I Can't Download Anything

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • dscape
    PCHF Member
    • Feb 2017
    • 10

    #1

    I Can't Download Anything

    I am currently having problems downloading anything. I’m on Windows XP.
    I tried using both Firefox and IE but neither will download anything. I also tried turning the firewall off but that wasn’t the problem either. My antivirus doesn’t scan files being downloaded so that’s a flop also. I ran Hijack This and cleaned up things there. I checked running processes, and ran malware/spyware scans. I even tried a system restore from 3 weeks ago but that didn’t help either so I undid the restore. I even tried rebooting my cable modem. I also tried resetting IE and Firefox but that didn’t help either. At this point I’m out of ideas.
    One thing to note is that I CAN download things using torrent software.

    Here, I’ll give you a log from Hijack This:
    Logfile of Trend Micro HijackThis v2.0.5
    Scan saved at 6:41:05 PM, on 2/13/2017
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    FIREFOX: 47.0.2 (x86 en-US)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\Program Files\IObit\Advanced SystemCare\ASCService.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\BlueSprig\JetBoost\JetBoostTray.exe
    C:\Program Files\IObit\Advanced SystemCare\RealTimeProtector.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\anon\My Documents\Downloads\HiJack This 2.0.5\HijackThis.exe

    O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll
    O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll
    O4 - HKCU..\Run: [Advanced SystemCare 10] “C:\Program Files\IObit\Advanced SystemCare\ASCTray.exe” /auto
    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpda teService.exe
    O23 - Service: Advanced SystemCare Service 10 (AdvancedSystemCareService10) - IObit - C:\Program Files\IObit\Advanced SystemCare\ASCService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
    O23 - Service: IObit Uninstaller Service (IObitUnSvr) - IObit - C:\Program Files\IObit\IObit Uninstaller\IUService.exe
    O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe


    End of file - 2252 bytes
  • jmarket
    PCHF Owner
    • Jan 2015
    • 7635

    #2
    Hi dscape and welcome to PCHF

    The following entries are junkware and need to be removed:
    Code:
    O4 - HKCU\..\Run: [Advanced SystemCare 10] "C:\Program Files\IObit\Advanced SystemCare\ASCTray.exe" /auto
    O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
    O23 - Service: IObit Uninstaller Service (IObitUnSvr) - IObit - C:\Program Files\IObit\IObit Uninstaller\IUService.exe
    Please remove them using the Add/Remove Programs feature in Control Panel

    After doing so, please do the following:

    Please download the FRST 32 bit or FRST 64bit version to suit your operating system. It is important FRST is downloaded to your desktop.

    If you are unsure if your operating system is 32 or 64 Bit please go HERE.

    Once downloaded right click the FRST desktop icon and select “Run as administrator” from the menu"



    If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
    FRST will open with two dialogue boxes, accept the disclaimer.


    [ol]
    [li]Accept the default whitelist options,[/li][li]If the additions.txt options box is not checked please select it. [/li]
    [li]Then select Scan[/li][/ol]



    Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.



    Please Copy and Paste the contents of these logs in your next post for review by our Security Team

    Comment

    • dscape
      PCHF Member
      • Feb 2017
      • 10

      #3
      EDIT

      holy cow IE does download things now. what the heck? I’ll run that FRST right now

      Comment

      • dscape
        PCHF Member
        • Feb 2017
        • 10

        #4
        OK here we go.

        FRST log
        Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-02-2017
        Ran by anon (administrator) on FUYHJ-1DEA3B72C (13-02-2017 19:12:45)
        Running from C:\Documents and Settings\anon\Desktop
        Loaded Profiles: anon (Available Profiles: anon & Talus)
        Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
        Internet Explorer Version 8 (Default browser: FF)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

        ==================== Processes (Whitelisted) =================

        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

        (IObit) C:\Program Files\IObit\Advanced SystemCare\ASCService.exe
        (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
        (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
        (BlueSprig) C:\Program Files\BlueSprig\JetBoost\JetBoostTray.exe
        (IObit) C:\Program Files\IObit\Advanced SystemCare\RealTimeProtector.exe
        (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
        (BitTorrent Inc.) C:\Documents and Settings\anon\Application Data\uTorrent\uTorrent.exe
        (BitTorrent Inc.) C:\Documents and Settings\anon\Application Data\uTorrent\updates\3.4.9_43295\utorrentie.exe
        (BitTorrent Inc.) C:\Documents and Settings\anon\Application Data\uTorrent\updates\3.4.9_43295\utorrentie.exe
        (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
        (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

        ==================== Registry (Whitelisted) ====================

        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

        Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2017-01-15] (ATI Technologies Inc.)
        Winlogon\Notify\WgaLogon:
        HKU\S-1-5-21-1202660629-1409082233-1606980848-1003...\Policies\Explorer: [NolowDiskSpaceChecks] 1

        ==================== Internet (Whitelisted) ====================

        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

        Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
        Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62
        Tcpip..\Interfaces{8660C4EF-6BE7-44AC-A140-E0FA7635DDF4}: [DhcpNameServer] 209.18.47.61 209.18.47.62
        [HEADING=1]Internet Explorer:[/HEADING]
        HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
        HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
        HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
        HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
        HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
        HKU\S-1-5-21-1202660629-1409082233-1606980848-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        BHO: Java™ Plug-In SSV Helper → {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} → C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-01-24] (Oracle Corporation)
        BHO: Java™ Plug-In 2 SSV Helper → {DBC80044-A445-435b-BC74-9C25C1C588A9} → C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-24] (Oracle Corporation)
        [HEADING=1]FireFox:[/HEADING]
        FF ProfilePath: C:\Documents and Settings\anon\Application Data\Mozilla\Firefox\Profiles\2xveium2.default-1487025261312 [2017-02-13]
        FF DefaultSearchEngine: C:\Documents and Settings\anon\Application Data\Mozilla\Firefox\Profiles\2xveium2.default-1487025261312 → DuckDuckGo
        FF Homepage: C:\Documents and Settings\anon\Application Data\Mozilla\Firefox\Profiles\2xveium2.default-1487025261312 → hxxps://www.startpage.com/
        FF HKLM...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
        FF Extension: (Microsoft .NET Framework Assistant) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2017-01-15] [not signed]
        FF Plugin: @adobe.com/FlashPlayer → C:\WINDOWS\system32\Macromed\Flash\NPSWF32_24_0_0_ 194.dll [2017-01-15] ()
        FF Plugin: @java.com/DTPlugin,version=11.121.2 → C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1 .dll [2017-01-24] (Oracle Corporation)
        FF Plugin: @java.com/JavaPlugin,version=11.121.2 → C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-24] (Oracle Corporation)
        FF Plugin: @microsoft.com/WPF,version=3.5 → c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
        FF Plugin: @videolan.org/vlc,version=2.2.4 → C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)

        ==================== Services (Whitelisted) ====================

        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        R2 6to4; C:\WINDOWS\System32\6to4svc.dll [100864 2010-02-11] (Microsoft Corporation)
        R2 AdvancedSystemCareService10; C:\Program Files\IObit\Advanced SystemCare\ASCService.exe [462624 2016-12-12] (IObit)
        S2 IMFservice; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [1600800 2016-10-21] (IObit)
        S2 IObitUnSvr; C:\Program Files\IObit\IObit Uninstaller\IUService.exe [360736 2016-10-28] (IObit)
        S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [3046688 2016-07-29] (IObit)

        ===================== Drivers (Whitelisted) ======================

        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        R3 ALCXWDM; C:\WINDOWS\System32\drivers\ALCXWDM.SYS [4122368 2017-01-15] (Realtek Semiconductor Corp.)
        R3 FET5X86V; C:\WINDOWS\System32\DRIVERS\fetnd5bv.sys [48128 2011-04-01] (VIA Technologies, Inc. )
        S3 FETND5BV; C:\WINDOWS\System32\DRIVERS\fetnd5bv.sys [48128 2011-04-01] (VIA Technologies, Inc. )
        S3 FETNDIS; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [27165 2001-08-17] (VIA Technologies, Inc. )
        R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [23840 2017-01-15] (REALiX™)
        S4 IMFFilter; C:\Program Files\IObit\IObit Malware Fighter\Drivers\wxp_x86\IMFFilter.sys [246464 2016-04-01] (IObit)
        R3 KMWDFILTER; C:\WINDOWS\System32\DRIVERS\KMWDFILTER.sys [17408 2008-10-09] (Windows (R) Codename Longhorn DDK provider)
        S3 nm; C:\WINDOWS\System32\DRIVERS\NMnt.sys [40320 2008-04-13] (Microsoft Corporation)
        S3 RegFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\wxp_x86\regfilter.sys [31776 2016-01-11] (IObit.com)
        R0 SmartDefragDriver; C:\WINDOWS\System32\Drivers\SmartDefragDriver.sys [15824 2016-03-22] (IObit)
        R1 Tcpip6; C:\WINDOWS\System32\DRIVERS\tcpip6.sys [226880 2010-02-11] (Microsoft Corporation)
        R0 viaagp1; C:\WINDOWS\System32\DRIVERS\viaagp1.sys [27904 2017-01-24] (VIA Technologies, Inc.)
        R0 videX32; C:\WINDOWS\System32\DRIVERS\videX32.sys [13976 2017-01-15] (VIA Technologies, Inc.)
        R0 xfilt; C:\WINDOWS\System32\DRIVERS\xfilt.sys [23192 2017-01-15] (VIA Technologies, Inc.)
        S4 IntelIde; no ImagePath
        U1 WS2IFSL; no ImagePath

        ==================== NetSvcs (Whitelisted) ===================

        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========

        (If an entry is included in the fixlist, the file/folder will be moved.)

