Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Win7 been acting funny lately


  • This topic is locked This topic is locked
6 replies to this topic

#1 storiesaretold

storiesaretold

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:02:06 PM

Posted 14 July 2014 - 11:59 AM

Hello,  I'm looking for some help to find the  unwanted effects in my Windows 7 Home Premium 64 bit installation.
 
I tried a to post in another location, but that was the wrong area.  I'm here.
 
Hello and thank you for stopping by to look, help, or participate as I try to find help to help reveal the cause(s).
 
I am having issues with a computer.  The user environment is mainly one user, but the machine is physically accessible by all people in that area.
 
The machine is an e-machines EL1352-43 running Windows 7 Home Premium 64bit (Service Pack 1). 
 
  The most recent issue was being locked out of both of the created accounts.  "Administrator" and "Guest" were disabled.  There is a created admin account and a user account; these were both not accessible via the known passwords.  I was able to scratch the old passwords, but my attempt to access those accounts are thwarted by "Your account has time restrictions that prevent you from logging on at this time."
 
I have enabled the Administrator account and gained access.  I have not gained access to the other two created accounts.  I have read about the need for User Manager for Domains to set logon hours.  I have downloaded usrmgr.msi from Microsoft and installed it on the computer in question via the Administrator account.  When I try to run the application usrmgr.exe
"The program can't start because NETUI0.dll is missing from your computer.  Try reinstalling the program to fix this problem. " 
I found an article that states the need for Remote Server Administration Tools; so I tried to install these tools without the proper research; they do not apply to my version.  However, I did turn off the Parental Controls and gained access to the user account.  Now, I'm stuck with the last account; I went back to the Parental Controls and switched the created Admin account to a limited user account. Now log off the user and back to the Administrator account.  Then I switched the user account back to an Administrator.  :)  I feel as though I have both my accounts and the Administrator account is active for now.
 
Thanks for reading thought all that business... 
 
Now, I am looking for help to investigate the deeper side of things and be sure there are no unwanted network holes, traffic problems, or other exploits.  I have been using netstat, tasklist, cports, task manager, windows firewall, RogueKillerx64, Viper Business Managed AV, dds, FRST64, and the Internet as a resource. 
 
 
Thank you.
For now, the computer in question is resting without an Internet connection and awaits further instructions. 
 
I received a tip to post here with the FRST log attached.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-07-2014 01 (ATTENTION: ====> FRST version is 9 days old and could be outdated)
Ran by Administrator (administrator) on EMPLOYEE-PC on 14-07-2014 11:51:16
Running from C:\Users\Administrator\Desktop\STEP\Step One
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(GFI Software Development Ltd.) C:\Program Files (x86)\Advanced Monitoring Agent\patchman\lnssatt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(GFI Software Ltd.) C:\Program Files (x86)\Advanced Monitoring Agent\webprotection\WebMon.Agent.exe
(Managed Antivirus) C:\Program Files (x86)\Advanced Monitoring Agent\managedav\SBAMTray.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(ThreatTrack Security, Inc.) C:\Program Files (x86)\Advanced Monitoring Agent\managedav\SBAMSvc.exe
(Remote Monitoring) C:\Program Files (x86)\Advanced Monitoring Agent\winagent.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [SBAMTray] => C:\Program Files (x86)\Advanced Monitoring Agent\managedav\SBAMTray.exe [3232152 2013-05-28] (Managed Antivirus)
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-4202764842-948285082-223560448-500\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-4202764842-948285082-223560448-500\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
GroupPolicyUsers\S-1-5-21-4202764842-948285082-223560448-1002\User: Group Policy restriction detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-4202764842-948285082-223560448-1000\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Tcpip\..\Interfaces\{8E2CACAD-D44F-4882-8327-A5261EAB106C}: [NameServer]68.115.71.53,68.113.206.10

FireFox:
========
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

==================== Services (Whitelisted) =================

R2 Advanced Monitoring Agent; C:\Program Files (x86)\Advanced Monitoring Agent\winagent.exe [8331264 2014-06-09] (Remote Monitoring) [File not signed]
R2 gfi_lanss11_attservice; C:\Program Files (x86)\Advanced Monitoring Agent\patchman\lnssatt.exe [118640 2012-07-17] (GFI Software Development Ltd.)
R2 SBAMSvc; C:\Program Files (x86)\Advanced Monitoring Agent\managedav\SBAMSvc.exe [3681016 2013-05-28] (ThreatTrack Security, Inc.)
R2 WebMonAgent; C:\Program Files (x86)\Advanced Monitoring Agent\webprotection\WebMon.Agent.exe [1816920 2014-03-26] (GFI Software Ltd.)

==================== Drivers (Whitelisted) ====================

S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41032 2013-05-23] (ThreatTrack Security)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2014-03-10] (GFI Software)
R3 gfiutil; C:\Windows\System32\drivers\gfiutil.sys [31264 2013-09-04] (ThreatTrack Security)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [30336 2014-07-12] ()
R3 wtismon; C:\Program Files (x86)\Advanced Monitoring Agent\webprotection\Interceptor\wtismon.sys [91824 2014-03-26] (GFI Software)

