Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Blue screen %sh missing on startup


  • This topic is locked This topic is locked
10 replies to this topic

#1 evolintend1

evolintend1

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:06:41 PM

Posted 15 May 2014 - 06:23 AM

Hallo.Recently i made system restore of my laptop lenovo with windows 7 pro SP1 and after the completion of the process when the pc restart it went in a loop of restarts and cant even start save mode.My antivirus is Trend Micro.I runned from flash the FRST utility.If you have any advice how to repair the boot process i'll be grateful.

Attached Files

  • Attached File  FRST.txt   124.14KB   2 downloads


BC AdBot (Login to Remove)

 


#2 TB-Psychotic

TB-Psychotic

  • Malware Response Team
  • 6,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:41 PM

Posted 15 May 2014 - 06:35 AM

Hi there,
my name is Marius and I will assist you with your malware related problems.

Before we move on, please read the following points carefully.

  • First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
  • Perform everything in the correct order. Sometimes one step requires the previous one.
  • If you have any problems while following my instructions, Stop there and tell me the exact nature of your problem.
  • Do not run any other scans without instruction or add/remove software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
  • Post all logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
  • If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
  • Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
  • My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.

 

 

Search for files with FRST (Recovery Environment)


In Vista or Windows 7: Boot to System Recovery Options and run FRST.

In Windows XP: Please boot to BartPe and run FRST.



Type the following in the edit box after "Search:"

LPK.dll

Click Search button and post the log (Search.txt) it makes to your reply.

Edited by TB-Psychotic, 15 May 2014 - 06:36 AM.

Proud Member of UNITE & TB
 
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)

#3 evolintend1

evolintend1
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:06:41 PM

Posted 15 May 2014 - 06:49 AM

Hallo.10x you for your advice.I still cant enter into OS (not even safe mode).The result of fix log is  
 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:14-05-2014
Ran by SYSTEM at 2014-05-15 14:46:01 Run:2
Running from G:\
Boot Mode: Recovery
 
==============================================
 
Content of fixlist:
*****************
HKLM\...\RunOnce: [*Restore] - C:\Windows\system32\rstrui.exe /RUNONCE [262656 2010-11-19] (Microsoft Corporation)
HKU\Gr010902\...\Run: [ybyf.exe] => C:\Users\Gr010902\AppData\Roaming\Xavoga\ybyf.exe [234344 2013-07-25] ()
 
2014-04-23 04:38 - 2014-05-13 00:53 - 00000000 ____D () C:\Users\Gr010902\AppData\Roaming\Zociox
2014-04-23 04:38 - 2014-04-23 04:38 - 00000000 ____D () C:\Users\Gr010902\AppData\Roaming\Xavoga
2014-04-23 04:38 - 2014-04-23 04:38 - 00000000 ____D () C:\Users\Gr010902\AppData\Roaming\Unviko
2014-04-23 04:38 - 2014-04-23 04:38 - 00000000 ____D () C:\Users\Gr010902\AppData\Roaming\Obixh
*****************
 
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\*Restore => Value deleted successfully.
HKU\Gr010902\Software\Microsoft\Windows\CurrentVersion\Run\\ybyf.exe => Value deleted successfully.
C:\Users\Gr010902\AppData\Roaming\Zociox => Moved successfully.
C:\Users\Gr010902\AppData\Roaming\Xavoga => Moved successfully.
C:\Users\Gr010902\AppData\Roaming\Unviko => Moved successfully.
C:\Users\Gr010902\AppData\Roaming\Obixh => Moved successfully.
 

==== End of Fixlog ==== 



#4 TB-Psychotic

TB-Psychotic

  • Malware Response Team
  • 6,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:41 PM

Posted 15 May 2014 - 07:10 AM

Search for files with FRST (Recovery Environment)


In Vista or Windows 7: Boot to System Recovery Options and run FRST.

In Windows XP: Please boot to BartPe and run FRST.



Type the following in the edit box after "Search:"

lpk.dll

Click Search button and post the log (Search.txt) it makes to your reply.
Proud Member of UNITE & TB
 
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)

#5 evolintend1

evolintend1
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:06:41 PM

Posted 15 May 2014 - 07:27 AM

Hallo.After the search for LPK.dll the result is 
 

Farbar Recovery Scan Tool (x86) Version:14-05-2014
Ran by SYSTEM at 2014-05-15 15:20:36
Running from G:\
Boot Mode: Recovery
 
================== Search: "LPK.dll" ===================
 
C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.21636_none_ac507fead1f480b1\lpk.dll
[2009-07-13 15:25] - [2009-07-13 17:15] - 0026624 ____A (Microsoft Corporation) 4F154D2C9C6DF951FD6E5AABBAE6B5EE
 
C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.17537_none_abc7e369b8d5fa3e\lpk.dll
[2009-07-13 15:25] - [2009-07-13 17:15] - 0026624 ____A (Microsoft Corporation) 4F154D2C9C6DF951FD6E5AABBAE6B5EE
 
C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.17514_none_abda8263b8c87657\lpk.dll
[2009-07-13 15:25] - [2009-07-13 17:15] - 0026624 ____A (Microsoft Corporation) 4F154D2C9C6DF951FD6E5AABBAE6B5EE
 
C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7600.20875_none_aa3de2ead4ef6b32\lpk.dll
[2009-07-13 15:25] - [2009-07-13 17:15] - 0026624 ____A (Microsoft Corporation) 4F154D2C9C6DF951FD6E5AABBAE6B5EE
 
C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7600.20821_none_aa6ff15ed4ca7a21\lpk.dll
[2009-07-13 15:25] - [2009-07-13 17:15] - 0026624 ____N (Microsoft Corporation) 4F154D2C9C6DF951FD6E5AABBAE6B5EE
 
C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7600.20553_none_aa517c7cd4e1092d\lpk.dll
[2009-07-13 15:25] - [2009-07-13 17:15] - 0026624 ____N (Microsoft Corporation) 4F154D2C9C6DF951FD6E5AABBAE6B5EE
 
C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7600.20498_none_aa2b3c58d4fcfa7d\lpk.dll
[2009-07-13 15:25] - [2009-07-13 17:15] - 0026624 ____A (Microsoft Corporation) 4F154D2C9C6DF951FD6E5AABBAE6B5EE
 
C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7600.16734_none_a9de8585bbb2424d\lpk.dll
[2009-07-13 15:25] - [2009-07-13 17:15] - 0026624 ____A (Microsoft Corporation) 4F154D2C9C6DF951FD6E5AABBAE6B5EE
 
C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7600.16691_none_a99aa339bbe5a0c7\lpk.dll
[2009-07-13 15:25] - [2009-07-13 17:15] - 0026624 ____N (Microsoft Corporation) 4F154D2C9C6DF951FD6E5AABBAE6B5EE
 
C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7600.16444_none_a9d3afe7bbba66c9\lpk.dll
[2009-07-13 15:25] - [2009-07-13 17:15] - 0026624 ____N (Microsoft Corporation) 4F154D2C9C6DF951FD6E5AABBAE6B5EE
 
C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7600.16402_none_a9fcef03bb9bc457\lpk.dll
[2009-07-13 15:25] - [2009-07-13 17:15] - 0026624 ____A (Microsoft Corporation) 4F154D2C9C6DF951FD6E5AABBAE6B5EE
 
C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7600.16385_none_a9a96e9bbbd9f2bd\lpk.dll
[2009-07-13 15:25] - [2009-07-13 17:15] - 0026624 ____N (Microsoft Corporation) 4F154D2C9C6DF951FD6E5AABBAE6B5EE
 
X:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7600.16385_none_a9a96e9bbbd9f2bd\lpk.dll
[2009-07-13 15:25] - [2009-07-13 17:15] - 0026624 ____A (Microsoft Corporation) 4F154D2C9C6DF951FD6E5AABBAE6B5EE
 
X:\Windows\System32\lpk.dll
[2009-07-13 15:25] - [2009-07-13 17:15] - 0026624 ____A (Microsoft Corporation) 4F154D2C9C6DF951FD6E5AABBAE6B5EE
 
=== End Of Search ===


#6 TB-Psychotic

TB-Psychotic

  • Malware Response Team
  • 6,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:41 PM

Posted 16 May 2014 - 03:23 AM

Fix with FRST (Recovery Environment)


  • Open notepad (Start =>All Programs => Accessories => Notepad).
  • Please copy the entire contents of the code box below.
    (To do this highlight the contents of the box, right click on it and select copy. Right-click in the open notepad and select Paste). Save it on the flashdrive as fixlist.txt

    REPLACE: C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.21636_none_ac507fead1f480b1\lpk.dll C:\Windows\System32\LPK.dll
    

    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

    Now please enter System Recovery Options again.

  • Run frst.exe (on 64bit, run frst64.exe) and press the Fix button just once and wait.
  • The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.

