O20 - AppInit_DLLs: (C:\ProgramData\atl7132.dll) - C:\ProgramData\atl7132.dll (Inprise Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\GoToAssist: DllName - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll - C:\Program Files\Citrix\GoToAssist\514\g2awinlogon.dll (Citrix Online, a division of Citrix Systems, Inc.)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\Windows\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Users\Em\Saved Games\Pictures\Em's Junk\Backgrounds\collage2_by_sab1.jpg
O24 - Desktop BackupWallPaper: C:\Users\Em\Saved Games\Pictures\Em's Junk\Backgrounds\collage2_by_sab1.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{d4e8266b-d5b6-11df-9bb1-00219bf6b5ee}\Shell\AutoRun\command - "" = F:\rcaeasyrip_setup.exe -- File not found
O33 - MountPoints2\{d4e8266b-d5b6-11df-9bb1-00219bf6b5ee}\Shell\install\command - "" = F:\rcaeasyrip_setup.exe -- File not found
O33 - MountPoints2\{d4e8266b-d5b6-11df-9bb1-00219bf6b5ee}\Shell\usermanualEnglish\command - "" = F:\rcaeasyrip_setup.exe -- File not found
O33 - MountPoints2\{d4e8266b-d5b6-11df-9bb1-00219bf6b5ee}\Shell\usermanualFrench\command - "" = F:\rcaeasyrip_setup.exe -- File not found
O33 - MountPoints2\{d4e8266b-d5b6-11df-9bb1-00219bf6b5ee}\Shell\usermanualSpanish\command - "" = F:\rcaeasyrip_setup.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: WudfPf - Driver
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.XVID - C:\Windows\System32\xvidvfw.dll ()
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2010/10/30 22:51:31 | 000,000,000 | ---D | C] -- C:\ProgramData\ClickPotatoLiteSA
[2010/10/30 22:51:31 | 000,000,000 | ---D | C] -- C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
[2010/10/30 22:51:30 | 000,000,000 | ---D | C] -- C:\Users\Em\AppData\Roaming\ClickPotatoLite
[2010/10/30 22:51:30 | 000,000,000 | ---D | C] -- C:\Program Files\ClickPotatoLite
[2010/10/28 15:31:33 | 000,000,000 | ---D | C] -- C:\Users\Em\AppData\Roaming\Tific
[2010/10/28 15:31:29 | 000,000,000 | ---D | C] -- C:\Users\Em\AppData\Local\Symantec
[2010/10/28 15:17:49 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2010/10/28 14:58:51 | 000,000,000 | -HSD | C] -- C:\ProgramData\SysWoW32
[2010/10/28 14:58:36 | 000,000,000 | -HSD | C] -- C:\System Volume Data
[2010/10/28 14:58:36 | 000,000,000 | ---D | C] -- C:\ProgramData\419050447
[2010/10/28 14:58:16 | 000,249,856 | ---- | C] (Inprise Corporation) -- C:\ProgramData\atl7132.dll
[2010/10/28 14:58:16 | 000,000,000 | -HSD | C] -- C:\Users\Em\AppData\Roaming\SysWin
[2010/10/28 14:58:13 | 000,368,128 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\atl7132.dll
[2010/10/27 20:47:25 | 000,000,000 | ---D | C] -- C:\FarmVilleBot_2.1
[2010/10/27 20:42:14 | 000,000,000 | ---D | C] -- C:\Users\Em\AppData\Roaming\WinRAR
[2010/10/27 20:41:25 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2010/10/27 15:23:51 | 000,000,000 | ---D | C] -- C:\Users\Em\AppData\Roaming\Charles
[2010/10/27 14:48:02 | 000,000,000 | ---D | C] -- C:\Program Files\Charles
[2010/10/27 11:20:17 | 001,696,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2010/10/27 11:20:14 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2010/10/27 11:20:14 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2010/10/22 22:52:39 | 000,000,000 | ---D | C] -- C:\Users\Em\AppData\Roaming\Adobe Mini Bridge CS5
[2010/10/22 22:52:38 | 000,000,000 | ---D | C] -- C:\Users\Em\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2010/10/18 19:40:26 | 000,000,000 | ---D | C] -- C:\Users\Em\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/10/18 18:49:13 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe
[2010/10/18 18:41:23 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe Media Player
[2010/10/18 18:39:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR
[2010/10/18 18:21:32 | 000,000,000 | ---D | C] -- C:\Users\Em\Desktop\Adobe CS5
[2010/10/18 17:57:21 | 001,228,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Users\Em\Photoshop_12_LS1.exe
[2010/10/18 17:57:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Akamai
[2010/10/16 22:33:25 | 000,000,000 | ---D | C] -- C:\Users\Em\AppData\Local\CrashDumps