========================== Drivers MD5 =======================

C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
C:\Windows\system32\drivers\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpu320.sys ==> MD5 is legit
C:\Windows\system32\drivers\afd.sys 79059559E89D06E8B80CE2944BE20228
C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdk8.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\amdppm.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49
C:\Windows\system32\drivers\amdsbs.sys ==> MD5 is legit
C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048
C:\Windows\system32\drivers\appid.sys ==> MD5 is legit
C:\Windows\system32\drivers\arc.sys ==> MD5 is legit
C:\Windows\system32\drivers\arcsas.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
C:\Windows\system32\drivers\bxvbda.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit
C:\Windows\system32\drivers\BrFiltLo.sys ==> MD5 is legit
C:\Windows\system32\drivers\BrFiltUp.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
C:\Windows\system32\drivers\bthmodem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
C:\Windows\system32\drivers\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys ==> MD5 is legit
C:\Windows\system32\drivers\CmBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
C:\Windows\System32\Drivers\cng.sys EBF28856F69CF094A902F884CF989706
C:\Windows\system32\drivers\compbatt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\CompositeBus.sys ==> MD5 is legit
C:\Windows\system32\drivers\crcdisk.sys ==> MD5 is legit
C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
C:\Windows\System32\drivers\disk.sys ==> MD5 is legit
C:\Windows\system32\drivers\drmkaud.sys ==> MD5 is legit
C:\Windows\System32\drivers\dxgkrnl.sys 88612F1CE3BF42256913BF6E61C70D52
C:\Windows\system32\drivers\evbda.sys ==> MD5 is legit
C:\Windows\system32\drivers\elxstor.sys ==> MD5 is legit
C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit
C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit
C:\Windows\system32\drivers\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
C:\Windows\system32\drivers\flpydisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B
C:\Windows\System32\DRIVERS\fvevol.sys 8F6322049018354F45F05A2FD2D4E5E0
C:\Windows\system32\drivers\gagp30kx.sys ==> MD5 is legit
C:\Windows\System32\drivers\gfiark.sys 4EA5458FCA8518344686C543749365B1
C:\Windows\System32\drivers\gfibto.sys 14908F4F9005C29DE8F5587E271390EE
C:\Windows\System32\drivers\gfiutil.sys 16A23FF8621929ADC5B18DCCD5E206EE
C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
C:\Windows\System32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A
C:\Windows\System32\DRIVERS\HDAudBus.sys ==> MD5 is legit
C:\Windows\system32\drivers\HidBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidbth.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit
C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\i8042prt.sys ==> MD5 is legit
C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366
C:\Windows\system32\drivers\iirsp.sys ==> MD5 is legit
C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
C:\Windows\system32\drivers\intelppm.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
C:\Windows\system32\drivers\msiscsi.sys 96BB922A0981BC7432C8CF52B5410FE6
C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ksecdd.sys 353009DEDF918B2A51414F330CF72DEC
C:\Windows\System32\Drivers\ksecpkg.sys 1C2D8E18AA8FD50CD04C15CC27F7F5AB
C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\Windows\system32\drivers\megasas.sys ==> MD5 is legit
C:\Windows\system32\drivers\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit
C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys 1A4F75E63C9FB84B85DFFC6B63FD5404
C:\Windows\System32\DRIVERS\mrxsmb.sys A5D9106A73DC88564C825D317CAC68AC
C:\Windows\System32\DRIVERS\mrxsmb10.sys D711B3C1D5F42C0C2415687BE09FC163
C:\Windows\System32\DRIVERS\mrxsmb20.sys 9423E9D355C8D303E76B8CFBD8A5C30C
C:\Windows\system32\drivers\msahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\drivers\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
C:\Windows\system32\drivers\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Ntfs.sys 1A29A59A4C5BA6F8C85062A613B7E2B2
C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nvm62x64.sys A85B4F2EF3A7304A5399EF0526423040
C:\Windows\System32\DRIVERS\nvlddmkm.sys 8E6247F418B4C8AE9EEB0B532CABCC21
C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
C:\Windows\System32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\system32\drivers\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
C:\Windows\System32\drivers\pciide.sys ==> MD5 is legit
C:\Windows\system32\drivers\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\drivers\processr.sys ==> MD5 is legit
C:\Windows\system32\drivers\ql2300.sys ==> MD5 is legit
C:\Windows\system32\drivers\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\system32\drivers\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpvideominiport.sys 313F68E1A3E6345A4F47A36B07062F34
C:\Windows\System32\Drivers\RDPWD.sys E61608AA35E98999AF9AAEEEA6114B0A
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\sbapifs.sys 8B913D432C6D150CB4CC0328D11E2AEC
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\serenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\serial.sys ==> MD5 is legit
C:\Windows\system32\drivers\sermouse.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\drivers\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\drivers\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\drivers\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B
C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28
C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3
C:\Windows\system32\drivers\stexstor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\swenum.sys ==> MD5 is legit
C:\Windows\System32\drivers\tcpip.sys 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E
C:\Windows\System32\DRIVERS\tcpip.sys 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E
C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\termdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\TrueSight.sys 93AF055021D5FF2AF02D669AEFFEF255
C:\Windows\System32\DRIVERS\tssecsrv.sys 4CE278FC9671BA81A138D70823FCAA09
C:\Windows\System32\drivers\tsusbflt.sys E9981ECE8D894CEF7038FD1D040EB426
C:\Windows\system32\drivers\TsUsbGD.sys AD64450A4ABE076F5CB34CC08EEACB07
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\drivers\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit
C:\Windows\system32\drivers\umpass.sys ==> MD5 is legit
C:\Windows\system32\drivers\usbccgp.sys DCA68B0943D6FA415F0C56C92158A83A
C:\Windows\system32\drivers\usbcir.sys 80B0F7D5CCF86CEB5D402EAAF61FEC31
C:\Windows\System32\DRIVERS\usbehci.sys 18A85013A3E0F7E1755365D287443965
C:\Windows\System32\DRIVERS\usbhub.sys 8D1196CFBB223621F2C67D45710F25BA
C:\Windows\System32\DRIVERS\usbohci.sys 765A92D428A8DB88B960DA5A8D6089DC
C:\Windows\system32\drivers\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6
C:\Windows\system32\drivers\usbuhci.sys ==> MD5 is legit
C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
C:\Windows\system32\drivers\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\drivers\vwifibus.sys ==> MD5 is legit
C:\Windows\system32\drivers\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\drivers\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wmiacpi.sys ==> MD5 is legit
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\WSDPrint.sys 8D918B1DB190A4D9B1753A66FA8C96E8
C:\Windows\system32\drivers\WSDScan.sys 4A2A5C50DD1A63577D3ACA94269FBC7F
C:\Program Files (x86)\Advanced Monitoring Agent\webprotection\Interceptor\wtismon.sys 67FFE1A23583E96BEBA51E33D66D7D1E
C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-14 11:50 - 2014-07-14 11:50 - 00000000 ____D () C:\Users\Administrator\Desktop\STEP
2014-07-12 22:15 - 2014-07-12 22:15 - 00000000 ____D () C:\Users\Administrator\AppData\Local\CrashDumps
2014-07-12 22:14 - 2014-07-14 11:50 - 00063538 _____ () C:\Users\Administrator\Desktop\Console1.msc
2014-07-12 22:14 - 2014-07-12 22:14 - 00124298 _____ () C:\Users\Administrator\Desktop\Console2.msc
2014-07-12 14:00 - 2014-07-12 14:00 - 00000000 ____D () C:\Program Files (x86)\Windows Resource Kits
2014-07-12 13:41 - 2014-07-12 13:41 - 00010059 _____ () C:\Users\Administrator\Desktop\attach.txt
2014-07-12 13:41 - 2014-07-12 13:40 - 00016264 _____ () C:\Users\Administrator\Desktop\dds.txt
2014-07-12 13:39 - 2014-07-12 13:37 - 00688992 ____R (Swearware) C:\Users\Administrator\Desktop\dds.com
2014-07-12 12:13 - 2014-07-12 12:13 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieUserList
2014-07-12 12:13 - 2014-07-12 12:13 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieSiteList
2014-07-12 12:11 - 2014-07-14 11:51 - 00000000 ____D () C:\FRST
2014-07-12 12:10 - 2014-07-12 12:10 - 00030336 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2014-07-12 12:09 - 2014-07-12 12:10 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-07-12 11:33 - 2014-07-12 11:33 - 00108904 _____ () C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-12 11:32 - 2014-07-12 11:32 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Managed Antivirus
2014-07-12 11:31 - 2014-07-12 11:31 - 00001409 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-12 11:31 - 2014-07-12 11:31 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe
2014-07-12 11:30 - 2014-07-12 14:56 - 00000632 __RSH () C:\Users\Administrator\ntuser.pol
2014-07-12 11:30 - 2014-07-12 14:56 - 00000000 ____D () C:\Users\Administrator
2014-07-12 11:30 - 2014-07-12 11:30 - 00000020 ___SH () C:\Users\Administrator\ntuser.ini
2014-07-12 11:30 - 2014-07-02 21:03 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Microsoft Help
2014-07-12 11:30 - 2009-07-13 23:54 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-12 11:30 - 2009-07-13 23:49 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-07 21:09 - 2014-07-07 21:10 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-07 21:09 - 2014-07-07 21:09 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-07-07 21:09 - 2014-07-07 21:09 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-07-07 21:09 - 2014-06-01 17:17 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-07 21:08 - 2014-07-07 21:08 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-07-07 21:08 - 2014-07-07 21:08 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-07-07 21:08 - 2014-07-07 21:08 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-07-07 21:08 - 2014-07-07 21:08 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-07-07 21:08 - 2014-07-07 21:08 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-07-07 21:08 - 2014-07-07 21:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2014-07-07 21:08 - 2014-07-07 21:08 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-07-07 21:08 - 2014-07-07 21:08 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-07-07 21:08 - 2014-07-07 21:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-07-07 21:03 - 2014-07-07 21:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-07-07 21:03 - 2014-07-07 21:03 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-07-07 21:02 - 2014-07-07 21:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-07 21:01 - 2014-07-07 21:01 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-07 21:01 - 2014-07-07 21:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-04 19:23 - 2014-07-04 19:23 - 00013306 _____ () C:\Users\Employee\Desktop\regedit - Shortcut.lnk
2014-07-04 19:15 - 2014-07-04 19:15 - 00013335 _____ () C:\Users\Employee\Desktop\cmd - Shortcut.lnk
2014-07-04 18:10 - 2014-07-12 14:56 - 00001242 __RSH () C:\Users\Employee_2\ntuser.pol
2014-07-04 18:10 - 2014-07-04 18:10 - 00001413 _____ () C:\Users\Employee_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-04 18:10 - 2014-07-04 18:10 - 00000000 ____D () C:\Users\Employee_2\AppData\Roaming\Managed Antivirus
2014-07-04 18:10 - 2014-07-04 18:10 - 00000000 ____D () C:\Users\Employee_2\AppData\Roaming\Adobe
2014-07-04 18:10 - 2014-07-04 18:10 - 00000000 ____D () C:\Users\Employee_2\AppData\Local\VirtualStore
2014-07-04 18:09 - 2014-07-12 14:56 - 00000000 ____D () C:\Users\Employee_2
2014-07-04 18:09 - 2014-07-04 18:09 - 00000020 ___SH () C:\Users\Employee_2\ntuser.ini
2014-07-04 18:09 - 2014-07-02 21:03 - 00000000 ____D () C:\Users\Employee_2\AppData\Local\Microsoft Help
2014-07-04 18:09 - 2009-07-13 23:54 - 00000000 ___RD () C:\Users\Employee_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-04 18:09 - 2009-07-13 23:49 - 00000000 ___RD () C:\Users\Employee_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-04 16:40 - 2014-07-12 22:17 - 00000000 ____D () C:\Users\Employee\Desktop\admintools
2014-07-04 16:26 - 2014-07-04 16:26 - 00000000 ____D () C:\Users\Administrator\Desktop\cports-x64
2014-07-04 16:20 - 2014-07-04 19:29 - 00161689 _____ () C:\Users\Employee\Desktop\Console1.msc
2014-07-04 15:57 - 2014-07-12 15:04 - 00000910 __RSH () C:\Users\Employee\ntuser.pol
2014-07-04 03:30 - 2014-07-04 03:30 - 00001190 _____ () C:\Windows\SysWOW64\ServiceConfig.xml
