla Firefox v27.0.1 (en-US)
 
[ File : C:\Users\3one4 Events\AppData\Roaming\Mozilla\Firefox\Profiles\amc1zqs0.default-1392333658465\prefs.js ]
 
 
-\\ Google Chrome v32.0.1700.107
 
[ File : C:\Users\3one4 Events\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 
*************************
 
AdwCleaner[R0].txt - [983 octets] - [17/02/2014 17:31:44]
AdwCleaner[R1].txt - [1067 octets] - [18/02/2014 13:59:27]
AdwCleaner[S0].txt - [1045 octets] - [17/02/2014 17:32:33]
AdwCleaner[S1].txt - [990 octets] - [18/02/2014 13:59:53]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1049 octets] ##########


#4 nodiggity

nodiggity
  • Topic Starter

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 18 February 2014 - 02:10 PM

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Professional x64
Ran by 3one4 Events on Tue 02/18/2014 at 14:03:12.93
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
~~~ Services
 
 
 
~~~ Registry Values
 
 
 
~~~ Registry Keys
 
 
 
~~~ Files
 
 
 
~~~ Folders
 
 
 
~~~ Event Viewer Logs were cleared
 
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 02/18/2014 at 14:08:28.42
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


#5 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:08:34 PM

Posted 18 February 2014 - 03:00 PM


Hello nodiggity

I Would like you to do the following.

Please print out or make a copy in notepad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links. I want you to save it to the desktop and run it from there.1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." Please restart the computer

"information and logs"
  • In your next post I need the following
  • Log from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now?
Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#6 nodiggity

nodiggity
  • Topic Starter

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 18 February 2014 - 03:34 PM