[2010/10/16 18:03:02 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit
[2010/10/16 18:03:01 | 000,000,000 | ---D | C] -- C:\Program Files\Zynga
[2010/10/16 15:27:07 | 000,000,000 | ---D | C] -- C:\Program Files\OpinionSquare
[2010/10/14 21:40:25 | 000,000,000 | ---D | C] -- C:\Users\Em\AppData\Roaming\vlc
[2010/10/14 21:39:47 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2010/10/14 09:23:54 | 008,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2010/10/14 09:23:32 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netevent.dll
[2010/10/14 09:23:12 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2010/10/14 09:23:11 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
[2010/10/14 09:23:10 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
[2010/10/14 09:23:09 | 002,038,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2010/10/14 09:23:08 | 000,231,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msshsq.dll
[2010/10/14 09:23:06 | 000,867,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
[2010/10/12 16:11:27 | 000,000,000 | ---D | C] -- C:\Users\Em\AppData\Roaming\WhiteSmoke
[2010/10/12 16:10:48 | 000,000,000 | ---D | C] -- C:\Program Files\WhiteSmoke
[2010/10/12 00:02:06 | 000,596,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2010/10/12 00:02:06 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2010/10/12 00:02:06 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2010/10/12 00:02:06 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2010/10/12 00:02:06 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2010/10/12 00:02:05 | 001,355,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2010/10/12 00:02:05 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2010/10/12 00:02:05 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2010/10/12 00:02:05 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2010/10/12 00:02:05 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2010/10/12 00:02:05 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2010/10/12 00:02:05 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2010/10/12 00:02:05 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetDepNx.exe
[2010/10/12 00:02:05 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2010/10/12 00:02:05 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2010/10/12 00:02:04 | 002,381,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2010/10/12 00:02:04 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2010/10/12 00:02:04 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2010/10/12 00:02:04 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2010/10/12 00:02:04 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2010/10/12 00:02:04 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2010/10/12 00:02:04 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2010/10/12 00:02:04 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2010/10/12 00:02:03 | 003,695,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2010/10/12 00:02:03 | 001,448,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2010/10/12 00:02:03 | 000,460,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2010/10/12 00:02:03 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2010/10/12 00:02:03 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2010/10/12 00:02:03 | 000,353,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2010/10/12 00:02:03 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2010/10/12 00:02:03 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2010/10/12 00:02:03 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2010/10/12 00:02:03 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2010/10/12 00:02:03 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2010/10/12 00:02:03 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2010/10/12 00:02:02 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2010/10/12 00:02:02 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2010/10/12 00:02:02 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2010/10/12 00:02:02 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2010/10/12 00:02:02 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2010/10/12 00:00:47 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFHEAACdec.dll