Proud Member of UNITE & TB
 
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)

#7 evolintend1

evolintend1
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:06:41 PM

Posted 16 May 2014 - 03:53 AM

Hallo the result is...
 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:14-05-2014
Ran by SYSTEM at 2014-05-16 11:50:24 Run:3
Running from G:\
Boot Mode: Recovery
 
==============================================
 
Content of fixlist:
*****************
REPLACE: C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.21636_none_ac507fead1f480b1\lpk.dll C:\Windows\System32\LPK.dll
*****************
 
Could not find C:\Windows\System32\LPK.dll
C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.21636_none_ac507fead1f480b1\lpk.dll copied successfully to C:\Windows\System32\LPK.dll
 
==== End of Fixlog ====
 
 
The result after restart is now I can start the PC into safe mode,in normal mode it just stays in blank black screen without autorestart.10x you very much for the help.What do you think will be the best way from now on to proceed.Shoud i make reinstall of OS or try to repair it with recovery disc?

Edited by evolintend1, 16 May 2014 - 03:58 AM.


#8 TB-Psychotic

TB-Psychotic

  • Malware Response Team
  • 6,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:41 PM

Posted 16 May 2014 - 04:39 AM

Scan with FRST in normal mode

Please download Farbar's Recovery Scan Tool to your desktop: FRST 32bit or FRST 64bit (If not sure: Start --> Computer (right click) --> properties)

  • Run FRST.
  • Don´t change one of the checkboxes and hit Scan.
  • Logfiles are created on your desktop.
  • Poste the FRST.txt and (after the first scan only!) the Addition.txt.

 

 

 

Scan with Gmer rootkit scanner

Please download Gmer from here by clicking on the "Download EXE" Button.

  • Double click on the randomly named GMER.exe. If asked to allow gmer.sys driver to load, please consent.
  • If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.
  • In the right panel, you will see several boxes that have been checked. Uncheck the following ...
    • Sections
    • IAT/EAT
    • Show All ( should be unchecked by default )
  • Leave everything else as it is.
  • Close all other running programs as well as your Browser.
  • Click the Scan button & wait for it to finish.
  • Once done click on the Save.. button, and in the File name area, type in "ark.txt" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop.
  • Please post the content of the ark.txt here.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries


Proud Member of UNITE & TB
 
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)

#9 evolintend1

evolintend1
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:06:41 PM

Posted 16 May 2014 - 06:27 AM

FRST log:
 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:14-05-2014
Ran by GR014615 (administrator) on LTHOGRPM029 on 16-05-2014 13:59:17
Running from C:\Users\gr014615\Desktop
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Safe Mode (minimal)
 
The only official download link for FRST:
Download link from any site other than Bleeping Computer is unpermitted or outdated.
 
==================== Processes (Whitelisted) =================
 
 
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [1822600 2010-06-24] (ELAN Microelectronics Corp.)
HKLM\...\Run: [EnergyUtility] => C:\Program Files\Lenovo\Energy Management\utility.exe [4114368 2009-12-17] (Lenovo(beijing) Limited)
HKLM\...\Run: [Energy Management] => C:\Program Files\Lenovo\Energy Management\Energy Management.exe [6223808 2009-12-17] (Lenovo (Beijing) Limited)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [OfficeScanNT Monitor] => C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe [870712 2010-08-12] (Trend Micro Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap.dll [1081112 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [DameWare MRC Agent] => C:\Windows\dwrcs\DWRCST.exe [275320 2011-04-14] (DameWare Development)
HKU\S-1-5-21-655470525-106868407-210376480-2208\...\Policies\Explorer: [NoAutoUpdate] 0
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
 
==================== Internet (Whitelisted) ====================
 
ProxyServer: 10.212.244.50:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x8F20F034976ECF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = bg
SearchScopes: HKCU - {5656CF63-3C3C-46B6-AF03-569F373B9F73} URL = https://www.google.com/search?q={searchTerms}
BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {CAFECAFE-0013-0001-0018-ABCDEFABCDEF} 
DPF: {CAFECAFE-0013-0001-0026-ABCDEFABCDEF} 
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.212.244.10 10.66.244.12 10.66.1.17
 
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
========================== Services (Whitelisted) =================
 
S2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [582944 2009-08-11] (Broadcom Corporation.)
S2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363584 2014-03-03] (Microsoft Corporation)
S2 DNTUS26; C:\Windows\SYSTEM32\DNTUS26.EXE [120184 2011-04-14] (DameWare Development LLC)
S2 dwmrcs; C:\Windows\dwrcs\DWRCS.EXE [586616 2011-04-14] (DameWare Development LLC)
S3 EMCORemoteInstallerProfessional4; C:\Program Files\EMCO\Remote Services\Remote Installer Professional\v4\RemoteService.exe [242360 2014-02-03] (EMCO Software)
S2 ntrtscan; C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe [1459872 2010-08-04] (Trend Micro Inc.)
S2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1618888 2014-04-30] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19701080 2014-04-30] (NVIDIA Corporation)
S3 nwagentsvc; C:\Windows\NWAgentShare\nwagentsvc.exe [323584 2010-04-28] (NetWrix Corporation)
S3 TMBMServer; C:\Program Files\Trend Micro\BM\TMBMSRV.exe [345424 2010-06-15] (Trend Micro Inc.)
S2 tmlisten; C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe [1580640 2010-08-04] (Trend Micro Inc.)
S3 TmProxy; C:\Program Files\Trend Micro\OfficeScan Client\TmProxy.exe [689416 2010-04-24] (Trend Micro Inc.)
 