ComboFix 14-02-18.01 - 3one4 Events 02/18/2014  15:10:52.1.8 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.8183.6151 [GMT -5:00]
Running from: c:\users\3one4 Events\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\SPL3680.tmp
c:\programdata\SPL982C.tmp
c:\windows\wininit.ini
F:\Autorun.inf
.
.
(((((((((((((((((((((((((   Files Created from 2014-01-18 to 2014-02-18  )))))))))))))))))))))))))))))))
.
.
2014-02-18 20:16 . 2014-02-18 20:16 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-02-18 19:13 . 2014-02-12 20:50 965000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2014-02-18 19:13 . 2014-02-12 20:50 965000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A5FC0ABB-D2CC-442A-A9EE-A4580D7EC643}\gapaengine.dll
2014-02-18 19:13 . 2014-02-06 09:01 10536864 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{74879B63-4CB8-42BC-9910-3A872AF53C65}\mpengine.dll
2014-02-18 11:02 . 2014-02-18 11:03 -------- d-----w- C:\FRST
2014-02-17 22:31 . 2014-02-18 18:59 -------- d-----w- C:\AdwCleaner
2014-02-17 21:19 . 2013-10-02 01:10 44544 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll
2014-02-17 21:18 . 2014-02-01 09:18 197120 ----a-w- c:\windows\system32\msrating.dll
2014-02-17 21:17 . 2014-02-01 10:56 775344 ----a-w- c:\program files\Internet Explorer\iexplore.exe
2014-02-17 16:00 . 2013-12-04 00:28 10315576 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-02-16 16:11 . 2014-02-16 16:14 301568 --sha-w- C:\EUMONBMP.SYS
2014-02-15 21:05 . 2013-09-04 16:32 24136 ----a-w- c:\windows\system32\fbnative.exe
2014-02-15 15:37 . 2014-02-15 15:37 -------- d-----w- c:\program files\CCleaner
2014-02-15 02:50 . 2014-02-16 16:11 -------- d-----w- C:\My Backups
2014-02-15 02:41 . 2014-02-15 15:39 -------- d-----w- C:\BOOT
2014-02-12 20:50 . 2014-02-12 20:50 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2014-02-12 20:50 . 2014-02-12 20:50 -------- d-----w- c:\program files\Microsoft Security Client
2014-02-12 19:33 . 2014-02-12 19:33 -------- d-----w- c:\program files (x86)\Avant Browser
2014-02-11 22:15 . 2013-05-15 20:27 594432 ----a-w- c:\windows\system32\Rtlihvs.dll
2014-02-11 22:15 . 2013-05-15 20:27 451072 ----a-w- c:\windows\SysWow64\ISSRemoveSP.exe
2014-02-11 16:39 . 2014-02-12 19:31 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{240EB1F3-8D4A-4ACE-9ECA-F37DD0F1627E}\offreg.dll
2014-02-11 14:00 . 2014-02-11 14:05 -------- d-----w- c:\programdata\MFAData
2014-02-11 14:00 . 2014-02-11 14:00 -------- d-----w- c:\programdata\Common Files
2014-02-11 13:31 . 2009-07-15 05:21 1721576 ----a-w- c:\windows\system32\WdfCoInstaller01009.dll
2014-02-11 13:31 . 2014-02-11 13:31 -------- d-----w- c:\programdata\BDLogging
2014-02-11 13:31 . 2013-11-04 20:47 74512 ----a-w- c:\windows\SysWow64\bdsandboxuiskin32.dll
2014-02-11 13:31 . 2007-04-11 15:11 511328 ----a-w- c:\windows\capicom.dll
2014-02-11 13:29 . 2014-02-11 13:29 0 ----a-w- c:\windows\system32\BDSandBoxUISkin32.dll
2014-02-11 13:29 . 2013-11-04 20:47 84848 ----a-w- c:\windows\system32\BDSandBoxUISkin.dll
2014-02-11 13:29 . 2013-11-04 20:46 34384 ----a-w- c:\windows\system32\BDSandBoxUH.dll
2014-02-11 13:28 . 2014-02-11 13:28 -------- d-----w- c:\program files (x86)\Common Files\Bitdefender
2014-02-11 10:47 . 2013-12-16 06:54 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{240EB1F3-8D4A-4ACE-9ECA-F37DD0F1627E}\mpengine.dll
2014-02-10 23:15 . 2014-02-13 23:28 -------- d-----w- c:\windows\ERUNT
2014-02-10 17:20 . 2014-02-10 17:20 91352 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-02-10 14:45 . 2014-02-10 14:45 -------- d-----w- c:\programdata\LogMeIn
2014-02-10 14:44 . 2014-02-10 14:44 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2014-02-10 14:16 . 2014-02-10 14:16 -------- d-----w- c:\program files (x86)\Citrix
2014-02-04 19:22 . 2014-02-04 19:22 -------- d-----w- C:\CR+DotNet
2014-02-04 17:40 . 2014-02-12 20:17 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2014-02-04 17:39 . 2014-02-10 14:45 -------- d-----w- c:\program files (x86)\Ticket Technology
2014-02-04 17:36 . 2014-02-04 17:36 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2014-02-04 17:32 . 2014-02-04 17:32 -------- d-----w- c:\windows\SysWow64\URTTEMP
2014-02-04 17:25 . 2014-02-04 17:25 -------- d-----w- c:\program files (x86)\Business Objects
2014-02-04 17:07 . 2014-02-15 14:59 -------- d-----w- c:\users\MSSQLSERVER
2014-02-04 17:07 . 2012-02-11 16:02 45656 ----a-w- c:\windows\SysWow64\perf-MSSQL11.MSSQLSERVER-sqlagtctr.dll
2014-02-04 17:07 . 2012-02-11 14:44 54360 ----a-w- c:\windows\system32\perf-MSSQL11.MSSQLSERVER-sqlagtctr.dll
2014-02-04 17:06 . 2012-02-11 16:03 82520 ----a-w- c:\windows\SysWow64\perf-MSSQLSERVER-sqlctr11.1.3000.0.dll
2014-02-04 17:06 . 2012-02-11 14:44 95832 ----a-w- c:\windows\system32\perf-MSSQLSERVER-sqlctr11.1.3000.0.dll
2014-02-04 17:06 . 2012-02-11 14:46 82520 ----a-w- c:\windows\system32\fssres.dll
2014-02-04 17:06 . 2012-02-11 14:46 180312 ----a-w- c:\windows\system32\hadrres.dll
2014-02-04 17:05 . 2014-02-04 17:05 -------- d-----w- c:\program files\Microsoft Analysis Services
2014-02-04 17:04 . 2014-02-04 17:04 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2014-02-04 17:02 . 2014-02-04 17:02 -------- d-----w- c:\windows\system32\RsFx
2014-02-04 17:02 . 2014-02-04 17:02 -------- d-----w- c:\program files\Microsoft.NET
2014-02-04 17:00 . 2014-02-05 11:11 84448 ----a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll
2014-02-04 16:59 . 2014-02-04 17:01 -------- d-----w- c:\windows\SysWow64\1033
2014-02-04 16:59 . 2014-02-04 16:59 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 10.0
2014-02-04 16:59 . 2014-02-04 16:59 -------- d-----w- c:\program files (x86)\Common Files\Merge Modules
2014-02-04 16:57 . 2014-02-04 17:01 -------- d-----w- c:\windows\system32\1033
2014-02-04 16:57 . 2014-02-04 16:57 -------- d-----w- c:\windows\symbols
2014-02-04 16:57 . 2014-02-04 16:57 -------- d-----w- c:\program files\Microsoft Visual Studio 10.0
2014-02-04 16:57 . 2014-02-04 16:57 -------- d-----w- c:\program files\Microsoft Help Viewer
2014-02-04 16:57 . 2014-02-04 16:57 -------- d-----w- c:\program files (x86)\Microsoft SDKs
2014-02-04 16:50 . 2014-02-04 17:01 -------- d-----w- c:\program files (x86)\Microsoft SQL Server
2014-02-04 16:46 . 2014-02-04 17:03 -------- d-----w- c:\program files\Microsoft SQL Server
2014-02-04 16:38 . 2014-02-04 16:46 -------- d-----w- c:\program files (x86)\POSNet Install Files
2014-02-04 15:09 . 2014-02-04 15:09 -------- d-----w- c:\windows\Migration
2014-02-04 14:30 . 2014-02-15 15:47 -------- d-----w- c:\windows\system32\MRT
2014-02-04 08:08 . 2013-10-14 23:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2014-02-04 08:04 . 2014-02-04 08:04 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2014-02-03 17:28 . 2014-02-03 17:28 3174912 ----a-w- c:\windows\system32\rdpcorets.dll
2014-02-03 17:28 . 2014-02-03 17:28 30208 ----a-w- c:\windows\system32\drivers\TsUsbGD.sys
2014-02-03 17:28 . 2014-02-03 17:28 243200 ----a-w- c:\windows\system32\rdpudd.dll
2014-02-03 17:28 . 2014-02-03 17:28 228864 ----a-w- c:\windows\system32\rdpendp_winip.dll
2014-02-03 17:28 . 2014-02-03 17:28 19456 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys
2014-02-03 17:28 . 2014-02-03 17:28 192000 ----a-w- c:\windows\SysWow64\rdpendp_winip.dll
2014-02-03 17:28 . 2014-02-03 17:28 15360 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2014-02-03 15:11 . 2013-08-29 02:17 5549504 ----a-w- c:\windows\system32\ntoskrnl.exe
2014-02-03 10:24 . 2014-02-03 10:24 -------- d-----w- c:\program files (x86)\PlotSoft
2014-02-03 09:56 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-02-03 09:56 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2014-02-03 09:56 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2014-02-03 09:56 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2014-02-03 09:56 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2014-02-03 09:30 . 2014-02-03 09:30 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-03 09:11 . 2014-02-03 09:11 -------- d-----w- c:\programdata\Ezprint