2014-07-04 03:08 - 2014-07-04 03:08 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-07-03 13:44 - 2014-05-30 04:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-03 13:44 - 2012-02-11 01:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-07-03 13:44 - 2012-02-11 01:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2014-07-03 13:44 - 2011-02-25 01:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-07-03 13:44 - 2011-02-25 00:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-07-03 04:50 - 2013-05-10 00:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-07-03 04:50 - 2013-05-10 00:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-07-03 04:50 - 2013-05-09 23:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-07-03 04:50 - 2013-05-09 23:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-07-03 04:41 - 2014-07-04 03:07 - 00773536 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-07-03 04:24 - 2014-07-03 04:24 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-07-03 04:24 - 2014-07-03 04:24 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-03 04:23 - 2014-07-03 04:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-03 04:23 - 2014-07-03 04:23 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-03 04:23 - 2014-07-03 04:23 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-03 04:23 - 2014-07-03 04:23 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-07-03 04:23 - 2014-07-03 04:23 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-07-03 04:23 - 2014-07-03 04:23 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-07-03 04:23 - 2014-07-03 04:23 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-07-03 04:23 - 2014-07-03 04:23 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00266456 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00240856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-07-03 04:23 - 2014-07-03 04:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-07-03 04:23 - 2014-07-03 04:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-03 04:20 - 2014-07-03 04:27 - 00008819 _____ () C:\Windows\IE11_main.log
2014-07-03 04:06 - 2014-07-04 03:12 - 00296052 _____ () C:\Windows\msxml4-KB973688-enu.LOG
2014-07-03 03:45 - 2014-07-04 03:08 - 00294882 _____ () C:\Windows\msxml4-KB954430-enu.LOG
2014-07-03 03:15 - 2012-07-25 22:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-07-03 03:15 - 2012-07-25 22:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-07-03 03:15 - 2012-07-25 22:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-07-03 03:15 - 2012-07-25 22:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-07-03 03:15 - 2012-07-25 22:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-07-03 03:15 - 2012-07-25 21:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-07-03 03:15 - 2012-07-25 21:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-07-03 03:15 - 2012-06-02 09:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2014-07-02 21:03 - 2014-07-02 21:03 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-07-02 21:03 - 2014-07-02 21:03 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-07-02 03:25 - 2014-01-27 21:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-07-02 03:25 - 2013-10-29 21:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-07-02 03:25 - 2013-10-29 21:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-07-02 03:25 - 2013-03-19 00:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2014-07-02 03:25 - 2012-10-09 13:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2014-07-02 03:25 - 2012-10-09 13:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2014-07-02 03:25 - 2012-10-09 12:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2014-07-02 03:25 - 2012-10-09 12:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2014-07-02 03:25 - 2011-06-16 00:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2014-07-02 03:25 - 2011-06-15 23:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2014-07-02 03:25 - 2011-06-15 05:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2014-07-02 03:25 - 2011-06-15 05:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-07-02 03:25 - 2011-06-15 05:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2014-07-02 03:25 - 2011-06-15 05:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2014-07-02 03:25 - 2011-06-15 03:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2014-07-02 03:25 - 2011-06-15 03:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2014-07-02 03:25 - 2011-06-15 03:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2014-07-02 03:25 - 2011-06-15 03:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2014-07-02 03:25 - 2011-06-15 03:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2014-07-02 03:24 - 2014-04-04 21:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-07-02 03:24 - 2014-04-04 21:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-07-02 03:24 - 2014-03-24 21:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-07-02 03:24 - 2014-03-24 21:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-07-02 03:24 - 2014-01-28 21:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-07-02 03:24 - 2014-01-28 21:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-07-02 03:24 - 2013-12-31 18:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-07-02 03:24 - 2013-12-31 18:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-07-02 03:24 - 2013-11-26 06:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-07-02 03:24 - 2013-11-23 13:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-07-02 03:24 - 2013-11-23 12:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-07-02 03:24 - 2013-10-05 15:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-07-02 03:24 - 2013-10-05 14:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-07-02 03:24 - 2013-07-09 00:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-07-02 03:24 - 2013-07-09 00:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-07-02 03:24 - 2013-07-09 00:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-07-02 03:24 - 2013-07-08 23:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-07-02 03:24 - 2013-07-08 23:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-07-02 03:24 - 2013-07-08 23:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2014-07-02 03:24 - 2013-02-27 01:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-07-02 03:24 - 2013-02-27 00:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-07-02 03:24 - 2011-11-17 01:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-07-02 03:24 - 2011-11-17 00:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2014-07-02 03:24 - 2011-10-26 00:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-07-02 03:24 - 2011-10-25 23:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-07-02 03:24 - 2011-05-04 00:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2014-07-02 03:24 - 2011-05-04 00:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2014-07-02 03:24 - 2011-05-04 00:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2014-07-02 03:24 - 2011-05-04 00:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2014-07-02 03:24 - 2011-05-04 00:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2014-07-02 03:24 - 2011-05-04 00:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2014-07-02 03:24 - 2011-05-04 00:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2014-07-02 03:24 - 2011-05-04 00:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2014-07-02 03:24 - 2011-05-04 00:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2014-07-02 03:24 - 2011-05-03 23:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2014-07-02 03:24 - 2011-05-03 23:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2014-07-02 03:24 - 2011-05-03 23:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2014-07-02 03:24 - 2011-05-03 23:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2014-07-02 03:24 - 2011-05-03 23:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2014-07-02 03:24 - 2011-05-03 23:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2014-07-02 03:24 - 2011-05-03 23:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2014-07-02 03:24 - 2011-05-03 23:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2014-07-02 03:24 - 2011-05-03 23:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2014-07-02 03:23 - 2014-03-26 09:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-07-02 03:23 - 2014-03-26 09:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-07-02 03:23 - 2014-03-26 09:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-07-02 03:23 - 2014-03-26 09:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-07-02 03:23 - 2014-03-26 09:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-07-02 03:23 - 2014-03-26 09:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-07-02 03:23 - 2014-03-26 09:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-07-02 03:23 - 2014-03-26 09:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-07-02 03:23 - 2014-02-06 20:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-02 03:23 - 2013-11-11 21:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-07-02 03:23 - 2013-11-11 21:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-07-02 03:23 - 2013-10-03 21:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-07-02 03:23 - 2013-10-03 21:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-07-02 03:23 - 2013-10-03 21:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-07-02 03:23 - 2013-10-03 21:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-07-02 03:23 - 2013-10-03 20:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-07-02 03:23 - 2013-10-03 20:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-07-02 03:23 - 2013-10-03 20:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-07-02 03:23 - 2013-10-03 20:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-07-02 03:23 - 2013-09-27 20:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-02 03:23 - 2013-08-04 21:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2014-07-02 03:23 - 2011-03-11 01:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2014-07-02 03:23 - 2011-03-11 01:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-07-02 03:23 - 2011-03-11 00:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2014-07-02 03:23 - 2011-03-11 00:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2014-07-02 03:22 - 2013-12-03 21:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-07-02 03:22 - 2013-12-03 21:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-07-02 03:22 - 2013-12-03 21:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-07-02 03:22 - 2013-12-03 21:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-07-02 03:22 - 2013-12-03 21:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-07-02 03:22 - 2013-12-03 21:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-07-02 03:22 - 2013-12-03 21:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-07-02 03:22 - 2013-12-03 21:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-07-02 03:22 - 2013-12-03 21:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-07-02 03:22 - 2013-12-03 21:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-07-02 03:22 - 2013-12-03 21:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-07-02 03:22 - 2013-12-03 21:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-07-02 03:22 - 2013-12-03 21:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-07-02 03:22 - 2013-12-03 21:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-07-02 03:22 - 2013-12-03 20:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-07-02 03:22 - 2013-12-03 20:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-07-02 03:22 - 2013-12-03 20:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-07-02 03:22 - 2013-12-03 20:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-07-02 03:22 - 2013-11-26 20:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-07-02 03:22 - 2013-11-26 20:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-07-02 03:22 - 2013-11-26 20:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-07-02 03:22 - 2013-11-26 20:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-07-02 03:22 - 2013-11-26 20:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-07-02 03:22 - 2013-11-26 20:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-07-02 03:22 - 2013-07-12 05:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-07-02 03:22 - 2013-07-09 00:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-07-02 03:22 - 2013-07-08 23:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-07-02 03:22 - 2013-07-02 23:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-07-02 03:22 - 2013-07-02 23:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-07-02 03:22 - 2013-06-25 17:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-07-02 03:22 - 2013-02-11 23:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-07-02 03:22 - 2012-11-28 17:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-07-02 03:22 - 2012-11-28 17:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-07-02 03:22 - 2012-11-28 17:56 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-07-02 03:22 - 2012-10-03 12:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2014-07-02 03:22 - 2012-10-03 12:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2014-07-02 03:22 - 2012-10-03 12:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2014-07-02 03:22 - 2012-10-03 12:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2014-07-02 03:22 - 2012-10-03 12:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2014-07-02 03:22 - 2012-10-03 12:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-07-02 03:22 - 2012-10-03 11:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2014-07-02 03:22 - 2012-10-03 11:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2014-07-02 03:22 - 2012-10-03 11:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2014-07-02 03:22 - 2012-10-03 11:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-07-02 03:22 - 2012-08-22 13:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-07-02 03:22 - 2012-07-04 15:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2014-07-02 03:22 - 2012-05-01 00:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-07-02 