==================== Drivers (Whitelisted) ====================
 
R3 ACPIVPC; C:\Windows\System32\DRIVERS\AcpiVpc.sys [23136 2010-01-20] (Lenovo Corporation)
S3 DwMirror; C:\Windows\System32\DRIVERS\DamewareMini.sys [3712 2008-03-14] (DameWare Development, LLC)
R1 dwvkbd; C:\Windows\System32\DRIVERS\dwvkbd.sys [26624 2008-03-13] (DameWare)
S3 EMCORemoteInstallerProfessionalProcessMonitor; C:\Program Files\EMCO\Remote Services\Remote Installer Professional\v4\ProcessMonitor.sys [17592 2014-01-25] (EMCO Software)
R3 ETD; C:\Windows\System32\DRIVERS\ETD.sys [130560 2010-06-22] (ELAN Microelectronics Corp.)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19400 2014-04-30] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2014-03-31] (NVIDIA Corporation)
S2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [67664 2010-06-15] (Trend Micro Inc.)
S2 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [177232 2010-06-15] (Trend Micro Inc.)
S2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [57424 2010-06-15] (Trend Micro Inc.)
S2 TmFilter; C:\Program Files\Trend Micro\OfficeScan Client\TmXPFlt.sys [264504 2012-07-17] (Trend Micro Inc.)
S2 TmPreFilter; C:\Program Files\Trend Micro\OfficeScan Client\TmPreFlt.sys [36664 2012-07-17] (Trend Micro Inc.)
S1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [90256 2010-04-24] (Trend Micro Inc.)
S2 VSApiNt; C:\Program Files\Trend Micro\OfficeScan Client\VSApiNt.sys [1515232 2012-07-17] (Trend Micro Inc.)
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2014-05-16 22:50 - 2009-07-14 04:15 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\LPK.dll
2014-05-16 13:59 - 2014-05-16 13:59 - 00008241 _____ () C:\Users\gr014615\Desktop\FRST.txt
2014-05-16 13:59 - 2014-05-15 09:05 - 01056256 _____ (Farbar) C:\Users\gr014615\Desktop\FRST.exe
2014-05-15 21:31 - 2014-05-16 13:59 - 00000000 ____D () C:\FRST
2014-05-14 10:20 - 2014-05-14 16:36 - 00000000 ____D () C:\08b2949a8db78a16fd
2014-05-14 10:16 - 2014-05-14 10:16 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-14 09:19 - 2014-05-14 09:19 - 00000000 ____D () C:\Users\gr014615\AppData\Local\Broadcom
2014-05-13 18:23 - 2014-05-14 16:36 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-13 16:13 - 2014-05-13 16:13 - 00000000 ____D () C:\Users\gr014615\AppData\Roaming\InstallShield
2014-05-13 15:39 - 2014-05-13 15:43 - 669173640 _____ (Microsoft Corporation) C:\Users\gr014615\Downloads\officesp2010-kb2687455-fullfile-x86-en-usXP2.exe
2014-05-13 15:36 - 2014-05-13 15:36 - 00000000 ____D () C:\Users\gr014615\AppData\Local\WindowsUpdate
2014-05-13 15:02 - 2014-05-13 15:02 - 00000000 ____D () C:\Windows\system32\SPReview
2014-05-13 14:23 - 2010-11-20 04:36 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe
2014-05-13 14:23 - 2010-11-20 04:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL
2014-05-13 14:23 - 2010-11-20 04:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL
2014-05-13 14:23 - 2010-11-20 04:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll
2014-05-13 14:23 - 2010-11-20 04:30 - 03966848 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-05-13 14:23 - 2010-11-20 04:30 - 03911040 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-13 14:23 - 2010-11-20 04:30 - 01290112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 01211264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00712576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00520064 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2014-05-13 14:23 - 2010-11-20 04:30 - 00245632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00240000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00233344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00175360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbus.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00173440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00160128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00153984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00148864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00140160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00130432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00116096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00085376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00078208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00067456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00056192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00040704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmstorfl.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storvsc.sys
2014-05-13 14:23 - 2010-11-20 04:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys
2014-05-13 14:23 - 2010-11-20 04:29 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll
2014-05-13 14:23 - 2010-11-20 04:29 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2014-05-13 14:23 - 2010-11-20 04:29 - 00274304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2014-05-13 14:23 - 2010-11-20 04:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll
2014-05-13 14:23 - 2010-11-20 04:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2014-05-13 14:23 - 2010-11-20 04:29 - 00187776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-05-13 14:23 - 2010-11-20 04:29 - 00137088 _____ (Microsoft Corporation) C:\Windows\system32\halacpi.dll
2014-05-13 14:23 - 2010-11-20 04:29 - 00132992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2014-05-13 14:23 - 2010-11-20 04:29 - 00101760 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-05-13 14:23 - 2010-11-20 04:29 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2014-05-13 14:23 - 2010-11-20 04:29 - 00043392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhv.sys
2014-05-13 14:23 - 2010-11-20 04:29 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-05-13 14:23 - 2010-11-20 04:29 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2014-05-13 14:23 - 2010-11-20 04:29 - 00014208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys
2014-05-13 14:23 - 2010-11-20 04:24 - 01288488 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-05-13 14:23 - 2010-11-20 04:24 - 00690680 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2014-05-13 14:23 - 2010-11-20 04:24 - 00508904 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-05-13 14:23 - 2010-11-20 04:24 - 00442720 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-05-13 14:23 - 2010-11-20 04:24 - 00271664 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2014-05-13 14:23 - 2010-11-20 04:24 - 00194800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-05-13 14:23 - 2010-11-20 04:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 12872192 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01619456 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-05-13 14:23 - 2010-11-20 04:21 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01328128 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01229824 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01175040 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01086976 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01063936 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00980992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00974336 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00907776 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2014-05-13 14:23 - 2010-11-20 04:21 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00850432 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00826368 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00750592 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2014-05-13 14:23 - 2010-11-20 04:21 - 00738816 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00577024 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00567808 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2014-05-13 14:23 - 2010-11-20 04:21 - 00521216 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00492032 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\scrptadm.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00463360 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00372224 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\wbemcomn.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00318464 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\unattend.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\umrdp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00169472 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
2014-05-13 14:23 - 2010-11-20 04:21 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\tscfgwmi.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\sppinst.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
2014-05-13 14:23 - 2010-11-20 04:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL
2014-05-13 14:23 - 2010-11-20 04:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\sppuinotify.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wtsapi32.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wiarpc.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\utildll.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\TRAPI.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shgina.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wshirda.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\riched32.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\rdpcfgex.dll
2014-05-13 14:23 - 2010-11-20 04:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2014-05-13 14:23 - 2010-11-20 04:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
2014-05-13 14:23 - 2010-11-20 04:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 01414144 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00656384 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL
2014-05-13 14:23 - 2010-11-20 04:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL
2014-05-13 14:23 - 2010-11-20 04:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\olethk32.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\QCLIPROV.DLL
2014-05-13 14:23 - 2010-11-20 04:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\napdsnap.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\perfts.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll
2014-05-13 14:23 - 2010-11-20 04:20 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 10990080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 03215872 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 03207680 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 02341376 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 02291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 02064384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 01698816 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 01493504 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 01390080 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 01236992 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00857600 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2014-05-13 14:23 - 2010-11-20 04:19 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00804864 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00768512 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00674304 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-05-13 14:23 - 2010-11-20 04:19 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00389120 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2014-05-13 14:23 - 2010-11-20 04:19 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
2014-05-13 14:23 - 2010-11-20 04:19 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-05-13 14:23 - 2010-11-20 04:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00195072 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\msvfw32.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
2014-05-13 14:23 - 2010-11-20 04:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00093696 _____ (Windows ® Codename Longhorn DDK provider) C:\Windows\system32\fms.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00082944 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\KMSVC.DLL
2014-05-13 14:23 - 2010-11-20 04:19 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll

2014-05-13 14:23 - 2010-11-20 04:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\luainstall.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\FXSMON.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz32.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\msdmo.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\HotStartUserAgent.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll
2014-05-13 14:23 - 2010-11-20 04:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 03727872 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 01792000 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 01400320 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 01371136 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 01171456 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 01154048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 01076736 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 01040384 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 01003520 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00863744 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00739840 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\cscsvc.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00537600 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00508416 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-05-13 14:23 - 2010-11-20 04:18 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00438272 _____ (Microsoft Corporation) C:\Windows\system32\AdmTmpl.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00418816 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00402944 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\appmgr.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2014-05-13 14:23 - 2010-11-20 04:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2014-05-13 14:23 - 2010-11-20 04:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00252928 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\audiodev.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00219136 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00205312 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\activeds.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-05-13 14:23 - 2010-11-20 04:18 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\adsldp.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cscobj.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\CscMig.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\amstream.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\CertPolEng.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dsauth.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-13 14:23 - 2010-11-20 04:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL
2014-05-13 14:23 - 2010-11-20 04:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll
2014-05-13 14:23 - 2010-11-20 04:17 - 03367424 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 01049600 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00286720 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00257536 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgrade.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\fsquirt.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\PresentationSettings.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\iscsicli.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\mobsync.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00098816 _____ (Microsoft) C:\Windows\system32\Robocopy.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\cmstp.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\MuiUnattend.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00066048 _____ () C:\Windows\system32\PrintBrmUi.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\djoin.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\repair-bde.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\takeown.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\PushPrinterConnections.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\unlodctr.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\qwinsta.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netcfg.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\qprocess.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msg.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\quser.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\tskill.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\chgport.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\tsdiscon.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\chglogon.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\tscon.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\qappsrv.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\logoff.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shadow.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\rwinsta.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\chgusr.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\reset.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\query.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\LogonUI.exe
2014-05-13 14:23 - 2010-11-20 04:17 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-05-13 14:23 - 2010-11-20 04:16 - 01466368 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-13 14:23 - 2010-11-20 04:16 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
2014-05-13 14:23 - 2010-11-20 04:16 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr
2014-05-13 14:23 - 2010-11-20 04:16 - 00776192 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe
2014-05-13 14:23 - 2010-11-20 04:16 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl
2014-05-13 14:23 - 2010-11-20 04:16 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2014-05-13 14:23 - 2010-11-20 04:16 - 00668160 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2014-05-13 14:23 - 2010-11-20 04:16 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2014-05-13 14:23 - 2010-11-20 04:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2014-05-13 14:23 - 2010-11-20 04:16 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl
2014-05-13 14:23 - 2010-11-20 04:16 - 00516096 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl
2014-05-13 14:23 - 2010-11-20 04:16 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2014-05-13 14:23 - 2010-11-20 04:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
2014-05-13 14:23 - 2010-11-20 04:16 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2014-05-13 14:23 - 2010-11-20 04:16 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl
2014-05-13 14:23 - 2010-11-20 04:16 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl
2014-05-13 14:23 - 2010-11-20 04:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-05-13 14:23 - 2010-11-20 04:16 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2014-05-13 14:23 - 2010-11-20 04:16 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr
2014-05-13 14:23 - 2010-11-20 04:16 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2014-05-13 14:23 - 2010-11-20 04:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr
2014-05-13 14:23 - 2010-11-20 04:16 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr
2014-05-13 14:23 - 2010-11-20 04:16 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax
2014-05-13 14:23 - 2010-11-20 04:16 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2014-05-13 14:23 - 2010-11-20 04:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2014-05-13 14:23 - 2010-11-20 04:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe
2014-05-13 14:23 - 2010-11-20 04:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv
2014-05-13 14:23 - 2010-11-20 04:16 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax
2014-05-13 14:23 - 2010-11-20 04:16 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2014-05-13 14:23 - 2010-11-20 04:16 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2014-05-13 14:23 - 2010-11-20 04:16 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\desk.cpl
2014-05-13 14:23 - 2010-11-20 04:16 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe
2014-05-13 14:23 - 2010-11-20 04:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax
2014-05-13 14:23 - 2010-11-20 04:16 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-05-13 14:23 - 2010-11-20 04:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax
2014-05-13 14:23 - 2010-11-20 04:16 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2014-05-13 14:23 - 2010-11-20 04:16 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax
2014-05-13 14:23 - 2010-11-20 04:16 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax
2014-05-13 14:23 - 2010-11-20 04:16 - 00065024 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe
2014-05-13 14:23 - 2010-11-20 04:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax
2014-05-13 14:23 - 2010-11-20 04:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax
2014-05-13 14:23 - 2010-11-20 04:16 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\g711codc.ax
2014-05-13 14:23 - 2010-11-20 04:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\vbisurf.ax
2014-05-13 14:23 - 2010-11-20 04:16 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\change.exe
2014-05-13 14:23 - 2010-11-20 04:08 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-05-13 14:23 - 2010-11-20 04:07 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2014-05-13 14:23 - 2010-11-20 04:07 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll
2014-05-13 14:23 - 2010-11-20 04:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-05-13 14:23 - 2010-11-20 04:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2014-05-13 14:23 - 2010-11-20 04:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\RDPENCDD.dll
2014-05-13 14:23 - 2010-11-20 04:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\pifmgr.dll
2014-05-13 14:23 - 2010-11-20 04:03 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\vmicres.dll
2014-05-13 14:23 - 2010-11-20 04:03 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\vmbusres.dll
2014-05-13 14:23 - 2010-11-20 04:03 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\vmstorfltres.dll
2014-05-13 14:23 - 2010-11-20 04:00 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
2014-05-13 14:23 - 2010-11-20 04:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
2014-05-13 14:23 - 2010-11-20 04:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDSG.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdlk41a.dll
2014-05-13 14:23 - 2010-11-20 04:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ1.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUQ.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUF.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDSF.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDPO.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDNEPR.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR1.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGKL.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUS.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR1.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTURME.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAJIK.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMON.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAORI.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT1.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBULG.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBLR.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-05-13 14:23 - 2010-11-20 04:00 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDGEO.DLL
2014-05-13 14:23 - 2010-11-20 03:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll
2014-05-13 14:23 - 2010-11-20 03:56 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\BlbEvents.dll
2014-05-13 14:23 - 2010-11-20 03:54 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-13 14:23 - 2010-11-20 02:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbrpm.sys
2014-05-13 14:23 - 2010-11-20 02:49 - 00386048 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-05-13 14:23 - 2010-11-20 02:24 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpdr.sys
2014-05-13 14:23 - 2010-11-20 02:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-05-13 14:23 - 2010-11-20 02:22 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-05-13 14:23 - 2010-11-20 02:22 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll
2014-05-13 14:23 - 2010-11-20 02:22 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-05-13 14:23 - 2010-11-20 02:22 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-05-13 14:23 - 2010-11-20 02:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RDPCDD.sys
2014-05-13 14:23 - 2010-11-20 02:21 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\RDPREFDD.dll
2014-05-13 14:23 - 2010-11-20 02:21 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-05-13 14:23 - 2010-11-20 02:21 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdpipe.sys
2014-05-13 14:23 - 2010-11-20 02:07 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys
2014-05-13 14:23 - 2010-11-20 02:07 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2014-05-13 14:23 - 2010-11-20 02:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2014-05-13 14:23 - 2010-11-20 02:07 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-05-13 14:23 - 2010-11-20 02:06 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2014-05-13 14:23 - 2010-11-20 02:06 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2014-05-13 14:23 - 2010-11-20 02:06 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndisuio.sys
2014-05-13 14:23 - 2010-11-20 02:01 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-05-13 14:23 - 2010-11-20 02:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys
2014-05-13 14:23 - 2010-11-20 02:00 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-05-13 14:23 - 2010-11-20 02:00 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys
2014-05-13 14:23 - 2010-11-20 02:00 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-05-13 14:23 - 2010-11-20 02:00 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2014-05-13 14:23 - 2010-11-20 02:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-05-13 14:23 - 2010-11-20 02:00 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-05-13 14:23 - 2010-11-20 02:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2014-05-13 14:23 - 2010-11-20 02:00 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umbus.sys
2014-05-13 14:23 - 2010-11-20 02:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys
2014-05-13 14:23 - 2010-11-20 02:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys
2014-05-13 14:23 - 2010-11-20 01:59 - 00132224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-05-13 14:23 - 2010-11-20 01:59 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-05-13 14:23 - 2010-11-20 01:59 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-05-13 14:23 - 2010-11-20 01:59 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-05-13 14:23 - 2010-11-20 01:59 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-05-13 14:23 - 2010-11-20 01:59 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2014-05-13 14:23 - 2010-11-20 01:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-05-13 14:23 - 2010-11-20 01:50 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CompositeBus.sys
2014-05-13 14:23 - 2010-11-20 01:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2014-05-13 14:23 - 2010-11-20 01:50 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
2014-05-13 14:23 - 2010-11-20 01:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2014-05-13 14:23 - 2010-11-20 01:24 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys
2014-05-13 14:23 - 2010-11-20 01:19 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2014-05-13 14:23 - 2010-11-20 01:15 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\vmicsvc.exe
2014-05-13 14:23 - 2010-11-20 01:14 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\VmbusCoinstaller.dll
2014-05-13 14:23 - 2010-11-20 01:14 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\VmdCoinstall.dll
2014-05-13 14:23 - 2010-11-20 01:14 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\IcCoinstall.dll
2014-05-13 14:23 - 2010-11-20 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VMBusHID.sys
2014-05-13 14:23 - 2010-11-20 01:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\vmbuspipe.dll
2014-05-13 14:23 - 2010-11-20 01:14 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vms3cap.sys
2014-05-13 14:23 - 2010-11-20 00:47 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpipmi.sys
2014-05-13 14:23 - 2010-11-20 00:45 - 00311296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-05-13 14:23 - 2010-11-20 00:44 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\csc.sys
2014-05-13 14:23 - 2010-11-20 00:44 - 00309248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-05-13 14:23 - 2010-11-20 00:44 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2014-05-13 14:23 - 2010-11-20 00:44 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-05-13 14:23 - 2010-11-20 00:44 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-05-13 14:23 - 2010-11-20 00:44 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-05-13 14:23 - 2010-11-20 00:42 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2014-05-13 14:23 - 2010-11-20 00:42 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-05-13 14:23 - 2010-11-20 00:42 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-05-13 14:23 - 2010-11-20 00:42 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2014-05-13 14:23 - 2010-11-20 00:40 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2014-05-13 14:23 - 2010-11-20 00:40 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-05-13 14:23 - 2010-11-20 00:39 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2014-05-13 14:23 - 2010-11-20 00:39 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-05-13 14:23 - 2010-11-20 00:39 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdi.sys
2014-05-13 14:23 - 2010-11-20 00:38 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys
2014-05-13 14:23 - 2010-11-19 21:23 - 00053600 _____ () C:\Windows\system32\dosx.exe
2014-05-13 14:23 - 2010-11-19 19:52 - 00419880 _____ () C:\Windows\system32\locale.nls
2014-05-13 14:23 - 2010-11-09 17:45 - 00010429 _____ () C:\Windows\system32\ScavengeSpace.xml
2014-05-13 14:23 - 2010-11-04 18:20 - 00146852 _____ () C:\Windows\system32\systemsf.ebd
2014-05-13 14:23 - 2010-11-04 18:20 - 00105559 _____ () C:\Windows\system32\RacRules.xml
2014-05-13 14:23 - 2010-11-04 18:11 - 00312168 _____ (Microsoft Corporation) C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2014-05-13 14:23 - 2010-11-04 17:58 - 01130824 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-05-13 14:23 - 2010-11-04 17:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2014-05-13 14:23 - 2010-11-04 17:58 - 00155472 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-05-13 14:23 - 2010-11-04 17:58 - 00080720 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-05-13 14:23 - 2010-11-04 17:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2014-05-13 14:23 - 2010-11-04 17:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2014-05-13 14:23 - 2010-11-04 17:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2014-05-13 14:21 - 2014-05-13 14:21 - 00000000 ____D () C:\Windows\system32\EventProviders
2014-05-13 14:19 - 2014-05-13 14:20 - 563934504 _____ (Microsoft Corporation) C:\Users\gr014615\Downloads\windows6.1-KB976932-X86.exe
2014-05-13 14:09 - 2012-06-03 01:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-05-13 14:09 - 2012-06-03 01:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-05-13 14:09 - 2012-06-03 01:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-05-13 14:09 - 2012-06-03 01:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-05-13 14:08 - 2012-06-03 01:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-05-13 14:08 - 2012-06-03 01:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-05-13 14:08 - 2012-06-03 01:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-05-13 14:08 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-05-13 14:08 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-05-13 13:54 - 2014-05-13 13:54 - 669173640 _____ (Microsoft Corporation) C:\Users\gr014615\Downloads\officesp2010-kb2687455-fullfile-x86-en-usSP2.exe
2014-05-13 13:50 - 2014-05-13 13:50 - 379534904 _____ (Microsoft Corporation) C:\Users\gr014615\Downloads\officesuite2010sp1-kb2460049-x86-fullfile-en-us.exe
2014-05-13 13:47 - 2014-05-13 13:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Configuration Analyzer Tool 1.2
2014-05-13 13:47 - 2014-05-13 13:47 - 00000000 ____D () C:\Program Files\Microsoft OffCAT
2014-05-13 13:44 - 2014-05-13 13:44 - 00000000 ____D () C:\Program Files\MSECache
2014-05-13 13:36 - 2014-05-13 13:36 - 00000000 ____D () C:\Users\gr014615\AppData\Roaming\Macromedia
2014-05-13 13:24 - 2014-03-31 19:42 - 00034080 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad32v.sys
2014-05-13 13:20 - 2014-05-15 21:08 - 00000000 ____D () C:\Users\gr014615\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-13 13:20 - 2014-05-13 13:25 - 00000000 ____D () C:\Users\gr014615\AppData\Local\NVIDIA Corporation
2014-05-13 13:20 - 2014-05-13 13:20 - 00001409 _____ () C:\Users\gr014615\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-13 13:19 - 2014-05-13 13:21 - 00000000 ____D () C:\Users\gr014615\AppData\Local\NVIDIA
2014-05-13 13:19 - 2014-05-13 13:19 - 00001914 __RSH () C:\Users\gr014615\ntuser.pol
2014-05-13 13:19 - 2014-05-13 13:19 - 00001914 __RSH () C:\Users\gr014615\ntuser.pol
2014-05-13 13:19 - 2014-05-13 13:19 - 00000000 ____D () C:\Users\gr014615\AppData\Local\VirtualStore
2014-05-12 13:19 - 2014-05-13 09:47 - 00000000 ____D () C:\Users\Gr010902\Desktop\Life controls
2014-05-08 14:46 - 2014-05-08 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-08 14:44 - 2014-05-08 14:44 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-05-08 14:42 - 2014-05-08 14:42 - 00000000 ____D () C:\Windows\PCHEALTH
2014-05-08 14:39 - 2014-05-08 14:39 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services
2014-05-08 14:36 - 2014-05-08 14:36 - 00000961 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-08 14:36 - 2014-05-08 14:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-08 14:36 - 2014-05-08 14:36 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-07 16:37 - 2011-04-14 18:07 - 00120184 _____ (DameWare Development LLC) C:\Windows\system32\DNTUS26.EXE
2014-05-07 16:09 - 2014-05-07 16:09 - 00000020 ___SH () C:\Users\wrks_gr014615\ntuser.ini
2014-05-07 16:09 - 2014-05-07 16:09 - 00000020 ___SH () C:\Users\wrks_gr014615\ntuser.ini
2014-05-07 16:09 - 2009-07-14 07:42 - 00000000 ___RD () C:\Users\wrks_gr014615\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-07 16:09 - 2009-07-14 07:37 - 00000000 ___RD () C:\Users\wrks_gr014615\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-07 16:08 - 2014-05-15 21:08 - 00000000 ____D () C:\Users\wrks_gr014615
2014-04-30 11:30 - 2014-04-30 11:30 - 00001539 _____ () C:\Users\Gr010902\Desktop\Apis7.exe - Shortcut.lnk
2014-04-29 11:45 - 2014-04-29 11:45 - 379534904 _____ (Microsoft Corporation) C:\Users\Gr010902\Desktop\officesuite2010sp1-kb2460049-x86-fullfile-en-us.exe
2014-04-29 10:51 - 2014-04-29 10:51 - 00028310 _____ () C:\Users\Gr010902\Desktop\жалби 1во тримесеччие 2014.xlsx
2014-04-28 14:12 - 2014-04-28 14:12 - 00000000 ____D () C:\Users\gr014615\AppData\Local\Microsoft Help
2014-04-28 14:06 - 2014-04-28 14:06 - 00000000 ____D () C:\Users\Gr010902\AppData\Local\NVIDIA Corporation
2014-04-28 14:05 - 2014-04-30 21:29 - 01081112 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap.dll
2014-04-28 14:05 - 2014-04-28 14:05 - 00000000 ____D () C:\Users\Gr010902\AppData\Local\NVIDIA
2014-04-28 14:05 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-04-28 14:05 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-04-28 14:05 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-04-28 14:04 - 2014-04-28 14:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-04-28 14:03 - 2014-03-04 14:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe
2014-04-28 13:57 - 2014-03-31 19:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap32v.dll
2014-04-28 13:56 - 2014-04-28 13:56 - 00000000 ____D () C:\Users\gr014615\AppData\Roaming\Adobe
2014-04-28 13:56 - 2014-03-04 17:29 - 23716640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2014-04-28 13:56 - 2014-03-04 17:29 - 17559384 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-04-28 13:56 - 2014-03-04 17:29 - 15783992 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2014-04-28 13:56 - 2014-03-04 17:29 - 14709720 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2014-04-28 13:56 - 2014-03-04 17:29 - 10523480 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-04-28 13:56 - 2014-03-04 17:29 - 09728064 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-04-28 13:56 - 2014-03-04 17:29 - 09690424 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-04-28 13:56 - 2014-03-04 17:29 - 02956632 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-04-28 13:56 - 2014-03-04 17:29 - 02411976 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-04-28 13:56 - 2014-03-04 17:29 - 01049888 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3233523.dll
2014-04-28 13:56 - 2014-03-04 17:29 - 00894296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3233523.dll
2014-04-28 13:56 - 2014-03-04 17:29 - 00865224 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll
2014-04-28 13:56 - 2014-03-04 17:29 - 00847136 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll
2014-04-28 13:56 - 2013-11-28 16:38 - 00162592 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda32v.sys
2014-04-28 13:56 - 2013-11-28 16:38 - 00028448 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap32.dll
2014-04-28 13:56 - 2013-11-22 11:36 - 00895264 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco3220103.dll
2014-04-28 13:51 - 2014-04-28 13:51 - 00000000 ____D () C:\ProgramData\Sun
2014-04-28 13:51 - 2014-04-28 13:51 - 00000000 ____D () C:\ProgramData\Sun
2014-04-28 13:51 - 2014-04-28 13:51 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-28 13:51 - 2014-04-28 13:51 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-28 13:51 - 2014-04-28 13:51 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-04-28 13:51 - 2014-04-28 13:50 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-04-28 13:50 - 2014-04-28 13:50 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-04-28 13:50 - 2014-04-28 13:50 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-04-28 13:50 - 2014-04-28 13:50 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-04-28 13:50 - 2014-04-28 13:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-28 13:41 - 2014-05-14 09:16 - 00109280 _____ () C:\Users\gr014615\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-28 13:40 - 2014-05-16 12:22 - 00000000 ____D () C:\Users\gr014615
2014-04-28 13:40 - 2014-04-28 13:40 - 00000020 ___SH () C:\Users\gr014615\ntuser.ini
2014-04-28 13:40 - 2014-04-28 13:40 - 00000020 ___SH () C:\Users\gr014615\ntuser.ini
2014-04-28 13:40 - 2009-07-14 07:42 - 00000000 ___RD () C:\Users\gr014615\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-28 13:40 - 2009-07-14 07:37 - 00000000 ___RD () C:\Users\gr014615\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-25 14:15 - 2014-04-25 14:22 - 00035597 _____ () C:\Users\Gr010902\Desktop\Жалби общо застраховане 2014 1во тримесечие КФН.xlsx
2014-04-23 08:59 - 2014-04-23 08:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-04-23 08:59 - 2014-04-23 08:59 - 00000000 ____D () C:\Program Files\7-Zip
 