2014-02-03 09:09 . 2014-02-18 19:49 -------- d-----w- c:\programdata\Dl_cats
2014-02-03 09:08 . 2009-11-04 13:17 189440 ----a-w- c:\windows\system32\Spool\prtprocs\x64\dleadrpp.dll
2014-02-03 09:07 . 2009-12-31 06:17 3584 ----a-w- c:\windows\system32\DLEAPMRC.DLL
2014-02-03 09:07 . 2009-12-31 06:17 53760 ----a-w- c:\windows\system32\DLEAPMON.DLL
2014-02-03 09:07 . 2009-12-31 06:17 21504 ----a-w- c:\windows\system32\DLEAFXPU.DLL
2014-02-03 09:07 . 2009-01-13 13:15 5709824 ----a-w- c:\windows\system32\DLEAoem.dll
2014-02-03 09:07 . 2014-02-03 09:07 -------- d-----w- c:\programdata\V310-V510 Series
2014-02-03 09:07 . 2010-05-21 22:20 295080 ----a-w- c:\windows\system32\DLEAwupd.exe
2014-02-03 09:07 . 2010-02-22 10:11 509952 ----a-w- c:\windows\system32\DLEAwupd.dll
2014-02-03 09:05 . 2013-10-30 02:32 335360 ----a-w- c:\windows\system32\msieftp.dll
2014-02-03 09:04 . 2013-10-05 20:25 1474048 ----a-w- c:\windows\system32\crypt32.dll
2014-02-03 09:03 . 2013-11-27 01:41 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2014-02-03 09:02 . 2013-11-26 10:32 3156480 ----a-w- c:\windows\system32\win32k.sys
2014-02-03 09:01 . 2013-07-20 10:33 102608 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2014-02-03 09:01 . 2013-07-20 10:33 124112 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-03 09:01 . 2012-11-30 05:45 362496 ----a-w- c:\windows\system32\wow64win.dll
2014-02-03 09:01 . 2012-11-30 05:43 16384 ----a-w- c:\windows\system32\ntvdm64.dll
2014-02-03 09:01 . 2012-11-30 05:45 13312 ----a-w- c:\windows\system32\wow64cpu.dll
2014-02-03 08:59 . 2013-05-13 05:50 52224 ----a-w- c:\windows\system32\certenc.dll
2014-02-03 08:59 . 2013-05-13 03:43 1192448 ----a-w- c:\windows\system32\certutil.exe
2014-02-03 08:59 . 2013-05-13 03:08 903168 ----a-w- c:\windows\SysWow64\certutil.exe
2014-02-03 08:59 . 2013-05-13 03:08 43008 ----a-w- c:\windows\SysWow64\certenc.dll
2014-02-03 08:59 . 2013-10-12 02:32 150016 ----a-w- c:\windows\system32\wshom.ocx
2014-02-03 08:59 . 2013-10-12 02:31 202752 ----a-w- c:\windows\system32\scrrun.dll
2014-02-03 08:59 . 2013-10-12 02:04 121856 ----a-w- c:\windows\SysWow64\wshom.ocx
2014-02-03 08:59 . 2013-10-12 01:33 156160 ----a-w- c:\windows\system32\cscript.exe
2014-02-03 08:59 . 2013-10-12 01:33 168960 ----a-w- c:\windows\system32\wscript.exe
2014-02-03 08:59 . 2013-10-12 01:15 141824 ----a-w- c:\windows\SysWow64\wscript.exe
2014-02-03 08:59 . 2013-10-12 02:03 163840 ----a-w- c:\windows\SysWow64\scrrun.dll
2014-02-03 08:59 . 2013-10-12 01:15 126976 ----a-w- c:\windows\SysWow64\cscript.exe
2014-02-03 08:58 . 2013-05-10 05:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2014-02-03 08:58 . 2013-05-10 03:20 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2014-02-03 08:53 . 2013-08-01 12:09 983488 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2014-02-03 08:53 . 2013-04-10 06:01 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2014-02-03 08:53 . 2011-02-03 11:25 144384 ----a-w- c:\windows\system32\cdd.dll
2014-02-03 08:52 . 2013-08-28 01:12 461312 ----a-w- c:\windows\system32\scavengeui.dll
2014-02-03 08:52 . 2014-02-04 14:42 -------- d-----w- c:\program files (x86)\Microsoft Works
2014-02-03 08:52 . 2014-02-04 17:02 -------- d-----w- c:\program files (x86)\Microsoft.NET
2014-02-03 08:52 . 2014-02-03 08:52 -------- d-----w- c:\windows\PCHEALTH
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-19 07:33 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-01-20 152392]
"Dell V310-V510 Series"="c:\program files (x86)\Dell V310-V510 Series\fm3032.exe" [2011-01-24 316072]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-02-04 3813712]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R1 A2DDA;A2 Direct Disk Access Support Driver;c:\eek\RUN\a2ddax64.sys;c:\eek\RUN\a2ddax64.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 dleaCATSCustConnectService;dleaCATSCustConnectService;c:\windows\system32\spool\DRIVERS\x64\3\\dleaserv.exe;c:\windows\SYSNATIVE\spool\DRIVERS\x64\3\\dleaserv.exe [x]
R3 cleanhlp;cleanhlp;c:\eek\Run\cleanhlp64.sys;c:\eek\Run\cleanhlp64.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 EsgScanner;EsgScanner;c:\windows\system32\DRIVERS\EsgScanner.sys;c:\windows\SYSNATIVE\DRIVERS\EsgScanner.sys [x]
R3 GoToAssist Remote Support Customer;GoToAssist Remote Support Customer;c:\program files (x86)\Citrix\GoToAssist Remote Support Customer\594\g2ax_service.exe Start=service;c:\program files (x86)\Citrix\GoToAssist Remote Support Customer\594\g2ax_service.exe Start=service [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RtlWlanu;Realtek Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\rtwlanu.sys;c:\windows\SYSNATIVE\DRIVERS\rtwlanu.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 RsFx0201;RsFx0201 Driver;c:\windows\system32\DRIVERS\RsFx0201.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0201.sys [x]
S0 EUBAKUP;EUBAKUP;c:\windows\system32\drivers\eubakup.sys;c:\windows\SYSNATIVE\drivers\eubakup.sys [x]
S0 EUBKMON;EUBKMON;c:\windows\system32\drivers\EUBKMON.sys;c:\windows\SYSNATIVE\drivers\EUBKMON.sys [x]
S1 EUDSKACS;EUDSKACS;c:\windows\system32\drivers\eudskacs.sys;c:\windows\SYSNATIVE\drivers\eudskacs.sys [x]
S1 EUFDDISK;EUFDDISK;c:\windows\system32\drivers\EuFdDisk.sys;c:\windows\SYSNATIVE\drivers\EuFdDisk.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 dlea_device;dlea_device;c:\windows\system32\dleacoms.exe;c:\windows\SYSNATIVE\dleacoms.exe [x]
S2 EaseUS Agent;EaseUS Agent Service;c:\program files (x86)\EaseUS\Todo Backup\bin\Agent.exe;c:\program files (x86)\EaseUS\Todo Backup\bin\Agent.exe [x]
S2 Guard Agent;Guard Agent Service;c:\program files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe;c:\program files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 POSNET Exchange;POSNET Exchange;c:\program files (x86)\Ticket Technology\POSNET Server\POSNET.Exchange.Service.exe;c:\program files (x86)\Ticket Technology\POSNET Server\POSNET.Exchange.Service.exe [x]
S2 SpyHunter 4 Service;SpyHunter 4 Service;c:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE;c:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-03 19:26 1211720 ----a-w- c:\program files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-02-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-02-02 23:20]
.
2014-02-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-02-02 23:20]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"dleamon.exe"="c:\program files (x86)\Dell V310-V510 Series\dleamon.exe" [2011-01-24 770728]
"EzPrint"="c:\program files (x86)\Dell V310-V510 Series\ezprint.exe" [2011-01-24 139944]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-10-23 1266912]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
FF - ProfilePath - c:\users\3one4 Events\AppData\Roaming\Mozilla\Firefox\Profiles\amc1zqs0.default-1392333658465\
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKU-Default-Run-Bitdefender Wallet Agent - c:\program files\Bitdefender\Bitdefender\pmbxag.exe
Wow6432Node-HKU-Default-Run-Bitdefender Wallet - c:\program files\Bitdefender\Bitdefender\pwdmanui.exe
Wow6432Node-HKU-Default-Run-Bitdefender Wallet Application Agent - c:\program files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
SafeBoot-CleanHlp
SafeBoot-CleanHlp.sys
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
.
**************************************************************************
.
Completion time: 2014-02-18  15:22:00 - machine was rebooted
ComboFix-quarantined-files.txt  2014-02-18 20:22
.
Pre-Run: 528,325,390,336 bytes free
Post-Run: 527,938,899,968 bytes free
.
- - End Of File - - C869C3534C6F277D421D6175DC72C5F6
A36C5E4F47E84449FF07ED3517B43A31


