~ Relatório do ZHPDiag v2015.3.8.28 - Nicolas Coolman (8/3/2015) ~ Iniciado por Lucifer (18/3/2015 23:33:23) ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ Endereço do Webforum : http://forum.nicolascoolman.fr ~ Tradução pelo utilizador ~ Estatuto da versão : Versão atualizada. ~ Lista Branca : Desativado pelo Utilizador ~ Elevação dos Privilégios : OK ~ Controle de Conta de Utilizador : Not Found ---\\ Navegadores Internet MSIE: Internet Explorer v8.0.6001.18702 MFIE: Mozilla Firefox 36.0.1 (Defaut) ---\\ Informações sobre os produtos Windows ~ Langage: Portugais Windows Automatic Updates : OK Windows Genuine Advantage : OK Microsoft Windows XP, 32-bit Service Pack 3 (Build 2600) ---\\ Softwares de proteçao do sistema Malwarebytes Anti-Malware versão 2.0.4.1028 ---\\ Softwares d'optimização do sistema CCleaner v5.03 ---\\ Softwares de partilha do PeerToPeer (P2P) ---\\ Monitoramento dos softwares Adobe Flash Player 16 NPAPI ---\\ Informações sobre o sistema ~ Processor: x86 Family 15 Model 4 Stepping 1, GenuineIntel ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 959 MB (55% free) System Restore: Activé (Enable) System drive C: has 23 GB (62%) free of 37 GB ---\\ Modo de conexão ao sistema ~ Computer Name: LUCIFERR ~ User Name: Lucifer ~ All Users Names: SUPPORT_388945a0, Lucifer, HelpAssistant, Guest, ASPNET, Administrator, ~ Unselected Option: None Logged in as Administrator ---\\ As variáveis de ambiente ~ System Unit : C:\ ~ %AppZHP% : C:\Documents and Settings\Lucifer\Application Data\ZHP\ ~ %AppData% : C:\Documents and Settings\Lucifer\Application Data\ ~ %Desktop% : C:\Documents and Settings\Lucifer\Desktop\ ~ %Favorites% : C:\Documents and Settings\Lucifer\Favorites\ ~ %LocalAppData% : C:\Documents and Settings\Lucifer\Local Settings\Application Data\ ~ %StartMenu% : C:\Documents and Settings\Lucifer\Start Menu\ ~ %Windir% : C:\WINDOWS\ ~ %System% : C:\WINDOWS\system32\ ---\\ Enumeração das unidades dos discos A: Floppy drive, Flash card reader, USB Key (Not Inserted) C: Hard drive, Flash drive, Thumb drive (Free 23 Go of 37 Go) D: CD-ROM drive (Not Inserted) ---\\ Estado do Centro de Segurança do Windows [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK ~ Security Center: 43 Scanned in 00mn 00s ---\\ Pesquisa particular de ficheiros genéricos [MD5.2BB75B7F548D82A099125D0C5971DE7D] - (.Microsoft Corporation - Windows Explorer.) (.7/3/2015 - 08:37:18.) -- C:\WINDOWS\Explorer.exe [1033728] [MD5.8AF91E4B4C1F5338EBE1548117304296] - (.Microsoft Corporation - Internet Extensions for Win32.) (.7/3/2015 - 08:44:50.) -- C:\WINDOWS\system32\wininet.dll [920064] [MD5.4A83111AA75D8A26AB0EABC03CFC95E0] - (.Microsoft Corporation - Windows NT Logon Application.) (.7/3/2015 - 08:44:50.) -- C:\WINDOWS\system32\Winlogon.exe [509440] [MD5.F6B7B1ECD7B41736BDB6FF4B092BCB79] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.7/3/2015 - 08:34:28.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496] [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.7/3/2015 - 08:34:46.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512] [MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.7/3/2015 - 08:35:20.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744] [MD5.4B0A100EAF5C49EF3CCA8C641431EACC] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2/5/2008 - 10:49:40.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976] [MD5.D45926117EB9FA946A6AF572FBE1CAA3] - (.Microsoft Corporation - FIPS Crypto Driver.) (.7/3/2015 - 08:37:22.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44544] [MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.7/3/2015 - 08:37:38.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384] [MD5.4A0B06AA8943C1E332520F7440C0AA30] - (.Microsoft Corporation - i8042 Port Driver.) (.7/3/2015 - 08:37:46.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [52480] [MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/4/2008 - 21:11:00.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112] [MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.7/3/2015 - 08:38:02.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832] [MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.7/3/2015 - 08:38:04.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264] [MD5.FB2FCCC70F7174C7BF64F48E96D3ADF4] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.7/3/2015 - 08:39:46.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [457856] [MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.7/3/2015 - 08:40:36.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816] [MD5.4C51D5275AE8A16999EDFE7E647D00DE] - (.Microsoft Corporation - NT File System Driver.) (.7/3/2015 - 08:40:56.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [576384] [MD5.5575FAF8F97CE5E713D108C2A58D7C7C] - (.Microsoft Corporation - Parallel Port Driver.) (.14/1/2015 - 00:42:46.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80128] [MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.7/3/2015 - 08:41:46.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328] [MD5.47EA20320E3D6FDC7B7BB22B2B881CA6] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.4/9/2009 - 16:43:46.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [195712] [MD5.F828DD7E1419B6653894A8F97A0094C5] - (.Microsoft Corporation - Redbook Audio Filter Driver.) (.13/4/2008 - 21:10:28.) -- C:\WINDOWS\system32\Drivers\redbook.sys [57600] [MD5.4C8FCB5CC53AAB716D810740FE59D025] - (.Microsoft Corporation - Volume Shadow Copy Driver.) (.7/3/2015 - 08:44:08.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [52352] ~ Generic Processes: Scanned in 00mn 00s ---\\ Estatuto dos ficheiros ocultos (Oculto/Total) ~ Mes images (My Pictures) : 1/6 ~ Mes musiques (My Musics) : 1/2 ~ Mes Favoris (My Favorites) : 1/10 ~ Mes Documents (My Documents) : 1/96 ~ Mon Bureau (My Desktop) : 0/113 ~ Menu demarrer (Programs) : 1/35 ~ Hidden Files: Scanned in 00mn 00s ---\\ Processos lançados [MD5.80FD4D46B0E9B620CF757A9A5C789329] - (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\SOUNDMAN.exe [577536] [PID.1972] [MD5.530D1545E2DA3BCB1BB68457BC75A9AD] - (.S3 Graphics Co., Ltd. - s3contrl (32-bit).) -- C:\WINDOWS\system32\VTtrayp.exe [199168] [PID.1980] [MD5.AB4177025353ED30A67F1B4D9806F6C0] - (.S3 Graphics, Inc. - No Comment.) -- C:\WINDOWS\system32\VTTimer.exe [94208] [PID.1988] [MD5.2B24F194FC5B657397ECB2923A68350E] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [5503768] [PID.2000] [MD5.F51D682701B303ED6CC5474CE5FA5AAA] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [376944] [PID.1088] [MD5.7799D7A7F1E8DA3AE35C9FA828C32995] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [264816] [PID.1700] [MD5.6B7BE218304D5DCCCBFFAE29F31F5AE7] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8184832] [PID.1508] ~ Processes Running: Scanned in 00mn 00s ---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (P2,M0,M1,M2,M3) M0 - MFSP: prefs.js [Lucifer - 27a52nmd.default] http://www.google.com P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ~ Firefox Browser: 2 Scanned in 00mn 00s ---\\ Internet Explorer, Arranque, Pesquisa, URLSearchHook( gancho de URL), Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://www.google.com R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (...) (No version) -- (.not file.) R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2 ~ IE Browser: 18 Scanned in 00mn 00s ---\\ Internet Explorer, Gestão do Proxy (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ~ Keys: Scanned in 00mn 00s ---\\ Redireção do ficheiro Hosts (01) ~ Le fichier hôte est sain (The hosts file is clean) (19) ~ Hosts File: Scanned in 00mn 00s ---\\ Browser Helper Objects do navegador (02) O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} . (.Orbitdownloader.com - Orbitcth.) -- C:\Program Files\Orbitdownloader\orbitcth.dll O2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} . (.FreeDownloadManager.ORG - No Comment.) -- C:\Program Files\Free Download Manager\iefdm2.dll ~ BHO: 4 Scanned in 00mn 00s ---\\ Aplicações iniciadas por registo & pastas (04) O4 - HKLM\..\Run: [SoundMan] . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\SOUNDMAN.exe O4 - HKLM\..\Run: [VTTrayp] . (.S3 Graphics Co., Ltd. - s3contrl (32-bit).) -- C:\WINDOWS\system32\VTtrayp.exe O4 - HKLM\..\Run: [VTTimer] . (.S3 Graphics, Inc. - No Comment.) -- C:\WINDOWS\system32\VTTimer.exe O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-21-1417001333-823518204-842925246-1003\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd ~ Application: Scanned in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll ~ Winsock: 3 Scanned in 00mn 00s ---\\ Piratagem da Opção " Redefinir Configurações da Web " (014) O14 - IERESET.INF: SAFESITE_VALUE=SAFESITE_VALUE="ie.search.msn.com" ~ IE Paramètres WEB: Scanned in 00mn 00s ---\\ Alteração Dominio/Clientes DNS (017) O17 - HKLM\System\CCS\Services\Tcpip\..\{08442686-4CC0-418C-9D9E-A5DD55C2DF74}: DhcpNameServer = 186.232.210.100 186.232.214.4 O17 - HKLM\System\CS1\Services\Tcpip\..\{08442686-4CC0-418C-9D9E-A5DD55C2DF74}: DhcpNameServer = 186.232.210.100 186.232.214.4 O17 - HKLM\System\CS2\Services\Tcpip\..\{08442686-4CC0-418C-9D9E-A5DD55C2DF74}: DhcpNameServer = 186.232.210.100 186.232.214.4 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 186.232.210.100 186.232.214.4 ~ Domain: Scanned in 00mn 00s ---\\ Protocolo adicional (018) O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Offline Network Agent.) -- C:\WINDOWS\system32\cscdll.dll O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - Secondary Logon Service Notification DLL.) -- C:\WINDOWS\system32\sclgntfy.dll O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\WlNotify.dll O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll ~ Winlogon: Scanned in 00mn 00s ---\\ Chave do Registo autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\shell32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Systray shell service object.) -- C:\WINDOWS\system32\stobject.dll ~ SSODL: 4 Scanned in 00mn 00s ---\\ Enumeração Ativa do Ambiente de trabalho & Editor MHTML (024) O24 - Desktop Component 0: My Current Home Page - file:About:Home O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Desktop Component: 4 Scanned in 00mn 00s ---\\ Listagem dos dados do BootExecute (Bex) (034) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ BEX: 1 Scanned in 00mn 00s ---\\ Tarefas planificadas automaticamente (039) [MD5.080255CDCB878813B481B8C348D47D8E] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [267440] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [902] ~ Scheduled Task: 2 Scanned in 00mn 00s ---\\ Componentes instalados (ActiveSetup Installed Components) (040) O40 - ASIC: Internet Explorer Version Update - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Microsoft Windows Media Player Setup Utility.) -- C:\WINDOWS\inf\unregmp2.exe =>.Microsoft Corporation O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe.mui O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe =>.Microsoft Corporation O40 - ASIC: Windows Desktop Update - >{99820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\shell32.dll O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (...) -- C:\WINDOWS\system32\msdxm.ocx O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (...) -- C:\WINDOWS\system32\msdxm.ocx =>.Microsoft Corporation O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} . (.Microsoft Corporation - DirectX Media -- DirectAnimation.) -- C:\WINDOWS\system32\danim.dll O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - Windows Theme API.) -- C:\WINDOWS\system32\themeui.dll O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Outlook Express Setup Library.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Microsoft Internet Explorer FTP Folder Shell Extension.) -- C:\WINDOWS\system32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf =>.Microsoft Corporation O40 - ASIC: Address Book 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Outlook Express Setup Library.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\shell32.dll O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe.mui O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- c:\WINDOWS\system32\mscories.dll O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 16.0 r0.) -- C:\WINDOWS\system32\Macromed\Flash\Flash32_16_0_0_305.ocx O40 - ASIC: Installed Component - S-1-5-21-1417001333-823518204-842925246-1003 - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} -- Not Hexadécimal CLSID O40 - ASIC: Installed Component - S-1-5-21-1417001333-823518204-842925246-1003 - >{X9B49E34-C7CC-11D0-8953-00A0C90347FF} -- Not Hexadécimal CLSID ~ Active Setup: 21 Scanned in 00mn 00s ---\\ Drivers lançados ao arranque do sistema (041) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - i8042 Port Driver.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys O41 - Driver: (intelppm) . (.Microsoft Corporation - Processor Device Driver.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Keyboard Class Driver.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - HID Mouse Filter Driver.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys O41 - Driver: (Mouclass) . (.Microsoft Corporation - Mouse Class Driver.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys O41 - Driver: (redbook) . (.Microsoft Corporation - Redbook Audio Filter Driver.) - C:\WINDOWS\system32\DRIVERS\redbook.sys O41 - Driver: (Serial) . (.Microsoft Corporation - Serial Device Driver.) - C:\WINDOWS\system32\DRIVERS\serial.sys O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys O41 - Driver: Windows Socket 2.0 Non-IFS Service Provider Support Environment (WS2IFSL) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\WINDOWS\system32\drivers\ws2ifsl.sys ~ Drivers: 63 Scanned in 00mn 00s ---\\ Software instalados (042) O42 - Logiciel: Adobe Flash Player 16 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 16 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: DriverEasy 4.2.0 - (.Easeware.) [HKLM] -- DriverEasy_is1 O42 - Logiciel: Free Download Manager 3.9.4 - (.FreeDownloadManager.ORG.) [HKLM] -- Free Download Manager_is1 O42 - Logiciel: JetBoost - (.BlueSprig.) [HKLM] -- JetBoost_is1 O42 - Logiciel: MPC-HC 1.7.8 - (.MPC-HC Team.) [HKLM] -- {2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1 O42 - Logiciel: Malwarebytes Anti-Malware versão 2.0.4.1028 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1 O42 - Logiciel: Mozilla Firefox 36.0.1 (x86 pt-BR) - (.Mozilla.) [HKLM] -- Mozilla Firefox 36.0.1 (x86 pt-BR) O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService O42 - Logiciel: Priston Tale 2 version 1.1.1 - (.priston 2.) [HKLM] -- {AE0FE7EB-B148-421C-9E94-D78FEC90D3D4}_is1 O42 - Logiciel: RamBooster - (.RamBooster.) [HKLM] -- {ADE3CACC-EC31-480C-83A0-587EE60CE8DF} O42 - Logiciel: Realtek AC'97 Audio - (.Realtek Semiconductor Corp..) [HKLM] -- {FB08F381-6533-4108-B7DD-039E11FBC27E} O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: SpeedFan (remove only) - (...) [HKLM] -- SpeedFan O42 - Logiciel: VIA Rhine-Family Fast-Ethernet Adapter - (...) [HKLM] -- VN_VUIns_Rhine_VIA O42 - Logiciel: VIA/S3G UniChrome Family Win2K/XP/Server2003 Display - (...) [HKLM] -- UChromeP O42 - Logiciel: WinRAR 5.21 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver ~ Logic: 43 Scanned in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\AdsFix] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\FreeDownloadManager.ORG] [HKCU\Software\Intel] [HKCU\Software\MPC-HC] [HKCU\Software\Macromedia] [HKCU\Software\Mozilla] [HKCU\Software\NTechnologies] [HKCU\Software\Netscape] [HKCU\Software\Orbit] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\S3] [HKCU\Software\SpeedFan] [HKCU\Software\Sysinternals] [HKCU\Software\Trolltech] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\Yedang Online] [HKCU\Software\ZebHelpProcess Helper] [HKLM\Software\AdsFix] [HKLM\Software\AdwCleaner] [HKLM\Software\C07ft5Y] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\FreeDownloadManager.ORG] [HKLM\Software\Gemplus] [HKLM\Software\Google] [HKLM\Software\Intel] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\MegaJogos] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\ODBC] [HKLM\Software\Orbit] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Program Groups] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\S3] [HKLM\Software\Schlumberger] [HKLM\Software\Secure] [HKLM\Software\Swearware] [HKLM\Software\Sysinternals] [HKLM\Software\TrendMicro] [HKLM\Software\VIA Technologies, Inc.] [HKLM\Software\VN_VUIns] [HKLM\Software\WinRAR] [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\Yedang Online] [HKLM\Software\mozilla.org] ~ Key Software: 118 Scanned in 00mn 00s ---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 13/3/2015 - 16:49:20 - [] ----D C:\Program Files\BlueSprig O43 - CFD: 18/3/2015 - 23:25:00 - [] ----D C:\Program Files\CCleaner O43 - CFD: 10/3/2015 - 17:00:08 - [] ----D C:\Program Files\Common Files O43 - CFD: 18/3/2015 - 17:16:54 - [] ----D C:\Program Files\Easeware O43 - CFD: 20/3/2015 - 15:45:58 - [] ----D C:\Program Files\Free Download Manager O43 - CFD: 31/3/2015 - 17:04:40 - [] --H-D C:\Program Files\InstallShield Installation Information O43 - CFD: 7/3/2015 - 22:00:07 - [] ----D C:\Program Files\Internet Explorer O43 - CFD: 20/3/2015 - 15:56:13 - [] ----D C:\Program Files\Malwarebytes Anti-Malware O43 - CFD: 7/3/2015 - 18:51:30 - [] ----D C:\Program Files\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 7/3/2015 - 18:52:27 - [] ----D C:\Program Files\microsoft frontpage O43 - CFD: 18/3/2015 - 17:12:11 - [] ----D C:\Program Files\Microsoft.NET O43 - CFD: 7/3/2015 - 18:49:18 - [] ----D C:\Program Files\Movie Maker O43 - CFD: 7/3/2015 - 23:08:21 - [] ----D C:\Program Files\Mozilla Firefox O43 - CFD: 7/3/2015 - 23:08:20 - [] ----D C:\Program Files\Mozilla Maintenance Service O43 - CFD: 9/3/2015 - 02:04:46 - [] ----D C:\Program Files\MPC-HC O43 - CFD: 7/3/2015 - 18:47:26 - [] ----D C:\Program Files\MSN Gaming Zone O43 - CFD: 7/3/2015 - 18:49:24 - [] ----D C:\Program Files\NetMeeting O43 - CFD: 7/3/2015 - 18:49:47 - [] ----D C:\Program Files\Online Services O43 - CFD: 20/3/2015 - 04:51:01 - [] ----D C:\Program Files\Orbitdownloader O43 - CFD: 7/3/2015 - 18:49:24 - [] ----D C:\Program Files\Outlook Express =>.Microsoft Corporation O43 - CFD: 7/3/2015 - 22:36:54 - [] ----D C:\Program Files\Priston Tale 2 O43 - CFD: 10/3/2015 - 15:46:47 - [] ----D C:\Program Files\RamBooster 2.0 O43 - CFD: 9/3/2015 - 12:50:32 - [] ----D C:\Program Files\Realtek AC97 O43 - CFD: 20/3/2015 - 15:42:41 - [0] ----D C:\Program Files\ReviverSoft O43 - CFD: 31/3/2015 - 17:05:26 - [] ----D C:\Program Files\S3 O43 - CFD: 9/3/2015 - 20:58:30 - [] ----D C:\Program Files\SpeedFan O43 - CFD: 7/3/2015 - 13:58:54 - [0] --H-D C:\Program Files\Uninstall Information O43 - CFD: 18/3/2015 - 17:02:25 - [] ----D C:\Program Files\VIA Technologies, Inc O43 - CFD: 7/3/2015 - 18:52:01 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation O43 - CFD: 7/3/2015 - 18:47:23 - [] ----D C:\Program Files\Windows NT O43 - CFD: 7/3/2015 - 22:14:56 - [] ----D C:\Program Files\WinRAR O43 - CFD: 7/3/2015 - 18:52:27 - [] ----D C:\Program Files\xerox O43 - CFD: 25/3/2015 - 16:41:12 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman O43 - CFD: 10/3/2015 - 15:46:15 - [] ----D C:\Program Files\Common Files\InstallShield O43 - CFD: 7/3/2015 - 22:00:11 - [] ----D C:\Program Files\Common Files\Microsoft Shared O43 - CFD: 7/3/2015 - 18:49:23 - [] ----D C:\Program Files\Common Files\MSSoap O43 - CFD: 7/3/2015 - 10:39:24 - [] ----D C:\Program Files\Common Files\ODBC O43 - CFD: 7/3/2015 - 18:49:24 - [] ----D C:\Program Files\Common Files\Services O43 - CFD: 7/3/2015 - 10:39:22 - [] ----D C:\Program Files\Common Files\SpeechEngines O43 - CFD: 7/3/2015 - 18:49:09 - [] ----D C:\Program Files\Common Files\System O43 - CFD: 13/3/2015 - 16:49:23 - [] ----D C:\Documents and Settings\All Users\Application Data\BlueSprig O43 - CFD: 20/3/2015 - 00:27:43 - [] ----D C:\Documents and Settings\All Users\Application Data\Free Download Manager O43 - CFD: 20/3/2015 - 15:55:59 - [] ----D C:\Documents and Settings\All Users\Application Data\Malwarebytes O43 - CFD: 9/3/2015 - 23:14:55 - [] -S--D C:\Documents and Settings\All Users\Application Data\Microsoft O43 - CFD: 7/3/2015 - 23:08:19 - [] ----D C:\Documents and Settings\All Users\Application Data\Mozilla O43 - CFD: 13/3/2015 - 16:39:12 - [] ----D C:\Documents and Settings\All Users\Application Data\ReviverSoft O43 - CFD: 9/3/2015 - 23:14:45 - [] R---D C:\Documents and Settings\All Users\Start Menu\Programs\Accessories O43 - CFD: 7/3/2015 - 18:52:09 - [] R---D C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools O43 - CFD: 18/3/2015 - 23:24:59 - [] ----D C:\Documents and Settings\All Users\Start Menu\Programs\CCleaner O43 - CFD: 20/3/2015 - 00:26:46 - [] ----D C:\Documents and Settings\All Users\Start Menu\Programs\Free Download Manager O43 - CFD: 7/3/2015 - 18:48:05 - [] R---D C:\Documents and Settings\All Users\Start Menu\Programs\Games O43 - CFD: 13/3/2015 - 16:49:24 - [] ----D C:\Documents and Settings\All Users\Start Menu\Programs\JetBoost O43 - CFD: 20/3/2015 - 02:06:01 - [] ----D C:\Documents and Settings\All Users\Start Menu\Programs\Lightshot O43 - CFD: 20/3/2015 - 15:56:17 - [] ----D C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes Anti-Malware O43 - CFD: 9/3/2015 - 02:04:46 - [] ----D C:\Documents and Settings\All Users\Start Menu\Programs\MPC-HC O43 - CFD: 20/3/2015 - 04:51:01 - [] ----D C:\Documents and Settings\All Users\Start Menu\Programs\Orbit O43 - CFD: 7/3/2015 - 14:18:53 - [] ----D C:\Documents and Settings\All Users\Start Menu\Programs\Priston Tale 2 O43 - CFD: 18/3/2015 - 23:27:58 - [] R---D C:\Documents and Settings\All Users\Start Menu\Programs\Startup O43 - CFD: 7/3/2015 - 22:14:56 - [] ----D C:\Documents and Settings\All Users\Start