        2017-02-13 19:12 - 2017-02-13 19:13 - 00007452 _____ C:\Documents and Settings\anon\Desktop\FRST.txt
        2017-02-13 19:12 - 2017-02-13 19:12 - 00000000 ____D C:\FRST
        2017-02-13 19:11 - 2017-02-13 19:11 - 01763328 _____ (Farbar) C:\Documents and Settings\anon\Desktop\FRST.exe
        2017-02-13 18:16 - 2017-02-13 18:16 - 00001374 _____ C:\WINDOWS\imsins.BAK
        2017-02-13 18:15 - 2017-02-13 18:15 - 00000000 ____D C:\WINDOWS\LastGood
        2017-02-13 17:50 - 2017-02-13 18:11 - 00000272 _____ C:\WINDOWS\Tasks\JetBoost_AutoUpdate.job
        2017-02-13 17:36 - 2017-02-13 17:36 - 00000000 ____D C:\Documents and Settings\anon\Desktop\Old Firefox Data
        2017-02-13 16:33 - 2017-02-13 16:35 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\AVAST Software
        2017-02-13 16:00 - 2017-02-13 16:00 - 00000000 ___RD C:\Documents and Settings\Talus\My Documents\My Pictures
        2017-02-13 16:00 - 2017-02-13 16:00 - 00000000 ___RD C:\Documents and Settings\Talus\My Documents\My Music
        2017-02-13 16:00 - 2017-02-13 16:00 - 00000000 ___RD C:\Documents and Settings\Talus\My Documents
        2017-02-13 16:00 - 2017-02-13 16:00 - 00000000 ____D C:\Documents and Settings\Talus\Local Settings\Temp
        2017-02-13 16:00 - 2017-02-13 16:00 - 00000000 ____D C:\Documents and Settings\Talus\Application Data\IObit
        2017-02-13 15:58 - 2017-02-13 15:58 - 00000000 ____D C:\Documents and Settings\anon\Start Menu\Programs\Razor
        2017-02-13 15:58 - 2017-02-13 15:58 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows
        2017-02-13 15:58 - 2017-02-13 15:58 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\mIRC
        2017-02-13 15:56 - 2017-02-13 15:56 - 00000000 ____D C:\Program Files\Easy Macro Recorder
        2017-02-13 15:56 - 2017-02-13 15:56 - 00000000 ____D C:\Documents and Settings\anon\Start Menu\Programs\Ultima Online Renaissance
        2017-02-13 15:56 - 2017-02-13 15:56 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Easy Macro Recorder
        2017-02-13 15:24 - 2017-02-13 15:31 - 00000000 ____D C:\Documents and Settings\Talus\Application Data\Mozilla
        2017-02-13 15:24 - 2017-02-13 15:24 - 00000000 ____D C:\Documents and Settings\Talus\Local Settings\Application Data\Mozilla
        2017-02-13 15:22 - 2017-02-13 17:49 - 00000000 ____D C:\Documents and Settings\Talus
        2017-02-13 15:22 - 2017-02-13 15:26 - 00000178 ___SH C:\Documents and Settings\Talus\ntuser.ini
        2017-02-13 15:22 - 2017-02-13 15:22 - 00000803 _____ C:\Documents and Settings\Talus\Start Menu\Programs\Internet Explorer.lnk
        2017-02-13 15:22 - 2017-02-13 15:22 - 00000788 _____ C:\Documents and Settings\Talus\Start Menu\Programs\Windows Media Player.lnk
        2017-02-13 15:22 - 2017-02-13 15:22 - 00000738 _____ C:\Documents and Settings\Talus\Start Menu\Programs\Outlook Express.lnk
        2017-02-13 15:22 - 2017-02-13 15:22 - 00000000 __SHD C:\Documents and Settings\Talus\IETldCache
        2017-02-13 15:22 - 2017-01-15 12:55 - 00001599 _____ C:\Documents and Settings\Talus\Start Menu\Programs\Remote Assistance.lnk
        2017-02-13 15:22 - 2008-04-13 22:42 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpns.dll
        2017-02-09 11:18 - 2017-02-13 18:11 - 00000258 _____ C:\WINDOWS\Tasks\JetBoost_Startup.job
        2017-02-08 18:41 - 2017-02-08 18:41 - 00094208 _____ C:\WINDOWS\Minidump\Mini020817-01.dmp
        2017-02-08 18:41 - 2017-02-08 18:41 - 00000000 ____D C:\WINDOWS\Minidump
        2017-02-08 11:05 - 2017-02-08 11:05 - 00057364 _____ C:\Documents and Settings\anon\Desktop\ATL3_synth_guide.txt
        2017-02-01 20:59 - 2017-02-01 20:59 - 00000626 _____ C:\Documents and Settings\All Users\Desktop\mIRC.lnk
        2017-02-01 20:53 - 2017-02-13 16:00 - 00000000 ____D C:\Documents and Settings\anon\Application Data\mIRC
        2017-02-01 20:53 - 2017-02-13 15:58 - 00000000 ____D C:\Program Files\mIRC
        2017-01-31 13:57 - 2016-03-25 14:33 - 00111392 _____ (IObit) C:\WINDOWS\system32\IObitSmartDefragExtension.dll
        2017-01-31 13:57 - 2016-03-22 11:02 - 00015824 _____ (IObit) C:\WINDOWS\system32\Drivers\SmartDefragDriver.sys
        2017-01-31 13:56 - 2017-02-13 15:58 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Smart Defrag
        2017-01-31 13:56 - 2016-03-22 11:02 - 00033192 _____ (IObit) C:\WINDOWS\system32\SmartDefragBootTime.exe
        2017-01-31 09:53 - 2017-01-31 09:53 - 00000656 _____ C:\Documents and Settings\anon\Desktop\Razor.lnk
        2017-01-30 22:00 - 2017-02-13 15:56 - 00000000 ____D C:\Program Files\Mono-3.2.3
        2017-01-30 21:47 - 2010-01-19 14:48 - 00152848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Comdlg32.ocx
        2017-01-30 21:47 - 1998-06-24 00:00 - 00067376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SYSINFO.OCX
        2017-01-30 07:10 - 2017-01-30 07:10 - 00000577 _____ C:\Documents and Settings\anon\Desktop\UO Renaissance (Without Razor).lnk
        2017-01-30 07:07 - 2017-02-13 17:16 - 00000000 ____D C:\Ultima Online
        2017-01-30 07:07 - 2017-01-30 07:07 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\InstallMate
        2017-01-29 12:58 - 2017-01-29 12:58 - 00031832 _____ (Phoenix Technologies) C:\WINDOWS\system32\Drivers\DrvAgent32.sys
        2017-01-29 12:58 - 2017-01-29 12:58 - 00000000 ____D C:\Documents and Settings\anon\Local Settings\Application Data\eSupport.com
        2017-01-29 12:56 - 2017-01-29 12:56 - 00000000 ____D C:\Program Files\CPUID
        2017-01-29 12:56 - 2017-01-29 12:56 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\CPUID
        2017-01-29 12:45 - 2017-01-29 12:45 - 00000000 ____D C:\WINDOWS\pss
        2017-01-26 05:28 - 2017-01-26 05:28 - 00000000 ____D C:\SIMANT
        2017-01-26 01:04 - 2017-01-26 01:04 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Winamp
        2017-01-26 01:03 - 2017-01-26 01:19 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Winamp
        2017-01-26 01:03 - 2017-01-26 01:04 - 00000000 ____D C:\Program Files\Winamp
        2017-01-26 01:03 - 2011-03-04 14:44 - 02095600 ____N (Sonic Solutions) C:\WINDOWS\system32\pxsfs.dll
        2017-01-26 01:03 - 2011-03-04 14:44 - 00698864 ____N (Sonic Solutions) C:\WINDOWS\system32\px.dll
        2017-01-26 01:03 - 2011-03-04 14:44 - 00571888 ____N (Sonic Solutions) C:\WINDOWS\system32\pxdrv.dll
        2017-01-26 01:03 - 2011-03-04 14:44 - 00440816 ____N (Sonic Solutions) C:\WINDOWS\system32\pxwave.dll
        2017-01-26 01:03 - 2011-03-04 14:44 - 00219632 ____N (Sonic Solutions) C:\WINDOWS\system32\pxmas.dll
        2017-01-26 01:03 - 2011-03-04 14:44 - 00133616 ____N (Sonic Solutions) C:\WINDOWS\system32\pxafs.dll
        2017-01-26 01:03 - 2011-03-04 14:44 - 00126448 ____N (Sonic Solutions) C:\WINDOWS\system32\pxinsi64.exe
        2017-01-26 01:03 - 2011-03-04 14:44 - 00123888 ____N (Sonic Solutions) C:\WINDOWS\system32\pxcpyi64.exe
        2017-01-26 01:03 - 2011-03-04 14:44 - 00100848 ____N (Sonic Solutions) C:\WINDOWS\system32\vxblock.dll
        2017-01-26 01:03 - 2011-03-04 14:44 - 00072176 ____N (Sonic Solutions) C:\WINDOWS\system32\pxhpinst.exe
        2017-01-26 01:03 - 2011-03-04 14:44 - 00068592 ____N (Sonic Solutions) C:\WINDOWS\system32\pxinsa64.exe
        2017-01-26 01:03 - 2011-03-04 14:44 - 00068080 ____N (Sonic Solutions) C:\WINDOWS\system32\pxcpya64.exe
        2017-01-26 01:03 - 2011-03-04 14:44 - 00059888 ____N (Sonic Solutions) C:\WINDOWS\system32\pxwma.dll
        2017-01-26 01:03 - 2011-03-04 14:44 - 00045648 ____N (Sonic Solutions) C:\WINDOWS\system32\Drivers\PxHelp20.sys
        2017-01-26 01:03 - 2011-03-04 14:44 - 00009200 ____N (Sonic Solutions) C:\WINDOWS\system32\Drivers\cdralw2k.sys
        2017-01-26 01:03 - 2011-03-04 14:44 - 00009072 ____N (Sonic Solutions) C:\WINDOWS\system32\Drivers\cdr4_xp.sys
        2017-01-26 00:54 - 2017-01-27 06:28 - 00000000 ____D C:\Documents and Settings\anon\Desktop\Audio
        2017-01-24 09:58 - 2017-01-24 09:58 - 00000000 ____D C:\Program Files\Common Files\Java
        2017-01-24 09:57 - 2017-01-24 09:57 - 00000000 ____D C:\Documents and Settings\anon\Local Settings\Application Data\Sun
        2017-01-24 09:57 - 2017-01-24 09:57 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Sun
        2017-01-24 09:57 - 2017-01-24 09:57 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Java
        2017-01-24 09:57 - 2017-01-24 09:56 - 00160256 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
        2017-01-24 09:57 - 2017-01-24 09:56 - 00095808 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
        2017-01-24 09:55 - 2017-01-24 09:59 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Oracle
        2017-01-24 09:54 - 2017-01-24 09:54 - 00000000 ____D C:\Program Files\Java
        2017-01-24 07:38 - 2017-02-13 15:56 - 00000000 ____D C:\Program Files\UOAM
        2017-01-24 07:38 - 2017-01-24 07:38 - 00000650 _____ C:\Documents and Settings\anon\Desktop\UO Auto-Map.lnk
        2017-01-24 07:38 - 2017-01-24 07:38 - 00000000 ____D C:\Documents and Settings\anon\Start Menu\Programs\UO Auto-Map
        2017-01-24 06:30 - 2017-02-13 17:16 - 00000000 ____D C:\Program Files\Razor
        2017-01-24 02:47 - 2017-02-13 17:41 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
        2017-01-24 02:38 - 2017-02-13 15:56 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Package Cache
        2017-01-24 02:31 - 2017-01-24 02:30 - 00027904 _____ (VIA Technologies, Inc.) C:\WINDOWS\system32\Drivers\VIAAGP1.SYS
        2017-01-24 01:38 - 2017-01-24 01:38 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
        2017-01-23 23:05 - 2017-01-23 23:05 - 00000000 ____D C:\Documents and Settings\All Users\Application Data{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705}
        2017-01-23 23:03 - 2017-01-23 23:03 - 00000000 ____D C:\Documents and Settings\anon\Application Data\ProductData
        2017-01-23 23:01 - 2017-01-23 23:01 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\IObit Malware Fighter
        2017-01-23 00:52 - 2004-01-22 00:35 - 00020480 _____ C:\WINDOWS\system32\igrping.dll
        2017-01-23 00:10 - 2017-01-23 00:10 - 00000000 ____D C:\Documents and Settings\anon\My Documents\EA Games
        2017-01-22 20:05 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
        2017-01-22 20:05 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
        2017-01-22 20:05 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
        2017-01-22 20:05 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
        2017-01-22 20:05 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
        2017-01-22 20:05 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
        2017-01-22 20:05 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
        2017-01-22 20:05 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
        2017-01-22 20:05 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
        2017-01-22 20:05 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
        2017-01-22 20:05 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
        2017-01-22 20:05 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
        2017-01-22 20:05 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
        2017-01-22 20:05 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
        2017-01-22 20:05 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
        2017-01-22 20:05 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
        2017-01-22 20:05 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
        2017-01-22 20:05 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
        2017-01-22 20:05 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
        2017-01-22 20:05 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
        2017-01-22 20:05 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
        2017-01-22 20:05 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
        2017-01-22 20:05 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
        2017-01-22 20:05 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
        2017-01-22 20:05 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
        2017-01-22 20:05 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
        2017-01-22 20:05 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
        2017-01-22 20:05 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
        2017-01-22 20:05 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
        2017-01-22 20:05 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
        2017-01-22 20:05 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
        2017-01-22 20:05 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
        2017-01-22 20:05 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
        2017-01-22 20:05 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
        2017-01-22 20:05 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
        2017-01-22 20:05 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
        2017-01-22 20:05 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
        2017-01-22 20:05 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
        2017-01-22 20:05 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
        2017-01-22 20:05 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
        2017-01-22 20:05 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
        2017-01-22 20:05 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
        2017-01-22 20:05 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
        2017-01-22 20:05 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
        2017-01-22 20:05 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
        2017-01-22 20:05 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
        2017-01-22 20:05 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
        2017-01-22 20:05 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
        2017-01-22 20:05 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
        2017-01-22 20:05 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
        2017-01-22 20:05 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
        2017-01-22 20:05 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
        2017-01-22 20:05 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
        2017-01-22 20:05 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
        2017-01-22 20:05 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
        2017-01-22 20:05 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
        2017-01-22 20:04 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
        2017-01-22 20:04 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
        2017-01-22 20:04 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
        2017-01-22 20:04 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
        2017-01-22 20:04 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
        2017-01-22 20:04 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
        2017-01-22 20:04 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
        2017-01-22 20:04 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
        2017-01-22 20:04 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
        2017-01-22 20:04 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
        2017-01-22 20:04 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
        2017-01-22 20:04 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
        2017-01-22 20:04 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
        2017-01-22 20:04 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
        2017-01-22 20:04 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
        2017-01-22 20:04 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
        2017-01-22 20:04 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
        2017-01-22 20:04 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
        2017-01-22 20:04 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
        2017-01-22 20:04 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
        2017-01-22 20:04 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
        2017-01-22 20:04 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
        2017-01-22 20:04 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
        2017-01-22 20:04 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
        2017-01-22 20:04 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
        2017-01-22 20:04 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
        2017-01-22 20:04 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
        2017-01-22 20:04 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
        2017-01-22 20:04 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
        2017-01-22 20:04 - 2005-12-05 18:07 - 00061136 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput9_1_0.dll
        2017-01-22 20:04 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
        2017-01-22 20:04 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
        2017-01-22 20:04 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
        2017-01-22 20:04 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
        2017-01-22 20:03 - 2017-01-22 20:04 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
        2017-01-22 19:35 - 2017-02-09 14:31 - 00000000 ____D C:\Documents and Settings\anon\Desktop\SNES9x
        2017-01-22 18:02 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
        2017-01-22 17:54 - 2017-01-22 17:54 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Razor
        2017-01-22 05:15 - 2017-01-22 08:07 - 00000000 ____D C:\Documents and Settings\anon\Application Data\MPC-HC
        2017-01-22 05:14 - 2017-01-22 05:15 - 00000000 ____D C:\Program Files\Combined Community Codec Pack
        2017-01-22 05:14 - 2017-01-22 05:15 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Combined Community Codec Pack
        2017-01-21 16:17 - 2017-01-21 16:17 - 00000000 ____D C:\Program Files\Foxy Games
        2017-01-20 07:19 - 2017-01-20 07:19 - 17694720 _____ C:\WINDOWS\system32\config\software.iodefrag.bak
        2017-01-20 07:19 - 2017-01-20 07:19 - 00253952 _____ C:\WINDOWS\system32\config\default.iodefrag.bak
        2017-01-20 07:19 - 2017-01-20 07:19 - 00049152 _____ C:\WINDOWS\system32\config\SECURITY.iodefrag.bak
        2017-01-20 07:19 - 2017-01-20 07:19 - 00028672 _____ C:\WINDOWS\system32\config\SAM.iodefrag.bak
        2017-01-19 11:27 - 2017-02-11 09:53 - 00007680 _____ C:\Documents and Settings\anon\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        2017-01-19 09:57 - 2017-01-19 09:57 - 00000760 _____ C:\Documents and Settings\anon\Desktop\Cheat Engine.lnk
        2017-01-19 09:57 - 2017-01-19 09:57 - 00000000 ____D C:\Program Files\Cheat Engine 6.4
        2017-01-19 09:57 - 2017-01-19 09:57 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Cheat Engine 6.4
        2017-01-19 08:38 - 2017-01-19 08:38 - 00000000 ____D C:\Documents and Settings\anon\My Documents\My Cheat Tables
        2017-01-18 23:20 - 2017-01-18 23:20 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Windows Search
        2017-01-17 22:33 - 2014-10-16 10:27 - 00023840 _____ (IObit) C:\WINDOWS\system32\RegistryDefragBootTime.exe
        2017-01-17 22:28 - 2017-02-13 17:23 - 18849792 _____ C:\WINDOWS\system32\config\software.iobit
        2017-01-17 22:28 - 2017-02-13 17:23 - 01261568 _____ C:\WINDOWS\system32\config\default.iobit
        2017-01-17 22:28 - 2017-02-13 17:23 - 00053248 _____ C:\WINDOWS\system32\config\SECURITY.iobit
        2017-01-17 22:28 - 2017-02-13 17:23 - 00028672 _____ C:\WINDOWS\system32\config\SAM.iobit
        2017-01-16 20:48 - 2017-01-16 20:48 - 00000434 _____ C:\Documents and Settings\anon\Desktop\Downloads.lnk
        2017-01-16 20:36 - 2017-02-13 12:22 - 00000000 ____D C:\Documents and Settings\anon\Application Data\vlc
        2017-01-16 20:35 - 2017-01-16 20:35 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\VideoLAN
        2017-01-16 20:34 - 2017-01-16 20:34 - 00000000 ____D C:\Program Files\VideoLAN
        2017-01-16 15:58 - 2017-02-13 18:23 - 00000000 ____D C:\Program Files\Mozilla Firefox
        2017-01-16 03:58 - 2017-01-16 03:58 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Macromedia
        2017-01-16 03:58 - 2017-01-16 03:58 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Adobe
        2017-01-15 23:24 - 2017-02-13 17:25 - 00000000 ____D C:\WINDOWS\Tasks\IObitDisabled
        2017-01-15 23:21 - 2017-01-15 23:21 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2803821-v2_WM9$
        2017-01-15 23:21 - 2017-01-15 23:21 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2585542$
        2017-01-15 23:20 - 2017-01-15 23:20 - 00000000 __HDC C:\WINDOWS$NtUninstallKB970430$
        2017-01-15 23:20 - 2017-01-15 23:20 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2345886$
        2017-01-15 22:59 - 2017-01-29 12:32 - 00000150 _____ C:\WINDOWS\Reimage.ini
        2017-01-15 21:59 - 2017-01-15 21:59 - 00000798 _____ C:\Documents and Settings\All Users\Desktop\JetBoost.lnk
        2017-01-15 21:59 - 2017-01-15 21:59 - 00000000 ____D C:\Program Files\BlueSprig
        2017-01-15 21:59 - 2017-01-15 21:59 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\JetBoost
        2017-01-15 21:59 - 2017-01-15 21:59 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\BlueSprig
        2017-01-15 21:55 - 2017-01-15 21:55 - 00000000 ____D C:\Program Files\7-Zip
        2017-01-15 21:55 - 2017-01-15 21:55 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\7-Zip
        2017-01-15 21:51 - 2017-01-15 21:51 - 00000000 ____D C:\Program Files\psx emulation cheater
        2017-01-15 21:51 - 2017-01-15 21:51 - 00000000 ____D C:\Documents and Settings\anon\Start Menu\Programs\psx emulation cheater
        2017-01-15 21:48 - 2017-01-15 22:10 - 00000000 ____D C:\Documents and Settings\anon\Desktop\ePSXe180
        2017-01-15 21:45 - 2017-01-24 02:46 - 00802904 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
        2017-01-15 21:45 - 2017-01-24 02:45 - 00144472 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
        2017-01-15 21:40 - 2017-01-15 21:40 - 00000730 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
        2017-01-15 21:40 - 2017-01-15 21:40 - 00000000 ____D C:\Documents and Settings\anon\Local Settings\Application Data\Mozilla
        2017-01-15 21:40 - 2017-01-15 21:40 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Mozilla
        2017-01-15 21:32 - 2017-01-15 21:32 - 00001795 _____ C:\Documents and Settings\All Users\Start Menu\Programs\IObit Uninstaller.lnk
        2017-01-15 21:32 - 2017-01-15 21:32 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\IObit Uninstaller
        2017-01-15 21:22 - 2017-01-19 23:43 - 00065536 _____ C:\WINDOWS\system32\config\WindowsPowerShell.evt
        2017-01-15 21:22 - 2017-01-19 23:43 - 00065536 _____ C:\WINDOWS\system32\config\EventForwarding-Operational.Evt
        2017-01-15 21:04 - 2017-01-15 21:04 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2834904-v2_WM11$
        2017-01-15 20:34 - 2017-01-15 21:21 - 00065536 _____ C:\WINDOWS\system32\config\Windows .evt
        2017-01-15 20:34 - 2017-01-15 21:21 - 00065536 _____ C:\WINDOWS\system32\config\Microsof.evt
        2017-01-15 20:34 - 2017-01-15 20:34 - 00000000 __HDC C:\WINDOWS$968930Uinstall_KB968930$
        2017-01-15 20:34 - 2017-01-15 20:34 - 00000000 ____D C:\WINDOWS\system32\winrm
        2017-01-15 20:34 - 2017-01-15 20:34 - 00000000 ____D C:\WINDOWS$NtUninstallKB968930$
        2017-01-15 20:23 - 2017-01-15 21:31 - 00000000 ____D C:\Documents and Settings\anon\Local Settings\Application Data\ApplicationHistory
        2017-01-15 20:23 - 2008-05-26 22:18 - 00350208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
        2017-01-15 20:19 - 2017-01-15 20:19 - 00000000 __HDC C:\WINDOWS$NtUninstallKB961118$
        2017-01-15 20:19 - 2017-01-15 20:19 - 00000000 __HDC C:\WINDOWS$NtUninstallKB954154_WM11$
        2017-01-15 20:19 - 2017-01-15 20:19 - 00000000 __HDC C:\WINDOWS$NtUninstallKB929399$
        2017-01-15 20:18 - 2017-01-15 20:19 - 00000000 __HDC C:\WINDOWS$NtUninstallKB939683$
        2017-01-15 20:18 - 2017-01-15 20:18 - 00000000 __HDC C:\WINDOWS$NtUninstallKB941569$
        2017-01-15 19:59 - 2017-01-15 20:59 - 00000000 ____D C:\WINDOWS\system32\XPSViewer
        2017-01-15 19:59 - 2017-01-15 19:59 - 00000000 ____D C:\Program Files\Reference Assemblies
        2017-01-15 19:59 - 2017-01-15 19:59 - 00000000 ____D C:\Program Files\MSBuild
        2017-01-15 19:59 - 2017-01-15 19:59 - 00000000 ____D C:\b287b9b1c04516e9097ebf
        2017-01-15 19:59 - 2008-07-06 07:06 - 01676288 ____N (Microsoft Corporation) C:\WINDOWS\system32\xpssvcs.dll
        2017-01-15 19:59 - 2008-07-06 07:06 - 01676288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpssvcs.dll
        2017-01-15 19:59 - 2008-07-06 07:06 - 00575488 ____N (Microsoft Corporation) C:\WINDOWS\system32\xpsshhdr.dll
        2017-01-15 19:59 - 2008-07-06 07:06 - 00575488 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpsshhdr.dll
        2017-01-15 19:59 - 2008-07-06 07:06 - 00117760 ____N (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll
        2017-01-15 19:59 - 2008-07-06 07:06 - 00089088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\filterpipelineprintpr oc.dll
        2017-01-15 19:59 - 2008-07-06 05:50 - 00597504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\printfilterpipelinesv c.exe
        2017-01-15 19:54 - 2017-01-15 19:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2808679$
        2017-01-15 19:35 - 2017-01-15 19:35 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2492386$
        2017-01-15 19:35 - 2017-01-15 19:35 - 00000000 __HDC C:\WINDOWS$NtUninstallbasecsp$
        2017-01-15 19:34 - 2017-01-15 19:34 - 00000000 __SHD C:\Documents and Settings\NetworkService\IETldCache
        2017-01-15 19:33 - 2017-01-24 01:43 - 00000000 ____D C:\Program Files\Windows Desktop Search
        2017-01-15 19:33 - 2017-01-15 19:33 - 00000000 __HDC C:\WINDOWS$NtUninstallKB915800-v4$
        2017-01-15 19:33 - 2017-01-15 19:33 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy
        2017-01-15 19:32 - 2017-01-15 19:32 - 00000000 __HDC C:\WINDOWS$NtUninstallMSCompPackV1$
        2017-01-15 19:32 - 2009-05-12 15:12 - 00016928 ____N (Microsoft Corporation) C:\WINDOWS\system32\spmsg.dll
        2017-01-15 19:31 - 2017-02-13 17:16 - 00000000 ____D C:\Program Files\Windows Media Connect 2
        2017-01-15 19:31 - 2017-01-15 19:31 - 00000000 __HDC C:\WINDOWS$NtUninstallwmp11$
        2017-01-15 19:30 - 2017-01-15 19:30 - 00000000 __HDC C:\WINDOWS$NtUninstallWMFDist11$
        2017-01-15 19:29 - 2017-01-15 19:29 - 00000000 __HDC C:\WINDOWS$NtUninstallWudf01000$
        2017-01-15 19:28 - 2017-01-15 19:28 - 00000000 ____D C:\WINDOWS\system32\URTTEMP
        2017-01-15 19:26 - 2011-08-16 05:45 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iecompat.dll
        2017-01-15 17:21 - 2017-01-15 17:21 - 00000000 __SHD C:\Documents and Settings\anon\PrivacIE
        2017-01-15 17:12 - 2017-01-15 17:12 - 00000000 __SHD C:\Documents and Settings\anon\IETldCache
        2017-01-15 17:04 - 2017-01-15 17:04 - 00000000 __HDC C:\WINDOWS$NtUninstallKB959426$
        2017-01-15 17:04 - 2017-01-15 17:04 - 00000000 __HDC C:\WINDOWS$NtUninstallKB952954$
        2017-01-15 17:04 - 2017-01-15 17:04 - 00000000 __HDC C:\WINDOWS$NtUninstallKB951376-v2$
        2017-01-15 17:04 - 2017-01-15 17:04 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2922229$
        2017-01-15 17:04 - 2017-01-15 17:04 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2868626$
        2017-01-15 17:03 - 2017-02-13 18:16 - 00000000 ____D C:\WINDOWS\ie8updates
        2017-01-15 17:03 - 2017-01-15 17:11 - 00065536 _____ C:\WINDOWS\system32\config\Internet.evt
        2017-01-15 17:03 - 2014-02-05 18:26 - 11113472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll
        2017-01-15 17:03 - 2014-02-05 18:26 - 02006016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll
        2017-01-15 17:03 - 2014-02-05 18:26 - 00743424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll
        2017-01-15 17:03 - 2014-02-05 18:26 - 00630272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll
        2017-01-15 17:03 - 2014-02-05 18:26 - 00522240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll
        2017-01-15 17:03 - 2014-02-05 18:26 - 00247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll
        2017-01-15 17:03 - 2014-02-05 18:26 - 00055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll
        2017-01-15 17:03 - 2014-02-05 18:26 - 00012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll
        2017-01-15 17:02 - 2017-01-15 17:03 - 00000000 __HDC C:\WINDOWS\ie8
        2017-01-15 17:01 - 2017-01-15 17:01 - 00000000 __HDC C:\WINDOWS$NtUninstallKB946648$
        2017-01-15 17:01 - 2017-01-15 17:01 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2712808$
        2017-01-15 17:01 - 2017-01-15 17:01 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2387149$
        2017-01-15 17:00 - 2017-01-15 17:01 - 00000000 __HDC C:\WINDOWS$NtUninstallKB960859$
        2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2934207$
        2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2916036$
        2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2834886$
        2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2659262$
        2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2631813$
        2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2564958$
        2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2544893-v2$
        2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2536276-v2$
        2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2479943$
        2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2478971$
        2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2296011$
        2017-01-15 16:59 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2691442$
        2017-01-15 16:59 - 2017-01-15 16:59 - 00000000 __HDC C:\WINDOWS$NtUninstallKB975558_WM8$
        2017-01-15 16:59 - 2017-01-15 16:59 - 00000000 __HDC C:\WINDOWS$NtUninstallKB974318$
        2017-01-15 16:59 - 2017-01-15 16:59 - 00000000 __HDC C:\WINDOWS$NtUninstallKB955759$
        2017-01-15 16:59 - 2017-01-15 16:59 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2900986$
        2017-01-15 16:59 - 2017-01-15 16:59 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2847311$
        2017-01-15 16:59 - 2017-01-15 16:59 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2378111_WM9$
        2017-01-15 16:59 - 2017-01-15 16:59 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2115168$
        2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB975713$
        2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB969059$
        2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB951978$
        2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB950974$
        2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2898715$
        2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2802968$
        2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2655992$
        2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2598479$
        2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2485663$
        2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2481109$
        2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2443105$
        2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2229593$
        2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB982132$
        2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB978338$
        2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB974112$
        2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB972270$
        2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB971657$
        2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB954155_WM9$
        2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2929961$
        2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2909212$
        2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2862335$
        2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2780091$
        2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2686509$
        2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2510581$
        2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB979687$
        2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB956844$
        2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB956572$
        2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2930275$
        2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2904266$
        2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2876217$
        2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2864063$
        2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2483185$
        2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2347290$
        2017-01-15 16:55 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB973869$
        2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB975560$
        2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB975025$
        2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB974571$
        2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB973507$
        2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB952004$
        2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2862152$
        2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2770660$
        2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2719985$
        2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2592799$
        2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2535512$
        2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB978695_WM9$
        2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB977816$
        2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB973904$
        2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB952287$
        2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB950762$
        2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2876331$
        2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2859537$
        2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2850869$
        2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2820917$
        2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2807986$
        2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2603381$
        2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2570947$
        2017-01-15 16:53 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2893294$
        2017-01-15 16:53 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB974392$
        2017-01-15 16:53 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB973540_WM9$
        2017-01-15 16:53 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2757638$
        2017-01-15 16:53 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2749655$
        2017-01-15 16:53 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2653956$
        2017-01-15 16:53 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2508429$
        2017-01-15 16:53 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2419632$
        2017-01-15 16:52 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2879017$
        2017-01-15 16:52 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB977914$
        2017-01-15 16:52 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB971029$
        2017-01-15 16:52 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB952069_WM9$
        2017-01-15 16:52 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2892075$
        2017-01-15 16:52 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2698365$
        2017-01-15 16:52 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2619339$
        2017-01-15 16:52 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2506212$
        2017-01-15 16:51 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2705219-v2$
        2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB981997$
        2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB979482$
        2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB979309$
        2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB978706$
        2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB978542$
        2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB973815$
        2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB960803$
        2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2862330$
        2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2813345$
        2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2727528$
        2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2723135-v2$
        2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB982665$
        2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB923561$
        2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2676562$
        2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2661637$
        2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2620712$
        2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2566454$
        2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2509553$
        2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2478960$
        2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2393802$
        2017-01-15 16:49 - 2017-01-15 16:49 - 00000000 __HDC C:\WINDOWS$NtUninstallKB975467$
        2017-01-15 16:49 - 2017-01-15 16:49 - 00000000 __HDC C:\WINDOWS$NtUninstallKB968389$
        2017-01-15 16:49 - 2017-01-15 16:49 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2914368$
        2017-01-15 16:49 - 2017-01-15 16:49 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2584146$
        2017-01-15 16:49 - 2017-01-15 16:49 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2423089$
        2017-01-15 15:52 - 2014-02-25 20:59 - 00013312 ____N (Microsoft Corporation) C:\WINDOWS\system32\xp_eos.exe
        2017-01-15 15:52 - 2014-02-25 20:59 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xp_eos.exe
        2017-01-15 15:52 - 2013-07-02 20:59 - 00014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys
        2017-01-15 15:52 - 2008-06-13 06:05 - 00272128 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
        2017-01-15 15:52 - 2008-06-13 06:05 - 00272128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bthport.sys
        2017-01-15 15:51 - 2011-07-15 08:29 - 00456320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mrxsmb.sys
        2017-01-15 15:46 - 2013-02-11 19:32 - 00012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023x.sys
        2017-01-15 15:43 - 2013-11-05 20:03 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsp4res.dll
        2017-01-15 15:43 - 2013-07-03 22:03 - 02149888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
        2017-01-15 15:43 - 2013-07-03 21:59 - 02193536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntoskrnl.exe
        2017-01-15 15:43 - 2013-07-03 21:08 - 02070144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
        2017-01-15 15:43 - 2013-07-03 21:08 - 02028544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrpamp.exe
        2017-01-15 15:43 - 2012-01-11 14:06 - 00003072 ____N C:\WINDOWS\system32\iacenc.dll
        2017-01-15 15:43 - 2012-01-11 14:06 - 00003072 ____C C:\WINDOWS\system32\dllcache\iacenc.dll
        2017-01-15 14:55 - 2017-01-15 14:55 - 00000000 ____D C:\Documents and Settings\anon\Local Settings\Application Data{B5F70934-5E12-42d2-882D-62D42EA1FA67}
        2017-01-15 14:54 - 2017-02-13 19:14 - 00000000 ____D C:\Documents and Settings\anon\Application Data\uTorrent
        2017-01-15 14:54 - 2017-01-15 14:54 - 00002635 _____ C:\Documents and Settings\anon\Start Menu\µTorrent.lnk
        2017-01-15 14:24 - 2013-08-08 19:55 - 00144128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys
        2017-01-15 14:24 - 2013-08-08 19:55 - 00032384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys
        2017-01-15 14:24 - 2013-08-08 19:55 - 00005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys
        2017-01-15 14:24 - 2009-03-18 06:02 - 00030336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys
        2017-01-15 14:22 - 2017-01-15 19:51 - 00000000 ___HD C:\WINDOWS$hf_mig$
        2017-01-15 14:22 - 2017-01-15 14:22 - 00000000 __HDC C:\WINDOWS$NtUninstallKB898461$
        2017-01-15 14:22 - 2017-01-15 14:22 - 00000000 ____D C:\WINDOWS\system32\PreInstall
        2017-01-15 14:22 - 2017-01-15 14:22 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
        2017-01-15 14:22 - 2009-05-12 15:12 - 00026144 _____ (Microsoft Corporation) C:\WINDOWS\system32\spupdsvc.exe
        2017-01-15 14:15 - 2017-01-15 14:15 - 00000000 _____ C:\WINDOWS\ativpsrm.bin
        2017-01-15 14:08 - 2017-01-15 14:08 - 00023192 _____ (VIA Technologies, Inc.) C:\WINDOWS\system32\Drivers\xfilt.sys
        2017-01-15 14:08 - 2017-01-15 14:08 - 00013976 _____ (VIA Technologies, Inc.) C:\WINDOWS\system32\Drivers\videX32.sys
        2017-01-15 13:45 - 2017-01-15 13:45 - 11304960 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\atioglxx.dll
        2017-01-15 13:45 - 2017-01-15 13:45 - 03107788 _____ C:\WINDOWS\system32\ativvaxx.dat
        2017-01-15 13:45 - 2017-01-15 13:45 - 03107788 _____ C:\WINDOWS\system32\ativva5x.dat
        2017-01-15 13:45 - 2017-01-15 13:45 - 00887724 _____ C:\WINDOWS\system32\ativva6x.dat
        2017-01-15 13:45 - 2017-01-15 13:45 - 00598016 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
        2017-01-15 13:45 - 2017-01-15 13:45 - 00425984 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIDEMGX.dll
        2017-01-15 13:45 - 2017-01-15 13:45 - 00401408 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\atikvmag.dll
        2017-01-15 13:45 - 2017-01-15 13:45 - 00307200 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\atiiiexx.dll
        2017-01-15 13:45 - 2017-01-15 13:45 - 00286720 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\atiok3x2.dll
        2017-01-15 13:45 - 2017-01-15 13:45 - 00188416 _____ (ATI Technologies, Inc.) C:\WINDOWS\system32\atipdlxx.dll
        2017-01-15 13:45 - 2017-01-15 13:45 - 00180720 _____ C:\WINDOWS\system32\atiicdxx.dat
        2017-01-15 13:45 - 2017-01-15 13:45 - 00147456 _____ (ATI Technologies, Inc.) C:\WINDOWS\system32\Oemdspif.dll
        2017-01-15 13:45 - 2017-01-15 13:45 - 00143360 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.dll
        2017-01-15 13:45 - 2017-01-15 13:45 - 00118784 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atibrtmon.exe
        2017-01-15 13:45 - 2017-01-15 13:45 - 00086016 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
        2017-01-15 13:45 - 2017-01-15 13:45 - 00069112 _____ C:\WINDOWS\system32\ativvaxx.cap
        2017-01-15 13:45 - 2017-01-15 13:45 - 00053248 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
        2017-01-15 13:45 - 2017-01-15 13:45 - 00053248 _____ ( ATI Technologies Inc.) C:\WINDOWS\system32\ATIDDC.DLL
        2017-01-15 13:45 - 2017-01-15 13:45 - 00048640 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom32.dll
        2017-01-15 13:45 - 2017-01-15 13:45 - 00043520 _____ (ATI Technologies, Inc.) C:\WINDOWS\system32\ati2edxx.dll
        2017-01-15 13:45 - 2017-01-15 13:45 - 00026112 _____ (ATI Technologies, Inc.) C:\WINDOWS\system32\Ati2mdxx.exe
        2017-01-15 13:45 - 2017-01-15 13:45 - 00024064 _____ (ATI Technologies, Inc.) C:\WINDOWS\system32\ativcoxx.dll
        2017-01-15 13:45 - 2017-01-15 13:45 - 00017408 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\atitvo32.dll
        2017-01-15 13:45 - 2017-01-15 13:45 - 00015079 _____ C:\WINDOWS\atiogl.xml
        2017-01-15 13:45 - 2017-01-15 13:45 - 00007167 _____ C:\WINDOWS\system32\atifglpf.xml
        2017-01-15 13:44 - 2008-04-14 00:47 - 00083072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wdmaud.sys
        2017-01-15 13:44 - 2008-04-14 00:47 - 00083072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wdmaud.sys
        2017-01-15 13:44 - 2008-04-14 00:45 - 00060800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sysaudio.sys
        2017-01-15 13:44 - 2008-04-14 00:45 - 00060800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sysaudio.sys
        2017-01-15 13:44 - 2008-04-14 00:15 - 00172416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kmixer.sys
        2017-01-15 13:44 - 2008-04-14 00:15 - 00172416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kmixer.sys
        2017-01-15 13:44 - 2008-04-14 00:15 - 00056576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\swmidi.sys
        2017-01-15 13:44 - 2008-04-14 00:15 - 00056576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\swmidi.sys
        2017-01-15 13:44 - 2008-04-14 00:15 - 00052864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dmusic.sys
        2017-01-15 13:44 - 2008-04-14 00:15 - 00052864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\DMusic.sys
        2017-01-15 13:44 - 2008-04-14 00:15 - 00006272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\splitter.sys
        2017-01-15 13:44 - 2008-04-14 00:15 - 00006272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\splitter.sys
        2017-01-15 13:44 - 2008-04-14 00:15 - 00002944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\drmkaud.sys
        2017-01-15 13:44 - 2008-04-14 00:15 - 00002944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmkaud.sys
        2017-01-15 13:44 - 2008-04-14 00:09 - 00007552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mskssrv.sys
        2017-01-15 13:44 - 2008-04-14 00:09 - 00007552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MSKSSRV.sys
        2017-01-15 13:44 - 2008-04-14 00:09 - 00005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mspclock.sys
        2017-01-15 13:44 - 2008-04-14 00:09 - 00005376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MSPCLOCK.sys
        2017-01-15 13:44 - 2008-04-14 00:09 - 00004992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mspqm.sys
        2017-01-15 13:44 - 2008-04-14 00:09 - 00004992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MSPQM.sys
        2017-01-15 13:44 - 2008-04-13 22:09 - 00142592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aec.sys
        2017-01-15 13:44 - 2008-04-13 22:09 - 00142592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\aec.sys
        2017-01-15 13:42 - 2008-04-14 05:42 - 00129536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ksproxy.ax
        2017-01-15 13:42 - 2008-04-14 05:42 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
        2017-01-15 13:42 - 2008-04-14 05:41 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ksuser.dll
        2017-01-15 13:42 - 2008-04-14 05:41 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksuser.dll
        2017-01-15 13:42 - 2008-04-14 00:49 - 00146048 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\portcls.sys
        2017-01-15 13:42 - 2008-04-14 00:49 - 00146048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
        2017-01-15 13:42 - 2008-04-14 00:15 - 00060160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\drmk.sys
        2017-01-15 13:42 - 2008-04-14 00:15 - 00060160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmk.sys
        2017-01-15 13:40 - 2017-01-15 13:39 - 18804736 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\ALSNDMGR.CPL
        2017-01-15 13:40 - 2017-01-15 13:39 - 10528768 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTLCPL.EXE
        2017-01-15 13:40 - 2017-01-15 13:39 - 04122368 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\ALCXWDM.SYS
        2017-01-15 13:40 - 2017-01-15 13:39 - 00577536 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SOUNDMAN.EXE
        2017-01-15 13:40 - 2017-01-15 13:39 - 00217088 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\Alcrmv.exe
        2017-01-15 13:40 - 2017-01-15 13:39 - 00147456 _____ () C:\WINDOWS\system32\RTLCPAPI.dll
        2017-01-15 13:40 - 2017-01-15 13:39 - 00141016 _____ C:\WINDOWS\system32\ALSNDMGR.WAV
        2017-01-15 13:38 - 2017-01-15 19:35 - 00000000 ____D C:\WINDOWS\system32\ReinstallBackups
        2017-01-15 13:34 - 2017-01-15 13:34 - 00000000 ____D C:\WINDOWS\IObit
        2017-01-15 13:33 - 2017-02-13 18:11 - 00000290 _____ C:\WINDOWS\Tasks\Driver Booster Scheduler.job
        2017-01-15 13:33 - 2017-01-29 13:02 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Driver Booster 4
        2017-01-15 13:33 - 2017-01-15 13:33 - 00023840 _____ (REALiX™) C:\WINDOWS\system32\Drivers\HWiNFO32.SYS
        2017-01-15 13:28 - 2017-02-13 18:11 - 00000274 _____ C:\WINDOWS\Tasks\ASC10_PerformanceMonitor.job
        2017-01-15 13:28 - 2017-02-13 15:59 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\ProductData
        2017-01-15 13:28 - 2017-01-31 13:57 - 00000000 ____D C:\Program Files\Common Files\IObit
        2017-01-15 13:28 - 2017-01-15 13:28 - 00000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
        2017-01-15 13:28 - 2017-01-15 13:28 - 00000000 ____D C:\Documents and Settings\anon\AppData\LocalLow\IObit
        2017-01-15 13:28 - 2017-01-15 13:28 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Advanced SystemCare
        2017-01-15 13:28 - 2017-01-15 13:28 - 00000000 ____D C:\Documents and Settings\All Users\Application Data{74E9F814-C737-42CC-B721-DBBC4059367A}
        2017-01-15 13:27 - 2017-01-31 13:56 - 00000000 ____D C:\Program Files\IObit
        2017-01-15 13:27 - 2017-01-31 13:56 - 00000000 ____D C:\Documents and Settings\anon\Application Data\IObit
        2017-01-15 13:27 - 2017-01-23 23:01 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\IObit
        2017-01-15 13:13 - 2017-01-15 23:11 - 00000000 ____D C:\Documents and Settings\anon\Local Settings\Application Data\IIIQF
        2017-01-15 13:10 - 2017-01-15 13:10 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\REGSERVO
        2017-01-15 13:05 - 2017-01-15 20:10 - 00012328 _____ C:\Documents and Settings\anon\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
        2017-01-15 13:05 - 2017-01-15 13:05 - 00000000 __SHD C:\Documents and Settings\anon\UserData
        2017-01-15 13:03 - 2017-01-15 13:03 - 00000000 ____D C:\Program Files\WinRAR
        2017-01-15 13:03 - 2017-01-15 13:03 - 00000000 ____D C:\Documents and Settings\anon\Start Menu\Programs\WinRAR
        2017-01-15 13:03 - 2017-01-15 13:03 - 00000000 ____D C:\Documents and Settings\anon\Application Data\WinRAR
        2017-01-15 13:03 - 2017-01-15 13:03 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\WinRAR
        2017-01-15 13:03 - 2009-03-10 22:18 - 00934792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wgatray.exe.old
        2017-01-15 13:03 - 2009-03-10 22:18 - 00239496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wgalogon.dll.old
        2017-01-15 13:01 - 2017-02-13 19:13 - 00000000 ____D C:\Documents and Settings\anon\Local Settings\Temp
        2017-01-15 13:01 - 2017-02-13 18:10 - 00000178 ___SH C:\Documents and Settings\anon\ntuser.ini
        2017-01-15 13:01 - 2017-02-13 16:00 - 00000000 ____D C:\Documents and Settings\anon
        2017-01-15 13:01 - 2017-01-30 21:49 - 00000000 ___RD C:\Documents and Settings\anon\My Documents
        2017-01-15 13:01 - 2017-01-15 19:32 - 00000788 _____ C:\Documents and Settings\anon\Start Menu\Programs\Windows Media Player.lnk
        2017-01-15 13:01 - 2017-01-15 17:12 - 00000803 _____ C:\Documents and Settings\anon\Start Menu\Programs\Internet Explorer.lnk
        2017-01-15 13:01 - 2017-01-15 17:12 - 00000000 ___RD C:\Documents and Settings\anon\My Documents\My Pictures
        2017-01-15 13:01 - 2017-01-15 17:12 - 00000000 ___RD C:\Documents and Settings\anon\My Documents\My Music
        2017-01-15 13:01 - 2017-01-15 13:01 - 00000738 _____ C:\Documents and Settings\anon\Start Menu\Programs\Outlook Express.lnk
        2017-01-15 13:01 - 2017-01-15 12:55 - 00001599 _____ C:\Documents and Settings\anon\Start Menu\Programs\Remote Assistance.lnk
        2017-01-15 12:59 - 2017-02-13 18:12 - 00003498 _____ C:\WINDOWS\SchedLgU.Txt
        2017-01-15 12:59 - 2017-02-13 18:12 - 00000178 ___SH C:\Documents and Settings\LocalService\ntuser.ini
        2017-01-15 12:59 - 2017-02-13 18:12 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
        2017-01-15 12:59 - 2017-02-13 17:23 - 00000000 __SHD C:\Documents and Settings\NetworkService
        2017-01-15 12:59 - 2017-02-13 17:23 - 00000000 __SHD C:\Documents and Settings\LocalService
        2017-01-15 12:59 - 2017-01-15 12:59 - 00008192 _____ C:\WINDOWS\REGLOCS.OLD
        2017-01-15 12:59 - 2017-01-15 12:59 - 00000020 ___SH C:\Documents and Settings\NetworkService\ntuser.ini
        2017-01-15 12:59 - 2017-01-15 12:59 - 00000000 ____D C:\Documents and Settings\NetworkService\Local Settings\Temp
        2017-01-15 12:59 - 2017-01-15 12:59 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\Temp
        2017-01-15 12:58 - 2008-04-13 22:42 - 00364032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3svc.dll
        2017-01-15 12:58 - 2008-04-13 22:42 - 00103424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\uihelper.dll
        2017-01-15 12:58 - 2008-04-13 22:42 - 00076800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wam51.dll
        2017-01-15 12:58 - 2008-04-13 22:42 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamreg51.dll
        2017-01-15 12:58 - 2008-04-13 22:42 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tools.dll
        2017-01-15 12:58 - 2008-04-13 22:41 - 00571392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tintlgnt.ime
        2017-01-15 12:58 - 2008-04-13 22:41 - 00426041 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\voicepad.dll
        2017-01-15 12:58 - 2008-04-13 22:41 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winzm.ime
        2017-01-15 12:58 - 2008-04-13 22:41 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winsp.ime
        2017-01-15 12:58 - 2008-04-13 22:41 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winpy.ime
        2017-01-15 12:58 - 2008-04-13 22:41 - 00086073 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\voicesub.dll
        2017-01-15 12:58 - 2008-04-13 22:41 - 00079360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winar30.ime
        2017-01-15 12:58 - 2008-04-13 22:41 - 00076288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\uniime.dll
        2017-01-15 12:58 - 2008-04-13 22:41 - 00072704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wingb.ime
        2017-01-15 12:58 - 2008-04-13 22:41 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winime.ime
        2017-01-15 12:58 - 2008-04-13 22:41 - 00065024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\unicdime.ime
        2017-01-15 12:58 - 2008-04-13 22:41 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tmigrate.dll
        2017-01-15 12:58 - 2008-04-13 15:13 - 00455168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tintsetp.exe
        2017-01-15 12:58 - 2008-04-13 15:13 - 00044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tintlphr.exe
        2017-01-15 12:58 - 2001-08-23 07:00 - 00185344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\thawbrkr.dll
        2017-01-15 12:58 - 2001-08-23 07:00 - 00073728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3ext.dll
        2017-01-15 12:58 - 2001-08-23 07:00 - 00048256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w32.dll
        2017-01-15 12:58 - 2001-08-23 07:00 - 00041600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.dll
        2017-01-15 12:58 - 2001-08-23 07:00 - 00031232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.sys
        2017-01-15 12:58 - 2001-08-23 07:00 - 00028288 ____C C:\WINDOWS\system32\dllcache\xjis.nls
        2017-01-15 12:58 - 2001-08-23 07:00 - 00021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdipx.sys
        2017-01-15 12:58 - 2001-08-23 07:00 - 00019464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdspx.sys
        2017-01-15 12:58 - 2001-08-23 07:00 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsprof.exe
        2017-01-15 12:58 - 2001-08-23 07:00 - 00013192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdasync.sys
        2017-01-15 12:58 - 2001-08-23 07:00 - 00009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamps51.dll
        2017-01-15 12:58 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3svapi.dll
        2017-01-15 12:58 - 2001-08-23 07:00 - 00004608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3ctrs51.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00456192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smtpsvc.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00358400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpincl.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00259072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpcl.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00236544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smi2smir.exe
        2017-01-15 12:57 - 2008-04-13 22:42 - 00221696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\seo.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00188416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpsmir.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00119808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtstocom.exe
        2017-01-15 12:57 - 2008-04-13 22:42 - 00046592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\svcext51.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00046592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sspifilt.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ssinc51.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00044544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nsepm.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msiregmv.exe
        2017-01-15 12:57 - 2008-04-13 22:42 - 00039936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpthrd.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmp.exe
        2017-01-15 12:57 - 2008-04-13 22:42 - 00029184 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rw330ext.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00027648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rw001ext.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetin51.exe
        2017-01-15 12:57 - 2008-04-13 22:42 - 00010752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smtpapi.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rwnh.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmptrap.exe
        2017-01-15 12:57 - 2008-04-13 22:42 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pwsdata.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\migregdb.exe
        2017-01-15 12:57 - 2008-04-13 22:42 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpmib.dll
        2017-01-15 12:57 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rpcref.dll
        2017-01-15 12:57 - 2008-04-13 22:41 - 00482304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pintlgnt.ime
        2017-01-15 12:57 - 2008-04-13 22:41 - 00257024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\infocomm.dll
        2017-01-15 12:57 - 2008-04-13 22:41 - 00085504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\metada51.dll
        2017-01-15 12:57 - 2008-04-13 22:41 - 00079360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phon.ime
        2017-01-15 12:57 - 2008-04-13 22:41 - 00077824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\quick.ime
        2017-01-15 12:57 - 2008-04-13 22:41 - 00037888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\md5filt.dll
        2017-01-15 12:57 - 2008-04-13 22:41 - 00035328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iprip.dll
        2017-01-15 12:57 - 2008-04-13 22:41 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lmmib2.dll
        2017-01-15 12:57 - 2008-04-13 22:41 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iscomlog.dll
        2017-01-15 12:57 - 2008-04-13 22:41 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\romanime.ime
        2017-01-15 12:57 - 2008-04-13 22:41 - 00022528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lpdsvc.dll
        2017-01-15 12:57 - 2008-04-13 22:41 - 00018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lprmon.dll
        2017-01-15 12:57 - 2008-04-13 22:41 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lonsint.dll
        2017-01-15 12:57 - 2008-04-13 22:40 - 00175104 ____C C:\WINDOWS\system32\dllcache\pintlcsa.dll
        2017-01-15 12:57 - 2008-04-13 22:40 - 00067584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmigrate.dll
        2017-01-15 12:57 - 2008-04-13 22:40 - 00053760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pintlcsd.dll
        2017-01-15 12:57 - 2008-04-13 22:40 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs404.dll
        2017-01-15 12:57 - 2008-04-13 22:40 - 00015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs804.dll
        2017-01-15 12:57 - 2008-04-13 22:39 - 00315455 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imskf.dll
        2017-01-15 12:57 - 2008-04-13 22:39 - 00274489 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjputyc.dll
        2017-01-15 12:57 - 2008-04-13 22:39 - 00102456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imlang.dll
        2017-01-15 12:57 - 2008-04-13 22:39 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdibm02.dll
        2017-01-15 12:57 - 2008-04-13 22:39 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlk41a.dll
        2017-01-15 12:57 - 2008-04-13 22:39 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlk41j.dll
        2017-01-15 12:57 - 2008-04-13 22:39 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdax2.dll
        2017-01-15 12:57 - 2008-04-13 22:39 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd106n.dll
        2017-01-15 12:57 - 2008-04-13 22:39 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101.dll
        2017-01-15 12:57 - 2008-04-13 17:11 - 00020736 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ramdisk.sys
        2017-01-15 12:57 - 2008-04-13 15:14 - 00262200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjputy.exe
        2017-01-15 12:57 - 2008-04-13 15:13 - 00070144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pintlphr.exe
        2017-01-15 12:57 - 2008-04-13 15:13 - 00059392 ____C C:\WINDOWS\system32\dllcache\imscinst.exe
        2017-01-15 12:57 - 2001-08-23 07:00 - 01875968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.lex
        2017-01-15 12:57 - 2001-08-23 07:00 - 01158818 ____C C:\WINDOWS\system32\dllcache\korwbrkr.lex
        2017-01-15 12:57 - 2001-08-23 07:00 - 00471102 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imskdic.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00229439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\multibox.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00143422 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\softkey.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00131584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxviceo.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00101376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srusbusd.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00098304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00092416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.sys
        2017-01-15 12:57 - 2001-08-23 07:00 - 00092032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00083748 ____C C:\WINDOWS\system32\dllcache\prcp.nls
        2017-01-15 12:57 - 2001-08-23 07:00 - 00083748 ____C C:\WINDOWS\system32\dllcache\prc.nls
        2017-01-15 12:57 - 2001-08-23 07:00 - 00079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia330.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia001.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00070656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\korwbrkr.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00059904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imkrinst.exe
        2017-01-15 12:57 - 2001-08-23 07:00 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nextlink.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00047066 ____C C:\WINDOWS\system32\dllcache\ksc.nls
        2017-01-15 12:57 - 2001-08-23 07:00 - 00045109 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpuex.exe
        2017-01-15 12:57 - 2001-08-23 07:00 - 00038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm9aw.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00036927 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs411.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb6w.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sma3w.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pagecnt.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm87w.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm81w.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8cw.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm93w.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm92w.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mdsync.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm90w.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8dw.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8aw.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm89w.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm59w.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\logscrpt.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00020992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\permchk.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\simptcp.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jupiw.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\status.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\quser.exe
        2017-01-15 12:57 - 2001-08-23 07:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsm.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\register.exe
        2017-01-15 12:57 - 2001-08-23 07:00 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs412.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxmcro.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpstup.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\query.exe
        2017-01-15 12:57 - 2001-08-23 07:00 - 00009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecat.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iwrps.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\infoctrs.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecnt.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnec95.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isapips.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxgl.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth3.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth2.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinpun.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101a.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smimsgif.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsy.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdvntc.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdusa.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdurdu.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth1.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth0.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr2.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr1.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintel.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintam.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinmar.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinkan.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinhin.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinguj.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdindev.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdheb.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdfa.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv2.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv1.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda3.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda2.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda1.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdgeo.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarmw.dll
        2017-01-15 12:57 - 2001-08-23 07:00 - 00005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarme.dll
        2017-01-15 12:57 - 2001-08-17 22:36 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_mailmsg.dll
        2017-01-15 12:57 - 2001-08-17 22:36 - 00057856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_scripto.dll
        2017-01-15 12:57 - 2001-08-17 22:36 - 00038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_ntfsdrv.dll
        2017-01-15 12:57 - 2001-08-17 22:36 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_seos.dll
        2017-01-15 12:57 - 2001-08-17 22:36 - 00023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_regtrace.exe
        2017-01-15 12:57 - 2001-08-17 22:36 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_smtpctrs.dll
        2017-01-15 12:57 - 2001-08-17 22:36 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_snprfdll.dll
        2017-01-15 12:56 - 2008-04-13 22:42 - 00267776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxssvc.exe
        2017-01-15 12:56 - 2008-04-13 22:42 - 00229376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscover.exe
        2017-01-15 12:56 - 2008-04-13 22:42 - 00142848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsclnt.exe
        2017-01-15 12:56 - 2008-04-13 22:42 - 00092160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\evntwin.exe
        2017-01-15 12:56 - 2008-04-13 22:42 - 00042496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\davcdata.exe
        2017-01-15 12:56 - 2008-04-13 22:42 - 00024064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\evntcmd.exe
        2017-01-15 12:56 - 2008-04-13 22:41 - 00562176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsst.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00451584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsapi.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00400384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsxp32.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00397312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxstiff.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00369664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asp51.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00331264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aqueue.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00285184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscomex.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00268288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\httpext.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00246272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxst30.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00218112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_g18030.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00192512 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxswzrd.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00154112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsui.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00145408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iische51.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00125952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpsv251.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00108544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\appconf.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00101888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\evntagnt.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00079872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iislog51.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00078848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dayi.ime
        2017-01-15 12:56 - 2008-04-13 22:41 - 00078336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chajei.ime
        2017-01-15 12:56 - 2008-04-13 22:41 - 00072192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscom.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\httpod51.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsevent.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00039936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hostmib.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00032256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\gzip.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00029696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admexs.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsdrv.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisadmin.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00024064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\compfilt.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsmon.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsext32.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00021504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cintlgnt.ime
        2017-01-15 12:56 - 2008-04-13 22:41 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\exstrace.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsperf.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\httpmb51.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisfecnv.dll
        2017-01-15 12:56 - 2008-04-13 22:41 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpmib.dll
        2017-01-15 12:56 - 2008-04-13 22:39 - 13463552 ____C C:\WINDOWS\system32\dllcache\hwxjpn.dll
        2017-01-15 12:56 - 2008-04-13 22:39 - 00811064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjp81k.dll
        2017-01-15 12:56 - 2008-04-13 22:39 - 00716856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpcus.dll
        2017-01-15 12:56 - 2008-04-13 22:39 - 00368696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpcic.dll
        2017-01-15 12:56 - 2008-04-13 22:39 - 00340023 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjp81.ime
        2017-01-15 12:56 - 2008-04-13 22:39 - 00198656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cintime.dll
        2017-01-15 12:56 - 2008-04-13 22:39 - 00173568 ____C C:\WINDOWS\system32\dllcache\chtskf.dll
        2017-01-15 12:56 - 2008-04-13 22:39 - 00106496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrcic.dll
        2017-01-15 12:56 - 2008-04-13 22:39 - 00097792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtmbx.dll
        2017-01-15 12:56 - 2008-04-13 22:39 - 00094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekr61.ime
        2017-01-15 12:56 - 2008-04-13 22:39 - 00086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrmbx.dll
        2017-01-15 12:56 - 2008-04-13 22:39 - 00081976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdct.dll
        2017-01-15 12:56 - 2008-04-13 22:39 - 00056320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtskdic.dll
        2017-01-15 12:56 - 2008-04-13 22:39 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\f3ahvoas.dll
        2017-01-15 12:56 - 2008-04-13 22:39 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsres.dll
        2017-01-15 12:56 - 2008-04-13 15:14 - 00233527 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjprw.exe
        2017-01-15 12:56 - 2008-04-13 15:13 - 00480256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cintsetp.exe
        2017-01-15 12:56 - 2008-04-13 15:13 - 00307257 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdct.exe
        2017-01-15 12:56 - 2008-04-13 15:13 - 00208952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpmig.exe
        2017-01-15 12:56 - 2008-04-13 15:13 - 00196665 ____C C:\WINDOWS\system32\dllcache\imjpinst.exe
        2017-01-15 12:56 - 2008-04-13 15:13 - 00155705 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdsvr.exe
        2017-01-15 12:56 - 2008-04-13 15:13 - 00057399 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cplexe.exe
        2017-01-15 12:56 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0804.dll
        2017-01-15 12:56 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0412.dll
        2017-01-15 12:56 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0411.dll
        2017-01-15 12:56 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt040d.dll
        2017-01-15 12:56 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0404.dll
        2017-01-15 12:56 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0401.dll
        2017-01-15 12:56 - 2003-03-24 16:52 - 00618605 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4autl.dll
        2017-01-15 12:56 - 2003-03-24 16:52 - 00094208 ____C C:\WINDOWS\system32\dllcache\fpencode.dll
        2017-01-15 12:56 - 2003-03-24 16:52 - 00032827 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcptest.exe
        2017-01-15 12:56 - 2003-03-24 16:52 - 00024632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpadmcgi.exe
        2017-01-15 12:56 - 2003-03-24 16:52 - 00020541 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpadmdll.dll
        2017-01-15 12:56 - 2003-03-24 16:52 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcptsat.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 10129408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxkor.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 10096640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxcht.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 01677824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chsbrkr.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00838144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtbrkr.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00514587 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\edb500.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00311359 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsv.exe
        2017-01-15 12:56 - 2001-08-23 07:00 - 00195618 ____C C:\WINDOWS\system32\dllcache\c_10002.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00189986 ____C C:\WINDOWS\system32\dllcache\c_1361.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00187938 ____C C:\WINDOWS\system32\dllcache\c_20005.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00186402 ____C C:\WINDOWS\system32\dllcache\c_20001.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00185378 ____C C:\WINDOWS\system32\dllcache\c_20003.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00180770 ____C C:\WINDOWS\system32\dllcache\c_20932.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00180258 ____C C:\WINDOWS\system32\dllcache\c_20004.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00180258 ____C C:\WINDOWS\system32\dllcache\c_20000.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00177698 ____C C:\WINDOWS\system32\dllcache\c_20949.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00177698 ____C C:\WINDOWS\system32\dllcache\c_10003.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00173602 ____C C:\WINDOWS\system32\dllcache\c_20936.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00173602 ____C C:\WINDOWS\system32\dllcache\c_20002.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00173602 ____C C:\WINDOWS\system32\dllcache\c_10008.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00162850 ____C C:\WINDOWS\system32\dllcache\c_10001.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00134339 ____C C:\WINDOWS\system32\dllcache\imekr.lex
        2017-01-15 12:56 - 2001-08-23 07:00 - 00132608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsclntr.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00111104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscfgwz.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00108827 ____C C:\WINDOWS\system32\dllcache\hanja.lex
        2017-01-15 12:56 - 2001-08-23 07:00 - 00102463 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsm.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00082172 ____C C:\WINDOWS\system32\dllcache\bopomofo.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066728 ____C C:\WINDOWS\system32\dllcache\big5.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_864.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_862.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_858.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_720.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_870.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_708.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28596.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_21027.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_21025.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20924.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20880.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20871.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20838.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20833.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20424.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20423.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20420.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20297.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20290.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20285.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20284.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20280.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20278.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20277.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20273.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20269.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20108.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20107.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20106.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20105.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1149.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1148.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1147.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1146.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1145.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1144.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1143.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1142.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1141.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1140.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1047.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10021.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10005.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10004.nls
        2017-01-15 12:56 - 2001-08-23 07:00 - 00060928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisclex4.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00057856 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuimgd.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00057398 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdadm.exe
        2017-01-15 12:56 - 2001-08-23 07:00 - 00056320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\convlog.exe
        2017-01-15 12:56 - 2001-08-23 07:00 - 00054528 ____C (Philips Semiconductors GmbH) C:\WINDOWS\system32\dllcache\cap7146.sys
        2017-01-15 12:56 - 2001-08-23 07:00 - 00049664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adrot.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\browscap.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00045056 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esunid.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrmig.exe
        2017-01-15 12:56 - 2001-08-23 07:00 - 00036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hanjadic.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\controt.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00031744 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esucmd.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsroute.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asptxn.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00025856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\et4000.sys
        2017-01-15 12:56 - 2001-08-23 07:00 - 00020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\counters.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iiscrmap.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cprofile.exe
        2017-01-15 12:56 - 2001-08-23 07:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgport.exe