#7 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:08:34 PM

Posted 18 February 2014 - 08:33 PM


Hello nodiggity

At this time I would like you to run this script for me and it is a good time to check out the computer to see if there is anything else that needs to be addressed.

:Run CFScript:

Please start by opening Notepad and copy/paste the text in the box into the window:

ClearJavaCache::


 
Save it to your desktop as CFScript.txt

Referring to the picture above, drag CFScript.txt into ComboFix.exe
CFScriptB-4.gif
This will let ComboFix run again.
Restart if you have to.
Save the produced logfile to your desktop.

Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Note 2: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." Please restart the computer

"information and logs"
  • In your next post I need the following
    • report from Combofix
    • let me know of any problems you may have had
    • How is the computer doing now after running the script?
Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#8 nodiggity

nodiggity
  • Topic Starter

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 18 February 2014 - 09:56 PM

ComboFix 14-02-18.01 - 3one4 Events 02/18/2014  21:05:29.2.8 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.8183.5836 [GMT -5:00]
Running from: c:\users\3one4 Events\Desktop\ComboFix.exe
Command switches used :: c:\users\3one4 Events\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((   Files Created from 2014-01-19 to 2014-02-19  )))))))))))))))))))))))))))))))
.
.
2014-02-19 02:10 . 2014-02-19 02:10 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-02-18 22:32 . 2014-02-06 09:01 10536864 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{74C286C9-D3B5-4365-B1DB-8CA600B2BA45}\mpengine.dll
2014-02-18 22:31 . 2013-11-26 23:29 5693440 ----a-w- c:\windows\SysWow64\mstscax.dll
2014-02-18 22:31 . 2013-11-26 22:49 6573056 ----a-w- c:\windows\system32\mstscax.dll
2014-02-18 20:44 . 2014-02-06 09:01 10536864 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-02-18 19:13 . 2014-02-12 20:50 965000 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2014-02-18 19:13 . 2014-02-12 20:50 965000 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A5FC0ABB-D2CC-442A-A9EE-A4580D7EC643}\gapaengine.dll
2014-02-18 11:02 . 2014-02-18 11:03 -------- d-----w- C:\FRST
2014-02-17 22:31 . 2014-02-18 18:59 -------- d-----w- C:\AdwCleaner
2014-02-17 21:19 . 2013-10-02 01:10 44544 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll
2014-02-17 21:18 . 2014-02-01 09:18 197120 ----a-w- c:\windows\system32\msrating.dll
2014-02-17 21:17 . 2014-02-01 10:56 775344 ----a-w- c:\program files\Internet Explorer\iexplore.exe
2014-02-16 16:11 . 2014-02-16 16:14 301568 --sha-w- C:\EUMONBMP.SYS
2014-02-15 21:05 . 2013-09-04 16:32 24136 ----a-w- c:\windows\system32\fbnative.exe
2014-02-15 15:37 . 2014-02-15 15:37 -------- d-----w- c:\program files\CCleaner
2014-02-15 02:50 . 2014-02-16 16:11 -------- d-----w- C:\My Backups
2014-02-15 02:41 . 2014-02-15 15:39 -------- d-----w- C:\BOOT
2014-02-12 20:50 . 2014-02-12 20:50 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2014-02-12 20:50 . 2014-02-12 20:50 -------- d-----w- c:\program files\Microsoft Security Client
2014-02-12 19:33 . 2014-02-12 19:33 -------- d-----w- c:\program files (x86)\Avant Browser
2014-02-11 22:15 . 2013-05-15 20:27 594432 ----a-w- c:\windows\system32\Rtlihvs.dll
2014-02-11 22:15 . 2013-05-15 20:27 451072 ----a-w- c:\windows\SysWow64\ISSRemoveSP.exe
2014-02-11 16:39 . 2014-02-12 19:31 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{240EB1F3-8D4A-4ACE-9ECA-F37DD0F1627E}\offreg.dll
2014-02-11 14:00 . 2014-02-11 14:05 -------- d-----w- c:\programdata\MFAData
2014-02-11 14:00 . 2014-02-11 14:00 -------- d-----w- c:\programdata\Common Files
2014-02-11 13:31 . 2009-07-15 05:21 1721576 ----a-w- c:\windows\system32\WdfCoInstaller01009.dll
2014-02-11 13:31 . 2014-02-11 13:31 -------- d-----w- c:\programdata\BDLogging
2014-02-11 13:31 . 2013-11-04 20:47 74512 ----a-w- c:\windows\SysWow64\bdsandboxuiskin32.dll
2014-02-11 13:31 . 2007-04-11 15:11 511328 ----a-w- c:\windows\capicom.dll
2014-02-11 13:29 . 2014-02-11 13:29 0 ----a-w- c:\windows\system32\BDSandBoxUISkin32.dll
2014-02-11 13:29 . 2013-11-04 20:47 84848 ----a-w- c:\windows\system32\BDSandBoxUISkin.dll
2014-02-11 13:29 . 2013-11-04 20:46 34384 ----a-w- c:\windows\system32\BDSandBoxUH.dll
2014-02-11 13:28 . 2014-02-11 13:28 -------- d-----w- c:\program files (x86)\Common Files\Bitdefender
2014-02-11 10:47 . 2013-12-16 06:54 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{240EB1F3-8D4A-4ACE-9ECA-F37DD0F1627E}\mpengine.dll
2014-02-10 23:15 . 2014-02-13 23:28 -------- d-----w- c:\windows\ERUNT
2014-02-10 17:20 . 2014-02-10 17:20 91352 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-02-10 14:45 . 2014-02-10 14:45 -------- d-----w- c:\programdata\LogMeIn
2014-02-10 14:44 . 2014-02-10 14:44 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2014-02-10 14:16 . 2014-02-10 14:16 -------- d-----w- c:\program files (x86)\Citrix
2014-02-04 19:22 . 2014-02-04 19:22 -------- d-----w- C:\CR+DotNet
2014-02-04 17:40 . 2014-02-12 20:17 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2014-02-04 17:39 . 2014-02-10 14:45 -------- d-----w- c:\program files (x86)\Ticket Technology
2014-02-04 17:36 . 2014-02-04 17:36 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2014-02-04 17:32 . 2014-02-04 17:32 -------- d-----w- c:\windows\SysWow64\URTTEMP