Menu\Programs\WinRAR O43 - CFD: 25/3/2015 - 16:39:28 - [] ----D C:\Documents and Settings\All Users\Start Menu\Programs\ZHP =>.Nicolas Coolman O43 - CFD: 7/3/2015 - 14:00:32 - [] ----D C:\Documents and Settings\Lucifer\Application Data\Adobe O43 - CFD: 7/3/2015 - 22:05:25 - [] ----D C:\Documents and Settings\Lucifer\Application Data\Easeware O43 - CFD: 18/3/2015 - 23:29:36 - [] ----D C:\Documents and Settings\Lucifer\Application Data\Free Download Manager O43 - CFD: 7/3/2015 - 13:58:57 - [] ----D C:\Documents and Settings\Lucifer\Application Data\Identities O43 - CFD: 7/3/2015 - 14:00:41 - [] ----D C:\Documents and Settings\Lucifer\Application Data\Macromedia O43 - CFD: 10/3/2015 - 15:46:49 - [] -S--D C:\Documents and Settings\Lucifer\Application Data\Microsoft O43 - CFD: 7/3/2015 - 23:08:28 - [] ----D C:\Documents and Settings\Lucifer\Application Data\Mozilla O43 - CFD: 9/3/2015 - 02:08:44 - [] ----D C:\Documents and Settings\Lucifer\Application Data\MPC-HC O43 - CFD: 18/3/2015 - 23:30:25 - [] ----D C:\Documents and Settings\Lucifer\Application Data\Orbit O43 - CFD: 7/3/2015 - 22:15:39 - [] ----D C:\Documents and Settings\Lucifer\Application Data\WinRAR O43 - CFD: 18/3/2015 - 23:33:32 - [] ----D C:\Documents and Settings\Lucifer\Application Data\ZHP =>.Nicolas Coolman O43 - CFD: 9/3/2015 - 09:30:22 - [] ----D C:\Documents and Settings\Lucifer\Local Settings\Application Data\Identities O43 - CFD: 7/3/2015 - 13:59:15 - [] -S--D C:\Documents and Settings\Lucifer\Local Settings\Application Data\Microsoft O43 - CFD: 7/3/2015 - 23:08:28 - [] ----D C:\Documents and Settings\Lucifer\Local Settings\Application Data\Mozilla O43 - CFD: 7/3/2015 - 18:52:08 - [] R---D C:\WINDOWS\system32\Config\systemprofile\Start Menu\Programs\Accessories O43 - CFD: 7/3/2015 - 10:39:07 - [] R---D C:\WINDOWS\system32\Config\systemprofile\Start Menu\Programs\Startup O43 - CFD: 7/3/2015 - 13:59:09 - [] R---D C:\Documents and Settings\Lucifer\Start Menu\Programs\Accessories O43 - CFD: 10/3/2015 - 16:19:18 - [] R---D C:\Documents and Settings\Lucifer\Start Menu\Programs\Administrative Tools O43 - CFD: 9/3/2015 - 08:09:38 - [] ----D C:\Documents and Settings\Lucifer\Start Menu\Programs\MegaJogos O43 - CFD: 18/3/2015 - 18:09:41 - [] ----D C:\Documents and Settings\Lucifer\Start Menu\Programs\SpeedFan O43 - CFD: 20/3/2015 - 04:51:16 - [] R---D C:\Documents and Settings\Lucifer\Start Menu\Programs\Startup O43 - CFD: 7/3/2015 - 22:14:56 - [] ----D C:\Documents and Settings\Lucifer\Start Menu\Programs\WinRAR ~ Program Folder: 82 Scanned in 00mn 00s ---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044) O44 - LFC:[MD5.6D6F4B1886E91EB37ABCCAD19C561EE0] - 10/3/2015 - 12:58:46 ---A- . (...) -- C:\WINDOWS\system32\amcompat.tlb [16832] O44 - LFC:[MD5.A32B14BE5EDAE794FCE1A9E970827509] - 10/3/2015 - 12:58:46 ---A- . (...) -- C:\WINDOWS\system32\nscompat.tlb [23392] O44 - LFC:[MD5.FA579938B0733B87066546AFE951082C] - 10/3/2015 - 12:59:15 ---A- . (...) -- C:\Boot.bak [211] O44 - LFC:[MD5.BC831661963763AC4D504C5CABB1FDD9] - 10/3/2015 - 15:01:09 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\d3dx9_24.dll [2222800] O44 - LFC:[MD5.5B48FE9D6686F0D54B26A005ACE24D1D] - 10/3/2015 - 15:01:11 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\d3dx9_25.dll [2337488] O44 - LFC:[MD5.523AB607EEF81CC4D909E7FEBD8A788E] - 10/3/2015 - 15:01:11 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\d3dx9_26.dll [2297552] O44 - LFC:[MD5.ADFB6D7B61E301761C700652B6FE7CCD] - 10/3/2015 - 15:01:12 ---A- . (.Microsoft Corporation - Microsoft Common Controller API.) -- C:\WINDOWS\system32\xinput9_1_0.dll [61136] O44 - LFC:[MD5.852EDC778A7A50077694F84D8E601234] - 10/3/2015 - 15:01:12 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\d3dx9_27.dll [2319568] O44 - LFC:[MD5.BE19B603DFBAA829EE5B7749B3BA97DB] - 10/3/2015 - 15:01:13 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\d3dx9_28.dll [2323664] O44 - LFC:[MD5.99F4FC172A5ACE36CF00AA7038D23F2C] - 10/3/2015 - 15:01:13 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\d3dx9_29.dll [2332368] O44 - LFC:[MD5.E415862612E65F10D7D888443ECD7594] - 10/3/2015 - 15:01:14 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\d3dx9_30.dll [2388176] O44 - LFC:[MD5.4E961525CC7FF0E5D7DA19E170B7C14C] - 10/3/2015 - 15:01:14 ---A- . (.Microsoft Corporation - X3DAudio.) -- C:\WINDOWS\system32\x3daudio1_0.dll [14032] O44 - LFC:[MD5.2112FE0C46662D429347A7D7B49E3ECE] - 10/3/2015 - 15:01:14 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine2_0.dll [230096] O44 - LFC:[MD5.F1726346E583442541FE73429F8E9C10] - 10/3/2015 - 15:01:17 ---A- . (.Microsoft Corporation - Microsoft Common Controller API.) -- C:\WINDOWS\system32\xinput1_1.dll [62672] O44 - LFC:[MD5.7C9952111F4C743B9F0D8B68B6ED93C9] - 10/3/2015 - 15:01:17 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine2_1.dll [229584] O44 - LFC:[MD5.5C4D3843B491C047B7A619901FBD2EC1] - 10/3/2015 - 15:01:17 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine2_2.dll [230168] O44 - LFC:[MD5.33B62BE226934E1B01F5043870C70427] - 10/3/2015 - 15:01:18 ---A- . (.Microsoft Corporation - Microsoft Common Controller API.) -- C:\WINDOWS\system32\xinput1_2.dll [62744] O44 - LFC:[MD5.797E24743937D67D69F28F2CF5052EE8] - 10/3/2015 - 15:01:18 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\d3dx9_31.dll [2414360] O44 - LFC:[MD5.69D841744B2BAE38FBB2D40A230A549C] - 10/3/2015 - 15:01:18 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine2_3.dll [236824] O44 - LFC:[MD5.26AF232140C88B42D92A88F2198EDF6A] - 10/3/2015 - 15:01:19 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\d3dx9_32.dll [3426072] O44 - LFC:[MD5.121B131EAA369D8F58DACC5C39A77D80] - 10/3/2015 - 15:01:19 ---A- . (.Microsoft Corporation - X3DAudio.) -- C:\WINDOWS\system32\x3daudio1_1.dll [15128] O44 - LFC:[MD5.6550E1A0A7BE611592C31222FCB981FB] - 10/3/2015 - 15:01:19 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine2_4.dll [237848] O44 - LFC:[MD5.86C93789E9006F1AC47ED9DD47D4C8A1] - 10/3/2015 - 15:01:20 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine2_5.dll [251672] O44 - LFC:[MD5.39000E033D39D19CCCE21AEAFCCE2476] - 10/3/2015 - 15:01:20 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine2_6.dll [255848] O44 - LFC:[MD5.FAE7E1D578C42A7C3D9D61A99D178BD5] - 10/3/2015 - 15:01:21 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\D3DCompiler_33.dll [1123696] O44 - LFC:[MD5.37A8171ACCF46A9C196054066C28827F] - 10/3/2015 - 15:01:21 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\d3dx10_33.dll [443752] O44 - LFC:[MD5.CDB1CD22BAFF21F48606B3C1A18B000B] - 10/3/2015 - 15:01:21 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\d3dx9_33.dll [3495784] O44 - LFC:[MD5.77F595DEE5FFACEA72B135B1FCE1312E] - 10/3/2015 - 15:01:22 ---A- . (.Microsoft Corporation - Microsoft Common Controller API.) -- C:\WINDOWS\system32\xinput1_3.dll [81768] O44 - LFC:[MD5.1CA939918ED1B930059B3A882DE6F648] - 10/3/2015 - 15:01:22 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\d3dx9_34.dll [3497832] O44 - LFC:[MD5.7FEBB8CE2233CBAE738B16D42ED29674] - 10/3/2015 - 15:01:22 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine2_7.dll [261480] O44 - LFC:[MD5.75F206C195BBACA6EF28565B1C0CD75C] - 10/3/2015 - 15:01:23 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\D3DCompiler_34.dll [1124720] O44 - LFC:[MD5.5AA9987F2E62B56D7661B6901901F927] - 10/3/2015 - 15:01:23 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\d3dx10_34.dll [443752] O44 - LFC:[MD5.F6A9FC2AD2F9111372B5AB3BBA3707EC] - 10/3/2015 - 15:01:23 ---A- . (.Microsoft Corporation - X3DAudio.) -- C:\WINDOWS\system32\X3DAudio1_2.dll [17928] O44 - LFC:[MD5.499210C45AFEAADEE8CF4DCF7D5E570B] - 10/3/2015 - 15:01:23 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine2_8.dll [266088] O44 - LFC:[MD5.3EF18B78D17C962F2B71AC1CB7757684] - 10/3/2015 - 15:01:24 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\d3dx9_35.dll [3727720] O44 - LFC:[MD5.5B441670A4F5F8BCCE76741902B8AF56] - 10/3/2015 - 15:01:25 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\D3DCompiler_35.dll [1358192] O44 - LFC:[MD5.F3764552E45880DC49B82F38699AA87C] - 10/3/2015 - 15:01:25 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\d3dx10_35.dll [444776] O44 - LFC:[MD5.46EE68F04A75A1CCF40235EA6F1CBA05] - 10/3/2015 - 15:01:25 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine2_9.dll [267112] O44 - LFC:[MD5.FB4299688A0D3A37687C015AC2B9922D] - 10/3/2015 - 15:01:26 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\D3DCompiler_36.dll [1374232] O44 - LFC:[MD5.D9158E78A368B08D9133043EB3058C12] - 10/3/2015 - 15:01:26 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\d3dx10_36.dll [444776] O44 - LFC:[MD5.44BFEC5C9C82A2EE9871D88FD3B9A0E2] - 10/3/2015 - 15:01:26 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\d3dx9_36.dll [3734536] O44 - LFC:[MD5.73E055AF78A64F9B2779D44407CA2AB6] - 10/3/2015 - 15:01:27 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine2_10.dll [267272] O44 - LFC:[MD5.EA752DBCE35045D3C830DC16578CC8AB] - 10/3/2015 - 15:01:28 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\D3DCompiler_37.dll [1420824] O44 - LFC:[MD5.4A43E9A2B17E4CAFA9CB5FEC0B5B686B] - 10/3/2015 - 15:01:28 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\d3dx10_37.dll [462864] O44 - LFC:[MD5.AC3C517FB0FBBE45FE44007BCD3625A7] - 10/3/2015 - 15:01:28 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\D3DX9_37.dll [3786760] O44 - LFC:[MD5.C593FD0A96EE4B6390B653C4C641313F] - 10/3/2015 - 15:01:29 ---A- . (.Microsoft Corporation - X3DAudio.) -- C:\WINDOWS\system32\X3DAudio1_3.dll [25608] O44 - LFC:[MD5.8A83673F0AB001870583FDE2B004FA59] - 10/3/2015 - 15:01:29 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine3_0.dll [238088] O44 - LFC:[MD5.8F3EB548AC4ED90252394F60C77E3196] - 10/3/2015 - 15:01:30 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\D3DX9_38.dll [3850760] O44 - LFC:[MD5.418CDC57E55EE79C3F86C13A19B3D5E3] - 10/3/2015 - 15:01:30 ---A- . (.Microsoft Corporation - XAudio2 Game Audio API.) -- C:\WINDOWS\system32\XAudio2_0.dll [479752] O44 - LFC:[MD5.103CBFC5591008AD33046E20E8E1EEBE] - 10/3/2015 - 15:01:31 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\D3DCompiler_38.dll [1491992] O44 - LFC:[MD5.A2650B27472C21CDD817EEEDE65648E1] - 10/3/2015 - 15:01:31 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\d3dx10_38.dll [467984] O44 - LFC:[MD5.E3832514BD21236067B7227F6165EF95] - 10/3/2015 - 15:01:31 ---A- . (.Microsoft Corporation - X3DAudio.) -- C:\WINDOWS\system32\X3DAudio1_4.dll [25608] O44 - LFC:[MD5.2E0E25252E1D41752876E9FE12ADE175] - 10/3/2015 - 15:01:31 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine3_1.dll [238088] O44 - LFC:[MD5.8CB3DEFB8887C4F0846DB1FC1304D6D2] - 10/3/2015 - 15:01:32 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\D3DX9_39.dll [3851784] O44 - LFC:[MD5.DD165760F1B95200A3DA2D9DFDB84234] - 10/3/2015 - 15:01:32 ---A- . (.Microsoft Corporation - XAPOFX.) -- C:\WINDOWS\system32\XAPOFX1_0.dll [65032] O44 - LFC:[MD5.E34FF0115B1EE3B4E03D22AE9840EE03] - 10/3/2015 - 15:01:32 ---A- . (.Microsoft Corporation - XAudio2 Game Audio API.) -- C:\WINDOWS\system32\XAudio2_1.dll [507400] O44 - LFC:[MD5.C4F1972497FE2CEB7D900938C97FCF91] - 10/3/2015 - 15:01:33 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\D3DCompiler_39.dll [1493528] O44 - LFC:[MD5.E6C2F1D8B667DDC04CB55B9F0159EF97] - 10/3/2015 - 15:01:33 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\d3dx10_39.dll [467984] O44 - LFC:[MD5.F3C6BE26949CAADB11DBF0086082FAC9] - 10/3/2015 - 15:01:34 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine3_2.dll [238088] O44 - LFC:[MD5.D95EAABF5D277EF91D9CA70151209E56] - 10/3/2015 - 15:01:34 ---A- . (.Microsoft Corporation - XAPOFX.) -- C:\WINDOWS\system32\XAPOFX1_1.dll [68616] O44 - LFC:[MD5.50F4A0D5E6A0BAFEFA78F353533B8E06] - 10/3/2015 - 15:01:34 ---A- . (.Microsoft Corporation - XAudio2 Game Audio API.) -- C:\WINDOWS\system32\XAudio2_2.dll [509448] O44 - LFC:[MD5.350FEFE18B86BD4D9AB2A96D00215A49] - 10/3/2015 - 15:01:35 ---A- . (.Microsoft Corporation - X3DAudio.) -- C:\WINDOWS\system32\X3DAudio1_5.dll [23376] O44 - LFC:[MD5.8BA296419AF3417D1E9806B83166E472] - 10/3/2015 - 15:01:35 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine3_3.dll [235856] O44 - LFC:[MD5.295E47A75F278580F9441041EAAEA3D2] - 10/3/2015 - 15:01:35 ---A- . (.Microsoft Corporation - XAPOFX.) -- C:\WINDOWS\system32\XAPOFX1_2.dll [70992] O44 - LFC:[MD5.47ED15DC87AE334C13C4DACD1BE2CCED] - 10/3/2015 - 15:01:35 ---A- . (.Microsoft Corporation - XAudio2 Game Audio API.) -- C:\WINDOWS\system32\XAudio2_3.dll [514384] O44 - LFC:[MD5.91B4AAD4412BB223B466F3DFB43E86DA] - 10/3/2015 - 15:01:36 ---A- . (.Microsoft Corporation - Direct3D 10.1 Extensions.) -- C:\WINDOWS\system32\d3dx10_40.dll [452440] O44 - LFC:[MD5.EEA5E428CE63804F9B12D21C97B5968F] - 10/3/2015 - 15:01:36 ---A- . (.Microsoft Corporation - Direct3D 9 Extensions.) -- C:\WINDOWS\system32\D3DX9_40.dll [4379984] O44 - LFC:[MD5.3384134EEB8F223178C2EB8323003EC0] - 10/3/2015 - 15:01:36 ---A- . (.Microsoft Corporation - Direct3D HLSL Compiler.) -- C:\WINDOWS\system32\D3DCompiler_40.dll [2036576] O44 - LFC:[MD5.E763798CAD2A90B6AB61854F50CD47DD] - 10/3/2015 - 15:01:37 ---A- . (.Microsoft Corporation - 3D Audio Library.) -- C:\WINDOWS\system32\X3DAudio1_6.dll [22360] O44 - LFC:[MD5.686F8D1B4926D48227A06ACD4D41CD1E] - 10/3/2015 - 15:01:37 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine3_4.dll [235352] O44 - LFC:[MD5.30686ECE80545E06D78D156EB9F7D463] - 10/3/2015 - 15:01:38 ---A- . (.Microsoft Corporation - Audio Effect Library.) -- C:\WINDOWS\system32\XAPOFX1_3.dll [69464] O44 - LFC:[MD5.3FA06CF5079B84155D18B05C08F7131B] - 10/3/2015 - 15:01:38 ---A- . (.Microsoft Corporation - Direct3D 9 Extensions.) -- C:\WINDOWS\system32\D3DX9_41.dll [4178264] O44 - LFC:[MD5.E684C5FA18ADF9EA14737757413BF727] - 10/3/2015 - 15:01:38 ---A- . (.Microsoft Corporation - XAudio2 Game Audio API.) -- C:\WINDOWS\system32\XAudio2_4.dll [517448] O44 - LFC:[MD5.1AA571774936717EE776DBED51E9EDF4] - 10/3/2015 - 15:01:39 ---A- . (.Microsoft Corporation - Direct3D 10.1 Extensions.) -- C:\WINDOWS\system32\d3dx10_41.dll [453456] O44 - LFC:[MD5.C6A44FC3CF2F5801561804272217B14D] - 10/3/2015 - 15:01:39 ---A- . (.Microsoft Corporation - Direct3D 9 Extensions.) -- C:\WINDOWS\system32\D3DX9_42.dll [1892184] O44 - LFC:[MD5.781E8B5B6FDB3C9B4E4A4A9FB019960D] - 10/3/2015 - 15:01:39 ---A- . (.Microsoft Corporation - Direct3D HLSL Compiler.) -- C:\WINDOWS\system32\D3DCompiler_41.dll [1846632] O44 - LFC:[MD5.501AC862517C5445742BEE8A2B88414E] - 10/3/2015 - 15:01:40 ---A- . (.Microsoft Corporation - Direct3D 10.1 Extensions.) -- C:\WINDOWS\system32\d3dx10_42.dll [453456] O44 - LFC:[MD5.D09AC80A4B5312239852836C84DF3392] - 10/3/2015 - 15:01:40 ---A- . (.Microsoft Corporation - Direct3D 10.1 Extensions.) -- C:\WINDOWS\system32\d3dx11_42.dll [235344] O44 - LFC:[MD5.B337306DFB508A1BCEF1974BFBB8D924] - 10/3/2015 - 15:01:41 ---A- . (.Microsoft Corporation - Direct3D 10.1 Extensions.) -- C:\WINDOWS\system32\d3dcsx_42.dll [5501792] O44 - LFC:[MD5.B33B21DB610116262D906305CE65C354] - 10/3/2015 - 15:01:42 ---A- . (.Microsoft Corporation - Direct3D HLSL Compiler.) -- C:\WINDOWS\system32\D3DCompiler_42.dll [1974616] O44 - LFC:[MD5.DB3C93E87452B8DAB4F58ED1FD2B1998] - 10/3/2015 - 15:01:42 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine3_5.dll [238936] O44 - LFC:[MD5.8B01FB723F3B30AB3DEBDDBF97CFE577] - 10/3/2015 - 15:01:42 ---A- . (.Microsoft Corporation - XAudio2 Game Audio API.) -- C:\WINDOWS\system32\XAudio2_5.dll [515416] O44 - LFC:[MD5.C811E70C8804CFFF719038250A43B464] - 10/3/2015 - 15:01:43 ---A- . (.Microsoft Corporation - 3D Audio Library.) -- C:\WINDOWS\system32\X3DAudio1_7.dll [22360] O44 - LFC:[MD5.F81C4678A55FFEE585AC75825FAF5582] - 10/3/2015 - 15:01:43 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine3_6.dll [238936] O44 - LFC:[MD5.E4CE2AF32F501A7F7DDDD908704A0EE6] - 10/3/2015 - 15:01:44 ---A- . (.Microsoft Corporation - Audio Effect Library.) -- C:\WINDOWS\system32\XAPOFX1_4.dll [74072] O44 - LFC:[MD5.86E39E9161C3D930D93822F1563C280D] - 10/3/2015 - 15:01:44 ---A- . (.Microsoft Corporation - Direct3D 9 Extensions.) -- C:\WINDOWS\system32\D3DX9_43.dll [1998168] O44 - LFC:[MD5.4976243BD70FAE3D1D24E49739AB2710] - 10/3/2015 - 15:01:44 ---A- . (.Microsoft Corporation - XAudio2 Game Audio API.) -- C:\WINDOWS\system32\XAudio2_6.dll [528216] O44 - LFC:[MD5.83EBA442F07AAB8D6375D2EEC945C46C] - 10/3/2015 - 15:01:45 ---A- . (.Microsoft Corporation - Direct3D 10.1 Extensions.) -- C:\WINDOWS\system32\d3dcsx_43.dll [1868128] O44 - LFC:[MD5.20C835843FCEC4DEDFCD7BFFA3B91641] - 10/3/2015 - 15:01:45 ---A- . (.Microsoft Corporation - Direct3D 10.1 Extensions.) -- C:\WINDOWS\system32\d3dx10_43.dll [470880] O44 - LFC:[MD5.8E0BB968FF41D80E5F2C747C04DB79AE] - 10/3/2015 - 15:01:45 ---A- . (.Microsoft Corporation - Direct3D 10.1 Extensions.) -- C:\WINDOWS\system32\d3dx11_43.dll [248672] O44 - LFC:[MD5.8A4CEBF34370D689E198E6673C1F2C40] - 10/3/2015 - 15:01:46 ---A- . (.Microsoft Corporation - Audio Effect Library.) -- C:\WINDOWS\system32\XAPOFX1_5.dll [74072] O44 - LFC:[MD5.1C9B45E87528B8BB8CFA884EA0099A85] - 10/3/2015 - 15:01:46 ---A- . (.Microsoft Corporation - Direct3D HLSL Compiler.) -- C:\WINDOWS\system32\D3DCompiler_43.dll [2106216] O44 - LFC:[MD5.4FD7BCB9D8AF6A165E9BA0C2EB702E7C] - 10/3/2015 - 15:01:46 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\WINDOWS\system32\xactengine3_7.dll [239960] O44 - LFC:[MD5.81DFDDFB401D663BA7E6AD1C80364216] - 10/3/2015 - 15:01:46 ---A- . (.Microsoft Corporation - XAudio2 Game Audio API.) -- C:\WINDOWS\system32\XAudio2_7.dll [527192] O44 - LFC:[MD5.0277C027A26428DB64EF4F64F52BB4FD] - 10/3/2015 - 15:19:38 ---A- . (...) -- C:\WINDOWS\MBR.exe [208896] O44 - LFC:[MD5.F042EE4C8D66248D9B86DCF52ABAE416] - 10/3/2015 - 15:19:38 ---A- . (...) -- C:\WINDOWS\PEV.exe [256000] O44 - LFC:[MD5.9E05A9C264C8A908A8E79450FCBFF047] - 10/3/2015 - 15:19:38 ---A- . (...) -- C:\WINDOWS\grep.exe [80412] O44 - LFC:[MD5.2B657A67AEBB84AEA5632C53E61E23BF] - 10/3/2015 - 15:19:38 ---A- . (...) -- C:\WINDOWS\sed.exe [98816] O44 - LFC:[MD5.5E832F4FAF5F481F2EAF3B3A48F603B8] - 10/3/2015 - 15:19:38 ---A- . (...) -- C:\WINDOWS\zip.exe [68096] O44 - LFC:[MD5.753BC16326FEE4A421ACB636CCD602F4] - 10/3/2015 - 15:19:38 ---A- . (.NirSoft - NirCmd.) -- C:\WINDOWS\NIRCMD.exe [60416] O44 - LFC:[MD5.A46842C9B0C567A5A9584E83A163560C] - 10/3/2015 - 15:19:38 ---A- . (.SteelWerX - Freeware implementation of REG.EXE.) -- C:\WINDOWS\SWREG.exe [518144] O44 - LFC:[MD5.0297C72529807322B152F517FDB0A9FC] - 10/3/2015 - 15:19:38 ---A- . (.SteelWerX - Freeware implementation of SC.EXE.) -- C:\WINDOWS\SWSC.exe [406528] O44 - LFC:[MD5.B1A9CF0B6F80611D31987C247EC630B4] - 10/3/2015 - 15:19:38 ---A- . (.SteelWerX - Freeware implementation of XCACLS.) -- C:\WINDOWS\SWXCACLS.exe [212480] O44 - LFC:[MD5.C51A881398F29071239741AE16D07C1C] - 10/3/2015 - 15:29:26 RSHA- . (...) -- C:\cmldr [261856] O44 - LFC:[MD5.E18DBE34BB08F949D60ED236AB7823CD] - 10/3/2015 - 16:07:15 ---A- . (...) -- C:\ComboFix.txt [34444] O44 - LFC:[MD5.CC7AA7B42CF418FC3D926913490048F8] - 10/3/2015 - 16:52:47 ---A- . (...) -- C:\WINDOWS\zoek-delete.exe [24064] O44 - LFC:[MD5.7A2657075CF35B8792E780320C5EA673] - 10/3/2015 - 17:20:13 ---A- . (...) -- C:\zoek-results.log [28005] O44 - LFC:[MD5.515E4684008E955DE0C81E6A7AEA1C2A] - 18/3/2015 - 16:02:19 ---A- . (.InstallShield Software Corporation - InstallShield® unInstaller.) -- C:\WINDOWS\IsUninst.exe [306688] O44 - LFC:[MD5.B23B674D302BC5130DF7A7A5BDF48877] - 18/3/2015 - 16:02:25 ---A- . (...) -- C:\WINDOWS\system32\vusetup.dll [45056] O44 - LFC:[MD5.16409C468CEEE99B6B129FCAA5C0F206] - 18/3/2015 - 16:02:25 ---A- . (.VIA Technologies, Inc. - VIA USB Host Controller Lower Filter Driver.) -- C:\WINDOWS\system32\Drivers\vulfnth.sys [6912] O44 - LFC:[MD5.E76FB35E30FB885124479A4A0ACA3923] - 18/3/2015 - 16:02:25 ---A- . (.VIA Technologies, Inc. - VIA USB Roothub Lower Filter Driver.) -- C:\WINDOWS\system32\Drivers\vulfntr.sys [10240] O44 - LFC:[MD5.1BD976DD77B31FE0F25708AD5C1351AE] - 18/3/2015 - 16:10:23 ---A- . (.Microsoft Corporation - Driver Install Frameworks for API library m.) -- C:\WINDOWS\system32\difxapi.dll [319456] O44 - LFC:[MD5.56781F90D4BB9B420114BA3285D5D6BF] - 18/3/2015 - 16:10:47 ---A- . (.No owner - Windows network adapter uninstaller.) -- C:\WINDOWS\system32\vuins32.dll [69632] O44 - LFC:[MD5.EF88FBDBB2C2AB084DCAE4388921C898] - 18/3/2015 - 16:10:47 ---A- . (.VIA Technologies, Inc. - NDIS 5.0 miniport driver.) -- C:\WINDOWS\system32\Drivers\fetnd5bv.sys [48128] O44 - LFC:[MD5.7A8F6ECA343EC3E644580C7A7B28E507] - 18/3/2015 - 16:32:07 ---A- . (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\WINDOWS\system32\FlashPlayerInstaller.exe [17549488] O44 - LFC:[MD5.E51B539FEC6A6485289F650E5E7D5156] - 18/3/2015 - 16:32:13 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerApp.exe [701616] O44 - LFC:[MD5.4713ED2510365E9102172816D2CFB832] - 18/3/2015 - 16:32:13 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl [71344] O44 - LFC:[MD5.A4001C78F2806662B3BD91ACB44E6330] - 18/3/2015 - 17:09:40 ---A- . (...) -- C:\WINDOWS\system32\initdebug.nfo [45] O44 - LFC:[MD5.1653AB7F876A302F40B72607883FB09F] - 18/3/2015 - 22:05:49 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [544060] O44 - LFC:[MD5.71A0724AAAC4316C5551A2D1742D1AD6] - 18/3/2015 - 22:05:49 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [75818] O44 - LFC:[MD5.5736C7DEFC430A1CE6CA3CCBD57772BB] - 18/3/2015 - 22:05:49 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [457758] O44 - LFC:[MD5.B4C4D43E462B9343AACD40E31433B6CA] - 18/3/2015 - 22:30:31 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [841] O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 18/3/2015 - 22:31:28 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.B5FA6E9C7596B6D2671B0DCB0090C709] - 18/3/2015 - 22:31:30 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [2206] O44 - LFC:[MD5.D3B6665B2CD5DE41ADEABCD31204B97B] - 18/3/2015 - 22:31:31 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [692] O44 - LFC:[MD5.1AE2B36FC500F2EFB7A7A1929DFDEDB4] - 18/3/2015 - 22:31:42 ---A- . (...) -- C:\WINDOWS\wiaservc.log [49] O44 - LFC:[MD5.7FDBDA403BF96CCB7B51564F115C6CE0] - 18/3/2015 - 22:31:43 ---A- . (...) -- C:\WINDOWS\wiadebug.log [157] O44 - LFC:[MD5.B61A7DDA7A66865FFD275B93D3D93A21] - 18/3/2015 - 22:31:51 ---A- . (...) -- C:\WINDOWS\setupapi.log [2629] O44 - LFC:[MD5.1C980E4A007F6DC2A8759F038B73A579] - 20/3/2015 - 01:55:32 ---A- . (...) -- C:\PureRa.txt [16314] O44 - LFC:[MD5.0299DD31F74473C388DD34625E5DB055] - 20/3/2015 - 11:54:07 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [95072] O44 - LFC:[MD5.E137C11D16843CBCC9972B01B7CA29FB] - 20/3/2015 - 14:18:54 ---A- . (...) -- C:\AdsFix_20_03_2015_15_18_54.txt [18570] O44 - LFC:[MD5.2AC02E1821ADB2215E79C412375E30B2] - 20/3/2015 - 14:29:42 ---A- . (...) -- C:\TDSSKiller.3.0.0.44_20.03.2015_15.27.58_log.txt [110864] O44 - LFC:[MD5.A3F4391DFDF2F9E9FE4EAD193265A5AD] - 20/3/2015 - 14:56:00 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\mbam.sys [23256] O44 - LFC:[MD5.FFB32E70D735146F5630DC7A96B6E1A8] - 20/3/2015 - 14:56:00 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\WINDOWS\system32\Drivers\mbamchameleon.sys [54360] O44 - LFC:[MD5.7E77C6BB9F9C89A4E47FA73DEA291870] - 25/3/2015 - 15:41:14 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512] O44 - LFC:[MD5.4A0BA56ABE5EC1C7CA893BC26665CAC4] - 31/3/2015 - 15:19:54 ---A- . (...) -- C:\WINDOWS\system32\Chromeoem1.uns [6941] O44 - LFC:[MD5.7DDEDDB6BBDABB1331CDB2F51DE05A8C] - 31/3/2015 - 15:33:24 ---A- . (...) -- C:\WINDOWS\system32\d3d9caps.dat [664] O44 - LFC:[MD5.8E2E9CCD873ABF180F48BCAEEEBE347D] - 31/3/2015 - 15:42:35 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys [114904] O44 - LFC:[MD5.CC0444811F1F100BB6DF2531CE7E21C1] - 31/3/2015 - 16:05:26 ---A- . (.S3 Graphics Co., Ltd. - s3iset32.) -- C:\WINDOWS\system32\s3iset32_2_00_107.dll [473600] O44 - LFC:[MD5.CB1D946B04CD7FC180171EF8C9347BDB] - 7/3/2015 - 08:34:00 ---A- . (...) -- C:\WINDOWS\system32\OEMINFO.INI [68] O44 - LFC:[MD5.B317B33694BAC49D492DD3F23E374899] - 7/3/2015 - 08:34:16 ---A- . (...) -- C:\WINDOWS\_default.pif [707] O44 - LFC:[MD5.0A0FEB9EB28BDE8CD835716343B03B14] - 7/3/2015 - 08:34:16 ---A- . (...) -- C:\WINDOWS\system32\12520437.cpx [2151] O44 - LFC:[MD5.D69AE057CD82D04EE7D311809ABEFB2A] - 7/3/2015 - 08:34:16 ---A- . (...) -- C:\WINDOWS\system32\12520850.cpx [2233] O44 - LFC:[MD5.D848A0B4574A3EBBC2B82698FC2A7408] - 7/3/2015 - 08:34:22 ---A- . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\WINDOWS\system32\6to4svc.dll [100864] O44 - LFC:[MD5.8FD99680A539792A30E97944FDAECF17] - 7/3/2015 - 08:34:24 ---A- . (.Microsoft Corporation - ACPI Driver for NT.) -- C:\WINDOWS\system32\Drivers\acpi.sys [187776] O44 - LFC:[MD5.9859C0F6936E723E4892D7141B1327D5] - 7/3/2015 - 08:34:24 ---A- . (.Microsoft Corporation - ACPI Embedded Controller Driver.) -- C:\WINDOWS\system32\Drivers\acpiec.sys [11648] O44 - LFC:[MD5.12B4C8208B5146C8D17F3F502E00A540] - 7/3/2015 - 08:34:24 ---A- . (.Microsoft Corporation - Aaaa Monitor DLL.) -- C:\WINDOWS\system32\aaaamon.dll [25600] O44 - LFC:[MD5.A9517EC6F843959566692570390C457F] - 7/3/2015 - 08:34:24 ---A- . (.Microsoft Corporation - Access Control List Editor.) -- C:\WINDOWS\system32\acledit.dll [129536] O44 - LFC:[MD5.96A0066AB9872D3575575A463C53FF6C] - 7/3/2015 - 08:34:24 ---A- . (.Microsoft Corporation - Security Descriptor Editor.) -- C:\WINDOWS\system32\aclui.dll [115712] O44 - LFC:[MD5.D0A33C77354A6F12CCD8034E4429A30D] - 7/3/2015 - 08:34:24 ---A- . (.Sipro Lab Telecom Inc. - ACELP.net Audio Decoder.) -- C:\WINDOWS\system32\acelpdec.ax [61952] O44 - LFC:[MD5.0D84657DBF93DB98673DEFDF2B29E25A] - 7/3/2015 - 08:34:26 ---A- . (.Microsoft Corporation - ADs LDAP Provider C DLL.) -- C:\WINDOWS\system32\adsldpc.dll [143360] O44 - LFC:[MD5.D34CBD5A6D63D6B95B5986D1AE37C3C3] - 7/3/2015 - 08:34:26 ---A- . (.Microsoft Corporation - ADs LDAP Provider DLL.) -- C:\WINDOWS\system32\adsldp.dll [176128] O44 - LFC:[MD5.E683249387CA0C64D616A05F2B2226B4] - 7/3/2015 - 08:34:26 ---A- . (.Microsoft Corporation - ADs LDAP Provider DLL.) -- C:\WINDOWS\system32\adsmsext.dll [68096] O44 - LFC:[MD5.716852109C79039FBADB452403FA4027] - 7/3/2015 - 08:34:26 ---A- . (.Microsoft Corporation - ADs NDS Provider DLL.) -- C:\WINDOWS\system32\adsnds.dll [161792] O44 - LFC:[MD5.D592A3E3545F208DEB5B145BB129D3E2] - 7/3/2015 - 08:34:26 ---A- . (.Microsoft Corporation - ADs Netware 3.12 Provider DLL.) -- C:\WINDOWS\system32\adsnw.dll [123392] O44 - LFC:[MD5.2CDAE321B8E878A278BA2D2FA013060B] - 7/3/2015 - 08:34:26 ---A- . (.Microsoft Corporation - ADs Router Layer DLL.) -- C:\WINDOWS\system32\activeds.dll [193536] O44 - LFC:[MD5.446321D798E28DAAC1383637FBB524E0] - 7/3/2015 - 08:34:26 ---A- . (.Microsoft Corporation - ADs Windows NT Provider DLL.) -- C:\WINDOWS\system32\adsnt.dll [263680] O44 - LFC:[MD5.912B67BB8249925A5C972FC5839EAE09] - 7/3/2015 - 08:34:26 ---A- . (.Microsoft Corporation - ActiveX Interface Marshaling Library.) -- C:\WINDOWS\system32\actxprxy.dll [98304] O44 - LFC:[MD5.56C7905CB7A7356F1301E5B209C96272] - 7/3/2015 - 08:34:26 ---A- . (.Microsoft Corporation - DirectShow Setup Tool.) -- C:\WINDOWS\system32\actmovie.exe [4096] O44 - LFC:[MD5.6DB2CAE1A84068CEBA0E768BB5C29009] - 7/3/2015 - 08:34:26 ---A- . (.Microsoft Corporation - IEAK Global Policy Template Parser.) -- C:\WINDOWS\system32\admparse.dll [72704] O44 - LFC:[MD5.D05AB88927849DF74CF4F1C303DAEB4F] - 7/3/2015 - 08:34:26 ---A- . (.Microsoft Corporation - IPX Interface via WinSock.) -- C:\WINDOWS\system32\adptif.dll [26112] O44 - LFC:[MD5.F5CEA0ED3328E3957CB0A355907F9911] - 7/3/2015 - 08:34:26 ---A- . (.Microsoft Corporation - Microsoft (R) ActiveDS Typelib.) -- C:\WINDOWS\system32\activeds.tlb [111104] O44 - LFC:[MD5.8FED1E0A491D4990853D23F21C59C730] - 7/3/2015 - 08:34:28 ---A- . (.Microsoft Corporation - ADVPACK.) -- C:\WINDOWS\system32\advpack.dll [128512] O44 - LFC:[MD5.D5F37A37B59E7490F7EDBAB56CCEB856] - 7/3/2015 - 08:34:28 ---A- . (.Microsoft Corporation - ADVPACK.) -- C:\WINDOWS\system32\advpack.dll.mui [10240] O44 - LFC:[MD5.652C0DB3B76746CC1E50823E1FCF7B13] - 7/3/2015 - 08:34:28 ---A- . (.Microsoft Corporation - Advanced Windows 32 Base API.) -- C:\WINDOWS\system32\advapi32.dll [618496] O44 - LFC:[MD5.F6B7B1ECD7B41736BDB6FF4B092BCB79] - 7/3/2015 - 08:34:28 ---A- . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\system32\Drivers\afd.sys [138496] O44 - LFC:[MD5.F8E4901CB3027EB0A0384001F11877C2] - 7/3/2015 - 08:34:32 ---A- . (...) -- C:\WINDOWS\system32\amstream.dll [70656] O44 - LFC:[MD5.A9A3DAA780CA6C9671A19D52456705B4] - 7/3/2015 - 08:34:32 ---A- . (.Microsoft Corporation - Alerter Service DLL.) -- C:\WINDOWS\system32\alrsvc.dll [17408] O44 - LFC:[MD5.3A988D8877393374230D2445E77733F7] - 7/3/2015 - 08:34:32 ---A- . (.Microsoft Corporation - Application Compatibility UI.) -- C:\WINDOWS\system32\ahui.exe [98304] O44 - LFC:[MD5.8C515081584A38AA007909CD02020B3D] - 7/3/2015 - 08:34:32 ---A- . (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\system32\alg.exe [44544] O44 - LFC:[MD5.8AAD333C876590293F72B315E162BCC7] - 7/3/2015 - 08:34:34 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9029] O44 - LFC:[MD5.D753EEE17725526A67ACDDAA5D63EF68] - 7/3/2015 - 08:34:34 ---A- . (...) -- C:\WINDOWS\system32\append.exe [12498] O44 - LFC:[MD5.D0FFA8C1A260BA1186B637C3EFC7742B] - 7/3/2015 - 08:34:34 ---A- . (.Microsoft Corporation - APC Smart Provider.) -- C:\WINDOWS\system32\apcups.dll [102912] O44 - LFC:[MD5.CF492D7E9AF1C628B3536D20EF6F5CC7] - 7/3/2015 - 08:34:34 ---A- . (.Microsoft Corporation - Application Compatibility Client Library.) -- C:\WINDOWS\system32\apphelp.dll [125952] O44 - LFC:[MD5.7E43E181ABDC1F304251B597DA600D10] - 7/3/2015 - 08:34:34 ---A- . (.Microsoft Corporation - Shell Application Manager.) -- C:\WINDOWS\system32\appwiz.cpl [549888] O44 - LFC:[MD5.76422D781C0FBBB368F8559DC12A39B1] - 7/3/2015 - 08:34:34 ---A- . (.Microsoft Corporation - Software Installation Snapin Extenstion.) -- C:\WINDOWS\system32\appmgr.dll [295936] O44 - LFC:[MD5.D8849F77C0B66226335A59D26CB4EDC6] - 7/3/2015 - 08:34:34 ---A- . (.Microsoft Corporation - Software installation Service.) -- C:\WINDOWS\system32\appmgmts.dll [167936] O44 - LFC:[MD5.33F9B0E02D9D93F920605D02FB53F3FD] - 7/3/2015 - 08:34:36 ---A- . (.Microsoft Corporation - TCP/IP Arp Command.) -- C:\WINDOWS\system32\arp.exe [19456] O44 - LFC:[MD5.EBC23440AA9CC4F08241D35147C1D5B5] - 7/3/2015 - 08:34:38 ---A- . (.Microsoft Corporation - ASF Error Definitions.) -- C:\WINDOWS\system32\asferror.dll [8192] O44 - LFC:[MD5.654D765758F5F2A0014E5AC56CDEDAA1] - 7/3/2015 - 08:34:38 ---A- . (.Microsoft Corporation - Active Setup Controls.) -- C:\WINDOWS\system32\asctrls.ocx [114688] O44 - LFC:[MD5.D95E8831CC262AC9D19274664AFAC86C] - 7/3/2015 - 08:34:46 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\WINDOWS\system32\atmlib.dll [30208] O44 - LFC:[MD5.318FAA70D9B0FB8DD168D4ED628E27B2] - 7/3/2015 - 08:34:46 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\WINDOWS\system32\atmfd.dll [290816] O44 - LFC:[MD5.D200711A7A0DF27E8CE7042369E4B770] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corp. - Logical Disk Manager ASR Utility.) -- C:\WINDOWS\system32\asr_ldm.exe [32256] O44 - LFC:[MD5.6CCC351C2547772DE74204C09160710B] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corporation - ATL Module for Windows (Unicode).) -- C:\WINDOWS\system32\atl70.dll [86016] O44 - LFC:[MD5.4689DC0D515F70505F74B7F14AC83443] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corporation - ATL Module for Windows (Unicode).) -- C:\WINDOWS\system32\atl71.dll [90112] O44 - LFC:[MD5.7AD83A294F5446608743F4E90CCFAC96] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corporation - ATL Module for Windows XP (Unicode).) -- C:\WINDOWS\system32\atl.dll [58880] O44 - LFC:[MD5.91015B1F922C050498B1C9C725307F3D] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corporation - ATM Call Manager Utility.) -- C:\WINDOWS\system32\atmadm.exe [11264] O44 - LFC:[MD5.39A0A59180F19946374275745B21AEBA] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corporation - ATM Ethernet Encapsulation Intermediate Dri.) -- C:\WINDOWS\system32\Drivers\atmepvc.sys [31360] O44 - LFC:[MD5.AE76348A2605FB197FA8FF1D6F547836] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corporation - ATM Lan Emulation Driver.) -- C:\WINDOWS\system32\Drivers\atmlane.sys [55808] O44 - LFC:[MD5.06F6FB49D36B08E46D45CB705D7D52E0] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corporation - Atm Epvc Install DLL.) -- C:\WINDOWS\system32\atmpvcno.dll [34816] O44 - LFC:[MD5.BC8941FCB5F4C658054DC49B7E5C526B] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corporation - Automated System Recovery Protected Files U.) -- C:\WINDOWS\system32\asr_pfu.exe [32768] O44 - LFC:[MD5.C8667F83C8FECAFD3EFB0FD6F9C3787B] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corporation - Automated System Recovery Utility.) -- C:\WINDOWS\system32\asr_fmt.exe [30208] O44 - LFC:[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corporation - IDE/ATAPI Port Driver.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512] O44 - LFC:[MD5.9916C1225104BA14794209CFA8012159] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corporation - IP/ATM Arp Client.) -- C:\WINDOWS\system32\Drivers\atmarpc.sys [59904] O44 - LFC:[MD5.B153AFFAC761E7F5FCFA822B9C4E97BC] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corporation - MS Remote Access serial network driver.) -- C:\WINDOWS\system32\Drivers\asyncmac.sys [14336] O44 - LFC:[MD5.FB1C3BEB5829CDC3187A8257EF9BDF88] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\asycfilt.dll [65536] O44 - LFC:[MD5.FF90EEC0FAB78482BE97C5637FEF4090] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corporation - Schedule service command line interface.) -- C:\WINDOWS\system32\at.exe [25088] O44 - LFC:[MD5.51EF0CD67068DC954BDDA3BF7A6F3C81] - 7/3/2015 - 08:34:46 ---A- . (.Microsoft Corporation - Windows NT AppleTalk Perfmon Counter dll.) -- C:\WINDOWS\system32\atkctrs.dll [13312] O44 - LFC:[MD5.30475F091008E24550523515A023270D] - 7/3/2015 - 08:34:48 ---A- . (...) -- C:\WINDOWS\system32\AUTOEXEC.NT [1688] O44 - LFC:[MD5.E7EF69B38D17BA01F914AE8F66216A38] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - ATM UNI Call Manager.) -- C:\WINDOWS\system32\Drivers\atmuni.sys [352256] O44 - LFC:[MD5.D05D2C408BBDD201E145F1202B2F13BD] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - AVI Capture DLL.) -- C:\WINDOWS\system32\avicap.dll [69584] O44 - LFC:[MD5.01CFA88F8DEE91EC9F8E0988F49D106E] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - AVI Capture window class.) -- C:\WINDOWS\system32\avicap32.dll [64000] O44 - LFC:[MD5.E6D680494C812B82A15600FD23C94424] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - Attribute Utility.) -- C:\WINDOWS\system32\attrib.exe [12288] O44 - LFC:[MD5.59526DEAC6E55BBB19CF39174DCD1E59] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - Audit User Program.) -- C:\WINDOWS\system32\auditusr.exe [14336] O44 - LFC:[MD5.714705F29A917993536A6AB2DEDB0B7F] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - Authorization Framework.) -- C:\WINDOWS\system32\authz.dll [62464] O44 - LFC:[MD5.23043C91A0F9DFB4B9E9F87B680863B4] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - Auto Check Utility.) -- C:\WINDOWS\system32\autochk.exe [588800] O44 - LFC:[MD5.1F54D1F842805E71562552A9AE757C9C] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - Auto File System Conversion Utility.) -- C:\WINDOWS\system32\autoconv.exe [602624] O44 - LFC:[MD5.A38C1A7D8D8F4428CD8E96F3F2B6E046] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - Auto File System Conversion Utility.) -- C:\WINDOWS\system32\autofmt.exe [580608] O44 - LFC:[MD5.3124D41AFBD00F67CBAEDA3C6988D7F5] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - Axalto Card Module.) -- C:\WINDOWS\system32\axaltocm.dll [133120] O44 - LFC:[MD5.106C0F76987CD8EA3CB6EED6DCDB1588] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - LFN strip/restore utility.) -- C:\WINDOWS\system32\autolfn.exe [11264] O44 - LFC:[MD5.476F4F8CC006E64362A7B06E7DCD8A11] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - Microsoft AVI File support library.) -- C:\WINDOWS\system32\avifil32.dll [84992] O44 - LFC:[MD5.1131CC48B374FBF92EBAF0821C228ACA] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - Microsoft AVI File support library.) -- C:\WINDOWS\system32\avifile.dll [109456] O44 - LFC:[MD5.DEF7A7882BEC100FE0B2CE2549188F9D] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496] O44 - LFC:[MD5.03E17B2DC1BC66345FFB34325CA627A1] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - Windows AutoDiscovery API.) -- C:\WINDOWS\system32\autodisc.dll [80384] O44 - LFC:[MD5.5B6245518D71A6108BC385C4A8348218] - 7/3/2015 - 08:34:48 ---A- . (.Microsoft Corporation - azroles Module.) -- C:\WINDOWS\system32\azroles.dll [233472] O44 - LFC:[MD5.84BDB1E378591D930482B896A1648C53] - 7/3/2015 - 08:34:50 ---A- . (...) -- C:\WINDOWS\system32\bios1.rom [28420] O44 - LFC:[MD5.B44C4C9CA9D4BCC8430F3276576F562B] - 7/3/2015 - 08:34:50 ---A- . (...) -- C:\WINDOWS\system32\bios4.rom [8191] O44 - LFC:[MD5.DA1F27D85E0D1525F6621372E7B685E9] - 7/3/2015 - 08:34:50 ---A- . (.Microsoft Corporation - BEEP Driver.) -- C:\WINDOWS\system32\Drivers\beep.sys [4224] O44 - LFC:[MD5.A956751EF995DF776F19831123868A83] - 7/3/2015 - 08:34:50 ---A- . (.Microsoft Corporation - Battery Class Installer.) -- C:\WINDOWS\system32\batt.dll [8704] O44 - LFC:[MD5.231A0B0E3BA7ABFE469A8262FAA1FD71] - 7/3/2015 - 08:34:50 ---A- . (.Microsoft Corporation - Battery Meter Helper DLL.) -- C:\WINDOWS\system32\batmeter.dll [29184] O44 - LFC:[MD5.C9FC430129DB4E5272003E9307759987] - 7/3/2015 - 08:34:50 ---A- . (.Microsoft Corporation - Bidispl DLL.) -- C:\WINDOWS\system32\bidispl.dll [17408] O44 - LFC:[MD5.6537340B265177D085AEB359D571A297] - 7/3/2015 - 08:34:50 ---A- . (.Microsoft Corporation - BlackBox DLL.) -- C:\WINDOWS\system32\blackbox.dll [286720] O44 - LFC:[MD5.DA1919D896DBD5895E138932AE9E398B] - 7/3/2015 - 08:34:50 ---A- . (.Microsoft Corporation - Browser Choice.) -- C:\WINDOWS\system32\BrowserChoice.exe [293376] O44 - LFC:[MD5.BDAF7BFEA43A822E04C87CB02C3E5559] - 7/3/2015 - 08:34:50 ---A- . (.Microsoft Corporation - Microsoft Base Smart Card Crypto Provider R.) -- C:\WINDOWS\system32\bcsprsrc.dll [25600] O44 - LFC:[MD5.0E69E2995965788470BCBFA2E9AD43B3] - 7/3/2015 - 08:34:50 ---A- . (.Microsoft Corporation - Microsoft Base Smart Card Crypto Provider.) -- C:\WINDOWS\system32\basecsp.dll [96792] O44 - LFC:[MD5.42F1F4C0AFB08410E5F02D4B13EBB623] - 7/3/2015 - 08:34:50 ---A- . (.Microsoft Corporation - Windows NT BASE API Server DLL.) -- C:\WINDOWS\system32\basesrv.dll [52736] O44 - LFC:[MD5.F29356002DF533028467ED7947BE1DC4] - 7/3/2015 - 08:34:52 ---A- . (.Microsoft Corporation - Blaster/Nachi Removal Tool.) -- C:\WINDOWS\system32\blastcln.exe [71680] O44 - LFC:[MD5.875E85605BD6921862734F8A6E70E7A7] - 7/3/2015 - 08:34:52 ---A- . (.Microsoft Corporation - Boot Acceptance Application for Registry.) -- C:\WINDOWS\system32\bootok.exe [4608] O44 - LFC:[MD5.DF42260BA2A5826F77B7A4BD105BAACC] - 7/3/2015 - 08:34:52 ---A- . (.Microsoft Corporation - Boot Config Tool.) -- C:\WINDOWS\system32\bootcfg.exe [142848] O44 - LFC:[MD5.C2AB77D9DC66447DC1DB63751D7F673A] - 7/3/2015 - 08:34:52 ---A- . (.Microsoft Corporation - Boot Verify Application for Registry.) -- C:\WINDOWS\system32\bootvrfy.exe [5120] O44 - LFC:[MD5.F934D1B230F84E1D19DD00AC5A7A83ED] - 7/3/2015 - 08:34:52 ---A- . (.Microsoft Corporation - MAC Bridge Driver.) -- C:\WINDOWS\system32\Drivers\bridge.sys [71552] O44 - LFC:[MD5.CC306BF581446D5E443EAE5B3BB900F0] - 7/3/2015 - 08:34:52 ---A- . (.Microsoft Corporation - VGA Boot Driver.) -- C:\WINDOWS\system32\bootvid.dll [12288] O44 - LFC:[MD5.034A05E2D77E92486BEDC89A4C177BA9] - 7/3/2015 - 08:34:53 ---A- . (.Microsoft Corporation - Bluetooth Class Installer.) -- C:\WINDOWS\system32\bthci.dll [20992] O44 - LFC:[MD5.F4C43C66471B87996D95DB7A3A664A37] - 7/3/2015 - 08:34:53 ---A- . (.Microsoft Corporation - Bluetooth Support Service.) -- C:\WINDOWS\system32\bthserv.dll [30208] O44 - LFC:[MD5.51D05D5A8A7D93AB0B1A8D6A38DB3CA4] - 7/3/2015 - 08:34:54 ---A- . (.Microsoft Corporation - Bluetooth Bus Driver.) -- C:\WINDOWS\system32\Drivers\bthport.sys [272128] O44 - LFC:[MD5.80AA4214C5BC0A355151BD115017313F] - 7/3/2015 - 08:34:54 ---A- . (.Microsoft Corporation - Bluetooth Control Panel Applet.) -- C:\WINDOWS\system32\bthprops.cpl [110592] O44 - LFC:[MD5.11D4A27F511A3E99F2BD8DA6835FEFBD] - 7/3/2015 - 08:34:54 ---A- . (.Microsoft Corporation - Bluetooth PAN User Interface.) -- C:\WINDOWS\system32\btpanui.dll [50688] O44 - LFC:[MD5.50F898E7564F2DE6FECC272A31C277F9] - 7/3/2015 - 08:34:54 ---A- . (.Microsoft Corporation - BrowseWM Player.) -- C:\WINDOWS\system32\browsewm.dll [78336] O44 - LFC:[MD5.FC6D1D80588D371F0321E15A75B2F8F2] - 7/3/2015 - 08:34:54 ---A- . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [78336] O44 - LFC:[MD5.F3370C98F4981EDA6036689D298E67B9] - 7/3/2015 - 08:34:54 ---A- . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browselc.dll [63488] O44 - LFC:[MD5.CFCF46EE92BCBE0242AB5677EC5A5860] - 7/3/2015 - 08:34:54 ---A- . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll [1025024] O44 - LFC:[MD5.0D143112394173967A3647096F74E743] - 7/3/2015 - 08:34:58 ---A- . (...) -- C:\WINDOWS\system32\c_037.nls [66082] O44 - LFC:[MD5.A716B23BA6632B7F0DABB5B8AC078F27] - 7/3/2015 - 08:34:58 ---A- . (...) -- C:\WINDOWS\system32\c_10000.nls [66082] O44 - LFC:[MD5.0A206B5CACD3CA70D2044DA691304765] - 7/3/2015 - 08:34:58 ---A- . (...) -- C:\WINDOWS\system32\c_10006.nls [66082] O44 - LFC:[MD5.AF4A866226BD04ACF06135088D75BB63] - 7/3/2015 - 08:34:58 ---A- . (...) -- C:\WINDOWS\system32\c_10007.nls [66082] O44 - LFC:[MD5.6F8A509550FE8C92D07EE0143BF29BA1] - 7/3/2015 - 08:34:58 ---A- . (...) -- C:\WINDOWS\system32\c_10010.nls [66082] O44 - LFC:[MD5.314E85390BEBDAE5D1E11DB2D8CBC6E9] - 7/3/2015 - 08:34:58 ---A- . (...) -- C:\WINDOWS\system32\c_10017.nls [66082] O44 - LFC:[MD5.D2CA471D36A69D17F82D5C1B64FAEE39] - 7/3/2015 - 08:34:58 ---A- . (...) -- C:\WINDOWS\system32\c_10029.nls [66082] O44 - LFC:[MD5.29B5AF5B12D955C316821F277C5B4D7D] - 7/3/2015 - 08:34:58 ---A- . (...) -- C:\WINDOWS\system32\c_10079.nls [66082] O44 - LFC:[MD5.EFFDFF60A38CF648811BBCDD722ECF5E] - 7/3/2015 - 08:34:58 ---A- . (...) -- C:\WINDOWS\system32\c_10081.nls [66082] O44 - LFC:[MD5.9CA501D2A8E6909C5B2E8C9274682BF1] - 7/3/2015 - 08:34:58 ---A- . (...) -- C:\WINDOWS\system32\c_10082.nls [66082] O44 - LFC:[MD5.71E7F8B0F28585439E95B3D3B296984B] - 7/3/2015 - 08:34:58 ---A- . (...) -- C:\WINDOWS\system32\c_1026.nls [66082] O44 - LFC:[MD5.2E0B152ED60DE2431DFC0C436363385E] - 7/3/2015 - 08:35:00 ---A- . (...) -- C:\WINDOWS\system32\c_1250.nls [66082] O44 - LFC:[MD5.0E91B896B81CF0B7DF62C824224B891A] - 7/3/2015 - 08:35:00 ---A- . (...) -- C:\WINDOWS\system32\c_1251.nls [66082] O44 - LFC:[MD5.ACB769EC498FB62316EAB45ADB680F22] - 7/3/2015 - 08:35:00 ---A- . (...) -- C:\WINDOWS\system32\c_1252.nls [66082] O44 - LFC:[MD5.E1858EDF032363E84922CDB91E75797A] - 7/3/2015 - 08:35:00 ---A- . (...) -- C:\WINDOWS\system32\c_1253.nls [66082] O44 - LFC:[MD5.808CCC573F51DC7AB3D5151A2D2AF1BF] - 7/3/2015 - 08:35:00 ---A- . (...) -- C:\WINDOWS\system32\c_1254.nls [66082] O44 - LFC:[MD5.C386BDB1A653A4390313AE192EFF2732] - 7/3/2015 - 08:35:00 ---A- . (...) -- C:\WINDOWS\system32\c_1255.nls [66082] O44 - LFC:[MD5.6F42B3E7ED97C9EAC38615B907F08721] - 7/3/2015 - 08:35:02 ---A- . (...) -- C:\WINDOWS\system32\c_1256.nls [66082] O44 - LFC:[MD5.AF381A5B093736A3A28EFDC1BB4F5FCB] - 7/3/2015 - 08:35:02 ---A- . (...) -- C:\WINDOWS\system32\c_1257.nls [66082] O44 - LFC:[MD5.43B0D0C38C885CCF742740FFC1F00535] - 7/3/2015 - 08:35:02 ---A- . (...) -- C:\WINDOWS\system32\c_1258.nls [66082] O44 - LFC:[MD5.6CB26848BCDAA361B6EE21264FB362C3] - 7/3/2015 - 08:35:02 ---A- . (...) -- C:\WINDOWS\system32\c_20127.nls [66082] O44 - LFC:[MD5.7D07126E0ED768C04B245A43AF2F94ED] - 7/3/2015 - 08:35:02 ---A- . (...) -- C:\WINDOWS\system32\c_20261.nls [139810] O44 - LFC:[MD5.DD7F9900C070890C59417B5271581ED3] - 7/3/2015 - 08:35:04 ---A- . (...) -- C:\WINDOWS\system32\c_20866.nls [66082] O44 - LFC:[MD5.1ADCE2879B486ACB126750EF18B2E658] - 7/3/2015 - 08:35:04 ---A- . (...) -- C:\WINDOWS\system32\c_20905.nls [66082] O44 - LFC:[MD5.41034D46626ECC2CC635FD884E878D6D] - 7/3/2015 - 08:35:06 ---A- . (...) -- C:\WINDOWS\system32\c_21866.nls [66082] O44 - LFC:[MD5.E45ECA3F540E09C039710EF00219A61B] - 7/3/2015 - 08:35:06 ---A- . (...) -- C:\WINDOWS\system32\c_28591.nls [66082] O44 - LFC:[MD5.0F8F998263E4C090C9C9B31D84C41654] - 7/3/2015 - 08:35:06 ---A- . (...) -- C:\WINDOWS\system32\c_28592.nls [66082] O44 - LFC:[MD5.082453B28A3F457FFF330DBDDB32FF45] - 7/3/2015 - 08:35:06 ---A- . (...) -- C:\WINDOWS\system32\c_28593.nls [66082] O44 - LFC:[MD5.5D038EEABA8EA438F6B5ABD5E91BC851] - 7/3/2015 - 08:35:08 ---A- . (...) -- C:\WINDOWS\system32\C_28594.NLS [66082] O44 - LFC:[MD5.E22D1B9AC7854C0A654E4C4232074E49] - 7/3/2015 - 08:35:08 ---A- . (...) -- C:\WINDOWS\system32\C_28595.NLS [66082] O44 - LFC:[MD5.B537ACFAB9E70F0EF48DB696A08ADC81] - 7/3/2015 - 08:35:08 ---A- . (...) -- C:\WINDOWS\system32\C_28597.NLS [66082] O44 - LFC:[MD5.BDD5D78F5DB2204A9247C53861357FAF] - 7/3/2015 - 08:35:08 ---A- . (...) -- C:\WINDOWS\system32\c_28598.nls [66082] O44 - LFC:[MD5.C37A21EE1ADFDC13FC707D97073148ED] - 7/3/2015 - 08:35:08 ---A- . (...) -- C:\WINDOWS\system32\c_28599.nls [66082] O44 - LFC:[MD5.35448F3A71EBBECF8E997FAD3A99327D] - 7/3/2015 - 08:35:10 ---A- . (...) -- C:\WINDOWS\system32\c_28603.nls [66082] O44 - LFC:[MD5.DA11C0F72C41A6B3CA24FB83E52D7043] - 7/3/2015 - 08:35:10 ---A- . (...) -- C:\WINDOWS\system32\c_28605.nls [66082] O44 - LFC:[MD5.0BD539284D746E022BDA27C1F85A525A] - 7/3/2015 - 08:35:10 ---A- . (...) -- C:\WINDOWS\system32\c_437.nls [66594] O44 - LFC:[MD5.90F5232D99D17AA1BBA3CE2228CF1B2A] - 7/3/2015 - 08:35:10 ---A- . (...) -- C:\WINDOWS\system32\c_500.nls [66082] O44 - LFC:[MD5.BAC7072B365F9648CA318154BA7E03EC] - 7/3/2015 - 08:35:12 ---A- . (...) -- C:\WINDOWS\system32\c_737.nls [66594] O44 - LFC:[MD5.0E61D6CD6391CE9BF007BAF0DC905320] - 7/3/2015 - 08:35:12 ---A- . (...) -- C:\WINDOWS\system32\c_775.nls [66594] O44 - LFC:[MD5.CAAF621DC0936CCAC5106EA62F350E80] - 7/3/2015 - 08:35:12 ---A- . (...) -- C:\WINDOWS\system32\c_850.nls [66594] O44 - LFC:[MD5.21E928C8E6ED8EEAB0D1AAEE82ACDD76] - 7/3/2015 - 08:35:12 ---A- . (...) -- C:\WINDOWS\system32\c_852.nls [66594] O44 - LFC:[MD5.3E969213F35127D83DAB48FF1283E8E4] - 7/3/2015 - 08:35:12 ---A- . (...) -- C:\WINDOWS\system32\c_855.nls [66594] O44 - LFC:[MD5.A8764750B22B528D85A691A52CB21856] - 7/3/2015 - 08:35:12 ---A- . (...) -- C:\WINDOWS\system32\c_857.nls [66594] O44 - LFC:[MD5.B124A84735113A699F0413F1D6875975] - 7/3/2015 - 08:35:12 ---A- . (...) -- C:\WINDOWS\system32\c_860.nls [66594] O44 - LFC:[MD5.DDE3D4D8C117B5A67F7898DA547F0E4E] - 7/3/2015 - 08:35:12 ---A- . (...) -- C:\WINDOWS\system32\c_861.nls [66594] O44 - LFC:[MD5.0220888BDD435156DE91C5D390FE0166] - 7/3/2015 - 08:35:14 ---A- . (...) -- C:\WINDOWS\system32\c_863.nls [66594] O44 - LFC:[MD5.4091021638E2591CFAED8E1CF9D54E1F] - 7/3/2015 - 08:35:14 ---A- . (...) -- C:\WINDOWS\system32\c_865.nls [66594] O44 - LFC:[MD5.5CD475CA7B87844DE1E0483B536F9AAE] - 7/3/2015 - 08:35:14 ---A- . (...) -- C:\WINDOWS\system32\c_866.nls [66594] O44 - LFC:[MD5.780C444EB16B65E6DE96F794A732DA12] - 7/3/2015 - 08:35:14 ---A- . (...) -- C:\WINDOWS\system32\c_869.nls [66594] O44 - LFC:[MD5.7A0EE54F89FFE0F038660BA580FB4440] - 7/3/2015 - 08:35:14 ---A- . (...) -- C:\WINDOWS\system32\c_874.nls [66594] O44 - LFC:[MD5.8BE0D77A873730B4EB1DAB7C6622CD46] - 7/3/2015 - 08:35:14 ---A- . (...) -- C:\WINDOWS\system32\c_875.nls [66082] O44 - LFC:[MD5.DFFAFA40198800BA2933977F67B956C2] - 7/3/2015 - 08:35:14 ---A- . (...) -- C:\WINDOWS\system32\c_932.nls [162850] O44 - LFC:[MD5.17028718996FCBCEEE59F38F2D944281] - 7/3/2015 - 08:35:14 ---A- . (...) -- C:\WINDOWS\system32\c_936.nls [196642] O44 - LFC:[MD5.D2558C26CDBF05740348451DB6A5B955] - 7/3/2015 - 08:35:14 ---A- . (...) -- C:\WINDOWS\system32\c_949.nls [196642] O44 - LFC:[MD5.8557D3EDA30586685DAD701ABA69D0DD] - 7/3/2015 - 08:35:14 ---A- . (...) -- C:\WINDOWS\system32\c_950.nls [196642] O44 - LFC:[MD5.54F89125291CEED1F04402CEFB5812D0] - 7/3/2015 - 08:35:14 ---A- . (...) -- C:\WINDOWS\system32\customaddreg.dll [4608] O44 - LFC:[MD5.D9691FDF6F9BE4CED90F4BCBABB93C89] - 7/3/2015 - 08:35:14 ---A- . (.Microsoft Corporation - Cabinet File Viewer Shell Extension.) -- C:\WINDOWS\system32\cabview.dll [86016] O44 - LFC:[MD5.45CC061D9581E52F008E90E81DA2CFD9] - 7/3/2015 - 08:35:14 ---A- . (.Microsoft Corporation - Control ACLs Program.) -- C:\WINDOWS\system32\cacls.exe [19968] O44 - LFC:[MD5.F9D3C78CFE15271D80790677C893CE45] - 7/3/2015 - 08:35:14 ---A- . (.Microsoft Corporation - Microsoft® Cabinet File API.) -- C:\WINDOWS\system32\cabinet.dll [60416] O44 - LFC:[MD5.989974032E6C873A17C9E92D4B339571] - 7/3/2015 - 08:35:18 ---A- . (.Microsoft Corporation - Entertainment Pack Cardplaying Helper DLL.) -- C:\WINDOWS\system32\cards.dll [359936] O44 - LFC:[MD5.E091C3ACD0C3863F4DA4D72E384AA655] - 7/3/2015 - 08:35:18 ---A- . (.Microsoft Corporation - Microsoft® Certificate Template Management.) -- C:\WINDOWS\system32\capesnpn.dll [150016] O44 - LFC:[MD5.FDCCB90FDAC518C6CF62A29CA6C47975] - 7/3/2015 - 08:35:18 ---A- . (.Microsoft Corporation - WIA Camera View DLL.) -- C:\WINDOWS\system32\camocx.dll [50688] O44 - LFC:[MD5.4B0A100EAF5C49EF3CCA8C641431EACC] - 7/3/2015 - 08:35:19 ---A- . (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\system32\Drivers\cdrom.sys [62976] O44 - LFC:[MD5.C885B02847F5D2FD45A24E219ED93B32] - 7/3/2015 - 08:35:20 ---A- . (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\system32\Drivers\cdfs.sys [63744] O44 - LFC:[MD5.90A673FC8E12A79AFBED2576F6A7AAF9] - 7/3/2015 - 08:35:20 ---A- . (.Microsoft Corporation - CardBus/PCMCIA IDE Miniport Driver.) -- C:\WINDOWS\system32\Drivers\cbidf2k.sys [13952] O44 - LFC:[MD5.332A091AC338E6025A3F1A6C3D61249F] - 7/3/2015 - 08:35:20 ---A- . (.Microsoft Corporation - Channel Definition File Viewer.) -- C:\WINDOWS\system32\cdfview.dll [151040] O44 - LFC:[MD5.6737310E1A9A019A52DF1D0399F80CE8] - 7/3/2015 - 08:35:20 ---A- . (.Microsoft Corporation - Internet Configuration Library.) -- C:\WINDOWS\system32\ccfgnt.dll [27648] O44 - LFC:[MD5.465F0EB786E0F667E4374704836B5717] - 7/3/2015 - 08:35:20 ---A- . (.Microsoft Corporation - Microsoft CDO for Windows Library.) -- C:\WINDOWS\system32\cdosys.dll [2091520] O44 - LFC:[MD5.00709952D444EAE14DBBD30D36FBAE0F] - 7/3/2015 - 08:35:20 ---A- . (.Microsoft Corporation - Microsoft® Certificate Services Client.) -- C:\WINDOWS\system32\certcli.dll [194560] O44 - LFC:[MD5.818ABC21117E07A8A03E9F32E0E388B5] - 7/3/2015 - 08:35:20 ---A- . (.Microsoft Corporation - Windows Update CDM Stub.) -- C:\WINDOWS\system32\cdm.dll [97304] O44 - LFC:[MD5.A83B5086BF1786DD46EBE598A7F30397] - 7/3/2015 - 08:35:22 ---A- . (...) -- C:\WINDOWS\system32\View Channels.scf [75] O44 - LFC:[MD5.E3654E5985547A23FBDBBDB54E62F1B9] - 7/3/2015 - 08:35:22 ---A- . (...) -- C:\WINDOWS\system32\certmgr.msc [42339] O44 - LFC:[MD5.F137739E3AB15387A813C37A235BAE24] - 7/3/2015 - 08:35:22 ---A- . (.Microsoft Corporation - Certificates snap-in.) -- C:\WINDOWS\system32\certmgr.dll [457728] O44 - LFC:[MD5.CBDB7F64381912A4158D7F0DF4A4BF51] - 7/3/2015 - 08:35:22 ---A- . (.Microsoft Corporation - Change CodePage Utility.) -- C:\WINDOWS\system32\chcp.com [7680] O44 - LFC:[MD5.5F0CE62E0831CF972EC6949FD3E37DA7] - 7/3/2015 - 08:35:22 ---A- . (.Microsoft Corporation - Configuration Manager Forwarder DLL.) -- C:\WINDOWS\system32\cfgmgr32.dll [16896] O44 - LFC:[MD5.962AB2EEF2825E4D806CD6D3DC6FCA97] - 7/3/2015 - 08:35:22 ---A- . (.Microsoft Corporation - Windows CE WMDM Service Provider.) -- C:\WINDOWS\system32\cewmdm.dll [159232] O44 - LFC:[MD5.A3C1501EBB52C4BED19250D91C5FAA12] - 7/3/2015 - 08:35:24 ---A- . (...) -- C:\WINDOWS\system32\ciadv.msc [41762] O44 - LFC:[MD5.B8E095E6C3F8A34BB1C93A84C7976604] - 7/3/2015 - 08:35:24 ---A- . (.Microsoft Corporation - CI Administration (MMC).) -- C:\WINDOWS\system32\ciadmin.dll [163328] O44 - LFC:[MD5.6DE1A72468603B6EA37C29DF343F42E9] - 7/3/2015 - 08:35:24 ---A- . (.Microsoft Corporation - CIC - MMC controls for Taskpad.) -- C:\WINDOWS\system32\cic.dll [148480] O44 - LFC:[MD5.5F7EAAF5D10E2A715D5E305AC992B2A7] - 7/3/2015 - 08:35:24 ---A- . (.Microsoft Corporation - Check Disk Utility.) -- C:\WINDOWS\system32\chkdsk.exe [11776] O44 - LFC:[MD5.37461F2C3F212CF508A20FDC729ABDE5] - 7/3/2015 - 08:35:24 ---A- . (.Microsoft Corporation - Column List Box.) -- C:\WINDOWS\system32\clb.dll [10752] O44 - LFC:[MD5.1CFE720EB8D93A7158A4EBC3AB178BDE] - 7/3/2015 - 08:35:24 ---A- . (.Microsoft Corporation - Content Index service.) -- C:\WINDOWS\system32\cisvc.exe [5632] O44 - LFC:[MD5.602C3D1017C3A6CCAF44DA5050DE5817] - 7/3/2015 - 08:35:24 ---A- . (.Microsoft Corporation - Cookie Converter.) -- C:\WINDOWS\system32\ckcnv.exe [7680] O44 - LFC:[MD5.AF4E13CA861860A3F620B595B49065A1] - 7/3/2015 - 08:35:24 ---A- . (.Microsoft Corporation - File Encryption Utility.) -- C:\WINDOWS\system32\cipher.exe [56832] O44 - LFC:[MD5.997A910BA3747E6B8E1923A8F3BDC408] - 7/3/2015 - 08:35:24 ---A- . (.Microsoft Corporation - Indexing Service Admin Automation Objects.) -- C:\WINDOWS\system32\ciodm.dll [69120] O44 - LFC:[MD5.582304F6F1946FA5068CF143D729D7ED] - 7/3/2015 - 08:35:24 ---A- . (.Microsoft Corporation - Indexing Service filter daemon.) -- C:\WINDOWS\system32\cidaemon.exe [8192] O44 - LFC:[MD5.8C0E9012EB04596B757FA4C547438908] - 7/3/2015 - 08:35:24 ---A- . (.Microsoft Corporation - NTFS Volume Maitenance Utility.) -- C:\WINDOWS\system32\chkntfs.exe [11264] O44 - LFC:[MD5.FE47DD8FE6D7768FF94EBEC6C74B2719] - 7/3/2015 - 08:35:24 ---A- . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\WINDOWS\system32\Drivers\classpnp.sys [49536] O44 - LFC:[MD5.6AA72CA60BD45A92D203DD4AF83FE132] - 7/3/2015 - 08:35:24 ---A- . (.Microsoft Corporation - Windows Shell Style Resource Dll.) -- C:\WINDOWS\system32\shellstyle.dll [435712] O44 - LFC:[MD5.35F91C57DACA971CB9A81F908740A7F4] - 7/3/2015 - 08:35:26 ---A- . (...) -- C:\WINDOWS\system32\cliconf.chm [71859] O44 - LFC:[MD5.949CC598C3B2E08CE50E38761FDADFB4] - 7/3/2015 - 08:35:26 ---A- . (...) -- C:\WINDOWS\system32\cmdlib.wsc [40505] O44 - LFC:[MD5.4CE81F86D910436DD3FBFC8F1BE5A8C0] - 7/3/2015 - 08:35:26 ---A- . (...) -- C:\WINDOWS\system32\cmmgr32.hlp [61172] O44 - LFC:[MD5.5D24FB0922E71DE67E20E9F22946A54D] - 7/3/2015 - 08:35:26 ---A- . (...) -- C:\WINDOWS\system32\cmos.ram [64] O44 - LFC:[MD5.DF82E222578DBE59FCBBD69A02E4C806] - 7/3/2015 - 08:35:26 ---A- . (.Microsoft Corporation - Cluster API Library.) -- C:\WINDOWS\system32\clusapi.dll [58368] O44 - LFC:[MD5.F1DAD2FD181C58DFB4CA414FC2052E4F] - 7/3/2015 - 08:35:26 ---A- . (.Microsoft Corporation - Connection Manager ACL update.) -- C:\WINDOWS\system32\cmsetACL.dll [13312] O44 - LFC:[MD5.2C4E4027E418EB4F0ED1E3793A4834DF] - 7/3/2015 - 08:35:26 ---A- . (.Microsoft Corporation - Disk Space Cleanup Manager for Windows.) -- C:\WINDOWS\system32\cleanmgr.exe [64000] O44 - LFC:[MD5.FC8C41CFA2E3408EE217EFFA3B854798] - 7/3/2015 - 08:35:26 ---A- . (.Microsoft Corporation - Microsoft Connection Manager Auto-Download.) -- C:\WINDOWS\system32\cmdl32.exe [25600] O44 - LFC:[MD5.865BB7CD7D06E2D8B47D51E82EA4CFC7] - 7/3/2015 - 08:35:26 ---A- . (.Microsoft Corporation - Microsoft Connection Manager Configuration.) -- C:\WINDOWS\system32\cmcfg32.dll [15872] O44 - LFC:[MD5.0131552EB5C43A74163A62BDCA7AA715] - 7/3/2015 - 08:35:26 ---A- . (.Microsoft Corporation - Microsoft Connection Manager Monitor.) -- C:\WINDOWS\system32\cmmon32.exe [39936] O44 - LFC:[MD5.45C8F5CC033B21088C8918EB26EF3E0E] - 7/3/2015 - 08:35:26 ---A- . (.Microsoft Corporation - Microsoft Connection Manager Phonebook.) -- C:\WINDOWS\system32\cmpbk32.dll [14336] O44 - LFC:[MD5.231138871DCE86961694177508CC8F17] - 7/3/2015 - 08:35:26 ---A- . (.Microsoft Corporation - Microsoft Connection Manager Profile Instal.) -- C:\WINDOWS\system32\cmstp.exe [63488] O44 - LFC:[MD5.B3A4C9130872322888249F827CFAB0C3] - 7/3/2015 - 08:35:26 ---A- . (.Microsoft Corporation - Microsoft Connection Manager.) -- C:\WINDOWS\system32\cmdial32.dll [344064] O44 - LFC:[MD5.0734C66ED8F837B7C90E629F6AB9C11D] - 7/3/2015 - 08:35:26 ---A- . (.Microsoft Corporation - SQL Client Configuration Utility DLL.) -- C:\WINDOWS\system32\cliconfg.dll [77824] O44 - LFC:[MD5.F90B51CB5FDFD2731AF88CCD5CB22EAC] - 7/3/2015 - 08:35:26 ---A- . (.Microsoft Corporation - SQL Client Configuration Utility EXE.) -- C:\WINDOWS\system32\cliconfg.exe [20480] O44 - LFC:[MD5.E6641C66DC826FBF623B9EE1C91264D5] - 7/3/2015 - 08:35:26 ---A- . (.Microsoft Corporation - SQL Client Configuration Utility Resource D.) -- C:\WINDOWS\system32\cliconfg.rll [24576] O44 - LFC:[MD5.6D778E0F95447E6546553EEEA709D03C] - 7/3/2015 - 08:35:26 ---A- . (.Microsoft Corporation - Windows Command Processor.) -- C:\WINDOWS\system32\cmd.exe [389120] O44 - LFC:[MD5.34CBE729F38138217F9C80212A2A0C82] - 7/3/2015 - 08:35:26 ---A- . (.Microsoft Corporation - Windows NT DDE Server.) -- C:\WINDOWS\system32\clipsrv.exe [33280] O44 - LFC:[MD5.BE67D29CA914DE072D9971E3FFFC4050] - 7/3/2015 - 08:35:28 ---A- . (...) -- C:\WINDOWS\system32\command.com [50620] O44 - LFC:[MD5.4F21B3DB8623C00EEC9FA766DD14539D] - 7/3/2015 - 08:35:28 ---A- . (.Microsoft Corporation - CMDialog ActiveX Control DLL.) -- C:\WINDOWS\system32\comdlg32.ocx [163376] O44 - LFC:[MD5.93AFB83FBC1F9443CAC722FCA63D73BF] - 7/3/2015 - 08:35:28 ---A- . (.Microsoft Corporation - Common Controls Library.) -- C:\WINDOWS\system32\comctl32.dll [617472] O44 - LFC:[MD5.86987A5000DFA3EBE2275C0456BCF2FE] - 7/3/2015 - 08:35:28 ---A- . (.Microsoft Corporation - Common Dialogs DLL.) -- C:\WINDOWS\system32\comdlg32.dll [276992] O44 - LFC:[MD5.508AD6502860BA3796DE7E50810F1A72] - 7/3/2015 - 08:35:28 ---A- . (.Microsoft Corporation - Common Dialogs libraries.) -- C:\WINDOWS\system32\commdlg.dll [32816] O44 - LFC:[MD5.1174B4282B4B617C64505ADCF253375D] - 7/3/2015 - 08:35:28 ---A- . (.Microsoft Corporation - Connection Manager Library.) -- C:\WINDOWS\system32\cnetcfg.dll [32768] O44 - LFC:[MD5.AEE886CE131B9367006531E28C6F497E] - 7/3/2015 - 08:35:28 ---A- . (.Microsoft Corporation - FAT File System Conversion Utility DLL.) -- C:\WINDOWS\system32\cnvfat.dll [26624] O44 - LFC:[MD5.7B29C2B4D0609168BA768344DDFCC354] - 7/3/2015 - 08:35:28 ---A- . (.Microsoft Corporation - File Compare Utility.) -- C:\WINDOWS\system32\comp.exe [15872] O44 - LFC:[MD5.2648D9081FDD9BAF5E0667D6B319DACC] - 7/3/2015 - 08:35:28 ---A- . (.Microsoft Corporation - Microsoft Common Controls 2 ActiveX Control.) -- C:\WINDOWS\system32\comct232.ocx [170080] O44 - LFC:[MD5.C24F1E7C15C6D47ECED9DBD3E9B90D52] - 7/3/2015 - 08:35:28 ---A- . (.Microsoft Corporation - Microsoft Common Controls 3 ActiveX Control.) -- C:\WINDOWS\system32\comct332.ocx [415552] O44 - LFC:[MD5.FFAD3F4EDFF2D549B5966F59CCF8389B] - 7/3/2015 - 08:35:28 ---A- . (.Microsoft Corporation - Microsoft Component Category Manager Librar.) -- C:\WINDOWS\system32\comcat.dll [3584] O44 - LFC:[MD5.C70DBF90F9B58BAE2B7F6CD22C85FC0C] - 7/3/2015 - 08:35:28 ---A- . (.Microsoft Corporation - Microsoft Connection Manager Utility Lib.) -- C:\WINDOWS\system32\cmutil.dll [39424] O44 - LFC:[MD5.01B656374912D7CCF7465A3893F18982] - 7/3/2015 - 08:35:28 ---A- . (.Microsoft Corporation - Windows COMM Driver.) -- C:\WINDOWS\system32\comm.drv [10544] O44 - LFC:[MD5.1FE8CE3F5288BD3D53D188307BC7B218] - 7/3/2015 - 08:35:28 ---A- . (.Microsoft Corporation - Windows Common Controls ActiveX Control DLL.) -- C:\WINDOWS\system32\comctl32.ocx [617816] O44 - LFC:[MD5.F47B111821E8557A5605EF83C549887B] - 7/3/2015 - 08:35:30 ---A- . (.Microsoft Corporation - File Compress Utility.) -- C:\WINDOWS\system32\compact.exe [17408] O44 - LFC:[MD5.809CFE39672E833E806E00560DDD7568] - 7/3/2015 - 08:35:30 ---A- . (.No owner - CompatUI Module.) -- C:\WINDOWS\system32\compatUI.dll [252928] O44 - LFC:[MD5.6BE18FD6FB54082FE72627B1D481579C] - 7/3/2015 - 08:36:02 ---A- . (...) -- C:\WINDOWS\system32\compmgmt.msc [38302] O44 - LFC:[MD5.F3DAA4DD728761E1ACACD1D17C6C3C93] - 7/3/2015 - 08:36:02 ---A- . (.Microsoft Corporation - Common Property Sheet User Interface DLL.) -- C:\WINDOWS\system32\compstui.dll [229376] O44 - LFC:[MD5.ABC9002269E569538901109441660DD2] - 7/3/2015 - 08:36:02 ---A- . (.Microsoft Corporation - Console IME.) -- C:\WINDOWS\system32\conime.exe [27648] O44 - LFC:[MD5.F5430B03E141E098C78D5DB46B00F8FC] - 7/3/2015 - 08:36:02 ---A- . (.Microsoft Corporation - Microsoft IP Conferencing Media Service Pro.) -- C:\WINDOWS\system32\confmsp.dll [357888] O44 - LFC:[MD5.1280A158C722FA95A80FB7AEBE78FA7D] - 7/3/2015 - 08:36:02 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comres.dll [792064] O44 - LFC:[MD5.40F9FC896B2BA69FDC04D75E9D00DD01] - 7/3/2015 - 08:36:02 ---A- . (.Microsoft Corporation - OLE 2.1 16/32 Interoperability Library.) -- C:\WINDOWS\system32\compobj.dll [30160] O44 - LFC:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 7/3/2015 - 08:36:04 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097] O44 - LFC:[MD5.BE6EFA58BB1773C6E46E3286193D5129] - 7/3/2015 - 08:36:04 ---A- . (.Microsoft Corporation - Control Panel Console Applet.) -- C:\WINDOWS\system32\console.dll [66560] O44 - LFC:[MD5.D094341A23CC083C9411DEE93194FF89] - 7/3/2015 - 08:36:04 ---A- . (.Microsoft Corporation - File System Conversion Utility.) -- C:\WINDOWS\system32\convert.exe [13824] O44 - LFC:[MD5.961AB33DD45B80DB60817F2F014E9EAA] - 7/3/2015 - 08:36:04 ---A- . (.Microsoft Corporation - Microsoft COM Runtime Execution Engine.) -- C:\WINDOWS\system32\corpol.dll [18944] O44 - LFC:[MD5.4C6785E3D2E45EE87CB995190A0C7737] - 7/3/2015 - 08:36:04 ---A- . (.Microsoft Corporation - Windows Control Panel.) -- C:\WINDOWS\system32\control.exe [8192] O44 - LFC:[MD5.235892E493845D64D890163CFEF90E97] - 7/3/2015 - 08:36:06 ---A- . (.Microsoft Corporation - Credential Manager User Interface.) -- C:\WINDOWS\system32\credui.dll [163840] O44 - LFC:[MD5.8E20D83D04076A3682706A2BE1BBA80E] - 7/3/2015 - 08:36:06 ---A- . (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\WINDOWS\system32\credssp.dll [12800] O44 - LFC:[MD5.101444C8A4F5C31AE02DF66689BC10BC] - 7/3/2015 - 08:36:08 ---A- . (...) -- C:\WINDOWS\system32\ctype.nls [8386] O44 - LFC:[MD5.77F525AB8C674F2CD148ACE5C345CE19] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - CSSeqChk.) -- C:\WINDOWS\system32\csseqchk.dll [73728] O44 - LFC:[MD5.5F1D5F88303D4A4DBC8E5F97BA967CC3] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe [15360] O44 - LFC:[MD5.693AD11C59926428871C11FA3C348A2A] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - Client Server Runtime Process.) -- C:\WINDOWS\system32\csrsrv.dll [33280] O44 - LFC:[MD5.44F275C64738EA2056E3D9580C23B60F] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - Client Server Runtime Process.) -- C:\WINDOWS\system32\csrss.exe [6144] O44 - LFC:[MD5.085ED2E391A871C7BAE87E0228B546BA] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - Client Side Caching UI.) -- C:\WINDOWS\system32\cscui.dll [326656] O44 - LFC:[MD5.636DF3FF20A1B69B3F9D21325E7115C7] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll [603136] O44 - LFC:[MD5.C14350FC0D47D806699C4F907FC6785B] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll [64512] O44 - LFC:[MD5.95C9810EE06A6302C7330B295CFE4BA5] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - Crypto Shell Extensions.) -- C:\WINDOWS\system32\cryptext.dll [53760] O44 - LFC:[MD5.3D4E199942E29207970E04315D02AD3B] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464] O44 - LFC:[MD5.17A1D675C12BBF80CAAC54A4855C41D0] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - Cryptography Manager.) -- C:\WINDOWS\system32\cryptdll.dll [33280] O44 - LFC:[MD5.71C4A5DA6A940DDBF17C99F0B7611F06] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - Ctl3D 3D Windows Controls.) -- C:\WINDOWS\system32\ctl3d32.dll [27136] O44 - LFC:[MD5.637D88E7A1BEDC4457C80DBC8BA9F135] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - Ctl3D 3D Windows NT(WOW) Control.) -- C:\WINDOWS\system32\ctl3dv2.dll [27200] O44 - LFC:[MD5.23D42C651F89420F7232AEB7A2A43D03] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - Microsoft (R) Console Based Script Host.) -- C:\WINDOWS\system32\cscript.exe [135168] O44 - LFC:[MD5.06F2AEA1065838AAE394553063CDF28E] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - Microsoft C Runtime Library.) -- C:\WINDOWS\system32\crtdll.dll [149019] O44 - LFC:[MD5.EBBC8C8EBC985E14875F4277A64D88DC] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - Microsoft Common Certificate Dialogs.) -- C:\WINDOWS\system32\cryptdlg.dll [74752] O44 - LFC:[MD5.6E4BE11D50F8A8DE2BAD644C9C9DE8D3] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - Microsoft Trust UI Provider.) -- C:\WINDOWS\system32\cryptui.dll [512512] O44 - LFC:[MD5.E69BDCDA821E8BE9DE1BA1EF72F8C94D] - 7/3/2015 - 08:36:08 ---A- . (.Microsoft Corporation - Offline Network Agent.) -- C:\WINDOWS\system32\cscdll.dll [102400] O44 - LFC:[MD5.A023D0C8897EE721A54B125C3C0C9D1B] - 7/3/2015 - 08:36:10 ---A- . (.Microsoft Corporation - Direct3D Progressive Mesh DLL.) -- C:\WINDOWS\system32\d3dpmesh.dll [34816] O44 - LFC:[MD5.DDE9E3B8C264957AE0A017D371293123] - 7/3/2015 - 08:36:10 ---A- . (.Microsoft Corporation - Direct3D Retained Mode DLL.) -- C:\WINDOWS\system32\d3drm.dll [350208] O44 - LFC:[MD5.9BB566D2992A94CAA25B2A886B0FB53B] - 7/3/2015 - 08:36:10 ---A- . (.Microsoft Corporation - DirectX Files DLL.) -- C:\WINDOWS\system32\d3dxof.dll [47616] O44 - LFC:[MD5.6739FE1ACF5CD23DEDE869AF0596ACAC] - 7/3/2015 - 08:36:10 ---A- . (.Microsoft Corporation - Disk Space Cleaner for Windows.) -- C:\WINDOWS\system32\dataclen.dll [54272] O44 - LFC:[MD5.31B067C412FA1A9BAD3CA2A63D7DA440] - 7/3/2015 - 08:36:10 ---A- . (.Microsoft Corporation - Microsoft Direct3D OS Thunk Layer.) -- C:\WINDOWS\system32\d3d8thk.dll [8192] O44 - LFC:[MD5.F099B129022170F2DF9E1C0185C9BCFB] - 7/3/2015 - 08:36:10 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\d3d8.dll [1179648] O44 - LFC:[MD5.D2CF91B2C710E9F666E60AFBF87643EE] - 7/3/2015 - 08:36:10 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\d3d9.dll [1689088] O44 - LFC:[MD5.79E4EC1D4B6B9A80543B13958AC773D0] - 7/3/2015 - 08:36:10 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\d3dim.dll [436224] O44 - LFC:[MD5.56ADB11F7D4D0816C0BE1E701C1B5E52] - 7/3/2015 - 08:36:10 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\d3dim700.dll [824320] O44 - LFC:[MD5.F3FB1EDDA3D4D38A03F6669DD9F5657A] - 7/3/2015 - 08:36:10 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\WINDOWS\system32\d3dramp.dll [590336] O44 - LFC:[MD5.56C6186AB474831B407152F8569D15ED] - 7/3/2015 - 08:36:10 ---A- . (.Microsoft Corporation - Microsoft MMCtls.) -- C:\WINDOWS\system32\daxctle.ocx [153088] O44 - LFC:[MD5.797B037E2EE15F44B8B32E59E3153529] - 7/3/2015 - 08:36:10 ---A- . (.Microsoft Corporation - TIME.) -- C:\WINDOWS\system32\datime.dll [165376] O44 - LFC:[MD5.C70DBB09FF4705167FCFD12C1B2FD03D] - 7/3/2015 - 08:36:10 ---A- . (.Microsoft Corporation - Web DAV Client DLL.) -- C:\WINDOWS\system32\davclnt.dll [25088] O44 - LFC:[MD5.01FEE3303D5682B2FC00FBAC326FD7DA] - 7/3/2015 - 08:36:12 ---A- . (...) -- C:\WINDOWS\system32\Dcache.bin [1804] O44 - LFC:[MD5.C17AFA0AAD78C621F818DD6729572C48] - 7/3/2015 - 08:36:12 ---A- . (...) -- C:\WINDOWS\system32\debug.exe [20634] O44 - LFC:[MD5.AA5E22854F56C68148EB3345DBD62970] - 7/3/2015 - 08:36:12 ---A- . (...) -- C:\WINDOWS\system32\devenum.dll [59904] O44 - LFC:[MD5.36F28A9F92B0C5940898B6EA34381F30] - 7/3/2015 - 08:36:12 ---A- . (...) -- C:\WINDOWS\system32\devmgmt.msc [33079] O44 - LFC:[MD5.29D41E4ED94B2048F96583D18BC1950F] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corp. and Executive Software Inte - Disk Defragmenter Module.) -- C:\WINDOWS\system32\defrag.exe [25088] O44 - LFC:[MD5.188B7B757549D7FFF3A398FE5B96AB57] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corporation - Advanced display adapter properties.) -- C:\WINDOWS\system32\deskadp.dll [16384] O44 - LFC:[MD5.74E6C29348CF7F474AE6DBE4421FE624] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corporation - Advanced display monitor properties.) -- C:\WINDOWS\system32\deskmon.dll [16896] O44 - LFC:[MD5.2591CD8D4654AE3C7D5B83D582FB6C2B] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corporation - Advanced display performance properties.) -- C:\WINDOWS\system32\deskperf.dll [18432] O44 - LFC:[MD5.57CF0BD4216E0A65C13D4B693757D366] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corporation - ConnectTo RPC Net Library.) -- C:\WINDOWS\system32\dbmsrpcn.dll [24576] O44 - LFC:[MD5.7D3AF30690DB750ED82C4B71C1E6677E] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corporation - DBList.) -- C:\WINDOWS\system32\dblist32.ocx [222528] O44 - LFC:[MD5.D8B91D94ECB123862B390FDE3250D3BB] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corporation - DCI Manager.) -- C:\WINDOWS\system32\dciman32.dll [8704] O44 - LFC:[MD5.CC91779ED74FAE851CD3EA7541DDE488] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corporation - DDE Management library.) -- C:\WINDOWS\system32\ddeml.dll [39424] O44 - LFC:[MD5.4C7DC46C27D2BF288726BAC3F8FE34EC] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corporation - DDE Share Manager.) -- C:\WINDOWS\system32\ddeshare.exe [30208] O44 - LFC:[MD5.B4ED498E3BFEE64E952BC44FC6057DB8] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corporation - Desktop Control Panel.) -- C:\WINDOWS\system32\desk.cpl [135168] O44 - LFC:[MD5.A47F6A13202AA54541CA46D6CED79F5F] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corporation - Direct Draw Ex.) -- C:\WINDOWS\system32\ddrawex.dll [27136] O44 - LFC:[MD5.A340CD71EB535A3DD751B5F28723E50C] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corporation - Microsoft DirectDraw.) -- C:\WINDOWS\system32\ddraw.dll [279552] O44 - LFC:[MD5.C6C5E638CF647A790623F7D34218A51E] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corporation - Named Pipes Net DLL for SQL Clients.) -- C:\WINDOWS\system32\dbnmpntw.dll [28672] O44 - LFC:[MD5.06848C5A1674FE6C9B7E9CA9B5B4E6E5] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corporation - Symbolic Debugger Engine for Windows 2000.) -- C:\WINDOWS\system32\dbgeng.dll [847872] O44 - LFC:[MD5.B6E6F3F5B63053D5DC1F4EE32992492F] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corporation - Windows Image Helper.) -- C:\WINDOWS\system32\dbghelp.dll [640000] O44 - LFC:[MD5.605AA7E19F6CCDC6D171095883A1B1C5] - 7/3/2015 - 08:36:12 ---A- . (.Microsoft Corporation - Winsock Oriented Net DLL for SQL Clients.) -- C:\WINDOWS\system32\dbnetlib.dll [110592] O44 - LFC:[MD5.A2AC58A09D3DF120A0FE36BC98047738] - 7/3/2015 - 08:36:14 ---A- . (...) -- C:\WINDOWS\system32\dfrg.msc [41397] O44 - LFC:[MD5.060110976C713D49CEFEE9A7291CE9D7] - 7/3/2015 - 08:36:14 ---A- . (.Digi International - DGSETUP DLL.) -- C:\WINDOWS\system32\dgsetup.dll [85020] O44 - LFC:[MD5.1E8F9818D695F8759B125EE146BEB935] - 7/3/2015 - 08:36:14 ---A- . (.Digi International, Inc. - Digi RealPort® Driver Upgrade.) -- C:\WINDOWS\system32\dgrpsetu.dll [176157] O44 - LFC:[MD5.2B90B311B85B7AD7CBC1DF8640CDAE26] - 7/3/2015 - 08:36:14 ---A- . (.Microsoft - Dgnet Module.) -- C:\WINDOWS\system32\dgnet.dll [111104] O44 - LFC:[MD5.04E20D6D69FEC8535FA57E02BA3D8E59] - 7/3/2015 - 08:36:14 ---A- . (.Microsoft Corp. and Executive Software Inte - Disk Defragmenter FAT File System Module.) -- C:\WINDOWS\system32\dfrgfat.exe [82944] O44 - LFC:[MD5.B173824927888BA6192220C88A254AB9] - 7/3/2015 - 08:36:14 ---A- . (.Microsoft Corp. and Executive Software Inte - Disk Defragmenter NTFS Module.) -- C:\WINDOWS\system32\dfrgntfs.exe [104960] O44 - LFC:[MD5.7DAC4089BCA671C305BB61242CDE29F8] - 7/3/2015 - 08:36:14 ---A- . (.Microsoft Corp. and Executive Software Inte - Disk Defragmenter Resource Module.) -- C:\WINDOWS\system32\dfrgres.dll [51200] O44 - LFC:[MD5.CCC5B7E12D6002D308E8D11FF9D1FC57] - 7/3/2015 - 08:36:14 ---A- . (.Microsoft Corp. and Executive Software Inte - Disk Defragmenter Snap-in Module.) -- C:\WINDOWS\system32\dfrgsnap.dll [39424] O44 - LFC:[MD5.A8EA0CF06BA8054834F40BBF759AC380] - 7/3/2015 - 08:36:14 ---A- . (.Microsoft Corp. and Executive Software Inte - Disk Defragmenter UI Module.) -- C:\WINDOWS\system32\dfrgui.dll [124416] O44 - LFC:[MD5.C51DE19619D50CBD03708647ACA10E70] - 7/3/2015 - 08:36:14 ---A- . (.Microsoft Corporation - DHCP Client Service.) -- C:\WINDOWS\system32\dhcpcsvc.dll [126976] O44 - LFC:[MD5.A2E0BC103D087FA0D9D16C6C8CE31948] - 7/3/2015 - 08:36:14 ---A- . (.Microsoft Corporation - DHCP Monitor Dll.) -- C:\WINDOWS\system32\dhcpmon.dll [379904] O44 - LFC:[MD5.7E2C977C4A53911E69804EDCEF4C162C] - 7/3/2015 - 08:36:14 ---A- . (.Microsoft Corporation - DHCP Server API Stub DLL.) -- C:\WINDOWS\system32\dhcpsapi.dll [74240] O44 - LFC:[MD5.B1762156256B0238C21BAA4C06CEF727] - 7/3/2015 - 08:36:14 ---A- . (.Microsoft Corporation - Device Manager MMC Snapin.) -- C:\WINDOWS\system32\devmgr.dll [282624] O44 - LFC:[MD5.3D76DD0CBC536E0F8C45D23ED230BEB2] - 7/3/2015 - 08:36:14 ---A- . (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest.dll [68608] O44 - LFC:[MD5.E305D407E888F5859AB9B3DF3A342838] - 7/3/2015 - 08:36:14 ---A- . (.Microsoft Corporation - Distributed File System shell extension.) -- C:\WINDOWS\system32\dfsshlex.dll [28672] O44 - LFC:[MD5.11A9E0581F6441876FFBF331D294C10A] - 7/3/2015 - 08:36:14 ---A- . (.Microsoft Corporation - Microsoft DHCP NAP Enforcement Client.) -- C:\WINDOWS\system32\dhcpqec.dll [48640] O44 - LFC:[MD5.6C386B07C8AFE51E976EECD4B44169FA] - 7/3/2015 - 08:36:14 ---A- . (.Microsoft Corporation - Microsoft DirectInput Mapper Framework.) -- C:\WINDOWS\system32\diactfrm.dll [394240] O44 - LFC:[MD5.74B230A8261EC5DDC1DC0F3BBECD5B20] - 7/3/2015 - 08:36:14 ---A- . (.Microsoft Corporation - Microsoft® Cabinet Maker.) -- C:\WINDOWS\system32\diantz.exe [87040] O44 - LFC:[MD5.CDECA2DC2E47E70C45FAA07065572EC4] - 7/3/2015 - 08:36:16 ---A- . (...) -- C:\WINDOWS\system32\diskmgmt.msc [33673] O44 - LFC:[MD5.E65E2353A5D74EA89971CB918EEEB2F6] - 7/3/2015 - 08:36:16 ---A- . (.Microsoft Corporation - Crash Dump Disk Driver.) -- C:\WINDOWS\system32\Drivers\diskdump.sys [14208] O44 - LFC:[MD5.E2092F0A1D7ABC243F9C2362483D150D] - 7/3/2015 - 08:36:16 ---A- . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll [19456] O44 - LFC:[MD5.CBC7E5947E9FFBE47665A3D251F72420] - 7/3/2015 - 08:36:16 ---A- . (.Microsoft Corporation - Disk Comparison Utility.) -- C:\WINDOWS\system32\diskcomp.com [9216] O44 - LFC:[MD5.C9930835AD3C23E37C0CF5D8102EC403] - 7/3/2015 - 08:36:16 ---A- . (.Microsoft Corporation - Disk Copy Utility.) -- C:\WINDOWS\system32\diskcopy.com [7168] O44 - LFC:[MD5.6EAE0D36C471A19EB45BED40B16D6C1C] - 7/3/2015 - 08:36:16 ---A- . (.Microsoft Corporation - Disk Performance Configuration Utility.) -- C:\WINDOWS\system32\diskperf.exe [17920] O44 - LFC:[MD5.51C2BBF52894411B0A2D4D3D72ABEEA4] - 7/3/2015 - 08:36:16 ---A- . (.Microsoft Corporation - Diskpart Application.) -- C:\WINDOWS\system32\diskpart.exe [163840] O44 - LFC:[MD5.51223A25F91BC44555076F532A733631] - 7/3/2015 - 08:36:16 ---A- . (.Microsoft Corporation - Key Roaming DIMS Provider DLL.) -- C:\WINDOWS\system32\dimsroam.dll [40448] O44 - LFC:[MD5.78E862846112347EEE8214B649AE563F] - 7/3/2015 - 08:36:16 ---A- . (.Microsoft Corporation - Microsoft (R) DispEx.) -- C:\WINDOWS\system32\dispex.dll [32768] O44 - LFC:[MD5.B5603CB6CEBF85058EADE5D62258ACBA] - 7/3/2015 - 08:36:16 ---A- . (.Microsoft Corporation - Microsoft DirectInput Mapper.) -- C:\WINDOWS\system32\dimap.dll [44032] O44 - LFC:[MD5.BC87DB4759083525F96A159861670C5E] - 7/3/2015 - 08:36:16 ---A- . (.Microsoft Corporation - Microsoft DirectInput.) -- C:\WINDOWS\system32\dinput.dll [158720] O44 - LFC:[MD5.AA0507F0516A4DFF1B1279AB4A2ABB37] - 7/3/2015 - 08:36:16 ---A- . (.Microsoft Corporation - Microsoft DirectInput.) -- C:\WINDOWS\system32\dinput8.dll [181760] O44 - LFC:[MD5.47B6AAEC570F2C11D8BAD80A064D8ED1] - 7/3/2015 - 08:36:16 ---A- . (.Microsoft Corporation - PnP Disk Driver.) -- C:\WINDOWS\system32\Drivers\disk.sys [36352] O44 - LFC:[MD5.D62E7A444FFBA599A49C0BF93FB004F1] - 7/3/2015 - 08:36:16 ---A- . (.Microsoft Corporation - Windows DiskCopy.) -- C:\WINDOWS\system32\diskcopy.dll [1504256] O44 - LFC:[MD5.C17B0415DA7BCD5429C945E55354144A] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corp. - Disk Management DCOM Interface Stub.) -- C:\WINDOWS\system32\dmintf.dll [18432] O44 - LFC:[MD5.16E504E09A1C69F8EE8BB7EE237F0070] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corp. - Disk Management Snap-in Dialogs.) -- C:\WINDOWS\system32\dmdlgs.dll [285184] O44 - LFC:[MD5.057F636C4E4F11FAB91371C2C83F678B] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corp. - Disk Management Snap-in Resources.) -- C:\WINDOWS\system32\dmdskres.dll [118784] O44 - LFC:[MD5.8EFEA4A7CCCCE7D3FDE4D90F324218A9] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corp. - Disk Management Snap-in Support Library.) -- C:\WINDOWS\system32\dmdskmgr.dll [200704] O44 - LFC:[MD5.2C03D0C9473F12CBB0E341C4E4F1F31F] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corp. - Disk Management Snap-in.) -- C:\WINDOWS\system32\dmview.ocx [61440] O44 - LFC:[MD5.D5738F58E19F04E12ECD3A25C8BC6231] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corp. - Logical Disk Manager component.) -- C:\WINDOWS\system32\dmremote.exe [15872] O44 - LFC:[MD5.57EDEC2E5F59F0335E92F35184BC8631] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corp. - Logical Disk Manager service dll.) -- C:\WINDOWS\system32\dmserver.dll [23552] O44 - LFC:[MD5.D0D7D34120DAB5F78BF6017EDA99A815] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corp., Veritas Software - Logical Disk Manager Configuration Library.) -- C:\WINDOWS\system32\dmconfig.dll [330752] O44 - LFC:[MD5.E46050330BD42F33609117F861E32D3C] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corp., Veritas Software - Logical Disk Manager service process.) -- C:\WINDOWS\system32\dmadmin.exe [224768] O44 - LFC:[MD5.7C824CF7BBDE77D95C08005717A95F6F] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corp., Veritas Software - NT Disk Manager I/O Driver.) -- C:\WINDOWS\system32\Drivers\dmio.sys [153344] O44 - LFC:[MD5.D992FE1274BDE0F84AD826ACAE022A41] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmboot.sys [799744] O44 - LFC:[MD5.E9317282A63CA4D188C0DF5E09C6AC5F] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys [5888] O44 - LFC:[MD5.0A9BA6AF531AFE7FA5E4FB973852D863] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\system32\dllhost.exe [5120] O44 - LFC:[MD5.58A73CEA70897E4C5BBDA51A823521DD] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\system32\dllhst3g.exe [4608] O44 - LFC:[MD5.D977659AE4D8ECE5286D99D1ED34614D] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corporation - DNS Caching Resolver Service.) -- C:\WINDOWS\system32\dnsrslvr.dll [45568] O44 - LFC:[MD5.64AA11D53A4A84CDF43370D7036517C3] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\system32\dnsapi.dll [149504] O44 - LFC:[MD5.A68D8FCA5F4A24C5DA10DCB4CF9CE234] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corporation - Microsoft DirectMusic Band.) -- C:\WINDOWS\system32\dmband.dll [28672] O44 - LFC:[MD5.0A1A3BB6565D1C73E0B6AA070C7FDA45] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corporation - Microsoft DirectMusic Composer.) -- C:\WINDOWS\system32\dmcompos.dll [61440] O44 - LFC:[MD5.D919F4E479D344CA34C9289390C03844] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corporation - Microsoft DirectMusic Core Services.) -- C:\WINDOWS\system32\dmusic.dll [104448] O44 - LFC:[MD5.1EFB987153B0C28C71B3882AD4E392C0] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corporation - Microsoft DirectMusic Interactive Engine.) -- C:\WINDOWS\system32\dmime.dll [181248] O44 - LFC:[MD5.67370BDD46D642B3196C46E3B72CDAD4] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corporation - Microsoft DirectMusic Loader.) -- C:\WINDOWS\system32\dmloader.dll [35840] O44 - LFC:[MD5.7CE6E106FF34186F3D2621FBBD40DFDF] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corporation - Microsoft DirectMusic Scripting.) -- C:\WINDOWS\system32\dmscript.dll [82432] O44 - LFC:[MD5.5EFCB0E037C8DC500D0BB08943C583A4] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corporation - Microsoft DirectMusic Software Synthesizer.) -- C:\WINDOWS\system32\dmsynth.dll [103424] O44 - LFC:[MD5.649F44444EE82909E572AF0A7A1BBE0A] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corporation - Microsoft DirectMusic Style Engline.) -- C:\WINDOWS\system32\dmstyle.dll [105984] O44 - LFC:[MD5.75A782FFF9821426382453253999853B] - 7/3/2015 - 08:36:18 ---A- . (.Microsoft Corporation - TreeView OCX.) -- C:\WINDOWS\system32\dmocx.dll [19456] O44 - LFC:[MD5.5507FD0FD6009C98CDFA2EBCBBB3D044] - 7/3/2015 - 08:36:20 ---A- . (...) -- C:\WINDOWS\system32\dosx.exe [53840] O44 - LFC:[MD5.F21A712EB2B656CD86FCC057446F9C34] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - 802.3 Advanced UI.) -- C:\WINDOWS\system32\dot3ui.dll [650752] O44 - LFC:[MD5.8E2CC37BA87D8F681066E0E9C8A19F73] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - 802.3 Autoconfiguration API.) -- C:\WINDOWS\system32\dot3api.dll [26112] O44 - LFC:[MD5.F69189EB97B118B690ACCA93760AD738] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - 802.3 Group Policy Client.) -- C:\WINDOWS\system32\dot3gpclnt.dll [39936] O44 - LFC:[MD5.EA39DA293C8BBAA0F89419BA64734CC7] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - 802.3 Media Specific Module.) -- C:\WINDOWS\system32\dot3msm.dll [56320] O44 - LFC:[MD5.E85FD6ABA80BD637AA2AA9D93308D355] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - 802.3 Netsh Helper.) -- C:\WINDOWS\system32\dot3cfg.dll [57856] O44 - LFC:[MD5.4E8F3230BAC8C1CAADF01A8C728E1C5C] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - 802.3 UI Helper.) -- C:\WINDOWS\system32\dot3dlg.dll [9216] O44 - LFC:[MD5.2BC7128348265CABA9BBC058729A8B7B] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Dpcdll Module.) -- C:\WINDOWS\system32\dpcdll.dll [102912] O44 - LFC:[MD5.D7325A9F12013345434E1CC58B58D98C] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Keyboard History Utility.) -- C:\WINDOWS\system32\doskey.exe [10752] O44 - LFC:[MD5.3BD2348E0EB21960D82FDF5347E04BA5] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Microsoft DirectPlay Helper.) -- C:\WINDOWS\system32\dplaysvr.exe [29696] O44 - LFC:[MD5.A0D2D0346FF2AE17775675DF1DAF9236] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Microsoft DirectPlay Modem Service Provider.) -- C:\WINDOWS\system32\dpserial.dll [53520] O44 - LFC:[MD5.C9C07A74576B2143AAE86BF306A4D8A4] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Microsoft DirectPlay NAT Helper PAST.) -- C:\WINDOWS\system32\dpnhpast.dll [35328] O44 - LFC:[MD5.D651151C706B961CF375FFD33545DAF9] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Microsoft DirectPlay NAT Helper UPnP.) -- C:\WINDOWS\system32\dpnhupnp.dll [60928] O44 - LFC:[MD5.CFDADF2E10E0D024B102145143653C4F] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Microsoft DirectPlay Voice ACM Provider.) -- C:\WINDOWS\system32\dpvacm.dll [21504] O44 - LFC:[MD5.F4CDC0F3562B90216039BB8DC15CE5B2] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Microsoft DirectPlay Voice.) -- C:\WINDOWS\system32\dpvoice.dll [212480] O44 - LFC:[MD5.2FC74FF8DC4C8BB68B9EECC6538C56B7] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Microsoft DirectPlay.) -- C:\WINDOWS\system32\dplay.dll [33040] O44 - LFC:[MD5.E819111D4CDA099E1C4DAE85EDE31DE8] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Microsoft DirectPlay.) -- C:\WINDOWS\system32\dplayx.dll [229888] O44 - LFC:[MD5.2C12D118A3BB19A3DB5693E86EE6958A] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Microsoft DirectPlay.) -- C:\WINDOWS\system32\dpnet.dll [375296] O44 - LFC:[MD5.51CB03649F57A9CC3094DDD53A0DAA26] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Microsoft DirectPlay8 Address.) -- C:\WINDOWS\system32\dpnaddr.dll [3072] O44 - LFC:[MD5.5AFA706ED6F4280A64BE47CB3CAFFA8F] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Microsoft DirectPlay8 Lobby.) -- C:\WINDOWS\system32\dpnlobby.dll [3072] O44 - LFC:[MD5.21A41F107C6E0F0DE2E3F5DC7ECBF2B0] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Microsoft DirectPlay8 Modem Provider.) -- C:\WINDOWS\system32\dpnmodem.dll [62464] O44 - LFC:[MD5.7E51F5BC7016ACC4B7CA017A197D63FD] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Microsoft DirectPlay8 Server.) -- C:\WINDOWS\system32\dpnsvr.exe [17920] O44 - LFC:[MD5.DCF07242C89596BA9937D87A6A2F0693] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Microsoft DirectPlay8 Winsock Provider.) -- C:\WINDOWS\system32\dpnwsock.dll [61952] O44 - LFC:[MD5.72DD38C9F051575BD767822E92C8F468] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Microsoft DocProp Shell Ext.) -- C:\WINDOWS\system32\docprop2.dll [48128] O44 - LFC:[MD5.C0CFFFF3EB948A655D63A8F239FA3BDF] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Modem and Serial Connection For DirectPlay.) -- C:\WINDOWS\system32\dpmodemx.dll [23552] O44 - LFC:[MD5.3D4F2A08C0D060B62894C1D1A25B5125] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - OLE DocFile Property Page.) -- C:\WINDOWS\system32\docprop.dll [46080] O44 - LFC:[MD5.B4109C8C3D54C83246997A777724F318] - 7/3/2015 - 08:36:20 ---A- . (.Microsoft Corporation - Wired AutoConfig Service.) -- C:\WINDOWS\system32\dot3svc.dll [132096] O44 - LFC:[MD5.1A0DDD90BAECFF15EB3E38A29043A400] - 7/3/2015 - 08:36:22 ---A- . (.Microsoft Corporation - Internet TCP/IP and IPX Connection For Dire.) -- C:\WINDOWS\system32\dpwsockx.dll [57344] O44 - LFC:[MD5.662CFE19D0E62B7BE883DDDD104A521D] - 7/3/2015 - 08:36:22 ---A- . (.Microsoft Corporation - Microsoft DirectPlay Local Net Service Prov.) -- C:\WINDOWS\system32\dpwsock.dll [42768] O44 - LFC:[MD5.EA36B806E30D927F70E24EAF545CCC17] - 7/3/2015 - 08:36:22 ---A- . (.Microsoft Corporation - Microsoft DirectPlay Voice Test.) -- C:\WINDOWS\system32\dpvsetup.exe [83456] O44 - LFC:[MD5.1F08A3B80727A308CE545F98D66EE349] - 7/3/2015 - 08:36:22 ---A- . (.Microsoft Corporation - Microsoft DirectPlay Voice Voxware Provider.) -- C:\WINDOWS\system32\dpvvox.dll [116736] O44 - LFC:[MD5.2E229C47678C8D275CCBA88704659DE6] - 7/3/2015 - 08:36:56 ---A- . (.Microsoft Corporation - DRM Client DLL.) -- C:\WINDOWS\system32\drmclien.dll [299520] O44 - LFC:[MD5.B5025CFC7F3810420F2DA13F1B09AA81] - 7/3/2015 - 08:36:56 ---A- . (.Microsoft Corporation - DRM Store DLL.) -- C:\WINDOWS\system32\drmstor.dll [87040] O44 - LFC:[MD5.DC88347E8836D50FA1060F989216B5C3] - 7/3/2015 - 08:36:56 ---A- . (.Microsoft Corporation - DRMv2 Client DLL.) -- C:\WINDOWS\system32\drmv2clt.dll [695808] O44 - LFC:[MD5.1944F6E04DEFD811BD46E4F227BA6FB1] - 7/3/2015 - 08:36:56 ---A- . (.Microsoft Corporation - Microsoft Terminal Server Network Provider.) -- C:\WINDOWS\system32\drprov.dll [14336] O44 - LFC:[MD5.E9F6BDB0D4578C4A27590FC6AA0713D3] - 7/3/2015 - 08:36:58 ---A- . (.Microsoft Corporation - Driver Query.) -- C:\WINDOWS\system32\driverquery.exe [62976] O44 - LFC:[MD5.C9F5E1DE6DA983E89E714ED80C11F000] - 7/3/2015 - 08:37:00 ---A- . (.Microsoft Corporation - DrWatson Postmortem Debugger.) -- C:\WINDOWS\system32\drwtsn32.exe [45568] O44 - LFC:[MD5.789F63C7978AD84A2214D3AA3BF0F609] - 7/3/2015 - 08:37:00 ---A- . (.Microsoft Corporation - Windows Fault detection utility.) -- C:\WINDOWS\system32\drwatson.exe [28112] O44 - LFC:[MD5.EDA57C644CA1EA58A361B81822F3FF0C] - 7/3/2015 - 08:37:02 ---A- . (.Microsoft Corporation - DS Authorization for Services.) -- C:\WINDOWS\system32\dsauth.dll [62976] O44 - LFC:[MD5.0CD4A2A4B5323EFC67BB8E4B55534FA2] - 7/3/2015 - 08:37:02 ---A- . (.Microsoft Corporation - DirectSound Effects Property Pages.) -- C:\WINDOWS\system32\dsdmoprp.dll [71680] O44 - LFC:[MD5.EA84C76C6B55B3F5AE1D0BAF5AD204D6] - 