[2010/10/12 00:00:47 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfmp4src.dll
[2010/10/12 00:00:47 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2010/10/12 00:00:47 | 000,261,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
[2010/10/12 00:00:47 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2010/10/12 00:00:47 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2010/10/12 00:00:47 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
[2010/10/12 00:00:46 | 001,174,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2010/10/12 00:00:46 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2010/10/12 00:00:46 | 000,979,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFH264Dec.dll
[2010/10/12 00:00:46 | 000,797,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FntCache.dll
[2010/10/12 00:00:46 | 000,680,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2010/10/11 23:59:42 | 000,000,000 | ---D | C] -- C:\Program Files\Feedback Tool
[2010/10/09 14:10:39 | 000,000,000 | ---D | C] -- C:\Users\Em\Documents\Fonts
[2010/10/08 23:40:44 | 000,000,000 | ---D | C] -- C:\Program Files\Xvid
[2010/10/02 20:16:09 | 000,000,000 | ---D | C] -- C:\Users\Em\Documents\Downloads
[2010/10/02 20:15:42 | 000,000,000 | ---D | C] -- C:\Users\Em\AppData\Local\Real
[2010/10/02 20:14:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Real
[2010/10/02 20:14:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Real
[2010/10/02 20:14:22 | 000,000,000 | ---D | C] -- C:\Users\Em\AppData\Roaming\Real
========== Files - Modified Within 30 Days ==========
[2010/10/31 11:28:03 | 000,001,185 | ---- | M] () -- C:\ProgramData\1521627092
[2010/10/31 11:28:00 | 000,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/10/31 11:27:23 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/10/31 11:27:23 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/10/31 10:43:55 | 000,000,225 | -HS- | M] () -- C:\ProgramData\2056783096
[2010/10/31 09:28:00 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/10/31 09:27:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/10/31 00:20:23 | 000,000,472 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Josh.job
[2010/10/31 00:20:17 | 000,000,468 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Em.job
[2010/10/30 22:11:38 | 000,005,613 | ---- | M] () -- C:\Windows\System32\GnuHashes.ini
[2010/10/30 21:54:13 | 000,002,614 | ---- | M] () -- C:\Users\Em\AppData\Roaming\wklnhst.dat
[2010/10/29 13:12:22 | 000,000,372 | ---- | M] () -- C:\Windows\tasks\Registry Reviver-Em-Startup.job
[2010/10/29 13:10:43 | 2137,042,944 | -HS- | M] () -- C:\hiberfil.sys
[2010/10/29 13:10:41 | 233,504,030 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010/10/28 22:23:31 | 000,604,502 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/10/28 22:23:31 | 000,104,170 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/10/28 14:58:36 | 000,203,776 | -HS- | M] () -- C:\ProgramData\unrar.exe
[2010/10/28 14:58:26 | 000,178,176 | -HS- | M] () -- C:\Windows\lsass.exe
[2010/10/28 14:58:17 | 000,000,079 | ---- | M] () -- C:\Windows\System32\1348879327
[2010/10/28 14:58:16 | 000,249,856 | ---- | M] (Inprise Corporation) -- C:\ProgramData\atl7132.dll
[2010/10/28 14:58:13 | 000,368,128 | ---- | M] (Inprise Corporation) -- C:\Windows\System32\atl7132.dll
[2010/10/27 20:48:50 | 000,000,663 | ---- | M] () -- C:\Users\Public\Desktop\FarmVilleBot Lite.lnk
[2010/10/27 20:48:50 | 000,000,638 | ---- | M] () -- C:\Users\Public\Desktop\FarmVilleBot.lnk
[2010/10/27 15:23:40 | 001,343,488 | ---- | M] () -- C:\Windows\System32\KBDMACST32.exe
[2010/10/27 15:23:40 | 001,343,488 | ---- | M] () -- C:\ProgramData\IEAdvpack32.exe
[2010/10/27 14:40:45 | 000,154,624 | ---- | M] () -- C:\ProgramData\90831631c4
[2010/10/27 14:40:41 | 000,145,408 | ---- | M] () -- C:\ProgramData\90831631c2
[2010/10/27 14:40:39 | 000,153,088 | ---- | M] () -- C:\ProgramData\90831631c1
[2010/10/27 11:18:26 | 001,910,818 | ---- | M] () -- C:\Windows\System32\drivers\NAV\1201000.025\Cat.DB