==================== One Month Modified Files and Folders =======
 
2014-05-16 13:59 - 2014-05-16 13:59 - 00008241 _____ () C:\Users\gr014615\Desktop\FRST.txt
2014-05-16 13:59 - 2014-05-15 21:31 - 00000000 ____D () C:\FRST
2014-05-16 13:45 - 2011-01-04 04:20 - 00000000 ____D () C:\Windows\Panther
2014-05-16 13:42 - 2011-01-03 18:35 - 00331892 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-16 12:43 - 2013-04-01 16:20 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-16 12:25 - 2009-07-14 05:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-05-16 12:24 - 2009-07-14 05:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-05-16 12:22 - 2014-04-28 13:40 - 00000000 ____D () C:\Users\gr014615
2014-05-16 12:22 - 2009-07-14 07:34 - 00015040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-16 12:22 - 2009-07-14 07:34 - 00015040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-16 12:15 - 2011-01-07 22:39 - 00000112 _____ () C:\Windows\system32\config\netlogon.ftl
2014-05-16 12:15 - 2009-07-14 07:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-16 12:14 - 2011-01-03 13:05 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-16 12:14 - 2011-01-03 13:05 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-15 21:08 - 2014-05-13 13:20 - 00000000 ____D () C:\Users\gr014615\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-15 21:08 - 2014-05-07 16:08 - 00000000 ____D () C:\Users\wrks_gr014615
2014-05-15 21:08 - 2013-10-14 16:55 - 00000000 ___RD () C:\Program Files\Skype
2014-05-15 21:08 - 2013-10-14 16:55 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-05-15 21:08 - 2013-01-14 11:26 - 00000000 ____D () C:\Users\Gr010902
2014-05-15 21:08 - 2012-10-04 13:26 - 00000000 ____D () C:\Users\xre000
2014-05-15 21:08 - 2011-03-14 11:22 - 00000000 ____D () C:\Users\wrks_gr014602
2014-05-15 21:08 - 2011-02-23 14:21 - 00000000 ____D () C:\Users\gr012905
2014-05-15 21:08 - 2011-02-23 14:20 - 00000000 ____D () C:\Users\wrks_gr016609
2014-05-15 21:08 - 2011-01-07 16:51 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 21:08 - 2011-01-07 16:51 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 21:08 - 2011-01-07 16:44 - 00000000 ____D () C:\Users\Administrator
2014-05-15 21:08 - 2011-01-03 18:43 - 00000000 ____D () C:\Program Files\Lenovo
2014-05-15 21:08 - 2011-01-03 18:27 - 00000000 ____D () C:\Users\Lenovo
2014-05-15 21:08 - 2011-01-03 13:20 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-05-15 21:08 - 2009-07-14 10:50 - 00000000 ____D () C:\Windows\ShellNew
2014-05-15 21:08 - 2009-07-14 10:50 - 00000000 ____D () C:\Program Files\Windows Journal
2014-05-15 21:08 - 2009-07-14 07:52 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-05-15 21:08 - 2009-07-14 07:52 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-15 21:08 - 2009-07-14 05:37 - 00000000 __RSD () C:\Windows\Media
2014-05-15 21:08 - 2009-07-14 05:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-15 21:08 - 2009-07-14 05:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-05-15 21:08 - 2009-07-14 05:37 - 00000000 ____D () C:\Windows\security
2014-05-15 21:08 - 2009-07-14 05:37 - 00000000 ____D () C:\Windows\schemas
2014-05-15 21:08 - 2009-07-14 05:37 - 00000000 ____D () C:\Windows\rescache
2014-05-15 21:08 - 2009-07-14 05:37 - 00000000 ____D () C:\Windows\L2Schemas
2014-05-15 21:08 - 2009-07-14 05:37 - 00000000 ____D () C:\Program Files\Common Files\System
2014-05-15 21:08 - 2009-07-14 05:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-05-15 21:07 - 2009-07-14 05:37 - 00000000 ____D () C:\Windows\registration
2014-05-15 21:03 - 2013-10-14 16:54 - 00000000 ____D () C:\ProgramData\Skype
2014-05-15 21:03 - 2013-10-14 16:54 - 00000000 ____D () C:\ProgramData\Skype
2014-05-15 21:02 - 2011-01-07 16:52 - 00000000 ____D () C:\Program Files\Oracle
2014-05-15 09:05 - 2014-05-16 13:59 - 01056256 _____ (Farbar) C:\Users\gr014615\Desktop\FRST.exe
2014-05-14 16:36 - 2014-05-14 10:20 - 00000000 ____D () C:\08b2949a8db78a16fd
2014-05-14 16:36 - 2014-05-13 18:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-14 16:36 - 2009-07-14 10:49 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-05-14 16:36 - 2009-07-14 10:49 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-05-14 10:16 - 2014-05-14 10:16 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-14 09:19 - 2014-05-14 09:19 - 00000000 ____D () C:\Users\gr014615\AppData\Local\Broadcom
2014-05-14 09:16 - 2014-04-28 13:41 - 00109280 _____ () C:\Users\gr014615\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-13 16:13 - 2014-05-13 16:13 - 00000000 ____D () C:\Users\gr014615\AppData\Roaming\InstallShield
2014-05-13 15:43 - 2014-05-13 15:39 - 669173640 _____ (Microsoft Corporation) C:\Users\gr014615\Downloads\officesp2010-kb2687455-fullfile-x86-en-usXP2.exe
2014-05-13 15:36 - 2014-05-13 15:36 - 00000000 ____D () C:\Users\gr014615\AppData\Local\WindowsUpdate
2014-05-13 15:14 - 2009-07-14 07:33 - 00408472 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-13 15:11 - 2009-07-14 07:52 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-05-13 15:11 - 2009-07-14 07:52 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2014-05-13 15:11 - 2009-07-14 07:52 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-05-13 15:11 - 2009-07-14 07:52 - 00000000 ____D () C:\Program Files\DVD Maker
2014-05-13 15:11 - 2009-07-14 05:37 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2014-05-13 15:02 - 2014-05-13 15:02 - 00000000 ____D () C:\Windows\system32\SPReview
2014-05-13 14:53 - 2009-07-14 05:05 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2014-05-13 14:21 - 2014-05-13 14:21 - 00000000 ____D () C:\Windows\system32\EventProviders
2014-05-13 14:20 - 2014-05-13 14:19 - 563934504 _____ (Microsoft Corporation) C:\Users\gr014615\Downloads\windows6.1-KB976932-X86.exe
2014-05-13 14:04 - 2009-07-14 05:04 - 00000478 _____ () C:\Windows\win.ini
2014-05-13 13:54 - 2014-05-13 13:54 - 669173640 _____ (Microsoft Corporation) C:\Users\gr014615\Downloads\officesp2010-kb2687455-fullfile-x86-en-usSP2.exe
2014-05-13 13:50 - 2014-05-13 13:50 - 379534904 _____ (Microsoft Corporation) C:\Users\gr014615\Downloads\officesuite2010sp1-kb2460049-x86-fullfile-en-us.exe
2014-05-13 13:47 - 2014-05-13 13:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Configuration Analyzer Tool 1.2
2014-05-13 13:47 - 2014-05-13 13:47 - 00000000 ____D () C:\Program Files\Microsoft OffCAT
2014-05-13 13:45 - 2011-01-07 16:51 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-05-13 13:44 - 2014-05-13 13:44 - 00000000 ____D () C:\Program Files\MSECache
2014-05-13 13:36 - 2014-05-13 13:36 - 00000000 ____D () C:\Users\gr014615\AppData\Roaming\Macromedia
2014-05-13 13:31 - 2013-04-02 09:45 - 00000000 ____D () C:\Windows\Minidump
2014-05-13 13:25 - 2014-05-13 13:20 - 00000000 ____D () C:\Users\gr014615\AppData\Local\NVIDIA Corporation
2014-05-13 13:24 - 2011-01-03 13:04 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-13 13:24 - 2011-01-03 13:04 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-13 13:24 - 2011-01-03 13:02 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-13 13:21 - 2014-05-13 13:19 - 00000000 ____D () C:\Users\gr014615\AppData\Local\NVIDIA
2014-05-13 13:20 - 2014-05-13 13:20 - 00001409 _____ () C:\Users\gr014615\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-13 13:19 - 2014-05-13 13:19 - 00001914 __RSH () C:\Users\gr014615\ntuser.pol
2014-05-13 13:19 - 2014-05-13 13:19 - 00001914 __RSH () C:\Users\gr014615\ntuser.pol
2014-05-13 13:19 - 2014-05-13 13:19 - 00000000 ____D () C:\Users\gr014615\AppData\Local\VirtualStore
2014-05-13 12:03 - 2013-10-14 16:55 - 00000000 ____D () C:\Users\Gr010902\AppData\Roaming\Skype
2014-05-13 09:47 - 2014-05-12 13:19 - 00000000 ____D () C:\Users\Gr010902\Desktop\Life controls
2014-05-08 15:06 - 2013-06-28 10:55 - 00000000 ____D () C:\Users\Gr010902\Desktop\Ekaterina
2014-05-08 14:51 - 2013-04-03 12:03 - 00108824 _____ () C:\Users\Gr010902\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-08 14:46 - 2014-05-08 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-08 14:44 - 2014-05-08 14:44 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-05-08 14:42 - 2014-05-08 14:42 - 00000000 ____D () C:\Windows\PCHEALTH
2014-05-08 14:42 - 2011-01-03 13:02 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-05-08 14:39 - 2014-05-08 14:39 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services
2014-05-08 14:36 - 2014-05-08 14:36 - 00000961 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-08 14:36 - 2014-05-08 14:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-08 14:36 - 2014-05-08 14:36 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-08 14:15 - 2012-11-05 13:08 - 00000000 ____D () C:\Windows\dwrcs
2014-05-07 16:09 - 2014-05-07 16:09 - 00000020 ___SH () C:\Users\wrks_gr014615\ntuser.ini
2014-05-07 16:09 - 2014-05-07 16:09 - 00000020 ___SH () C:\Users\wrks_gr014615\ntuser.ini
2014-04-30 21:29 - 2014-04-28 14:05 - 01081112 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap.dll
2014-04-30 12:17 - 2014-02-06 19:17 - 00000000 ____D () C:\Users\Gr010902\Desktop\access
2014-04-30 11:30 - 2014-04-30 11:30 - 00001539 _____ () C:\Users\Gr010902\Desktop\Apis7.exe - Shortcut.lnk
2014-04-29 11:45 - 2014-04-29 11:45 - 379534904 _____ (Microsoft Corporation) C:\Users\Gr010902\Desktop\officesuite2010sp1-kb2460049-x86-fullfile-en-us.exe
2014-04-29 10:51 - 2014-04-29 10:51 - 00028310 _____ () C:\Users\Gr010902\Desktop\жалби 1во тримесеччие 2014.xlsx
2014-04-29 10:43 - 2013-04-01 16:20 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-04-29 10:43 - 2013-04-01 16:20 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-04-29 09:16 - 2009-07-14 07:53 - 00032636 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-28 17:13 - 2013-02-18 11:50 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-04-28 14:12 - 2014-04-28 14:12 - 00000000 ____D () C:\Users\gr014615\AppData\Local\Microsoft Help
2014-04-28 14:06 - 2014-04-28 14:06 - 00000000 ____D () C:\Users\Gr010902\AppData\Local\NVIDIA Corporation
2014-04-28 14:05 - 2014-04-28 14:05 - 00000000 ____D () C:\Users\Gr010902\AppData\Local\NVIDIA
2014-04-28 14:04 - 2014-04-28 14:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-04-28 13:56 - 2014-04-28 13:56 - 00000000 ____D () C:\Users\gr014615\AppData\Roaming\Adobe
2014-04-28 13:51 - 2014-04-28 13:51 - 00000000 ____D () C:\ProgramData\Sun
2014-04-28 13:51 - 2014-04-28 13:51 - 00000000 ____D () C:\ProgramData\Sun
2014-04-28 13:51 - 2014-04-28 13:51 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-28 13:51 - 2014-04-28 13:51 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-28 13:51 - 2014-04-28 13:51 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-04-28 13:50 - 2014-04-28 13:51 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-04-28 13:50 - 2014-04-28 13:50 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-04-28 13:50 - 2014-04-28 13:50 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-04-28 13:50 - 2014-04-28 13:50 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-04-28 13:50 - 2014-04-28 13:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-28 13:50 - 2011-01-11 16:58 - 00000000 ____D () C:\Program Files\Java
2014-04-28 13:40 - 2014-04-28 13:40 - 00000020 ___SH () C:\Users\gr014615\ntuser.ini
2014-04-28 13:40 - 2014-04-28 13:40 - 00000020 ___SH () C:\Users\gr014615\ntuser.ini
2014-04-28 13:33 - 2009-07-14 05:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-25 14:22 - 2014-04-25 14:15 - 00035597 _____ () C:\Users\Gr010902\Desktop\Жалби общо застраховане 2014 1во тримесечие КФН.xlsx
2014-04-23 08:59 - 2014-04-23 08:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-04-23 08:59 - 2014-04-23 08:59 - 00000000 ____D () C:\Program Files\7-Zip
2014-04-22 09:06 - 2011-01-07 16:42 - 00004234 __RSH () C:\ProgramData\ntuser.pol
2014-04-22 09:06 - 2011-01-07 16:42 - 00004234 __RSH () C:\ProgramData\ntuser.pol
 