03:22 - 2012-04-26 00:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-07-02 03:22 - 2012-04-26 00:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-07-02 03:22 - 2012-04-26 00:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2014-07-02 03:22 - 2012-01-13 02:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2014-07-02 03:21 - 2014-04-11 21:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-07-02 03:21 - 2014-04-11 21:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-07-02 03:21 - 2014-04-11 21:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-02 03:21 - 2014-04-11 21:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-07-02 03:21 - 2014-04-11 21:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-07-02 03:21 - 2014-04-11 21:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-07-02 03:21 - 2014-04-11 21:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-07-02 03:21 - 2014-04-11 21:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-02 03:21 - 2014-04-11 21:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-02 03:21 - 2014-03-04 04:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-07-02 03:21 - 2014-03-04 04:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-02 03:21 - 2014-03-04 04:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-07-02 03:21 - 2014-03-04 04:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-07-02 03:21 - 2014-03-04 04:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-02 03:21 - 2014-03-04 04:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-02 03:21 - 2014-03-04 04:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-02 03:21 - 2014-03-04 04:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-02 03:21 - 2014-03-04 04:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-07-02 03:21 - 2014-03-04 04:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-07-02 03:21 - 2014-03-04 04:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-07-02 03:21 - 2014-03-04 04:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-07-02 03:21 - 2014-03-04 04:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-07-02 03:21 - 2014-03-04 04:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-07-02 03:21 - 2014-03-04 04:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-07-02 03:21 - 2014-03-04 04:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-02 03:21 - 2014-03-04 04:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-07-02 03:21 - 2014-03-04 04:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-07-02 03:21 - 2014-03-04 04:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-02 03:21 - 2014-03-04 04:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-07-02 03:21 - 2014-03-04 04:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-02 03:21 - 2014-03-04 04:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-02 03:21 - 2014-03-04 04:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-02 03:21 - 2014-03-04 04:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-02 03:21 - 2014-03-04 04:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-07-02 03:21 - 2014-03-04 04:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-07-02 03:21 - 2014-03-04 04:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-07-02 03:21 - 2014-03-04 04:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-07-02 03:21 - 2014-03-04 04:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-07-02 03:21 - 2014-03-04 04:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-07-02 03:21 - 2014-03-04 04:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-02 03:21 - 2014-03-04 04:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-07-02 03:21 - 2013-09-24 21:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-02 03:21 - 2013-09-24 20:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-02 03:21 - 2013-09-07 21:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-07-02 03:21 - 2013-09-07 21:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-07-02 03:21 - 2013-08-01 21:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-07-02 03:21 - 2013-08-01 21:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2014-07-02 03:21 - 2013-08-01 20:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2014-07-02 03:21 - 2013-08-01 19:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-07-02 03:21 - 2013-07-04 07:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-07-02 03:21 - 2013-07-04 07:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-07-02 03:21 - 2013-07-04 07:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-07-02 03:21 - 2013-07-04 06:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-07-02 03:21 - 2013-07-04 06:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-07-02 03:21 - 2013-07-04 05:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-07-02 03:21 - 2013-06-14 23:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-07-02 03:21 - 2012-12-07 08:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-07-02 03:21 - 2012-12-07 08:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-07-02 03:21 - 2012-12-07 07:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-07-02 03:21 - 2012-12-07 07:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2014-07-02 03:21 - 2012-12-07 06:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2014-07-02 03:21 - 2012-12-07 06:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2014-07-02 03:21 - 2012-12-07 06:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2014-07-02 03:21 - 2012-12-07 06:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2014-07-02 03:21 - 2012-12-07 06:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2014-07-02 03:21 - 2012-12-07 06:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2014-07-02 03:21 - 2012-12-07 06:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2014-07-02 03:21 - 2012-12-07 06:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2014-07-02 03:21 - 2012-12-07 06:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2014-07-02 03:21 - 2012-12-07 06:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2014-07-02 03:21 - 2012-12-07 06:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2014-07-02 03:21 - 2012-12-07 06:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2014-07-02 03:21 - 2012-12-07 06:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2014-07-02 03:21 - 2012-12-07 06:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2014-07-02 03:21 - 2012-12-07 05:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2014-07-02 03:21 - 2012-12-07 05:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2014-07-02 03:21 - 2012-12-07 05:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2014-07-02 03:21 - 2012-12-07 05:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2014-07-02 03:21 - 2012-12-07 05:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2014-07-02 03:21 - 2012-12-07 05:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2014-07-02 03:21 - 2012-12-07 05:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2014-07-02 03:21 - 2012-12-07 05:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2014-07-02 03:21 - 2012-12-07 05:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2014-07-02 03:21 - 2012-12-07 05:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2014-07-02 03:21 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2014-07-02 03:21 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2014-07-02 03:21 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2014-07-02 03:21 - 2012-12-07 05:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2014-07-02 03:21 - 2012-11-02 00:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-07-02 03:21 - 2012-11-02 00:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-07-02 03:21 - 2012-08-21 16:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2014-07-02 03:21 - 2012-01-04 05:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2014-07-02 03:21 - 2012-01-04 03:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2014-07-02 03:21 - 2011-12-30 01:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2014-07-02 03:21 - 2011-12-30 00:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2014-07-02 03:21 - 2011-08-17 00:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2014-07-02 03:21 - 2011-08-17 00:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2014-07-02 03:21 - 2011-08-16 23:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2014-07-02 03:21 - 2011-08-16 23:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2014-07-02 03:21 - 2011-04-28 22:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-07-02 03:21 - 2011-04-28 22:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-07-02 03:21 - 2011-04-28 22:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-07-02 03:21 - 2011-04-09 01:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-07-02 03:21 - 2011-04-09 00:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-07-02 03:20 - 2014-02-03 21:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-07-02 03:20 - 2014-02-03 21:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-07-02 03:20 - 2014-02-03 21:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-07-02 03:20 - 2014-02-03 21:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-07-02 03:20 - 2014-02-03 21:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-07-02 03:20 - 2013-08-28 21:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-07-02 03:20 - 2013-08-28 21:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-07-02 03:20 - 2013-08-28 21:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-07-02 03:20 - 2013-08-28 20:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-07-02 03:20 - 2013-08-28 20:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-07-02 03:20 - 2013-08-28 20:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-07-02 03:20 - 2013-07-25 21:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-07-02 03:20 - 2013-07-25 20:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2014-07-02 03:20 - 2013-04-26 00:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-07-02 03:20 - 2013-04-25 23:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2014-07-02 03:20 - 2012-04-07 07:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-07-02 03:20 - 2012-04-07 06:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-07-02 03:20 - 2012-03-17 02:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-07-02 03:20 - 2011-02-05 12:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-07-02 03:20 - 2011-02-05 12:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2014-07-02 03:20 - 2011-02-05 12:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2014-07-02 03:20 - 2011-02-05 12:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2014-07-02 03:20 - 2011-02-05 12:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-07-02 03:20 - 2011-02-05 12:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-07-02 03:20 - 2011-02-05 12:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-07-02 03:19 - 2014-03-04 04:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-07-02 03:19 - 2014-03-04 04:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-07-02 03:19 - 2014-03-04 04:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-07-02 03:19 - 2014-03-04 04:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-07-02 03:19 - 2014-03-04 04:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-07-02 03:19 - 2014-03-04 04:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-07-02 03:19 - 2014-03-04 04:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-07-02 03:19 - 2014-03-04 04:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-07-02 03:19 - 2014-03-04 04:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-07-02 03:19 - 2014-03-04 03:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-07-02 03:19 - 2014-03-04 03:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-07-02 03:19 - 2014-02-03 21:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-07-02 03:19 - 2014-02-03 21:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-07-02 03:19 - 2014-01-23 21:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-07-02 03:19 - 2013-08-01 21:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 21:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 20:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-07-02 03:19 - 2013-08-01 19:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 19:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 19:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 19:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2014-07-02 03:19 - 2013-08-01 07:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-07-02 03:19 - 2013-05-13 00:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2014-07-02 03:19 - 2013-05-12 22:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-07-02 03:19 - 2013-05-12 22:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2014-07-02 03:19 - 2013-05-12 22:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2014-07-02 03:19 - 2013-05-10 00:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2014-07-02 03:19 - 2013-05-09 22:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2014-07-02 03:19 - 2013-04-10 01:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-07-02 03:19 - 2013-01-24 01:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-07-02 03:19 - 2012-07-04 17:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-07-02 03:19 - 2012-07-04 17:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-07-02 03:19 - 2012-07-04 17:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2014-07-02 03:19 - 2012-07-04 16:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2014-07-02 03:19 - 2012-07-04 16:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2014-07-02 03:19 - 2012-05-14 00:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-07-02 03:19 - 2012-05-05 03:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-07-02 03:19 - 2012-05-05 02:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-07-02 03:19 - 2011-08-27 00:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-07-02 03:19 - 2011-08-27 00:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2014-07-02 03:19 - 2011-08-26 23:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-07-02 03:19 - 2011-08-26 23:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2014-07-02 03:19 - 2011-05-03 00:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-07-02 03:19 - 2011-05-02 23:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-07-02 03:19 - 2011-03-11 01:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2014-07-02 03:19 - 2011-03-11 01:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2014-07-02 03:19 - 2011-03-11 01:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2014-07-02 03:19 - 2011-03-11 01:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2014-07-02 03:19 - 2011-03-11 01:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2014-07-02 03:19 - 2011-03-11 01:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-07-02 03:19 - 2011-03-11 01:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2014-07-02 03:19 - 2011-03-11 00:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2014-07-02 03:19 - 2011-03-11 00:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2014-07-02 03:19 - 2011-03-10 23:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-07-02 03:19 - 2011-02-18 05:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2014-07-02 03:19 - 2011-02-18 00:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2014-07-02 03:19 - 2011-02-12 06:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2014-07-02 03:19 - 2011-02-03 06:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-07-02 03:09 - 2013-10-11 21:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-07-02 03:09 - 2013-10-11 21:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-07-02 03:09 - 2013-10-11 21:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-07-02 03:09 - 2013-10-11 21:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-07-02 03:09 - 2013-10-11 21:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-07-02 03:08 - 2013-08-27 20:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-07-02 03:06 - 2011-11-19 09:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-07-02 03:06 - 2011-11-19 09:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-07-01 17:49 - 2014-07-04 16:15 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-01 17:49 - 2013-01-31 04:25 - 06207776 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-07-01 17:49 - 2013-01-31 04:25 - 03300640 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-07-01 17:49 - 2013-01-31 04:24 - 02558240 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-07-01 17:49 - 2013-01-31 04:24 - 00878368 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-07-01 17:49 - 2013-01-31 04:24 - 00118560 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-07-01 17:49 - 2013-01-31 04:24 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-07-01 17:48 - 2014-07-04 16:15 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-07-01 17:48 - 2014-07-01 17:48 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-07-01 17:48 - 2013-02-19 22:32 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-07-01 17:48 - 2013-02-19 22:32 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-07-01 17:39 - 2012-06-02 17:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-07-01 17:39 - 2012-06-02 17:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-07-01 17:39 - 2012-06-02 17:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-07-01 17:39 - 2012-06-02 17:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-07-01 17:39 - 2012-06-02 17:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-07-01 17:39 - 2012-06-02 17:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-07-01 17:39 - 2012-06-02 17:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-07-01 17:39 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-07-01 17:39 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-07-01 17:20 - 2014-07-01 17:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-07-01 17:19 - 2014-07-01 17:19 - 00000000 ____D () C:\Windows\PCHEALTH
2014-07-01 17:18 - 2014-07-01 17:18 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-07-01 17:17 - 2014-07-01 17:17 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-07-01 17:17 - 2014-07-01 17:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-07-01 17:16 - 2014-07-07 21:02 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-01 17:16 - 2014-07-01 17:19 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-07-01 17:16 - 2014-07-01 17:16 - 00000000 __RHD () C:\MSOCache
2014-07-01 17:16 - 2014-07-01 17:16 - 00000000 ____D () C:\Users\Employee\AppData\Local\Microsoft Help
2014-07-01 12:05 - 2014-07-04 15:49 - 00108904 _____ () C:\Users\Employee\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-01 11:59 - 2014-07-01 11:59 - 00000000 ___HD () C:\ProgramData\CanonIJFAX
2014-06-28 16:19 - 2014-06-28 16:19 - 00000000 ___HD () C:\ProgramData\CanonIJMyPrinter
2014-06-28 15:35 - 2014-06-28 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX920 series User Registration
2014-06-28 15:35 - 2014-06-28 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX920 series Manual
2014-06-28 15:35 - 2014-06-28 15:35 - 00000000 ____D () C:\Program Files\Canon
2014-06-28 15:34 - 2014-06-28 15:34 - 00000000 ____D () C:\Windows\SysWOW64\STRING
2014-06-28 15:29 - 2014-06-28 15:29 - 00000000 ___HD () C:\ProgramData\CanonIJEGV
2014-06-28 13:39 - 2014-06-28 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2014-06-28 13:39 - 2014-06-28 13:39 - 00000000 ____D () C:\ProgramData\CanonIJWSpt
2014-06-28 13:38 - 2014-06-28 13:38 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-06-28 13:37 - 2014-06-28 13:37 - 00000000 ___HD () C:\Program Files\CanonBJ
2014-06-28 13:37 - 2014-06-28 13:37 - 00000000 ____D () C:\Windows\system32\STRING
2014-06-28 13:37 - 2012-09-21 05:00 - 00303104 _____ (CANON INC.) C:\Windows\system32\CNCALBL.DLL
2014-06-28 13:37 - 2012-09-20 05:00 - 00390656 _____ (CANON INC.) C:\Windows\system32\CNMLMBL.DLL
2014-06-28 13:37 - 2012-07-31 03:48 - 00359936 _____ (CANON INC.) C:\Windows\system32\CNMN6PPM.DLL
2014-06-28 13:37 - 2012-07-31 03:48 - 00039424 _____ (CANON INC.) C:\Windows\system32\CNMN6UI.DLL
2014-06-28 13:34 - 2014-07-01 12:06 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-06-28 13:34 - 2014-06-28 13:34 - 00000000 ___HD () C:\ProgramData\CanonIJETV
2014-06-28 13:28 - 2014-06-28 15:36 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-06-28 13:21 - 2014-06-28 13:21 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-28 13:21 - 2014-06-28 13:21 - 00000000 ____D () C:\Users\Employee\AppData\Roaming\Mozilla
2014-06-28 13:21 - 2014-06-28 13:21 - 00000000 ____D () C:\Users\Employee\AppData\Local\Mozilla
2014-06-28 13:21 - 2014-06-28 13:21 - 00000000 ____D () C:\ProgramData\Mozilla
2014-06-28 13:21 - 2014-06-28 13:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-28 13:21 - 2014-06-28 13:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-17 08:27 - 2014-06-17 08:27 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-17 08:27 - 2014-06-17 08:27 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-17 08:27 - 2014-06-17 08:27 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-06-17 08:27 - 2014-06-17 08:27 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-06-17 08:25 - 2014-06-17 08:25 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-06-17 08:25 - 2014-06-17 08:25 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-06-17 08:25 - 2014-06-17 08:25 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-06-17 08:25 - 2014-06-17 08:25 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-06-17 08:25 - 2014-06-17 08:25 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-06-17 08:25 - 2014-06-17 08:25 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-06-17 08:24 - 2014-06-17 08:24 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-06-17 08:24 - 2014-06-17 08:24 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-06-17 08:23 - 2014-06-17 08:23 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-06-17 08:23 - 2014-06-17 08:23 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-06-17 08:20 - 2014-06-17 08:20 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-06-17 08:20 - 2014-06-17 08:20 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-06-17 08:18 - 2014-06-17 08:18 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-06-17 08:18 - 2014-06-17 08:18 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2014-06-17 08:16 - 2014-06-17 08:16 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2014-06-17 08:16 - 2014-06-17 08:16 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2014-06-17 08:16 - 2014-06-17 08:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-06-17 08:13 - 2014-06-17 08:13 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-06-17 08:13 - 2014-06-17 08:13 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-06-17 08:13 - 2014-06-17 08:13 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-06-17 08:13 - 2014-06-17 08:13 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2014-06-17 08:13 - 2014-06-17 08:13 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2014-06-17 08:13 - 2014-06-17 08:13 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2014-06-17 08:13 - 2014-06-17 08:13 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-06-17 08:13 - 2014-06-17 08:13 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-06-17 08:13 - 2014-06-17 08:13 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2014-06-17 08:13 - 2014-06-17 08:13 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-06-17 08:11 - 2014-06-17 08:11 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2014-06-17 08:11 - 2014-06-17 08:11 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2014-06-17 08:10 - 2014-06-17 08:10 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-06-17 08:10 - 2014-06-17 08:10 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-06-17 08:10 - 2014-06-17 08:10 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2014-06-17 08:10 - 2014-06-17 08:10 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2014-06-17 08:10 - 2014-06-17 08:10 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2014-06-17 08:10 - 2014-06-17 08:10 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2014-06-16 17:42 - 2014-06-16 14:48 - 00000000 ____D () C:\Windows\Panther
2014-06-16 16:45 - 2014-06-16 16:45 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-06-16 16:45 - 2014-06-16 16:45 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-06-16 16:44 - 2014-06-16 16:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-06-16 16:17 - 2013-09-04 14:57 - 00031264 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiutil.sys
2014-06-16 16:17 - 2013-05-23 08:39 - 00041032 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiark.sys
2014-06-16 16:15 - 2014-06-16 16:15 - 00000000 ____D () C:\Users\Employee\AppData\Roaming\Managed Antivirus
2014-06-16 16:15 - 2014-06-16 16:15 - 00000000 ____D () C:\ProgramData\Managed Antivirus
2014-06-16 15:22 - 2014-07-14 06:04 - 00000000 ____D () C:\Windows\Patches
2014-06-16 15:16 - 2014-06-16 15:16 - 00000000 ____D () C:\ProgramData\GFI
2014-06-16 15:16 - 2014-03-10 12:16 - 00047496 _____ (GFI Software) C:\Windows\system32\sbbd.exe
2014-06-16 15:16 - 2014-03-10 12:16 - 00014456 _____ (GFI Software) C:\Windows\system32\Drivers\gfibto.sys
2014-06-16 15:15 - 2014-06-16 16:13 - 00001102 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9 Host.lnk
2014-06-16 15:15 - 2014-06-16 15:15 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-06-16 15:12 - 2014-07-14 11:46 - 00000000 ____D () C:\Program Files (x86)\Advanced Monitoring Agent
2014-06-16 15:12 - 2014-06-16 15:12 - 00001278 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Monitoring Agent.lnk
2014-06-16 15:09 - 2014-06-16 15:09 - 00000000 ____D () C:\Users\Employee\AppData\Roaming\Adobe
2014-06-16 15:06 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-06-16 15:04 - 2014-06-16 15:04 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-06-16 15:02 - 2014-06-16 15:02 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-06-16 15:01 - 2014-06-16 15:01 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-06-16 15:01 - 2014-06-16 15:01 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-06-16 15:00 - 2014-06-16 15:06 - 00009693 _____ () C:\Windows\IE10_main.log
2014-06-16 14:50 - 2014-06-11 15:01 - 00002731 _____ () C:\ACRSYS_V2.1_Cert.xrm-ms
2014-06-16 14:49 - 2014-07-14 10:26 - 01420354 _____ () C:\Windows\WindowsUpdate.log
2014-06-16 14:48 - 2014-07-12 15:04 - 00000000 ____D () C:\Users\Employee
2014-06-16 14:48 - 2014-07-03 05:45 - 00001413 _____ () C:\Users\Employee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-16 14:48 - 2014-06-16 14:48 - 00000020 ___SH () C:\Users\Employee\ntuser.ini
2014-06-16 14:48 - 2014-06-16 14:48 - 00000000 __SHD () C:\Recovery
2014-06-16 14:48 - 2014-06-16 14:48 - 00000000 ____D () C:\Users\Employee\AppData\Local\VirtualStore
2014-06-16 14:48 - 2009-07-13 23:54 - 00000000 ___RD () C:\Users\Employee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-16 14:48 - 2009-07-13 23:49 - 00000000 ___RD () C:\Users\Employee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