[2010/10/26 11:54:06 | 000,000,132 | ---- | M] () -- C:\Users\Em\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2010/10/25 09:37:51 | 000,002,087 | ---- | M] () -- C:\Users\Public\Desktop\Norton AntiVirus.lnk
[2010/10/25 09:37:15 | 003,641,736 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2010/10/24 22:38:56 | 000,000,132 | ---- | M] () -- C:\Users\Em\AppData\Roaming\Adobe GIF Format CS5 Prefs
[2010/10/23 09:29:31 | 006,309,062 | ---- | M] () -- C:\Users\Em\Documents\farmville trade.rtf
[2010/10/20 08:04:28 | 000,126,512 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS
[2010/10/20 08:04:28 | 000,007,456 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.CAT
[2010/10/20 08:04:28 | 000,000,805 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.INF
[2010/10/19 23:54:47 | 000,001,940 | ---- | M] () -- C:\Users\Em\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
[2010/10/18 22:02:50 | 000,000,962 | ---- | M] () -- C:\Users\Em\Desktop\Adobe Photoshop CS5.lnk
[2010/10/18 19:11:42 | 000,005,632 | ---- | M] () -- C:\Users\Em\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/18 18:20:48 | 001,228,400 | ---- | M] (Adobe Systems Incorporated) -- C:\Users\Em\Photoshop_12_LS1.exe
[2010/10/18 18:20:42 | 1026,293,791 | ---- | M] () -- C:\Users\Em\Photoshop_12_LS1.7z
[2010/10/16 15:49:54 | 000,000,680 | ---- | M] () -- C:\Users\Em\AppData\Local\d3d9caps.dat
[2010/10/14 21:40:06 | 000,000,821 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2010/10/12 00:15:17 | 000,000,905 | ---- | M] () -- C:\Users\Em\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/10/12 00:03:44 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat
[2010/10/12 00:03:44 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat
[2010/10/09 14:28:41 | 000,125,647 | ---- | M] () -- C:\Windows\System32\03ff93df-4525-e8e8-2dd3-c2b75891d3de.exe
========== Files Created - No Company Name ==========
[2010/10/28 15:20:26 | 2137,042,944 | -HS- | C] () -- C:\hiberfil.sys
[2010/10/28 15:17:20 | 233,504,030 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2010/10/28 15:07:03 | 000,005,613 | ---- | C] () -- C:\Windows\System32\GnuHashes.ini
[2010/10/28 14:59:48 | 000,000,225 | -HS- | C] () -- C:\ProgramData\2056783096
[2010/10/28 14:59:19 | 000,154,624 | ---- | C] () -- C:\ProgramData\90831631c4
[2010/10/28 14:59:19 | 000,153,088 | ---- | C] () -- C:\ProgramData\90831631c1
[2010/10/28 14:59:19 | 000,145,408 | ---- | C] () -- C:\ProgramData\90831631c2
[2010/10/28 14:58:51 | 000,001,185 | ---- | C] () -- C:\ProgramData\1521627092
[2010/10/28 14:58:36 | 000,203,776 | -HS- | C] () -- C:\ProgramData\unrar.exe
[2010/10/28 14:58:29 | 000,178,176 | -HS- | C] () -- C:\Windows\lsass.exe
[2010/10/28 14:58:17 | 001,343,488 | ---- | C] () -- C:\ProgramData\IEAdvpack32.exe
[2010/10/28 14:58:14 | 001,343,488 | ---- | C] () -- C:\Windows\System32\KBDMACST32.exe
[2010/10/28 14:58:14 | 000,000,079 | ---- | C] () -- C:\Windows\System32\1348879327
[2010/10/27 20:48:50 | 000,000,663 | ---- | C] () -- C:\Users\Public\Desktop\FarmVilleBot Lite.lnk
[2010/10/27 20:48:50 | 000,000,638 | ---- | C] () -- C:\Users\Public\Desktop\FarmVilleBot.lnk
[2010/10/24 20:34:09 | 000,000,132 | ---- | C] () -- C:\Users\Em\AppData\Roaming\Adobe GIF Format CS5 Prefs
[2010/10/22 23:51:55 | 000,000,132 | ---- | C] () -- C:\Users\Em\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2010/10/18 22:02:50 | 000,000,962 | ---- | C] () -- C:\Users\Em\Desktop\Adobe Photoshop CS5.lnk
[2010/10/18 17:57:21 | 1026,293,791 | ---- | C] () -- C:\Users\Em\Photoshop_12_LS1.7z
[2010/10/15 03:15:42 | 000,001,940 | ---- | C] () -- C:\Users\Em\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
[2010/10/14 21:40:06 | 000,000,821 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2010/10/12 00:02:03 | 000,072,533 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2010/10/09 14:28:41 | 000,125,647 | ---- | C] () -- C:\Windows\System32\03ff93df-4525-e8e8-2dd3-c2b75891d3de.exe
[2010/10/08 23:40:44 | 000,815,104 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2010/10/08 23:40:44 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2010/10/08 23:40:44 | 000,077,824 | ---- | C] () -- C:\Windows\System32\xvid.ax