        2017-01-15 12:56 - 2001-08-23 07:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\flattemp.exe
        2017-01-15 12:56 - 2001-08-23 07:00 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgusr.exe
        2017-01-15 12:56 - 2001-08-23 07:00 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chglogon.exe
        2017-01-15 12:56 - 2001-08-23 07:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxssend.exe
        2017-01-15 12:56 - 2001-08-23 07:00 - 00010752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_iscii.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aspperf.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\change.exe
        2017-01-15 12:56 - 2001-08-23 07:00 - 00009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\authfilt.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpctrs2.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamregps.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iissync.exe
        2017-01-15 12:56 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_is2022.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftlx041e.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admxprox.dll
        2017-01-15 12:56 - 2001-08-23 07:00 - 00003584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iismui.dll
        2017-01-15 12:56 - 2001-08-17 22:36 - 00045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_aqadmin.dll
        2017-01-15 12:56 - 2001-08-17 22:36 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_fcachdll.dll
        2017-01-15 12:56 - 2001-08-17 22:36 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_adsiisex.dll
        2017-01-15 12:55 - 2017-01-15 19:32 - 00023392 _____ C:\WINDOWS\system32\nscompat.tlb
        2017-01-15 12:55 - 2017-01-15 19:32 - 00016832 _____ C:\WINDOWS\system32\amcompat.tlb
        2017-01-15 12:55 - 2017-01-15 13:05 - 00001507 _____ C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk
        2017-01-15 12:55 - 2017-01-15 12:55 - 00316640 _____ C:\WINDOWS\WMSysPr9.prx
        2017-01-15 12:55 - 2017-01-15 12:55 - 00002577 _____ C:\WINDOWS\system32\CONFIG.NT
        2017-01-15 12:55 - 2017-01-15 12:55 - 00001607 _____ C:\Documents and Settings\All Users\Start Menu\Set Program Access and Defaults.lnk
        2017-01-15 12:55 - 2017-01-15 12:55 - 00001599 _____ C:\Documents and Settings\Default User\Start Menu\Programs\Remote Assistance.lnk
        2017-01-15 12:55 - 2017-01-15 12:55 - 00000792 _____ C:\Documents and Settings\Default User\Start Menu\Programs\Windows Media Player.lnk
        2017-01-15 12:55 - 2017-01-15 12:55 - 00000398 _____ C:\Documents and Settings\All Users\Start Menu\Windows Catalog.lnk
        2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 __RSH C:\MSDOS.SYS
        2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 __RSH C:\IO.SYS
        2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 ____D C:\WINDOWS\system32\xircom
        2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 ____D C:\Program Files\xerox
        2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 ____D C:\Program Files\microsoft frontpage
        2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 _____ C:\WINDOWS\control.ini
        2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 _____ C:\CONFIG.SYS
        2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 _____ C:\AUTOEXEC.BAT
        2017-01-15 12:55 - 2008-04-13 22:42 - 02134528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smtpsnap.dll
        2017-01-15 12:55 - 2008-04-13 22:42 - 00189440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smtpadm.dll
        2017-01-15 12:55 - 2008-04-13 22:42 - 00030720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisrstas.exe
        2017-01-15 12:55 - 2008-04-13 22:42 - 00008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\staxmem.dll
        2017-01-15 12:55 - 2008-04-13 22:41 - 00829440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetmgr.dll
        2017-01-15 12:55 - 2008-04-13 22:41 - 00290816 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adsiis51.dll
        2017-01-15 12:55 - 2008-04-13 22:41 - 00133632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisrtl.dll
        2017-01-15 12:55 - 2008-04-13 22:41 - 00068608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isatq.dll
        2017-01-15 12:55 - 2008-04-13 22:41 - 00068608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisext51.dll
        2017-01-15 12:55 - 2008-04-13 22:41 - 00064512 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iismap.dll
        2017-01-15 12:55 - 2008-04-13 22:41 - 00046592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\coadmin.dll
        2017-01-15 12:55 - 2008-04-13 22:41 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admwprox.dll
        2017-01-15 12:55 - 2008-04-13 22:41 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\infoadmn.dll
        2017-01-15 12:55 - 2008-04-13 22:40 - 00076800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\logui.ocx
        2017-01-15 12:55 - 2008-04-13 22:39 - 00275968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\certwiz.ocx
        2017-01-15 12:55 - 2008-04-13 22:39 - 00076288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cnfgprts.ocx
        2017-01-15 12:55 - 2004-05-13 00:39 - 00876653 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4awel.dll
        2017-01-15 12:55 - 2004-05-13 00:39 - 00598071 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpmmc.dll
        2017-01-15 12:55 - 2004-05-13 00:39 - 00184435 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4amsft.dll
        2017-01-15 12:55 - 2003-03-24 16:52 - 00208896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpmmcsat.dll
        2017-01-15 12:55 - 2003-03-24 16:52 - 00188494 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpcount.exe
        2017-01-15 12:55 - 2003-03-24 16:52 - 00188480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cfgwiz.exe
        2017-01-15 12:55 - 2003-03-24 16:52 - 00147513 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4apws.dll
        2017-01-15 12:55 - 2003-03-24 16:52 - 00109328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp98swin.exe
        2017-01-15 12:55 - 2003-03-24 16:52 - 00102509 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4atxt.dll
        2017-01-15 12:55 - 2003-03-24 16:52 - 00082035 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4anscp.dll
        2017-01-15 12:55 - 2003-03-24 16:52 - 00049212 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4awebs.dll
        2017-01-15 12:55 - 2003-03-24 16:52 - 00049210 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4areg.dll
        2017-01-15 12:55 - 2003-03-24 16:52 - 00041020 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4avnb.dll
        2017-01-15 12:55 - 2003-03-24 16:52 - 00032826 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4avss.dll
        2017-01-15 12:55 - 2003-03-24 16:52 - 00020541 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpexedll.dll
        2017-01-15 12:55 - 2003-03-24 16:52 - 00020540 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\author.dll
        2017-01-15 12:55 - 2003-03-24 16:52 - 00020540 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admin.dll
        2017-01-15 12:55 - 2003-03-24 16:52 - 00020538 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpremadm.exe
        2017-01-15 12:55 - 2003-03-24 16:52 - 00020536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shtml.dll
        2017-01-15 12:55 - 2003-03-24 16:52 - 00016439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\author.exe
        2017-01-15 12:55 - 2003-03-24 16:52 - 00016439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admin.exe
        2017-01-15 12:55 - 2003-03-24 16:52 - 00016437 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shtml.exe
        2017-01-15 12:55 - 2003-03-24 16:52 - 00014608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp98sadm.exe
        2017-01-15 12:55 - 2001-08-23 07:00 - 00169984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisui.dll
        2017-01-15 12:55 - 2001-08-23 07:00 - 00094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\certmap.ocx
        2017-01-15 12:55 - 2001-08-23 07:00 - 00019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetsloc.dll
        2017-01-15 12:55 - 2001-08-23 07:00 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisreset.exe
        2017-01-15 12:55 - 2001-08-23 07:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetmgr.exe
        2017-01-15 12:55 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpsapi2.dll
        2017-01-15 12:55 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisrstap.dll
        2017-01-15 12:54 - 2001-08-23 07:00 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapi32.dll
        2017-01-15 12:53 - 2017-02-13 17:47 - 00000749 ___RH C:\WINDOWS\WindowsShell.Manifest
        2017-01-15 12:53 - 2017-02-13 17:47 - 00000749 ___RH C:\WINDOWS\system32\wuaucpl.cpl.manifest
        2017-01-15 12:53 - 2017-02-13 17:47 - 00000749 ___RH C:\WINDOWS\system32\sapi.cpl.manifest
        2017-01-15 12:53 - 2017-02-13 17:47 - 00000749 ___RH C:\WINDOWS\system32\nwc.cpl.manifest
        2017-01-15 12:53 - 2017-02-13 17:47 - 00000749 ___RH C:\WINDOWS\system32\ncpa.cpl.manifest
        2017-01-15 12:53 - 2017-02-13 17:47 - 00000749 ___RH C:\WINDOWS\system32\cdplayer.exe.manifest
        2017-01-15 12:53 - 2017-02-13 17:16 - 00000000 __SHD C:\Documents and Settings\All Users\DRM
        2017-01-15 12:53 - 2017-01-24 00:03 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
        2017-01-15 12:53 - 2017-01-22 20:05 - 00000000 ____D C:\WINDOWS\system32\DirectX
        2017-01-15 12:53 - 2017-01-15 12:53 - 00000786 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Windows Movie Maker.lnk
        2017-01-15 12:53 - 2017-01-15 12:53 - 00000488 ___RH C:\WINDOWS\system32\WindowsLogon.manifest
        2017-01-15 12:53 - 2017-01-15 12:53 - 00000488 ___RH C:\WINDOWS\system32\logonui.exe.manifest
        2017-01-15 12:53 - 2017-01-15 12:53 - 00000000 ___RD C:\WINDOWS\Offline Web Pages
        2017-01-15 12:53 - 2017-01-15 12:53 - 00000000 ___HD C:\Program Files\WindowsUpdate
        2017-01-15 12:53 - 2001-08-23 07:00 - 04399505 ____C C:\WINDOWS\system32\dllcache\nls302en.lex
        2017-01-15 12:52 - 2017-01-24 02:44 - 00000000 ____D C:\WINDOWS\system32\Macromed
        2017-01-15 12:52 - 2017-01-15 16:51 - 00000000 ____D C:\Program Files\Outlook Express
        2017-01-15 12:52 - 2017-01-15 16:51 - 00000000 ____D C:\Program Files\Movie Maker
        2017-01-15 12:52 - 2017-01-15 12:53 - 00000000 ____D C:\WINDOWS\srchasst
        2017-01-15 12:52 - 2017-01-15 12:52 - 00000000 ____D C:\Program Files\NetMeeting
        2017-01-15 12:52 - 2017-01-15 12:52 - 00000000 ____D C:\Program Files\Common Files\System
        2017-01-15 12:52 - 2017-01-15 12:52 - 00000000 ____D C:\Program Files\Common Files\Services
        2017-01-15 12:52 - 2017-01-15 12:52 - 00000000 ____D C:\Program Files\Common Files\MSSoap
        2017-01-15 12:52 - 2014-02-05 18:26 - 00759296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\vgx.dll
        2017-01-15 12:52 - 2012-06-02 15:19 - 01933848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
        2017-01-15 12:52 - 2012-06-02 15:19 - 00577048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
        2017-01-15 12:52 - 2012-06-02 15:19 - 00329240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltui.dll
        2017-01-15 12:52 - 2012-06-02 15:19 - 00219160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaucpl.cpl
        2017-01-15 12:52 - 2012-06-02 15:19 - 00210968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuweb.dll
        2017-01-15 12:52 - 2012-06-02 15:19 - 00053784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
        2017-01-15 12:52 - 2012-06-02 15:19 - 00035864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wups.dll
        2017-01-15 12:52 - 2012-06-02 15:19 - 00035864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
        2017-01-15 12:52 - 2012-05-28 13:16 - 00536576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado15.dll
        2017-01-15 12:52 - 2011-10-10 09:22 - 00692736 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetcomm.dll
        2017-01-15 12:52 - 2011-10-10 09:22 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
        2017-01-15 12:52 - 2010-11-18 13:12 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isign32.dll
        2017-01-15 12:52 - 2010-11-18 13:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\isign32.dll
        2017-01-15 12:52 - 2010-11-09 09:52 - 00200704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadox.dll
        2017-01-15 12:52 - 2010-11-09 09:52 - 00180224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadomd.dll
        2017-01-15 12:52 - 2010-11-09 09:52 - 00143360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadco.dll
        2017-01-15 12:52 - 2010-11-09 09:52 - 00102400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msjro.dll
        2017-01-15 12:52 - 2010-11-08 07:41 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado27.tlb
        2017-01-15 12:52 - 2010-11-08 07:41 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado26.tlb
        2017-01-15 12:52 - 2010-11-08 07:41 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado25.tlb
        2017-01-15 12:52 - 2010-11-08 07:41 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado21.tlb
        2017-01-15 12:52 - 2010-11-08 07:41 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado20.tlb
        2017-01-15 12:52 - 2010-10-11 09:59 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wab.exe
        2017-01-15 12:52 - 2010-06-18 08:36 - 03558912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\moviemk.exe
        2017-01-15 12:52 - 2010-06-14 09:31 - 00744448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\helpsvc.exe
        2017-01-15 12:52 - 2010-01-29 10:01 - 01315328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msoe.dll
        2017-01-15 12:52 - 2009-07-27 17:27 - 00128512 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dhtmled.ocx
        2017-01-15 12:52 - 2009-06-21 16:44 - 00153088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\triedit.dll
        2017-01-15 12:52 - 2009-03-08 14:09 - 00638816 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iexplore.exe
        2017-01-15 12:52 - 2009-03-08 04:24 - 00068608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hmmapi.dll
        2017-01-15 12:52 - 2008-05-01 09:33 - 00331776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadce.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 04256768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2res.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 03166208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msgr3en.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 01135616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuaueng.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 01032192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\conf.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00786432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\migrate.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00769024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\helpctr.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00726078 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srchui.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00565248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msobmain.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00510976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wab32.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00502272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2fxa.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00487424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oledb32.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00430592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuapi.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00409088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qmgr.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00402432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2filt.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00380416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rstrui.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00376832 ____C () C:\WINDOWS\system32\dllcache\msinfo.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00364544 ____C (Microsoft Corporation (written by Digital Renaissance Inc.)) C:\WINDOWS\system32\dllcache\npdsplay.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00325632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2fxb.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00315392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdasql.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00274944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstask.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstask.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00274432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mst120.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00252928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msoeacct.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msoeacct.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00239104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srrstr.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00233472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaora.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00229376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmas.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00226816 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\npdrmv2.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00221184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmpns.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00221184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nac.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00217088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sqlxmlx.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00214528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwconn1.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00204800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaps.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00200704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaprst.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00192512 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\schedsvc.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00188416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmwb.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msh261.drv
        2017-01-15 12:52 - 2008-04-13 22:42 - 00183296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuaueng1.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng1.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00172032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmoldwb.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00171008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srsvc.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\srsvc.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00169984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msconfig.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00167936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2ae.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00165888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuauclt1.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt1.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00162304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuaucpl.cpl
        2017-01-15 12:52 - 2008-04-13 22:42 - 00155648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadds.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00151552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmft.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00150528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\uploadm.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00122368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msobcomm.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00120320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuweb.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00118784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdarem.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00112640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wucltui.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00111104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuauclt.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00105984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msoert2.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\msoert2.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00104448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oeimport.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00102912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pchshell.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00094208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdatl3.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwconn2.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00085504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wabimp.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmchat.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00077824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmcom.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00077824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaosp.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00073216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\setup50.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00069632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msconf.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msconf.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00067584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srclient.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oledb32r.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rrcm.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadcf.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00060416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oemig50.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00060416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msimn.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00058434 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srchctls.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00057344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mst123.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00057344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadrh15.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00057344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msador15.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadcs.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00051200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oobebaln.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\safrslv.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\safrslv.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\safrcdlg.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\racpldlg.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\safrcdlg.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\racpldlg.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00038400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pchsvc.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdfmap.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00035328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oemiglib.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00032768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wabfind.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00032768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mnmsrvc.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mnmsrvc.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00030720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msobshel.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wabmig.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00029696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\safrdm.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\safrdm.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msoobe.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmmkcert.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmasnt.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\nmmkcert.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msxactps.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwrmind.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fltmc.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltMc.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdatt.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetwiz.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msobweb.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qmgrprxy.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgrprxy.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedw.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hscupd.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msobdl.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstinit.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstinit.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\npwmsdrm.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2ext.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuauserv.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauserv.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2res2.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00004639 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mplayer2.exe
        2017-01-15 12:52 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2eres.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaurl.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdasc.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaer.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaenum.dll
        2017-01-15 12:52 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdadc.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00385024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\callcont.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00274432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetcfg.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcfg.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00172032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwhelp.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00086528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\directdb.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ils.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ils.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00073728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwdial.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\icwdial.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwphbk.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\icwphbk.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwconn.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00057344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\h323cc.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00049152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwutil.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\confmrsl.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dcap32.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00034560 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mnmdd.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00034560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mnmdd.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\custsat.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00032768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwdl.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00032768 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\isrdbg32.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00032768 _____ (Intel Corporation) C:\WINDOWS\system32\isrdbg32.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fltlib.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltlib.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bitsprx2.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx2.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bitsprx4.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bitsprx3.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx4.dll
        2017-01-15 12:52 - 2008-04-13 22:41 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx3.dll
        2017-01-15 12:52 - 2008-04-13 17:06 - 00073472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sr.sys
        2017-01-15 12:52 - 2008-04-13 17:06 - 00073472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sr.sys
        2017-01-15 12:52 - 2008-04-13 17:03 - 00129792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fltmgr.sys
        2017-01-15 12:52 - 2008-04-13 17:03 - 00129792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
        2017-01-15 12:52 - 2008-04-13 15:56 - 00024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msader15.dll
        2017-01-15 12:52 - 2008-04-13 15:56 - 00024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msaddsr.dll
        2017-01-15 12:52 - 2008-04-13 15:56 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdasqlr.dll
        2017-01-15 12:52 - 2008-04-13 15:56 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaremr.dll
        2017-01-15 12:52 - 2008-04-13 15:56 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaprsr.dll
        2017-01-15 12:52 - 2008-04-13 15:55 - 00020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadcer.dll
        2017-01-15 12:52 - 2008-04-13 15:55 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadcor.dll
        2017-01-15 12:52 - 2008-04-13 15:55 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadcfr.dll
        2017-01-15 12:52 - 2008-04-13 15:54 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaorar.dll
        2017-01-15 12:52 - 2008-04-13 14:53 - 02479616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msoeres.dll
        2017-01-15 12:52 - 2008-04-13 14:52 - 00048128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetres.dll
        2017-01-15 12:52 - 2008-04-13 14:52 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetres.dll
        2017-01-15 12:52 - 2008-04-13 14:51 - 00249856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wab32res.dll
        2017-01-15 12:52 - 2008-01-19 09:34 - 00554008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dao360.dll
        2017-01-15 12:52 - 2006-11-01 18:31 - 01669120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\setup_wm.exe
        2017-01-15 12:52 - 2006-10-18 21:47 - 00243712 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mpvis.dll
        2017-01-15 12:52 - 2006-10-18 21:47 - 00096256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmpband.dll
        2017-01-15 12:52 - 2006-10-18 21:46 - 00064000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmplayer.exe
        2017-01-15 12:52 - 2001-08-23 07:00 - 00235520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mssoap1.dll
        2017-01-15 12:52 - 2001-08-23 07:00 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msg723.acm
        2017-01-15 12:52 - 2001-08-23 07:00 - 00099840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\helphost.exe
        2017-01-15 12:52 - 2001-08-23 07:00 - 00093184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieinfo5.ocx
        2017-01-15 12:52 - 2001-08-23 07:00 - 00073728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwtutor.exe
        2017-01-15 12:52 - 2001-08-23 07:00 - 00064512 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\acctres.dll
        2017-01-15 12:52 - 2001-08-23 07:00 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\acctres.dll
        2017-01-15 12:52 - 2001-08-23 07:00 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwres.dll
        2017-01-15 12:52 - 2001-08-23 07:00 - 00048680 ___SH C:\WINDOWS\winnt256.bmp
        2017-01-15 12:52 - 2001-08-23 07:00 - 00048680 ___SH C:\WINDOWS\winnt.bmp
        2017-01-15 12:52 - 2001-08-23 07:00 - 00047104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srdiag.exe
        2017-01-15 12:52 - 2001-08-23 07:00 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\trialoc.dll
        2017-01-15 12:52 - 2001-08-23 07:00 - 00039936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msinfo32.exe
        2017-01-15 12:52 - 2001-08-23 07:00 - 00035328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\notiflag.exe
        2017-01-15 12:52 - 2001-08-23 07:00 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wisc10.dll
        2017-01-15 12:52 - 2001-08-23 07:00 - 00023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mssoapr.dll
        2017-01-15 12:52 - 2001-08-23 07:00 - 00021504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\brpinfo.dll
        2017-01-15 12:52 - 2001-08-23 07:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isignup.exe
        2017-01-15 12:52 - 2001-08-23 07:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icfgnt5.dll
        2017-01-15 12:52 - 2001-08-23 07:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfgnt5.dll
        2017-01-15 12:52 - 2001-08-23 07:00 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wb32.exe
        2017-01-15 12:52 - 2001-08-23 07:00 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmevtmsg.dll
        2017-01-15 12:52 - 2001-08-23 07:00 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cb32.exe
        2017-01-15 12:52 - 2001-08-23 07:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\nmevtmsg.dll
        2017-01-15 12:52 - 2001-08-23 07:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\atrace.dll
        2017-01-15 12:52 - 2001-08-23 07:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\atrace.dll
        2017-01-15 12:52 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hcappres.dll
        2017-01-15 12:52 - 2001-08-23 07:00 - 00000984 ____C C:\WINDOWS\system32\dllcache\srframe.mmf
        2017-01-15 12:51 - 2017-02-13 18:31 - 00000000 ____D C:\Program Files\Online Services
        2017-01-15 12:51 - 2017-02-13 16:00 - 00000000 ____D C:\WINDOWS\Registration
        2017-01-15 12:51 - 2017-01-15 12:51 - 00021640 _____ C:\WINDOWS\system32\emptyregdb.dat
        2017-01-15 12:51 - 2017-01-15 12:51 - 00000037 _____ C:\WINDOWS\vbaddin.ini
        2017-01-15 12:51 - 2017-01-15 12:51 - 00000036 _____ C:\WINDOWS\vb.ini
        2017-01-15 12:51 - 2017-01-15 12:51 - 00000000 ___RD C:\Documents and Settings\All Users\Start Menu\Programs\Games
        2017-01-15 12:51 - 2017-01-15 12:51 - 00000000 ____D C:\Program Files\ComPlus Applications
        2017-01-15 12:50 - 2017-01-15 17:01 - 00000000 ____D C:\Program Files\Messenger
        2017-01-15 12:50 - 2017-01-15 12:51 - 00000000 ____D C:\WINDOWS\system32\MsDtc
        2017-01-15 12:50 - 2017-01-15 12:51 - 00000000 ____D C:\WINDOWS\system32\Com
        2017-01-15 12:50 - 2017-01-15 12:50 - 00000000 ____D C:\Program Files\Windows NT
        2017-01-15 12:50 - 2017-01-15 12:50 - 00000000 ____D C:\Program Files\MSN Gaming Zone
        2017-01-15 12:50 - 2017-01-15 12:50 - 00000000 ____D C:\Program Files\MSN
        2017-01-15 12:50 - 2013-02-27 02:56 - 02067456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lhmstscx.dll
        2017-01-15 12:50 - 2013-02-27 02:56 - 02067456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
        2017-01-15 12:50 - 2012-07-04 09:05 - 00139784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpwd.sys
        2017-01-15 12:50 - 2012-07-04 09:05 - 00139784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpwd.sys
        2017-01-15 12:50 - 2011-01-27 06:57 - 00677888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lhmstsc.exe
        2017-01-15 12:50 - 2011-01-27 06:57 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
        2017-01-15 12:50 - 2010-07-12 07:55 - 00218112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wordpad.exe
        2017-01-15 12:50 - 2009-12-16 13:43 - 00343040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mspaint.exe
        2017-01-15 12:50 - 2009-12-16 13:43 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
        2017-01-15 12:50 - 2009-02-09 07:10 - 00473600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fastprox.dll
        2017-01-15 12:50 - 2009-02-09 07:10 - 00453120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiprvsd.dll
        2017-01-15 12:50 - 2009-02-06 05:10 - 00227840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiprvse.exe
        2017-01-15 12:50 - 2008-06-12 09:23 - 00956928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdtctm.dll
        2017-01-15 12:50 - 2008-06-12 09:23 - 00956928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
        2017-01-15 12:50 - 2008-06-12 09:23 - 00428032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdtcprx.dll
        2017-01-15 12:50 - 2008-06-12 09:23 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
        2017-01-15 12:50 - 2008-06-12 09:23 - 00161792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdtcuiu.dll
        2017-01-15 12:50 - 2008-06-12 09:23 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
        2017-01-15 12:50 - 2008-06-12 09:23 - 00091648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtxoci.dll
        2017-01-15 12:50 - 2008-06-12 09:23 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
        2017-01-15 12:50 - 2008-06-12 09:23 - 00058880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdtclog.dll
        2017-01-15 12:50 - 2008-06-12 09:23 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtclog.dll
        2017-01-15 12:50 - 2008-04-14 05:43 - 00040840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\termdd.sys
        2017-01-15 12:50 - 2008-04-14 00:02 - 00196224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
        2017-01-15 12:50 - 2008-04-13 22:43 - 00087176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpwsx.dll
        2017-01-15 12:50 - 2008-04-13 22:43 - 00087176 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpwsx.dll
        2017-01-15 12:50 - 2008-04-13 22:43 - 00021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdtcp.sys
        2017-01-15 12:50 - 2008-04-13 22:43 - 00021896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdtcp.sys
        2017-01-15 12:50 - 2008-04-13 22:43 - 00012040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdpipe.sys
        2017-01-15 12:50 - 2008-04-13 22:43 - 00012040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdpipe.sys
        2017-01-15 12:50 - 2008-04-13 22:42 - 00539136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dialer.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00538624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\spider.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\spider.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00531456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemcore.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00358912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmic.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00295424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\termsrv.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00290304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rhttpaa.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\system32\rhttpaa.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00281088 ____C (Cinematronics) C:\WINDOWS\system32\dllcache\pinball.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00273920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemess.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00237056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\provthrd.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00214528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemcomn.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00212992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntevt.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00197120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemupgd.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00196608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiadap.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00196608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemcntl.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00184320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\accwiz.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\accwiz.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00178176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemdisp.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00178176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\repdrvfs.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipcima.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00147968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdchost.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdchost.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00144896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmisvc.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00144896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiprov.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00141312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sessmgr.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\sessmgr.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00140800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmidcprv.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00132096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipdskq.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00131584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\viewprov.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00131584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sndrec32.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sndrec32.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00126464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiapsrv.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00123392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mplay32.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mplay32.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00116224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemtest.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00102912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\clipbrd.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\clipbrd.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00095232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiutils.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00093696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tscfgwmi.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscfgwmi.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00092672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\policman.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00088576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiaprpl.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00086528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\stdprov.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00071680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemcons.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00068608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\access.cpl
        2017-01-15 12:50 - 2008-04-13 22:42 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\access.cpl
        2017-01-15 12:50 - 2008-04-13 22:42 - 00067072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdshost.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdshost.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00062976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpclip.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00062464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipjobj.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00061952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipiprt.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00060928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmicookr.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00060416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\remotepg.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remotepg.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00059392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\stclient.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\stclient.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00056320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\servdeps.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\servdeps.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsgqec.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00047104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ncprov.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemsvc.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00041472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipsess.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00036352 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scrcons.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00034304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtxlegih.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxlegih.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00030720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtxdm.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxdm.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpsnd.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qprocess.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsnd.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\qprocess.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemprox.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mofcomp.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00013824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdsaddin.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsaddin.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00011776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xolehlp.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\xolehlp.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comrepl.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdtc.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dcomcnfg.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comrereg.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtc.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomcnfg.exe
        2017-01-15 12:50 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtxex.dll
        2017-01-15 12:50 - 2008-04-13 22:42 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxex.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 01358848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cimwin32.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 01267200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comsvcs.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 01267200 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00625664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\catsrvut.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00625664 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00539648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comuid.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\comuid.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00498688 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\clbcatq.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\clbcatq.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00347136 _____ (Hilgraeve, Inc.) C:\WINDOWS\system32\hypertrm.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\esscli.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00226304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\catsrv.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrv.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00195072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comadmin.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00185344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\framedyn.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00185344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cmprops.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmprops.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00167424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comsnap.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsnap.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00136192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aaclient.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\aaclient.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00123904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mofd.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00110592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\clbcatex.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\clbcatex.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00097792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comrepl.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\comrepl.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00085504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\catsrvps.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00060416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\colbact.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\colbact.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00058880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\licwmi.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\licwmi.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cfgbkend.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00028160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comaddin.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comaddin.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\krnlprov.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00017408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mmfutil.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmfutil.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icaapi.dll
        2017-01-15 12:50 - 2008-04-13 22:41 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\icaapi.dll
        2017-01-15 12:50 - 2008-04-13 15:40 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiapres.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 02178131 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shvlres.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 01817687 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bckgres.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 01175635 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hrtzres.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 01039955 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cmnresm.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00780885 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chkrres.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00753236 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rvseres.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00605696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\getuname.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00605696 _____ (Microsoft Corporation) C:\WINDOWS\system32\getuname.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00273920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msiprov.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00227840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avtapi.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\avtapi.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00217160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cmnclim.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00138752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sndvol32.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\sndvol32.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00126976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshearts.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshearts.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00120320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dsprov.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00119808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winmine.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmine.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00116224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\updprov.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00114688 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\calc.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00113222 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\zoneclim.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00093702 _____ C:\WINDOWS\system32\subrange.uce
        2017-01-15 12:50 - 2001-08-23 07:00 - 00082501 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bckg.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00080384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\charmap.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\charmap.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00075264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipicmp.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00073216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avwav.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\avwav.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00066113 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shvl.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00065978 _____ C:\WINDOWS\Soap Bubbles.bmp
        2017-01-15 12:50 - 2001-08-23 07:00 - 00065954 _____ C:\WINDOWS\Prairie Wind.bmp
        2017-01-15 12:50 - 2001-08-23 07:00 - 00065832 _____ C:\WINDOWS\Santa Fe Stucco.bmp
        2017-01-15 12:50 - 2001-08-23 07:00 - 00063488 _____ C:\WINDOWS\system32\wmimgmt.msc
        2017-01-15 12:50 - 2001-08-23 07:00 - 00061952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tmplprov.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmimsg.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00060458 _____ C:\WINDOWS\system32\ideograf.uce
        2017-01-15 12:50 - 2001-08-23 07:00 - 00059904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemdisp.tlb
        2017-01-15 12:50 - 2001-08-23 07:00 - 00059904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\trnsprov.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00057409 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hrtz.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00056832 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sol.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\sol.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\freecell.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\freecell.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fwdprov.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00052224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmitimep.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00048706 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rvse.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmi2xml.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00044544 _____ (Hilgraeve, Inc.) C:\WINDOWS\system32\hticons.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00042577 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bckgzm.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00042575 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chkrzm.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00042574 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rvsezm.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00042573 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shvlzm.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00042573 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hrtzzm.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00041029 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\zcorem.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smtpcons.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00040515 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chkr.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00036937 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\zclientm.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00035328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winchat.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\winchat.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\regini.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\regini.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00032339 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\uniansi.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00031232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemads.tlb
        2017-01-15 12:50 - 2001-08-23 07:00 - 00029760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\znetm.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00026680 _____ C:\WINDOWS\River Sumida.bmp
        2017-01-15 12:50 - 2001-08-23 07:00 - 00026582 _____ C:\WINDOWS\Greenstone.bmp
        2017-01-15 12:50 - 2001-08-23 07:00 - 00024006 _____ C:\WINDOWS\system32\gb2312.uce
        2017-01-15 12:50 - 2001-08-23 07:00 - 00022984 _____ C:\WINDOWS\system32\bopomofo.uce
        2017-01-15 12:50 - 2001-08-23 07:00 - 00022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qwinsta.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\qwinsta.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00020992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msg.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msg.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtsadmin.tlb
        2017-01-15 12:50 - 2001-08-23 07:00 - 00017362 _____ C:\WINDOWS\Rhododendron.bmp
        2017-01-15 12:50 - 2001-08-23 07:00 - 00017336 _____ C:\WINDOWS\Gone Fishing.bmp
        2017-01-15 12:50 - 2001-08-23 07:00 - 00017062 _____ C:\WINDOWS\Coffee Bean.bmp
        2017-01-15 12:50 - 2001-08-23 07:00 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\unsecapp.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsshutdn.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qappsrv.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsshutdn.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\qappsrv.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00016740 _____ C:\WINDOWS\system32\shiftjis.uce
        2017-01-15 12:50 - 2001-08-23 07:00 - 00016730 _____ C:\WINDOWS\FeatherTexture.bmp
        2017-01-15 12:50 - 2001-08-23 07:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winmgmtr.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tskill.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avmeter.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\tskill.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\avmeter.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rwinsta.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cdmodem.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rwinsta.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdmodem.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\logoff.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoff.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsdiscon.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tscon.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shadow.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsdiscon.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscon.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\shadow.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00013894 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\zonelibm.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winmgmt.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00013312 ____C (Hilgraeve, Inc.) C:\WINDOWS\system32\dllcache\htrn_jis.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00013223 _____ C:\WINDOWS\system32\tslabels.ini
        2017-01-15 12:50 - 2001-08-23 07:00 - 00012876 _____ C:\WINDOWS\system32\korean.uce
        2017-01-15 12:50 - 2001-08-23 07:00 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemads.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\reset.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\reset.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00009522 _____ C:\WINDOWS\Zapotec.bmp
        2017-01-15 12:50 - 2001-08-23 07:00 - 00008484 _____ C:\WINDOWS\system32\kanji_2.uce
        2017-01-15 12:50 - 2001-08-23 07:00 - 00006948 _____ C:\WINDOWS\system32\kanji_1.uce
        2017-01-15 12:50 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\write.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\write.exe
        2017-01-15 12:50 - 2001-08-23 07:00 - 00004677 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\zeeverm.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpcfgex.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcfgex.dll
        2017-01-15 12:50 - 2001-08-23 07:00 - 00003286 _____ C:\WINDOWS\system32\tslabels.h
        2017-01-15 12:50 - 2001-08-23 07:00 - 00001931 _____ C:\WINDOWS\system32\msdtcprf.ini
        2017-01-15 12:50 - 2001-08-23 07:00 - 00001272 _____ C:\WINDOWS\Blue Lace 16.bmp
        2017-01-15 12:50 - 2001-08-23 07:00 - 00001161 _____ C:\WINDOWS\system32\usrlogon.cmd
        2017-01-15 12:50 - 2001-08-23 07:00 - 00000768 _____ C:\WINDOWS\system32\msdtcprf.h
        2017-01-15 07:47 - 2017-01-15 07:47 - 00000000 _____ C:\WINDOWS\system32\h323log.txt
        2017-01-15 07:46 - 2017-01-15 22:53 - 00004444 _____ C:\WINDOWS\system32\pid.PNF
        2017-01-15 07:46 - 2001-08-17 08:59 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\audstub.sys
        2017-01-15 07:45 - 2008-04-14 00:41 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\hidserv.dll
        2017-01-15 07:44 - 2017-01-15 13:45 - 04118592 _____ (ATI Technologies Inc. ) C:\WINDOWS\system32\ati3duag.dll
        2017-01-15 07:44 - 2017-01-15 13:45 - 03451904 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\ati2mtag.sys
        2017-01-15 07:44 - 2017-01-15 13:45 - 03451904 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\Drivers\ati2mtag.sys
        2017-01-15 07:44 - 2017-01-15 13:45 - 02495232 _____ (ATI Technologies Inc. ) C:\WINDOWS\system32\ativvaxx.dll
        2017-01-15 07:44 - 2017-01-15 13:45 - 00577536 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\ati2cqag.dll
        2017-01-15 07:44 - 2017-01-15 13:45 - 00318464 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\ati2dvag.dll
        2017-01-15 07:44 - 2008-04-14 00:41 - 00870784 _____ (ATI Technologies Inc. ) C:\WINDOWS\system32\ati3d1ag.dll
        2017-01-15 07:44 - 2008-04-13 19:10 - 00057600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\redbook.sys
        2017-01-15 07:44 - 2001-08-17 08:46 - 00006400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\enum1394.sys
        2017-01-15 07:43 - 2008-04-14 00:42 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbui.dll
        2017-01-15 07:43 - 2008-04-13 19:06 - 00044672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UAGP35.SYS
        2017-01-15 07:43 - 2001-08-17 07:13 - 00027165 _____ (VIA Technologies, Inc. ) C:\WINDOWS\system32\Drivers\fetnd5.sys
        2017-01-15 07:41 - 2017-02-13 18:31 - 00571032 _____ C:\WINDOWS\system32\PerfStringBackup.INI
        2017-01-15 07:41 - 2017-01-21 17:11 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
        2017-01-15 07:41 - 2017-01-15 12:54 - 00004161 _____ C:\WINDOWS\ODBCINST.INI
        2017-01-15 07:41 - 2017-01-15 07:41 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
        2017-01-15 07:41 - 2017-01-15 07:41 - 00000000 ____D C:\Program Files\Common Files\ODBC
        2017-01-15 07:41 - 2017-01-15 07:41 - 00000000 ____D C:\Documents and Settings\Default User\My Documents
        2017-01-15 07:41 - 2017-01-15 07:41 - 00000000 ____D C:\Documents and Settings\Default User\Local Settings\Temp
        2017-01-15 07:41 - 2009-01-09 14:19 - 01089593 ____C C:\WINDOWS\system32\dllcache\ntprint.cat
        2017-01-15 07:41 - 2008-04-14 00:42 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\storprop.dll
        2017-01-15 07:41 - 2008-04-14 00:40 - 01296669 ____C C:\WINDOWS\system32\dllcache\SP3.CAT
        2017-01-15 07:41 - 2008-04-14 00:40 - 00112918 ____C C:\WINDOWS\system32\dllcache\tabletpc.cat
        2017-01-15 07:41 - 2008-04-14 00:34 - 02144487 ____C C:\WINDOWS\system32\dllcache\NT5.CAT
        2017-01-15 07:41 - 2008-04-14 00:34 - 00522220 ____C C:\WINDOWS\system32\dllcache\NT5INF.CAT
        2017-01-15 07:41 - 2008-04-14 00:34 - 00144484 ____C C:\WINDOWS\system32\dllcache\netfx.cat
        2017-01-15 07:41 - 2008-04-14 00:34 - 00034747 ____C C:\WINDOWS\system32\dllcache\mediactr.cat
        2017-01-15 07:41 - 2008-04-14 00:34 - 00034063 ____C C:\WINDOWS\system32\dllcache\FP4.CAT
        2017-01-15 07:41 - 2008-04-14 00:34 - 00026991 ____C C:\WINDOWS\system32\dllcache\msn7.cat
        2017-01-15 07:41 - 2008-04-14 00:34 - 00016535 ____C C:\WINDOWS\system32\dllcache\IMS.CAT
        2017-01-15 07:41 - 2008-04-14 00:34 - 00014433 ____C C:\WINDOWS\system32\dllcache\msn9.cat
        2017-01-15 07:41 - 2008-04-14 00:34 - 00012363 ____C C:\WINDOWS\system32\dllcache\MSMSGS.CAT
        2017-01-15 07:41 - 2008-04-14 00:34 - 00010027 ____C C:\WINDOWS\system32\dllcache\MSTSWEB.CAT
        2017-01-15 07:41 - 2008-04-13 22:42 - 00741376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sapi.dll
        2017-01-15 07:41 - 2008-04-13 22:42 - 00155648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sapi.cpl
        2017-01-15 07:41 - 2008-04-13 22:42 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system\WINSPOOL.DRV
        2017-01-15 07:41 - 2008-04-13 22:42 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\NOTEPAD.EXE
        2017-01-15 07:41 - 2008-04-13 22:41 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\batt.dll
        2017-01-15 07:41 - 2008-04-13 22:41 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\batt.dll
        2017-01-15 07:41 - 2008-04-13 17:24 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irenum.sys
        2017-01-15 07:41 - 2008-04-13 17:24 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\irenum.sys
        2017-01-15 07:41 - 2008-04-13 15:24 - 00068768 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL
        2017-01-15 07:41 - 2007-06-26 04:26 - 00007334 ____C C:\WINDOWS\system32\dllcache\wmerrenu.cat
        2017-01-15 07:41 - 2007-04-02 16:56 - 00022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0408.dll
        2017-01-15 07:41 - 2007-04-02 16:56 - 00019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt040e.dll
        2017-01-15 07:41 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt041f.dll
        2017-01-15 07:41 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0419.dll
        2017-01-15 07:41 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0415.dll
        2017-01-15 07:41 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0405.dll
        2017-01-15 07:41 - 2006-12-29 16:24 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28603.nls
        2017-01-15 07:41 - 2006-12-29 16:24 - 00066082 _____ C:\WINDOWS\system32\c_28603.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 01685606 ____C C:\WINDOWS\system32\dllcache\sam.spd
        2017-01-15 07:41 - 2001-08-23 07:00 - 00797189 ____C C:\WINDOWS\system32\dllcache\NT5IIS.CAT
        2017-01-15 07:41 - 2001-08-23 07:00 - 00774144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\spttseng.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00643717 ____C C:\WINDOWS\system32\dllcache\ltts1033.lxa
        2017-01-15 07:41 - 2001-08-23 07:00 - 00605050 ____C C:\WINDOWS\system32\dllcache\r1033tts.lxa
        2017-01-15 07:41 - 2001-08-23 07:00 - 00399645 ____C C:\WINDOWS\system32\dllcache\MAPIMIG.CAT
        2017-01-15 07:41 - 2001-08-23 07:00 - 00176157 ____C (Digi International, Inc.) C:\WINDOWS\system32\dllcache\dgrpsetu.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00176157 _____ (Digi International, Inc.) C:\WINDOWS\system32\dgrpsetu.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00126912 _____ (Microsoft Corporation) C:\WINDOWS\system\MSVIDEO.DLL
        2017-01-15 07:41 - 2001-08-23 07:00 - 00109456 _____ (Microsoft Corporation) C:\WINDOWS\system\AVIFILE.DLL
        2017-01-15 07:41 - 2001-08-23 07:00 - 00103424 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqnclass.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00103424 _____ (Equinox Systems Inc.) C:\WINDOWS\system32\EqnClass.Dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00085020 ____C (Digi International) C:\WINDOWS\system32\dllcache\dgsetup.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00085020 _____ (Digi International) C:\WINDOWS\system32\dgsetup.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\OLECLI.DLL
        2017-01-15 07:41 - 2001-08-23 07:00 - 00077824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\spcommon.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00073376 _____ (Microsoft Corporation) C:\WINDOWS\system\MCIAVI.DRV
        2017-01-15 07:41 - 2001-08-23 07:00 - 00069584 _____ (Microsoft Corporation) C:\WINDOWS\system\AVICAP.DLL
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_869.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_866.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_857.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_855.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_852.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_737.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 _____ C:\WINDOWS\system32\c_869.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 _____ C:\WINDOWS\system32\c_866.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 _____ C:\WINDOWS\system32\c_857.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 _____ C:\WINDOWS\system32\c_855.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 _____ C:\WINDOWS\system32\c_852.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 _____ C:\WINDOWS\system32\c_737.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_875.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28599.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28597.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28595.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28594.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20127.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10082.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10081.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10029.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10017.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10010.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10007.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10006.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_875.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_28599.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\C_28597.NLS
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\C_28595.NLS
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\C_28594.NLS
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_20127.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_10082.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_10081.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_10029.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_10017.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_10010.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_10007.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_10006.nls
        2017-01-15 07:41 - 2001-08-23 07:00 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\spcplui.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00037484 ____C C:\WINDOWS\system32\dllcache\MW770.CAT
        2017-01-15 07:41 - 2001-08-23 07:00 - 00036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sapisvr.exe
        2017-01-15 07:41 - 2001-08-23 07:00 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL
        2017-01-15 07:41 - 2001-08-23 07:00 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system\MCIWAVE.DRV
        2017-01-15 07:41 - 2001-08-23 07:00 - 00025264 _____ (Microsoft Corporation) C:\WINDOWS\system\MCISEQ.DRV
        2017-01-15 07:41 - 2001-08-23 07:00 - 00024661 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\spxcoins.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00024661 _____ (Perle Systems Ltd.) C:\WINDOWS\system32\spxcoins.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL
        2017-01-15 07:41 - 2001-08-23 07:00 - 00019200 _____ (Microsoft Corporation) C:\WINDOWS\system\TAPI.DLL
        2017-01-15 07:41 - 2001-08-23 07:00 - 00015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\taskman.exe
        2017-01-15 07:41 - 2001-08-23 07:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\TASKMAN.EXE
        2017-01-15 07:41 - 2001-08-23 07:00 - 00013600 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV
        2017-01-15 07:41 - 2001-08-23 07:00 - 00013472 ____C C:\WINDOWS\system32\dllcache\HPCRDP.CAT
        2017-01-15 07:41 - 2001-08-23 07:00 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irclass.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\irclass.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\LZEXPAND.DLL
        2017-01-15 07:41 - 2001-08-23 07:00 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system\VER.DLL
        2017-01-15 07:41 - 2001-08-23 07:00 - 00008574 ____C C:\WINDOWS\system32\dllcache\IASNT4.CAT
        2017-01-15 07:41 - 2001-08-23 07:00 - 00008192 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhept.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhept.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00007382 ____C C:\WINDOWS\system32\dllcache\OEMBIOS.CAT
        2017-01-15 07:41 - 2001-08-23 07:00 - 00007168 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdcz.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdcz.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdycl.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdsl1.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdsl.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdpl.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhu.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhela3.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdcz2.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdcz1.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdcr.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\KBDAL.DLL
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdycl.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsl1.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsl.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdpl.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhu.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhela3.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdcz2.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdcz1.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdcr.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdal.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdtuq.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdtuf.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdlv1.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdlv.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhela2.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdgkl.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdest.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdtuq.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdtuf.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlv1.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlv.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhela2.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdgkl.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdest.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdycc.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbduzb.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdur.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdtat.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdru1.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdru.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdro.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdpl1.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdmon.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdlt1.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdlt.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdkyr.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdkaz.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhu1.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhe319.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhe220.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhe.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdbu.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdblr.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdazel.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdaze.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdycc.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbduzb.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdur.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdtat.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdru1.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdru.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdro.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdpl1.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdmon.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlt1.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlt.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdkyr.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdkaz.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhu1.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhe319.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhe220.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhe.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdbu.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdblr.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdazel.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdaze.dll
        2017-01-15 07:41 - 2001-08-23 07:00 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL
        2017-01-15 07:41 - 2001-08-23 07:00 - 00004048 _____ (Microsoft Corporation) C:\WINDOWS\system\TIMER.DRV
        2017-01-15 07:41 - 2001-08-23 07:00 - 00003360 _____ (Microsoft Corporation) C:\WINDOWS\system\SYSTEM.DRV
        2017-01-15 07:41 - 2001-08-23 07:00 - 00002577 ____N C:\WINDOWS\system32\CONFIG.TMP
        2017-01-15 07:41 - 2001-08-23 07:00 - 00002176 _____ (Microsoft Corporation) C:\WINDOWS\system\VGA.DRV
        2017-01-15 07:41 - 2001-08-23 07:00 - 00002032 _____ (Microsoft Corporation) C:\WINDOWS\system\MOUSE.DRV
        2017-01-15 07:41 - 2001-08-23 07:00 - 00002000 _____ (Microsoft Corporation) C:\WINDOWS\system\KEYBOARD.DRV
        2017-01-15 07:41 - 2001-08-23 07:00 - 00001744 _____ (Microsoft Corporation) C:\WINDOWS\system\SOUND.DRV
        2017-01-15 07:41 - 2001-08-23 07:00 - 00001688 _____ C:\WINDOWS\system32\AUTOEXEC.NT
        2017-01-15 07:41 - 2001-08-23 07:00 - 00001152 _____ (Microsoft Corporation) C:\WINDOWS\system\MMTASK.TSK
        2017-01-15 07:41 - 2001-08-23 07:00 - 00000888 ____C C:\WINDOWS\system32\dllcache\sam.sdf
        2017-01-15 07:40 - 2017-02-13 17:16 - 00000000 ___HD C:\Documents and Settings\Default User
        2017-01-15 07:40 - 2017-02-13 15:22 - 00000000 ____D C:\Documents and Settings
        2017-01-15 07:40 - 2017-01-15 20:09 - 00093480 _____ C:\WINDOWS\system32\FNTCACHE.DAT
        2017-01-15 07:40 - 2017-01-15 12:53 - 00000000 ____D C:\Documents and Settings\All Users
        2017-01-15 07:39 - 2017-01-24 06:12 - 00000212 ___SH C:\boot.ini
        2017-01-15 07:39 - 2017-01-15 07:39 - 01089536 _____ C:\WINDOWS\system32\config\software.sav
        2017-01-15 07:39 - 2017-01-15 07:39 - 00925696 _____ C:\WINDOWS\system32\config\system.sav
        2017-01-15 07:39 - 2017-01-15 07:39 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
        2017-01-15 07:39 - 2017-01-15 07:39 - 00094208 _____ C:\WINDOWS\system32\config\default.sav
        2017-01-15 07:36 - 2017-02-13 18:16 - 00000000 ___HD C:\WINDOWS\inf
        2017-01-15 07:36 - 2017-02-13 17:55 - 00000000 ____D C:\WINDOWS\Network Diagnostic
        2017-01-15 07:36 - 2017-01-24 01:07 - 00000000 ____D C:\WINDOWS\system32\oobe
        2017-01-15 07:36 - 2017-01-23 00:58 - 00000000 RSHDC C:\WINDOWS\system32\dllcache
        2017-01-15 07:36 - 2017-01-19 11:43 - 00000000 ____D C:\WINDOWS\security
        2017-01-15 07:36 - 2017-01-15 23:27 - 00000000 ____D C:\WINDOWS\system32\mui
        2017-01-15 07:36 - 2017-01-15 20:34 - 00000000 ____D C:\WINDOWS\Help
        2017-01-15 07:36 - 2017-01-15 19:59 - 00000000 ____D C:\WINDOWS\system32\spool
        2017-01-15 07:36 - 2017-01-15 19:57 - 00000000 ____D C:\WINDOWS\pchealth
        2017-01-15 07:36 - 2017-01-15 17:03 - 00000000 ____D C:\WINDOWS\Media
        2017-01-15 07:36 - 2017-01-15 12:55 - 00000000 ____D C:\WINDOWS\repair
        2017-01-15 07:36 - 2017-01-15 12:55 - 00000000 ____D C:\WINDOWS\ime
        2017-01-15 07:36 - 2017-01-15 12:54 - 00000000 ____D C:\WINDOWS\system32\ias
        2017-01-15 07:36 - 2017-01-15 12:53 - 00000000 ___RD C:\WINDOWS\Web
        2017-01-15 07:36 - 2017-01-15 12:50 - 00000000 ____D C:\WINDOWS\Cursors
        2017-01-15 07:36 - 2017-01-15 07:41 - 00000000 ____D C:\WINDOWS\system
        2017-01-15 07:36 - 2017-01-15 07:39 - 00000000 ____D C:\WINDOWS\system32\usmt
        2017-01-15 07:36 - 2017-01-15 07:39 - 00000000 ____D C:\WINDOWS\system32\Setup
        2017-01-15 07:36 - 2017-01-15 07:39 - 00000000 ____D C:\WINDOWS\system32\scripting
        2017-01-15 07:36 - 2017-01-15 07:39 - 00000000 ____D C:\WINDOWS\mui
        2017-01-15 07:36 - 2017-01-15 07:39 - 00000000 ____D C:\WINDOWS\L2Schemas
        2017-01-15 07:36 - 2017-01-15 07:38 - 00000000 ____D C:\WINDOWS\system32\npp
        2017-01-15 07:36 - 2017-01-15 07:38 - 00000000 ____D C:\WINDOWS\PeerNet
        2017-01-15 07:36 - 2017-01-15 07:38 - 00000000 ____D C:\WINDOWS\msagent
        2017-01-15 07:36 - 2017-01-15 07:37 - 00000000 ____D C:\WINDOWS\system32\ras
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\wins
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\ShellExt
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\inetsrv
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\IME
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\icsxml
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\export
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\Drivers\disdn
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\dhcp
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\3com_dmi
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\3076
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\2052
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1054
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1042
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1041
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1037
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1033
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1031
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1028
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1025
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\Resources
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\Provisioning
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\msapps
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\java
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\Driver Cache
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\Connection Wizard
        2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\addins