2014-02-04 17:25 . 2014-02-04 17:25 -------- d-----w- c:\program files (x86)\Business Objects
2014-02-04 17:07 . 2014-02-15 14:59 -------- d-----w- c:\users\MSSQLSERVER
2014-02-04 17:07 . 2012-02-11 16:02 45656 ----a-w- c:\windows\SysWow64\perf-MSSQL11.MSSQLSERVER-sqlagtctr.dll
2014-02-04 17:07 . 2012-02-11 14:44 54360 ----a-w- c:\windows\system32\perf-MSSQL11.MSSQLSERVER-sqlagtctr.dll
2014-02-04 17:06 . 2012-02-11 16:03 82520 ----a-w- c:\windows\SysWow64\perf-MSSQLSERVER-sqlctr11.1.3000.0.dll
2014-02-04 17:06 . 2012-02-11 14:44 95832 ----a-w- c:\windows\system32\perf-MSSQLSERVER-sqlctr11.1.3000.0.dll
2014-02-04 17:06 . 2012-02-11 14:46 82520 ----a-w- c:\windows\system32\fssres.dll
2014-02-04 17:06 . 2012-02-11 14:46 180312 ----a-w- c:\windows\system32\hadrres.dll
2014-02-04 17:05 . 2014-02-04 17:05 -------- d-----w- c:\program files\Microsoft Analysis Services
2014-02-04 17:04 . 2014-02-04 17:04 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2014-02-04 17:02 . 2014-02-04 17:02 -------- d-----w- c:\windows\system32\RsFx
2014-02-04 17:02 . 2014-02-04 17:02 -------- d-----w- c:\program files\Microsoft.NET
2014-02-04 17:00 . 2014-02-05 11:11 84448 ----a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll
2014-02-04 16:59 . 2014-02-04 17:01 -------- d-----w- c:\windows\SysWow64\1033
2014-02-04 16:59 . 2014-02-04 16:59 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 10.0
2014-02-04 16:59 . 2014-02-04 16:59 -------- d-----w- c:\program files (x86)\Common Files\Merge Modules
2014-02-04 16:57 . 2014-02-04 17:01 -------- d-----w- c:\windows\system32\1033
2014-02-04 16:57 . 2014-02-04 16:57 -------- d-----w- c:\windows\symbols
2014-02-04 16:57 . 2014-02-04 16:57 -------- d-----w- c:\program files\Microsoft Visual Studio 10.0
2014-02-04 16:57 . 2014-02-04 16:57 -------- d-----w- c:\program files\Microsoft Help Viewer
2014-02-04 16:57 . 2014-02-04 16:57 -------- d-----w- c:\program files (x86)\Microsoft SDKs
2014-02-04 16:50 . 2014-02-04 17:01 -------- d-----w- c:\program files (x86)\Microsoft SQL Server
2014-02-04 16:46 . 2014-02-04 17:03 -------- d-----w- c:\program files\Microsoft SQL Server
2014-02-04 16:38 . 2014-02-04 16:46 -------- d-----w- c:\program files (x86)\POSNet Install Files
2014-02-04 15:09 . 2014-02-04 15:09 -------- d-----w- c:\windows\Migration
2014-02-04 14:30 . 2014-02-15 15:47 -------- d-----w- c:\windows\system32\MRT
2014-02-04 08:08 . 2013-10-14 23:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2014-02-04 08:04 . 2014-02-04 08:04 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2014-02-03 17:28 . 2014-02-03 17:28 3174912 ----a-w- c:\windows\system32\rdpcorets.dll
2014-02-03 17:28 . 2014-02-03 17:28 30208 ----a-w- c:\windows\system32\drivers\TsUsbGD.sys
2014-02-03 17:28 . 2014-02-03 17:28 243200 ----a-w- c:\windows\system32\rdpudd.dll
2014-02-03 17:28 . 2014-02-03 17:28 228864 ----a-w- c:\windows\system32\rdpendp_winip.dll
2014-02-03 17:28 . 2014-02-03 17:28 19456 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys
2014-02-03 17:28 . 2014-02-03 17:28 192000 ----a-w- c:\windows\SysWow64\rdpendp_winip.dll
2014-02-03 17:28 . 2014-02-03 17:28 15360 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2014-02-03 15:11 . 2013-08-29 02:17 5549504 ----a-w- c:\windows\system32\ntoskrnl.exe
2014-02-03 10:24 . 2014-02-03 10:24 -------- d-----w- c:\program files (x86)\PlotSoft
2014-02-03 09:56 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-02-03 09:56 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2014-02-03 09:56 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2014-02-03 09:56 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2014-02-03 09:56 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2014-02-03 09:30 . 2014-02-03 09:30 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-03 09:11 . 2014-02-03 09:11 -------- d-----w- c:\programdata\Ezprint
2014-02-03 09:09 . 2014-02-18 19:49 -------- d-----w- c:\programdata\Dl_cats
2014-02-03 09:08 . 2009-11-04 13:17 189440 ----a-w- c:\windows\system32\Spool\prtprocs\x64\dleadrpp.dll
2014-02-03 09:07 . 2009-12-31 06:17 3584 ----a-w- c:\windows\system32\DLEAPMRC.DLL
2014-02-03 09:07 . 2009-12-31 06:17 53760 ----a-w- c:\windows\system32\DLEAPMON.DLL
2014-02-03 09:07 . 2009-12-31 06:17 21504 ----a-w- c:\windows\system32\DLEAFXPU.DLL
2014-02-03 09:07 . 2009-01-13 13:15 5709824 ----a-w- c:\windows\system32\DLEAoem.dll
2014-02-03 09:07 . 2014-02-03 09:07 -------- d-----w- c:\programdata\V310-V510 Series
2014-02-03 09:07 . 2010-05-21 22:20 295080 ----a-w- c:\windows\system32\DLEAwupd.exe
2014-02-03 09:07 . 2010-02-22 10:11 509952 ----a-w- c:\windows\system32\DLEAwupd.dll
2014-02-03 09:05 . 2013-10-30 02:32 335360 ----a-w- c:\windows\system32\msieftp.dll
2014-02-03 09:04 . 2013-10-05 20:25 1474048 ----a-w- c:\windows\system32\crypt32.dll
2014-02-03 09:03 . 2013-11-27 01:41 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2014-02-03 09:02 . 2013-11-26 10:32 3156480 ----a-w- c:\windows\system32\win32k.sys
2014-02-03 09:01 . 2013-07-20 10:33 102608 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2014-02-03 09:01 . 2013-07-20 10:33 124112 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-03 09:01 . 2012-11-30 05:45 362496 ----a-w- c:\windows\system32\wow64win.dll
2014-02-03 09:01 . 2012-11-30 05:43 16384 ----a-w- c:\windows\system32\ntvdm64.dll
2014-02-03 09:01 . 2012-11-30 05:45 13312 ----a-w- c:\windows\system32\wow64cpu.dll