[2010/09/02 15:02:26 | 002,220,544 | ---- | C] () -- C:\Windows\System32\c5a029bc-5d31-284f-4677-64d3d01443b1.dll
[2010/03/02 15:09:14 | 000,000,680 | ---- | C] () -- C:\Users\Em\AppData\Local\d3d9caps.dat
[2010/02/10 18:08:16 | 000,000,120 | ---- | C] () -- C:\Users\Em\AppData\Local\Clawa.dat
[2010/02/10 18:08:16 | 000,000,000 | ---- | C] () -- C:\Users\Em\AppData\Local\Usoxofafahinalu.bin
[2010/02/10 18:05:29 | 000,004,286 | ---- | C] () -- C:\Users\Em\AppData\Roaming\avp.ico
[2010/01/26 15:15:46 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2010/01/20 19:53:05 | 000,002,614 | ---- | C] () -- C:\Users\Em\AppData\Roaming\wklnhst.dat
[2010/01/20 16:18:34 | 000,005,632 | ---- | C] () -- C:\Users\Em\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/08/03 16:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2008/12/03 07:30:44 | 001,953,696 | ---- | C] () -- C:\Windows\System32\igklg400.dll
[2008/12/03 07:30:44 | 001,533,360 | ---- | C] () -- C:\Windows\System32\igklg450.dll
[2008/12/03 07:30:44 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1409.dll
[2008/12/03 07:30:44 | 000,104,636 | ---- | C] () -- C:\Windows\System32\igmedcompkrn.dll
[2008/12/03 07:30:44 | 000,004,608 | ---- | C] () -- C:\Windows\System32\HdmiCoin.dll
[2008/12/03 07:30:41 | 000,016,480 | ---- | C] () -- C:\Windows\System32\rixdicon.dll
[2008/12/03 05:55:41 | 000,055,808 | ---- | C] () -- C:\Windows\System32\bcmwlrmt.dll
[2006/11/02 06:25:44 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2006/11/02 03:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
========== Custom Scans ==========
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[2008/07/03 09:42:04 | 000,055,808 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\bcmwlrmt.dll
[2009/04/11 02:27:47 | 000,241,128 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rsaenh.dll
[2009/04/11 02:28:23 | 000,228,352 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll
< %systemroot%\system32\*.exe /lockedfiles >
[2008/07/03 09:43:26 | 003,563,520 | ---- | M] (Dell Inc.) Unable to obtain MD5 -- C:\Windows\System32\WLTRAY.EXE
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
[2008/01/20 23:31:11 | 015,716,352 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2008/01/20 23:31:01 | 000,102,400 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2008/01/20 23:31:12 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 06:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 06:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV
< %systemroot%\system32\*.sys >
[2006/11/02 03:09:42 | 000,009,029 | ---- | M] () -- C:\Windows\System32\ANSI.SYS
[2009/04/11 02:32:46 | 000,245,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clfs.sys
[2006/11/02 03:09:45 | 000,027,097 | ---- | M] () -- C:\Windows\System32\country.sys
[2006/11/02 03:09:41 | 000,004,768 | ---- | M] () -- C:\Windows\System32\HIMEM.SYS
[2006/11/02 03:09:44 | 000,042,809 | ---- | M] () -- C:\Windows\System32\KEY01.SYS
[2006/11/02 03:09:44 | 000,042,537 | ---- | M] () -- C:\Windows\System32\KEYBOARD.SYS
[2006/11/02 03:09:29 | 000,027,866 | ---- | M] () -- C:\Windows\System32\NTDOS.SYS
[2006/11/02 03:09:35 | 000,029,146 | ---- | M] () -- C:\Windows\System32\NTDOS404.SYS
[2006/11/02 03:09:38 | 000,029,370 | ---- | M] () -- C:\Windows\System32\NTDOS411.SYS
[2006/11/02 03:09:40 | 000,029,274 | ---- | M] () -- C:\Windows\System32\NTDOS412.SYS
[2006/11/02 03:09:31 | 000,029,146 | ---- | M] () -- C:\Windows\System32\NTDOS804.SYS
[2006/11/02 03:09:20 | 000,033,952 | ---- | M] () -- C:\Windows\System32\NTIO.SYS
[2006/11/02 03:09:23 | 000,034,672 | ---- | M] () -- C:\Windows\System32\NTIO404.SYS
[2006/11/02 03:09:24 | 000,035,776 | ---- | M] () -- C:\Windows\System32\NTIO411.SYS
[2006/11/02 03:09:26 | 000,035,536 | ---- | M] () -- C:\Windows\System32\NTIO412.SYS
[2006/11/02 03:09:22 | 000,034,672 | ---- | M] () -- C:\Windows\System32\NTIO804.SYS
[2010/08/31 09:27:38 | 002,038,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
< %systemroot%\system32\drivers\*.dll >
< %systemroot%\system32\drivers\*.ini >
< %systemroot%\system32\drivers\*.exe >
[2008/06/23 08:45:42 | 000,386,560 | ---- | M] (Conexant Systems, Inc.) -- C:\Windows\System32\drivers\XAudio.exe