        ==================== One Month Modified files and folders ========

        (If an entry is included in the fixlist, the file/folder will be moved.)

        2017-02-13 14:41 - 2001-08-23 07:00 - 00002278 _____ C:\WINDOWS\system32\wpa.dbl
        2017-01-15 19:32 - 2001-08-23 07:00 - 00000507 _____ C:\WINDOWS\win.ini
        2017-01-15 07:41 - 2001-08-23 07:00 - 00000231 _____ C:\WINDOWS\system.ini

        ==================== Files in the root of some directories =======

        2017-01-19 11:27 - 2017-02-11 09:53 - 0007680 _____ () C:\Documents and Settings\anon\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

        ==================== Bamital & volsnap ======================

        (There is no automatic fix for files that do not pass verification.)

        C:\WINDOWS\explorer.exe => File is digitally signed
        C:\WINDOWS\system32\winlogon.exe => File is digitally signed
        C:\WINDOWS\system32\svchost.exe => File is digitally signed
        C:\WINDOWS\system32\services.exe => File is digitally signed
        C:\WINDOWS\system32\User32.dll => File is digitally signed
        C:\WINDOWS\system32\userinit.exe => File is digitally signed
        C:\WINDOWS\system32\rpcss.dll => File is digitally signed
        C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
        C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

        ==================== End of FRST.txt ============================

        Addition log
        [HEADING=1]Additional scan result of Farbar Recovery Scan Tool (x86) Version: 12-02-2017
        Ran by anon (13-02-2017 19:14:24)
        Running from C:\Documents and Settings\anon\Desktop
        Microsoft Windows XP Professional Service Pack 3 (X86) (2017-01-15 17:58:30)
        Boot Mode: Normal[/HEADING]
        ==================== Accounts: =============================

        Administrator (S-1-5-21-1202660629-1409082233-1606980848-500 - Administrator - Enabled)
        anon (S-1-5-21-1202660629-1409082233-1606980848-1003 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\anon
        Guest (S-1-5-21-1202660629-1409082233-1606980848-501 - Limited - Disabled)
        HelpAssistant (S-1-5-21-1202660629-1409082233-1606980848-1000 - Limited - Disabled)
        SUPPORT_388945a0 (S-1-5-21-1202660629-1409082233-1606980848-1002 - Limited - Disabled)
        Talus (S-1-5-21-1202660629-1409082233-1606980848-1005 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Talus

        ==================== Security Center ========================

        (If an entry is included in the fixlist, it will be removed.)

        AV: IObit Malware Fighter (Disabled - Out of date) {0ED16AC2-4656-4907-BD42-21EA693640D6}

        ==================== Installed Programs ======================

        (Only the adware programs with “Hidden” flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

        µTorrent (HKU\S-1-5-21-1202660629-1409082233-1606980848-1003...\uTorrent) (Version: 3.4.9.43295 - BitTorrent Inc.)
        7-Zip 16.04 (HKLM...\7-Zip) (Version: 16.04 - Igor Pavlov)
        Adobe Flash Player 24 ActiveX (HKLM...\Adobe Flash Player ActiveX) (Version: 24.0.0.186 - Adobe Systems Incorporated)
        Adobe Flash Player 24 NPAPI (HKLM...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
        Advanced SystemCare 10 (HKLM...\Advanced SystemCare_is1) (Version: 10.1.0 - IObit)
        ATI Display Driver (HKLM...\ATI Display Driver) (Version: 8.56-081112a-074061C-Acer - )
        Cheat Engine 6.4 (HKLM...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
        Combined Community Codec Pack 2015-10-18 (HKLM...\Combined Community Codec Pack_is1) (Version: 2015.10.19.0 - CCCP Project)
        CPUID CPU-Z 1.78 (HKLM...\CPUID CPU-Z_is1) (Version: - )
        Driver Booster 4.2 (HKLM...\Driver Booster_is1) (Version: 4.2.0 - IObit)
        IObit Malware Fighter 4 (HKLM...\IObit Malware Fighter_is1) (Version: 4.4 - IObit)
        IObit Uninstaller (HKLM...\IObitUninstall) (Version: 6.1.0.510 - IObit)
        Java 8 Update 121 (HKLM...{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
        JetBoost (HKLM...\JetBoost_is1) (Version: 2.0.0 - BlueSprig)
        Microsoft .NET Framework 1.1 (HKLM...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
        Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM...\M2833941) (Version: - )
        Microsoft .NET Framework 2.0 Service Pack 2 (HKLM...{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
        Microsoft .NET Framework 3.0 Service Pack 2 (HKLM...{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
        Microsoft .NET Framework 3.5 SP1 (HKLM...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
        Microsoft .NET Framework 4 Client Profile (HKLM...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
        Microsoft Base Smart Card Cryptographic Service Provider Package (HKLM...\KB909520) (Version: - Microsoft Corporation)
        Microsoft Compression Client Pack 1.0 for Windows XP (HKLM...\MSCompPackV1) (Version: 1 - Microsoft Corporation)
        Microsoft User-Mode Driver Framework Feature Pack 1.0 (HKLM...\Wudf01000) (Version: - Microsoft Corporation)
        Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM...{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
        Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM...{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
        Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM...{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
        Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM...{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
        Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM...{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
        mIRC (HKLM...\mIRC) (Version: 7.38 - mIRC Co. Ltd.)
        Mono for Windows 3.2.3 (HKLM...{afbbbda2-1dd7-11e3-ae37-080027022fbf}_is1) (Version: 3.2.3 - Mono)
        Mozilla Firefox 47.0.2 (x86 en-US) (HKLM...\Mozilla Firefox 47.0.2 (x86 en-US)) (Version: 47.0.2 - Mozilla)
        Realtek AC’97 Audio (HKLM...{FB08F381-6533-4108-B7DD-039E11FBC27E}) (Version: - )
        Smart Defrag 5 (HKLM...\Smart Defrag_is1) (Version: 5.4.0 - IObit)
        Ultima Online Renaissance 5.0.8.3 (HKLM...{85204665-3317-4953-BDB8-3BB60C75C130}) (Version: 5.0.8.3 - www.uorenaissance.com)
        UO Auto-Map 8.3.0.0 (HKLM...\UO Auto-Map) (Version: 8.3.0.0 - UOAM)
        VIA Rhine-Family Fast-Ethernet Adapter (HKLM...\VN_VUIns_Rhine_VIA) (Version: - )
        VLC media player (HKLM...\VLC media player) (Version: 2.2.4 - VideoLAN)
        WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
        Winamp (HKLM...\Winamp) (Version: 5.666 - Nullsoft, Inc)
        Windows Genuine Advantage Notifications (KB905474) (HKLM...\WgaNotify) (Version: 1.9.0040.0 - Microsoft Corporation)
        Windows Genuine Advantage Validation Tool (KB892130) (HKLM...\KB892130) (Version: - Microsoft Corporation)
        Windows Genuine Advantage Validation Tool (KB892130) (HKLM...\WGA) (Version: 1.7.0069.2 - Microsoft Corporation)
        Windows Internet Explorer 8 (HKLM...\ie8) (Version: 20090308.140743 - Microsoft Corporation)
        Windows Management Framework Core (HKLM...\KB968930) (Version: - Microsoft Corporation)
        Windows Media Format 11 runtime (HKLM...\Windows Media Format Runtime) (Version: - )
        Windows Media Player 11 (HKLM...\Windows Media Player) (Version: - )
        WinRAR 5.40 (32-bit) (HKLM...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

        ==================== Custom CLSID (Whitelisted): ==========================

        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

        Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpda teService.exe
        Task: C:\WINDOWS\Tasks\ASC10_PerformanceMonitor.job => C:\Program Files\IObit\Advanced SystemCare\Monitor.exe
        Task: C:\WINDOWS\Tasks\Driver Booster Scheduler.job => C:\Program Files\IObit\Driver Booster\4.2.0\Scheduler.exe
        Task: C:\WINDOWS\Tasks\JetBoost_AutoUpdate.job => C:\Program Files\BlueSprig\JetBoost\AutoUpdate.exe
        Task: C:\WINDOWS\Tasks\JetBoost_Startup.job => C:\Program Files\BlueSprig\JetBoost\JetBoostTray.exe

        ==================== Shortcuts =============================

        (The entries could be listed to be restored or removed.)

        Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Razor\Visit Razor’s Website.lnk → hxxp://www.runuo.com/razor
        Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\XSP\XSP 2.0 Test Web Server.lnk → C:\Program Files\Mono-3.2.3\bin\startXSP2.bat ()
        Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Applications\Gtk# Demo.lnk → C:\Program Files\Mono-3.2.3\bin\GtkDemo.bat (No File)
        Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Applications\Sql# GTK.lnk → C:\Program Files\Mono-3.2.3\bin\sqlsharpgtk.bat (No File)

        ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Mono-3.2.3 Command Prompt.lnk → C:\WINDOWS\system32\cmd.exe (Microsoft Corporation) → /k “C:\Program Files\Mono-3.2.3\bin\setmonopath.bat”

        ==================== Loaded Modules (Whitelisted) ==============

        2017-01-15 13:28 - 2016-08-18 18:43 - 00442144 _____ () C:\Program Files\IObit\Advanced SystemCare\madExcept_.bpl
        2017-01-15 13:28 - 2016-08-18 18:43 - 00210720 _____ () C:\Program Files\IObit\Advanced SystemCare\madBasic_.bpl
        2017-01-15 13:28 - 2016-08-18 18:43 - 00059680 _____ () C:\Program Files\IObit\Advanced SystemCare\madDisAsm_.bpl
        2017-01-15 13:28 - 2015-12-28 13:50 - 00899872 _____ () C:\Program Files\IObit\Advanced SystemCare\webres.dll
        2008-04-13 22:42 - 2013-01-02 01:49 - 01292288 _____ () C:\WINDOWS\system32\quartz.dll

        ==================== Alternate Data Streams (Whitelisted) =========

        (If an entry is included in the fixlist, only the ADS will be removed.)

        ==================== Safe Mode (Whitelisted) ===================

        (If an entry is included in the fixlist, it will be removed from the registry. The “AlternateShell” value will be restored.)

        HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\IMFservice => “”=“Service”
        HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\nm => “”=“Service”
        HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\nm.sys => “”=“Driver”

        ==================== Association (Whitelisted) ===============

        (If an entry is included in the fixlist, the registry item will be restored to default or removed.)

        ==================== Internet Explorer trusted/restricted ===============

        (If an entry is included in the fixlist, it will be removed from the registry.)

        ==================== Hosts content: ==========================

        (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

        2001-08-23 07:00 - 2017-02-13 17:09 - 00001002 ____A C:\WINDOWS\system32\Drivers\etc\hosts

        127.0.0.1 localhost
        127.0.0.1 mpa.one.microsoft.com
        127.0.0.1 idb.iobit.com
        127.0.0.1 asc55.iobit.com
        127.0.0.1 is360.iobit.com
        127.0.0.1 asc.iobit.com
        127.0.0.1 pf.iobit.com

        ==================== Other Areas ============================

        (Currently there is no automatic fix for this section.)

        HKU\S-1-5-21-1202660629-1409082233-1606980848-1003\Control Panel\Desktop\Wallpaper →
        DNS Servers: 209.18.47.61 - 209.18.47.62
        Windows Firewall is enabled.

        ==================== MSCONFIG/TASK MANAGER disabled items ==

        ==================== FirewallRules (Whitelisted) ===============

        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        StandardProfile\AuthorizedApplications: [C:\Program Files\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe] => Enabled:SP_FF
        StandardProfile\AuthorizedApplications: [C:\Program Files\Mozilla Firefox\firefox.exe] => Enabled:Firefox (C:\Program Files\Mozilla Firefox)
        StandardProfile\AuthorizedApplications: [C:\Program Files\Razor\Razor.exe] => Enabled:Razor
        StandardProfile\AuthorizedApplications: [C:\Program Files\Internet Explorer\iexplore.exe] => Enabled:Internet Explorer
        StandardProfile\AuthorizedApplications: [C:\Program Files\Winamp\winamp.exe] => Enabled:Winamp
        StandardProfile\AuthorizedApplications: [C:\Program Files\UOAM\uoam.EXE] => Enabled:Ultima Online’s premier mapping tool.
        StandardProfile\AuthorizedApplications: [C:\Ultima Online\client.exe] => Enabled:Ultima Online Client
        StandardProfile\AuthorizedApplications: [C:\Ultima Online\client_noenc.exe] => Enabled:Ultima Online Client
        StandardProfile\AuthorizedApplications: [C:\Program Files\mIRC\mirc.exe] => Enabled:mIRC
        StandardProfile\AuthorizedApplications: [C:\Documents and Settings\anon\Application Data\uTorrent\uTorrent.exe] => Enabled:μTorrent
        StandardProfile\GloballyOpenPorts: [5985:TCP] => Disabled:Windows Remote Management
        StandardProfile\GloballyOpenPorts: [80:TCP] => Disabled:Windows Remote Management - Compatibility Mode (HTTP-In)
        StandardProfile\GloballyOpenPorts: [1900:UDP] => :LocalSubNetisabled:@xpsp2res.dll,-22007
        StandardProfile\GloballyOpenPorts: [2869:TCP] => :LocalSubNetisabled:@xpsp2res.dll,-22008

        ==================== Restore Points =========================

        13-02-2017 18:15:29 Software Distribution Service 3.0

        ==================== Faulty Device Manager Devices =============

        Name: PS/2 Compatible Mouse
        Description: PS/2 Compatible Mouse
        Class Guid: {4D36E96F-E325-11CE-BFC1-08002BE10318}
        Manufacturer: Microsoft
        Service: i8042prt
        Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
        Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
        Devices stay in this state if they have been prepared for removal.
        After you remove the device, this error disappears.Remove the device, and this error should be resolved.

        ==================== Event log errors: =========================
        [HEADING=1]Application errors:[/HEADING]
        Error: (02/10/2017 06:01:35 PM) (Source: .NET Runtime) (EventID: 1023) (User: )
        Description: .NET Runtime version 2.0.50727.3655 - Fatal Execution Engine Error (7A0BD76A) (80131506)

        Error: (01/24/2017 06:25:18 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
        Description: Application: Razor.exe
        Framework Version: v4.0.30319
        Description: The process was terminated due to an unhandled exception.
        Exception Info: System.InvalidOperationException
        Stack:
        at Assistant.Engine.Main(System.String)

        Error: (01/24/2017 06:24:24 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
        Description: Application: Razor.exe
        Framework Version: v4.0.30319
        Description: The process was terminated due to an unhandled exception.
        Exception Info: System.InvalidOperationException
        Stack:
        at Assistant.Engine.Main(System.String)

        Error: (01/24/2017 06:19:18 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
        Description: Application: Razor.exe
        Framework Version: v4.0.30319
        Description: The process was terminated due to an unhandled exception.
        Exception Info: System.InvalidOperationException
        Stack:
        at Assistant.Engine.Main(System.String)

        Error: (01/22/2017 06:56:14 PM) (Source: MsiInstaller) (EventID: 1013) (User: FUYHJ-1DEA3B72C)
        Description: Product: Microsoft .NET Framework 2.0 – Setup cannot continue because this version of the .NET Framework is incompatible with a previously installed one. For more information, see http://support.microsoft.com/support.../q312/5/00.asp

        Error: (01/22/2017 06:15:38 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
        Description: Application: Razor.exe
        Framework Version: v4.0.30319
        Description: The process was terminated due to an unhandled exception.
        Exception Info: System.InvalidOperationException
        Stack:
        at Assistant.Engine.Main(System.String)

        Error: (01/22/2017 06:14:47 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
        Description: Application: Razor.exe
        Framework Version: v4.0.30319
        Description: The process was terminated due to an unhandled exception.
        Exception Info: System.InvalidOperationException
        Stack:
        at Assistant.Engine.Main(System.String)

        Error: (01/15/2017 09:24:17 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )
        Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn’t the latest version of CLR Optimization service. Will shutdown

        Error: (01/15/2017 08:59:23 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
        Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: Microsoft.PowerShell.Editor,Version=1.0.0.0,Cultur e=neutral,PublicKeyToken=31bf3856ad364e35,Processo rArchitecture=msil . Error code = 0x80070005

        Error: (01/15/2017 08:12:20 PM) (Source: Windows Search Service) (EventID: 3024) (User: )
        Description: Event-ID 3024
        [HEADING=1]System errors:[/HEADING]
        Error: (02/13/2017 06:15:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
        Description: The IMF Service service terminated unexpectedly. It has done this 1 time(s).

        Error: (02/13/2017 06:11:47 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
        Description: DCOM got error “%%1058 = The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.” attempting to start the service SENS with arguments “”
        in order to run the server:
        {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}

        Error: (02/13/2017 06:11:47 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
        Description: DCOM got error “%%1058 = The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.” attempting to start the service SENS with arguments “”
        in order to run the server:
        {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}

        Error: (02/13/2017 06:11:47 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
        Description: DCOM got error “%%1058 = The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.” attempting to start the service SENS with arguments “”
        in order to run the server:
        {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}

        Error: (02/13/2017 06:11:47 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
        Description: DCOM got error “%%1058 = The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.” attempting to start the service SENS with arguments “”
        in order to run the server:
        {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}

        Error: (02/13/2017 06:11:47 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
        Description: DCOM got error “%%1058 = The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.” attempting to start the service SENS with arguments “”
        in order to run the server:
        {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}

        Error: (02/13/2017 06:11:47 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
        Description: DCOM got error “%%1058 = The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.” attempting to start the service SENS with arguments “”
        in order to run the server:
        {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}

        Error: (02/13/2017 06:11:47 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
        Description: DCOM got error “%%1058 = The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.” attempting to start the service SENS with arguments “”
        in order to run the server:
        {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}

        Error: (02/13/2017 06:11:47 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
        Description: DCOM got error “%%1058 = The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.” attempting to start the service SENS with arguments “”
        in order to run the server:
        {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}

        Error: (02/13/2017 05:49:41 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
        Description: DCOM got error “%%1058 = The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.” attempting to start the service SENS with arguments “”
        in order to run the server:
        {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}

        ==================== Memory info ===========================

        Processor: AMD Athlon™ XP 3000+
        Percentage of memory in use: 82%
        Total physical RAM: 511.48 MB
        Available physical RAM: 90.8 MB
        Total Virtual: 2018 MB
        Available Virtual: 1439.92 MB

        ==================== Drives ================================

        Drive c: () (Fixed) (Total:75.83 GB) (Free:58.89 GB) NTFS ==>[drive with boot components (Windows XP)]

        ==================== MBR & Partition Table ==================

        ================================================== ======
        Disk: 0 (MBR Code: Windows XP) (Size: 76.3 GB) (Disk ID: 046B535F)
        Partition 1: (Active) - (Size=75.8 GB) - (Type=07 NTFS)
        Partition 2: (Not Active) - (Size=510 MB) - (Type=05)

        ==================== End of Addition.txt ============================

        Comment

        • jmarket
          PCHF Owner
          • Jan 2015
          • 7635

          #5
          You still have remnants of IObit. IOBit is no longer trustworthy. Please see this site for more information and why it’s good to remove it I’ll have @Malnutrition analyze your log files to ensure that no malware is on your machine

          If downloads work now awesome

          Comment

          • dscape
            PCHF Member
            • Feb 2017
            • 10

            #6
            Downloads work on IE but not in Firefox. And I will uninstall all IOBit stuff immediately.

            Comment

            • dscape
              PCHF Member
              • Feb 2017
              • 10

              #7
              Okay, I got rid of everything by IObit except Driver Booster 4.2 which updates my drivers and does nothing else. Should I get rid of that too? I’d rather not, or if I should I’d like to replace it with something that does the same thing.

              nah, nevermind. I got rid of everything by IObit.

              Comment

              • jmarket
                PCHF Owner
                • Jan 2015
                • 7635

                #8
                Snappy Driver Installer does everything IOBit does I use it and love it

                Looking for drivers? Snappy Driver Installer is a free driver updater with a huge driver collection for offline use.

                Comment

                • Malnutrition
                  PCHF Moderator
                  • Jul 2016
                  • 7041

                  #9
                  Originally posted by dscape
                  I got rid of everything by IObit.
                  Good move! Let’s remove trash from your machine!!

                  ZHP Scan.

                  Please download Zhp Cleaner to your desktop. Right Click the icon and select run as administrator.
                  1. Once you have started the program, you will need to click the scanner button.

                  [IMG alt="EgsT69u" width="602px" height="129px"]https://windowsinstructed.com/wp-content/uploads/2015/06/EgsT69u.png[/IMG]

                  The program will close all open browsers!
                  3. Once the scan is completed, the you will want to click the Repair button.
                  [URL unfurl="true"]http://windowsinstructed.com/wp-content/uploads/2015/06/6QJjV50.png[/URL]

                  At the end of the process you may be asked to reboot your machine. After you reboot a report will open on your desktop.
                  Copy and paste the report here in your next reply.
                  JRT Scan.

                  Please download Junkware Removal Tool and save it on your desktop.

                  [ul]
                  [li]Shut down your anti-virus, anti-spyware, and firewall software now to avoid potential conflicts.[/li][li]Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click it and select Run as administrator.[/li][li]The tool will open and start scanning your system.[/li][li]Please be patient as this can take a while to complete depending on your system’s specifications.[/li][li]On completion, a log is saved to your desktop and will automatically open.[/li][li]Please post the JRT log.[/li][/ul]

                  Adware Removal Tool Scan.

                  Download Adware removal tool to your desktop, right click the icon and select Run as Administrator.

                  [MEDIA=imgur]LOr0Gd7[/MEDIA]

                  Hit Ok.

                  [MEDIA=imgur]sYFsqHx[/MEDIA]

                  Hit next make sure to leave all items checked, for removal.

                  [MEDIA=imgur]8NcZjGc[/MEDIA]

                  The Program will close all open programs to complete the removal, so save any work and hit OK. Then hit OK after the removal process is complete, thenOK again to finish up. Post log generated by tool.

                  Adware Cleaner Scan.

                  Please download AdwCleaner by Xplode onto your desktop.

                  [ul]
                  [li]Close all open programs and internet browsers.[/li][li]Double click on adwcleaner.exe to run the tool.[/li][li]Click on Scan button.[/li][li]When the scan has finished click on Clean button.[/li][li]Your computer will be rebooted automatically. A text file will open after the restart.[/li][li]Please post the contents of that logfile with your next reply.[/li][li]You can find the logfile at C:\AdwCleaner[S1].txt as well.[/li][/ul]


                  Security Check Scan.


                  [ul]
                  [li]Download Security Check to your desktop.[/li][li]Right click it run as administrator.[/li][li]When the program completes, the tool will automatically open a log file.[/li][li]Please post that log here in your next post.[/li][/ul]

                  Comment

                  • Malnutrition
                    PCHF Moderator
                    • Jul 2016
                    • 7041

                    #10
                    Reset FireFox.

                    [ul]
                    [li]Download ResetBrowser To your desktop.[/li][li]Now close all open browsers.[/li][li]Right click and run as administrator.[/li][li]Click on Reset FireFox. – Allow completion.[/li][/ul]

                    FRST Fix.


                    Click Here To Download Fixlist.

                    Download attached fixlist.txt file and save it to the Desktop. NOTE. It’s important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

                    Comment

                    • dscape
                      PCHF Member
                      • Feb 2017
                      • 10

                      #11
                      ZHPcleaner
                      ~ ZHPCleaner v2017.2.12.26 by Nicolas Coolman (2017/02/12)
                      ~ Run by anon (Administrator) (13/02/2017 20:17:13)
                      ~ Web: https://www.nicolascoolman.com
                      ~ Blog: https://nicolascoolman.eu/
                      ~ Facebook : ZHP
                      ~ State version : Version OK
                      ~ Type : Repair
                      ~ Report : C:\Documents and Settings\anon\Desktop\ZHPCleaner.txt
                      ~ Quarantine : C:\Documents and Settings\anon\Application Data\ZHP\ZHPCleaner_Quarantine.txt
                      ~ UAC : Deactivate
                      ~ Boot Mode : Normal (Normal boot)
                      Windows XP, 32-bit Service Pack 3 (Build 2600)

                      —\ Services (0)
                      ~ No malicious or unnecessary items found.

                      —\ Browser internet (0)
                      ~ No malicious or unnecessary items found.

                      —\ Hosts file (1)
                      ~ The hosts file is legitimate (33)

                      —\ Scheduled automatic tasks. (0)
                      ~ No malicious or unnecessary items found.

                      —\ Explorer ( File, Folder) (9)
                      MOVED file: C:\WINDOWS\Prefetch\SUC12_DISKCLEANER.EXE-1A2CA1E6.pf =>.Superfluous.DiskCleaner
                      MOVED file: C:\WINDOWS\Installer\wix{3C3901C5-3455-3E0A-A214-0B093A5070A6}.SchedServiceConfig.rmi =>.Superfluous.Empty
                      MOVED file: C:\WINDOWS\Installer\wix{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}.SchedServiceConfig.rmi =>.Superfluous.Empty
                      MOVED file: C:\Documents and Settings\All Users\Application Data\InstallMate{85204665-3317-4953-BDB8-3BB60C75C130}\Setup.exe [Tarma Software Research Pty Ltd - InstallMate® Setup] =>.Superfluous.Tarma
                      MOVED file: C:\Documents and Settings\All Users\Application Data\InstallMate{85204665-3317-4953-BDB8-3BB60C75C130}\TsuDll.dll [Tarma Software Research Pty Ltd - InstallMate® Setup Library] =>.Superfluous.Tarma
                      MOVED file: C:\WINDOWS\Reimage.ini =>.Superfluous.ReimageRepair
                      MOVED folder: C:\Documents and Settings\All Users\Application Data\InstallMate =>.Superfluous.Tarma
                      MOVED folder: C:\Documents and Settings\anon\Local Settings\Application Data\eSupport.com =>PUP.Optional.eSupport
                      MOVED folder: C:\Documents and Settings\anon\Local Settings\Application Data{B5F70934-5E12-42d2-882D-62D42EA1FA67} =>.Superfluous.Empty

                      —\ Registry ( Key, Value, Data) (10)
                      DELETED key*: HKEY_USERS\S-1-5-21-1202660629-1409082233-1606980848-1003\SOFTWARE\eSupport.com =>PUP.Optional.eSupport
                      DELETED key*: HKEY_USERS\S-1-5-21-1202660629-1409082233-1606980848-1003\SOFTWARE\Reimage =>.Superfluous.ReimageRepair
                      DELETED key: HKCU\Software\eSupport.com =>PUP.Optional.eSupport
                      DELETED key: HKCU\Software\Reimage =>.Superfluous.ReimageRepair
                      DELETED key*: HKLM\SOFTWARE\Secure =>.Superfluous.SecurePCCleaner
                      DELETED key*: HKLM\SOFTWARE\Reimage =>.Superfluous.ReimageRepair
                      DELETED key*: HKLM\SOFTWARE\Classes\adbanner.adbanner [adbanner Class] =>Adware.adBanner
                      DELETED key*: HKLM\SOFTWARE\Classes\adbanner.adbanner.1 [adbanner Class] =>Adware.adBanner
                      DELETED key*: HKLM\SOFTWARE\Classes\CLSID{89643D21-7B2A-11d1-8271-00A0C91F9CA0} [adbanner Class] =>Adware.adBanner
                      DELETED key*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ins taller\UserData\S-1-5-18\Components\07B51C13962E8BF49BAFEA042FB2D4A6 [C?\Program Files\Solvusoft\Tray\SuiteClient.dll] =>.Superfluous.Solvusoft

                      —\ Summary of the elements found (8)
                      Logiciels Potentiellement Superflus (LPS). - ZAM =>.Superfluous.DiskCleaner
                      Logiciels Potentiellement Superflus (LPS). - ZAM =>.Superfluous.Empty
                      https://www.nicolascoolman.com/fr/pup-tarma/ =>.Superfluous.Tarma
                      Reimage PC Repair, Logiciel d’optimisation. - ZAM =>.Superfluous.ReimageRepair
                      Le repaquetage ou l'empaquetage logiciel peut représenter un risque de sécurité - ZAM =>PUP.Optional.eSupport
                      Redirecting... =>.Superfluous.SecurePCCleaner
                      adBanner, Logiciel Publicitaire (Adware) - ZAM =>Adware.adBanner
                      Logiciels Potentiellement Superflus (LPS). - ZAM =>.Superfluous.Solvusoft

                      —\ Other deletions. (20)
                      ~ Registry Keys Tracing deleted (20)
                      ~ Remove the old reports ZHPCleaner. (0)

                      —\ Result of repair
                      ~ Repair carried out successfully
                      ~ Browser not found (Google Chrome)
                      ~ Browser not found (Opera Software)

                      —\ Statistics
                      ~ Items scanned : 400
                      ~ Items found : 0
                      ~ Items cancelled : 0
                      ~ Items repaired : 19

                      ~ End of clean in 00h00mn25s
                      ~====================
                      ZHPCleaner-[R]-13022017-20_17_38.txt
                      ZHPCleaner–13022017-20_15_28.txt

                      JRT
                      Code:
                      Junkware Removal Tool (JRT) by Malwarebytes
                      Version: 8.1.0 (12.05.2016)
                      Operating System: Microsoft Windows XP x86
                      Ran by anon (Limited) on Mon 02/13/2017 at 20:20:39.10
                      File System: 19

                      Successfully deleted: C:\Documents and Settings\anon\Application Data\Mozilla\Firefox\Profiles\x1o83pc3.default\use r.js (File)
                      Successfully deleted: C:\Documents and Settings\anon\Application Data\productdata (Folder)
                      Successfully deleted: C:\WINDOWS\Tasks\JetBoost_Startup.job (Task)
                      Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\0LAZCP23 (Temporary Internet Files Folder)
                      Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\C0DVF9KS (Temporary Internet Files Folder)
                      Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CWDYX72R (Temporary Internet Files Folder)
                      Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\DBXW47VX (Temporary Internet Files Folder)
                      Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IA86VWLV (Temporary Internet Files Folder)
                      Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\K5CIW5ZI (Temporary Internet Files Folder)
                      Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\KLGK37HU (Temporary Internet Files Folder)
                      Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Q2X01KYT (Temporary Internet Files Folder)
                      Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0LAZCP23 (Temporary Internet Files Folder)
                      Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\C0DVF9KS (Temporary Internet Files Folder)
                      Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CWDYX72R (Temporary Internet Files Folder)
                      Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\DBXW47VX (Temporary Internet Files Folder)
                      Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\IA86VWLV (Temporary Internet Files Folder)
                      Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\K5CIW5ZI (Temporary Internet Files Folder)
                      Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\KLGK37HU (Temporary Internet Files Folder)
                      Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\Q2X01KYT (Temporary Internet Files Folder)

                      Registry: 1

                      Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\Search\SearchAssistant (Registry Value)
                      Code:
                      Scan was completed on Mon 02/13/2017 at 20:21:27.85
                      End of JRT log
                      Adware Removal Tool
                      [-] Deleted ->> Folder ->> C:\Windows\System32\GroupPolicy\ADM

                      AdwCleaner[C0]
                      [HEADING=1]AdwCleaner v6.043 - Logfile created 13/02/2017 at 20:35:59[/HEADING]
                      [HEADING=1]Updated on 27/01/2017 by Malwarebytes[/HEADING]
                      [HEADING=1]Database : 2017-02-13.1 [Server][/HEADING]
                      [HEADING=1]Operating System : Microsoft Windows XP Service Pack 3 (X86)[/HEADING]
                      [HEADING=1]Username : anon - FUYHJ-1DEA3B72C[/HEADING]
                      [HEADING=1]Running from : C:\Documents and Settings\anon\Desktop\AdwCleaner.exe[/HEADING]
                      [HEADING=1]Mode: Clean[/HEADING]
                      [HEADING=1]Support : https://www.malwarebytes.com/support[/HEADING]
                      ***** [ Services ] *****

                      [-] Service deleted: DrvAgent32

                      ***** [ Folders ] *****

                      ***** [ Files ] *****

                      [-] File deleted: C:\WINDOWS\system32\drivers\DrvAgent32.sys

                      ***** [ DLL ] *****

                      ***** [ WMI ] *****

                      ***** [ Shortcuts ] *****

                      ***** [ Scheduled Tasks ] *****

                      ***** [ Registry ] *****

                      [-] Key deleted: HKLM\SOFTWARE\Classes\AppID{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
                      [-] Key deleted: HKU\S-1-5-21-1202660629-1409082233-1606980848-1003\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
                      [#] Key deleted on reboot: HKCU\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
                      [-] Key deleted: HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL

                      ***** [ Web browsers ] *****


                      :: “Tracing” keys deleted
                      :: Winsock settings cleared


                      C:\AdwCleaner\AdwCleaner[C0].txt - [1295 Bytes] - [13/02/2017 20:35:59]
                      C:\AdwCleaner\AdwCleaner[S0].txt - [1552 Bytes] - [13/02/2017 20:35:28]

                      ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1441 Bytes] ##########

                      Security Check
                      SecurityCheck by glax24 & Severnyj v.1.4.0.46 [22.09.16]
                      WebSite: www.safezone.cc
                      DateLog: 13.02.2017 20:39:01
                      Path starting: C:\Documents and Settings\anon\Local Settings\Temp\SecurityCheck\SecurityCheck.exe
                      Log directory: C:\SecurityCheck
                      IsAdmin: True
                      User: anon
                      VersionXML: 3.91is-11.02.2017


                      Windows XP(5.1.2600) Service Pack 3 (x86) Lang: English(0409)
                      Installation date OS: 15.01.2017 17:58:30
                      Boot Mode: Normal
                      Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
                      SystemDrive: C: FS: [NTFS] Capacity: [75.8 Gb] Used: [26.4 Gb] Free: [49.4 Gb]
                      ------------------------------- [ Windows ] -------------------------------
                      Extended support has ended 08.04.2014, Your operating system may be vulnerable to new types of threats
                      Internet Explorer 8.0.6001.18702
                      Notify before download
                      Date install updates: 2017-02-13 23:16:32
                      Automatic Updates (wuauserv) - The service is running
                      Security Center (wscsvc) - The service is running
                      Remote Registry (RemoteRegistry) - The service has stopped
                      Terminal Services (TermService) - The service is running
                      SSDP Discovery Service (SSDPSRV) - The service has stopped
                      ---------------------------- [ Antivirus_WMI ] ----------------------------
                      IObit Malware Fighter (disabled and out of date)
                      --------------------------- [ OtherUtilities ] ----------------------------
                      7-Zip 16.04 v.16.04
                      VLC media player v.2.2.4
                      WinRAR 5.40 (32-bit) v.5.40.0
                      --------------------------------- [ P2P ] ---------------------------------
                      µTorrent v.3.4.9.43295 Warning! P2P-client.
                      -------------------------------- [ Java ] ---------------------------------
                      Java 8 Update 121 v.8.0.1210.13
                      --------------------------- [ AdobeProduction ] ---------------------------
                      Adobe Flash Player 24 ActiveX v.24.0.0.186 Warning! Download Update
                      Adobe Flash Player 24 NPAPI v.24.0.0.194
                      ------------------------------- [ Browser ] -------------------------------
                      Mozilla Firefox 47.0.2 (x86 en-US) v.47.0.2 Warning! Download Update
                      ----------------------------- [ End of Log ] ------------------------------

                      Fixlog
                      Fix result of Farbar Recovery Scan Tool (x86) Version: 14-02-2017
                      Ran by anon (13-02-2017 20:46:04) Run:1
                      Running from C:\Documents and Settings\anon\Desktop
                      Loaded Profiles: anon (Available Profiles: anon & Talus)
                      Boot Mode: Normal

                      ==============================================

                      fixlist content:


                      Start
                      Closeprocesses:
                      CreateRestorePoint:
                      Emptytemp:
                      HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
                      HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
                      HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
                      HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
                      HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
                      HKU\S-1-5-21-1202660629-1409082233-1606980848-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      BHO: Java™ Plug-In SSV Helper → {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} → C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-01-24] (Oracle Corporation)
                      BHO: Java™ Plug-In 2 SSV Helper → {DBC80044-A445-435b-BC74-9C25C1C588A9} → C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-24] (Oracle Corporation)
                      Winlogon\Notify\WgaLogon:
                      R2 AdvancedSystemCareService10; C:\Program Files\IObit\Advanced SystemCare\ASCService.exe [462624 2016-12-12] (IObit)
                      S2 IMFservice; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [1600800 2016-10-21] (IObit)
                      S2 IObitUnSvr; C:\Program Files\IObit\IObit Uninstaller\IUService.exe [360736 2016-10-28] (IObit)
                      S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [3046688 2016-07-29] (IObit)
                      C:\Program Files\IObit
                      S3 RegFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\wxp_x86\regfilter.sys [31776 2016-01-11] (IObit.com)
                      R0 SmartDefragDriver; C:\WINDOWS\System32\Drivers\SmartDefragDriver.sys [15824 2016-03-22] (IObit)
                      C:\WINDOWS\System32\Drivers\SmartDefragDriver.sys
                      S4 IntelIde; no ImagePath
                      U1 WS2IFSL; no ImagePath
                      C:\WINDOWS\Tasks\JetBoost_AutoUpdate.job
                      C:\Documents and Settings\All Users\Application Data\AVAST Software
                      C:\Documents and Settings\Talus\Application Data\IObit
                      C:\Documents and Settings\Talus\Start Menu\Programs\Remote Assistance.lnk
                      C:\WINDOWS\Tasks\JetBoost_Startup.job
                      C:\WINDOWS\system32\IObitSmartDefragExtension.dll
                      C:\WINDOWS\system32\Drivers\SmartDefragDriver.sys
                      C:\Documents and Settings\All Users\Start Menu\Programs\Smart Defrag
                      C:\WINDOWS\system32\SmartDefragBootTime.exe
                      C:\Documents and Settings\All Users\Application Data\InstallMate
                      C:\WINDOWS\system32\Drivers\DrvAgent32.sys
                      C:\Documents and Settings\anon\Local Settings\Application Data\eSupport.com
                      C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
                      C:\Documents and Settings\anon\Application Data\ProductData
                      C:\Documents and Settings\All Users\Start Menu\Programs\IObit Malware Fighter
                      C:\WINDOWS\Tasks\IObitDisabled
                      Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpda teService.exe
                      Task: C:\WINDOWS\Tasks\ASC10_PerformanceMonitor.job => C:\Program Files\IObit\Advanced SystemCare\Monitor.exe
                      Task: C:\WINDOWS\Tasks\Driver Booster Scheduler.job => C:\Program Files\IObit\Driver Booster\4.2.0\Scheduler.exe
                      Task: C:\WINDOWS\Tasks\JetBoost_AutoUpdate.job => C:\Program Files\BlueSprig\JetBoost\AutoUpdate.exe
                      Task: C:\WINDOWS\Tasks\JetBoost_Startup.job => C:\Program Files\BlueSprig\JetBoost\JetBoostTray.exe
                      hortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Mono-3.2.3 Command Prompt.lnk → C:\WINDOWS\system32\cmd.exe (Microsoft Corporation) → /k “C:\Program Files\Mono-3.2.3\bin\setmonopath.bat”
                      2017-01-15 13:28 - 2016-08-18 18:43 - 00442144 _____ () C:\Program Files\IObit\Advanced SystemCare\madExcept_.bpl
                      2017-01-15 13:28 - 2016-08-18 18:43 - 00210720 _____ () C:\Program Files\IObit\Advanced SystemCare\madBasic_.bpl
                      2017-01-15 13:28 - 2016-08-18 18:43 - 00059680 _____ () C:\Program Files\IObit\Advanced SystemCare\madDisAsm_.bpl
                      2017-01-15 13:28 - 2015-12-28 13:50 - 00899872 _____ () C:\Program Files\IObit\Advanced SystemCare\webres.dll
                      HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\IMFservice => “”=“Service”
                      HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\nm => “”=“Service”
                      HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\nm.sys => “”=“Driver”
                      C:\WINDOWS\system32\Drivers\etc\hosts
                      Hosts:
                      RemoveProxy:
                      CMD: netsh advfirewall reset
                      CMD: netsh advfirewall set allprofiles state ON
                      CMD: ipconfig /flushdns
                      end


                      Processes closed successfully.
                      Restore point was successfully created.
                      HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully.
                      HKLM\Software\Microsoft\Internet Explorer\Main\Start Page => value restored successfully
                      HKLM\Software\Microsoft\Internet Explorer\Main\Search Page => value restored successfully
                      HKLM\Software\Microsoft\Internet Explorer\Main\Default_Page_URL => value restored successfully
                      HKLM\Software\Microsoft\Internet Explorer\Main\Default_Search_URL => value restored successfully
                      HKU\S-1-5-21-1202660629-1409082233-1606980848-1003\Software\Microsoft\Internet Explorer\Main\Search Page => value restored successfully
                      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} => key removed successfully.
                      HKCR\CLSID{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} => key not found.
                      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9} => key removed successfully.
                      HKCR\CLSID{DBC80044-A445-435b-BC74-9C25C1C588A9} => key not found.
                      HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon => key removed successfully.
                      AdvancedSystemCareService10 => service not found.
                      IMFservice => service not found.
                      IObitUnSvr => service not found.
                      HKLM\System\CurrentControlSet\Services\LiveUpdateS vc => key removed successfully.
                      LiveUpdateSvc => service removed successfully.
                      “C:\Program Files\IObit” => not found.
                      RegFilter => service not found.
                      SmartDefragDriver => service not found.
                      “C:\WINDOWS\System32\Drivers\SmartDefragDriver.sys ” => not found.
                      HKLM\System\CurrentControlSet\Services\IntelIde => key removed successfully.
                      IntelIde => service removed successfully.
                      HKLM\System\CurrentControlSet\Services\WS2IFSL => key removed successfully.
                      WS2IFSL => service removed successfully.
                      C:\WINDOWS\Tasks\JetBoost_AutoUpdate.job => moved successfully
                      C:\Documents and Settings\All Users\Application Data\AVAST Software => moved successfully
                      C:\Documents and Settings\Talus\Application Data\IObit => moved successfully
                      C:\Documents and Settings\Talus\Start Menu\Programs\Remote Assistance.lnk => moved successfully
                      “C:\WINDOWS\Tasks\JetBoost_Startup.job” => not found.
                      “C:\WINDOWS\system32\IObitSmartDefragExtension.dll ” => not found.
                      “C:\WINDOWS\system32\Drivers\SmartDefragDriver.sys ” => not found.
                      “C:\Documents and Settings\All Users\Start Menu\Programs\Smart Defrag” => not found.
                      “C:\WINDOWS\system32\SmartDefragBootTime.exe” => not found.
                      “C:\Documents and Settings\All Users\Application Data\InstallMate” => not found.
                      “C:\WINDOWS\system32\Drivers\DrvAgent32.sys” => not found.
                      “C:\Documents and Settings\anon\Local Settings\Application Data\eSupport.com” => not found.
                      C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => moved successfully
                      “C:\Documents and Settings\anon\Application Data\ProductData” => not found.
                      “C:\Documents and Settings\All Users\Start Menu\Programs\IObit Malware Fighter” => not found.
                      C:\WINDOWS\Tasks\IObitDisabled => moved successfully
                      C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => not found.
                      C:\WINDOWS\Tasks\ASC10_PerformanceMonitor.job => not found.
                      C:\WINDOWS\Tasks\Driver Booster Scheduler.job => not found.
                      C:\WINDOWS\Tasks\JetBoost_AutoUpdate.job => not found.
                      C:\WINDOWS\Tasks\JetBoost_Startup.job => not found.
                      hortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Mono-3.2.3 Command Prompt.lnk → C:\WINDOWS\system32\cmd.exe (Microsoft Corporation) → /k “C:\Program Files\Mono-3.2.3\bin\setmonopath.bat” => Error: No automatic fix found for this entry.
                      “C:\Program Files\IObit\Advanced SystemCare\madExcept_.bpl” => not found.
                      “C:\Program Files\IObit\Advanced SystemCare\madBasic_.bpl” => not found.
                      “C:\Program Files\IObit\Advanced SystemCare\madDisAsm_.bpl” => not found.
                      “C:\Program Files\IObit\Advanced SystemCare\webres.dll” => not found.
                      HKLM\System\CurrentControlSet\Control\SafeBoot\Min imal\IMFservice => key not found.
                      HKLM\System\CurrentControlSet\Control\SafeBoot\Net work\nm => key removed successfully.
                      HKLM\System\CurrentControlSet\Control\SafeBoot\Net work\nm.sys => key removed successfully.
                      C:\WINDOWS\system32\Drivers\etc\hosts => moved successfully
                      Hosts restored successfully.