2014-02-03 08:59 . 2013-05-13 05:50 52224 ----a-w- c:\windows\system32\certenc.dll
2014-02-03 08:59 . 2013-05-13 03:43 1192448 ----a-w- c:\windows\system32\certutil.exe
2014-02-03 08:59 . 2013-05-13 03:08 903168 ----a-w- c:\windows\SysWow64\certutil.exe
2014-02-03 08:59 . 2013-05-13 03:08 43008 ----a-w- c:\windows\SysWow64\certenc.dll
2014-02-03 08:59 . 2013-10-12 02:32 150016 ----a-w- c:\windows\system32\wshom.ocx
2014-02-03 08:59 . 2013-10-12 02:31 202752 ----a-w- c:\windows\system32\scrrun.dll
2014-02-03 08:59 . 2013-10-12 02:04 121856 ----a-w- c:\windows\SysWow64\wshom.ocx
2014-02-03 08:59 . 2013-10-12 01:33 156160 ----a-w- c:\windows\system32\cscript.exe
2014-02-03 08:59 . 2013-10-12 01:33 168960 ----a-w- c:\windows\system32\wscript.exe
2014-02-03 08:59 . 2013-10-12 01:15 141824 ----a-w- c:\windows\SysWow64\wscript.exe
2014-02-03 08:59 . 2013-10-12 02:03 163840 ----a-w- c:\windows\SysWow64\scrrun.dll
2014-02-03 08:59 . 2013-10-12 01:15 126976 ----a-w- c:\windows\SysWow64\cscript.exe
2014-02-03 08:58 . 2013-05-10 05:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2014-02-03 08:58 . 2013-05-10 03:20 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2014-02-03 08:53 . 2013-08-01 12:09 983488 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2014-02-03 08:53 . 2013-04-10 06:01 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2014-02-03 08:53 . 2011-02-03 11:25 144384 ----a-w- c:\windows\system32\cdd.dll
2014-02-03 08:52 . 2013-08-28 01:12 461312 ----a-w- c:\windows\system32\scavengeui.dll
2014-02-03 08:52 . 2014-02-04 14:42 -------- d-----w- c:\program files (x86)\Microsoft Works
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-19 07:33 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-01-20 152392]
"Dell V310-V510 Series"="c:\program files (x86)\Dell V310-V510 Series\fm3032.exe" [2011-01-24 316072]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-02-04 3813712]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R1 A2DDA;A2 Direct Disk Access Support Driver;c:\eek\RUN\a2ddax64.sys;c:\eek\RUN\a2ddax64.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 dleaCATSCustConnectService;dleaCATSCustConnectService;c:\windows\system32\spool\DRIVERS\x64\3\\dleaserv.exe;c:\windows\SYSNATIVE\spool\DRIVERS\x64\3\\dleaserv.exe [x]
R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
R3 cleanhlp;cleanhlp;c:\eek\Run\cleanhlp64.sys;c:\eek\Run\cleanhlp64.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 EsgScanner;EsgScanner;c:\windows\system32\DRIVERS\EsgScanner.sys;c:\windows\SYSNATIVE\DRIVERS\EsgScanner.sys [x]
R3 GoToAssist Remote Support Customer;GoToAssist Remote Support Customer;c:\program files (x86)\Citrix\GoToAssist Remote Support Customer\594\g2ax_service.exe Start=service;c:\program files (x86)\Citrix\GoToAssist Remote Support Customer\594\g2ax_service.exe Start=service [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RtlWlanu;Realtek Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\rtwlanu.sys;c:\windows\SYSNATIVE\DRIVERS\rtwlanu.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 RsFx0201;RsFx0201 Driver;c:\windows\system32\DRIVERS\RsFx0201.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0201.sys [x]
S0 EUBAKUP;EUBAKUP;c:\windows\system32\drivers\eubakup.sys;c:\windows\SYSNATIVE\drivers\eubakup.sys [x]
S0 EUBKMON;EUBKMON;c:\windows\system32\drivers\EUBKMON.sys;c:\windows\SYSNATIVE\drivers\EUBKMON.sys [x]
S1 EUDSKACS;EUDSKACS;c:\windows\system32\drivers\eudskacs.sys;c:\windows\SYSNATIVE\drivers\eudskacs.sys [x]
S1 EUFDDISK;EUFDDISK;c:\windows\system32\drivers\EuFdDisk.sys;c:\windows\SYSNATIVE\drivers\EuFdDisk.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 dlea_device;dlea_device;c:\windows\system32\dleacoms.exe;c:\windows\SYSNATIVE\dleacoms.exe [x]
S2 EaseUS Agent;EaseUS Agent Service;c:\program files (x86)\EaseUS\Todo Backup\bin\Agent.exe;c:\program files (x86)\EaseUS\Todo Backup\bin\Agent.exe [x]
S2 Guard Agent;Guard Agent Service;c:\program files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe;c:\program files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
S2 POSNET Exchange;POSNET Exchange;c:\program files (x86)\Ticket Technology\POSNET Server\POSNET.Exchange.Service.exe;c:\program files (x86)\Ticket Technology\POSNET Server\POSNET.Exchange.Service.exe [x]
S2 SpyHunter 4 Service;SpyHunter 4 Service;c:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE;c:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-03 19:26 1211720 ----a-w- c:\program files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-02-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-02-02 23:20]
.
2014-02-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-02-02 23:20]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"dleamon.exe"="c:\program files (x86)\Dell V310-V510 Series\dleamon.exe" [2011-01-24 770728]
"EzPrint"="c:\program files (x86)\Dell V310-V510 Series\ezprint.exe" [2011-01-24 139944]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-10-23 1266912]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\3one4 Events\AppData\Roaming\Mozilla\Firefox\Profiles\amc1zqs0.default-1392333658465\
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2014-02-18  21:12:53
ComboFix-quarantined-files.txt  2014-02-19 02:12
ComboFix2.txt  2014-02-18 20:22
.
Pre-Run: 545,680,535,552 bytes free
Post-Run: 545,126,797,312 bytes free
.
- - End Of File - - 30CF1DCBA5B3A23C1B7A7BC5EADE6749
A36C5E4F47E84449FF07ED3517B43A31