2014-07-14 11:51 - 2014-07-12 12:11 - 00000000 ____D () C:\FRST
2014-07-14 11:50 - 2014-07-14 11:50 - 00000000 ____D () C:\Users\Administrator\Desktop\STEP
2014-07-14 11:50 - 2014-07-12 22:14 - 00063538 _____ () C:\Users\Administrator\Desktop\Console1.msc
2014-07-14 11:46 - 2014-06-16 15:12 - 00000000 ____D () C:\Program Files (x86)\Advanced Monitoring Agent
2014-07-14 10:26 - 2014-06-16 14:49 - 01420354 _____ () C:\Windows\WindowsUpdate.log
2014-07-14 06:04 - 2014-06-16 15:22 - 00000000 ____D () C:\Windows\Patches
2014-07-12 22:25 - 2009-07-13 23:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-12 22:25 - 2009-07-13 23:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-12 22:21 - 2009-07-14 00:13 - 00781298 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-12 22:17 - 2014-07-04 16:40 - 00000000 ____D () C:\Users\Employee\Desktop\admintools
2014-07-12 22:17 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-12 22:17 - 2009-07-13 23:51 - 00025701 _____ () C:\Windows\setupact.log
2014-07-12 22:15 - 2014-07-12 22:15 - 00000000 ____D () C:\Users\Administrator\AppData\Local\CrashDumps
2014-07-12 22:14 - 2014-07-12 22:14 - 00124298 _____ () C:\Users\Administrator\Desktop\Console2.msc
2014-07-12 15:04 - 2014-07-04 15:57 - 00000910 __RSH () C:\Users\Employee\ntuser.pol
2014-07-12 15:04 - 2014-06-16 14:48 - 00000000 ____D () C:\Users\Employee
2014-07-12 14:56 - 2014-07-12 11:30 - 00000632 __RSH () C:\Users\Administrator\ntuser.pol
2014-07-12 14:56 - 2014-07-12 11:30 - 00000000 ____D () C:\Users\Administrator
2014-07-12 14:56 - 2014-07-04 18:10 - 00001242 __RSH () C:\Users\Employee_2\ntuser.pol
2014-07-12 14:56 - 2014-07-04 18:09 - 00000000 ____D () C:\Users\Employee_2
2014-07-12 14:00 - 2014-07-12 14:00 - 00000000 ____D () C:\Program Files (x86)\Windows Resource Kits
2014-07-12 13:41 - 2014-07-12 13:41 - 00010059 _____ () C:\Users\Administrator\Desktop\attach.txt
2014-07-12 13:40 - 2014-07-12 13:41 - 00016264 _____ () C:\Users\Administrator\Desktop\dds.txt
2014-07-12 13:37 - 2014-07-12 13:39 - 00688992 ____R (Swearware) C:\Users\Administrator\Desktop\dds.com
2014-07-12 12:13 - 2014-07-12 12:13 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieUserList
2014-07-12 12:13 - 2014-07-12 12:13 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieSiteList
2014-07-12 12:10 - 2014-07-12 12:10 - 00030336 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2014-07-12 12:10 - 2014-07-12 12:09 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-07-12 11:33 - 2014-07-12 11:33 - 00108904 _____ () C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-12 11:32 - 2014-07-12 11:32 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Managed Antivirus
2014-07-12 11:31 - 2014-07-12 11:31 - 00001409 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-12 11:31 - 2014-07-12 11:31 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe
2014-07-12 11:31 - 2009-07-13 23:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-07-12 11:30 - 2014-07-12 11:30 - 00000020 ___SH () C:\Users\Administrator\ntuser.ini
2014-07-07 23:03 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\rescache
2014-07-07 22:28 - 2009-07-13 22:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-07 22:25 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-07-07 21:10 - 2014-07-07 21:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-07 21:09 - 2014-07-07 21:09 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-07-07 21:09 - 2014-07-07 21:09 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-07-07 21:08 - 2014-07-07 21:08 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-07-07 21:08 - 2014-07-07 21:08 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-07-07 21:08 - 2014-07-07 21:08 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-07-07 21:08 - 2014-07-07 21:08 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-07-07 21:08 - 2014-07-07 21:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2014-07-07 21:08 - 2014-07-07 21:08 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-07-07 21:08 - 2014-07-07 21:08 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-07-07 21:08 - 2014-07-07 21:08 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-07-07 21:08 - 2014-07-07 21:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-07-07 21:03 - 2014-07-07 21:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-07-07 21:03 - 2014-07-07 21:03 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-07-07 21:02 - 2014-07-07 21:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-07 21:02 - 2014-07-01 17:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-07 21:01 - 2014-07-07 21:01 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-07 21:01 - 2014-07-07 21:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-04 19:29 - 2014-07-04 16:20 - 00161689 _____ () C:\Users\Employee\Desktop\Console1.msc
2014-07-04 19:23 - 2014-07-04 19:23 - 00013306 _____ () C:\Users\Employee\Desktop\regedit - Shortcut.lnk
2014-07-04 19:15 - 2014-07-04 19:15 - 00013335 _____ () C:\Users\Employee\Desktop\cmd - Shortcut.lnk
2014-07-04 18:10 - 2014-07-04 18:10 - 00001413 _____ () C:\Users\Employee_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-04 18:10 - 2014-07-04 18:10 - 00000000 ____D () C:\Users\Employee_2\AppData\Roaming\Managed Antivirus
2014-07-04 18:10 - 2014-07-04 18:10 - 00000000 ____D () C:\Users\Employee_2\AppData\Roaming\Adobe
2014-07-04 18:10 - 2014-07-04 18:10 - 00000000 ____D () C:\Users\Employee_2\AppData\Local\VirtualStore
2014-07-04 18:09 - 2014-07-04 18:09 - 00000020 ___SH () C:\Users\Employee_2\ntuser.ini
2014-07-04 16:49 - 2011-04-12 03:28 - 00000000 ____D () C:\Windows\ShellNew
2014-07-04 16:49 - 2009-07-14 00:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-07-04 16:49 - 2009-07-14 00:32 - 00000000 ____D () C:\Program Files\Microsoft Games
2014-07-04 16:26 - 2014-07-04 16:26 - 00000000 ____D () C:\Users\Administrator\Desktop\cports-x64
2014-07-04 16:15 - 2014-07-01 17:49 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-04 16:15 - 2014-07-01 17:48 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-07-04 15:57 - 2009-07-13 22:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-07-04 15:49 - 2014-07-01 12:05 - 00108904 _____ () C:\Users\Employee\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-04 03:30 - 2014-07-04 03:30 - 00001190 _____ () C:\Windows\SysWOW64\ServiceConfig.xml
2014-07-04 03:12 - 2014-07-03 04:06 - 00296052 _____ () C:\Windows\msxml4-KB973688-enu.LOG
2014-07-04 03:08 - 2014-07-04 03:08 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-07-04 03:08 - 2014-07-03 03:45 - 00294882 _____ () C:\Windows\msxml4-KB954430-enu.LOG
2014-07-04 03:07 - 2014-07-03 04:41 - 00773536 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-07-03 05:45 - 2014-06-16 14:48 - 00001413 _____ () C:\Users\Employee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-03 05:38 - 2009-07-13 23:45 - 00415992 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-03 05:36 - 2009-07-13 22:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-07-03 05:35 - 2009-07-14 00:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-07-03 05:35 - 2009-07-14 00:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-07-03 05:33 - 2010-11-20 22:47 - 00019216 _____ () C:\Windows\PFRO.log
2014-07-03 04:27 - 2014-07-03 04:20 - 00008819 _____ () C:\Windows\IE11_main.log
2014-07-03 04:24 - 2014-07-03 04:24 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-03 04:24 - 2014-07-03 04:24 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-07-03 04:24 - 2014-07-03 04:24 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-03 04:23 - 2014-07-03 04:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-03 04:23 - 2014-07-03 04:23 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-03 04:23 - 2014-07-03 04:23 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-03 04:23 - 2014-07-03 04:23 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-07-03 04:23 - 2014-07-03 04:23 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-07-03 04:23 - 2014-07-03 04:23 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-07-03 04:23 - 2014-07-03 04:23 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-07-03 04:23 - 2014-07-03 04:23 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00266456 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00240856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-07-03 04:23 - 2014-07-03 04:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-07-03 04:23 - 2014-07-03 04:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-07-03 04:23 - 2014-07-03 04:23 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-07-03 04:23 - 2014-07-03 04:23 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-02 21:03 - 2014-07-12 11:30 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Microsoft Help
2014-07-02 21:03 - 2014-07-04 18:09 - 00000000 ____D () C:\Users\Employee_2\AppData\Local\Microsoft Help