< %SYSTEMDRIVE%\*.* >
[2006/09/18 17:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
[2009/04/11 02:36:36 | 000,333,257 | RHS- | M] () -- C:\bootmgr
[2006/09/18 17:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys
[2008/12/03 07:30:56 | 000,003,690 | RH-- | M] () -- C:\dell.sdr
[2010/10/29 13:10:43 | 2137,042,944 | -HS- | M] () -- C:\hiberfil.sys
[2010/02/16 14:10:17 | 000,000,361 | -H-- | M] () -- C:\IPH.PH
[2010/10/29 13:10:42 | 2450,845,696 | -HS- | M] () -- C:\pagefile.sys
< %PROGRAMFILES%\*. >
[2010/10/18 18:44:16 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2010/10/18 18:41:23 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe Media Player
[2010/06/26 12:41:28 | 000,000,000 | ---D | M] -- C:\Program Files\America's Army
[2010/08/01 18:39:42 | 000,000,000 | ---D | M] -- C:\Program Files\Apple Software Update
[2010/03/15 08:45:48 | 000,000,000 | ---D | M] -- C:\Program Files\Ares
[2010/07/23 00:05:25 | 000,000,000 | ---D | M] -- C:\Program Files\Ask.com
[2010/10/16 15:17:36 | 000,000,000 | ---D | M] -- C:\Program Files\Barnes & Noble
[2010/08/01 18:35:53 | 000,000,000 | ---D | M] -- C:\Program Files\Bonjour
[2010/10/27 14:48:02 | 000,000,000 | ---D | M] -- C:\Program Files\Charles
[2008/12/03 05:56:11 | 000,000,000 | ---D | M] -- C:\Program Files\Cisco
[2008/12/03 06:11:48 | 000,000,000 | ---D | M] -- C:\Program Files\Citrix
[2010/10/30 22:51:30 | 000,000,000 | ---D | M] -- C:\Program Files\ClickPotatoLite
[2010/10/18 18:39:11 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2010/10/16 18:03:02 | 000,000,000 | ---D | M] -- C:\Program Files\Conduit
[2008/12/02 23:36:06 | 000,000,000 | ---D | M] -- C:\Program Files\CONEXANT
[2008/12/03 06:07:32 | 000,000,000 | ---D | M] -- C:\Program Files\CyberLink
[2008/12/03 06:15:14 | 000,000,000 | ---D | M] -- C:\Program Files\Dell
[2008/12/03 06:02:02 | 000,000,000 | ---D | M] -- C:\Program Files\Dell Support Center
[2008/12/03 07:30:32 | 000,000,000 | ---D | M] -- C:\Program Files\DellTPad
[2008/12/03 05:51:39 | 000,000,000 | ---D | M] -- C:\Program Files\Digital Line Detect
[2010/07/15 18:24:21 | 000,000,000 | ---D | M] -- C:\Program Files\DivX
[2010/10/11 23:59:42 | 000,000,000 | ---D | M] -- C:\Program Files\Feedback Tool
[2010/09/27 13:26:06 | 000,000,000 | ---D | M] -- C:\Program Files\FrostWire
[2010/10/16 15:19:42 | 000,000,000 | ---D | M] -- C:\Program Files\Google
[2010/06/26 18:51:18 | 000,000,000 | ---D | M] -- C:\Program Files\Incomplete
[2010/09/08 12:33:23 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2008/12/03 05:55:21 | 000,000,000 | ---D | M] -- C:\Program Files\Intel
[2010/10/12 00:09:50 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2010/08/01 18:47:43 | 000,000,000 | ---D | M] -- C:\Program Files\iPod
[2010/08/01 18:49:10 | 000,000,000 | ---D | M] -- C:\Program Files\iTunes
[2010/06/26 13:05:48 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2010/01/26 17:34:41 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft
[2006/11/02 08:35:51 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Games
[2008/12/03 06:07:35 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2010/08/12 03:05:20 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Works
[2010/06/29 11:28:02 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2008/12/03 05:50:52 | 000,000,000 | ---D | M] -- C:\Program Files\Modem Diagnostic Tool
[2010/08/14 15:58:42 | 000,000,000 | ---D | M] -- C:\Program Files\Movie Maker
[2010/07/09 18:20:46 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2006/11/02 08:35:51 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2010/09/08 12:10:20 | 000,000,000 | ---D | M] -- C:\Program Files\NETGEAR
[2008/12/03 05:51:16 | 000,000,000 | ---D | M] -- C:\Program Files\NetWaiting
[2010/03/14 01:32:16 | 000,000,000 | ---D | M] -- C:\Program Files\Norton AntiVirus
[2010/01/22 18:52:17 | 000,000,000 | ---D | M] -- C:\Program Files\Norton Security Scan
[2010/03/13 21:04:57 | 000,000,000 | ---D | M] -- C:\Program Files\NortonInstaller
[2010/10/19 15:26:23 | 000,000,000 | ---D | M] -- C:\Program Files\OpinionSquare
[2010/07/21 19:15:48 | 000,000,000 | ---D | M] -- C:\Program Files\PokerStars