#9 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:08:34 PM

Posted 19 February 2014 - 12:57 PM


Hello nodiggity

I would like to see a report that combofix makes.

extra combofix report
  • push the "windows key" + "R" (between the "Ctrl" button and "Alt" Button)
  • please copy and past the following into the box
C:\Qoobox\Add-Remove Programs.txt
  • click ok
copy and paste the report into this topic for me to review

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#10 nodiggity

nodiggity
  • Topic Starter

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 19 February 2014 - 01:04 PM

Adobe Acrobat 7.0 Standard - English, Français, Deutsch
Adobe Acrobat 7.1.0 Standard - English, Français, Deutsch
Apple Application Support
Apple Software Update
Avant Browser (remove only)
Crystal Report 2008 Runtime SP3
Dell Toolbar
EaseUS Todo Backup Free 6.5
Google Chrome
Google Update Helper
GoToAssist Customer 1.6.0.594
Insomniac Browser
LogMeIn Hamachi
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft .NET Framework 1.1
Microsoft .NET Framework 4 Multi-Targeting Pack
Microsoft Application Error Reporting
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (English) 2007
Microsoft Office File Validation Add-In
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Report Viewer 2012 Runtime
Microsoft SQL Server 2008 R2 Management Objects
Microsoft SQL Server 2012 Policies 
Microsoft SQL Server System CLR Types
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219
Microsoft Visual Studio 2010 Shell (Isolated) - ENU
Mozilla Firefox 27.0.1 (x86 en-US)
Mozilla Maintenance Service
POSNet 2.0
POSNET Server
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition 
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition 
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596825) 32-Bit Edition 
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597973) 32-Bit Edition 
Security Update for Microsoft Office 2007 suites (KB2760411) 32-Bit Edition 
Security Update for Microsoft Office 2007 suites (KB2760415) 32-Bit Edition 
Security Update for Microsoft Office 2007 suites (KB2760585) 32-Bit Edition 
Security Update for Microsoft Office 2007 suites (KB2760591) 32-Bit Edition 
Security Update for Microsoft Office 2007 suites (KB2817641) 32-Bit Edition 
Security Update for Microsoft Office 2007 suites (KB2827326) 32-Bit Edition 
Security Update for Microsoft Office 2007 suites (KB2837615) 32-Bit Edition 
Security Update for Microsoft Office 2007 suites (KB2850022) 32-Bit Edition 
Security Update for Microsoft Office Excel 2007 (KB2827324) 32-Bit Edition 
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition 
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2837617) 32-Bit Edition 
SQL Server Browser for SQL Server 2012
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)


#11 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:08:34 PM

Posted 19 February 2014 - 08:54 PM


Hello

These logs are looking allot better. But we still have some work to do.

Please print out these instructions, or copy them to a Notepad file. It will make it easier for you to follow the instructions and complete all of the necessary steps..

Clean Out Temp Files
  • This small application you may want to keep and use once a week to keep the computer clean.

    Download CCleaner from here CCleaner
    • Run the installer to install the application.
    • When it gives you the option to install Yahoo toolbar uncheck the box next to it.
    • Run CCleaner. default settings are fine
    • Click Run Cleaner.
    • Close CCleaner.
: Malwarebytes' Anti-Malware :

I see that you have MBAM installed - That is great!! and at this time I would like you to update it and run me a quick scan
  • Double-click mbam icon
  • go to the update tab at the top
  • click on check for updates
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is Checked (ticked) except items in the C:\System Volume Information folder and click on Remove Selected.
  • When completed, a log will open in Notepad. please copy and paste the log into your next reply
    • If you accidentally close it, the log file is saved here and will be named like this:
    • C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.



Download HijackThis
  • Go Here to download HijackThis program
  • Save HijackThis to your desktop.
  • Right Click on Hijackthis and select "Run as Admin" (XP users just need to double click to run)
  • Click on "Do A system scan and save a logfile" (if you do not see "Do A system scan and save a logfile" then click on main menu)
  • copy and paste hijackthis report into the topic
"information and logs"
  • In your next post I need the following
    • Log From MBAM
    • report from Hijackthis
    • let me know of any problems you may have had
    • How is the computer doing now?
Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#12 nodiggity

nodiggity
  • Topic Starter

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 20 February 2014 - 07:36 AM

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:34:00 AM, on 2/20/2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16798)
Boot mode: Normal
 
Running processes:
C:\Program Files (x86)\Dell V310-V510 Series\dleamon.exe
C:\Program Files (x86)\Dell V310-V510 Series\ezprint.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\3one4 Events\Desktop\HijackThis.exe
 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Dell Toolbar - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll
O2 - BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - (no file)
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: (no name) - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Dell Toolbar - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Dell V310-V510 Series] "C:\Program Files (x86)\Dell V310-V510 Series\fm3032.exe" /s
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKUS\S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'MSSQLSERVER')
O4 - HKUS\S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'MSSQLSERVER')
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: dleaCATSCustConnectService - Unknown owner - C:\Windows\system32\spool\DRIVERS\x64\3\\dleaserv.exe
O23 - Service: dlea_device -   - C:\Windows\system32\dleacoms.exe
O23 - Service: EaseUS Agent Service (EaseUS Agent) - CHENGDU YIWO Tech Development Co., Ltd - C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GoToAssist Remote Support Customer - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files (x86)\Citrix\GoToAssist Remote Support Customer\594\g2ax_service.exe
O23 - Service: Guard Agent Service (Guard Agent) - CHENGDU YIWO Tech Development Co., Ltd - C:\Program Files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: POSNET Exchange - Ticket Technology by StubHub - C:\Program Files (x86)\Ticket Technology\POSNET Server\POSNET.Exchange.Service.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
 
--


#13 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:08:34 PM

Posted 21 February 2014 - 07:54 AM


Greetings

These logs are looking very good, we are almost done!!! Just one more scan to go.