2014-07-02 21:03 - 2014-07-02 21:03 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-07-02 21:03 - 2014-07-02 21:03 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-07-01 17:49 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\Help
2014-07-01 17:48 - 2014-07-01 17:48 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-07-01 17:20 - 2014-07-01 17:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-07-01 17:19 - 2014-07-01 17:19 - 00000000 ____D () C:\Windows\PCHEALTH
2014-07-01 17:19 - 2014-07-01 17:16 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-07-01 17:18 - 2014-07-01 17:18 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-07-01 17:18 - 2009-07-13 22:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-07-01 17:17 - 2014-07-01 17:17 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-07-01 17:17 - 2014-07-01 17:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-07-01 17:16 - 2014-07-01 17:16 - 00000000 __RHD () C:\MSOCache
2014-07-01 17:16 - 2014-07-01 17:16 - 00000000 ____D () C:\Users\Employee\AppData\Local\Microsoft Help
2014-07-01 12:06 - 2014-06-28 13:34 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-07-01 11:59 - 2014-07-01 11:59 - 00000000 ___HD () C:\ProgramData\CanonIJFAX
2014-06-28 16:19 - 2014-06-28 16:19 - 00000000 ___HD () C:\ProgramData\CanonIJMyPrinter
2014-06-28 16:19 - 2009-07-14 00:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-06-28 15:36 - 2014-06-28 13:28 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-06-28 15:35 - 2014-06-28 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX920 series User Registration
2014-06-28 15:35 - 2014-06-28 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX920 series Manual
2014-06-28 15:35 - 2014-06-28 15:35 - 00000000 ____D () C:\Program Files\Canon
2014-06-28 15:35 - 2014-06-28 13:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2014-06-28 15:34 - 2014-06-28 15:34 - 00000000 ____D () C:\Windows\SysWOW64\STRING
2014-06-28 15:29 - 2014-06-28 15:29 - 00000000 ___HD () C:\ProgramData\CanonIJEGV
2014-06-28 13:39 - 2014-06-28 13:39 - 00000000 ____D () C:\ProgramData\CanonIJWSpt
2014-06-28 13:38 - 2014-06-28 13:38 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-06-28 13:37 - 2014-06-28 13:37 - 00000000 ___HD () C:\Program Files\CanonBJ
2014-06-28 13:37 - 2014-06-28 13:37 - 00000000 ____D () C:\Windows\system32\STRING
2014-06-28 13:34 - 2014-06-28 13:34 - 00000000 ___HD () C:\ProgramData\CanonIJETV
2014-06-28 13:21 - 2014-06-28 13:21 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-28 13:21 - 2014-06-28 13:21 - 00000000 ____D () C:\Users\Employee\AppData\Roaming\Mozilla
2014-06-28 13:21 - 2014-06-28 13:21 - 00000000 ____D () C:\Users\Employee\AppData\Local\Mozilla
2014-06-28 13:21 - 2014-06-28 13:21 - 00000000 ____D () C:\ProgramData\Mozilla
2014-06-28 13:21 - 2014-06-28 13:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-28 13:21 - 2014-06-28 13:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-17 08:27 - 2014-06-17 08:27 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-17 08:27 - 2014-06-17 08:27 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-17 08:27 - 2014-06-17 08:27 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-06-17 08:27 - 2014-06-17 08:27 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-06-17 08:25 - 2014-06-17 08:25 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-06-17 08:25 - 2014-06-17 08:25 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-06-17 08:25 - 2014-06-17 08:25 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-06-17 08:25 - 2014-06-17 08:25 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-06-17 08:25 - 2014-06-17 08:25 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-06-17 08:25 - 2014-06-17 08:25 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-06-17 08:25 - 2014-06-17 08:25 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-06-17 08:24 - 2014-06-17 08:24 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-06-17 08:24 - 2014-06-17 08:24 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-06-17 08:23 - 2014-06-17 08:23 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-06-17 08:23 - 2014-06-17 08:23 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-06-17 08:22 - 2014-06-17 08:22 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-06-17 08:20 - 2014-06-17 08:20 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-06-17 08:20 - 2014-06-17 08:20 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-06-17 08:18 - 2014-06-17 08:18 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-06-17 08:18 - 2014-06-17 08:18 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2014-06-17 08:16 - 2014-06-17 08:16 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2014-06-17 08:16 - 2014-06-17 08:16 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2014-06-17 08:16 - 2014-06-17 08:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-06-17 08:13 - 2014-06-17 08:13 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-06-17 08:13 - 2014-06-17 08:13 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-06-17 08:13 - 2014-06-17 08:13 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-06-17 08:13 - 2014-06-17 08:13 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2014-06-17 08:13 - 2014-06-17 08:13 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2014-06-17 08:13 - 2014-06-17 08:13 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2014-06-17 08:13 - 2014-06-17 08:13 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-06-17 08:13 - 2014-06-17 08:13 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-06-17 08:13 - 2014-06-17 08:13 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2014-06-17 08:13 - 2014-06-17 08:13 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-06-17 08:11 - 2014-06-17 08:11 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2014-06-17 08:11 - 2014-06-17 08:11 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2014-06-17 08:11 - 2014-06-17 08:11 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2014-06-17 08:10 - 2014-06-17 08:10 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-06-17 08:10 - 2014-06-17 08:10 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-06-17 08:10 - 2014-06-17 08:10 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2014-06-17 08:10 - 2014-06-17 08:10 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2014-06-17 08:10 - 2014-06-17 08:10 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2014-06-17 08:10 - 2014-06-17 08:10 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2014-06-16 17:42 - 2009-07-14 00:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-06-16 17:42 - 2009-07-14 00:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-06-16 16:45 - 2014-06-16 16:45 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-06-16 16:45 - 2014-06-16 16:45 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-06-16 16:45 - 2009-07-13 23:46 - 00002790 _____ () C:\Windows\DtcInstall.log
2014-06-16 16:45 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-06-16 16:44 - 2014-06-16 16:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-06-16 16:15 - 2014-06-16 16:15 - 00000000 ____D () C:\Users\Employee\AppData\Roaming\Managed Antivirus
2014-06-16 16:15 - 2014-06-16 16:15 - 00000000 ____D () C:\ProgramData\Managed Antivirus
2014-06-16 16:13 - 2014-06-16 15:15 - 00001102 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9 Host.lnk
2014-06-16 15:16 - 2014-06-16 15:16 - 00000000 ____D () C:\ProgramData\GFI
2014-06-16 15:15 - 2014-06-16 15:15 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-06-16 15:12 - 2014-06-16 15:12 - 00001278 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Monitoring Agent.lnk
2014-06-16 15:09 - 2014-06-16 15:09 - 00000000 ____D () C:\Users\Employee\AppData\Roaming\Adobe
2014-06-16 15:06 - 2014-06-16 15:00 - 00009693 _____ () C:\Windows\IE10_main.log
2014-06-16 15:06 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-06-16 15:06 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-06-16 15:06 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-06-16 15:06 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-06-16 15:04 - 2014-06-16 15:04 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-06-16 15:02 - 2014-06-16 15:02 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-06-16 15:02 - 2014-06-16 15:02 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-06-16 15:01 - 2014-06-16 15:01 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-06-16 15:01 - 2014-06-16 15:01 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-06-16 15:01 - 2009-07-14 00:32 - 00000000 ____D () C:\Windows\system32\restore
2014-06-16 14:48 - 2014-06-16 17:42 - 00000000 ____D () C:\Windows\Panther
2014-06-16 14:48 - 2014-06-16 14:48 - 00000020 ___SH () C:\Users\Employee\ntuser.ini
2014-06-16 14:48 - 2014-06-16 14:48 - 00000000 __SHD () C:\Recovery
2014-06-16 14:48 - 2014-06-16 14:48 - 00000000 ____D () C:\Users\Employee\AppData\Local\VirtualStore