[2010/08/01 18:44:30 | 000,000,000 | ---D | M] -- C:\Program Files\QuickTime
[2006/11/02 08:35:51 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2008/12/03 06:11:36 | 000,000,000 | ---D | M] -- C:\Program Files\Roxio
[2008/12/02 23:35:54 | 000,000,000 | ---D | M] -- C:\Program Files\Sigmatel
[2010/10/20 08:04:32 | 000,000,000 | ---D | M] -- C:\Program Files\Symantec
[2006/11/02 08:58:18 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2010/10/14 21:39:47 | 000,000,000 | ---D | M] -- C:\Program Files\VideoLAN
[2010/10/17 11:58:37 | 000,000,000 | ---D | M] -- C:\Program Files\WhiteSmoke
[2010/08/14 15:58:43 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Calendar
[2010/08/14 15:58:39 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Collaboration
[2010/08/14 15:58:32 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Defender
[2010/01/26 17:34:36 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live
[2010/01/26 17:34:22 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live SkyDrive
[2010/09/16 03:18:42 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Mail
[2010/10/15 03:21:54 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2006/11/02 08:35:51 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2010/08/14 15:58:37 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Photo Gallery
[2010/08/16 03:20:33 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Portable Devices
[2010/08/14 15:58:41 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar
[2010/10/27 20:41:36 | 000,000,000 | ---D | M] -- C:\Program Files\WinRAR
[2010/10/30 22:52:06 | 000,000,000 | ---D | M] -- C:\Program Files\Xvid
[2010/10/16 18:03:02 | 000,000,000 | ---D | M] -- C:\Program Files\Zynga
< %appdata%\*.* >
[2010/10/24 22:38:56 | 000,000,132 | ---- | M] () -- C:\Users\Em\AppData\Roaming\Adobe GIF Format CS5 Prefs
[2010/10/26 11:54:06 | 000,000,132 | ---- | M] () -- C:\Users\Em\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2010/02/10 18:05:30 | 000,004,286 | ---- | M] () -- C:\Users\Em\AppData\Roaming\avp.ico
[2010/10/30 21:54:13 | 000,002,614 | ---- | M] () -- C:\Users\Em\AppData\Roaming\wklnhst.dat
< MD5 for: AGP440.SYS >
[2008/01/20 22:32:22 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\drivers\AGP440.sys
[2008/01/20 22:32:22 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys
[2008/01/20 22:32:22 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008/01/20 22:32:22 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008/01/20 22:32:22 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2006/11/02 05:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys
< MD5 for: ATAPI.SYS >
[2008/12/03 07:16:14 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=0D83C87A801A3DFCD1BF73893FE7518C -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_4c9c5a00\atapi.sys
[2008/12/03 07:16:14 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=0D83C87A801A3DFCD1BF73893FE7518C -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18034_none_dd1bb97e219e87cb\atapi.sys
[2009/04/11 02:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys
[2009/04/11 02:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009/04/11 02:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008/01/20 22:32:21 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008/01/20 22:32:21 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006/11/02 05:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
[2008/12/03 07:16:14 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=96DC4E1A9F90CCD489950A8935425C59 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.22134_none_dda556493abc2795\atapi.sys
< MD5 for: CNGAUDIT.DLL >
[2006/11/02 05:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll
[2006/11/02 05:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
< MD5 for: DISK.SYS >
[2009/04/11 02:32:31 | 000,053,736 | ---- | M] (Microsoft Corporation) MD5=5D4AEFC3386920236A548271F8F1AF6A -- C:\Windows\System32\drivers\disk.sys
[2009/04/11 02:32:31 | 000,053,736 | ---- | M] (Microsoft Corporation) MD5=5D4AEFC3386920236A548271F8F1AF6A -- C:\Windows\System32\DriverStore\FileRepository\disk.inf_5c850fad\disk.sys