                      ========= RemoveProxy: =========

                      HKU.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVers ion\Internet Settings\Connections\DefaultConnectionSettings => value removed successfully.
                      HKU.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVers ion\Internet Settings\Connections\SavedLegacySettings => value removed successfully.
                      HKU\S-1-5-21-1202660629-1409082233-1606980848-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Int ernet Settings\Connections\DefaultConnectionSettings => value removed successfully.
                      HKU\S-1-5-21-1202660629-1409082233-1606980848-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Int ernet Settings\Connections\SavedLegacySettings => value removed successfully.

                      ========= End of RemoveProxy: =========

                      ========= netsh advfirewall reset =========

                      The following command was not found: advfirewall reset.

                      ========= End of CMD: =========

                      ========= netsh advfirewall set allprofiles state ON =========

                      The following command was not found: advfirewall set allprofiles state ON.

                      ========= End of CMD: =========

                      ========= ipconfig /flushdns =========

                      Windows IP Configuration

                      Could not flush the DNS Resolver Cache: Function failed during execution.

                      ========= End of CMD: =========

                      =========== EmptyTemp: ==========

                      BITS transfer queue => 11078 B
                      DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache => 197376 B
                      Java, Flash, Steam htmlcache => 715 B
                      Windows/system/dllcache/drivers => 16384 B
                      Edge => 0 B
                      Chrome => 0 B
                      Firefox => 53424586 B
                      Opera => 0 B

                      Temp, IE cache, history, cookies, recent:
                      Documents and Settings => 0 B
                      Default User => 66164 B
                      All Users => 0 B
                      systemprofile => 115048 B
                      LocalService => 65896 B
                      NetworkService => 66231 B
                      anon => 3479483276 B
                      Talus => 66314 B

                      RecycleBin => 170820 B
                      EmptyTemp: => 3.3 GB temporary data Removed.

                      ================================

                      The system needed a reboot.

                      ==== End of Fixlog 20:46:45 ====

                      Problem not fixed yet but IE downloads still worked. Lots of stuff found as you can see. And SDI is amazing.

                      NO IDEA why things are struck out.

                      Comment

                      • Malnutrition
                        PCHF Moderator
                        • Jul 2016
                        • 7041

                        #12
                        Originally posted by dscape
                        Problem not fixed yet
                        Did you use the Reset Browser tool to get a fresh copy of Firefox?

                        Comment

                        • Malnutrition
                          PCHF Moderator
                          • Jul 2016
                          • 7041

                          #13
                          Zemana Deep Scan.

                          [ul]
                          • [li]Right click on Zemana and run as admin.[/li][/ul]
                            [ul]
                            [li]Click the Cog/Sproket Wheel, at the top right of Zemana[/li][/ul]
                            [ul]
                            [li]Select Advanced - I have read the warning and wish to proceed.[/li][/ul]
                            [ul]
                            [li]Place a tick next to Detect Suspicious (Root CA) Certificates.[/li][/ul]
                            [ul]
                            [li]Then click the house icon in Zemana.[/li][/ul]
                            [ul]
                            [li]Then hit your start button at the lower left hand corner of your desktop.[/li][/ul]
                            [ul]
                            [li]Then left click on Computer.[/li][/ul]
                            [ul]
                            [li]Drag Local Disk C: Into the area of Zemana that reads Drag and drop files here to scan them.[/li][/ul]
                            [ul]
                            [li]http://i.imgur.com/bOVO6lY.png[/li][/ul]
                            [ul]
                            [li]Once the scan has completed click graph icon on the top right of the programs User interface.[/li][/ul]
                            [ul]
                            [li]Double click to open the latest log-file.[/li][/ul]
                            [ul]
                            [li]Copy it to your clipboard.[/li][/ul]
                            [ul]
                            [li]Post the log here in your next reply.[/li][/ul]


                          Rogue Killer Scan.

                          Download RogueKiller from one of the following links and save it to your Desktop:

                          Link 1
                          Link 2
                          [ul]
                          [li]Close all the running programs[/li][li]Double click on downloaded setup.exe file to install the program.[/li][li]Click on Start Scan button.[/li][li]Click on another Start Scan button.[/li][li]Wait until the Status box shows Scan Finished[/li][li]Click on Delete.[/li][/ul]
                          [ul]
                          [li]Wait until the Status box shows Deleting Finished.[/li][/ul]
                          [ul]
                          [li]Click on Report and copy/paste the content of the Notepad into your next reply.[/li][/ul]
                          [ul]
                          [li]RKreport.txt could also be found on your desktop.[/li][li]If more than one log is produced post all logs.[/li][/ul]

                          Fresh FRST Logs.

                          Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

                          [ul]
                          [li]Right-click on FRST icon and select Run as Administrator to start the tool.[/li](XP users click run after receipt of Windows Security Warning - Open File).
                          [li]Make sure that Addition option is checked, as well as Shortcut.txt.[/li]
                          [li]Press Scan button and wait.[/li][li]The tool will produce three logfiles on your desktop: FRST.txt, and Addition.txt – & Shortcut.txt[/li][/ul]
                          Please Copy & Paste them into your next reply. But attach Shortcut.txt

                          Comment

                          • dscape
                            PCHF Member
                            • Feb 2017
                            • 10

                            #14
                            First RogueKiller wouldn’t start. Illegal Instruction. (0xc000001d) occured in the application at location 0x006b30c0
                            I also have a new problem. Whenever I right click anything I get an error also.
                            “0x02651d6c” referenced memory at 0x02668934 memory could not be written

                            As for the other logs …
                            Zemana AntiMalware 2.72.2.101 (Installed)


                            Scan Result : Completed
                            Scan Date : 2017/2/13
                            Operating System : Windows XP 32-bit
                            Processor : 1X AMD Athlon™ XP 3000+
                            BIOS Mode : Legacy
                            CUID : 12D8E8244A8F9AA5100E8D
                            Scan Type : Custom Scan
                            Duration : 27m 40s
                            Scanned Objects : 31492
                            Detected Objects : 8
                            Excluded Objects : 0
                            Read Level : Normal
                            Auto Upload : Enabled
                            Detect All Extensions : Disabled
                            Scan Documents : Disabled
                            Domain Info : WORKGROUP,0,2
                            [HEADING=1]Detected Objects[/HEADING]
                            unins000.exe
                            Status : Scanned
                            Object : %programfiles%\bluesprig\jetboost\unins000.exe
                            MD5 : 3183ED9A61B0B8B7CBE0A09CBCAAD8FD
                            Publisher : BlueSprig, Inc.
                            Size : 1182576
                            Version : 51.1052.0.0
                            Detection : Adware:Win32/BlueSprig!Ep
                            Cleaning Action : Quarantine
                            Related Objects :
                            File - %programfiles%\bluesprig\jetboost\unins000.exe

                            TaskSchedule.exe
                            Status : Scanned
                            Object : %programfiles%\bluesprig\jetboost\taskschedule.exe
                            MD5 : 5A55CEA00484AA1F902A1B1F753AD45E
                            Publisher : BlueSprig, Inc.
                            Size : 83824
                            Version : 1.0.6.19
                            Detection : Adware:Win32/BlueSprig!Ep
                            Cleaning Action : Quarantine
                            Related Objects :
                            File - %programfiles%\bluesprig\jetboost\taskschedule.exe

                            taskMgr.dll
                            Status : Scanned
                            Object : %programfiles%\bluesprig\jetboost\taskmgr.dll
                            MD5 : A2A0DA205BE1BDF183AAD97819A1F6E6
                            Publisher : BlueSprig, Inc.
                            Size : 327536
                            Version : 1.1.0.225
                            Detection : Adware:Win32/BlueSprig!Ep
                            Cleaning Action : Quarantine
                            Related Objects :
                            File - %programfiles%\bluesprig\jetboost\taskmgr.dll

                            sqlite3.dll
                            Status : Scanned
                            Object : %programfiles%\bluesprig\jetboost\sqlite3.dll
                            MD5 : 4E0A3AB42CA61811E165F5E2813FF027
                            Publisher : BlueSprig, Inc.
                            Size : 516976
                            Version : -
                            Detection : Adware:Win32/BlueSprig!Ep
                            Cleaning Action : Quarantine
                            Related Objects :
                            File - %programfiles%\bluesprig\jetboost\sqlite3.dll

                            PowerConfig.dll
                            Status : Scanned
                            Object : %programfiles%\bluesprig\jetboost\powerconfig.dll
                            MD5 : 2912EB413E82A7B1EC691D1EBAFFB216
                            Publisher : BlueSprig, Inc.
                            Size : 62320
                            Version : 1.1.0.18
                            Detection : Adware:Win32/BlueSprig!Ep
                            Cleaning Action : Quarantine
                            Related Objects :
                            File - %programfiles%\bluesprig\jetboost\powerconfig.dll

                            JetBoostTray.exe
                            Status : Scanned
                            Object : %programfiles%\bluesprig\jetboost\jetboosttray.exe
                            MD5 : 1E3C6E149C281531E90B7C3D47992FCC
                            Publisher : BlueSprig, Inc.
                            Size : 1493360
                            Version : 2.0.0.7
                            Detection : Adware:Win32/BlueSprig!Ep
                            Cleaning Action : Quarantine
                            Related Objects :
                            File - %programfiles%\bluesprig\jetboost\jetboosttray.exe

                            JetBoost.exe
                            Status : Scanned
                            Object : %programfiles%\bluesprig\jetboost\jetboost.exe
                            MD5 : 483FD05EF6DBD768850ADB2C88CB073C
                            Publisher : BlueSprig, Inc.
                            Size : 1938800
                            Version : 2.0.0.67
                            Detection : Adware:Win32/BlueSprig!Ep
                            Cleaning Action : Quarantine
                            Related Objects :
                            File - %programfiles%\bluesprig\jetboost\jetboost.exe

                            AutoUpdate.exe
                            Status : Scanned
                            Object : %programfiles%\bluesprig\jetboost\autoupdate.exe
                            MD5 : 8231A10FC523A93F3B2D54714E157021
                            Publisher : BlueSprig, Inc.
                            Size : 724336
                            Version : 1.1.10.171
                            Detection : Adware:Win32/BlueSprig!Ep
                            Cleaning Action : Quarantine
                            Related Objects :
                            File - %programfiles%\bluesprig\jetboost\autoupdate.exe
                            [HEADING=1]Cleaning Result[/HEADING]
                            Cleaned : 8
                            Reported as safe : 0
                            Failed : 0
                            Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-02-2017
                            Ran by anon (administrator) on FUYHJ-1DEA3B72C (13-02-2017 21:41:54)
                            Running from C:\Documents and Settings\anon\Desktop
                            Loaded Profiles: anon (Available Profiles: anon & Talus)
                            Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
                            Internet Explorer Version 8 (Default browser: FF)
                            Boot Mode: Normal
                            Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

                            ==================== Processes (Whitelisted) =================

                            (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

                            (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
                            (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
                            (Copyright 2017.) C:\Program Files\Zemana AntiMalware\ZAM.exe
                            (Copyright 2017.) C:\Program Files\Zemana AntiMalware\ZAM.exe
                            (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
                            (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
                            (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

                            ==================== Registry (Whitelisted) ====================

                            (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

                            HKLM...\Run: [ZAM] => C:\Program Files\Zemana AntiMalware\ZAM.exe [14416624 2017-02-02] (Copyright 2017.)
                            Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2017-01-15] (ATI Technologies Inc.)
                            HKU\S-1-5-21-1202660629-1409082233-1606980848-1003...\Policies\Explorer: [NolowDiskSpaceChecks] 1

                            ==================== Internet (Whitelisted) ====================

                            (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

                            Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62
                            Tcpip..\Interfaces{8660C4EF-6BE7-44AC-A140-E0FA7635DDF4}: [DhcpNameServer] 209.18.47.61 209.18.47.62
                            [HEADING=1]Internet Explorer:[/HEADING]
                            [HEADING=1]FireFox:[/HEADING]
                            FF ProfilePath: C:\Documents and Settings\anon\Application Data\Mozilla\Firefox\Profiles\2xveium2.default-1487025261312 [2017-02-13]
                            FF DefaultSearchEngine: C:\Documents and Settings\anon\Application Data\Mozilla\Firefox\Profiles\2xveium2.default-1487025261312 → DuckDuckGo
                            FF Homepage: C:\Documents and Settings\anon\Application Data\Mozilla\Firefox\Profiles\2xveium2.default-1487025261312 → hxxps://www.startpage.com/
                            FF HKLM...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
                            FF Extension: (Microsoft .NET Framework Assistant) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2017-01-15] [not signed]
                            FF Plugin: @adobe.com/FlashPlayer → C:\WINDOWS\system32\Macromed\Flash\NPSWF32_24_0_0_ 194.dll [2017-01-15] ()
                            FF Plugin: @java.com/DTPlugin,version=11.121.2 → C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1 .dll [2017-01-24] (Oracle Corporation)
                            FF Plugin: @java.com/JavaPlugin,version=11.121.2 → C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-24] (Oracle Corporation)
                            FF Plugin: @microsoft.com/WPF,version=3.5 → c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
                            FF Plugin: @videolan.org/vlc,version=2.2.4 → C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)

                            ==================== Services (Whitelisted) ====================

                            (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

                            R2 6to4; C:\WINDOWS\System32\6to4svc.dll [100864 2010-02-11] (Microsoft Corporation)
                            R2 ZAMSvc; C:\Program Files\Zemana AntiMalware\ZAM.exe [14416624 2017-02-02] (Copyright 2017.)

                            ===================== Drivers (Whitelisted) ======================

                            (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

                            R3 ALCXWDM; C:\WINDOWS\System32\drivers\ALCXWDM.SYS [4122368 2017-01-15] (Realtek Semiconductor Corp.)
                            R3 FET5X86V; C:\WINDOWS\System32\DRIVERS\fetnd5bv.sys [48128 2011-04-01] (VIA Technologies, Inc. )
                            S3 FETND5BV; C:\WINDOWS\System32\DRIVERS\fetnd5bv.sys [48128 2011-04-01] (VIA Technologies, Inc. )
                            S3 FETNDIS; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [27165 2001-08-17] (VIA Technologies, Inc. )
                            R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [23840 2017-01-15] (REALiX™)
                            R3 KMWDFILTER; C:\WINDOWS\System32\DRIVERS\KMWDFILTER.sys [17408 2008-10-09] (Windows (R) Codename Longhorn DDK provider)
                            S3 nm; C:\WINDOWS\System32\DRIVERS\NMnt.sys [40320 2008-04-13] (Microsoft Corporation)
                            R1 Tcpip6; C:\WINDOWS\System32\DRIVERS\tcpip6.sys [226880 2010-02-11] (Microsoft Corporation)
                            R0 viaagp1; C:\WINDOWS\System32\DRIVERS\viaagp1.sys [27904 2017-01-24] (VIA Technologies, Inc.)
                            R0 videX32; C:\WINDOWS\System32\DRIVERS\videX32.sys [13976 2017-01-15] (VIA Technologies, Inc.)
                            R0 xfilt; C:\WINDOWS\System32\DRIVERS\xfilt.sys [23192 2017-01-15] (VIA Technologies, Inc.)
                            R1 ZAM; C:\WINDOWS\System32\drivers\zam32.sys [181496 2017-02-13] (Zemana Ltd.)
                            R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard32.sys [181496 2017-02-13] (Zemana Ltd.)

                            ==================== NetSvcs (Whitelisted) ===================

                            (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

                            ==================== One Month Created files and folders ========

                            (If an entry is included in the fixlist, the file/folder will be moved.)