Some content of TEMP:
====================
C:\Users\Employee\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Employee\AppData\Local\Temp\ose00000.exe
C:\Users\Employee\AppData\Local\Temp\uninstall.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

==================== BCD ================================

Windows Boot Manager
--------------------
identifier {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale en-US
inherit {globalsettings}
default {current}
resumeobject {7c1af5a0-f5a7-11e3-877c-d85bd847e593}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30

Windows Boot Loader
-------------------
identifier {current}
device partition=C:
path \Windows\system32\winload.exe
description Windows 7
locale en-US
inherit {bootloadersettings}
recoverysequence {7c1af5a2-f5a7-11e3-877c-d85bd847e593}
recoveryenabled Yes
osdevice partition=C:
systemroot \Windows
resumeobject {7c1af5a0-f5a7-11e3-877c-d85bd847e593}
nx OptIn

Windows Boot Loader
-------------------
identifier {7c1af5a2-f5a7-11e3-877c-d85bd847e593}
device ramdisk=[C:]\Recovery\7c1af5a2-f5a7-11e3-877c-d85bd847e593\Winre.wim,{7c1af5a3-f5a7-11e3-877c-d85bd847e593}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\7c1af5a2-f5a7-11e3-877c-d85bd847e593\Winre.wim,{7c1af5a3-f5a7-11e3-877c-d85bd847e593}
systemroot \windows
nx OptIn
winpe Yes

Resume from Hibernate
---------------------
identifier {7c1af5a0-f5a7-11e3-877c-d85bd847e593}
device partition=C:
path \Windows\system32\winresume.exe
description Windows Resume Application
locale en-US
inherit {resumeloadersettings}
filedevice partition=C:
filepath \hiberfil.sys
debugoptionenabled No

Windows Memory Tester
---------------------
identifier {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Windows Memory Diagnostic
locale en-US
inherit {globalsettings}
badmemoryaccess Yes

EMS Settings
------------
identifier {emssettings}
bootems Yes

Debugger Settings
-----------------
identifier {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200

RAM Defects
-----------
identifier {badmemory}

Global Settings
---------------
identifier {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}

Boot Loader Settings
--------------------
identifier {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}

Hypervisor Settings
-------------------
identifier {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200

Resume Loader Settings
----------------------
identifier {resumeloadersettings}
inherit {globalsettings}

Device options
--------------
identifier {7c1af5a3-f5a7-11e3-877c-d85bd847e593}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\7c1af5a2-f5a7-11e3-877c-d85bd847e593\boot.sdi



LastRegBack: 2014-07-12 13:31

==================== End Of Log ============================

Attached Files

  • Attached File  FRST.txt   150.94KB   4 downloads

Edited by nasdaq, 18 July 2014 - 09:27 AM.
FRST log posted.


BC AdBot (Login to Remove)

 


m

#2 nasdaq

nasdaq

  • Malware Response Team
  • 38,264 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:06 PM

Posted 18 July 2014 - 09:29 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.
 
start

GroupPolicyUsers\S-1-5-21-4202764842-948285082-223560448-1002\User: Group Policy restriction detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-4202764842-948285082-223560448-1000\User: Group Policy restriction detected <======= ATTENTION

End
Save the files as fixlist.txt into the same folder as FRST

Run FRST and click Fix only once and wait.

Restart the computer normally to reset the registry.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
p.s.
If the SecurityCheck program fails to run for any reason, run it as an Administrator.

If the site is busy or not available use this mirror site:
http://www.bleepingcomputer.com/download/securitycheck/
===

How is the computer running now?

#3 storiesaretold

storiesaretold
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:02:06 PM

Posted 18 July 2014 - 11:24 AM

nasdaq,

 

thank you for your attention and help with this machine. 

 

The computer is running "ok"; however this is not online and I will not put this computer online until I have the go ahead from you. 

 

I did execute FRST > fixlist.txt as you requested and the machine rebooted normally.  Next I executed Security Check. 

 

Here is the output.

 

 

 Results of screen317's Security Check version 0.99.85 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled! 
Managed Antivirus Managed Antivirus  
 Antivirus out of date! 
`````````Anti-malware/Other Utilities Check:`````````
 Mozilla Firefox (30.0)
````````Process Check: objlist.exe by Laurent```````` 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````

 

 

Thank you, and I await further instructions.

 

 



#4 nasdaq

nasdaq

  • Malware Response Team
  • 38,264 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:06 PM

Posted 18 July 2014 - 01:31 PM


The only way to find out if you still have difficulties on the web is to try ti.


Managed Antivirus Managed Antivirus
Antivirus out of date!


Take care of this. If you want a free application download Microsoft Security Essentials.

http://windows.microsoft.com/en-CA/windows/security-essentials-download

Install, and run it.

====

Keep me posted.

#5 nasdaq

nasdaq

  • Malware Response Team
  • 38,264 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:06 PM

Posted 24 July 2014 - 07:25 AM

If all is well.

To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe.
http://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/
===

#6 storiesaretold

storiesaretold
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:02:06 PM

Posted 24 July 2014 - 08:42 AM

Thank you for the guide.  I did a little watching with the computer connected to a standalone router (no Internet) and decided to wipe the OS and start over.  I appreciate your help.  Thank you.



#7 nasdaq

nasdaq

  • Malware Response Team
  • 38,264 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:06 PM

Posted 24 July 2014 - 12:32 PM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users