Some content of TEMP:
====================
C:\Users\Gr010902\AppData\Local\Temp\SkypeSetup.exe
 
 
==================== Bamital & volsnap Check =================
 
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
 
 
LastRegBack: 2014-05-09 12:37
 
==================== End Of Log ============================

Addition log:

Additional scan result of Farbar Recovery Scan Tool (x86) Version:14-05-2014

Ran by GR014615 at 2014-05-16 14:00:46
Running from C:\Users\gr014615\Desktop
Boot Mode: Safe Mode (minimal)
==========================================================
 
 
==================== Security Center ========================
 
AV: Trend Micro OfficeScan Antivirus (Disabled - Up to date) {68F968AC-2AA0-091D-848C-803E83E35902}
AS: Trend Micro OfficeScan Anti-spyware (Disabled - Up to date) {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
7-Zip 9.20 (HKLM\...\{23170F69-40C1-2701-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.100.57.8 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform)
Cisco EAP-FAST Module (Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (Version: 1.1.6 - Cisco Systems, Inc.) Hidden
CutePDF Writer 2.5 (HKLM\...\CutePDF Writer Installation) (Version:  - )
Energy Management (HKLM\...\{AE1E24C2-E720-42D5-B8E1-48F71A97B4DB}) (Version: 5.3.0.8 - Lenovo)
ETDWare PS/2-x86 7.0.4.18_WHQL (HKLM\...\Elantech) (Version: 7.0.4.18 - ELAN Microelectronics Corp.)
Java 7 Update 55 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java™ 6 Update 12 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216012FF}) (Version: 6.0.120 - Sun Microsystems, Inc.)
Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.100 - Broadcom Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM\...\{90140000-0012-0000-0000-0000000FF1CE}_Office14.STANDARD_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version:  - Microsoft)
Microsoft Office 2010 Service Pack 1 (SP1) (Version:  - Microsoft) Hidden
Microsoft Office Access database engine 2007 (English) (HKLM\...\{90120000-00D1-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1031 - Microsoft Corporation)
Microsoft Office Configuration Analyzer Tool 1.2 (HKLM\...\{3F2A8BF0-392F-4063-80FC-7A637A45DAB9}) (Version: 1.2.1 - Microsoft Corporation)
Microsoft Office Excel MUI (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office IME (Chinese (Simplified)) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office IME (Chinese (Traditional)) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office IME (Japanese) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office IME (Korean) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Arabic) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Basque) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Bulgarian) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Catalan) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Chinese (Simplified)) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Chinese (Traditional)) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Croatian) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Danish) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Dutch) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Estonian) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Finnish) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Galician) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Greek) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Gujarati) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Hebrew) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Hindi) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Hungarian) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Japanese) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Kannada) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Kazakh) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Korean) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Latvian) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Lithuanian) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Marathi) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Norwegian (Bokmål)) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Norwegian (Nynorsk)) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Polish) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Portuguese (Brazil)) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Portuguese (Portugal)) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Punjabi) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Romanian) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Russian) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Serbian (Latin)) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovenian) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Swedish) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Tamil) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Telugu) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Thai) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Turkish) 2010 (Version: 14.0.4999.1028 - Microsoft Corporation) Hidden
Microsoft Office Proof (Ukrainian) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Urdu) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing Kit 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools Kit Compilation 2010 (HKLM\...\Office14.PROOFKIT) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office ProofMUI (English) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Standard 2010 (HKLM\...\Office14.STANDARD) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Standard 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
NVIDIA 3D Vision Driver 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Control Panel 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 2.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0.1 - NVIDIA Corporation)
NVIDIA Graphics Driver 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.151.1095 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.10.0514 - NVIDIA Corporation) Hidden
NVIDIA PhysX System Software 260.99 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 260.99 - NVIDIA Corporation)
NVIDIA ShadowPlay 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Update 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
Oracle JInitiator 1.3.1.18 (HKLM\...\{68249B6E-B714-11D7-88E8-0050DA21757E}) (Version:  - )
Oracle JInitiator 1.3.1.26 (HKLM\...\{CAFECAFE-0013-0001-0126-ABCDEFABCDEF}) (Version:  - )
Realtek Ethernet Controller Driver For Windows Vista and Later (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0009 - Realtek)
SHIELD Streaming (Version: 2.1.108 - NVIDIA Corporation) Hidden
Skype™ 6.9 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.9.106 - Skype Technologies S.A.)
Spelling Dictionaries Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
System Requirements Lab for Intel (HKLM\...\{294BB21B-0091-492F-87D2-A9192DA3E448}) (Version: 4.3.16.0 - Husdawg, LLC)
Trend Micro OfficeScan Client (HKLM\...\{ECEA7878-2100-4525-915D-B09174E36971}) (Version: 10.5 - Trend Micro)
Windows Driver Package - Broadcom Bluetooth  (06/15/2009 6.2.0.9000) (HKLM\...\B7541EC5F72AA713F557569278EB6273725F5607) (Version: 06/15/2009 6.2.0.9000 - Broadcom)
Windows Driver Package - Broadcom Bluetooth  (07/30/2009 6.2.0.9405) (HKLM\...\A6A8668C0A13640CA28FE2A7D9654BE4AE478B13) (Version: 07/30/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
WinRAR archiver (HKLM\...\WinRAR archiver) (Version:  - )
Информационна система "e - Документооборот" (HKLM\...\Информационна система "e - Документооборот") (Version:  - )
 
==================== Restore Points  =========================
 
13-05-2014 11:22:06 Windows 7 Service Pack 1
13-05-2014 13:14:15 Installed EnergyCut
13-05-2014 13:26:48 Removed Energy Management
13-05-2014 14:12:57 Windows Update
14-05-2014 06:26:43 Windows Update
14-05-2014 06:38:45 Windows Update
14-05-2014 13:26:26 Restore Operation
 
==================== Hosts content: ==========================
 
2009-07-14 05:04 - 2009-06-11 00:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
==================== Scheduled Tasks (whitelisted) =============
 
Task: {BAB0042F-76F2-4E11-A5A7-63BA081C65F5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29] (Adobe Systems Incorporated)
Task: {D7703635-469F-4799-9731-5A4B74C048B8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
 
==================== Loaded Modules (whitelisted) =============
 
2013-01-17 12:58 - 2006-09-14 01:20 - 00126464 _____ () C:\Program Files\WinRAR\rarext.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
 
==================== Safe Mode (whitelisted) ===================
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1"
 
==================== EXE Association (whitelisted) =============
 
 
==================== Disabled items from MSCONFIG ==============
 
 
==================== Faulty Device Manager Devices =============
 
Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (05/14/2014 03:41:51 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
 
Error: (05/14/2014 03:41:51 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
 
Error: (05/14/2014 08:47:29 AM) (Source: dwmrcs) (EventID: 110) (User: )
Description: Error: 
DameWare Mini Remote Control
Error setsockopt (IP_DROP_MEMBERSHIP)
 
System Error: 10049
System Message: The requested address is not valid in its context.
 