:Remove unneeded start-up entries:

This part of the fix is purely optional
These are programs that start up when you turn on your computer but don't need to be, any of these programs you can click on their icons (or start from the control panel) and start the program when you need it. By stopping these programs you will boot up faster and your computer will work faster.
  • Run HijackThis (rightclick and run as admin)
  • Click on the Scan button
  • Put a check beside all of the items listed below (if present):

    • O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
      O4 - HKUS\S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'MSSQLSERVER')
      O4 - HKUS\S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'MSSQLSERVER')


  • Close all open windows and browsers/email, etc...
  • Click on the "Fix Checked" button
  • When completed, close the application.
    • NOTE**You can research each of those lines >here< and see if you want to keep them or not
      just copy the name between the brackets and paste into the search space
      O4 - HKLM\..\Run: [IntelliPoint]


Eset Online Scanner

**Note** You will need to use Internet explorer for this scan - Vista and win 7 right click on IE shortcut and run as admin

Go Eset web page to run an online scanner from ESET.
  • Turn off the real time scanner of any existing antivirus program while performing the online scan
  • click on the Run ESET Online Scanner button
  • Tick the box next to YES, I accept the Terms of Use.
    • Click Start
  • When asked, allow the add/on to be installed
    • Click Start
  • Make sure that the option Remove found threats is unticked
  • Click on Advanced Settings, ensure the options
    • Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.

  • Click Scan
  • wait for the virus definitions to be downloaded
  • Wait for the scan to finish
When the scan is complete
  • If no threats were found
    • put a checkmark in "Uninstall application on close"
    • close program
    • report to me that nothing was found
  • If threats were found
    • click on "list of threats found"
    • click on "export to text file" and save it as ESET SCAN and save to the desktop
    • Click on back
    • put a checkmark in "Uninstall application on close"
    • click on finish
    • close program
    • copy and paste the report here
Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#14 nodiggity

nodiggity
  • Topic Starter

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 21 February 2014 - 08:53 AM

C:\Program Files (x86)\EaseUS\Todo Backup\bin\PxeServer.dll a variant of Win32/TFTPD32.A potentially unsafe application
C:\Program Files (x86)\EaseUS\Todo Backup\BUILDPE\EaseUS\tb\bin\PxeServer.dll a variant of Win32/TFTPD32.A potentially unsafe application


#15 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:08:34 PM

Posted 21 February 2014 - 09:25 AM


Hello nodiggity

Those are false positives from Todo Backup

Very well done!! This is my general post for when your logs show no more signs of malware - Please let me know if you still are having problems with your computer and what these problems are.

:Why we need to remove some of our tools:
  • Some of the tools we have used to clean your computer were made by fellow malware fighters and are very powerful and if used incorrectly or at the wronge time can make the computer an expensive paper weight.
    They are updated all the time and some of them more than once a day so by the time you are ready to use them again they will already be outdated.

    The following procedures will implement some cleanup procedures to remove these tools. It will also reset your System Restore by flushing out previous restore points and create a new restore point. It will also remove all the backups our tools may have made.
:DeFogger:

Note** Defogger only needs to be run if it was run when we first started. If you have not already run it then skip this.
  • To re-enable your Emulation drivers, double click DeFogger to run the tool.
    • The application window will appear
    • Click the Re-enable button to re-enable your CD Emulation drivers
    • Click Yes to continue
    • A 'Finished!' message will appear
    • Click OK
    • DeFogger will now ask to reboot the machine - click OK.
    Your Emulation drivers are now re-enabled.

:Uninstall ComboFix:
  • turn off all active protection software
  • push the "windows key" + "R" (between the "Ctrl" button and "Alt" Button)
  • please copy and past the following into the box ComboFix /Uninstall and click OK.
  • Note the space between the X and the /Uninstall, it needs to be there.
  • CF-Uninstall.png
:Remove the rest of our tools:

Please download DelFix and save it to desktop. This tool will remove all the tools we used to clean your pc.
  • Double-click DelFix.exe.
  • select all options avalible
  • Click the Run button.
  • The tool will delete itself once it finishes, if not delete it by yourself.
  • If asked to restart the computer, please do so
:The programs you can keep:

Some of the programs that we have used would be a good idea to keep and used often in helping to keep the computer clean. I use these programs on my computer.
  • Revo Uninstaller Free - this is the uninstaller that I had you download and works allot better than add/remove in windows and has saved me more than once from corrupted installs and uninstalls

    CCleaner - This is a good program to clean out temp files, I would use this once a week or before any malware scan to remove unwanted temp files - It has a built in registry cleaner but I would leave that alone and not use any registry cleaner

    Malwarebytes' Anti-Malware The Gold standerd today in antimalware scanners

:Security programs:

One of the questions I am asked all the time is "What programs do you use" I have at this time 4 computers in my home and I have this setup on all 4 of them.
  • Microsoft Security Essentials - provides real-time protection for your home PC that guards against viruses, spyware, and other malicious software.
  • WinPatrol As a robust security monitor, WinPatrol will alert you to hijackings, malware attacks and critical changes made to your computer without your permission. WinPatrol takes snapshot of your critical system resources and alerts you to any changes that may occur without your knowledge.
  • Malwarebytes' Anti-Malware Malwarebytes' Anti-Malware is a new and powerful anti-malware tool. It is
    totally free but for real-time protection you will have to pay a small one-time fee. We used this to help clean your computer and recomend keeping it and using often. (I have upgraded to the paid version of MBAM and I am glad I did)

    Note** If you decide to install MSE you will need to uninstall your present Antivirus
:Security awareness:


It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection. Refer to this Microsoft article
Strong passwords: How to create and use them Then consider a password keeper, to keep all your passwords safe. KeePass is a small utility that allows you to manage all your passwords.

As Java seems to get exploited on a daily basis I advise to disable java in your web browsers - How to disable java in your web browsers - Disable Java



The other question I am asked all the time is "How can I prevent this from happening again." and the short answer to that is to be aware of what is out there and how to start spotting dangers.

Here are some articles that are must reads and should be read by everybody in your household that uses the internetHere is some more reading for you from some of my collegesquoted from Tech Support Forum

Conclusion

There is no such thing as ‘perfect security’. This applies to many things, not just computer systems. Using the above guide you should be able to take all the reasonable steps you can to prevent infection. However, the most important part of all this is you, the user. Surf sensibly and think before you download a file or click on a link. Take a few moments to assess the possible risks and you should be able to enjoy all the internet has to offer.


I'd be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can then be closed.

I Will Keep This Open For About Three Days, If Anything Comes Up - Just Come Back And Let Me Know, after that time you will have to send me a PM

My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users