                            2017-02-13 21:41 - 2017-02-13 21:41 - 00005665 _____ C:\Documents and Settings\anon\Desktop\FRST.txt
                            2017-02-13 21:40 - 2017-02-13 21:40 - 00241864 _____ C:\Documents and Settings\anon\Desktop\setup.htm
                            2017-02-13 21:37 - 2017-02-13 21:37 - 00004497 _____ C:\Documents and Settings\anon\Desktop\2017.02.13-21.09.44-i3-t2-d8.txt
                            2017-02-13 21:08 - 2017-02-13 21:41 - 00026332 _____ C:\WINDOWS\ZAM.krnl.trace
                            2017-02-13 21:08 - 2017-02-13 21:41 - 00004883 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
                            2017-02-13 21:08 - 2017-02-13 21:08 - 00181496 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zamguard32.sys
                            2017-02-13 21:08 - 2017-02-13 21:08 - 00181496 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zam32.sys
                            2017-02-13 21:08 - 2017-02-13 21:08 - 00001605 _____ C:\Documents and Settings\All Users\Desktop\Zemana AntiMalware.lnk
                            2017-02-13 21:08 - 2017-02-13 21:08 - 00000000 ____D C:\Program Files\Zemana AntiMalware
                            2017-02-13 21:08 - 2017-02-13 21:08 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\Application Data\Zemana
                            2017-02-13 21:08 - 2017-02-13 21:08 - 00000000 ____D C:\Documents and Settings\anon\Local Settings\Application Data\Zemana
                            2017-02-13 21:08 - 2017-02-13 21:08 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Zemana AntiMalware
                            2017-02-13 21:07 - 2017-02-13 21:07 - 05677776 _____ (Zemana Ltd. ) C:\Documents and Settings\anon\Desktop\Zemana.AntiMalware.Setup.exe
                            2017-02-13 20:48 - 2017-02-13 20:48 - 00000272 _____ C:\WINDOWS\Tasks\JetBoost_AutoUpdate.job
                            2017-02-13 20:45 - 2017-02-13 20:45 - 00000000 ____D C:\Documents and Settings\anon\Desktop\FRST-OlderVersion
                            2017-02-13 20:39 - 2017-02-13 20:39 - 00000000 ____D C:\SecurityCheck
                            2017-02-13 20:34 - 2017-02-13 20:35 - 00000000 ____D C:\AdwCleaner
                            2017-02-13 20:26 - 2017-02-13 20:26 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\system32\subinacl.exe
                            2017-02-13 20:26 - 2017-02-13 20:26 - 00000000 ____D C:\Program Files\Adware Removal Tool by TSA
                            2017-02-13 20:25 - 2017-02-13 20:25 - 04015056 _____ C:\Documents and Settings\anon\Desktop\AdwCleaner.exe
                            2017-02-13 20:25 - 2017-02-13 20:25 - 00512440 _____ (glax24 (safezone.cc)) C:\Documents and Settings\anon\Desktop\SecurityCheck.exe
                            2017-02-13 20:22 - 2017-02-13 20:22 - 00752296 _____ C:\Documents and Settings\anon\Desktop\Adware Removal Tool by TSA.exe
                            2017-02-13 20:19 - 2017-02-13 20:19 - 01663040 _____ (Malwarebytes) C:\Documents and Settings\anon\Desktop\JRT.exe
                            2017-02-13 20:05 - 2017-02-13 20:17 - 00000000 ____D C:\Documents and Settings\anon\Application Data\ZHP
                            2017-02-13 20:05 - 2017-02-13 20:05 - 00000804 _____ C:\Documents and Settings\anon\Desktop\ZHPCleaner.lnk
                            2017-02-13 19:44 - 2017-02-13 19:55 - 00000000 ____D C:\Documents and Settings\anon\Desktop\SDI_R535
                            2017-02-13 19:12 - 2017-02-13 21:41 - 00000000 ____D C:\FRST
                            2017-02-13 19:11 - 2017-02-13 20:45 - 01764352 _____ (Farbar) C:\Documents and Settings\anon\Desktop\FRST.exe
                            2017-02-13 18:16 - 2017-02-13 18:16 - 00001374 _____ C:\WINDOWS\imsins.BAK
                            2017-02-13 17:36 - 2017-02-13 17:36 - 00000000 ____D C:\Documents and Settings\anon\Desktop\Old Firefox Data
                            2017-02-13 16:00 - 2017-02-13 20:46 - 00000000 ____D C:\Documents and Settings\Talus\Local Settings\Temp
                            2017-02-13 16:00 - 2017-02-13 16:00 - 00000000 ___RD C:\Documents and Settings\Talus\My Documents\My Pictures
                            2017-02-13 16:00 - 2017-02-13 16:00 - 00000000 ___RD C:\Documents and Settings\Talus\My Documents\My Music
                            2017-02-13 16:00 - 2017-02-13 16:00 - 00000000 ___RD C:\Documents and Settings\Talus\My Documents
                            2017-02-13 15:58 - 2017-02-13 15:58 - 00000000 ____D C:\Documents and Settings\anon\Start Menu\Programs\Razor
                            2017-02-13 15:58 - 2017-02-13 15:58 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows
                            2017-02-13 15:58 - 2017-02-13 15:58 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\mIRC
                            2017-02-13 15:56 - 2017-02-13 15:56 - 00000000 ____D C:\Program Files\Easy Macro Recorder
                            2017-02-13 15:56 - 2017-02-13 15:56 - 00000000 ____D C:\Documents and Settings\anon\Start Menu\Programs\Ultima Online Renaissance
                            2017-02-13 15:56 - 2017-02-13 15:56 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Easy Macro Recorder
                            2017-02-13 15:24 - 2017-02-13 15:31 - 00000000 ____D C:\Documents and Settings\Talus\Application Data\Mozilla
                            2017-02-13 15:24 - 2017-02-13 15:24 - 00000000 ____D C:\Documents and Settings\Talus\Local Settings\Application Data\Mozilla
                            2017-02-13 15:22 - 2017-02-13 17:49 - 00000000 ____D C:\Documents and Settings\Talus
                            2017-02-13 15:22 - 2017-02-13 15:26 - 00000178 ___SH C:\Documents and Settings\Talus\ntuser.ini
                            2017-02-13 15:22 - 2017-02-13 15:22 - 00000803 _____ C:\Documents and Settings\Talus\Start Menu\Programs\Internet Explorer.lnk
                            2017-02-13 15:22 - 2017-02-13 15:22 - 00000788 _____ C:\Documents and Settings\Talus\Start Menu\Programs\Windows Media Player.lnk
                            2017-02-13 15:22 - 2017-02-13 15:22 - 00000738 _____ C:\Documents and Settings\Talus\Start Menu\Programs\Outlook Express.lnk
                            2017-02-13 15:22 - 2017-02-13 15:22 - 00000000 __SHD C:\Documents and Settings\Talus\IETldCache
                            2017-02-13 15:22 - 2008-04-13 22:42 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpns.dll
                            2017-02-08 18:41 - 2017-02-08 18:41 - 00094208 _____ C:\WINDOWS\Minidump\Mini020817-01.dmp
                            2017-02-08 18:41 - 2017-02-08 18:41 - 00000000 ____D C:\WINDOWS\Minidump
                            2017-02-08 11:05 - 2017-02-08 11:05 - 00057364 _____ C:\Documents and Settings\anon\Desktop\ATL3_synth_guide.txt
                            2017-02-01 20:59 - 2017-02-01 20:59 - 00000626 _____ C:\Documents and Settings\All Users\Desktop\mIRC.lnk
                            2017-02-01 20:53 - 2017-02-13 16:00 - 00000000 ____D C:\Documents and Settings\anon\Application Data\mIRC
                            2017-02-01 20:53 - 2017-02-13 15:58 - 00000000 ____D C:\Program Files\mIRC
                            2017-01-31 09:53 - 2017-01-31 09:53 - 00000656 _____ C:\Documents and Settings\anon\Desktop\Razor.lnk
                            2017-01-30 22:00 - 2017-02-13 15:56 - 00000000 ____D C:\Program Files\Mono-3.2.3
                            2017-01-30 21:47 - 2010-01-19 14:48 - 00152848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Comdlg32.ocx
                            2017-01-30 21:47 - 1998-06-24 00:00 - 00067376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SYSINFO.OCX
                            2017-01-30 07:10 - 2017-01-30 07:10 - 00000577 _____ C:\Documents and Settings\anon\Desktop\UO Renaissance (Without Razor).lnk
                            2017-01-30 07:07 - 2017-02-13 17:16 - 00000000 ____D C:\Ultima Online
                            2017-01-29 12:56 - 2017-01-29 12:56 - 00000000 ____D C:\Program Files\CPUID
                            2017-01-29 12:56 - 2017-01-29 12:56 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\CPUID
                            2017-01-29 12:45 - 2017-01-29 12:45 - 00000000 ____D C:\WINDOWS\pss
                            2017-01-26 05:28 - 2017-01-26 05:28 - 00000000 ____D C:\SIMANT
                            2017-01-26 01:04 - 2017-01-26 01:04 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Winamp
                            2017-01-26 01:03 - 2017-01-26 01:19 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Winamp
                            2017-01-26 01:03 - 2017-01-26 01:04 - 00000000 ____D C:\Program Files\Winamp
                            2017-01-26 01:03 - 2011-03-04 14:44 - 02095600 ____N (Sonic Solutions) C:\WINDOWS\system32\pxsfs.dll
                            2017-01-26 01:03 - 2011-03-04 14:44 - 00698864 ____N (Sonic Solutions) C:\WINDOWS\system32\px.dll
                            2017-01-26 01:03 - 2011-03-04 14:44 - 00571888 ____N (Sonic Solutions) C:\WINDOWS\system32\pxdrv.dll
                            2017-01-26 01:03 - 2011-03-04 14:44 - 00440816 ____N (Sonic Solutions) C:\WINDOWS\system32\pxwave.dll
                            2017-01-26 01:03 - 2011-03-04 14:44 - 00219632 ____N (Sonic Solutions) C:\WINDOWS\system32\pxmas.dll
                            2017-01-26 01:03 - 2011-03-04 14:44 - 00133616 ____N (Sonic Solutions) C:\WINDOWS\system32\pxafs.dll
                            2017-01-26 01:03 - 2011-03-04 14:44 - 00126448 ____N (Sonic Solutions) C:\WINDOWS\system32\pxinsi64.exe
                            2017-01-26 01:03 - 2011-03-04 14:44 - 00123888 ____N (Sonic Solutions) C:\WINDOWS\system32\pxcpyi64.exe
                            2017-01-26 01:03 - 2011-03-04 14:44 - 00100848 ____N (Sonic Solutions) C:\WINDOWS\system32\vxblock.dll
                            2017-01-26 01:03 - 2011-03-04 14:44 - 00072176 ____N (Sonic Solutions) C:\WINDOWS\system32\pxhpinst.exe
                            2017-01-26 01:03 - 2011-03-04 14:44 - 00068592 ____N (Sonic Solutions) C:\WINDOWS\system32\pxinsa64.exe
                            2017-01-26 01:03 - 2011-03-04 14:44 - 00068080 ____N (Sonic Solutions) C:\WINDOWS\system32\pxcpya64.exe
                            2017-01-26 01:03 - 2011-03-04 14:44 - 00059888 ____N (Sonic Solutions) C:\WINDOWS\system32\pxwma.dll
                            2017-01-26 01:03 - 2011-03-04 14:44 - 00045648 ____N (Sonic Solutions) C:\WINDOWS\system32\Drivers\PxHelp20.sys
                            2017-01-26 01:03 - 2011-03-04 14:44 - 00009200 ____N (Sonic Solutions) C:\WINDOWS\system32\Drivers\cdralw2k.sys
                            2017-01-26 01:03 - 2011-03-04 14:44 - 00009072 ____N (Sonic Solutions) C:\WINDOWS\system32\Drivers\cdr4_xp.sys
                            2017-01-26 00:54 - 2017-01-27 06:28 - 00000000 ____D C:\Documents and Settings\anon\Desktop\Audio
                            2017-01-24 09:58 - 2017-01-24 09:58 - 00000000 ____D C:\Program Files\Common Files\Java
                            2017-01-24 09:57 - 2017-01-24 09:57 - 00000000 ____D C:\Documents and Settings\anon\Local Settings\Application Data\Sun
                            2017-01-24 09:57 - 2017-01-24 09:57 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Sun
                            2017-01-24 09:57 - 2017-01-24 09:57 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Java
                            2017-01-24 09:57 - 2017-01-24 09:56 - 00160256 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
                            2017-01-24 09:57 - 2017-01-24 09:56 - 00095808 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
                            2017-01-24 09:55 - 2017-01-24 09:59 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Oracle
                            2017-01-24 09:54 - 2017-01-24 09:54 - 00000000 ____D C:\Program Files\Java
                            2017-01-24 07:38 - 2017-02-13 15:56 - 00000000 ____D C:\Program Files\UOAM
                            2017-01-24 07:38 - 2017-01-24 07:38 - 00000650 _____ C:\Documents and Settings\anon\Desktop\UO Auto-Map.lnk
                            2017-01-24 07:38 - 2017-01-24 07:38 - 00000000 ____D C:\Documents and Settings\anon\Start Menu\Programs\UO Auto-Map
                            2017-01-24 06:30 - 2017-02-13 17:16 - 00000000 ____D C:\Program Files\Razor
                            2017-01-24 02:38 - 2017-02-13 15:56 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Package Cache
                            2017-01-24 02:31 - 2017-01-24 02:30 - 00027904 _____ (VIA Technologies, Inc.) C:\WINDOWS\system32\Drivers\VIAAGP1.SYS
                            2017-01-24 01:38 - 2017-01-24 01:38 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
                            2017-01-23 23:05 - 2017-01-23 23:05 - 00000000 ____D C:\Documents and Settings\All Users\Application Data{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705}
                            2017-01-23 00:52 - 2004-01-22 00:35 - 00020480 _____ C:\WINDOWS\system32\igrping.dll
                            2017-01-23 00:10 - 2017-01-23 00:10 - 00000000 ____D C:\Documents and Settings\anon\My Documents\EA Games
                            2017-01-22 20:05 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
                            2017-01-22 20:05 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
                            2017-01-22 20:05 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
                            2017-01-22 20:05 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
                            2017-01-22 20:05 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
                            2017-01-22 20:05 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
                            2017-01-22 20:05 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
                            2017-01-22 20:05 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
                            2017-01-22 20:05 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
                            2017-01-22 20:05 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
                            2017-01-22 20:05 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
                            2017-01-22 20:05 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
                            2017-01-22 20:05 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
                            2017-01-22 20:05 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
                            2017-01-22 20:05 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
                            2017-01-22 20:05 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
                            2017-01-22 20:05 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
                            2017-01-22 20:05 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
                            2017-01-22 20:05 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
                            2017-01-22 20:05 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
                            2017-01-22 20:05 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
                            2017-01-22 20:05 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
                            2017-01-22 20:05 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
                            2017-01-22 20:05 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
                            2017-01-22 20:05 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
                            2017-01-22 20:05 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
                            2017-01-22 20:05 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
                            2017-01-22 20:05 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
                            2017-01-22 20:05 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
                            2017-01-22 20:05 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
                            2017-01-22 20:05 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
                            2017-01-22 20:05 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
                            2017-01-22 20:05 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
                            2017-01-22 20:05 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
                            2017-01-22 20:05 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
                            2017-01-22 20:05 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
                            2017-01-22 20:05 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
                            2017-01-22 20:05 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
                            2017-01-22 20:05 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
                            2017-01-22 20:05 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
                            2017-01-22 20:05 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
                            2017-01-22 20:05 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
                            2017-01-22 20:05 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
                            2017-01-22 20:05 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
                            2017-01-22 20:05 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
                            2017-01-22 20:05 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
                            2017-01-22 20:05 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
                            2017-01-22 20:05 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
                            2017-01-22 20:05 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
                            2017-01-22 20:05 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
                            2017-01-22 20:05 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
                            2017-01-22 20:05 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
                            2017-01-22 20:05 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
                            2017-01-22 20:05 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
                            2017-01-22 20:05 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
                            2017-01-22 20:05 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
                            2017-01-22 20:04 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
                            2017-01-22 20:04 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
                            2017-01-22 20:04 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
                            2017-01-22 20:04 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
                            2017-01-22 20:04 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
                            2017-01-22 20:04 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
                            2017-01-22 20:04 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
                            2017-01-22 20:04 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
                            2017-01-22 20:04 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
                            2017-01-22 20:04 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
                            2017-01-22 20:04 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
                            2017-01-22 20:04 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
                            2017-01-22 20:04 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
                            2017-01-22 20:04 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
                            2017-01-22 20:04 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
                            2017-01-22 20:04 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
                            2017-01-22 20:04 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
                            2017-01-22 20:04 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
                            2017-01-22 20:04 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
                            2017-01-22 20:04 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
                            2017-01-22 20:04 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
                            2017-01-22 20:04 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
                            2017-01-22 20:04 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
                            2017-01-22 20:04 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
                            2017-01-22 20:04 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
                            2017-01-22 20:04 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
                            2017-01-22 20:04 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
                            2017-01-22 20:04 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
                            2017-01-22 20:04 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
                            2017-01-22 20:04 - 2005-12-05 18:07 - 00061136 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput9_1_0.dll
                            2017-01-22 20:04 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
                            2017-01-22 20:04 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
                            2017-01-22 20:04 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
                            2017-01-22 20:04 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
                            2017-01-22 20:03 - 2017-01-22 20:04 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
                            2017-01-22 19:35 - 2017-02-09 14:31 - 00000000 ____D C:\Documents and Settings\anon\Desktop\SNES9x
                            2017-01-22 18:02 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
                            2017-01-22 17:54 - 2017-01-22 17:54 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Razor
                            2017-01-22 05:15 - 2017-01-22 08:07 - 00000000 ____D C:\Documents and Settings\anon\Application Data\MPC-HC
                            2017-01-22 05:14 - 2017-01-22 05:15 - 00000000 ____D C:\Program Files\Combined Community Codec Pack
                            2017-01-22 05:14 - 2017-01-22 05:15 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Combined Community Codec Pack
                            2017-01-20 07:19 - 2017-01-20 07:19 - 17694720 _____ C:\WINDOWS\system32\config\software.iodefrag.bak
                            2017-01-20 07:19 - 2017-01-20 07:19 - 00253952 _____ C:\WINDOWS\system32\config\default.iodefrag.bak
                            2017-01-20 07:19 - 2017-01-20 07:19 - 00049152 _____ C:\WINDOWS\system32\config\SECURITY.iodefrag.bak
                            2017-01-20 07:19 - 2017-01-20 07:19 - 00028672 _____ C:\WINDOWS\system32\config\SAM.iodefrag.bak
                            2017-01-19 11:27 - 2017-02-11 09:53 - 00007680 _____ C:\Documents and Settings\anon\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
                            2017-01-19 09:57 - 2017-01-19 09:57 - 00000760 _____ C:\Documents and Settings\anon\Desktop\Cheat Engine.lnk
                            2017-01-19 09:57 - 2017-01-19 09:57 - 00000000 ____D C:\Program Files\Cheat Engine 6.4
                            2017-01-19 09:57 - 2017-01-19 09:57 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Cheat Engine 6.4
                            2017-01-19 08:38 - 2017-01-19 08:38 - 00000000 ____D C:\Documents and Settings\anon\My Documents\My Cheat Tables
                            2017-01-18 23:20 - 2017-01-18 23:20 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Windows Search
                            2017-01-17 22:33 - 2014-10-16 10:27 - 00023840 _____ (IObit) C:\WINDOWS\system32\RegistryDefragBootTime.exe
                            2017-01-17 22:28 - 2017-02-13 17:23 - 18849792 _____ C:\WINDOWS\system32\config\software.iobit
                            2017-01-17 22:28 - 2017-02-13 17:23 - 01261568 _____ C:\WINDOWS\system32\config\default.iobit
                            2017-01-17 22:28 - 2017-02-13 17:23 - 00053248 _____ C:\WINDOWS\system32\config\SECURITY.iobit
                            2017-01-17 22:28 - 2017-02-13 17:23 - 00028672 _____ C:\WINDOWS\system32\config\SAM.iobit
                            2017-01-16 20:48 - 2017-01-16 20:48 - 00000434 _____ C:\Documents and Settings\anon\Desktop\Downloads.lnk
                            2017-01-16 20:36 - 2017-02-13 12:22 - 00000000 ____D C:\Documents and Settings\anon\Application Data\vlc
                            2017-01-16 20:35 - 2017-01-16 20:35 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\VideoLAN
                            2017-01-16 20:34 - 2017-01-16 20:34 - 00000000 ____D C:\Program Files\VideoLAN
                            2017-01-16 15:58 - 2017-02-13 21:38 - 00000000 ____D C:\Program Files\Mozilla Firefox
                            2017-01-16 03:58 - 2017-01-16 03:58 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Macromedia
                            2017-01-16 03:58 - 2017-01-16 03:58 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Adobe
                            2017-01-15 23:21 - 2017-01-15 23:21 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2803821-v2_WM9$
                            2017-01-15 23:21 - 2017-01-15 23:21 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2585542$
                            2017-01-15 23:20 - 2017-01-15 23:20 - 00000000 __HDC C:\WINDOWS$NtUninstallKB970430$
                            2017-01-15 23:20 - 2017-01-15 23:20 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2345886$
                            2017-01-15 21:59 - 2017-01-15 21:59 - 00000798 _____ C:\Documents and Settings\All Users\Desktop\JetBoost.lnk
                            2017-01-15 21:59 - 2017-01-15 21:59 - 00000000 ____D C:\Program Files\BlueSprig
                            2017-01-15 21:59 - 2017-01-15 21:59 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\JetBoost
                            2017-01-15 21:59 - 2017-01-15 21:59 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\BlueSprig
                            2017-01-15 21:55 - 2017-01-15 21:55 - 00000000 ____D C:\Program Files\7-Zip
                            2017-01-15 21:55 - 2017-01-15 21:55 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\7-Zip
                            2017-01-15 21:51 - 2017-01-15 21:51 - 00000000 ____D C:\Program Files\psx emulation cheater
                            2017-01-15 21:51 - 2017-01-15 21:51 - 00000000 ____D C:\Documents and Settings\anon\Start Menu\Programs\psx emulation cheater
                            2017-01-15 21:48 - 2017-01-15 22:10 - 00000000 ____D C:\Documents and Settings\anon\Desktop\ePSXe180
                            2017-01-15 21:45 - 2017-01-24 02:46 - 00802904 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
                            2017-01-15 21:45 - 2017-01-24 02:45 - 00144472 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
                            2017-01-15 21:40 - 2017-01-15 21:40 - 00000730 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
                            2017-01-15 21:40 - 2017-01-15 21:40 - 00000000 ____D C:\Documents and Settings\anon\Local Settings\Application Data\Mozilla
                            2017-01-15 21:40 - 2017-01-15 21:40 - 00000000 ____D C:\Documents and Settings\anon\Application Data\Mozilla
                            2017-01-15 21:22 - 2017-01-19 23:43 - 00065536 _____ C:\WINDOWS\system32\config\WindowsPowerShell.evt
                            2017-01-15 21:22 - 2017-01-19 23:43 - 00065536 _____ C:\WINDOWS\system32\config\EventForwarding-Operational.Evt
                            2017-01-15 21:04 - 2017-01-15 21:04 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2834904-v2_WM11$
                            2017-01-15 20:34 - 2017-01-15 21:21 - 00065536 _____ C:\WINDOWS\system32\config\Windows .evt
                            2017-01-15 20:34 - 2017-01-15 21:21 - 00065536 _____ C:\WINDOWS\system32\config\Microsof.evt
                            2017-01-15 20:34 - 2017-01-15 20:34 - 00000000 __HDC C:\WINDOWS$968930Uinstall_KB968930$
                            2017-01-15 20:34 - 2017-01-15 20:34 - 00000000 ____D C:\WINDOWS\system32\winrm
                            2017-01-15 20:34 - 2017-01-15 20:34 - 00000000 ____D C:\WINDOWS$NtUninstallKB968930$
                            2017-01-15 20:23 - 2017-01-15 21:31 - 00000000 ____D C:\Documents and Settings\anon\Local Settings\Application Data\ApplicationHistory
                            2017-01-15 20:23 - 2008-05-26 22:18 - 00350208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
                            2017-01-15 20:19 - 2017-01-15 20:19 - 00000000 __HDC C:\WINDOWS$NtUninstallKB961118$
                            2017-01-15 20:19 - 2017-01-15 20:19 - 00000000 __HDC C:\WINDOWS$NtUninstallKB954154_WM11$
                            2017-01-15 20:19 - 2017-01-15 20:19 - 00000000 __HDC C:\WINDOWS$NtUninstallKB929399$
                            2017-01-15 20:18 - 2017-01-15 20:19 - 00000000 __HDC C:\WINDOWS$NtUninstallKB939683$
                            2017-01-15 20:18 - 2017-01-15 20:18 - 00000000 __HDC C:\WINDOWS$NtUninstallKB941569$
                            2017-01-15 19:59 - 2017-01-15 20:59 - 00000000 ____D C:\WINDOWS\system32\XPSViewer
                            2017-01-15 19:59 - 2017-01-15 19:59 - 00000000 ____D C:\Program Files\Reference Assemblies
                            2017-01-15 19:59 - 2017-01-15 19:59 - 00000000 ____D C:\Program Files\MSBuild
                            2017-01-15 19:59 - 2017-01-15 19:59 - 00000000 ____D C:\b287b9b1c04516e9097ebf
                            2017-01-15 19:59 - 2008-07-06 07:06 - 01676288 ____N (Microsoft Corporation) C:\WINDOWS\system32\xpssvcs.dll
                            2017-01-15 19:59 - 2008-07-06 07:06 - 01676288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpssvcs.dll
                            2017-01-15 19:59 - 2008-07-06 07:06 - 00575488 ____N (Microsoft Corporation) C:\WINDOWS\system32\xpsshhdr.dll
                            2017-01-15 19:59 - 2008-07-06 07:06 - 00575488 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpsshhdr.dll
                            2017-01-15 19:59 - 2008-07-06 07:06 - 00117760 ____N (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll
                            2017-01-15 19:59 - 2008-07-06 07:06 - 00089088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\filterpipelineprintpr oc.dll
                            2017-01-15 19:59 - 2008-07-06 05:50 - 00597504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\printfilterpipelinesv c.exe
                            2017-01-15 19:54 - 2017-01-15 19:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2808679$
                            2017-01-15 19:35 - 2017-01-15 19:35 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2492386$
                            2017-01-15 19:35 - 2017-01-15 19:35 - 00000000 __HDC C:\WINDOWS$NtUninstallbasecsp$
                            2017-01-15 19:34 - 2017-01-15 19:34 - 00000000 __SHD C:\Documents and Settings\NetworkService\IETldCache
                            2017-01-15 19:33 - 2017-02-13 20:32 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy
                            2017-01-15 19:33 - 2017-01-24 01:43 - 00000000 ____D C:\Program Files\Windows Desktop Search
                            2017-01-15 19:33 - 2017-01-15 19:33 - 00000000 __HDC C:\WINDOWS$NtUninstallKB915800-v4$
                            2017-01-15 19:32 - 2017-01-15 19:32 - 00000000 __HDC C:\WINDOWS$NtUninstallMSCompPackV1$
                            2017-01-15 19:32 - 2009-05-12 15:12 - 00016928 ____N (Microsoft Corporation) C:\WINDOWS\system32\spmsg.dll
                            2017-01-15 19:31 - 2017-02-13 17:16 - 00000000 ____D C:\Program Files\Windows Media Connect 2
                            2017-01-15 19:31 - 2017-01-15 19:31 - 00000000 __HDC C:\WINDOWS$NtUninstallwmp11$
                            2017-01-15 19:30 - 2017-01-15 19:30 - 00000000 __HDC C:\WINDOWS$NtUninstallWMFDist11$
                            2017-01-15 19:29 - 2017-01-15 19:29 - 00000000 __HDC C:\WINDOWS$NtUninstallWudf01000$
                            2017-01-15 19:28 - 2017-01-15 19:28 - 00000000 ____D C:\WINDOWS\system32\URTTEMP
                            2017-01-15 19:26 - 2011-08-16 05:45 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iecompat.dll
                            2017-01-15 17:21 - 2017-01-15 17:21 - 00000000 __SHD C:\Documents and Settings\anon\PrivacIE
                            2017-01-15 17:12 - 2017-01-15 17:12 - 00000000 __SHD C:\Documents and Settings\anon\IETldCache
                            2017-01-15 17:04 - 2017-01-15 17:04 - 00000000 __HDC C:\WINDOWS$NtUninstallKB959426$
                            2017-01-15 17:04 - 2017-01-15 17:04 - 00000000 __HDC C:\WINDOWS$NtUninstallKB952954$
                            2017-01-15 17:04 - 2017-01-15 17:04 - 00000000 __HDC C:\WINDOWS$NtUninstallKB951376-v2$
                            2017-01-15 17:04 - 2017-01-15 17:04 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2922229$
                            2017-01-15 17:04 - 2017-01-15 17:04 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2868626$
                            2017-01-15 17:03 - 2017-02-13 18:16 - 00000000 ____D C:\WINDOWS\ie8updates
                            2017-01-15 17:03 - 2017-01-15 17:11 - 00065536 _____ C:\WINDOWS\system32\config\Internet.evt
                            2017-01-15 17:03 - 2014-02-05 18:26 - 11113472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll
                            2017-01-15 17:03 - 2014-02-05 18:26 - 02006016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll
                            2017-01-15 17:03 - 2014-02-05 18:26 - 00743424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll
                            2017-01-15 17:03 - 2014-02-05 18:26 - 00630272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll
                            2017-01-15 17:03 - 2014-02-05 18:26 - 00522240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll
                            2017-01-15 17:03 - 2014-02-05 18:26 - 00247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll
                            2017-01-15 17:03 - 2014-02-05 18:26 - 00055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll
                            2017-01-15 17:03 - 2014-02-05 18:26 - 00012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll
                            2017-01-15 17:02 - 2017-01-15 17:03 - 00000000 __HDC C:\WINDOWS\ie8
                            2017-01-15 17:01 - 2017-01-15 17:01 - 00000000 __HDC C:\WINDOWS$NtUninstallKB946648$
                            2017-01-15 17:01 - 2017-01-15 17:01 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2712808$
                            2017-01-15 17:01 - 2017-01-15 17:01 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2387149$
                            2017-01-15 17:00 - 2017-01-15 17:01 - 00000000 __HDC C:\WINDOWS$NtUninstallKB960859$
                            2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2934207$
                            2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2916036$
                            2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2834886$
                            2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2659262$
                            2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2631813$
                            2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2564958$
                            2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2544893-v2$
                            2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2536276-v2$
                            2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2479943$
                            2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2478971$
                            2017-01-15 17:00 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2296011$
                            2017-01-15 16:59 - 2017-01-15 17:00 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2691442$
                            2017-01-15 16:59 - 2017-01-15 16:59 - 00000000 __HDC C:\WINDOWS$NtUninstallKB975558_WM8$
                            2017-01-15 16:59 - 2017-01-15 16:59 - 00000000 __HDC C:\WINDOWS$NtUninstallKB974318$
                            2017-01-15 16:59 - 2017-01-15 16:59 - 00000000 __HDC C:\WINDOWS$NtUninstallKB955759$
                            2017-01-15 16:59 - 2017-01-15 16:59 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2900986$
                            2017-01-15 16:59 - 2017-01-15 16:59 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2847311$
                            2017-01-15 16:59 - 2017-01-15 16:59 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2378111_WM9$
                            2017-01-15 16:59 - 2017-01-15 16:59 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2115168$
                            2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB975713$
                            2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB969059$
                            2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB951978$
                            2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB950974$
                            2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2898715$
                            2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2802968$
                            2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2655992$
                            2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2598479$
                            2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2485663$
                            2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2481109$
                            2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2443105$
                            2017-01-15 16:58 - 2017-01-15 16:58 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2229593$
                            2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB982132$
                            2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB978338$
                            2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB974112$
                            2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB972270$
                            2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB971657$
                            2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB954155_WM9$
                            2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2929961$
                            2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2909212$
                            2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2862335$
                            2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2780091$
                            2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2686509$
                            2017-01-15 16:57 - 2017-01-15 16:57 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2510581$
                            2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB979687$
                            2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB956844$
                            2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB956572$
                            2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2930275$
                            2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2904266$
                            2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2876217$
                            2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2864063$
                            2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2483185$
                            2017-01-15 16:56 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2347290$
                            2017-01-15 16:55 - 2017-01-15 16:56 - 00000000 __HDC C:\WINDOWS$NtUninstallKB973869$
                            2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB975560$
                            2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB975025$
                            2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB974571$
                            2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB973507$
                            2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB952004$
                            2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2862152$
                            2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2770660$
                            2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2719985$
                            2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2592799$
                            2017-01-15 16:55 - 2017-01-15 16:55 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2535512$
                            2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB978695_WM9$
                            2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB977816$
                            2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB973904$
                            2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB952287$
                            2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB950762$
                            2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2876331$
                            2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2859537$
                            2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2850869$
                            2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2820917$
                            2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2807986$
                            2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2603381$
                            2017-01-15 16:54 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2570947$
                            2017-01-15 16:53 - 2017-01-15 16:54 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2893294$
                            2017-01-15 16:53 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB974392$
                            2017-01-15 16:53 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB973540_WM9$
                            2017-01-15 16:53 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2757638$
                            2017-01-15 16:53 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2749655$
                            2017-01-15 16:53 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2653956$
                            2017-01-15 16:53 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2508429$
                            2017-01-15 16:53 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2419632$
                            2017-01-15 16:52 - 2017-01-15 16:53 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2879017$
                            2017-01-15 16:52 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB977914$
                            2017-01-15 16:52 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB971029$
                            2017-01-15 16:52 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB952069_WM9$
                            2017-01-15 16:52 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2892075$
                            2017-01-15 16:52 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2698365$
                            2017-01-15 16:52 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2619339$
                            2017-01-15 16:52 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2506212$
                            2017-01-15 16:51 - 2017-01-15 16:52 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2705219-v2$
                            2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB981997$
                            2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB979482$
                            2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB979309$
                            2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB978706$
                            2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB978542$
                            2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB973815$
                            2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB960803$
                            2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2862330$
                            2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2813345$
                            2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2727528$
                            2017-01-15 16:51 - 2017-01-15 16:51 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2723135-v2$
                            2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB982665$
                            2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB923561$
                            2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2676562$
                            2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2661637$
                            2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2620712$
                            2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2566454$
                            2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2509553$
                            2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2478960$
                            2017-01-15 16:50 - 2017-01-15 16:50 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2393802$
                            2017-01-15 16:49 - 2017-01-15 16:49 - 00000000 __HDC C:\WINDOWS$NtUninstallKB975467$
                            2017-01-15 16:49 - 2017-01-15 16:49 - 00000000 __HDC C:\WINDOWS$NtUninstallKB968389$
                            2017-01-15 16:49 - 2017-01-15 16:49 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2914368$
                            2017-01-15 16:49 - 2017-01-15 16:49 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2584146$
                            2017-01-15 16:49 - 2017-01-15 16:49 - 00000000 __HDC C:\WINDOWS$NtUninstallKB2423089$
                            2017-01-15 15:52 - 2014-02-25 20:59 - 00013312 ____N (Microsoft Corporation) C:\WINDOWS\system32\xp_eos.exe
                            2017-01-15 15:52 - 2014-02-25 20:59 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xp_eos.exe
                            2017-01-15 15:52 - 2013-07-02 20:59 - 00014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys
                            2017-01-15 15:52 - 2008-06-13 06:05 - 00272128 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
                            2017-01-15 15:52 - 2008-06-13 06:05 - 00272128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bthport.sys
                            2017-01-15 15:51 - 2011-07-15 08:29 - 00456320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mrxsmb.sys
                            2017-01-15 15:46 - 2013-02-11 19:32 - 00012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023x.sys
                            2017-01-15 15:43 - 2013-11-05 20:03 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsp4res.dll
                            2017-01-15 15:43 - 2013-07-03 22:03 - 02149888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
                            2017-01-15 15:43 - 2013-07-03 21:59 - 02193536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntoskrnl.exe
                            2017-01-15 15:43 - 2013-07-03 21:08 - 02070144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
                            2017-01-15 15:43 - 2013-07-03 21:08 - 02028544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrpamp.exe
                            2017-01-15 15:43 - 2012-01-11 14:06 - 00003072 ____N C:\WINDOWS\system32\iacenc.dll
                            2017-01-15 15:43 - 2012-01-11 14:06 - 00003072 ____C C:\WINDOWS\system32\dllcache\iacenc.dll
                            2017-01-15 14:54 - 2017-02-13 19:42 - 00000000 ____D C:\Documents and Settings\anon\Application Data\uTorrent
                            2017-01-15 14:54 - 2017-01-15 14:54 - 00002635 _____ C:\Documents and Settings\anon\Start Menu\µTorrent.lnk
                            2017-01-15 14:24 - 2013-08-08 19:55 - 00144128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys
                            2017-01-15 14:24 - 2013-08-08 19:55 - 00032384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys
                            2017-01-15 14:24 - 2013-08-08 19:55 - 00005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys
                            2017-01-15 14:24 - 2009-03-18 06:02 - 00030336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys
                            2017-01-15 14:22 - 2017-01-15 19:51 - 00000000 ___HD C:\WINDOWS$hf_mig$
                            2017-01-15 14:22 - 2017-01-15 14:22 - 00000000 __HDC C:\WINDOWS$NtUninstallKB898461$
                            2017-01-15 14:22 - 2017-01-15 14:22 - 00000000 ____D C:\WINDOWS\system32\PreInstall
                            2017-01-15 14:22 - 2017-01-15 14:22 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
                            2017-01-15 14:22 - 2009-05-12 15:12 - 00026144 _____ (Microsoft Corporation) C:\WINDOWS\system32\spupdsvc.exe
                            2017-01-15 14:15 - 2017-01-15 14:15 - 00000000 _____ C:\WINDOWS\ativpsrm.bin
                            2017-01-15 14:08 - 2017-01-15 14:08 - 00023192 _____ (VIA Technologies, Inc.) C:\WINDOWS\system32\Drivers\xfilt.sys
                            2017-01-15 14:08 - 2017-01-15 14:08 - 00013976 _____ (VIA Technologies, Inc.) C:\WINDOWS\system32\Drivers\videX32.sys
                            2017-01-15 13:45 - 2017-01-15 13:45 - 11304960 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\atioglxx.dll
                            2017-01-15 13:45 - 2017-01-15 13:45 - 03107788 _____ C:\WINDOWS\system32\ativvaxx.dat
                            2017-01-15 13:45 - 2017-01-15 13:45 - 03107788 _____ C:\WINDOWS\system32\ativva5x.dat
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00887724 _____ C:\WINDOWS\system32\ativva6x.dat
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00598016 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00425984 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIDEMGX.dll
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00401408 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\atikvmag.dll
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00307200 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\atiiiexx.dll
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00286720 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\atiok3x2.dll
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00188416 _____ (ATI Technologies, Inc.) C:\WINDOWS\system32\atipdlxx.dll
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00180720 _____ C:\WINDOWS\system32\atiicdxx.dat
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00147456 _____ (ATI Technologies, Inc.) C:\WINDOWS\system32\Oemdspif.dll
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00143360 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.dll
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00118784 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atibrtmon.exe
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00086016 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00069112 _____ C:\WINDOWS\system32\ativvaxx.cap
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00053248 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00053248 _____ ( ATI Technologies Inc.) C:\WINDOWS\system32\ATIDDC.DLL
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00048640 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom32.dll
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00043520 _____ (ATI Technologies, Inc.) C:\WINDOWS\system32\ati2edxx.dll
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00026112 _____ (ATI Technologies, Inc.) C:\WINDOWS\system32\Ati2mdxx.exe
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00024064 _____ (ATI Technologies, Inc.) C:\WINDOWS\system32\ativcoxx.dll
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00017408 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\atitvo32.dll
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00015079 _____ C:\WINDOWS\atiogl.xml
                            2017-01-15 13:45 - 2017-01-15 13:45 - 00007167 _____ C:\WINDOWS\system32\atifglpf.xml
                            2017-01-15 13:44 - 2008-04-14 00:47 - 00083072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wdmaud.sys
                            2017-01-15 13:44 - 2008-04-14 00:47 - 00083072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wdmaud.sys
                            2017-01-15 13:44 - 2008-04-14 00:45 - 00060800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sysaudio.sys
                            2017-01-15 13:44 - 2008-04-14 00:45 - 00060800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sysaudio.sys
                            2017-01-15 13:44 - 2008-04-14 00:15 - 00172416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kmixer.sys
                            2017-01-15 13:44 - 2008-04-14 00:15 - 00172416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kmixer.sys
                            2017-01-15 13:44 - 2008-04-14 00:15 - 00056576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\swmidi.sys
                            2017-01-15 13:44 - 2008-04-14 00:15 - 00056576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\swmidi.sys
                            2017-01-15 13:44 - 2008-04-14 00:15 - 00052864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dmusic.sys
                            2017-01-15 13:44 - 2008-04-14 00:15 - 00052864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\DMusic.sys
                            2017-01-15 13:44 - 2008-04-14 00:15 - 00006272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\splitter.sys
                            2017-01-15 13:44 - 2008-04-14 00:15 - 00006272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\splitter.sys
                            2017-01-15 13:44 - 2008-04-14 00:15 - 00002944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\drmkaud.sys
                            2017-01-15 13:44 - 2008-04-14 00:15 - 00002944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmkaud.sys
                            2017-01-15 13:44 - 2008-04-14 00:09 - 00007552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mskssrv.sys
                            2017-01-15 13:44 - 2008-04-14 00:09 - 00007552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MSKSSRV.sys
                            2017-01-15 13:44 - 2008-04-14 00:09 - 00005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mspclock.sys
                            2017-01-15 13:44 - 2008-04-14 00:09 - 00005376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MSPCLOCK.sys
                            2017-01-15 13:44 - 2008-04-14 00:09 - 00004992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mspqm.sys
                            2017-01-15 13:44 - 2008-04-14 00:09 - 00004992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MSPQM.sys
                            2017-01-15 13:44 - 2008-04-13 22:09 - 00142592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aec.sys
                            2017-01-15 13:44 - 2008-04-13 22:09 - 00142592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\aec.sys
                            2017-01-15 13:42 - 2008-04-14 05:42 - 00129536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ksproxy.ax
                            2017-01-15 13:42 - 2008-04-14 05:42 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
                            2017-01-15 13:42 - 2008-04-14 05:41 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ksuser.dll
                            2017-01-15 13:42 - 2008-04-14 05:41 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksuser.dll
                            2017-01-15 13:42 - 2008-04-14 00:49 - 00146048 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\portcls.sys
                            2017-01-15 13:42 - 2008-04-14 00:49 - 00146048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
                            2017-01-15 13:42 - 2008-04-14 00:15 - 00060160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\drmk.sys
                            2017-01-15 13:42 - 2008-04-14 00:15 - 00060160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmk.sys
                            2017-01-15 13:40 - 2017-01-15 13:39 - 18804736 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\ALSNDMGR.CPL
                            2017-01-15 13:40 - 2017-01-15 13:39 - 10528768 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTLCPL.EXE
                            2017-01-15 13:40 - 2017-01-15 13:39 - 04122368 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\ALCXWDM.SYS
                            2017-01-15 13:40 - 2017-01-15 13:39 - 00577536 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SOUNDMAN.EXE
                            2017-01-15 13:40 - 2017-01-15 13:39 - 00217088 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\Alcrmv.exe
                            2017-01-15 13:40 - 2017-01-15 13:39 - 00147456 _____ () C:\WINDOWS\system32\RTLCPAPI.dll
                            2017-01-15 13:40 - 2017-01-15 13:39 - 00141016 _____ C:\WINDOWS\system32\ALSNDMGR.WAV
                            2017-01-15 13:38 - 2017-01-15 19:35 - 00000000 ____D C:\WINDOWS\system32\ReinstallBackups
                            2017-01-15 13:34 - 2017-01-15 13:34 - 00000000 ____D C:\WINDOWS\IObit
                            2017-01-15 13:33 - 2017-01-15 13:33 - 00023840 _____ (REALiX™) C:\WINDOWS\system32\Drivers\HWiNFO32.SYS
                            2017-01-15 13:28 - 2017-02-13 19:32 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\ProductData
                            2017-01-15 13:28 - 2017-01-31 13:57 - 00000000 ____D C:\Program Files\Common Files\IObit
                            2017-01-15 13:28 - 2017-01-15 13:28 - 00000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
                            2017-01-15 13:28 - 2017-01-15 13:28 - 00000000 ____D C:\Documents and Settings\anon\AppData\LocalLow\IObit
                            2017-01-15 13:28 - 2017-01-15 13:28 - 00000000 ____D C:\Documents and Settings\All Users\Application Data{74E9F814-C737-42CC-B721-DBBC4059367A}
                            2017-01-15 13:27 - 2017-01-31 13:56 - 00000000 ____D C:\Documents and Settings\anon\Application Data\IObit
                            2017-01-15 13:27 - 2017-01-23 23:01 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\IObit
                            2017-01-15 13:13 - 2017-01-15 23:11 - 00000000 ____D C:\Documents and Settings\anon\Local Settings\Application Data\IIIQF
                            2017-01-15 13:10 - 2017-01-15 13:10 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\REGSERVO
                            2017-01-15 13:05 - 2017-01-15 20:10 - 00012328 _____ C:\Documents and Settings\anon\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
                            2017-01-15 13:05 - 2017-01-15 13:05 - 00000000 __SHD C:\Documents and Settings\anon\UserData
                            2017-01-15 13:03 - 2017-01-15 13:03 - 00000000 ____D C:\Program Files\WinRAR
                            2017-01-15 13:03 - 2017-01-15 13:03 - 00000000 ____D C:\Documents and Settings\anon\Start Menu\Programs\WinRAR
                            2017-01-15 13:03 - 2017-01-15 13:03 - 00000000 ____D C:\Documents and Settings\anon\Application Data\WinRAR
                            2017-01-15 13:03 - 2017-01-15 13:03 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\WinRAR
                            2017-01-15 13:03 - 2009-03-10 22:18 - 00934792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wgatray.exe.old
                            2017-01-15 13:03 - 2009-03-10 22:18 - 00239496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wgalogon.dll.old
                            2017-01-15 13:01 - 2017-02-13 21:42 - 00000000 ____D C:\Documents and Settings\anon\Local Settings\Temp
                            2017-01-15 13:01 - 2017-02-13 20:46 - 00000178 ___SH C:\Documents and Settings\anon\ntuser.ini
                            2017-01-15 13:01 - 2017-02-13 16:00 - 00000000 ____D C:\Documents and Settings\anon
                            2017-01-15 13:01 - 2017-01-30 21:49 - 00000000 ___RD C:\Documents and Settings\anon\My Documents
                            2017-01-15 13:01 - 2017-01-15 19:32 - 00000788 _____ C:\Documents and Settings\anon\Start Menu\Programs\Windows Media Player.lnk
                            2017-01-15 13:01 - 2017-01-15 17:12 - 00000803 _____ C:\Documents and Settings\anon\Start Menu\Programs\Internet Explorer.lnk
                            2017-01-15 13:01 - 2017-01-15 17:12 - 00000000 ___RD C:\Documents and Settings\anon\My Documents\My Pictures
                            2017-01-15 13:01 - 2017-01-15 17:12 - 00000000 ___RD C:\Documents and Settings\anon\My Documents\My Music
                            2017-01-15 13:01 - 2017-01-15 13:01 - 00000738 _____ C:\Documents and Settings\anon\Start Menu\Programs\Outlook Express.lnk
                            2017-01-15 13:01 - 2017-01-15 12:55 - 00001599 _____ C:\Documents and Settings\anon\Start Menu\Programs\Remote Assistance.lnk
                            2017-01-15 12:59 - 2017-02-13 20:48 - 00006032 _____ C:\WINDOWS\SchedLgU.Txt
                            2017-01-15 12:59 - 2017-02-13 20:48 - 00000178 ___SH C:\Documents and Settings\LocalService\ntuser.ini
                            2017-01-15 12:59 - 2017-02-13 20:48 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
                            2017-01-15 12:59 - 2017-02-13 17:23 - 00000000 __SHD C:\Documents and Settings\NetworkService
                            2017-01-15 12:59 - 2017-02-13 17:23 - 00000000 __SHD C:\Documents and Settings\LocalService
                            2017-01-15 12:59 - 2017-01-15 12:59 - 00008192 _____ C:\WINDOWS\REGLOCS.OLD
                            2017-01-15 12:59 - 2017-01-15 12:59 - 00000020 ___SH C:\Documents and Settings\NetworkService\ntuser.ini
                            2017-01-15 12:59 - 2017-01-15 12:59 - 00000000 ____D C:\Documents and Settings\NetworkService\Local Settings\Temp
                            2017-01-15 12:59 - 2017-01-15 12:59 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\Temp
                            2017-01-15 12:58 - 2008-04-13 22:42 - 00364032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3svc.dll
                            2017-01-15 12:58 - 2008-04-13 22:42 - 00103424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\uihelper.dll
                            2017-01-15 12:58 - 2008-04-13 22:42 - 00076800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wam51.dll
                            2017-01-15 12:58 - 2008-04-13 22:42 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamreg51.dll
                            2017-01-15 12:58 - 2008-04-13 22:42 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tools.dll
                            2017-01-15 12:58 - 2008-04-13 22:41 - 00571392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tintlgnt.ime
                            2017-01-15 12:58 - 2008-04-13 22:41 - 00426041 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\voicepad.dll
                            2017-01-15 12:58 - 2008-04-13 22:41 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winzm.ime
                            2017-01-15 12:58 - 2008-04-13 22:41 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winsp.ime
                            2017-01-15 12:58 - 2008-04-13 22:41 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winpy.ime
                            2017-01-15 12:58 - 2008-04-13 22:41 - 00086073 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\voicesub.dll
                            2017-01-15 12:58 - 2008-04-13 22:41 - 00079360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winar30.ime
                            2017-01-15 12:58 - 2008-04-13 22:41 - 00076288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\uniime.dll
                            2017-01-15 12:58 - 2008-04-13 22:41 - 00072704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wingb.ime
                            2017-01-15 12:58 - 2008-04-13 22:41 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winime.ime
                            2017-01-15 12:58 - 2008-04-13 22:41 - 00065024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\unicdime.ime
                            2017-01-15 12:58 - 2008-04-13 22:41 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tmigrate.dll
                            2017-01-15 12:58 - 2008-04-13 15:13 - 00455168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tintsetp.exe
                            2017-01-15 12:58 - 2008-04-13 15:13 - 00044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tintlphr.exe
                            2017-01-15 12:58 - 2001-08-23 07:00 - 00185344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\thawbrkr.dll
                            2017-01-15 12:58 - 2001-08-23 07:00 - 00073728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3ext.dll
                            2017-01-15 12:58 - 2001-08-23 07:00 - 00048256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w32.dll
                            2017-01-15 12:58 - 2001-08-23 07:00 - 00041600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.dll
                            2017-01-15 12:58 - 2001-08-23 07:00 - 00031232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.sys
                            2017-01-15 12:58 - 2001-08-23 07:00 - 00028288 ____C C:\WINDOWS\system32\dllcache\xjis.nls
                            2017-01-15 12:58 - 2001-08-23 07:00 - 00021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdipx.sys
                            2017-01-15 12:58 - 2001-08-23 07:00 - 00019464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdspx.sys
                            2017-01-15 12:58 - 2001-08-23 07:00 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsprof.exe
                            2017-01-15 12:58 - 2001-08-23 07:00 - 00013192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdasync.sys
                            2017-01-15 12:58 - 2001-08-23 07:00 - 00009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamps51.dll
                            2017-01-15 12:58 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3svapi.dll
                            2017-01-15 12:58 - 2001-08-23 07:00 - 00004608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3ctrs51.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00456192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smtpsvc.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00358400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpincl.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00259072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpcl.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00236544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smi2smir.exe
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00221696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\seo.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00188416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpsmir.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00119808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtstocom.exe
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00046592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\svcext51.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00046592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sspifilt.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ssinc51.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00044544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nsepm.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msiregmv.exe
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00039936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpthrd.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmp.exe
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00029184 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rw330ext.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00027648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rw001ext.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetin51.exe
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00010752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smtpapi.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rwnh.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmptrap.exe
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pwsdata.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\migregdb.exe
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpmib.dll
                            2017-01-15 12:57 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rpcref.dll
                            2017-01-15 12:57 - 2008-04-13 22:41 - 00482304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pintlgnt.ime
                            2017-01-15 12:57 - 2008-04-13 22:41 - 00257024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\infocomm.dll
                            2017-01-15 12:57 - 2008-04-13 22:41 - 00085504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\metada51.dll
                            2017-01-15 12:57 - 2008-04-13 22:41 - 00079360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phon.ime
                            2017-01-15 12:57 - 2008-04-13 22:41 - 00077824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\quick.ime
                            2017-01-15 12:57 - 2008-04-13 22:41 - 00037888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\md5filt.dll
                            2017-01-15 12:57 - 2008-04-13 22:41 - 00035328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iprip.dll
                            2017-01-15 12:57 - 2008-04-13 22:41 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lmmib2.dll
                            2017-01-15 12:57 - 2008-04-13 22:41 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iscomlog.dll
                            2017-01-15 12:57 - 2008-04-13 22:41 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\romanime.ime
                            2017-01-15 12:57 - 2008-04-13 22:41 - 00022528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lpdsvc.dll
                            2017-01-15 12:57 - 2008-04-13 22:41 - 00018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lprmon.dll
                            2017-01-15 12:57 - 2008-04-13 22:41 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lonsint.dll
                            2017-01-15 12:57 - 2008-04-13 22:40 - 00175104 ____C C:\WINDOWS\system32\dllcache\pintlcsa.dll
                            2017-01-15 12:57 - 2008-04-13 22:40 - 00067584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmigrate.dll
                            2017-01-15 12:57 - 2008-04-13 22:40 - 00053760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pintlcsd.dll
                            2017-01-15 12:57 - 2008-04-13 22:40 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs404.dll
                            2017-01-15 12:57 - 2008-04-13 22:40 - 00015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs804.dll
                            2017-01-15 12:57 - 2008-04-13 22:39 - 00315455 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imskf.dll
                            2017-01-15 12:57 - 2008-04-13 22:39 - 00274489 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjputyc.dll
                            2017-01-15 12:57 - 2008-04-13 22:39 - 00102456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imlang.dll
                            2017-01-15 12:57 - 2008-04-13 22:39 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdibm02.dll
                            2017-01-15 12:57 - 2008-04-13 22:39 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlk41a.dll
                            2017-01-15 12:57 - 2008-04-13 22:39 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlk41j.dll
                            2017-01-15 12:57 - 2008-04-13 22:39 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdax2.dll
                            2017-01-15 12:57 - 2008-04-13 22:39 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd106n.dll
                            2017-01-15 12:57 - 2008-04-13 22:39 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101.dll
                            2017-01-15 12:57 - 2008-04-13 17:11 - 00020736 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ramdisk.sys
                            2017-01-15 12:57 - 2008-04-13 15:14 - 00262200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjputy.exe
                            2017-01-15 12:57 - 2008-04-13 15:13 - 00070144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pintlphr.exe
                            2017-01-15 12:57 - 2008-04-13 15:13 - 00059392 ____C C:\WINDOWS\system32\dllcache\imscinst.exe
                            2017-01-15 12:57 - 2001-08-23 07:00 - 01875968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.lex
                            2017-01-15 12:57 - 2001-08-23 07:00 - 01158818 ____C C:\WINDOWS\system32\dllcache\korwbrkr.lex
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00471102 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imskdic.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00229439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\multibox.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00143422 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\softkey.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00131584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxviceo.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00101376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srusbusd.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00098304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00092416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.sys
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00092032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00083748 ____C C:\WINDOWS\system32\dllcache\prcp.nls
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00083748 ____C C:\WINDOWS\system32\dllcache\prc.nls
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia330.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia001.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00070656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\korwbrkr.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00059904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imkrinst.exe
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nextlink.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00047066 ____C C:\WINDOWS\system32\dllcache\ksc.nls
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00045109 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpuex.exe
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm9aw.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00036927 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs411.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb6w.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sma3w.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pagecnt.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm87w.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm81w.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8cw.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm93w.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm92w.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mdsync.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm90w.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8dw.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8aw.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm89w.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm59w.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\logscrpt.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00020992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\permchk.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\simptcp.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jupiw.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\status.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\quser.exe
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsm.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\register.exe
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs412.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxmcro.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpstup.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\query.exe
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecat.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iwrps.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\infoctrs.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecnt.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnec95.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isapips.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxgl.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth3.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth2.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinpun.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101a.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smimsgif.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsy.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdvntc.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdusa.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdurdu.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth1.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth0.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr2.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr1.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintel.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintam.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinmar.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinkan.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinhin.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinguj.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdindev.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdheb.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdfa.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv2.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv1.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda3.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda2.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda1.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdgeo.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarmw.dll
                            2017-01-15 12:57 - 2001-08-23 07:00 - 00005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarme.dll
                            2017-01-15 12:57 - 2001-08-17 22:36 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_mailmsg.dll
                            2017-01-15 12:57 - 2001-08-17 22:36 - 00057856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_scripto.dll
                            2017-01-15 12:57 - 2001-08-17 22:36 - 00038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_ntfsdrv.dll
                            2017-01-15 12:57 - 2001-08-17 22:36 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_seos.dll
                            2017-01-15 12:57 - 2001-08-17 22:36 - 00023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_regtrace.exe
                            2017-01-15 12:57 - 2001-08-17 22:36 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_smtpctrs.dll
                            2017-01-15 12:57 - 2001-08-17 22:36 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_snprfdll.dll
                            2017-01-15 12:56 - 2008-04-13 22:42 - 00267776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxssvc.exe
                            2017-01-15 12:56 - 2008-04-13 22:42 - 00229376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscover.exe
                            2017-01-15 12:56 - 2008-04-13 22:42 - 00142848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsclnt.exe
                            2017-01-15 12:56 - 2008-04-13 22:42 - 00092160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\evntwin.exe
                            2017-01-15 12:56 - 2008-04-13 22:42 - 00042496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\davcdata.exe
                            2017-01-15 12:56 - 2008-04-13 22:42 - 00024064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\evntcmd.exe
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00562176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsst.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00451584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsapi.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00400384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsxp32.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00397312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxstiff.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00369664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asp51.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00331264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aqueue.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00285184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscomex.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00268288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\httpext.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00246272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxst30.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00218112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_g18030.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00192512 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxswzrd.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00154112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsui.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00145408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iische51.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00125952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpsv251.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00108544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\appconf.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00101888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\evntagnt.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00079872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iislog51.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00078848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dayi.ime
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00078336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chajei.ime
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00072192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscom.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\httpod51.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsevent.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00039936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hostmib.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00032256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\gzip.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00029696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admexs.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsdrv.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisadmin.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00024064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\compfilt.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsmon.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsext32.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00021504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cintlgnt.ime
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\exstrace.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsperf.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\httpmb51.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisfecnv.dll
                            2017-01-15 12:56 - 2008-04-13 22:41 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpmib.dll
                            2017-01-15 12:56 - 2008-04-13 22:39 - 13463552 ____C C:\WINDOWS\system32\dllcache\hwxjpn.dll
                            2017-01-15 12:56 - 2008-04-13 22:39 - 00811064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjp81k.dll
                            2017-01-15 12:56 - 2008-04-13 22:39 - 00716856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpcus.dll
                            2017-01-15 12:56 - 2008-04-13 22:39 - 00368696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpcic.dll
                            2017-01-15 12:56 - 2008-04-13 22:39 - 00340023 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjp81.ime
                            2017-01-15 12:56 - 2008-04-13 22:39 - 00198656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cintime.dll
                            2017-01-15 12:56 - 2008-04-13 22:39 - 00173568 ____C C:\WINDOWS\system32\dllcache\chtskf.dll
                            2017-01-15 12:56 - 2008-04-13 22:39 - 00106496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrcic.dll
                            2017-01-15 12:56 - 2008-04-13 22:39 - 00097792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtmbx.dll
                            2017-01-15 12:56 - 2008-04-13 22:39 - 00094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekr61.ime
                            2017-01-15 12:56 - 2008-04-13 22:39 - 00086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrmbx.dll
                            2017-01-15 12:56 - 2008-04-13 22:39 - 00081976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdct.dll
                            2017-01-15 12:56 - 2008-04-13 22:39 - 00056320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtskdic.dll
                            2017-01-15 12:56 - 2008-04-13 22:39 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\f3ahvoas.dll
                            2017-01-15 12:56 - 2008-04-13 22:39 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsres.dll
                            2017-01-15 12:56 - 2008-04-13 15:14 - 00233527 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjprw.exe
                            2017-01-15 12:56 - 2008-04-13 15:13 - 00480256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cintsetp.exe
                            2017-01-15 12:56 - 2008-04-13 15:13 - 00307257 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdct.exe
                            2017-01-15 12:56 - 2008-04-13 15:13 - 00208952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpmig.exe
                            2017-01-15 12:56 - 2008-04-13 15:13 - 00196665 ____C C:\WINDOWS\system32\dllcache\imjpinst.exe
                            2017-01-15 12:56 - 2008-04-13 15:13 - 00155705 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdsvr.exe
                            2017-01-15 12:56 - 2008-04-13 15:13 - 00057399 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cplexe.exe
                            2017-01-15 12:56 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0804.dll
                            2017-01-15 12:56 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0412.dll
                            2017-01-15 12:56 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0411.dll
                            2017-01-15 12:56 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt040d.dll
                            2017-01-15 12:56 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0404.dll
                            2017-01-15 12:56 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0401.dll
                            2017-01-15 12:56 - 2003-03-24 16:52 - 00618605 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4autl.dll
                            2017-01-15 12:56 - 2003-03-24 16:52 - 00094208 ____C C:\WINDOWS\system32\dllcache\fpencode.dll
                            2017-01-15 12:56 - 2003-03-24 16:52 - 00032827 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcptest.exe
                            2017-01-15 12:56 - 2003-03-24 16:52 - 00024632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpadmcgi.exe
                            2017-01-15 12:56 - 2003-03-24 16:52 - 00020541 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpadmdll.dll
                            2017-01-15 12:56 - 2003-03-24 16:52 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcptsat.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 10129408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxkor.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 10096640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxcht.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 01677824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chsbrkr.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00838144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtbrkr.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00514587 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\edb500.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00311359 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsv.exe
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00195618 ____C C:\WINDOWS\system32\dllcache\c_10002.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00189986 ____C C:\WINDOWS\system32\dllcache\c_1361.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00187938 ____C C:\WINDOWS\system32\dllcache\c_20005.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00186402 ____C C:\WINDOWS\system32\dllcache\c_20001.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00185378 ____C C:\WINDOWS\system32\dllcache\c_20003.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00180770 ____C C:\WINDOWS\system32\dllcache\c_20932.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00180258 ____C C:\WINDOWS\system32\dllcache\c_20004.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00180258 ____C C:\WINDOWS\system32\dllcache\c_20000.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00177698 ____C C:\WINDOWS\system32\dllcache\c_20949.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00177698 ____C C:\WINDOWS\system32\dllcache\c_10003.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00173602 ____C C:\WINDOWS\system32\dllcache\c_20936.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00173602 ____C C:\WINDOWS\system32\dllcache\c_20002.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00173602 ____C C:\WINDOWS\system32\dllcache\c_10008.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00162850 ____C C:\WINDOWS\system32\dllcache\c_10001.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00134339 ____C C:\WINDOWS\system32\dllcache\imekr.lex
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00132608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsclntr.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00111104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscfgwz.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00108827 ____C C:\WINDOWS\system32\dllcache\hanja.lex
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00102463 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsm.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00082172 ____C C:\WINDOWS\system32\dllcache\bopomofo.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066728 ____C C:\WINDOWS\system32\dllcache\big5.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_864.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_862.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_858.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_720.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_870.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_708.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28596.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_21027.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_21025.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20924.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20880.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20871.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20838.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20833.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20424.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20423.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20420.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20297.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20290.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20285.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20284.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20280.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20278.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20277.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20273.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20269.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20108.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20107.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20106.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20105.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1149.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1148.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1147.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1146.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1145.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1144.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1143.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1142.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1141.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1140.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1047.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10021.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10005.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10004.nls
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00060928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisclex4.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00057856 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuimgd.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00057398 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdadm.exe
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00056320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\convlog.exe
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00054528 ____C (Philips Semiconductors GmbH) C:\WINDOWS\system32\dllcache\cap7146.sys
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00049664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adrot.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\browscap.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00045056 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esunid.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrmig.exe
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hanjadic.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\controt.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00031744 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esucmd.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsroute.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asptxn.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00025856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\et4000.sys
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\counters.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iiscrmap.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cprofile.exe
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgport.exe
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\flattemp.exe
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgusr.exe
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chglogon.exe
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxssend.exe
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00010752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_iscii.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aspperf.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\change.exe
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\authfilt.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpctrs2.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamregps.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iissync.exe
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_is2022.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftlx041e.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admxprox.dll
                            2017-01-15 12:56 - 2001-08-23 07:00 - 00003584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iismui.dll
                            2017-01-15 12:56 - 2001-08-17 22:36 - 00045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_aqadmin.dll
                            2017-01-15 12:56 - 2001-08-17 22:36 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_fcachdll.dll
                            2017-01-15 12:56 - 2001-08-17 22:36 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_adsiisex.dll
                            2017-01-15 12:55 - 2017-01-15 19:32 - 00023392 _____ C:\WINDOWS\system32\nscompat.tlb
                            2017-01-15 12:55 - 2017-01-15 19:32 - 00016832 _____ C:\WINDOWS\system32\amcompat.tlb
                            2017-01-15 12:55 - 2017-01-15 13:05 - 00001507 _____ C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk
                            2017-01-15 12:55 - 2017-01-15 12:55 - 00316640 _____ C:\WINDOWS\WMSysPr9.prx
                            2017-01-15 12:55 - 2017-01-15 12:55 - 00002577 _____ C:\WINDOWS\system32\CONFIG.NT
                            2017-01-15 12:55 - 2017-01-15 12:55 - 00001607 _____ C:\Documents and Settings\All Users\Start Menu\Set Program Access and Defaults.lnk
                            2017-01-15 12:55 - 2017-01-15 12:55 - 00001599 _____ C:\Documents and Settings\Default User\Start Menu\Programs\Remote Assistance.lnk
                            2017-01-15 12:55 - 2017-01-15 12:55 - 00000792 _____ C:\Documents and Settings\Default User\Start Menu\Programs\Windows Media Player.lnk
                            2017-01-15 12:55 - 2017-01-15 12:55 - 00000398 _____ C:\Documents and Settings\All Users\Start Menu\Windows Catalog.lnk
                            2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 __RSH C:\MSDOS.SYS
                            2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 __RSH C:\IO.SYS
                            2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 ____D C:\WINDOWS\system32\xircom
                            2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 ____D C:\Program Files\xerox
                            2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 ____D C:\Program Files\microsoft frontpage
                            2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 _____ C:\WINDOWS\control.ini
                            2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 _____ C:\CONFIG.SYS
                            2017-01-15 12:55 - 2017-01-15 12:55 - 00000000 _____ C:\AUTOEXEC.BAT
                            2017-01-15 12:55 - 2008-04-13 22:42 - 02134528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smtpsnap.dll
                            2017-01-15 12:55 - 2008-04-13 22:42 - 00189440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smtpadm.dll
                            2017-01-15 12:55 - 2008-04-13 22:42 - 00030720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisrstas.exe
                            2017-01-15 12:55 - 2008-04-13 22:42 - 00008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\staxmem.dll
                            2017-01-15 12:55 - 2008-04-13 22:41 - 00829440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetmgr.dll
                            2017-01-15 12:55 - 2008-04-13 22:41 - 00290816 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adsiis51.dll
                            2017-01-15 12:55 - 2008-04-13 22:41 - 00133632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisrtl.dll
                            2017-01-15 12:55 - 2008-04-13 22:41 - 00068608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isatq.dll
                            2017-01-15 12:55 - 2008-04-13 22:41 - 00068608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisext51.dll
                            2017-01-15 12:55 - 2008-04-13 22:41 - 00064512 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iismap.dll
                            2017-01-15 12:55 - 2008-04-13 22:41 - 00046592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\coadmin.dll
                            2017-01-15 12:55 - 2008-04-13 22:41 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admwprox.dll
                            2017-01-15 12:55 - 2008-04-13 22:41 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\infoadmn.dll
                            2017-01-15 12:55 - 2008-04-13 22:40 - 00076800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\logui.ocx
                            2017-01-15 12:55 - 2008-04-13 22:39 - 00275968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\certwiz.ocx
                            2017-01-15 12:55 - 2008-04-13 22:39 - 00076288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cnfgprts.ocx
                            2017-01-15 12:55 - 2004-05-13 00:39 - 00876653 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4awel.dll
                            2017-01-15 12:55 - 2004-05-13 00:39 - 00598071 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpmmc.dll
                            2017-01-15 12:55 - 2004-05-13 00:39 - 00184435 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4amsft.dll
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00208896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpmmcsat.dll
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00188494 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpcount.exe
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00188480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cfgwiz.exe
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00147513 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4apws.dll
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00109328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp98swin.exe
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00102509 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4atxt.dll
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00082035 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4anscp.dll
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00049212 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4awebs.dll
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00049210 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4areg.dll
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00041020 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4avnb.dll
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00032826 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4avss.dll
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00020541 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpexedll.dll
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00020540 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\author.dll
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00020540 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admin.dll
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00020538 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpremadm.exe
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00020536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shtml.dll
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00016439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\author.exe
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00016439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admin.exe
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00016437 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shtml.exe
                            2017-01-15 12:55 - 2003-03-24 16:52 - 00014608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp98sadm.exe
                            2017-01-15 12:55 - 2001-08-23 07:00 - 00169984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisui.dll
                            2017-01-15 12:55 - 2001-08-23 07:00 - 00094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\certmap.ocx
                            2017-01-15 12:55 - 2001-08-23 07:00 - 00019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetsloc.dll
                            2017-01-15 12:55 - 2001-08-23 07:00 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisreset.exe
                            2017-01-15 12:55 - 2001-08-23 07:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetmgr.exe
                            2017-01-15 12:55 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpsapi2.dll
                            2017-01-15 12:55 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisrstap.dll
                            2017-01-15 12:54 - 2001-08-23 07:00 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapi32.dll
                            2017-01-15 12:53 - 2017-02-13 17:47 - 00000749 ___RH C:\WINDOWS\WindowsShell.Manifest
                            2017-01-15 12:53 - 2017-02-13 17:47 - 00000749 ___RH C:\WINDOWS\system32\wuaucpl.cpl.manifest
                            2017-01-15 12:53 - 2017-02-13 17:47 - 00000749 ___RH C:\WINDOWS\system32\sapi.cpl.manifest
                            2017-01-15 12:53 - 2017-02-13 17:47 - 00000749 ___RH C:\WINDOWS\system32\nwc.cpl.manifest
                            2017-01-15 12:53 - 2017-02-13 17:47 - 00000749 ___RH C:\WINDOWS\system32\ncpa.cpl.manifest
                            2017-01-15 12:53 - 2017-02-13 17:47 - 00000749 ___RH C:\WINDOWS\system32\cdplayer.exe.manifest
                            2017-01-15 12:53 - 2017-02-13 17:16 - 00000000 __SHD C:\Documents and Settings\All Users\DRM
                            2017-01-15 12:53 - 2017-01-24 00:03 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
                            2017-01-15 12:53 - 2017-01-22 20:05 - 00000000 ____D C:\WINDOWS\system32\DirectX
                            2017-01-15 12:53 - 2017-01-15 12:53 - 00000786 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Windows Movie Maker.lnk
                            2017-01-15 12:53 - 2017-01-15 12:53 - 00000488 ___RH C:\WINDOWS\system32\WindowsLogon.manifest
                            2017-01-15 12:53 - 2017-01-15 12:53 - 00000488 ___RH C:\WINDOWS\system32\logonui.exe.manifest
                            2017-01-15 12:53 - 2017-01-15 12:53 - 00000000 ___RD C:\WINDOWS\Offline Web Pages
                            2017-01-15 12:53 - 2017-01-15 12:53 - 00000000 ___HD C:\Program Files\WindowsUpdate
                            2017-01-15 12:53 - 2001-08-23 07:00 - 04399505 ____C C:\WINDOWS\system32\dllcache\nls302en.lex
                            2017-01-15 12:52 - 2017-01-24 02:44 - 00000000 ____D C:\WINDOWS\system32\Macromed
                            2017-01-15 12:52 - 2017-01-15 16:51 - 00000000 ____D C:\Program Files\Outlook Express
                            2017-01-15 12:52 - 2017-01-15 16:51 - 00000000 ____D C:\Program Files\Movie Maker
                            2017-01-15 12:52 - 2017-01-15 12:53 - 00000000 ____D C:\WINDOWS\srchasst
                            2017-01-15 12:52 - 2017-01-15 12:52 - 00000000 ____D C:\Program Files\NetMeeting
                            2017-01-15 12:52 - 2017-01-15 12:52 - 00000000 ____D C:\Program Files\Common Files\System
                            2017-01-15 12:52 - 2017-01-15 12:52 - 00000000 ____D C:\Program Files\Common Files\Services
                            2017-01-15 12:52 - 2017-01-15 12:52 - 00000000 ____D C:\Program Files\Common Files\MSSoap
                            2017-01-15 12:52 - 2014-02-05 18:26 - 00759296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\vgx.dll
                            2017-01-15 12:52 - 2012-06-02 15:19 - 01933848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
                            2017-01-15 12:52 - 2012-06-02 15:19 - 00577048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
                            2017-01-15 12:52 - 2012-06-02 15:19 - 00329240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltui.dll
                            2017-01-15 12:52 - 2012-06-02 15:19 - 00219160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaucpl.cpl
                            2017-01-15 12:52 - 2012-06-02 15:19 - 00210968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuweb.dll
                            2017-01-15 12:52 - 2012-06-02 15:19 - 00053784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
                            2017-01-15 12:52 - 2012-06-02 15:19 - 00035864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wups.dll
                            2017-01-15 12:52 - 2012-06-02 15:19 - 00035864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
                            2017-01-15 12:52 - 2012-05-28 13:16 - 00536576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado15.dll
                            2017-01-15 12:52 - 2011-10-10 09:22 - 00692736 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetcomm.dll
                            2017-01-15 12:52 - 2011-10-10 09:22 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
                            2017-01-15 12:52 - 2010-11-18 13:12 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isign32.dll
                            2017-01-15 12:52 - 2010-11-18 13:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\isign32.dll
                            2017-01-15 12:52 - 2010-11-09 09:52 - 00200704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadox.dll
                            2017-01-15 12:52 - 2010-11-09 09:52 - 00180224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadomd.dll
                            2017-01-15 12:52 - 2010-11-09 09:52 - 00143360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadco.dll
                            2017-01-15 12:52 - 2010-11-09 09:52 - 00102400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msjro.dll
                            2017-01-15 12:52 - 2010-11-08 07:41 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado27.tlb
                            2017-01-15 12:52 - 2010-11-08 07:41 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado26.tlb
                            2017-01-15 12:52 - 2010-11-08 07:41 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado25.tlb
                            2017-01-15 12:52 - 2010-11-08 07:41 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado21.tlb
                            2017-01-15 12:52 - 2010-11-08 07:41 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado20.tlb
                            2017-01-15 12:52 - 2010-10-11 09:59 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wab.exe
                            2017-01-15 12:52 - 2010-06-18 08:36 - 03558912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\moviemk.exe
                            2017-01-15 12:52 - 2010-06-14 09:31 - 00744448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\helpsvc.exe
                            2017-01-15 12:52 - 2010-01-29 10:01 - 01315328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msoe.dll
                            2017-01-15 12:52 - 2009-07-27 17:27 - 00128512 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dhtmled.ocx
                            2017-01-15 12:52 - 2009-06-21 16:44 - 00153088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\triedit.dll
                            2017-01-15 12:52 - 2009-03-08 14:09 - 00638816 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iexplore.exe
                            2017-01-15 12:52 - 2009-03-08 04:24 - 00068608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hmmapi.dll
                            2017-01-15 12:52 - 2008-05-01 09:33 - 00331776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadce.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 04256768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2res.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 03166208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msgr3en.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 01135616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuaueng.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 01032192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\conf.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00786432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\migrate.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00769024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\helpctr.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00726078 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srchui.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00565248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msobmain.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00510976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wab32.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00502272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2fxa.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00487424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oledb32.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00430592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuapi.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00409088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qmgr.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00402432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2filt.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00380416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rstrui.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00376832 ____C () C:\WINDOWS\system32\dllcache\msinfo.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00364544 ____C (Microsoft Corporation (written by Digital Renaissance Inc.)) C:\WINDOWS\system32\dllcache\npdsplay.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00325632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2fxb.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00315392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdasql.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00274944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstask.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstask.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00274432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mst120.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00252928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msoeacct.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msoeacct.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00239104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srrstr.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00233472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaora.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00229376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmas.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00226816 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\npdrmv2.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00221184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmpns.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00221184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nac.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00217088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sqlxmlx.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00214528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwconn1.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00204800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaps.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00200704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaprst.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00192512 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\schedsvc.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00188416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmwb.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msh261.drv
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00183296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuaueng1.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng1.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00172032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmoldwb.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00171008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srsvc.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\srsvc.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00169984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msconfig.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00167936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2ae.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00165888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuauclt1.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt1.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00162304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuaucpl.cpl
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00155648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadds.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00151552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmft.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00150528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\uploadm.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00122368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msobcomm.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00120320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuweb.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00118784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdarem.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00112640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wucltui.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00111104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuauclt.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00105984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msoert2.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\msoert2.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00104448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oeimport.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00102912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pchshell.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00094208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdatl3.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwconn2.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00085504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wabimp.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmchat.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00077824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmcom.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00077824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaosp.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00073216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\setup50.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00069632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msconf.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msconf.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00067584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srclient.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oledb32r.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rrcm.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadcf.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00060416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oemig50.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00060416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msimn.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00058434 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srchctls.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00057344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mst123.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00057344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadrh15.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00057344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msador15.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadcs.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00051200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oobebaln.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\safrslv.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\safrslv.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\safrcdlg.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\racpldlg.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\safrcdlg.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\racpldlg.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00038400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pchsvc.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdfmap.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00035328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oemiglib.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00032768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wabfind.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00032768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mnmsrvc.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mnmsrvc.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00030720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msobshel.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wabmig.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00029696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\safrdm.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\safrdm.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msoobe.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmmkcert.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmasnt.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\nmmkcert.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msxactps.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwrmind.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fltmc.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltMc.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdatt.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetwiz.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msobweb.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qmgrprxy.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgrprxy.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedw.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hscupd.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msobdl.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstinit.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstinit.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\npwmsdrm.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2ext.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuauserv.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauserv.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2res2.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00004639 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mplayer2.exe
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2eres.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaurl.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdasc.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaer.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaenum.dll
                            2017-01-15 12:52 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdadc.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00385024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\callcont.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00274432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetcfg.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcfg.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00172032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwhelp.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00086528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\directdb.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ils.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ils.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00073728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwdial.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\icwdial.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwphbk.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\icwphbk.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwconn.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00057344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\h323cc.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00049152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwutil.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\confmrsl.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dcap32.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00034560 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mnmdd.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00034560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mnmdd.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\custsat.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00032768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwdl.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00032768 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\isrdbg32.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00032768 _____ (Intel Corporation) C:\WINDOWS\system32\isrdbg32.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fltlib.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltlib.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bitsprx2.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx2.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bitsprx4.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bitsprx3.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx4.dll
                            2017-01-15 12:52 - 2008-04-13 22:41 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx3.dll
                            2017-01-15 12:52 - 2008-04-13 17:06 - 00073472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sr.sys
                            2017-01-15 12:52 - 2008-04-13 17:06 - 00073472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sr.sys
                            2017-01-15 12:52 - 2008-04-13 17:03 - 00129792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fltmgr.sys
                            2017-01-15 12:52 - 2008-04-13 17:03 - 00129792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
                            2017-01-15 12:52 - 2008-04-13 15:56 - 00024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msader15.dll
                            2017-01-15 12:52 - 2008-04-13 15:56 - 00024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msaddsr.dll
                            2017-01-15 12:52 - 2008-04-13 15:56 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdasqlr.dll
                            2017-01-15 12:52 - 2008-04-13 15:56 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaremr.dll
                            2017-01-15 12:52 - 2008-04-13 15:56 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaprsr.dll
                            2017-01-15 12:52 - 2008-04-13 15:55 - 00020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadcer.dll
                            2017-01-15 12:52 - 2008-04-13 15:55 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadcor.dll
                            2017-01-15 12:52 - 2008-04-13 15:55 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadcfr.dll
                            2017-01-15 12:52 - 2008-04-13 15:54 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaorar.dll
                            2017-01-15 12:52 - 2008-04-13 14:53 - 02479616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msoeres.dll
                            2017-01-15 12:52 - 2008-04-13 14:52 - 00048128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetres.dll
                            2017-01-15 12:52 - 2008-04-13 14:52 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetres.dll
                            2017-01-15 12:52 - 2008-04-13 14:51 - 00249856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wab32res.dll
                            2017-01-15 12:52 - 2008-01-19 09:34 - 00554008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dao360.dll
                            2017-01-15 12:52 - 2006-11-01 18:31 - 01669120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\setup_wm.exe
                            2017-01-15 12:52 - 2006-10-18 21:47 - 00243712 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mpvis.dll
                            2017-01-15 12:52 - 2006-10-18 21:47 - 00096256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmpband.dll
                            2017-01-15 12:52 - 2006-10-18 21:46 - 00064000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmplayer.exe
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00235520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mssoap1.dll
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msg723.acm
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00099840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\helphost.exe
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00093184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieinfo5.ocx
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00073728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwtutor.exe
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00064512 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\acctres.dll
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\acctres.dll
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwres.dll
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00048680 ___SH C:\WINDOWS\winnt256.bmp
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00048680 ___SH C:\WINDOWS\winnt.bmp
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00047104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srdiag.exe
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\trialoc.dll
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00039936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msinfo32.exe
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00035328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\notiflag.exe
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wisc10.dll
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mssoapr.dll
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00021504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\brpinfo.dll
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isignup.exe
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icfgnt5.dll
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfgnt5.dll
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wb32.exe
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmevtmsg.dll
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cb32.exe
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\nmevtmsg.dll
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\atrace.dll
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\atrace.dll
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hcappres.dll
                            2017-01-15 12:52 - 2001-08-23 07:00 - 00000984 ____C C:\WINDOWS\system32\dllcache\srframe.mmf
                            2017-01-15 12:51 - 2017-02-13 18:31 - 00000000 ____D C:\Program Files\Online Services
                            2017-01-15 12:51 - 2017-02-13 16:00 - 00000000 ____D C:\WINDOWS\Registration
                            2017-01-15 12:51 - 2017-01-15 12:51 - 00021640 _____ C:\WINDOWS\system32\emptyregdb.dat
                            2017-01-15 12:51 - 2017-01-15 12:51 - 00000037 _____ C:\WINDOWS\vbaddin.ini
                            2017-01-15 12:51 - 2017-01-15 12:51 - 00000036 _____ C:\WINDOWS\vb.ini
                            2017-01-15 12:51 - 2017-01-15 12:51 - 00000000 ___RD C:\Documents and Settings\All Users\Start Menu\Programs\Games
                            2017-01-15 12:51 - 2017-01-15 12:51 - 00000000 ____D C:\Program Files\ComPlus Applications
                            2017-01-15 12:50 - 2017-01-15 17:01 - 00000000 ____D C:\Program Files\Messenger
                            2017-01-15 12:50 - 2017-01-15 12:51 - 00000000 ____D C:\WINDOWS\system32\MsDtc
                            2017-01-15 12:50 - 2017-01-15 12:51 - 00000000 ____D C:\WINDOWS\system32\Com
                            2017-01-15 12:50 - 2017-01-15 12:50 - 00000000 ____D C:\Program Files\Windows NT
                            2017-01-15 12:50 - 2017-01-15 12:50 - 00000000 ____D C:\Program Files\MSN Gaming Zone
                            2017-01-15 12:50 - 2017-01-15 12:50 - 00000000 ____D C:\Program Files\MSN
                            2017-01-15 12:50 - 2013-02-27 02:56 - 02067456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lhmstscx.dll
                            2017-01-15 12:50 - 2013-02-27 02:56 - 02067456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
                            2017-01-15 12:50 - 2012-07-04 09:05 - 00139784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpwd.sys
                            2017-01-15 12:50 - 2012-07-04 09:05 - 00139784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpwd.sys
                            2017-01-15 12:50 - 2011-01-27 06:57 - 00677888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lhmstsc.exe
                            2017-01-15 12:50 - 2011-01-27 06:57 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
                            2017-01-15 12:50 - 2010-07-12 07:55 - 00218112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wordpad.exe
                            2017-01-15 12:50 - 2009-12-16 13:43 - 00343040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mspaint.exe
                            2017-01-15 12:50 - 2009-12-16 13:43 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
                            2017-01-15 12:50 - 2009-02-09 07:10 - 00473600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fastprox.dll
                            2017-01-15 12:50 - 2009-02-09 07:10 - 00453120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiprvsd.dll
                            2017-01-15 12:50 - 2009-02-06 05:10 - 00227840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiprvse.exe
                            2017-01-15 12:50 - 2008-06-12 09:23 - 00956928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdtctm.dll
                            2017-01-15 12:50 - 2008-06-12 09:23 - 00956928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
                            2017-01-15 12:50 - 2008-06-12 09:23 - 00428032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdtcprx.dll
                            2017-01-15 12:50 - 2008-06-12 09:23 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
                            2017-01-15 12:50 - 2008-06-12 09:23 - 00161792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdtcuiu.dll
                            2017-01-15 12:50 - 2008-06-12 09:23 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
                            2017-01-15 12:50 - 2008-06-12 09:23 - 00091648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtxoci.dll
                            2017-01-15 12:50 - 2008-06-12 09:23 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
                            2017-01-15 12:50 - 2008-06-12 09:23 - 00058880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdtclog.dll
                            2017-01-15 12:50 - 2008-06-12 09:23 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtclog.dll
                            2017-01-15 12:50 - 2008-04-14 05:43 - 00040840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\termdd.sys
                            2017-01-15 12:50 - 2008-04-14 00:02 - 00196224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
                            2017-01-15 12:50 - 2008-04-13 22:43 - 00087176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpwsx.dll
                            2017-01-15 12:50 - 2008-04-13 22:43 - 00087176 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpwsx.dll
                            2017-01-15 12:50 - 2008-04-13 22:43 - 00021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdtcp.sys
                            2017-01-15 12:50 - 2008-04-13 22:43 - 00021896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdtcp.sys
                            2017-01-15 12:50 - 2008-04-13 22:43 - 00012040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdpipe.sys
                            2017-01-15 12:50 - 2008-04-13 22:43 - 00012040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdpipe.sys
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00539136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dialer.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00538624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\spider.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\spider.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00531456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemcore.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00358912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmic.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00295424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\termsrv.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00290304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rhttpaa.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\system32\rhttpaa.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00281088 ____C (Cinematronics) C:\WINDOWS\system32\dllcache\pinball.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00273920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemess.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00237056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\provthrd.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00214528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemcomn.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00212992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntevt.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00197120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemupgd.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00196608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiadap.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00196608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemcntl.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00184320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\accwiz.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\accwiz.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00178176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemdisp.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00178176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\repdrvfs.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipcima.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00147968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdchost.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdchost.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00144896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmisvc.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00144896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiprov.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00141312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sessmgr.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\sessmgr.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00140800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmidcprv.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00132096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipdskq.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00131584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\viewprov.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00131584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sndrec32.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sndrec32.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00126464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiapsrv.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00123392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mplay32.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mplay32.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00116224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemtest.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00102912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\clipbrd.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\clipbrd.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00095232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiutils.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00093696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tscfgwmi.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscfgwmi.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00092672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\policman.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00088576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiaprpl.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00086528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\stdprov.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00071680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemcons.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00068608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\access.cpl
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\access.cpl
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00067072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdshost.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdshost.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00062976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpclip.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00062464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipjobj.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00061952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipiprt.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00060928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmicookr.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00060416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\remotepg.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remotepg.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00059392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\stclient.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\stclient.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00056320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\servdeps.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\servdeps.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsgqec.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00047104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ncprov.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemsvc.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00041472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipsess.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00036352 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scrcons.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00034304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtxlegih.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxlegih.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00030720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtxdm.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxdm.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpsnd.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qprocess.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsnd.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\qprocess.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemprox.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mofcomp.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00013824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdsaddin.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsaddin.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00011776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xolehlp.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\xolehlp.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comrepl.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdtc.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dcomcnfg.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comrereg.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtc.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomcnfg.exe
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtxex.dll
                            2017-01-15 12:50 - 2008-04-13 22:42 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxex.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 01358848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cimwin32.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 01267200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comsvcs.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 01267200 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00625664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\catsrvut.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00625664 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00539648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comuid.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\comuid.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00498688 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\clbcatq.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\clbcatq.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00347136 _____ (Hilgraeve, Inc.) C:\WINDOWS\system32\hypertrm.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\esscli.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00226304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\catsrv.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrv.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00195072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comadmin.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00185344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\framedyn.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00185344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cmprops.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmprops.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00167424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comsnap.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsnap.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00136192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aaclient.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\aaclient.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00123904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mofd.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00110592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\clbcatex.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\clbcatex.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00097792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comrepl.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\comrepl.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00085504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\catsrvps.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00060416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\colbact.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\colbact.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00058880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\licwmi.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\licwmi.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cfgbkend.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00028160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comaddin.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comaddin.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\krnlprov.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00017408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mmfutil.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmfutil.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icaapi.dll
                            2017-01-15 12:50 - 2008-04-13 22:41 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\icaapi.dll
                            2017-01-15 12:50 - 2008-04-13 15:40 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiapres.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 02178131 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shvlres.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 01817687 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bckgres.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 01175635 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hrtzres.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 01039955 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cmnresm.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00780885 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chkrres.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00753236 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rvseres.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00605696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\getuname.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00605696 _____ (Microsoft Corporation) C:\WINDOWS\system32\getuname.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00273920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msiprov.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00227840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avtapi.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\avtapi.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00217160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cmnclim.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00138752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sndvol32.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\sndvol32.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00126976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshearts.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshearts.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00120320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dsprov.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00119808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winmine.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmine.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00116224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\updprov.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00114688 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\calc.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00113222 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\zoneclim.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00093702 _____ C:\WINDOWS\system32\subrange.uce
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00082501 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bckg.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00080384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\charmap.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\charmap.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00075264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipicmp.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00073216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avwav.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\avwav.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00066113 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shvl.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00065978 _____ C:\WINDOWS\Soap Bubbles.bmp
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00065954 _____ C:\WINDOWS\Prairie Wind.bmp
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00065832 _____ C:\WINDOWS\Santa Fe Stucco.bmp
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00063488 _____ C:\WINDOWS\system32\wmimgmt.msc
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00061952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tmplprov.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmimsg.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00060458 _____ C:\WINDOWS\system32\ideograf.uce
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00059904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemdisp.tlb
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00059904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\trnsprov.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00057409 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hrtz.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00056832 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sol.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\sol.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\freecell.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\freecell.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fwdprov.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00052224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmitimep.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00048706 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rvse.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmi2xml.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00044544 _____ (Hilgraeve, Inc.) C:\WINDOWS\system32\hticons.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00042577 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bckgzm.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00042575 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chkrzm.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00042574 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rvsezm.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00042573 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shvlzm.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00042573 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hrtzzm.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00041029 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\zcorem.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smtpcons.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00040515 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chkr.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00036937 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\zclientm.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00035328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winchat.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\winchat.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\regini.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\regini.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00032339 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\uniansi.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00031232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemads.tlb
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00029760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\znetm.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00026680 _____ C:\WINDOWS\River Sumida.bmp
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00026582 _____ C:\WINDOWS\Greenstone.bmp
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00024006 _____ C:\WINDOWS\system32\gb2312.uce
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00022984 _____ C:\WINDOWS\system32\bopomofo.uce
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qwinsta.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\qwinsta.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00020992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msg.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msg.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtsadmin.tlb
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00017362 _____ C:\WINDOWS\Rhododendron.bmp
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00017336 _____ C:\WINDOWS\Gone Fishing.bmp
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00017062 _____ C:\WINDOWS\Coffee Bean.bmp
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\unsecapp.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsshutdn.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qappsrv.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsshutdn.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\qappsrv.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00016740 _____ C:\WINDOWS\system32\shiftjis.uce
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00016730 _____ C:\WINDOWS\FeatherTexture.bmp
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winmgmtr.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tskill.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avmeter.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\tskill.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\avmeter.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rwinsta.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cdmodem.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rwinsta.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdmodem.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\logoff.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoff.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsdiscon.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tscon.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shadow.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsdiscon.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscon.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\shadow.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00013894 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\zonelibm.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winmgmt.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00013312 ____C (Hilgraeve, Inc.) C:\WINDOWS\system32\dllcache\htrn_jis.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00013223 _____ C:\WINDOWS\system32\tslabels.ini
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00012876 _____ C:\WINDOWS\system32\korean.uce
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemads.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\reset.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\reset.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00009522 _____ C:\WINDOWS\Zapotec.bmp
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00008484 _____ C:\WINDOWS\system32\kanji_2.uce
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00006948 _____ C:\WINDOWS\system32\kanji_1.uce
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\write.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\write.exe
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00004677 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\zeeverm.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpcfgex.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcfgex.dll
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00003286 _____ C:\WINDOWS\system32\tslabels.h
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00001931 _____ C:\WINDOWS\system32\msdtcprf.ini
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00001272 _____ C:\WINDOWS\Blue Lace 16.bmp
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00001161 _____ C:\WINDOWS\system32\usrlogon.cmd
                            2017-01-15 12:50 - 2001-08-23 07:00 - 00000768 _____ C:\WINDOWS\system32\msdtcprf.h
                            2017-01-15 07:47 - 2017-01-15 07:47 - 00000000 _____ C:\WINDOWS\system32\h323log.txt
                            2017-01-15 07:46 - 2017-01-15 22:53 - 00004444 _____ C:\WINDOWS\system32\pid.PNF
                            2017-01-15 07:46 - 2001-08-17 08:59 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\audstub.sys
                            2017-01-15 07:45 - 2008-04-14 00:41 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\hidserv.dll
                            2017-01-15 07:44 - 2017-01-15 13:45 - 04118592 _____ (ATI Technologies Inc. ) C:\WINDOWS\system32\ati3duag.dll
                            2017-01-15 07:44 - 2017-01-15 13:45 - 03451904 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\ati2mtag.sys
                            2017-01-15 07:44 - 2017-01-15 13:45 - 03451904 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\Drivers\ati2mtag.sys
                            2017-01-15 07:44 - 2017-01-15 13:45 - 02495232 _____ (ATI Technologies Inc. ) C:\WINDOWS\system32\ativvaxx.dll
                            2017-01-15 07:44 - 2017-01-15 13:45 - 00577536 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\ati2cqag.dll
                            2017-01-15 07:44 - 2017-01-15 13:45 - 00318464 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\ati2dvag.dll
                            2017-01-15 07:44 - 2008-04-14 00:41 - 00870784 _____ (ATI Technologies Inc. ) C:\WINDOWS\system32\ati3d1ag.dll
                            2017-01-15 07:44 - 2008-04-13 19:10 - 00057600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\redbook.sys
                            2017-01-15 07:44 - 2001-08-17 08:46 - 00006400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\enum1394.sys
                            2017-01-15 07:43 - 2008-04-14 00:42 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbui.dll
                            2017-01-15 07:43 - 2008-04-13 19:06 - 00044672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UAGP35.SYS
                            2017-01-15 07:43 - 2001-08-17 07:13 - 00027165 _____ (VIA Technologies, Inc. ) C:\WINDOWS\system32\Drivers\fetnd5.sys
                            2017-01-15 07:41 - 2017-02-13 18:31 - 00571032 _____ C:\WINDOWS\system32\PerfStringBackup.INI
                            2017-01-15 07:41 - 2017-01-21 17:11 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
                            2017-01-15 07:41 - 2017-01-15 12:54 - 00004161 _____ C:\WINDOWS\ODBCINST.INI
                            2017-01-15 07:41 - 2017-01-15 07:41 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
                            2017-01-15 07:41 - 2017-01-15 07:41 - 00000000 ____D C:\Program Files\Common Files\ODBC
                            2017-01-15 07:41 - 2017-01-15 07:41 - 00000000 ____D C:\Documents and Settings\Default User\My Documents
                            2017-01-15 07:41 - 2017-01-15 07:41 - 00000000 ____D C:\Documents and Settings\Default User\Local Settings\Temp
                            2017-01-15 07:41 - 2009-01-09 14:19 - 01089593 ____C C:\WINDOWS\system32\dllcache\ntprint.cat
                            2017-01-15 07:41 - 2008-04-14 00:42 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\storprop.dll
                            2017-01-15 07:41 - 2008-04-14 00:40 - 01296669 ____C C:\WINDOWS\system32\dllcache\SP3.CAT
                            2017-01-15 07:41 - 2008-04-14 00:40 - 00112918 ____C C:\WINDOWS\system32\dllcache\tabletpc.cat
                            2017-01-15 07:41 - 2008-04-14 00:34 - 02144487 ____C C:\WINDOWS\system32\dllcache\NT5.CAT
                            2017-01-15 07:41 - 2008-04-14 00:34 - 00522220 ____C C:\WINDOWS\system32\dllcache\NT5INF.CAT
                            2017-01-15 07:41 - 2008-04-14 00:34 - 00144484 ____C C:\WINDOWS\system32\dllcache\netfx.cat
                            2017-01-15 07:41 - 2008-04-14 00:34 - 00034747 ____C C:\WINDOWS\system32\dllcache\mediactr.cat
                            2017-01-15 07:41 - 2008-04-14 00:34 - 00034063 ____C C:\WINDOWS\system32\dllcache\FP4.CAT
                            2017-01-15 07:41 - 2008-04-14 00:34 - 00026991 ____C C:\WINDOWS\system32\dllcache\msn7.cat
                            2017-01-15 07:41 - 2008-04-14 00:34 - 00016535 ____C C:\WINDOWS\system32\dllcache\IMS.CAT
                            2017-01-15 07:41 - 2008-04-14 00:34 - 00014433 ____C C:\WINDOWS\system32\dllcache\msn9.cat
                            2017-01-15 07:41 - 2008-04-14 00:34 - 00012363 ____C C:\WINDOWS\system32\dllcache\MSMSGS.CAT
                            2017-01-15 07:41 - 2008-04-14 00:34 - 00010027 ____C C:\WINDOWS\system32\dllcache\MSTSWEB.CAT
                            2017-01-15 07:41 - 2008-04-13 22:42 - 00741376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sapi.dll
                            2017-01-15 07:41 - 2008-04-13 22:42 - 00155648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sapi.cpl
                            2017-01-15 07:41 - 2008-04-13 22:42 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system\WINSPOOL.DRV
                            2017-01-15 07:41 - 2008-04-13 22:42 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\NOTEPAD.EXE
                            2017-01-15 07:41 - 2008-04-13 22:41 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\batt.dll
                            2017-01-15 07:41 - 2008-04-13 22:41 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\batt.dll
                            2017-01-15 07:41 - 2008-04-13 17:24 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irenum.sys
                            2017-01-15 07:41 - 2008-04-13 17:24 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\irenum.sys
                            2017-01-15 07:41 - 2008-04-13 15:24 - 00068768 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL
                            2017-01-15 07:41 - 2007-06-26 04:26 - 00007334 ____C C:\WINDOWS\system32\dllcache\wmerrenu.cat
                            2017-01-15 07:41 - 2007-04-02 16:56 - 00022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0408.dll
                            2017-01-15 07:41 - 2007-04-02 16:56 - 00019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt040e.dll
                            2017-01-15 07:41 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt041f.dll
                            2017-01-15 07:41 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0419.dll
                            2017-01-15 07:41 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0415.dll
                            2017-01-15 07:41 - 2007-04-02 16:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0405.dll
                            2017-01-15 07:41 - 2006-12-29 16:24 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28603.nls
                            2017-01-15 07:41 - 2006-12-29 16:24 - 00066082 _____ C:\WINDOWS\system32\c_28603.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 01685606 ____C C:\WINDOWS\system32\dllcache\sam.spd
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00797189 ____C C:\WINDOWS\system32\dllcache\NT5IIS.CAT
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00774144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\spttseng.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00643717 ____C C:\WINDOWS\system32\dllcache\ltts1033.lxa
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00605050 ____C C:\WINDOWS\system32\dllcache\r1033tts.lxa
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00399645 ____C C:\WINDOWS\system32\dllcache\MAPIMIG.CAT
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00176157 ____C (Digi International, Inc.) C:\WINDOWS\system32\dllcache\dgrpsetu.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00176157 _____ (Digi International, Inc.) C:\WINDOWS\system32\dgrpsetu.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00126912 _____ (Microsoft Corporation) C:\WINDOWS\system\MSVIDEO.DLL
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00109456 _____ (Microsoft Corporation) C:\WINDOWS\system\AVIFILE.DLL
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00103424 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqnclass.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00103424 _____ (Equinox Systems Inc.) C:\WINDOWS\system32\EqnClass.Dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00085020 ____C (Digi International) C:\WINDOWS\system32\dllcache\dgsetup.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00085020 _____ (Digi International) C:\WINDOWS\system32\dgsetup.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\OLECLI.DLL
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00077824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\spcommon.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00073376 _____ (Microsoft Corporation) C:\WINDOWS\system\MCIAVI.DRV
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00069584 _____ (Microsoft Corporation) C:\WINDOWS\system\AVICAP.DLL
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_869.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_866.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_857.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_855.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_852.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_737.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 _____ C:\WINDOWS\system32\c_869.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 _____ C:\WINDOWS\system32\c_866.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 _____ C:\WINDOWS\system32\c_857.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 _____ C:\WINDOWS\system32\c_855.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 _____ C:\WINDOWS\system32\c_852.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066594 _____ C:\WINDOWS\system32\c_737.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_875.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28599.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28597.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28595.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28594.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20127.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10082.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10081.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10029.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10017.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10010.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10007.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10006.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_875.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_28599.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\C_28597.NLS
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\C_28595.NLS
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\C_28594.NLS
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_20127.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_10082.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_10081.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_10029.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_10017.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_10010.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_10007.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00066082 _____ C:\WINDOWS\system32\c_10006.nls
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\spcplui.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00037484 ____C C:\WINDOWS\system32\dllcache\MW770.CAT
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sapisvr.exe
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system\MCIWAVE.DRV
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00025264 _____ (Microsoft Corporation) C:\WINDOWS\system\MCISEQ.DRV
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00024661 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\spxcoins.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00024661 _____ (Perle Systems Ltd.) C:\WINDOWS\system32\spxcoins.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00019200 _____ (Microsoft Corporation) C:\WINDOWS\system\TAPI.DLL
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\taskman.exe
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\TASKMAN.EXE
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00013600 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00013472 ____C C:\WINDOWS\system32\dllcache\HPCRDP.CAT
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irclass.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\irclass.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\LZEXPAND.DLL
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system\VER.DLL
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00008574 ____C C:\WINDOWS\system32\dllcache\IASNT4.CAT
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00008192 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhept.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhept.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00007382 ____C C:\WINDOWS\system32\dllcache\OEMBIOS.CAT
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00007168 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdcz.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdcz.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdycl.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdsl1.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdsl.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdpl.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhu.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhela3.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdcz2.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdcz1.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdcr.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\KBDAL.DLL
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdycl.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsl1.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsl.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdpl.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhu.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhela3.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdcz2.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdcz1.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdcr.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdal.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdtuq.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdtuf.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdlv1.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdlv.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhela2.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdgkl.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdest.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdtuq.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdtuf.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlv1.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlv.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhela2.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdgkl.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdest.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdycc.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbduzb.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdur.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdtat.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdru1.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdru.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdro.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdpl1.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdmon.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdlt1.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdlt.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdkyr.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdkaz.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhu1.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhe319.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhe220.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhe.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdbu.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdblr.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdazel.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdaze.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdycc.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbduzb.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdur.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdtat.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdru1.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdru.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdro.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdpl1.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdmon.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlt1.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlt.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdkyr.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdkaz.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhu1.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhe319.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhe220.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhe.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdbu.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdblr.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdazel.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdaze.dll
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00004048 _____ (Microsoft Corporation) C:\WINDOWS\system\TIMER.DRV
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00003360 _____ (Microsoft Corporation) C:\WINDOWS\system\SYSTEM.DRV
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00002577 ____N C:\WINDOWS\system32\CONFIG.TMP
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00002176 _____ (Microsoft Corporation) C:\WINDOWS\system\VGA.DRV
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00002032 _____ (Microsoft Corporation) C:\WINDOWS\system\MOUSE.DRV
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00002000 _____ (Microsoft Corporation) C:\WINDOWS\system\KEYBOARD.DRV
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00001744 _____ (Microsoft Corporation) C:\WINDOWS\system\SOUND.DRV
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00001688 _____ C:\WINDOWS\system32\AUTOEXEC.NT
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00001152 _____ (Microsoft Corporation) C:\WINDOWS\system\MMTASK.TSK
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00000888 ____C C:\WINDOWS\system32\dllcache\sam.sdf
                            2017-01-15 07:40 - 2017-02-13 17:16 - 00000000 ___HD C:\Documents and Settings\Default User
                            2017-01-15 07:40 - 2017-02-13 15:22 - 00000000 ____D C:\Documents and Settings
                            2017-01-15 07:40 - 2017-01-15 20:09 - 00093480 _____ C:\WINDOWS\system32\FNTCACHE.DAT
                            2017-01-15 07:40 - 2017-01-15 12:53 - 00000000 ____D C:\Documents and Settings\All Users
                            2017-01-15 07:39 - 2017-01-24 06:12 - 00000212 ___SH C:\boot.ini
                            2017-01-15 07:39 - 2017-01-15 07:39 - 01089536 _____ C:\WINDOWS\system32\config\software.sav
                            2017-01-15 07:39 - 2017-01-15 07:39 - 00925696 _____ C:\WINDOWS\system32\config\system.sav
                            2017-01-15 07:39 - 2017-01-15 07:39 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
                            2017-01-15 07:39 - 2017-01-15 07:39 - 00094208 _____ C:\WINDOWS\system32\config\default.sav
                            2017-01-15 07:36 - 2017-02-13 18:16 - 00000000 ___HD C:\WINDOWS\inf
                            2017-01-15 07:36 - 2017-02-13 17:55 - 00000000 ____D C:\WINDOWS\Network Diagnostic
                            2017-01-15 07:36 - 2017-01-24 01:07 - 00000000 ____D C:\WINDOWS\system32\oobe
                            2017-01-15 07:36 - 2017-01-23 00:58 - 00000000 RSHDC C:\WINDOWS\system32\dllcache
                            2017-01-15 07:36 - 2017-01-19 11:43 - 00000000 ____D C:\WINDOWS\security
                            2017-01-15 07:36 - 2017-01-15 23:27 - 00000000 ____D C:\WINDOWS\system32\mui
                            2017-01-15 07:36 - 2017-01-15 20:34 - 00000000 ____D C:\WINDOWS\Help
                            2017-01-15 07:36 - 2017-01-15 19:59 - 00000000 ____D C:\WINDOWS\system32\spool
                            2017-01-15 07:36 - 2017-01-15 19:57 - 00000000 ____D C:\WINDOWS\pchealth
                            2017-01-15 07:36 - 2017-01-15 17:03 - 00000000 ____D C:\WINDOWS\Media
                            2017-01-15 07:36 - 2017-01-15 12:55 - 00000000 ____D C:\WINDOWS\repair
                            2017-01-15 07:36 - 2017-01-15 12:55 - 00000000 ____D C:\WINDOWS\ime
                            2017-01-15 07:36 - 2017-01-15 12:54 - 00000000 ____D C:\WINDOWS\system32\ias
                            2017-01-15 07:36 - 2017-01-15 12:53 - 00000000 ___RD C:\WINDOWS\Web
                            2017-01-15 07:36 - 2017-01-15 12:50 - 00000000 ____D C:\WINDOWS\Cursors
                            2017-01-15 07:36 - 2017-01-15 07:41 - 00000000 ____D C:\WINDOWS\system
                            2017-01-15 07:36 - 2017-01-15 07:39 - 00000000 ____D C:\WINDOWS\system32\usmt
                            2017-01-15 07:36 - 2017-01-15 07:39 - 00000000 ____D C:\WINDOWS\system32\Setup
                            2017-01-15 07:36 - 2017-01-15 07:39 - 00000000 ____D C:\WINDOWS\system32\scripting
                            2017-01-15 07:36 - 2017-01-15 07:39 - 00000000 ____D C:\WINDOWS\mui
                            2017-01-15 07:36 - 2017-01-15 07:39 - 00000000 ____D C:\WINDOWS\L2Schemas
                            2017-01-15 07:36 - 2017-01-15 07:38 - 00000000 ____D C:\WINDOWS\system32\npp
                            2017-01-15 07:36 - 2017-01-15 07:38 - 00000000 ____D C:\WINDOWS\PeerNet
                            2017-01-15 07:36 - 2017-01-15 07:38 - 00000000 ____D C:\WINDOWS\msagent
                            2017-01-15 07:36 - 2017-01-15 07:37 - 00000000 ____D C:\WINDOWS\system32\ras
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\wins
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\ShellExt
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\inetsrv
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\IME
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\icsxml
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\export
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\Drivers\disdn
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\dhcp
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\3com_dmi
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\3076
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\2052
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1054
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1042
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1041
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1037
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1033
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1031
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1028
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\system32\1025
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\Resources
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\Provisioning
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\msapps
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\java
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\Driver Cache
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\Connection Wizard
                            2017-01-15 07:36 - 2017-01-15 07:36 - 00000000 ____D C:\WINDOWS\addins