 (srv 32 bit)
 
Error: (05/14/2014 08:47:02 AM) (Source: dwmrcs) (EventID: 110) (User: )
Description: Error: 
DameWare Mini Remote Control
Error setsockopt (IP_ADD_MEMBERSHIP)
 
System Error: 10065
System Message: A socket operation was attempted to an unreachable host.
 
 (srv 32 bit)
 
Error: (05/14/2014 08:47:02 AM) (Source: dwmrcs) (EventID: 110) (User: )
Description: Error: 
DameWare Mini Remote Control
Error setsockopt (IP_DROP_MEMBERSHIP)
 
System Error: 10049
System Message: The requested address is not valid in its context.
 
 (srv 32 bit)
 
Error: (05/14/2014 08:46:59 AM) (Source: dwmrcs) (EventID: 110) (User: )
Description: Error: 
DameWare Mini Remote Control
Error setsockopt (IP_ADD_MEMBERSHIP)
 
System Error: 10065
System Message: A socket operation was attempted to an unreachable host.
 
 (srv 32 bit)
 
Error: (05/14/2014 08:46:55 AM) (Source: dwmrcs) (EventID: 110) (User: )
Description: Error: 
DameWare Mini Remote Control
Error setsockopt (IP_DROP_MEMBERSHIP)
 
System Error: 10049
System Message: The requested address is not valid in its context.
 
 (srv 32 bit)
 
Error: (05/13/2014 11:09:40 PM) (Source: dwmrcs) (EventID: 110) (User: )
Description: Error: 
DameWare Mini Remote Control
Error setsockopt (IP_ADD_MEMBERSHIP)
 
System Error: 10065
System Message: A socket operation was attempted to an unreachable host.
 
 (srv 32 bit)
 
Error: (05/13/2014 11:09:39 PM) (Source: dwmrcs) (EventID: 110) (User: )
Description: Error: 
DameWare Mini Remote Control
Error setsockopt (IP_DROP_MEMBERSHIP)
 
System Error: 10049
System Message: The requested address is not valid in its context.
 
 (srv 32 bit)
 
Error: (05/13/2014 11:09:38 PM) (Source: dwmrcs) (EventID: 110) (User: )
Description: Error: 
DameWare Mini Remote Control
Error setsockopt (IP_ADD_MEMBERSHIP)
 
System Error: 10065
System Message: A socket operation was attempted to an unreachable host.
 
 (srv 32 bit)
 
 
System errors:
=============
Error: (05/16/2014 02:00:48 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \Device\HarddiskVolumeShadowCopy7.
 
Error: (05/16/2014 01:39:20 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (05/16/2014 01:39:20 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (05/16/2014 01:39:20 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (05/16/2014 01:39:20 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (05/16/2014 01:39:20 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (05/16/2014 01:39:19 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (05/16/2014 01:39:18 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}
 
Error: (05/16/2014 01:39:17 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
 
Error: (05/16/2014 01:39:16 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
 
Microsoft Office Sessions:
=========================
Error: (05/14/2014 03:41:51 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: WmiApRplWmiApRpl8F20300004D070000
 
Error: (05/14/2014 03:41:51 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Performance1637070000000000000000000009030000
 
Error: (05/14/2014 08:47:29 AM) (Source: dwmrcs) (EventID: 110) (User: )
Description: DameWare Mini Remote Control
Error setsockopt (IP_DROP_MEMBERSHIP)
 
System Error: 10049
System Message: The requested address is not valid in its context.
 
 (srv 32 bit)
 
Error: (05/14/2014 08:47:02 AM) (Source: dwmrcs) (EventID: 110) (User: )
Description: DameWare Mini Remote Control
Error setsockopt (IP_ADD_MEMBERSHIP)
 
System Error: 10065
System Message: A socket operation was attempted to an unreachable host.
 
 (srv 32 bit)
 
Error: (05/14/2014 08:47:02 AM) (Source: dwmrcs) (EventID: 110) (User: )
Description: DameWare Mini Remote Control
Error setsockopt (IP_DROP_MEMBERSHIP)
 
System Error: 10049
System Message: The requested address is not valid in its context.
 
 (srv 32 bit)
 
Error: (05/14/2014 08:46:59 AM) (Source: dwmrcs) (EventID: 110) (User: )
Description: DameWare Mini Remote Control
Error setsockopt (IP_ADD_MEMBERSHIP)
 
System Error: 10065
System Message: A socket operation was attempted to an unreachable host.
 
 (srv 32 bit)
 
Error: (05/14/2014 08:46:55 AM) (Source: dwmrcs) (EventID: 110) (User: )
Description: DameWare Mini Remote Control
Error setsockopt (IP_DROP_MEMBERSHIP)
 
System Error: 10049
System Message: The requested address is not valid in its context.
 
 (srv 32 bit)
 
Error: (05/13/2014 11:09:40 PM) (Source: dwmrcs) (EventID: 110) (User: )
Description: DameWare Mini Remote Control
Error setsockopt (IP_ADD_MEMBERSHIP)
 
System Error: 10065
System Message: A socket operation was attempted to an unreachable host.
 
 (srv 32 bit)
 
Error: (05/13/2014 11:09:39 PM) (Source: dwmrcs) (EventID: 110) (User: )
Description: DameWare Mini Remote Control
Error setsockopt (IP_DROP_MEMBERSHIP)
 
System Error: 10049
System Message: The requested address is not valid in its context.
 
 (srv 32 bit)
 
Error: (05/13/2014 11:09:38 PM) (Source: dwmrcs) (EventID: 110) (User: )
Description: DameWare Mini Remote Control
Error setsockopt (IP_ADD_MEMBERSHIP)
 
System Error: 10065
System Message: A socket operation was attempted to an unreachable host.
 
 (srv 32 bit)
 
 
==================== Memory info =========================== 
 
Percentage of memory in use: 16%
Total physical RAM: 2998.85 MB
Available physical RAM: 2510 MB
Total Pagefile: 5995.99 MB
Available Pagefile: 5545.41 MB
Total Virtual: 2047.88 MB
Available Virtual: 1940.75 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:270.35 GB) (Free:223 GB) NTFS
Drive d: () (Fixed) (Total:195.31 GB) (Free:192.67 GB) NTFS
Drive f: (GRMCPRFREO_EN_DVD) (CDROM) (Total:2.33 GB) (Free:0 GB) UDF
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 52A60942)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=270 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=195 GB) - (Type=07 NTFS)
 
==================== End Of Log ============================

ARk log:

 

GMER 2.1.19357 - http://www.gmer.net

Rootkit scan 2014-05-16 14:21:51
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 WDC_WD5000BEVT-24A0RT0 rev.01.01A02 465,76GB
Running: l7duqk7d.exe; Driver: C:\Users\gr014615\AppData\Local\Temp\fflciaog.sys
 
 
---- Devices - GMER 2.1 ----
 
AttachedDevice  \FileSystem\fastfat \Fat                                                                         fltmgr.sys
 
---- Registry - GMER 2.1 ----
 
Reg             HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c44619c04930                      
Reg             HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c44619c06b11                      
Reg             HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c44619c04930 (not active ControlSet)  
Reg             HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c44619c06b11 (not active ControlSet)  
 
---- EOF - GMER 2.1 ----


#10 TB-Psychotic

TB-Psychotic

  • Malware Response Team
  • 6,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:41 PM

Posted 16 May 2014 - 07:43 AM

Full System Scan with Malwarebytes Antimalware

  • If not existing, please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mb3-setup-1878.1878-3.5.1.2522.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to the following:

    • Launch Malwarebytes Anti-Malware
    • A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.

  • Click Finish.


If the program is already installed:
  • Run Malwarebytes Antimalware
  • On the Dashboard, click the 'Update Now >>' link
  • After the update completes, click the 'Scan Now >>' button.
  • Or, on the Dashboard, click the Scan Now >> button.
  • If an update is available, click the Update Now button.
  • A Threat Scan will begin.
  • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
  • In most cases, a restart will be required.
  • Wait for the prompt to restart the computer to appear, then click on Yes.


  • After the restart once you are back at your desktop, open MBAM once more.
  • Click on the History tab > Application Logs.
  • Double click on the scan log which shows the Date and time of the scan just performed.
  • Click 'Copy to Clipboard'
  • Paste the contents of the clipboard into your reply.

 

 

 

Scan with ESET Online Scan

Please go to here to run the online scannner from ESET.

  • Turn off the real time scanner of any existing antivirus program while performing the online scan
  • Tick the box next to YES, I accept the Terms of Use.
  • Click Start
  • When asked, allow the activex control to install
  • Click Start
  • Make sure that the option Remove found threats is unticked
  • Click on Advanced Settings and ensure these options are ticked:
    • Scan for potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth Technology
  • Click Scan
  • Wait for the scan to finish
  • If any threats were found, click the 'List of found threats' , then click Export to text file....
  • Save it to your desktop, then please copy and paste that log as a reply to this topic.


Proud Member of UNITE & TB
 
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)

#11 TB-Psychotic

TB-Psychotic

  • Malware Response Team
  • 6,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:41 PM

Posted 10 June 2014 - 06:26 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.
Proud Member of UNITE & TB
 
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users