[2009/04/11 02:32:31 | 000,053,736 | ---- | M] (Microsoft Corporation) MD5=5D4AEFC3386920236A548271F8F1AF6A -- C:\Windows\winsxs\x86_disk.inf_31bf3856ad364e35_6.0.6002.18005_none_fbb1faf0714e4ea6\disk.sys
[2008/01/20 22:32:45 | 000,055,352 | ---- | M] (Microsoft Corporation) MD5=64109E623ABD6955C8FB110B592E68B7 -- C:\Windows\System32\DriverStore\FileRepository\disk.inf_90722180\disk.sys
[2008/01/20 22:32:45 | 000,055,352 | ---- | M] (Microsoft Corporation) MD5=64109E623ABD6955C8FB110B592E68B7 -- C:\Windows\winsxs\x86_disk.inf_31bf3856ad364e35_6.0.6001.18000_none_f9c681e4742c835a\disk.sys
[2006/11/02 05:49:51 | 000,052,840 | ---- | M] (Microsoft Corporation) MD5=841AF4C4D41D3E3B2F244E976B0F7963 -- C:\Windows\System32\DriverStore\FileRepository\disk.inf_e0b0b355\disk.sys
< MD5 for: IASTOR.SYS >
[2007/09/06 12:43:26 | 000,304,920 | ---- | M] (Intel Corporation) MD5=997E8F5939F2D12CD9F2E6B395724C16 -- C:\Drivers\storage\R166200\iastor.sys
[2007/03/21 14:58:56 | 000,304,920 | ---- | M] (Intel Corporation) MD5=997E8F5939F2D12CD9F2E6B395724C16 -- C:\Program Files\Intel\Intel Matrix Storage Manager\Driver\IaStor.sys
[2007/09/06 12:43:26 | 000,304,920 | ---- | M] (Intel Corporation) MD5=997E8F5939F2D12CD9F2E6B395724C16 -- C:\Windows\System32\drivers\iaStor.sys
[2007/09/06 12:43:26 | 000,304,920 | ---- | M] (Intel Corporation) MD5=997E8F5939F2D12CD9F2E6B395724C16 -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_3a63e5a6\iaStor.sys
[2007/09/06 12:43:26 | 000,304,920 | ---- | M] (Intel Corporation) MD5=997E8F5939F2D12CD9F2E6B395724C16 -- C:\Windows\System32\DriverStore\FileRepository\iastor.inf_5f6e7be5\iaStor.sys
[2007/03/21 14:59:30 | 000,381,720 | ---- | M] (Intel Corporation) MD5=9D7ED4275702E2FC409F2CC563245740 -- C:\Program Files\Intel\Intel Matrix Storage Manager\Driver64\IaStor.sys
< MD5 for: IASTORV.SYS >
[2008/01/20 22:32:49 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\drivers\iaStorV.sys
[2008/01/20 22:32:49 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008/01/20 22:32:49 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2006/11/02 05:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys
< MD5 for: NETLOGON.DLL >
[2009/04/11 02:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll
[2009/04/11 02:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008/01/20 22:33:41 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll
< MD5 for: NVSTOR.SYS >
[2006/11/02 05:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008/01/20 22:32:47 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\drivers\nvstor.sys
[2008/01/20 22:32:47 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008/01/20 22:32:47 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys
< MD5 for: SCECLI.DLL >
[2008/01/20 22:34:39 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2009/04/11 02:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll
[2009/04/11 02:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll
< MD5 for: USBSTOR.SYS >
[2008/01/20 22:32:50 | 000,055,296 | ---- | M] (Microsoft Corporation) MD5=87BA6B83C5D19B69160968D07D6E2982 -- C:\Windows\System32\DriverStore\FileRepository\usbstor.inf_b9f18584\USBSTOR.SYS
[2008/01/20 22:32:50 | 000,055,296 | ---- | M] (Microsoft Corporation) MD5=87BA6B83C5D19B69160968D07D6E2982 -- C:\Windows\winsxs\x86_usbstor.inf_31bf3856ad364e35_6.0.6001.18000_none_48864eb697d31b43\USBSTOR.SYS
[2009/04/11 00:42:55 | 000,065,536 | ---- | M] (Microsoft Corporation) MD5=BE3DA31C191BC222D9AD503C5224F2AD -- C:\Windows\System32\drivers\USBSTOR.SYS
[2009/04/11 00:42:55 | 000,065,536 | ---- | M] (Microsoft Corporation) MD5=BE3DA31C191BC222D9AD503C5224F2AD -- C:\Windows\System32\DriverStore\FileRepository\usbstor.inf_72a6a3e5\USBSTOR.SYS
[2009/04/11 00:42:55 | 000,065,536 | ---- | M] (Microsoft Corporation) MD5=BE3DA31C191BC222D9AD503C5224F2AD -- C:\Windows\winsxs\x86_usbstor.inf_31bf3856ad364e35_6.0.6002.18005_none_4a71c7c294f4e68f\USBSTOR.SYS
[2006/11/02 04:55:05 | 000,054,784 | ---- | M] (Microsoft Corporation) MD5=FDBAABF07244C60B0F4E0A6E71A107C6 -- C:\Windows\System32\DriverStore\FileRepository\usbstor.inf_bb2778a0\USBSTOR.SYS
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-10-28 07:01:55
< End of report >