                            ==================== One Month Modified files and folders ========

                            (If an entry is included in the fixlist, the file/folder will be moved.)

                            2017-02-13 14:41 - 2001-08-23 07:00 - 00002278 _____ C:\WINDOWS\system32\wpa.dbl
                            2017-01-15 19:32 - 2001-08-23 07:00 - 00000507 _____ C:\WINDOWS\win.ini
                            2017-01-15 07:41 - 2001-08-23 07:00 - 00000231 _____ C:\WINDOWS\system.ini

                            ==================== Files in the root of some directories =======

                            2017-01-19 11:27 - 2017-02-11 09:53 - 0007680 _____ () C:\Documents and Settings\anon\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

                            ==================== Bamital & volsnap ======================

                            (There is no automatic fix for files that do not pass verification.)

                            C:\WINDOWS\explorer.exe => File is digitally signed
                            C:\WINDOWS\system32\winlogon.exe => File is digitally signed
                            C:\WINDOWS\system32\svchost.exe => File is digitally signed
                            C:\WINDOWS\system32\services.exe => File is digitally signed
                            C:\WINDOWS\system32\User32.dll => File is digitally signed
                            C:\WINDOWS\system32\userinit.exe => File is digitally signed
                            C:\WINDOWS\system32\rpcss.dll => File is digitally signed
                            C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
                            C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

                            ==================== End of FRST.txt ============================
                            [HEADING=1]Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-02-2017
                            Ran by anon (13-02-2017 21:43:28)
                            Running from C:\Documents and Settings\anon\Desktop
                            Microsoft Windows XP Professional Service Pack 3 (X86) (2017-01-15 17:58:30)
                            Boot Mode: Normal[/HEADING]
                            ==================== Accounts: =============================

                            Administrator (S-1-5-21-1202660629-1409082233-1606980848-500 - Administrator - Enabled)
                            anon (S-1-5-21-1202660629-1409082233-1606980848-1003 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\anon
                            Guest (S-1-5-21-1202660629-1409082233-1606980848-501 - Limited - Disabled)
                            HelpAssistant (S-1-5-21-1202660629-1409082233-1606980848-1000 - Limited - Disabled)
                            SUPPORT_388945a0 (S-1-5-21-1202660629-1409082233-1606980848-1002 - Limited - Disabled)
                            Talus (S-1-5-21-1202660629-1409082233-1606980848-1005 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Talus

                            ==================== Security Center ========================

                            (If an entry is included in the fixlist, it will be removed.)

                            AV: IObit Malware Fighter (Disabled - Out of date) {0ED16AC2-4656-4907-BD42-21EA693640D6}

                            ==================== Installed Programs ======================

                            (Only the adware programs with “Hidden” flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

                            µTorrent (HKU\S-1-5-21-1202660629-1409082233-1606980848-1003...\uTorrent) (Version: 3.4.9.43295 - BitTorrent Inc.)
                            7-Zip 16.04 (HKLM...\7-Zip) (Version: 16.04 - Igor Pavlov)
                            Adobe Flash Player 24 ActiveX (HKLM...\Adobe Flash Player ActiveX) (Version: 24.0.0.186 - Adobe Systems Incorporated)
                            Adobe Flash Player 24 NPAPI (HKLM...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
                            ATI Display Driver (HKLM...\ATI Display Driver) (Version: 8.56-081112a-074061C-Acer - )
                            Cheat Engine 6.4 (HKLM...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
                            Combined Community Codec Pack 2015-10-18 (HKLM...\Combined Community Codec Pack_is1) (Version: 2015.10.19.0 - CCCP Project)
                            CPUID CPU-Z 1.78 (HKLM...\CPUID CPU-Z_is1) (Version: - )
                            Java 8 Update 121 (HKLM...{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
                            JetBoost (HKLM...\JetBoost_is1) (Version: 2.0.0 - BlueSprig)
                            Microsoft .NET Framework 1.1 (HKLM...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
                            Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM...\M2833941) (Version: - )
                            Microsoft .NET Framework 2.0 Service Pack 2 (HKLM...{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
                            Microsoft .NET Framework 3.0 Service Pack 2 (HKLM...{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
                            Microsoft .NET Framework 3.5 SP1 (HKLM...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
                            Microsoft .NET Framework 4 Client Profile (HKLM...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
                            Microsoft Base Smart Card Cryptographic Service Provider Package (HKLM...\KB909520) (Version: - Microsoft Corporation)
                            Microsoft Compression Client Pack 1.0 for Windows XP (HKLM...\MSCompPackV1) (Version: 1 - Microsoft Corporation)
                            Microsoft User-Mode Driver Framework Feature Pack 1.0 (HKLM...\Wudf01000) (Version: - Microsoft Corporation)
                            Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM...{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
                            Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM...{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
                            Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM...{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
                            Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM...{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
                            Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM...{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
                            mIRC (HKLM...\mIRC) (Version: 7.38 - mIRC Co. Ltd.)
                            Mono for Windows 3.2.3 (HKLM...{afbbbda2-1dd7-11e3-ae37-080027022fbf}_is1) (Version: 3.2.3 - Mono)
                            Mozilla Firefox 47.0.2 (x86 en-US) (HKLM...\Mozilla Firefox 47.0.2 (x86 en-US)) (Version: 47.0.2 - Mozilla)
                            Realtek AC’97 Audio (HKLM...{FB08F381-6533-4108-B7DD-039E11FBC27E}) (Version: - )
                            Ultima Online Renaissance 5.0.8.3 (HKLM...{85204665-3317-4953-BDB8-3BB60C75C130}) (Version: 5.0.8.3 - www.uorenaissance.com)
                            UO Auto-Map 8.3.0.0 (HKLM...\UO Auto-Map) (Version: 8.3.0.0 - UOAM)
                            VIA Rhine-Family Fast-Ethernet Adapter (HKLM...\VN_VUIns_Rhine_VIA) (Version: - )
                            VLC media player (HKLM...\VLC media player) (Version: 2.2.4 - VideoLAN)
                            WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
                            Winamp (HKLM...\Winamp) (Version: 5.666 - Nullsoft, Inc)
                            Windows Genuine Advantage Notifications (KB905474) (HKLM...\WgaNotify) (Version: 1.9.0040.0 - Microsoft Corporation)
                            Windows Genuine Advantage Validation Tool (KB892130) (HKLM...\KB892130) (Version: - Microsoft Corporation)
                            Windows Genuine Advantage Validation Tool (KB892130) (HKLM...\WGA) (Version: 1.7.0069.2 - Microsoft Corporation)
                            Windows Internet Explorer 8 (HKLM...\ie8) (Version: 20090308.140743 - Microsoft Corporation)
                            Windows Management Framework Core (HKLM...\KB968930) (Version: - Microsoft Corporation)
                            Windows Media Format 11 runtime (HKLM...\Windows Media Format Runtime) (Version: - )
                            Windows Media Player 11 (HKLM...\Windows Media Player) (Version: - )
                            WinRAR 5.40 (32-bit) (HKLM...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
                            Zemana AntiMalware (HKLM...{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.72.101 - Zemana Ltd.)

                            ==================== Custom CLSID (Whitelisted): ==========================

                            (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

                            (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

                            Task: C:\WINDOWS\Tasks\JetBoost_AutoUpdate.job => C:\Program Files\BlueSprig\JetBoost\AutoUpdate.exe

                            ==================== Shortcuts =============================

                            (The entries could be listed to be restored or removed.)

                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Razor\Visit Razor’s Website.lnk → hxxp://www.runuo.com/razor
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\XSP\XSP 2.0 Test Web Server.lnk → C:\Program Files\Mono-3.2.3\bin\startXSP2.bat ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Applications\Gtk# Demo.lnk → C:\Program Files\Mono-3.2.3\bin\GtkDemo.bat (No File)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Applications\Sql# GTK.lnk → C:\Program Files\Mono-3.2.3\bin\sqlsharpgtk.bat (No File)

                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Mono-3.2.3 Command Prompt.lnk → C:\WINDOWS\system32\cmd.exe (Microsoft Corporation) → /k “C:\Program Files\Mono-3.2.3\bin\setmonopath.bat”

                            ==================== Loaded Modules (Whitelisted) ==============

                            ==================== Alternate Data Streams (Whitelisted) =========

                            (If an entry is included in the fixlist, only the ADS will be removed.)

                            ==================== Safe Mode (Whitelisted) ===================

                            (If an entry is included in the fixlist, it will be removed from the registry. The “AlternateShell” value will be restored.)

                            ==================== Association (Whitelisted) ===============

                            (If an entry is included in the fixlist, the registry item will be restored to default or removed.)

                            ==================== Internet Explorer trusted/restricted ===============

                            (If an entry is included in the fixlist, it will be removed from the registry.)

                            ==================== Hosts content: ===============================

                            (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

                            2001-08-23 07:00 - 2017-02-13 20:46 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts

                            127.0.0.1 localhost

                            ==================== Other Areas ============================

                            (Currently there is no automatic fix for this section.)

                            HKU\S-1-5-21-1202660629-1409082233-1606980848-1003\Control Panel\Desktop\Wallpaper →
                            DNS Servers: 209.18.47.61 - 209.18.47.62
                            Windows Firewall is enabled.

                            ==================== MSCONFIG/TASK MANAGER disabled items ==

                            ==================== FirewallRules (Whitelisted) ===============

                            (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

                            StandardProfile\AuthorizedApplications: [C:\Program Files\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe] => Enabled:SP_FF
                            StandardProfile\AuthorizedApplications: [C:\Program Files\Mozilla Firefox\firefox.exe] => Enabled:Firefox (C:\Program Files\Mozilla Firefox)
                            StandardProfile\AuthorizedApplications: [C:\Program Files\Razor\Razor.exe] => Enabled:Razor
                            StandardProfile\AuthorizedApplications: [C:\Program Files\Internet Explorer\iexplore.exe] => Enabled:Internet Explorer
                            StandardProfile\AuthorizedApplications: [C:\Program Files\Winamp\winamp.exe] => Enabled:Winamp
                            StandardProfile\AuthorizedApplications: [C:\Program Files\UOAM\uoam.EXE] => Enabled:Ultima Online’s premier mapping tool.
                            StandardProfile\AuthorizedApplications: [C:\Ultima Online\client.exe] => Enabled:Ultima Online Client
                            StandardProfile\AuthorizedApplications: [C:\Ultima Online\client_noenc.exe] => Enabled:Ultima Online Client
                            StandardProfile\AuthorizedApplications: [C:\Program Files\mIRC\mirc.exe] => Enabled:mIRC
                            StandardProfile\AuthorizedApplications: [C:\Documents and Settings\anon\Application Data\uTorrent\uTorrent.exe] => Enabled:μTorrent
                            StandardProfile\AuthorizedApplications: [C:\Documents and Settings\anon\Desktop\SDI_R535\SDI_R535.exe] => Enabled:Snappy Driver Installer
                            StandardProfile\GloballyOpenPorts: [5985:TCP] => Disabled:Windows Remote Management
                            StandardProfile\GloballyOpenPorts: [80:TCP] => Disabled:Windows Remote Management - Compatibility Mode (HTTP-In)
                            StandardProfile\GloballyOpenPorts: [1900:UDP] => :LocalSubNetisabledxpsp2res.dll,-22007
                            StandardProfile\GloballyOpenPorts: [2869:TCP] => :LocalSubNetisabledxpsp2res.dll,-22008

                            ==================== Restore Points =========================

                            13-02-2017 18:15:29 Software Distribution Service 3.0
                            13-02-2017 20:20:45 JRT Pre-Junkware Removal
                            13-02-2017 20:46:09 Restore Point Created by FRST

                            ==================== Faulty Device Manager Devices =============

                            Name: PS/2 Compatible Mouse
                            Description: PS/2 Compatible Mouse
                            Class Guid: {4D36E96F-E325-11CE-BFC1-08002BE10318}
                            Manufacturer: Microsoft
                            Service: i8042prt
                            Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
                            Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
                            Devices stay in this state if they have been prepared for removal.
                            After you remove the device, this error disappears.Remove the device, and this error should be resolved.

                            ==================== Event log errors: =========================
                            [HEADING=1]Application errors:[/HEADING]
                            Error: (02/10/2017 06:01:35 PM) (Source: .NET Runtime) (EventID: 1023) (User: )
                            Description: .NET Runtime version 2.0.50727.3655 - Fatal Execution Engine Error (7A0BD76A) (80131506)

                            Error: (01/24/2017 06:25:18 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
                            Description: Application: Razor.exe
                            Framework Version: v4.0.30319
                            Description: The process was terminated due to an unhandled exception.
                            Exception Info: System.InvalidOperationException
                            Stack:
                            at Assistant.Engine.Main(System.String)

                            Error: (01/24/2017 06:24:24 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
                            Description: Application: Razor.exe
                            Framework Version: v4.0.30319
                            Description: The process was terminated due to an unhandled exception.
                            Exception Info: System.InvalidOperationException
                            Stack:
                            at Assistant.Engine.Main(System.String)

                            Error: (01/24/2017 06:19:18 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
                            Description: Application: Razor.exe
                            Framework Version: v4.0.30319
                            Description: The process was terminated due to an unhandled exception.
                            Exception Info: System.InvalidOperationException
                            Stack:
                            at Assistant.Engine.Main(System.String)

                            Error: (01/22/2017 06:56:14 PM) (Source: MsiInstaller) (EventID: 1013) (User: FUYHJ-1DEA3B72C)
                            Description: Product: Microsoft .NET Framework 2.0 – Setup cannot continue because this version of the .NET Framework is incompatible with a previously installed one. For more information, see http://support.microsoft.com/support.../q312/5/00.asp

                            Error: (01/22/2017 06:15:38 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
                            Description: Application: Razor.exe
                            Framework Version: v4.0.30319
                            Description: The process was terminated due to an unhandled exception.
                            Exception Info: System.InvalidOperationException
                            Stack:
                            at Assistant.Engine.Main(System.String)

                            Error: (01/22/2017 06:14:47 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
                            Description: Application: Razor.exe
                            Framework Version: v4.0.30319
                            Description: The process was terminated due to an unhandled exception.
                            Exception Info: System.InvalidOperationException
                            Stack:
                            at Assistant.Engine.Main(System.String)

                            Error: (01/15/2017 09:24:17 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )
                            Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn’t the latest version of CLR Optimization service. Will shutdown

                            Error: (01/15/2017 08:59:23 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
                            Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: Microsoft.PowerShell.Editor,Version=1.0.0.0,Cultur e=neutral,PublicKeyToken=31bf3856ad364e35,Processo rArchitecture=msil . Error code = 0x80070005

                            Error: (01/15/2017 08:12:20 PM) (Source: Windows Search Service) (EventID: 3024) (User: )
                            Description: Event-ID 3024
                            [HEADING=1]System errors:[/HEADING]
                            Error: (02/13/2017 08:46:05 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
                            Description: The Print Spooler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

                            Error: (02/13/2017 08:46:05 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
                            Description: The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s).

                            Error: (02/13/2017 08:37:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
                            Description: The LiveUpdate service failed to start due to the following error:
                            The system cannot find the file specified.

                            Error: (02/13/2017 08:35:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
                            Description: The Application Layer Gateway Service service terminated unexpectedly. It has done this 1 time(s).

                            Error: (02/13/2017 08:20:50 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
                            Description: The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s).

                            Error: (02/13/2017 06:15:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
                            Description: The IMF Service service terminated unexpectedly. It has done this 1 time(s).

                            Error: (02/13/2017 06:11:47 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
                            Description: DCOM got error “%%1058 = The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.” attempting to start the service SENS with arguments “”
                            in order to run the server:
                            {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}

                            Error: (02/13/2017 06:11:47 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
                            Description: DCOM got error “%%1058 = The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.” attempting to start the service SENS with arguments “”
                            in order to run the server:
                            {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}

                            Error: (02/13/2017 06:11:47 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
                            Description: DCOM got error “%%1058 = The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.” attempting to start the service SENS with arguments “”
                            in order to run the server:
                            {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}

                            Error: (02/13/2017 06:11:47 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
                            Description: DCOM got error “%%1058 = The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.” attempting to start the service SENS with arguments “”
                            in order to run the server:
                            {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}

                            ==================== Memory info ===========================

                            Processor: AMD Athlon™ XP 3000+
                            Percentage of memory in use: 86%
                            Total physical RAM: 511.48 MB
                            Available physical RAM: 70.63 MB
                            Total Virtual: 2018 MB
                            Available Virtual: 1603.36 MB

                            ==================== Drives ================================

                            Drive c: () (Fixed) (Total:75.83 GB) (Free:52.27 GB) NTFS ==>[drive with boot components (Windows XP)]

                            ==================== MBR & Partition Table ==================

                            ================================================== ======
                            Disk: 0 (MBR Code: Windows XP) (Size: 76.3 GB) (Disk ID: 046B535F)
                            Partition 1: (Active) - (Size=75.8 GB) - (Type=07 NTFS)
                            Partition 2: (Not Active) - (Size=510 MB) - (Type=05)

                            ==================== End of Addition.txt ============================
                            Users shortcut scan result (x86) Version: 14-02-2017
                            Ran by anon (13-02-2017 21:44:26)
                            Running from C:\Documents and Settings\anon\Desktop
                            Boot Mode: Normal

                            ==================== Shortcuts =============================

                            (The entries could be listed to be restored or removed.)

                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\XSP\XSP 2.0 Test Web Server.lnk → C:\Program Files\Mono-3.2.3\bin\startXSP2.bat ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Applications\Gtk# Demo.lnk → C:\Program Files\Mono-3.2.3\bin\GtkDemo.bat (No File)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Applications\Sql# GTK.lnk → C:\Program Files\Mono-3.2.3\bin\sqlsharpgtk.bat (No File)
                            Shortcut: C:\Documents and Settings\All Users\Application Data\Microsoft\Windows\GameExplorer{C94F8D89-77E6-4960-91CF-454BD0A4ECE0}\SupportTasks\1[www.uo.com.lnk](‘http://www.uo.com.lnk’) → hxxp:
                            Shortcut: C:\Documents and Settings\All Users\Application Data\Microsoft\Windows\GameExplorer{03219DEB-1AA1-4235-887F-2DCDF9AA5484}\SupportTasks\1[www.uo.com.lnk](‘http://www.uo.com.lnk’) → hxxp:
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Razor\Visit Razor’s Website.lnk → hxxp://www.runuo.com/razor

                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Windows Catalog.lnk → C:\WINDOWS\system32\moricons.dll (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk → C:\WINDOWS\system32\wupdmgr.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk → C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Windows Movie Maker.lnk → C:\Program Files\Movie Maker\moviemk.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Zemana AntiMalware\Zemana AntiMalware.lnk → C:\Program Files\Zemana AntiMalware\ZAM.exe (Copyright 2017.)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\WinRAR\Console RAR manual.lnk → C:\Program Files\WinRAR\Rar.txt ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\WinRAR\What is new in the latest version.lnk → C:\Program Files\WinRAR\WhatsNew.txt ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\WinRAR\WinRAR help.lnk → C:\Program Files\WinRAR\WinRAR.chm ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\WinRAR\WinRAR.lnk → C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Winamp\Uninstall Winamp.lnk → C:\Program Files\Winamp\UninstWA.exe (Nullsoft, Inc.)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Winamp\What’s New.lnk → C:\Program Files\Winamp\whatsnew.txt ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Winamp\Winamp.lnk → C:\Program Files\Winamp\winamp.exe (Nullsoft, Inc.)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\VideoLAN\Documentation.lnk → C:\Program Files\VideoLAN\VLC\Documentation.url ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\VideoLAN\Release Notes.lnk → C:\Program Files\VideoLAN\VLC\NEWS.txt ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk → C:\Program Files\VideoLAN\VLC\VideoLAN Website.url ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\VideoLAN\VLC media player.lnk → C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Gtk# on the Web.lnk → C:\Program Files\Mono-3.2.3\GtkSharp.url ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Gtk+ on the Web.lnk → C:\Program Files\Mono-3.2.3\GtkPlus.url ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Mono on the Web.lnk → C:\Program Files\Mono-3.2.3\Mono.url ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Mono-3.2.3 Release Notes on the Web.lnk → C:\Program Files\Mono-3.2.3\MonoReleaseNotes.url ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\MonoDoc Web.lnk → C:\Program Files\Mono-3.2.3\MonoDocWeb.url ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Readme.lnk → C:\Program Files\Mono-3.2.3\ReleaseNotes.txt ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Uninstall Mono-3.2.3 Win32.lnk → C:\Program Files\Mono-3.2.3\unins000.exe ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\XSP\XSP 2.0 Index Page.lnk → C:\Program Files\Mono-3.2.3\Xsplocal2.url ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Applications\Glade 3.lnk → C:\Program Files\Mono-3.2.3\bin\glade-3.exe (No File)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Applications\Gtk Theme Selector.lnk → C:\Program Files\Mono-3.2.3\bin\gtkthemeselector.exe (No File)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Applications\Prj2Make# GTK.lnk → C:\Program Files\Mono-3.2.3\bin\prj2make-sharp-gtk.bat (No File)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Applications\Samples Directory.lnk → C:\Program Files\Mono-3.2.3\samples ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\mIRC\IRCIntro Help.lnk → C:\Program Files\mIRC\ircintro.chm ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\mIRC\mIRC Help.lnk → C:\Program Files\mIRC\mirc.chm ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\mIRC\mIRC.lnk → C:\Program Files\mIRC\mirc.exe (mIRC Co. Ltd.)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\mIRC\Readme.txt.lnk → C:\Program Files\mIRC\readme.txt ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\mIRC\Versions.txt.lnk → C:\Program Files\mIRC\versions.txt ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\JetBoost\JetBoost.lnk → C:\Program Files\BlueSprig\JetBoost\JetBoost.exe (No File)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\JetBoost\Uninstall JetBoost.lnk → C:\Program Files\BlueSprig\JetBoost\unins000.exe (No File)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Java\Configure Java.lnk → C:\Program Files\Java\jre1.8.0_121\bin\javacpl.exe (Oracle Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Games\Freecell.lnk → C:\WINDOWS\system32\freecell.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Games\Hearts.lnk → C:\WINDOWS\system32\mshearts.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Games\Internet Backgammon.lnk → C:\Program Files\MSN Gaming Zone\Windows\bckgzm.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Games\Internet Checkers.lnk → C:\Program Files\MSN Gaming Zone\Windows\chkrzm.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Games\Internet Hearts.lnk → C:\Program Files\MSN Gaming Zone\Windows\hrtzzm.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Games\Internet Reversi.lnk → C:\Program Files\MSN Gaming Zone\Windows\Rvsezm.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Games\Internet Spades.lnk → C:\Program Files\MSN Gaming Zone\Windows\shvlzm.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Games\Minesweeper.lnk → C:\WINDOWS\system32\winmine.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Games\Pinball.lnk → C:\Program Files\Windows NT\Pinball\PINBALL.EXE (Cinematronics)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Games\Solitaire.lnk → C:\WINDOWS\system32\sol.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Games\Spider Solitaire.lnk → C:\WINDOWS\system32\spider.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\CPUID\CPU-Z\CPU-Z.lnk → C:\Program Files\CPUID\CPU-Z\cpuz.exe (CPUID)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\CPUID\CPU-Z\Edit CPU-Z Config File.lnk → C:\Program Files\CPUID\CPU-Z\cpuz.ini ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\CPUID\CPU-Z\Uninstall CPU-Z.lnk → C:\Program Files\CPUID\CPU-Z\unins000.exe ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Combined Community Codec Pack\CCCP Settings (32bit).lnk → C:\Program Files\Combined Community Codec Pack\CCCP-Settings.exe ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Combined Community Codec Pack\CCCP Uninstall (32bit).lnk → C:\Program Files\Combined Community Codec Pack\unins000.exe ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Combined Community Codec Pack\Media Player Classic Home Cinema (32bit).lnk → C:\Program Files\Combined Community Codec Pack\MPC\mpc-hc.exe (MPC-HC Team)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Cheat Engine 6.4\Cheat Engine 6.4 (32-bit).lnk → C:\Program Files\Cheat Engine 6.4\cheatengine-i386.exe (Cheat Engine)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Cheat Engine 6.4\Cheat Engine 6.4 (64-bit).lnk → C:\Program Files\Cheat Engine 6.4\cheatengine-x86_64.exe (Cheat Engine)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Cheat Engine 6.4\Cheat Engine 6.4.lnk → C:\Program Files\Cheat Engine 6.4\Cheat Engine.exe ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Cheat Engine 6.4\Cheat Engine help.lnk → C:\Program Files\Cheat Engine 6.4\CheatEngine.chm ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Cheat Engine 6.4\Cheat Engine tutorial (64-bit).lnk → C:\Program Files\Cheat Engine 6.4\Tutorial-x86_64.exe ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Cheat Engine 6.4\Cheat Engine tutorial.lnk → C:\Program Files\Cheat Engine 6.4\Tutorial-i386.exe ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Cheat Engine 6.4\Reset settings.lnk → C:\Program Files\Cheat Engine 6.4\ceregreset.exe ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Cheat Engine 6.4\Uninstall Cheat Engine.lnk → C:\Program Files\Cheat Engine 6.4\unins000.exe ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Cheat Engine 6.4\Kernel stuff\Unload kernel module.lnk → C:\Program Files\Cheat Engine 6.4\Kernelmoduleunloader.exe ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Component Services.lnk → C:\WINDOWS\system32\Com\comexp.msc ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk → C:\WINDOWS\system32\odbcad32.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk → C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscor cfg.msc ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk → C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Confi gWizards.exe ( )
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Calculator.lnk → C:\WINDOWS\system32\calc.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Paint.lnk → C:\WINDOWS\system32\mspaint.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk → C:\WINDOWS\system32\mstsc.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\WordPad.lnk → C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk → C:\WINDOWS\system32\WindowsPowerShell\v1.0\powersh ell_ise.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk → C:\WINDOWS\system32\WindowsPowerShell\v1.0\powersh ell.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Backup.lnk → C:\WINDOWS\system32\ntbackup.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Character Map.lnk → C:\WINDOWS\system32\charmap.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk → C:\WINDOWS\system32\cleanmgr.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Defragmenter.lnk → C:\WINDOWS\system32\dfrg.msc ()
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Files and Settings Transfer Wizard.lnk → C:\WINDOWS\system32\usmt\migwiz.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Security Center.lnk → C:\WINDOWS\system32\wscui.cpl (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\System Information.lnk → C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\System Restore.lnk → C:\WINDOWS\system32\Restore\rstrui.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Entertainment\Sound Recorder.lnk → C:\WINDOWS\system32\sndrec32.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Entertainment\Volume Control.lnk → C:\WINDOWS\system32\sndvol32.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\HyperTerm inal.lnk → C:\Program Files\Windows NT\hypertrm.exe (Hilgraeve, Inc.)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Accessibility\Accessibil ity Wizard.lnk → C:\WINDOWS\system32\accwiz.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk → C:\Program Files\7-Zip\7zFM.exe (Igor Pavlov)
                            Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\7-Zip\7-Zip Help.lnk → C:\Program Files\7-Zip\7-zip.chm ()
                            Shortcut: C:\Documents and Settings\All Users\Desktop\JetBoost.lnk → C:\Program Files\BlueSprig\JetBoost\JetBoost.exe (No File)
                            Shortcut: C:\Documents and Settings\All Users\Desktop\mIRC.lnk → C:\Program Files\mIRC\mirc.exe (mIRC Co. Ltd.)
                            Shortcut: C:\Documents and Settings\All Users\Desktop\Zemana AntiMalware.lnk → C:\Program Files\Zemana AntiMalware\ZAM.exe (Copyright 2017.)
                            Shortcut: C:\Documents and Settings\All Users\Application Data\Microsoft\Windows\GameExplorer{C94F8D89-77E6-4960-91CF-454BD0A4ECE0}\SupportTasks\0[www.mythicentertainment.com.lnk](‘http://www.mythicentertainment.com.lnk’) → 0x4C0000000114020000000000C00000000000004690000000 00000000000000000000000000000000000000000000000000 00000000000000000000000100000000000000000000000000 0000370043003A005C00500072006F006700720061006D0020 00460069006C00650073005C0045006C006500630074007200 6F006E0069006300200041007200740073005C0055006C0074 0069006D00610020004F006E006C0069006E00650020004300 6C00610073007300690063005C0000000000
                            Shortcut: C:\Documents and Settings\All Users\Application Data\Microsoft\Windows\GameExplorer{03219DEB-1AA1-4235-887F-2DCDF9AA5484}\SupportTasks\0[www.mythicentertainment.com.lnk](‘http://www.mythicentertainment.com.lnk’) → 0x4C0000000114020000000000C00000000000004690000000 00000000000000000000000000000000000000000000000000 00000000000000000000000100000000000000000000000000 0000370043003A005C00500072006F006700720061006D0020 00460069006C00650073005C0045006C006500630074007200 6F006E0069006300200041007200740073005C0055006C0074 0069006D00610020004F006E006C0069006E00650020004300 6C00610073007300690063005C0000000000
                            Shortcut: C:\Documents and Settings\anon\Start Menu\µTorrent.lnk → C:\Documents and Settings\anon\Application Data\uTorrent\uTorrent.exe (BitTorrent Inc.)
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Internet Explorer.lnk → C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Outlook Express.lnk → C:\Program Files\Outlook Express\msimn.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\WinRAR\Console RAR manual.lnk → C:\Program Files\WinRAR\Rar.txt ()
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\WinRAR\What is new in the latest version.lnk → C:\Program Files\WinRAR\WhatsNew.txt ()
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\WinRAR\WinRAR help.lnk → C:\Program Files\WinRAR\WinRAR.chm ()
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\WinRAR\WinRAR.lnk → C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\UO Auto-Map\Uninstall.lnk → C:\Program Files\UOAM\uninst.exe ()
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Razor\Razor.lnk → C:\Program Files\Razor\Razor.exe ()
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Razor\RPV Editor (Alpha).lnk → C:\Program Files\Razor\RPVEditor.exe ( )
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Razor\Uninstall.lnk → C:\Program Files\Razor\Uninstall.exe ()
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\psx emulation cheater\psx emulation cheater.lnk → C:\Program Files\psx emulation cheater\pec.exe (NillSoftWare)
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\psx emulation cheater\Read Me !.lnk → C:\Program Files\psx emulation cheater\pec.chm ()
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Accessories\Address Book.lnk → C:\Program Files\Outlook Express\wab.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Accessories\Command Prompt.lnk → C:\WINDOWS\system32\cmd.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Accessories\Notepad.lnk → C:\WINDOWS\system32\notepad.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Accessories\Program Compatibility Wizard.lnk → C:\WINDOWS\system32\compatUI.dll ()
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Accessories\Synchronize.lnk → C:\WINDOWS\system32\mobsync.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Accessories\Tour Windows XP.lnk → C:\WINDOWS\system32\tourstart.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Accessories\Windows Explorer.lnk → C:\WINDOWS\explorer.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Accessories\Accessibility\Magnifier. lnk → C:\WINDOWS\system32\magnify.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Accessories\Accessibility\Narrator.l nk → C:\WINDOWS\system32\narrator.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\anon\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk → C:\WINDOWS\system32\osk.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\anon\My Documents\My Pictures\Sample Pictures.lnk → C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures ()
                            Shortcut: C:\Documents and Settings\anon\My Documents\My Music\Sample Music.lnk → C:\Documents and Settings\All Users\Documents\My Music\Sample Music ()
                            Shortcut: C:\Documents and Settings\anon\Desktop\Cheat Engine.lnk → C:\Program Files\Cheat Engine 6.4\Cheat Engine.exe ()
                            Shortcut: C:\Documents and Settings\anon\Desktop\Downloads.lnk → C:\Documents and Settings\anon\My Documents\Downloads ()
                            Shortcut: C:\Documents and Settings\anon\Desktop\Razor.lnk → C:\Program Files\Razor\Razor.exe ()
                            Shortcut: C:\Documents and Settings\anon\Desktop\UO Renaissance (Without Razor).lnk → C:\Ultima Online\client_noenc.exe (Electronic Arts)
                            Shortcut: C:\Documents and Settings\anon\Desktop\ZHPCleaner.lnk → C:\Documents and Settings\anon\Application Data\ZHP\ZHPCleaner.exe ()
                            Shortcut: C:\Documents and Settings\anon\Application Data\Microsoft\Internet Explorer\Quick Launch\JetBoost.lnk → C:\Program Files\BlueSprig\JetBoost\JetBoost.exe (No File)
                            Shortcut: C:\Documents and Settings\anon\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk → C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
                            Shortcut: C:\Documents and Settings\anon\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk → C:\Documents and Settings\anon\Application Data\uTorrent\uTorrent.exe (BitTorrent Inc.)
                            Shortcut: C:\Documents and Settings\anon\Application Data\IObit\Uninstall Programs.lnk → C:\Program Files\IObit\IObit Uninstaller\Uninstaler_SkipUac.exe (No File)
                            Shortcut: C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Command Prompt.lnk → C:\WINDOWS\system32\cmd.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Notepad.lnk → C:\WINDOWS\system32\notepad.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Program Compatibility Wizard.lnk → C:\WINDOWS\system32\compatUI.dll ()
                            Shortcut: C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Synchronize.lnk → C:\WINDOWS\system32\mobsync.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Tour Windows XP.lnk → C:\WINDOWS\system32\tourstart.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Windows Explorer.lnk → C:\WINDOWS\explorer.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\Magnifier. lnk → C:\WINDOWS\system32\magnify.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\Narrator.l nk → C:\WINDOWS\system32\narrator.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk → C:\WINDOWS\system32\osk.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Talus\Start Menu\Programs\Internet Explorer.lnk → C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Talus\Start Menu\Programs\Outlook Express.lnk → C:\Program Files\Outlook Express\msimn.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Talus\Start Menu\Programs\Accessories\Address Book.lnk → C:\Program Files\Outlook Express\wab.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Talus\Start Menu\Programs\Accessories\Command Prompt.lnk → C:\WINDOWS\system32\cmd.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Talus\Start Menu\Programs\Accessories\Notepad.lnk → C:\WINDOWS\system32\notepad.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Talus\Start Menu\Programs\Accessories\Program Compatibility Wizard.lnk → C:\WINDOWS\system32\compatUI.dll ()
                            Shortcut: C:\Documents and Settings\Talus\Start Menu\Programs\Accessories\Synchronize.lnk → C:\WINDOWS\system32\mobsync.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Talus\Start Menu\Programs\Accessories\Tour Windows XP.lnk → C:\WINDOWS\system32\tourstart.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Talus\Start Menu\Programs\Accessories\Windows Explorer.lnk → C:\WINDOWS\explorer.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Talus\Start Menu\Programs\Accessories\Accessibility\Magnifier. lnk → C:\WINDOWS\system32\magnify.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Talus\Start Menu\Programs\Accessories\Accessibility\Narrator.l nk → C:\WINDOWS\system32\narrator.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Talus\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk → C:\WINDOWS\system32\osk.exe (Microsoft Corporation)
                            Shortcut: C:\Documents and Settings\Talus\My Documents\My Pictures\Sample Pictures.lnk → C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures ()
                            Shortcut: C:\Documents and Settings\Talus\My Documents\My Music\Sample Music.lnk → C:\Documents and Settings\All Users\Documents\My Music\Sample Music ()
                            Shortcut: C:\Documents and Settings\Talus\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk → C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Mono 3.2.3 for Windows\Mono-3.2.3 Command Prompt.lnk → C:\WINDOWS\system32\cmd.exe (Microsoft Corporation) → /k “C:\Program Files\Mono-3.2.3\bin\setmonopath.bat”

                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Set Program Access and Defaults.lnk → C:\WINDOWS\system32\control.exe (Microsoft Corporation) → appwiz.cpl,3
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Winamp\Winamp (Safe Mode).lnk → C:\Program Files\Winamp\winamp.exe (Nullsoft, Inc.) → /SAFE=1
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\VideoLAN\VLC media player - reset preferences and cache files.lnk → C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN) → --reset-config --reset-plugins-cache vlc://quit
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk → C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN) → -Iskins
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Java\About Java.lnk → C:\Program Files\Java\jre1.8.0_121\bin\javacpl.exe (Oracle Corporation) → -tab about
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Java\Check For Updates.lnk → C:\Program Files\Java\jre1.8.0_121\bin\javacpl.exe (Oracle Corporation) → -tab update
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Combined Community Codec Pack\Filters\LAV Audio Settings (32bit).lnk → C:\WINDOWS\system32\rundll32.exe (Microsoft Corporation) → “C:\Program Files\Combined Community Codec Pack\Filters\LAVFilters\LAVAudio.ax”,OpenConfigura tion
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Combined Community Codec Pack\Filters\LAV Splitter Settings (32bit).lnk → C:\WINDOWS\system32\rundll32.exe (Microsoft Corporation) → “C:\Program Files\Combined Community Codec Pack\Filters\LAVFilters\LAVSplitter.ax”,OpenConfig uration
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Combined Community Codec Pack\Filters\LAV Video Settings (32bit).lnk → C:\WINDOWS\system32\rundll32.exe (Microsoft Corporation) → “C:\Program Files\Combined Community Codec Pack\Filters\LAVFilters\LAVVideo.ax”,OpenConfigura tion
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Combined Community Codec Pack\Filters\VSFilter Configuration (32bit).lnk → C:\WINDOWS\system32\rundll32.exe (Microsoft Corporation) → “C:\Program Files\Combined Community Codec Pack\Filters\vsfilter.dll”,DirectVobSub
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Cheat Engine 6.4\main.lua.lnk → C:\WINDOWS\system32\notepad.exe (Microsoft Corporation) → C:\Program Files\Cheat Engine 6.4\main.lua
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Computer Management.lnk → C:\WINDOWS\system32\compmgmt.msc () → /s
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Event Viewer.lnk → C:\WINDOWS\system32\eventvwr.msc () → /s
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Local Security Policy.lnk → C:\WINDOWS\system32\secpol.msc () → /s
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Performance.lnk → C:\WINDOWS\system32\perfmon.msc () → /s
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Services.lnk → C:\WINDOWS\system32\services.msc () → /s
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Scheduled Tasks.lnk → C:\WINDOWS\explorer.exe (Microsoft Corporation) → ::{20D04FE0-3AEA-1069-A2D8-08002B30309D}::{21EC2020-3AEA-1069-A2DD-08002B30309D}::{D6277990-4C6A-11CF-8D87-00AA0060F5BF}
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\Network Connections.lnk → C:\WINDOWS\explorer.exe (Microsoft Corporation) → ::{20D04FE0-3AEA-1069-A2D8-08002B30309D}::{21EC2020-3AEA-1069-A2DD-08002B30309D}::{7007acc7-3202-11d1-aad2-00805fc1270e}
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\Network Setup Wizard.lnk → C:\WINDOWS\system32\rundll32.exe (Microsoft Corporation) → hnetwiz.dll,HomeNetWizardRunDll
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\New Connection Wizard.lnk → C:\WINDOWS\system32\rundll32.exe (Microsoft Corporation) → netshell.dll,StartNCW
                            ShortcutWithArgument: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\Wireless Network Setup Wizard.lnk → C:\WINDOWS\system32\rundll32.exe (Microsoft Corporation) → shell32.dll,Control_RunDLL NetSetup.cpl,@0,WNSW
                            ShortcutWithArgument: C:\Documents and Settings\anon\Start Menu\Programs\Remote Assistance.lnk → C:\WINDOWS\system32\rcimlby.exe (Microsoft Corporation) → -LaunchRA
                            ShortcutWithArgument: C:\Documents and Settings\anon\Start Menu\Programs\Windows Media Player.lnk → C:\Program Files\Windows Media Player\wmplayer.exe (Microsoft Corporation) → /prefetch:1
                            ShortcutWithArgument: C:\Documents and Settings\anon\Start Menu\Programs\UO Auto-Map\UO Auto-Map.lnk → C:\Program Files\UOAM\uoam.EXE () → -q
                            ShortcutWithArgument: C:\Documents and Settings\anon\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk → C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) → -extoff
                            ShortcutWithArgument: C:\Documents and Settings\anon\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk → C:\WINDOWS\system32\utilman.exe (Microsoft Corporation) → /start
                            ShortcutWithArgument: C:\Documents and Settings\anon\Desktop\UO Auto-Map.lnk → C:\Program Files\UOAM\uoam.EXE () → -q
                            ShortcutWithArgument: C:\Documents and Settings\Default User\Start Menu\Programs\Remote Assistance.lnk → C:\WINDOWS\system32\rcimlby.exe (Microsoft Corporation) → -LaunchRA
                            ShortcutWithArgument: C:\Documents and Settings\Default User\Start Menu\Programs\Windows Media Player.lnk → C:\Program Files\Windows Media Player\wmplayer.exe (Microsoft Corporation) → /prefetch:1
                            ShortcutWithArgument: C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk → C:\Program Files\Windows Media Player\wmplayer.exe (Microsoft Corporation) → /prefetch:1
                            ShortcutWithArgument: C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk → C:\WINDOWS\system32\utilman.exe (Microsoft Corporation) → /start
                            ShortcutWithArgument: C:\Documents and Settings\Talus\Start Menu\Programs\Windows Media Player.lnk → C:\Program Files\Windows Media Player\wmplayer.exe (Microsoft Corporation) → /prefetch:1
                            ShortcutWithArgument: C:\Documents and Settings\Talus\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk → C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) → -extoff
                            ShortcutWithArgument: C:\Documents and Settings\Talus\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk → C:\WINDOWS\system32\utilman.exe (Microsoft Corporation) → /start

                            InternetURL: C:\Documents and Settings\All Users\Start Menu\Programs\Java\Get Help.url → URL: hxxp://java.com/help
                            InternetURL: C:\Documents and Settings\All Users\Start Menu\Programs\Java\Visit Java.com.url → URL: hxxp://java.com/
                            InternetURL: C:\Documents and Settings\All Users\Start Menu\Programs\Combined Community Codec Pack\CCCP Playback FAQ.url → URL: hxxp://www.cccp-project.net/wiki/index.php?title=Main_Page
                            InternetURL: C:\Documents and Settings\All Users\Start Menu\Programs\Combined Community Codec Pack\CCCP Website.url → URL: hxxp://www.cccp-project.net/
                            InternetURL: C:\Documents and Settings\anon\My Documents\Downloads\IObit Advanced System Care Pro v9.4.0.1131 Setup + Serial\Fullstuff.net.url → URL: hxxp://www.fullstuff.net/
                            InternetURL: C:\Documents and Settings\anon\Favorites\In Progress - I Can’t Download Anything PC Help Forum.url → BASEURL: hxxps://pchelpforum.net/t/i-cant-download-anything.16034/ URL: hxxps://pchelpforum.net/t/i-cant-download-anything.16034/
                            InternetURL: C:\Documents and Settings\anon\Favorites\MSN.com.url → URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=IStart
                            InternetURL: C:\Documents and Settings\anon\Favorites\Radio Station Guide.url → URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&plcid=&pver= 6.1&os=&over=&olcid=&clcid=&ar=Media&sba=RadioBar& o1=&o2=&o3=
                            InternetURL: C:\Documents and Settings\anon\Favorites\Microsoft Websites\IE Add-on site.url → URL: hxxp://go.microsoft.com/fwlink/?LinkId=50893
                            InternetURL: C:\Documents and Settings\anon\Favorites\Microsoft Websites\IE site on Microsoft.com.url → URL: hxxp://go.microsoft.com/fwlink/?linkid=44661
                            InternetURL: C:\Documents and Settings\anon\Favorites\Microsoft Websites\Microsoft At Home.url → URL: hxxp://go.microsoft.com/fwlink/?linkid=55424
                            InternetURL: C:\Documents and Settings\anon\Favorites\Microsoft Websites\Microsoft At Work.url → URL: hxxp://go.microsoft.com/fwlink/?linkid=68920
                            InternetURL: C:\Documents and Settings\anon\Favorites\Microsoft Websites\Microsoft Store.url → URL: hxxp://go.microsoft.com/fwlink/?linkid=140813
                            InternetURL: C:\Documents and Settings\anon\Favorites\Links\Free Hotmail.url → URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=hotmail
                            InternetURL: C:\Documents and Settings\Talus\Favorites\Microsoft Websites\IE Add-on site.url → URL: hxxp://go.microsoft.com/fwlink/?LinkId=50893
                            InternetURL: C:\Documents and Settings\Talus\Favorites\Microsoft Websites\IE site on Microsoft.com.url → URL: hxxp://go.microsoft.com/fwlink/?linkid=44661
                            InternetURL: C:\Documents and Settings\Talus\Favorites\Microsoft Websites\Microsoft At Home.url → URL: hxxp://go.microsoft.com/fwlink/?linkid=55424
                            InternetURL: C:\Documents and Settings\Talus\Favorites\Microsoft Websites\Microsoft At Work.url → URL: hxxp://go.microsoft.com/fwlink/?linkid=68920
                            InternetURL: C:\Documents and Settings\Talus\Favorites\Microsoft Websites\Microsoft Store.url → URL: hxxp://go.microsoft.com/fwlink/?linkid=140813
                            InternetURL: C:\Documents and Settings\Talus\Favorites\Links\Web Slice Gallery.url → URL: hxxp://go.microsoft.com/fwlink/?LinkId=121315

                            ==================== End of Shortcut.txt =============================

                            Comment

                            • Malnutrition
                              PCHF Moderator
                              • Jul 2016
                              • 7041

                              #15
                              ClearLNK

                              Download ClearLNK save it to your desktop.
                              Drag the file ShortCut.txt from FRST scans made earlier.
                              As per picture.
                              A report on the work as a file ClearLNK- .log
                              Will be produced, post that log.



                              FRST Fix.

                              Click Here To Download Fixlist.


                              Download attached fixlist.txt file and save it to the Desktop. NOTE. It’s important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

                              Comment

                              Working...