7/3/2015 - 08:37:02 ---A- . (.Microsoft Corporation - DirectSound Effects.) -- C:\WINDOWS\system32\dsdmo.dll [181248] O44 - LFC:[MD5.0A6A6D76E9A07384AB9B1D3F27D4B1D8] - 7/3/2015 - 08:37:02 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Driver Setup G.) -- C:\WINDOWS\system32\ds32gt.dll [16384] O44 - LFC:[MD5.06D51EF74C4B9CE28B39F2D22D2A8608] - 7/3/2015 - 08:37:02 ---A- . (.Microsoft Corporation - Microsoft ODBC Driver Setup Generic Thunk.) -- C:\WINDOWS\system32\ds16gt.dLL [4656] O44 - LFC:[MD5.FB6EE278BC2046E0952F320AC62D3E07] - 7/3/2015 - 08:37:02 ---A- . (.Microsoft Corporation - Windows Shell Disk Quota Support DLL.) -- C:\WINDOWS\system32\dskquota.dll [92672] O44 - LFC:[MD5.F985C896B37091927E381F3F5121BDAB] - 7/3/2015 - 08:37:04 ---A- . (...) -- C:\WINDOWS\system32\dsound.vxd [81] O44 - LFC:[MD5.B26B88487BB3F49726DEB5E7D160DC38] - 7/3/2015 - 08:37:04 ---A- . (...) -- C:\WINDOWS\system32\dssec.dat [218003] O44 - LFC:[MD5.4D83ED8BDDEC431FC8AD907B47CFB6E3] - 7/3/2015 - 08:37:04 ---A- . (.Microsoft Corporation - DirectSound.) -- C:\WINDOWS\system32\dsound.dll [367616] O44 - LFC:[MD5.A42CC1E17B0528D4BE27D33A8FC7037C] - 7/3/2015 - 08:37:04 ---A- . (.Microsoft Corporation - DirectSound3D LUT.) -- C:\WINDOWS\system32\dsound3d.dll [1293824] O44 - LFC:[MD5.F8F68748D400AF4E7DB8A137B1F33A77] - 7/3/2015 - 08:37:04 ---A- . (.Microsoft Corporation - Directory Service Common UI.) -- C:\WINDOWS\system32\dsuiext.dll [113152] O44 - LFC:[MD5.A416B20935C4BC3F0F1208D200B8AF88] - 7/3/2015 - 08:37:04 ---A- . (.Microsoft Corporation - Directory Service Find.) -- C:\WINDOWS\system32\dsquery.dll [239104] O44 - LFC:[MD5.843176BF01F4208675D6C71CE7B13325] - 7/3/2015 - 08:37:04 ---A- . (.Microsoft Corporation - Directory Service Security UI.) -- C:\WINDOWS\system32\dssec.dll [51200] O44 - LFC:[MD5.3EBC5DD41FDBF0FC4598B7C7FF5DBDAE] - 7/3/2015 - 08:37:04 ---A- . (.Microsoft Corporation - Microsoft DirectMusic Wave.) -- C:\WINDOWS\system32\dswave.dll [19456] O44 - LFC:[MD5.FEDE68BF80052BAD393AFD5C2E60DCB0] - 7/3/2015 - 08:37:04 ---A- . (.Microsoft Corporation - Microsoft Enhanced DSS and Diffie-Hellman C.) -- C:\WINDOWS\system32\dssenh.dll [138752] O44 - LFC:[MD5.F4E1708E843C3F46D2130292E4CC60D7] - 7/3/2015 - 08:37:04 ---A- . (.Microsoft Corporation - Windows Active Directory Property Pages Res.) -- C:\WINDOWS\system32\dsprpres.dll [4096] O44 - LFC:[MD5.287F10EF7F9253670EAA3A9C41366576] - 7/3/2015 - 08:37:04 ---A- . (.Microsoft Corporation - Windows Active Directory Property Pages.) -- C:\WINDOWS\system32\dsprop.dll [142848] O44 - LFC:[MD5.DD4906169D7F99F582276FC4D478C986] - 7/3/2015 - 08:37:04 ---A- . (.Microsoft Corporation - Windows Shell Disk Quota UI DLL.) -- C:\WINDOWS\system32\dskquoui.dll [155648] O44 - LFC:[MD5.B327281012B48BD73F587799F9F29BE2] - 7/3/2015 - 08:37:06 ---A- . (.Microsoft Corporation - Crash Dump Driver.) -- C:\WINDOWS\system32\Drivers\dumpdrv.sys [9472] O44 - LFC:[MD5.EA587D3A081F21358A8D3D62AD006DC1] - 7/3/2015 - 08:37:06 ---A- . (.Microsoft Corporation - DVDUpgrd.) -- C:\WINDOWS\system32\dvdupgrd.exe [17920] O44 - LFC:[MD5.FE97D0343ACFDEBDD578FC67CC91FA87] - 7/3/2015 - 08:37:06 ---A- . (.Microsoft Corporation - DirectX API Driver.) -- C:\WINDOWS\system32\Drivers\dxapi.sys [10496] O44 - LFC:[MD5.86042F6F6A5287EAF9379C91D0BF72B6] - 7/3/2015 - 08:37:06 ---A- . (.Microsoft Corporation - Microsoft Application Error Reporting.) -- C:\WINDOWS\system32\dwwin.exe [180224] O44 - LFC:[MD5.E86B94338FBAD7446A48C26F2350CE90] - 7/3/2015 - 08:37:06 ---A- . (.Microsoft Corporation - Microsoft DirectX for Visual Basic.) -- C:\WINDOWS\system32\dx7vb.dll [619008] O44 - LFC:[MD5.688A920E2F3E15F0E1AE61D26F8339EE] - 7/3/2015 - 08:37:06 ---A- . (.Microsoft Corporation - Microsoft DirectX for Visual Basic.) -- C:\WINDOWS\system32\dx8vb.dll [1227264] O44 - LFC:[MD5.3D41A9326F0376FC73AF961DD23B1FB1] - 7/3/2015 - 08:37:06 ---A- . (.Microsoft Corporation - Windows DirectUser Engine.) -- C:\WINDOWS\system32\duser.dll [304128] O44 - LFC:[MD5.8E16BF5600797E678EA97051CF93E6BF] - 7/3/2015 - 08:37:06 ---A- . (.Microsoft Corporation - Windows Error Reporting Dump Reporting Tool.) -- C:\WINDOWS\system32\dumprep.exe [10752] O44 - LFC:[MD5.8B4C502DE1AAAF6AF41AE3C14E40BA0A] - 7/3/2015 - 08:37:08 ---A- . (...) -- C:\WINDOWS\system32\dxmasf.dll [498742] O44 - LFC:[MD5.A73F5D6705B1D820C19B18782E176EFD] - 7/3/2015 - 08:37:08 ---A- . (.Microsoft Corporation - DirectX Graphics Driver Thunk.) -- C:\WINDOWS\system32\Drivers\dxgthk.sys [3328] O44 - LFC:[MD5.AC7280566A7BB85CB3291F04DDC1198E] - 7/3/2015 - 08:37:08 ---A- . (.Microsoft Corporation - DirectX Graphics Driver.) -- C:\WINDOWS\system32\Drivers\dxg.sys [71168] O44 - LFC:[MD5.06AC31BAC1C7A6EC43A26730A3A11779] - 7/3/2015 - 08:37:08 ---A- . (.Microsoft Corporation - Microsoft DirectX Diagnostic Tool.) -- C:\WINDOWS\system32\dxdiag.exe [1298432] O44 - LFC:[MD5.57E51C6347165622C69D456B96B1EB46] - 7/3/2015 - 08:37:08 ---A- . (.Microsoft Corporation - Microsoft DirectX Diagnostic Tool.) -- C:\WINDOWS\system32\dxdiagn.dll [2113536] O44 - LFC:[MD5.E6EF7BC927D9F8F9BA1584BFC39E0C6F] - 7/3/2015 - 08:37:10 ---A- . (.Microsoft Corporation - Microsoft EAPOL NAP Enforcement Client.) -- C:\WINDOWS\system32\eapolqec.dll [30720] O44 - LFC:[MD5.7954A8B0657676E947403F0AC0F21755] - 7/3/2015 - 08:37:10 ---A- . (.Microsoft Corporation - Microsoft ThirdPartyEapDispatcher.) -- C:\WINDOWS\system32\eapp3hst.dll [184832] O44 - LFC:[MD5.F6E368E10B600836DD349FF937B183A2] - 7/3/2015 - 08:37:12 ---A- . (...) -- C:\WINDOWS\system32\edit.com [69886] O44 - LFC:[MD5.8AA8DCC96FA0492E3B5D415537FAB8FE] - 7/3/2015 - 08:37:12 ---A- . (...) -- C:\WINDOWS\system32\edit.hlp [10790] O44 - LFC:[MD5.B7A0AA49CBB604B2C3A42A49C36D8A4F] - 7/3/2015 - 08:37:12 ---A- . (...) -- C:\WINDOWS\system32\edlin.exe [12642] O44 - LFC:[MD5.52E91EAC2F3175B1A5B0150382B6D771] - 7/3/2015 - 08:37:12 ---A- . (...) -- C:\WINDOWS\system32\ega.cpi [127213] O44 - LFC:[MD5.395FD41D69C1AB8CE91FEABD2168097E] - 7/3/2015 - 08:37:12 ---A- . (.Microsoft Corporation - EAP Generic UI.) -- C:\WINDOWS\system32\eappgnui.dll [94208] O44 - LFC:[MD5.5DB625E7D095604010CF84DE2D8ACFA6] - 7/3/2015 - 08:37:12 ---A- . (.Microsoft Corporation - Eap Peer Config.) -- C:\WINDOWS\system32\eappcfg.dll [126976] O44 - LFC:[MD5.0C5839DFF864E280CF958DA67DE85126] - 7/3/2015 - 08:37:12 ---A- . (.Microsoft Corporation - File Encryption Utility.) -- C:\WINDOWS\system32\efsadu.dll [26624] O44 - LFC:[MD5.3B06CDD1A41618944A906589C052F2B3] - 7/3/2015 - 08:37:12 ---A- . (.Microsoft Corporation - Microsoft EAP NAP Enforcement Client.) -- C:\WINDOWS\system32\eapqec.dll [59392] O44 - LFC:[MD5.ABC4206543450C0666D152F4B65833B8] - 7/3/2015 - 08:37:12 ---A- . (.Microsoft Corporation - Microsoft EAPHost Peer Client DLL.) -- C:\WINDOWS\system32\eappprxy.dll [40960] O44 - LFC:[MD5.0BCB0EBC1B08FA384EC68F253C7253EF] - 7/3/2015 - 08:37:12 ---A- . (.Microsoft Corporation - Microsoft EAPHost Peer service.) -- C:\WINDOWS\system32\eapphost.dll [180224] O44 - LFC:[MD5.2187855A7703ADEF0CEF9EE4285182CC] - 7/3/2015 - 08:37:12 ---A- . (.Microsoft Corporation - Microsoft EAPHost service.) -- C:\WINDOWS\system32\eapsvc.dll [33792] O44 - LFC:[MD5.E2A0BFA68A236A51B2F2AC01BB268376] - 7/3/2015 - 08:37:14 ---A- . (...) -- C:\WINDOWS\system32\encdec.dll [186880] O44 - LFC:[MD5.5726CB81771655731D011ABD878CB65D] - 7/3/2015 - 08:37:14 ---A- . (.Equinox Systems Inc. - Equinox Multiport Serial Coinstaller.) -- C:\WINDOWS\system32\EqnClass.Dll [103424] O44 - LFC:[MD5.09515D23C06928F749546E57C2400B0E] - 7/3/2015 - 08:37:14 ---A- . (.Microsoft Corporation - Encoder API.) -- C:\WINDOWS\system32\encapi.dll [20480] O44 - LFC:[MD5.F48AB90A886200BCDA169AD7F06037D6] - 7/3/2015 - 08:37:14 ---A- . (.Microsoft Corporation - Event Viewer Snapin.) -- C:\WINDOWS\system32\els.dll [183296] O44 - LFC:[MD5.BC93B4A066477954555966D77FEC9ECB] - 7/3/2015 - 08:37:14 ---A- . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040] O44 - LFC:[MD5.9101B57265E2D8CAEB2A0CFC2AF21A29] - 7/3/2015 - 08:37:16 ---A- . (...) -- C:\WINDOWS\system32\esentprf.hxx [6708] O44 - LFC:[MD5.E87C9F42551B986945008592D0F772D6] - 7/3/2015 - 08:37:16 ---A- . (...) -- C:\WINDOWS\system32\esentprf.ini [1015477] O44 - LFC:[MD5.8A2A5B2BF45A995D54EBF9127FDEF9A3] - 7/3/2015 - 08:37:16 ---A- . (...) -- C:\WINDOWS\system32\eula.txt [41543] O44 - LFC:[MD5.41203FBE6973DE3469439CA690B1292B] - 7/3/2015 - 08:37:16 ---A- . (...) -- C:\WINDOWS\system32\eventvwr.msc [56678] O44 - LFC:[MD5.483856FBEC9624C76F3CFD4C8FD3603F] - 7/3/2015 - 08:37:16 ---A- . (.Microsoft Corporation - Event Create.) -- C:\WINDOWS\system32\eventcreate.exe [50688] O44 - LFC:[MD5.6D4FEB43EE538FC5428CC7F0565AA656] - 7/3/2015 - 08:37:16 ---A- . (.Microsoft Corporation - Event Logging Service.) -- C:\WINDOWS\system32\eventlog.dll [56320] O44 - LFC:[MD5.F636FD7E97AB17B8FF9D3FF593833301] - 7/3/2015 - 08:37:16 ---A- . (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\WINDOWS\system32\eventvwr.exe [8704] O44 - LFC:[MD5.3C16C5F0E0C57DA2ACEB412825860286] - 7/3/2015 - 08:37:16 ---A- . (.Microsoft Corporation - Microsoft(R) Windows NT(TM) Server Database.) -- C:\WINDOWS\system32\esent97.dll [1114896] O44 - LFC:[MD5.4F866CB807F44E77F65AE716F49ED530] - 7/3/2015 - 08:37:16 ---A- . (.Microsoft Corporation - Microsoft® Volume Shadow Copy Service event.) -- C:\WINDOWS\system32\eventcls.dll [33280] O44 - LFC:[MD5.F17F6226BDC0CD5F0BEF0DAF84D29BEC] - 7/3/2015 - 08:37:16 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\es.dll [253952] O44 - LFC:[MD5.799961190A2DEB65B180A46F1E7AA0A6] - 7/3/2015 - 08:37:16 ---A- . (.Microsoft Corporation - Private Character Editor.) -- C:\WINDOWS\system32\eudcedit.exe [193024] O44 - LFC:[MD5.F5B754CDEA20BBB3A31E16A776EDE6D6] - 7/3/2015 - 08:37:16 ---A- . (.Microsoft Corporation - Server Database Storage Engine.) -- C:\WINDOWS\system32\esent.dll [1082368] O44 - LFC:[MD5.6E2E91B2225D09496163B56F909908D2] - 7/3/2015 - 08:37:16 ---A- . (.Microsoft Corporation - Server Database Storage Performance Library.) -- C:\WINDOWS\system32\esentprf.dll [17408] O44 - LFC:[MD5.DF17198F6A13CA1011FFEF1D9B702481] - 7/3/2015 - 08:37:16 ---A- . (.Microsoft Corporation - Server Database Storage Utilities.) -- C:\WINDOWS\system32\esentutl.exe [39424] O44 - LFC:[MD5.A3975A7D2C98B30A2AE010754FFB9392] - 7/3/2015 - 08:37:18 ---A- . (...) -- C:\WINDOWS\explorer.scf [80] O44 - LFC:[MD5.39660B8AB452876C12CE3981314B12A0] - 7/3/2015 - 08:37:18 ---A- . (...) -- C:\WINDOWS\system32\eventquery.vbs [97965] O44 - LFC:[MD5.683626544E81387771ED55E1A0F2047B] - 7/3/2015 - 08:37:18 ---A- . (...) -- C:\WINDOWS\system32\exe2bin.exe [8424] O44 - LFC:[MD5.F5AD210CF45C5340195AB20FA775BDE3] - 7/3/2015 - 08:37:18 ---A- . (.Microsoft Corporation - Event Triggers.) -- C:\WINDOWS\system32\eventtriggers.exe [82944] O44 - LFC:[MD5.9F06D6991CAB51B1199817A4479A799F] - 7/3/2015 - 08:37:18 ---A- . (.Microsoft Corporation - LZ Expansion Utility.) -- C:\WINDOWS\system32\expand.exe [15872] O44 - LFC:[MD5.4D893323DAE445E34A4C9038B0551BC9] - 7/3/2015 - 08:37:18 ---A- . (.Microsoft Corporation - Microsoft Extended FAT File System.) -- C:\WINDOWS\system32\Drivers\exfat.sys [133632] O44 - LFC:[MD5.BE87245CE60329B31C94F1B4236E5832] - 7/3/2015 - 08:37:18 ---A- . (.Microsoft Corporation - Visual Basic for Applications Runtime - Exp.) -- C:\WINDOWS\system32\expsrv.dll [380445] O44 - LFC:[MD5.2BB75B7F548D82A099125D0C5971DE7D] - 7/3/2015 - 08:37:18 ---A- . (.Microsoft Corporation - Windows Explorer.) -- C:\WINDOWS\explorer.exe [1033728] O44 - LFC:[MD5.68062C0ECE86AB7801B5B47FDC855A06] - 7/3/2015 - 08:37:20 ---A- . (...) -- C:\WINDOWS\system32\fastopen.exe [882] O44 - LFC:[MD5.3F3E75CB1BF1815DB2315DCF3F88A666] - 7/3/2015 - 08:37:20 ---A- . (.Microsoft Corporation - DOS 5 File Compare Utility.) -- C:\WINDOWS\system32\fc.exe [14848] O44 - LFC:[MD5.D7AE907903A6F46384B0F1D618FCE822] - 7/3/2015 - 08:37:20 ---A- . (.Microsoft Corporation - Debugger Extensions.) -- C:\WINDOWS\system32\exts.dll [125952] O44 - LFC:[MD5.0683F328211A1174AA2C193378843142] - 7/3/2015 - 08:37:20 ---A- . (.Microsoft Corporation - Extensions Manager.) -- C:\WINDOWS\system32\extmgr.dll [55808] O44 - LFC:[MD5.38D332A6D56AF32635675F132548343E] - 7/3/2015 - 08:37:20 ---A- . (.Microsoft Corporation - Fast FAT File System Driver.) -- C:\WINDOWS\system32\Drivers\fastfat.sys [143744] O44 - LFC:[MD5.92CDD60B6730B9F50F6A1A0C1F8CDC81] - 7/3/2015 - 08:37:20 ---A- . (.Microsoft Corporation - Floppy Disk Controller Driver.) -- C:\WINDOWS\system32\Drivers\fdc.sys [27392] O44 - LFC:[MD5.CBA0BE94E3985F6DB7701E259C73B43B] - 7/3/2015 - 08:37:20 ---A- . (.Microsoft Corporation - Folder Redirection Snapin Extension.) -- C:\WINDOWS\system32\fde.dll [124928] O44 - LFC:[MD5.5E12974F81FAE8F695E2B4EA05418AF3] - 7/3/2015 - 08:37:20 ---A- . (.Microsoft Corporation - Folder Redirection Winlogon Extension.) -- C:\WINDOWS\system32\fdeploy.dll [73728] O44 - LFC:[MD5.0DF640C0665596DC256E40D6010078A6] - 7/3/2015 - 08:37:20 ---A- . (.Microsoft Corporation - Microsoft® CAB File Extract Utility.) -- C:\WINDOWS\system32\extrac32.exe [24064] O44 - LFC:[MD5.0099D24356585743B0B35C222092FD8F] - 7/3/2015 - 08:37:20 ---A- . (.Microsoft Corporation - Windows Error Reporting.) -- C:\WINDOWS\system32\faultrep.dll [80384] O44 - LFC:[MD5.303A63F4B913AA5D8998161CB77A8CE7] - 7/3/2015 - 08:37:20 ---A- . (.Microsoft Corporation - Windows NT File Encryption Client Interface.) -- C:\WINDOWS\system32\feclient.dll [21504] O44 - LFC:[MD5.D45926117EB9FA946A6AF572FBE1CAA3] - 7/3/2015 - 08:37:22 ---A- . (.Microsoft Corporation - FIPS Crypto Driver.) -- C:\WINDOWS\system32\Drivers\fips.sys [44544] O44 - LFC:[MD5.88569DAEBC1218B35F7D35F70C0AC877] - 7/3/2015 - 08:37:22 ---A- . (.Microsoft Corporation - FIXMAPI 1.0 MAPI Repair Tool.) -- C:\WINDOWS\system32\fixmapi.exe [3072] O44 - LFC:[MD5.75951D8A85067F8ECCD0076F21E9E4E8] - 7/3/2015 - 08:37:22 ---A- . (.Microsoft Corporation - Find String (QGREP) Utility.) -- C:\WINDOWS\system32\findstr.exe [27136] O44 - LFC:[MD5.09B4E22C86F7E9F1E5C7554AC03B9C9D] - 7/3/2015 - 08:37:22 ---A- . (.Microsoft Corporation - Find String (grep) Utility.) -- C:\WINDOWS\system32\find.exe [9216] O44 - LFC:[MD5.4DC59B4223E833652135B2454F7ECAD2] - 7/3/2015 - 08:37:22 ---A- . (.Microsoft Corporation - Services and Shared Folders.) -- C:\WINDOWS\system32\filemgmt.dll [337920] O44 - LFC:[MD5.5CEF88F1F78451D5BAFFB8FFD0692640] - 7/3/2015 - 08:37:22 ---A- . (.Microsoft Corporation - TCPIP Finger Command.) -- C:\WINDOWS\system32\finger.exe [9216] O44 - LFC:[MD5.2DA9B2B1CE97A115BD0C178C0FF4791F] - 7/3/2015 - 08:37:22 ---A- . (.Microsoft Corporation - Windows Firewall Control Panel.) -- C:\WINDOWS\system32\firewall.cpl [80896] O44 - LFC:[MD5.81EF7547ABD2D8738D88C05D4FB06D85] - 7/3/2015 - 08:37:24 ---A- . (.Microsoft Corporation - Desktop Cleanup Wizard.) -- C:\WINDOWS\system32\fldrclnr.dll [87552] O44 - LFC:[MD5.38C8C7B9506F57B71A3C231E2D2E118B] - 7/3/2015 - 08:37:24 ---A- . (.Microsoft Corporation - FM IFS Utility DLL.) -- C:\WINDOWS\system32\fmifs.dll [18944] O44 - LFC:[MD5.9D27E7B80BFCDF1CDD9B555862D5E7F0] - 7/3/2015 - 08:37:24 ---A- . (.Microsoft Corporation - Floppy Driver.) -- C:\WINDOWS\system32\Drivers\flpydisk.sys [20480] O44 - LFC:[MD5.2BE9496E714B0A606BB615812D2243AB] - 7/3/2015 - 08:37:24 ---A- . (.Microsoft Corporation - Font Subsetting DLL.) -- C:\WINDOWS\system32\fontsub.dll [81920] O44 - LFC:[MD5.4AB98661E251E53F3A2C00919F0A3EB8] - 7/3/2015 - 08:37:24 ---A- . (.Microsoft Corporation - Force DOS Execute Utility.) -- C:\WINDOWS\system32\forcedos.exe [7680] O44 - LFC:[MD5.E518B7E8B372EE8DC9868946FAA8C4C4] - 7/3/2015 - 08:37:24 ---A- . (.Microsoft Corporation - Windows Font Folder.) -- C:\WINDOWS\system32\fontext.dll [382976] O44 - LFC:[MD5.3CD582300BD7D3352D3280DD152AC6E4] - 7/3/2015 - 08:37:24 ---A- . (.Microsoft Corporation - Windows Font Viewer.) -- C:\WINDOWS\system32\fontview.exe [20992] O44 - LFC:[MD5.CE49C477E640463A4F4173E01B661101] - 7/3/2015 - 08:37:24 ---A- . (.No owner - Font Registration Utility (x86-32).) -- C:\WINDOWS\system32\FontReg.exe [6144] O44 - LFC:[MD5.1698F4C28EA75262F53D47CC3836C0DC] - 7/3/2015 - 08:37:26 ---A- . (...) -- C:\WINDOWS\system32\fsmgmt.msc [32760] O44 - LFC:[MD5.B311E5B43F4954E41162A368F55787A7] - 7/3/2015 - 08:37:26 ---A- . (.Microsoft Corporation - Disk Format Utility.) -- C:\WINDOWS\system32\format.com [30720] O44 - LFC:[MD5.6AC26732762483366C3969C9E4D2259D] - 7/3/2015 - 08:37:26 ---A- . (.Microsoft Corporation - FT Disk Driver.) -- C:\WINDOWS\system32\Drivers\ftdisk.sys [125056] O44 - LFC:[MD5.6103E69F711D5B8B53B001B720348A60] - 7/3/2015 - 08:37:26 ---A- . (.Microsoft Corporation - File System Camera Devices DLL.) -- C:\WINDOWS\system32\fsusd.dll [81408] O44 - LFC:[MD5.30D42943A54704EF13E2562911DBFCEA] - 7/3/2015 - 08:37:26 ---A- . (.Microsoft Corporation - File System Recognizer Driver.) -- C:\WINDOWS\system32\Drivers\fs_rec.sys [9216] O44 - LFC:[MD5.0F91C0DBDD463A1F0FC13FAB46522C87] - 7/3/2015 - 08:37:26 ---A- . (.Microsoft Corporation - File Transfer Program.) -- C:\WINDOWS\system32\ftp.exe [42496] O44 - LFC:[MD5.C669A8B0A436641AAD3C2EADA780CBB9] - 7/3/2015 - 08:37:26 ---A- . (.Microsoft Corporation - Framebuffer Display Driver.) -- C:\WINDOWS\system32\framebuf.dll [9344] O44 - LFC:[MD5.416C5F4CDC877FD288AC21AD5D373A3A] - 7/3/2015 - 08:37:26 ---A- . (.Microsoft Corporation - Microsoft® Full-Text Search.) -- C:\WINDOWS\system32\ftsrch.dll [176128] O44 - LFC:[MD5.11B050D9474681405B07A6F47681590F] - 7/3/2015 - 08:37:26 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\fsquirt.exe [193024] O44 - LFC:[MD5.B744371E828CC71F3841B90EF6C83E01] - 7/3/2015 - 08:37:26 ---A- . (.Microsoft Corporation - fsutil.exe.) -- C:\WINDOWS\system32\fsutil.exe [56320] O44 - LFC:[MD5.17F37365AF926F20346301BA781EF3E5] - 7/3/2015 - 08:37:28 ---A- . (.Microsoft Corporation - Windows Firewall Configuration Helper.) -- C:\WINDOWS\system32\fwcfg.dll [60416] O44 - LFC:[MD5.B4A651265E2A6BEA471AB7D4F8559941] - 7/3/2015 - 08:37:30 ---A- . (...) -- C:\WINDOWS\system32\geo.nls [24772] O44 - LFC:[MD5.AFFE0B7126A86603D3F49A19A5B7DC46] - 7/3/2015 - 08:37:30 ---A- . (.Microsoft Corporation - GDI Client DLL.) -- C:\WINDOWS\system32\gdi32.dll [287744] O44 - LFC:[MD5.F18EAE2C867F68C921601D1FA2E2719D] - 7/3/2015 - 08:37:30 ---A- . (.Microsoft Corporation - Game Controllers Default Sheets.) -- C:\WINDOWS\system32\gcdef.dll [76800] O44 - LFC:[MD5.72D1890E6F0CD5C3CF05A1F1DBC598D9] - 7/3/2015 - 08:37:30 ---A- . (.Microsoft Corporation - Get MAC Address.) -- C:\WINDOWS\system32\getmac.exe [59904] O44 - LFC:[MD5.54D50A8785E768377D7D9819EFD8A0CF] - 7/3/2015 - 08:37:30 ---A- . (.Microsoft Corporation - Intel G711 CODEC.) -- C:\WINDOWS\system32\g711codc.ax [41472] O44 - LFC:[MD5.51DB6A9C8826796E031062B20B659DC8] - 7/3/2015 - 08:37:30 ---A- . (.Microsoft Corporation - Windows Graphics Device Interface core comp.) -- C:\WINDOWS\system32\gdi.exe [24576] O44 - LFC:[MD5.7F29903CB8F5590D52DB0C9F97049A25] - 7/3/2015 - 08:37:32 ---A- . (...) -- C:\WINDOWS\system32\Drivers\gm.dls [3440660] O44 - LFC:[MD5.7111BFA692A22E4B3C07F1E6C6FF6F72] - 7/3/2015 - 08:37:32 ---A- . (...) -- C:\WINDOWS\system32\Drivers\gmreadme.txt [646] O44 - LFC:[MD5.C9AD01520798DC5CD144C2DCE97657C3] - 7/3/2015 - 08:37:32 ---A- . (...) -- C:\WINDOWS\system32\gpedit.msc [34871] O44 - LFC:[MD5.65F8DA8424AD27A365F61CCC8621FED2] - 7/3/2015 - 08:37:32 ---A- . (.Microsoft Corporation - GPEdit.) -- C:\WINDOWS\system32\gpedit.dll [566784] O44 - LFC:[MD5.407DE513D78AC10F4EFC3E76045A4B05] - 7/3/2015 - 08:37:32 ---A- . (.Microsoft Corporation - GPTExt.) -- C:\WINDOWS\system32\gptext.dll [199680] O44 - LFC:[MD5.0E6A744C3B40A0F19D16C605646415D2] - 7/3/2015 - 08:37:32 ---A- . (.Microsoft Corporation - Gemplus Cryptographic Service Provider Reso.) -- C:\WINDOWS\system32\gpkrsrc.dll [9728] O44 - LFC:[MD5.0E13DEAA35E93EA67C84C7C7236722AD] - 7/3/2015 - 08:37:32 ---A- . (.Microsoft Corporation - Gemplus Cryptographic Service Provider.) -- C:\WINDOWS\system32\gpkcsp.dll [101888] O44 - LFC:[MD5.CE89F82BD268B91DDD1B0863AC2E627F] - 7/3/2015 - 08:37:32 ---A- . (.Microsoft Corporation - Group Policy Preference Client.) -- C:\WINDOWS\system32\gpprefcl.dll [633344] O44 - LFC:[MD5.9F8A3D6E720EC1995B52FE9309D55DF4] - 7/3/2015 - 08:37:32 ---A- . (.Microsoft Corporation - OpenGL Metafiling DLL.) -- C:\WINDOWS\system32\glmf32.dll [285184] O44 - LFC:[MD5.A78516D04DD71A18FDFDF820A6413634] - 7/3/2015 - 08:37:32 ---A- . (.Microsoft Corporation - OpenGL Utility Library DLL.) -- C:\WINDOWS\system32\glu32.dll [122880] O44 - LFC:[MD5.1832FE014FF6B1FBB3A5E62E39218B82] - 7/3/2015 - 08:37:32 ---A- . (.Microsoft Corporation - Query RSOP Data.) -- C:\WINDOWS\system32\gpresult.exe [120832] O44 - LFC:[MD5.6E4E7884E6489AC4F5E6DAB176A73E52] - 7/3/2015 - 08:37:34 ---A- . (...) -- C:\WINDOWS\system32\graphics.com [19694] O44 - LFC:[MD5.BC33AA625D6B807F718627386DF78426] - 7/3/2015 - 08:37:34 ---A- . (...) -- C:\WINDOWS\system32\graphics.pro [21232] O44 - LFC:[MD5.DD47F76395D46C4DE9559B5DB1473464] - 7/3/2015 - 08:37:34 ---A- . (.Microsoft Corporation - Graftabl Utility.) -- C:\WINDOWS\system32\graftabl.com [26112] O44 - LFC:[MD5.71288E0B1D9B4F91CF78F3B58A298D36] - 7/3/2015 - 08:37:34 ---A- . (.Microsoft Corporation - Microsoft® Group Policy Refresh Utility.) -- C:\WINDOWS\system32\gpupdate.exe [57344] O44 - LFC:[MD5.6DD28A6D99CF7B14B2D1786D143624E0] - 7/3/2015 - 08:37:34 ---A- . (.Microsoft Corporation - Windows Progman Group Converter.) -- C:\WINDOWS\system32\grpconv.exe [39424] O44 - LFC:[MD5.429B2A7E9569C19BFE58F71FC02DE220] - 7/3/2015 - 08:37:36 ---A- . (.Microsoft Corporation - Hardware Abstraction Layer DLL.) -- C:\WINDOWS\system32\hal.dll [131968] O44 - LFC:[MD5.CE8C3BC1377B83DBCD7304AB2D0A4735] - 7/3/2015 - 08:37:36 ---A- . (.Microsoft Corporation - Microsoft H.323 Media Service Provider.) -- C:\WINDOWS\system32\h323msp.dll [614912] O44 - LFC:[MD5.8BC2B02DC11C98D14CEE43B8E8393FF3] - 7/3/2015 - 08:37:36 ---A- . (.Microsoft Corporation - Microsoft H.323 Telephony Service Provider.) -- C:\WINDOWS\system32\h323.tsp [265728] O44 - LFC:[MD5.428597F7DA0D13EA834F87130C6A0CFC] - 7/3/2015 - 08:37:36 ---A- . (.Microsoft Corporation - USB Coinstaller.) -- C:\WINDOWS\system32\hccoin.dll [7168] O44 - LFC:[MD5.DAF5D86EB3EC52D6F79815F69E237F3D] - 7/3/2015 - 08:37:38 ---A- . (.Microsoft Corporation - Add Hardware Control Panel Applet.) -- C:\WINDOWS\system32\hdwwiz.cpl [155136] O44 - LFC:[MD5.84759CB654F45422BC2458806AB07762] - 7/3/2015 - 08:37:38 ---A- . (.Microsoft Corporation - Command Line Help Utility.) -- C:\WINDOWS\system32\help.exe [15872] O44 - LFC:[MD5.1AF592532532A402ED7C060F6954004F] - 7/3/2015 - 08:37:38 ---A- . (.Microsoft Corporation - Hid Class Library.) -- C:\WINDOWS\system32\Drivers\hidclass.sys [36864] O44 - LFC:[MD5.C569EF030B11F896E123A30AC92678DB] - 7/3/2015 - 08:37:38 ---A- . (.Microsoft Corporation - Hid Parsing Library.) -- C:\WINDOWS\system32\Drivers\hidparse.sys [25088] O44 - LFC:[MD5.6B552ED3BEE5AA3C4560478FF779BA98] - 7/3/2015 - 08:37:38 ---A- . (.Microsoft Corporation - Microsoft HID Phone TSP.) -- C:\WINDOWS\system32\hidphone.tsp [29696] O44 - LFC:[MD5.22D71D1DB6FC789A1CE8AC6963580259] - 7/3/2015 - 08:37:38 ---A- . (.Microsoft Corporation - Microsoft® HTML Help Control.) -- C:\WINDOWS\system32\hhctrl.ocx [545280] O44 - LFC:[MD5.6BA0A833DCABF3E28622143689E2C92E] - 7/3/2015 - 08:37:38 ---A- . (.Microsoft Corporation - Microsoft® HTML Help Executable.) -- C:\WINDOWS\hh.exe [10752] O44 - LFC:[MD5.D3E868700D9B5E3C54B7EED060215CC1] - 7/3/2015 - 08:37:38 ---A- . (.Microsoft Corporation - Microsoft® HTML Help.) -- C:\WINDOWS\system32\hhsetup.dll [41472] O44 - LFC:[MD5.573C7D0A32852B48F3058CFD8026F511] - 7/3/2015 - 08:37:38 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\hdaudbus.sys [144384] O44 - LFC:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 7/3/2015 - 08:37:40 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4768] O44 - LFC:[MD5.BF7DFAD60D4809DAA505765A1A925E3E] - 7/3/2015 - 08:37:40 ---A- . (...) -- C:\WINDOWS\system32\homepage.inf [929] O44 - LFC:[MD5.0A878AA66E4DD3E2608192A1ECCD9F8F] - 7/3/2015 - 08:37:40 ---A- . (.Microsoft Corporation - Home Networking Configuration Manager.) -- C:\WINDOWS\system32\hnetcfg.dll [344064] O44 - LFC:[MD5.CB0B260E371968CB253252E81ADC051E] - 7/3/2015 - 08:37:40 ---A- . (.Microsoft Corporation - Home Networking Monitor DLL.) -- C:\WINDOWS\system32\hnetmon.dll [14848] O44 - LFC:[MD5.4B3F282C998813C86A6CF89615960630] - 7/3/2015 - 08:37:40 ---A- . (.Microsoft Corporation - Microsoft Office 2000 component.) -- C:\WINDOWS\system32\hlink.dll [72704] O44 - LFC:[MD5.706D2B737E8673D365B6E8FDA3D0478F] - 7/3/2015 - 08:37:40 ---A- . (.Microsoft Corporation - Network Setup Wizard.) -- C:\WINDOWS\system32\hnetwiz.dll [330752] O44 - LFC:[MD5.CCF82C5EC8A7326C3066DE870C06DAF1] - 7/3/2015 - 08:37:40 ---A- . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\WINDOWS\system32\Drivers\hidusb.sys [10368] O44 - LFC:[MD5.13253731D13168EF06DCA97F70AD57CC] - 7/3/2015 - 08:37:42 ---A- . (.Microsoft Corporation - Hostname APP.) -- C:\WINDOWS\system32\hostname.exe [7680] O44 - LFC:[MD5.5380496D6E5898C10B785816875FA049] - 7/3/2015 - 08:37:42 ---A- . (.Microsoft Corporation - Safely Remove Hardware applet.) -- C:\WINDOWS\system32\hotplug.dll [144896] O44 - LFC:[MD5.163D545FD46E0CE9B9FA25A13280DCD5] - 7/3/2015 - 08:37:44 ---A- . (.Microsoft Corporation - Common halftone Color Adjustment Dialogs.) -- C:\WINDOWS\system32\htui.dll [41984] O44 - LFC:[MD5.07F7037B694AA9A6D67A543C2043FC57] - 7/3/2015 - 08:37:44 ---A- . (.Microsoft Corporation - HTTP Protocol Stack API.) -- C:\WINDOWS\system32\httpapi.dll [25088] O44 - LFC:[MD5.937031C085718C1C04A9C0864625EC6B] - 7/3/2015 - 08:37:44 ---A- . (.Microsoft Corporation - HTTP Protocol Stack.) -- C:\WINDOWS\system32\Drivers\http.sys [265728] O44 - LFC:[MD5.F45F3B710F4AAA339E55915D35B03340] - 7/3/2015 - 08:37:44 ---A- . (.Microsoft Corporation - Microsoft HTML Converter.) -- C:\WINDOWS\system32\html.iec [385024] O44 - LFC:[MD5.877C90686858D899B042BBA45E9B7F2C] - 7/3/2015 - 08:37:46 ---A- . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax [199680] O44 - LFC:[MD5.A6169405D73FA5BC4392839D65420568] - 7/3/2015 - 08:37:46 ---A- . (.Microsoft Corporation - IAS Accounting Provider.) -- C:\WINDOWS\system32\iasacct.dll [23552] O44 - LFC:[MD5.D3064B743F36535E8D2454A460F215E2] - 7/3/2015 - 08:37:46 ---A- . (.Microsoft Corporation - IAS Active Directory Data Store.) -- C:\WINDOWS\system32\iasads.dll [41472] O44 - LFC:[MD5.B9D26DE2FF120199A0217F62C4230A9A] - 7/3/2015 - 08:37:46 ---A- . (.Microsoft Corporation - IAS Jet Database Access.) -- C:\WINDOWS\system32\iasrecst.dll [141312] O44 - LFC:[MD5.F96E689699A68A69916227F4D29A87FD] - 7/3/2015 - 08:37:46 ---A- . (.Microsoft Corporation - IAS NAP Provider.) -- C:\WINDOWS\system32\iasnap.dll [62464] O44 - LFC:[MD5.C2689CC0535E6939D1A0732808E2CAFB] - 7/3/2015 - 08:37:46 ---A- . (.Microsoft Corporation - IAS NT SAM Provider.) -- C:\WINDOWS\system32\iassam.dll [86528] O44 - LFC:[MD5.A44AD395C672B5BACE38773E996BAE95] - 7/3/2015 - 08:37:46 ---A- . (.Microsoft Corporation - IAS Pipeline.) -- C:\WINDOWS\system32\iaspolcy.dll [17920] O44 - LFC:[MD5.18E03F4113D731142B571B259EA67848] - 7/3/2015 - 08:37:46 ---A- . (.Microsoft Corporation - IAS RADIUS Protocol Component.) -- C:\WINDOWS\system32\iasrad.dll [119808] O44 - LFC:[MD5.7AC715A7F6B8D1F8ACDBF567D580E1D0] - 7/3/2015 - 08:37:46 ---A- . (.Microsoft Corporation - IAS SDO Component.) -- C:\WINDOWS\system32\iassdo.dll [247808] O44 - LFC:[MD5.6F99509944223527E4B18954CAC981D5] - 7/3/2015 - 08:37:46 ---A- . (.Microsoft Corporation - IAS Services Component.) -- C:\WINDOWS\system32\iassvcs.dll [59392] O44 - LFC:[MD5.D07AE9626E383A785440CDF25702326C] - 7/3/2015 - 08:37:46 ---A- . (.Microsoft Corporation - IAS Surrogate Component.) -- C:\WINDOWS\system32\iashlpr.dll [32256] O44 - LFC:[MD5.17A6B9EFC1D37368379F4E77EC3F2761] - 7/3/2015 - 08:37:46 ---A- . (.Microsoft Corporation - Microsoft Information Card IE Helper.) -- C:\WINDOWS\system32\icardie.dll [59904] O44 - LFC:[MD5.4A0B06AA8943C1E332520F7440C0AA30] - 7/3/2015 - 08:37:46 ---A- . (.Microsoft Corporation - i8042 Port Driver.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [52480] O44 - LFC:[MD5.3FEAF4C0A44906309DC628F495AA07F1] - 7/3/2015 - 08:37:46 ---A- . (.No owner - Microsoft Audio Codec Placeholder.) -- C:\WINDOWS\system32\iacenc.dll [3072] O44 - LFC:[MD5.2E1D8E1D957CDDBFA7A628A27BCF8D57] - 7/3/2015 - 08:37:46 ---A- . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll [80384] O44 - LFC:[MD5.ECD81B99477AB4A93D7838EB40B870D0] - 7/3/2015 - 08:37:48 ---A- . (...) -- C:\WINDOWS\system32\icrav03.rat [8798] O44 - LFC:[MD5.4EA92135C436D18975C2EBEC242B71DA] - 7/3/2015 - 08:37:48 ---A- . (.Microsoft Corporation - ICMP DLL.) -- C:\WINDOWS\system32\icmp.dll [3584] O44 - LFC:[MD5.FBFA46EFA259899A14D225084F124932] - 7/3/2015 - 08:37:48 ---A- . (.Microsoft Corporation - Microsoft Color Management Module (CMM).) -- C:\WINDOWS\system32\icm32.dll [254976] O44 - LFC:[MD5.079C0BB1CA25ACA85E1E12C331E6C8AA] - 7/3/2015 - 08:37:48 ---A- . (.Microsoft Corporation - Microsoft Color Matching System User Interf.) -- C:\WINDOWS\system32\icmui.dll [54784] O44 - LFC:[MD5.C838EF8A3D766B6E0F1F668BE9988D4A] - 7/3/2015 - 08:37:50 ---A- . (.Microsoft Corporation - Downlevel DLL.) -- C:\WINDOWS\system32\idndl.dll [26112] O44 - LFC:[MD5.3954DFA7E240179BCDCA4F11FB1A56CC] - 7/3/2015 - 08:37:50 ---A- . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe [174592] O44 - LFC:[MD5.BCF1FE50EDB865115DB2BBE8B62FD8F0] - 7/3/2015 - 08:37:50 ---A- . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe.mui [4096] O44 - LFC:[MD5.8116C9C980D0C55D2741336E19336AC4] - 7/3/2015 - 08:37:50 ---A- . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll [387584] O44 - LFC:[MD5.39D3A7E1CF6F9F17EFEEA96751172736] - 7/3/2015 - 08:37:50 ---A- . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll.mui [81920] O44 - LFC:[MD5.F2663690E58579D9F5B5DFAF3046CEBF] - 7/3/2015 - 08:37:50 ---A- . (.Microsoft Corporation - Indexing Service ISAPI Extension.) -- C:\WINDOWS\system32\idq.dll [120832] O44 - LFC:[MD5.FCF52888B8AD1BDC80275108172BD76D] - 7/3/2015 - 08:37:50 ---A- . (.Microsoft Corporation - Internet Explorer Administration Kit Engine.) -- C:\WINDOWS\system32\ieakeng.dll [125952] O44 - LFC:[MD5.69F138A7E93F2646CDEC3B68CE7011DF] - 7/3/2015 - 08:37:50 ---A- . (.Microsoft Corporation - Internet Explorer Snap-in Extension to Grou.) -- C:\WINDOWS\system32\ieaksie.dll [229376] O44 - LFC:[MD5.36A86C1B6406CC493554F16BA13BE7D9] - 7/3/2015 - 08:37:50 ---A- . (.Microsoft Corporation - Microsoft IEAK Shared UI DLL.) -- C:\WINDOWS\system32\ieakui.dll [163840] O44 - LFC:[MD5.EC6A0643FC55E87A12F4C5BC49E9F431] - 7/3/2015 - 08:37:50 ---A- . (.Microsoft Corporation - Microsoft SmartScreen Filter Data File.) -- C:\WINDOWS\system32\ieapfltr.dat [3698584] O44 - LFC:[MD5.66F1C930F4572816BB15C3A863590305] - 7/3/2015 - 08:37:50 ---A- . (.Microsoft Corporation - Microsoft SmartScreen Filter.) -- C:\WINDOWS\system32\ieapfltr.dll [445952] O44 - LFC:[MD5.F7CB4ED1D59D69E2382EA277D430DD41] - 7/3/2015 - 08:37:52 ---A- . (...) -- C:\WINDOWS\system32\ieuinit.inf [57667] O44 - LFC:[MD5.45814FE9FBD6F569A0468D229455B3A2] - 7/3/2015 - 08:37:52 ---A- . (.Microsoft Corporation - Extended RunOnce processing with UI.) -- C:\WINDOWS\system32\iernonce.dll [55808] O44 - LFC:[MD5.06A0D051B6937CDA3E38702494BBFC2A] - 7/3/2015 - 08:37:52 ---A- . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe [36864] O44 - LFC:[MD5.1B6FF5B9A21DE2E89BB014932A414E7E] - 7/3/2015 - 08:37:52 ---A- . (.Microsoft Corporation - IOD Version Map.) -- C:\WINDOWS\system32\iesetup.dll [71680] O44 - LFC:[MD5.8721A9BC4B8EC28542D3C36ECCCFC299] - 7/3/2015 - 08:37:52 ---A- . (.Microsoft Corporation - Internet Explorer Peer Objects.) -- C:\WINDOWS\system32\iepeers.dll [184320] O44 - LFC:[MD5.11734790410900D2CD6B7839020E4DD9] - 7/3/2015 - 08:37:52 ---A- . (.Microsoft Corporation - Internet Explorer UI Engine.) -- C:\WINDOWS\system32\ieui.dll [164352] O44 - LFC:[MD5.FA4A79DBB0E3CA56E1F0B1FD372559A8] - 7/3/2015 - 08:37:52 ---A- . (.Microsoft Corporation - Internet Explorer.) -- C:\WINDOWS\system32\ieframe.dll [11113472] O44 - LFC:[MD5.332650FEC1768B87180F16EFA2767F89] - 7/3/2015 - 08:37:52 ---A- . (.Microsoft Corporation - Internet Explorer.) -- C:\WINDOWS\system32\ieframe.dll.mui [1241088] O44 - LFC:[MD5.89A1EE0C4046375B4B9E0B010C90C802] - 7/3/2015 - 08:37:52 ---A- . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\WINDOWS\system32\iertutil.dll [2006016] O44 - LFC:[MD5.DB0851DF38A3E82C9B84EB7360D6E817] - 7/3/2015 - 08:37:54 ---A- . (.Microsoft Corporation - IF Monitor DLL.) -- C:\WINDOWS\system32\ifmon.dll [135680] O44 - LFC:[MD5.6F569C347C2E587B330DB30BEB1DDE49] - 7/3/2015 - 08:37:54 ---A- . (.Microsoft Corporation - IFS Utility DLL.) -- C:\WINDOWS\system32\ifsutil.dll [77824] O44 - LFC:[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - 7/3/2015 - 08:37:54 ---A- . (.Microsoft Corporation - IMAPI Kernel Driver.) -- C:\WINDOWS\system32\Drivers\imapi.sys [42112] O44 - LFC:[MD5.3E12C8EBF967ED17F9202EF8872BCE5E] - 7/3/2015 - 08:37:54 ---A- . (.Microsoft Corporation - Infineon SICRYPT Card Module.) -- C:\WINDOWS\system32\ifxcardm.dll [151552] O44 - LFC:[MD5.384DA6A9C70889F01B99888C5E07072C] - 7/3/2015 - 08:37:54 ---A- . (.Microsoft Corporation - Microsoft IGMP subagent.) -- C:\WINDOWS\system32\igmpagnt.dll [8192] O44 - LFC:[MD5.90A2416951A4968E78D29A034E97B269] - 7/3/2015 - 08:37:54 ---A- . (.Microsoft Corporation - Wizard.) -- C:\WINDOWS\system32\iexpress.exe [114688] O44 - LFC:[MD5.42B928FC8518D793BF7A5EAFC57B1D8B] - 7/3/2015 - 08:37:56 ---A- . (.Microsoft Corporation - IE plugin image decoder support DLL.) -- C:\WINDOWS\system32\imgutil.dll [34816] O44 - LFC:[MD5.577E496F0D41411BF149394D80959D53] - 7/3/2015 - 08:37:56 ---A- . (.Microsoft Corporation - IMA ADPCM CODEC for MSACM.) -- C:\WINDOWS\system32\imaadp32.acm [16384] O44 - LFC:[MD5.6015D7CD719D17C4929CF97A8B10229E] - 7/3/2015 - 08:37:56 ---A- . (.Microsoft Corporation - Image Mastering API v2.) -- C:\WINDOWS\system32\imapi2.dll [426496] O44 - LFC:[MD5.30DEAF54A9755BB8546168CFE8A6B5E1] - 7/3/2015 - 08:37:56 ---A- . (.Microsoft Corporation - Image Mastering API.) -- C:\WINDOWS\system32\imapi.exe [150528] O44 - LFC:[MD5.5632C280273AA1FB50723C21F37E66A6] - 7/3/2015 - 08:37:56 ---A- . (.Microsoft Corporation - Image Mastering File System Imaging API v2.) -- C:\WINDOWS\system32\imapi2fs.dll [922112] O44 - LFC:[MD5.6094FB639C2ED53E8A0CC703594D81F8] - 7/3/2015 - 08:37:56 ---A- . (.Microsoft Corporation - Microsoft IIS sub-authentication handler.) -- C:\WINDOWS\system32\iissuba.dll [9216] O44 - LFC:[MD5.51EE57EB3B43292B16A6101E0A0D0409] - 7/3/2015 - 08:37:56 ---A- . (.Microsoft Corporation - Microsoft Office IME Shared property librar.) -- C:\WINDOWS\system32\imeshare.dll [36921] =>PUP.iMesh O44 - LFC:[MD5.16E916243BDDBAF44D98E623B2D0CEAD] - 7/3/2015 - 08:37:56 ---A- . (.Microsoft Corporation - Windows NT Image Helper.) -- C:\WINDOWS\system32\imagehlp.dll [150528] O44 - LFC:[MD5.0DA85218E92526972A821587E6A8BF8F] - 7/3/2015 - 08:37:56 ---A- . (.Microsoft Corporation - Windows XP IMM32 API Client DLL.) -- C:\WINDOWS\system32\imm32.dll [110080] O44 - LFC:[MD5.685017065B2F8F8AC6BD15B8926DED06] - 7/3/2015 - 08:37:58 ---A- . (.Microsoft Corporation - Internet Control Panel.) -- C:\WINDOWS\system32\inetcpl.cpl [1469440] O44 - LFC:[MD5.60A29D924AC51A64F1BCAF6F43626915] - 7/3/2015 - 08:37:58 ---A- . (.Microsoft Corporation - Internet Control Panel.) -- C:\WINDOWS\system32\inetcplc.dll [110592] O44 - LFC:[MD5.689FDE721AA6C9DDDE685AB44647A20A] - 7/3/2015 - 08:37:58 ---A- . (.Microsoft Corporation - Internet Print Client DLL.) -- C:\WINDOWS\system32\inetppui.dll [15872] O44 - LFC:[MD5.EE4C651A217B01D636B5364AC77DA892] - 7/3/2015 - 08:37:58 ---A- . (.Microsoft Corporation - Internet Print Provider DLL.) -- C:\WINDOWS\system32\inetpp.dll [75264] O44 - LFC:[MD5.63E8D944AFBEEBB243F25C4ED07E74C5] - 7/3/2015 - 08:37:58 ---A- . (.Microsoft Corporation - Microsoft MIB-II subagent.) -- C:\WINDOWS\system32\inetmib1.dll [32768] O44 - LFC:[MD5.B6932761058DC21BEAA7A1245B1B20E6] - 7/3/2015 - 08:37:58 ---A- . (.Microsoft Corporation - Wordbreaker and stemmer dll.) -- C:\WINDOWS\system32\infosoft.dll [450560] O44 - LFC:[MD5.09058D19094A8E055019674108FB6284] - 7/3/2015 - 08:38:00 ---A- . (...) -- C:\WINDOWS\system32\instcat.sql [956990] O44 - LFC:[MD5.13BB14031A0BB63B2FF301CB777FABC5] - 7/3/2015 - 08:38:00 ---A- . (.Microsoft Corporation - Control Panel DLL.) -- C:\WINDOWS\system32\intl.cpl [129536] O44 - LFC:[MD5.79ACF648FA7301A422CCF549B1D2820F] - 7/3/2015 - 08:38:00 ---A- . (.Microsoft Corporation - IO Logging DLL.) -- C:\WINDOWS\system32\iologmsg.dll [30720] O44 - LFC:[MD5.8FAAFF28147935E5847F980607965FFE] - 7/3/2015 - 08:38:00 ---A- . (.Microsoft Corporation - Install engine.) -- C:\WINDOWS\system32\inseng.dll [94720] O44 - LFC:[MD5.37B836C3306DF8261A5E0CFAD34FF5C5] - 7/3/2015 - 08:38:00 ---A- . (.Microsoft Corporation - Microsoft Trust Installation and Setup.) -- C:\WINDOWS\system32\initpki.dll [147456] O44 - LFC:[MD5.8C953733D8F36EB2133F5BB58808B66B] - 7/3/2015 - 08:38:00 ---A- . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\system32\Drivers\intelppm.sys [36352] O44 - LFC:[MD5.2D2AFB825C3C350D7DAABEC9421FB1D6] - 7/3/2015 - 08:38:00 ---A- . (.Microsoft Corporation - Text Input DLL.) -- C:\WINDOWS\system32\input.dll [123392] O44 - LFC:[MD5.34781A7E9683F42C4B2FE6F09456568C] - 7/3/2015 - 08:38:02 ---A- . (.Microsoft Corporation - IP Configuration Utility.) -- C:\WINDOWS\system32\ipconfig.exe [55808] O44 - LFC:[MD5.731F22BA402EE4B62748ADAF6363C182] - 7/3/2015 - 08:38:02 ---A- . (.Microsoft Corporation - IP FILTER DRIVER.) -- C:\WINDOWS\system32\Drivers\ipfltdrv.sys [32896] O44 - LFC:[MD5.AF07DC9B7CC455629E732340C7B15F3A] - 7/3/2015 - 08:38:02 ---A- . (.Microsoft Corporation - IP Helper API.) -- C:\WINDOWS\system32\iphlpapi.dll [94720] O44 - LFC:[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - 7/3/2015 - 08:38:02 ---A- . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys [152832] O44 - LFC:[MD5.814E3D64311AC9C9541F4144AD014DDF] - 7/3/2015 - 08:38:02 ---A- . (.Microsoft Corporation - IP Protocols Monitor DLL.) -- C:\WINDOWS\system32\ippromon.dll [330752] O44 - LFC:[MD5.CA113D47F1B23A137B9A34845D0596A9] - 7/3/2015 - 08:38:02 ---A- . (.Microsoft Corporation - IP Router Monitor DLL.) -- C:\WINDOWS\system32\ipmontr.dll [161280] O44 - LFC:[MD5.B5247F381EC1E2C568421F182867EC8A] - 7/3/2015 - 08:38:02 ---A- . (.Microsoft Corporation - IP Routing Protocol Priority DLL.) -- C:\WINDOWS\system32\iprtprio.dll [4096] O44 - LFC:[MD5.B87AB476DCF76E72010632B5550955F5] - 7/3/2015 - 08:38:02 ---A- . (.Microsoft Corporation - IP in IP Encapsulation Driver.) -- C:\WINDOWS\system32\Drivers\ipinip.sys [20864] O44 - LFC:[MD5.3BB22519A194418D5FEC05D800A19AD0] - 7/3/2015 - 08:38:02 ---A- . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys [36608] O44 - LFC:[MD5.8B8A45DF7CEF36D93C7BD3E4C84003B8] - 7/3/2015 - 08:38:02 ---A- . (.Microsoft Corporation - Microsoft Multicast Conference TAPI Service.) -- C:\WINDOWS\system32\ipconf.tsp [17408] O44 - LFC:[MD5.F407F9E7CE3B68A07E96555B0E818BE6] - 7/3/2015 - 08:38:02 ---A- . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\WINDOWS\system32\ipnathlp.dll [330752] O44 - LFC:[MD5.F58D7AC4BB3C3EABCEE37BFA7074B6F8] - 7/3/2015 - 08:38:02 ---A- . (.Microsoft Corporation - OLE PropertySet Implementation.) -- C:\WINDOWS\system32\iprop.dll [3584] O44 - LFC:[MD5.43ECA1576906BA76FB3E329A338A3CAE] - 7/3/2015 - 08:38:04 ---A- . (...) -- C:\WINDOWS\system32\ir32_32.dll [199168] O44 - LFC:[MD5.948E1498C6438625247F94534AAA82FE] - 7/3/2015 - 08:38:04 ---A- . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax [848384] O44 - LFC:[MD5.5F10DC19D92CCF6B719B494572F4F74B] - 7/3/2015 - 08:38:04 ---A- . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll [755200] O44 - LFC:[MD5.BCA2C90248D63BD49CBDCB41357CFD4C] - 7/3/2015 - 08:38:04 ---A- . (.Intel Corporation. - Intel Indeo® Video Interactive Quick Compre.) -- C:\WINDOWS\system32\ir41_qc.dll [120320] O44 - LFC:[MD5.22707DA6003CBCC6B9C1CCA98087D5BC] - 7/3/2015 - 08:38:04 ---A- . (.Intel Corporation. - Intel Indeo® Video Interactive Quick Compre.) -- C:\WINDOWS\system32\ir41_qcx.dll [338432] O44 - LFC:[MD5.AD547B9BC57F27826C2D8D2A6FEF4B95] - 7/3/2015 - 08:38:04 ---A- . (.Intel Corporation. - Intel Indeo® video 5.10 Quick Compressor.) -- C:\WINDOWS\system32\ir50_qc.dll [200192] O44 - LFC:[MD5.E6F522713C0C263918D32B95D666C614] - 7/3/2015 - 08:38:04 ---A- . (.Intel Corporation. - Intel Indeo® video 5.10 Quick Compressor.) -- C:\WINDOWS\system32\ir50_qcx.dll [183808] O44 - LFC:[MD5.6CB1C20F2CE3402A60F3F766D73B15B8] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - IP Router Manager.) -- C:\WINDOWS\system32\iprtrmgr.dll [177152] O44 - LFC:[MD5.1D051DB826111EDBE84D526CB00D4550] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - IP Security Monitor Snapin.) -- C:\WINDOWS\system32\ipsmsnap.dll [384000] O44 - LFC:[MD5.23C74D75E36E7158768DD63D92789A91] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - IPSec Driver.) -- C:\WINDOWS\system32\Drivers\ipsec.sys [75264] O44 - LFC:[MD5.2E942A2BABCE91DA57F7D63D4F69F15F] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - IPX RIP.) -- C:\WINDOWS\system32\ipxrip.dll [21504] O44 - LFC:[MD5.EB255169EDF1FABC69DF70498C8840E0] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - IPX ROUTER MANAGER.) -- C:\WINDOWS\system32\ipxrtmgr.dll [39936] O44 - LFC:[MD5.B6CD64BA2D3B0349F72F3914E13E6F02] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - IPX Router Monitor DLL.) -- C:\WINDOWS\system32\ipxmontr.dll [83968] O44 - LFC:[MD5.00180C1ECC0E32EDF46D3D6D05ECEF23] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - IPX Router Monitor DLL.) -- C:\WINDOWS\system32\ipxpromn.dll [69120] O44 - LFC:[MD5.B1DED39112E0C85BAFA58DCBEC6718B6] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - IPXWAN.) -- C:\WINDOWS\system32\ipxwan.dll [22016] O44 - LFC:[MD5.018ABDB00989AE1006EBBB9AB1B3E82A] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - IPv6 Configuration Utility.) -- C:\WINDOWS\system32\ipv6.exe [53248] O44 - LFC:[MD5.2FFA0986648BA99F743300AEC911BFB3] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - IPv6 Monitor DLL.) -- C:\WINDOWS\system32\ipv6mon.dll [59904] O44 - LFC:[MD5.9869330E6E45029FD1640AA80130146E] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - IPv6 Security Configuration Utility.) -- C:\WINDOWS\system32\ipsec6.exe [44032] O44 - LFC:[MD5.FACEF4325FE4795647149DEC6FF728C7] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - Infrared Class Coinstaller.) -- C:\WINDOWS\system32\irclass.dll [13312] O44 - LFC:[MD5.EF90321EE87DF18CE318E44DB4B33455] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - Internet Protocol Security Policy Managemen.) -- C:\WINDOWS\system32\ipsecsnp.dll [349696] O44 - LFC:[MD5.5A3EB34CC341E09A55CEDB01F0D901B2] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - NWLink Source Routing Application.) -- C:\WINDOWS\system32\ipxroute.exe [23552] O44 - LFC:[MD5.05A299EC56E52649B1CF2FC52D20F2D7] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - PNP ISA Bus Driver.) -- C:\WINDOWS\system32\Drivers\isapnp.sys [37248] O44 - LFC:[MD5.4B83FCBBE72AF5F99D109798653E8B78] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - SAP Agent DLL.) -- C:\WINDOWS\system32\ipxsap.dll [66560] O44 - LFC:[MD5.332760FBA1655FCFD35BD6F4FD871300] - 7/3/2015 - 08:38:04 ---A- . (.Microsoft Corporation - Windows IPSec SPD Server DLL.) -- C:\WINDOWS\system32\ipsecsvc.dll [183808] O44 - LFC:[MD5.C93C9FF7B04D772627A3646D89F7BF89] - 7/3/2015 - 08:38:06 ---A- . (.Microsoft Corporation - Infra-Red Bus Enumerator.) -- C:\WINDOWS\system32\Drivers\irenum.sys [11264] O44 - LFC:[MD5.524FFBC40A38208E68AAA095D28D0455] - 7/3/2015 - 08:38:06 ---A- . (.Microsoft Corporation - Wireless Link Control Panel Applet.) -- C:\WINDOWS\system32\irprops.cpl [380416] O44 - LFC:[MD5.CDA2104AB63D3E68B249D51E789CE81E] - 7/3/2015 - 08:38:08 ---A- . (.America Online - JG ART DLL.) -- C:\WINDOWS\system32\jgdw400.dll [163840] O44 - LFC:[MD5.A9F25B26FFE8C41AF73512139456FBEF] - 7/3/2015 - 08:38:08 ---A- . (.America Online - JG ART DLL.) -- C:\WINDOWS\system32\jgsd400.dll [45568] O44 - LFC:[MD5.F7ACEEF4B13E8035DED875978B40C998] - 7/3/2015 - 08:38:08 ---A- . (.Intel Corporation - Intel Indeo® video IVF Source Filter 5.10.) -- C:\WINDOWS\system32\ivfsrc.ax [154624] O44 - LFC:[MD5.F706A21C3A46A18D0ACE2C127CF37E78] - 7/3/2015 - 08:38:08 ---A- . (.Johnson-Grace Company - JG ART Player DLL.) -- C:\WINDOWS\system32\jgpl400.dll [27648] O44 - LFC:[MD5.6A4556189D8B40611B351EF4CDAC5FBA] - 7/3/2015 - 08:38:08 ---A- . (.Johnson-Grace Company - JG Audio Interface DLL.) -- C:\WINDOWS\system32\jgaw400.dll [44544] O44 - LFC:[MD5.DCA543F084FD8B23812F6FF1477D5C50] - 7/3/2015 - 08:38:08 ---A- . (.Johnson-Grace Company - JG MIDI Player DLL.) -- C:\WINDOWS\system32\jgmd400.dll [35840] O44 - LFC:[MD5.C9E191A3F7D8A439343C8F92BE5C0954] - 7/3/2015 - 08:38:08 ---A- . (.Johnson-Grace Company - JG Slide Show Player DLL.) -- C:\WINDOWS\system32\jgsh400.dll [65536] O44 - LFC:[MD5.19242C893612ADA4170C3450A3473A9B] - 7/3/2015 - 08:38:08 ---A- . (.Microsoft Corporation - Active Setup Job Executer.) -- C:\WINDOWS\system32\jobexec.dll [47952] O44 - LFC:[MD5.3334A50EFB6C39AC9FAA89612BC2CA3F] - 7/3/2015 - 08:38:08 ---A- . (.Microsoft Corporation - Game Controllers Control Panel Applet.) -- C:\WINDOWS\system32\joy.cpl [68608] O44 - LFC:[MD5.8F75D01289FE693F61036B11FC6C3B75] - 7/3/2015 - 08:38:08 ---A- . (.Microsoft Corporation - Indexing Service Server-side Object.) -- C:\WINDOWS\system32\ixsso.dll [54272] O44 - LFC:[MD5.23702BA59D71E68FA3F6253F7749ED68] - 7/3/2015 - 08:38:08 ---A- . (.Microsoft Corporation - JET Engine DLL.) -- C:\WINDOWS\system32\jet500.dll [362496] O44 - LFC:[MD5.F896111EE4AFDE6EACEA64708AE1D74A] - 7/3/2015 - 08:38:08 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\WINDOWS\system32\jscript.dll [726528] O44 - LFC:[MD5.92BADB577B923F5AE2B095CFE11B9975] - 7/3/2015 - 08:38:08 ---A- . (.Microsoft Corporation - Microsoft® InfoTech IR Local DLL.) -- C:\WINDOWS\system32\itircl.dll [155136] O44 - LFC:[MD5.0EC5ECE8762728ED734258B22D348A32] - 7/3/2015 - 08:38:08 ---A- . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll [138240] O44 - LFC:[MD5.650F0E43DE5E9941E61668672A1075F2] - 7/3/2015 - 08:38:08 ---A- . (.Microsoft Corporation - Windows Update Control Engine.) -- C:\WINDOWS\system32\iuengine.dll [191488] O44 - LFC:[MD5.4D7E256377A5E934EA1820B2CEA79131] - 7/3/2015 - 08:38:10 ---A- . (...) -- C:\WINDOWS\system32\kb16.com [14710] O44 - LFC:[MD5.615DDBB5CBBAE8301C1E7FA95F1E66A3] - 7/3/2015 - 08:38:10 ---A- . (.Microsoft Corporation - Albania Keyboard Layout.) -- C:\WINDOWS\system32\KBDAL.DLL [6656] O44 - LFC:[MD5.0304318F189E3CC4A99FCCCB0A68147F] - 7/3/2015 - 08:38:10 ---A- . (.Microsoft Corporation - Azerbaijan_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdaze.dll [5632] O44 - LFC:[MD5.712A218557F99D136735E0545E5AE223] - 7/3/2015 - 08:38:10 ---A- . (.Microsoft Corporation - Azeri-Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdazel.dll [5632] O44 - LFC:[MD5.A1FA7A83F9D98D84419A8E64286284F4] - 7/3/2015 - 08:38:10 ---A- . (.Microsoft Corporation - Belarusian Keyboard Layout.) -- C:\WINDOWS\system32\kbdblr.dll [5632] O44 - LFC:[MD5.D916E1B4DF4A5DAC0F3B37D5BAF5FB18] - 7/3/2015 - 08:38:10 ---A- . (.Microsoft Corporation - Belgian Dutch Keyboard Layout.) -- C:\WINDOWS\system32\kbdbene.dll [6144] O44 - LFC:[MD5.90AA6D58947A68B5D35C3D3905A74BCB] - 7/3/2015 - 08:38:10 ---A- . (.Microsoft Corporation - Belgian Keyboard Layout.) -- C:\WINDOWS\system32\kbdbe.dll [6144] O44 - LFC:[MD5.F0874563D668EEC633AC52F8B6167ACD] - 7/3/2015 - 08:38:10 ---A- . (.Microsoft Corporation - Bosnian (Cyrillic) Keyboard Layout.) -- C:\WINDOWS\system32\kbdbhc.dll [6144] O44 - LFC:[MD5.7806D7CEC1FFED2F6A7C569E38D8232E] - 7/3/2015 - 08:38:10 ---A- . (.Microsoft Corporation - Brazilian Keyboard Layout.) -- C:\WINDOWS\system32\kbdbr.dll [6144] O44 - LFC:[MD5.1FF6222CA7159BA739BEE6C99BC96C86] - 7/3/2015 - 08:38:10 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\WINDOWS\system32\jsproxy.dll [25600] O44 - LFC:[MD5.1DF6E4758611E1328567BFE4D1B28E27] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Bulgarian Keyboard Layout.) -- C:\WINDOWS\system32\kbdbu.dll [5632] O44 - LFC:[MD5.DE844F425C89EDD0DC61C89D5B2CE15A] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Canadian French Keyboard Layout.) -- C:\WINDOWS\system32\kbdfc.dll [6144] O44 - LFC:[MD5.C068F1EF8F08C4331EC176AAC231FFE3] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Canadian Multilingual Keyboard Layout.) -- C:\WINDOWS\system32\kbdca.dll [6144] O44 - LFC:[MD5.6FC7C2503F3D43B8F493DDA15AA1BC50] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Canadian National Standard Keyboard Layout.) -- C:\WINDOWS\system32\kbdcan.dll [7680] O44 - LFC:[MD5.5B46568257EE49714564511D58E0DE53] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Croatian/Slovenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdcr.dll [6656] O44 - LFC:[MD5.36E68E02AF2206FC4A8C73CAEABE1FB0] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Czech Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz.dll [7168] O44 - LFC:[MD5.AFA30A44ED11A5F9A059A2767AB6A81A] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Czech_101 Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz1.dll [6656] O44 - LFC:[MD5.90535C13EB54E1F2C95478F1B99DCCEB] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Czech_Programmer's Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz2.dll [6656] O44 - LFC:[MD5.B6AB131E6F77563A74465F5972EF900F] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Danish Keyboard Layout.) -- C:\WINDOWS\system32\kbdda.dll [6144] O44 - LFC:[MD5.4B2B6EAB5D350AB95CC56883E01B1DE7] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Dvorak US English Keyboard Layout.) -- C:\WINDOWS\system32\kbddv.dll [5120] O44 - LFC:[MD5.BBB6C3346064C6AECEE6AD9F144B1AEA] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Estonia Keyboard Layout.) -- C:\WINDOWS\system32\kbdest.dll [6144] O44 - LFC:[MD5.B0F5C8342B41FFD484725DFD7E0BE041] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Finnish Keyboard Layout.) -- C:\WINDOWS\system32\kbdfi.dll [6144] O44 - LFC:[MD5.B37E56D0F3E7743BF8C685A0FED7D180] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Finnish-Swedish with Sami Keyboard Layout.) -- C:\WINDOWS\system32\kbdfi1.dll [7168] O44 - LFC:[MD5.C39F03304E24BEADA6DCDE68C1B1269B] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - French Keyboard Layout.) -- C:\WINDOWS\system32\kbdfr.dll [6144] O44 - LFC:[MD5.AE72FF8FE49F78838377417C22A92C79] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Færoese Keyboard Layout.) -- C:\WINDOWS\system32\kbdfo.dll [6144] O44 - LFC:[MD5.59A8A1F2CE28BDE79BF9018F56B642CC] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Gaelic Keyboard Layout.) -- C:\WINDOWS\system32\kbdgae.dll [5632] O44 - LFC:[MD5.3C1708C5C05910FE495D832C6536ED78] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - German Keyboard Layout.) -- C:\WINDOWS\system32\kbdgr.dll [6144] O44 - LFC:[MD5.38430C6C194870363AD0CA3B7A18AC7F] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - German_IBM Keyboard Layout.) -- C:\WINDOWS\system32\kbdgr1.dll [6144] O44 - LFC:[MD5.1E81E1F3D5ACB3371CF73C1DE8F800BF] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Greek IBM 220 Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe220.dll [5632] O44 - LFC:[MD5.D26533FDF72381947F823882BBA4A196] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Greek IBM 220 Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdhela2.dll [6144] O44 - LFC:[MD5.AC81A176BA35D1D7A5CD53137F3160FE] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Greek IBM 319 Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe319.dll [5632] O44 - LFC:[MD5.F2312B8A76FD584ACD1D956688BEB6F8] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Greek IBM 319 Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdhela3.dll [6656] O44 - LFC:[MD5.83C99B438B3D6DBE7B838DA783E173AC] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Greek Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe.dll [5632] O44 - LFC:[MD5.A93447C87DDB6B1945F1F5F87EAB68DC] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Greek_Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdgkl.dll [6144] O44 - LFC:[MD5.90CC52E8B52F0EC3A41D14FFBE789324] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Greek_Polytonic Keyboard Layout.) -- C:\WINDOWS\system32\kbdhept.dll [8192] O44 - LFC:[MD5.9EF487A186DEA361AA06913A75B3FA99] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - HID Mouse Filter Driver.) -- C:\WINDOWS\system32\Drivers\kbdhid.sys [14592] O44 - LFC:[MD5.CF92D95B5CB6649CB9D7E8D7616487A7] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Hungarian Keyboard Layout.) -- C:\WINDOWS\system32\kbdhu.dll [6656] O44 - LFC:[MD5.463C1EC80CD17420A542B7F36A36F128] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Keyboard Class Driver.) -- C:\WINDOWS\system32\Drivers\kbdclass.sys [24576] O44 - LFC:[MD5.4B808BAC83B00F3F013DA239E93A416A] - 7/3/2015 - 08:38:12 ---A- . (.Microsoft Corporation - Spanish Alernate Keyboard Layout.) -- C:\WINDOWS\system32\kbdes.dll [6144] O44 - LFC:[MD5.F843F0B606B0F1E7C36A82C6685A097E] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Bengali (Inscript) Keyboard Layout.) -- C:\WINDOWS\system32\kbdinbe1.dll [6144] O44 - LFC:[MD5.D7084E479CDA693EF3C3B5A599E7857B] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Bengali Keyboard Layout.) -- C:\WINDOWS\system32\kbdinben.dll [6144] O44 - LFC:[MD5.140FE6CAE764C9E8ECCFCB21A19781C5] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Dutch Keyboard Layout.) -- C:\WINDOWS\system32\kbdne.dll [6144] O44 - LFC:[MD5.885CA7AB8F34EC81493810C40A78DC83] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - FYROMacedonian_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdmac.dll [6144] O44 - LFC:[MD5.F3D1EEC756847C70E65335E8CA1AE64B] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Hungarian 101-key Keyboard Layout.) -- C:\WINDOWS\system32\kbdhu1.dll [5632] O44 - LFC:[MD5.2B83F3461F603D27C765C7BB87E8CD09] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Icelandic Keyboard Layout.) -- C:\WINDOWS\system32\kbdic.dll [6144] O44 - LFC:[MD5.82FDD74B54E27D9BB2A486B1181EC7A9] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Inuktitut Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdiultn.dll [6144] O44 - LFC:[MD5.8396B49871EC9E8ED2DAB4341F2B328B] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Irish Keyboard Layout.) -- C:\WINDOWS\system32\kbdir.dll [5632] O44 - LFC:[MD5.FBB785A6D701CF80DA84C2DEFDBE2D13] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Italian 142 Keyboard Layout.) -- C:\WINDOWS\system32\kbdit142.dll [5632] O44 - LFC:[MD5.1C62DA8649D73B0DAE915740FE8CF712] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Italian Keyboard Layout.) -- C:\WINDOWS\system32\kbdit.dll [5632] O44 - LFC:[MD5.3FBA2CB69D697D1EF5423F17691CD832] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - JP Japanese Keyboard Layout for (NEC PC-980.) -- C:\WINDOWS\system32\kbdnec.dll [7168] O44 - LFC:[MD5.95D9106D39AB410A7F7EE513F181F84C] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Kazak_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdkaz.dll [5632] O44 - LFC:[MD5.FA30D45301EE66C33C0BF0F053DD9268] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Kyrgyz Keyboard Layout.) -- C:\WINDOWS\system32\kbdkyr.dll [5632] O44 - LFC:[MD5.A8470FE45FF308CE53828301976A13CB] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Latin-American Spanish Keyboard Layout.) -- C:\WINDOWS\system32\kbdla.dll [6656] O44 - LFC:[MD5.C047165ED75FF85DB5A89EFEE3DA1133] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Latvia Keyboard Layout.) -- C:\WINDOWS\system32\kbdlv.dll [6144] O44 - LFC:[MD5.27D72BCF2B495FCDA073DBA5F189D7A1] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Latvia-QWERTY Keyboard Layout.) -- C:\WINDOWS\system32\kbdlv1.dll [6144] O44 - LFC:[MD5.F5B3B152A1D2752BC88928EB1E031B7E] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Lithuania Keyboard Layout.) -- C:\WINDOWS\system32\kbdlt.dll [5632] O44 - LFC:[MD5.AF05A41DBD1B0424B5CB47092152C7F6] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Lithuanian Keyboard Layout.) -- C:\WINDOWS\system32\kbdlt1.dll [5632] O44 - LFC:[MD5.DEFAFB11D9A33F8ED4EFFAC2321C373B] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Malayalam Keyboard Layout Keyboard Layout.) -- C:\WINDOWS\system32\kbdinmal.dll [6656] O44 - LFC:[MD5.AD1C7DA0EF591019D7D07E566A280EE0] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Maltese 47-key Keyboard Layout.) -- C:\WINDOWS\system32\kbdmlt47.dll [6144] O44 - LFC:[MD5.61EB682075CB6E5A554E7429A155DDE9] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Maltese 48-key Keyboard Layout.) -- C:\WINDOWS\system32\kbdmlt48.dll [6144] O44 - LFC:[MD5.64C13C112168F515E86F8EE99CA04797] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Maori Keyboard Layout.) -- C:\WINDOWS\system32\kbdmaori.dll [5632] O44 - LFC:[MD5.29F119AD63CE42E616E35792DB01A4E0] - 7/3/2015 - 08:38:14 ---A- . (.Microsoft Corporation - Mongolian Keyboard Layout.) -- C:\WINDOWS\system32\kbdmon.dll [5632] O44 - LFC:[MD5.003D2FBF4C99C63FB1A3739D6F867090] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Dvorak Left-Hand US English Keyboard Layout.) -- C:\WINDOWS\system32\kbdusl.dll [6144] O44 - LFC:[MD5.93AD90B3BC1F7FD5E333BE61DC010369] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Dvorak Right-Hand US English Keyboard Layou.) -- C:\WINDOWS\system32\kbdusr.dll [6144] O44 - LFC:[MD5.A445F7BE8100EFB90161E4868A643E34] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Nepali Keyboard Layout.) -- C:\WINDOWS\system32\kbdnepr.dll [6144] O44 - LFC:[MD5.3CBCE11B4B069939E091835694C0567B] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Norwegian Keyboard Layout.) -- C:\WINDOWS\system32\kbdno.dll [6144] O44 - LFC:[MD5.4A77D01E247B5855F9AF032AF2246DD2] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Norwegian with Sami Keyboard Layout.) -- C:\WINDOWS\system32\kbdno1.dll [7168] O44 - LFC:[MD5.9FE65E81B4C27D967DB6646271AB242F] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Pashto (Afghanistan) Keyboard Layout.) -- C:\WINDOWS\system32\kbdpash.dll [6144] O44 - LFC:[MD5.D199B05901C2407FC0F87444A24A4F3C] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Polish Keyboard Layout.) -- C:\WINDOWS\system32\kbdpl.dll [6656] O44 - LFC:[MD5.897663C8606357A8E86E57CDEA8EE219] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Polish Programmer's Keyboard Layout.) -- C:\WINDOWS\system32\kbdpl1.dll [5632] O44 - LFC:[MD5.5713A519619FC93C30BF9AB23B14885A] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Portuguese Keyboard Layout.) -- C:\WINDOWS\system32\kbdpo.dll [6144] O44 - LFC:[MD5.C2E62748C875A310A6D5B10498238A68] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Romanian Keyboard Layout.) -- C:\WINDOWS\system32\kbdro.dll [5632] O44 - LFC:[MD5.B6E962B7AC1CB4A78876953D369BE6DD] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Russia(Typewriter) Keyboard Layout.) -- C:\WINDOWS\system32\kbdru1.dll [5632] O44 - LFC:[MD5.C6F23BC1411E91C179B0635893BB40A1] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Russian Keyboard Layout.) -- C:\WINDOWS\system32\kbdru.dll [5632] O44 - LFC:[MD5.2D764FB1B2B38A56C2480F66F503924C] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Sami Extended Finland-Sweden Keyboard Layou.) -- C:\WINDOWS\system32\kbdsmsfi.dll [7680] O44 - LFC:[MD5.34E23BE03949E3C68AE368737D817699] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Sami Extended Norway Keyboard Layout.) -- C:\WINDOWS\system32\kbdsmsno.dll [7680] O44 - LFC:[MD5.DCCE231E5BDF1401AC0F770EE16902AA] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Slovak Keyboard Layout.) -- C:\WINDOWS\system32\kbdsl.dll [6656] O44 - LFC:[MD5.93033C3EA80FB24B198B24DDECA07D4A] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Slovak(QWERTY) Keyboard Layout.) -- C:\WINDOWS\system32\kbdsl1.dll [6656] O44 - LFC:[MD5.79D955C9BDDFD01A7C8D442322222F46] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Spanish Keyboard Layout.) -- C:\WINDOWS\system32\kbdsp.dll [6144] O44 - LFC:[MD5.28D0AE434F7A8E8B1185AA07DD71AC44] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Swedish Keyboard Layout.) -- C:\WINDOWS\system32\kbdsw.dll [6144] O44 - LFC:[MD5.17733F6AF237E17C2F78528E4068B577] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Swiss French Keyboard Layout.) -- C:\WINDOWS\system32\kbdsf.dll [6144] O44 - LFC:[MD5.D157764B22473BB55635591DF347074C] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Swiss German Keyboard Layout.) -- C:\WINDOWS\system32\kbdsg.dll [6656] O44 - LFC:[MD5.F2D1EEF5ADCD5995C015AB3CB15C9415] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Tatar_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdtat.dll [5632] O44 - LFC:[MD5.188E56B70419D8353B8D4F3E381D9E52] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Turkish F Keyboard Layout.) -- C:\WINDOWS\system32\kbdtuf.dll [6144] O44 - LFC:[MD5.5D569F2951F878EF01D7723DC08682E9] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Turkish Q Keyboard Layout.) -- C:\WINDOWS\system32\kbdtuq.dll [6144] O44 - LFC:[MD5.ECC911343337D8AEE839A14F205AA12A] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - US Multinational Keyboard Layout.) -- C:\WINDOWS\system32\kbdusx.dll [6144] O44 - LFC:[MD5.3DDE3DC57C54452A313DC20F3019F8E3] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - Ukrainian Keyboard Layout.) -- C:\WINDOWS\system32\kbdur.dll [5632] O44 - LFC:[MD5.721052514CF1597157B2BF95C534B10E] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - United Kingdom Extended Keyboard Layout.) -- C:\WINDOWS\system32\kbdukx.dll [7168] O44 - LFC:[MD5.DAB9952E3626D84E74CBF4958B1B1F52] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - United Kingdom Keyboard Layout.) -- C:\WINDOWS\system32\kbduk.dll [5632] O44 - LFC:[MD5.56C5B179FE3308B655EB6208C3256FEC] - 7/3/2015 - 08:38:16 ---A- . (.Microsoft Corporation - United States Keyboard Layout.) -- C:\WINDOWS\system32\kbdus.dll [5632] O44 - LFC:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 7/3/2015 - 08:38:18 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809] O44 - LFC:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 7/3/2015 - 08:38:18 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537] O44 - LFC:[MD5.4260BDCD96976DA6F44E9CA8B2E029E5] - 7/3/2015 - 08:38:18 ---A- . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll [301568] O44 - LFC:[MD5.945FBB881AE927A44DFD96440F2F4F44] - 7/3/2015 - 08:38:18 ---A- . (.Microsoft Corporation - Kernel Debugger HW Extension DLL.) -- C:\WINDOWS\system32\kdcom.dll [7040] O44 - LFC:[MD5.F59725CE3A1827B78DA01FBFB0A64005] - 7/3/2015 - 08:38:18 ---A- . (.Microsoft Corporation - Kernel Debugger IEEE 1394 HW Extension DLL.) -- C:\WINDOWS\system32\kd1394.dll [7424] O44 - LFC:[MD5.8878BD685E490239777BFE51320B88E9] - 7/3/2015 - 08:38:18 ---A- . (.Microsoft Corporation - Key Management Service.) -- C:\WINDOWS\system32\kmsvc.dll [61440] O44 - LFC:[MD5.BD6CE56FB1254F641BD739C289CE020C] - 7/3/2015 - 08:38:18 ---A- . (.Microsoft Corporation - Keyboard Layout Check.) -- C:\WINDOWS\system32\kblChecker.dll [8192] O44 - LFC:[MD5.E5D4673C83271FEEE1ED73E1E281A42B] - 7/3/2015 - 08:38:18 ---A- . (.Microsoft Corporation - Serbian_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdycc.dll [5632] O44 - LFC:[MD5.552221E92D6BF55F8358B927F00696C3] - 7/3/2015 - 08:38:18 ---A- . (.Microsoft Corporation - Serbian_Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdycl.dll [6656] O44 - LFC:[MD5.01CC59ACEC405AD414D32E3A683AFD47] - 7/3/2015 - 08:38:18 ---A- . (.Microsoft Corporation - Stored User Names and Passwords.) -- C:\WINDOWS\system32\keymgr.dll [150528] O44 - LFC:[MD5.76EC97C5068D3D9FAA7774B0F659D31A] - 7/3/2015 - 08:38:18 ---A- . (.Microsoft Corporation - TAPI Kernel-Mode Service Provider.) -- C:\WINDOWS\system32\kmddsp.tsp [33280] O44 - LFC:[MD5.4F9CFFBF05831BB81833FC64A5329C36] - 7/3/2015 - 08:38:18 ---A- . (.Microsoft Corporation - Uzbek_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbduzb.dll [5632] O44 - LFC:[MD5.ED4BF709AAD8B665075DE06A0945B030] - 7/3/2015 - 08:38:18 ---A- . (.Microsoft Corporation - WOW Keyboard Driver Module.) -- C:\WINDOWS\system32\keyboard.drv [2000] O44 - LFC:[MD5.4A45B692D2BAA74124DF57472D5EA2F1] - 7/3/2015 - 08:38:18 ---A- . (.Microsoft Corporation - Windows NT BASE API Client DLL.) -- C:\WINDOWS\system32\kernel32.dll [993280] O44 - LFC:[MD5.61F5014EA68123B576C5606B91762F83] - 7/3/2015 - 08:38:20 ---A- . (...) -- C:\WINDOWS\system32\l_except.nls [168] O44 - LFC:[MD5.2C8BCB512F91F0B1C7C797822A3E80F6] - 7/3/2015 - 08:38:20 ---A- . (...) -- C:\WINDOWS\system32\l_intl.nls [7046] O44 - LFC:[MD5.499EDF986588A3A0B55DD5EFAD922C9E] - 7/3/2015 - 08:38:20 ---A- . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm [307260] O44 - LFC:[MD5.DAE396AF8AD6BBBC2671E612611F520B] - 7/3/2015 - 08:38:20 ---A- . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Decoder.) -- C:\WINDOWS\system32\l3codecx.ax [143422] O44 - LFC:[MD5.EAED4ABDF4C4EE641EA2A5E27533E615] - 7/3/2015 - 08:38:20 ---A- . (.Microsoft Corporation - Disk Label Utility.) -- C:\WINDOWS\system32\label.exe [9728] O44 - LFC:[MD5.C6EBF1D6AD71DF30DB49B8D3287E1368] - 7/3/2015 - 08:38:20 ---A- . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\WINDOWS\system32\Drivers\ksecdd.sys [92928] O44 - LFC:[MD5.3879D931FBB110292A16C8A3A11D7ED4] - 7/3/2015 - 08:38:20 ---A- . (.Microsoft Corporation - Policy Storage dll.) -- C:\WINDOWS\system32\l2gpstore.dll [37376] O44 - LFC:[MD5.068D794FD2FF78A92AC574DFEE819A7E] - 7/3/2015 - 08:38:20 ---A- . (.Microsoft Corporation - Windows Kernel.) -- C:\WINDOWS\system32\krnl386.exe [92224] O44 - LFC:[MD5.20FA028CB6506591A99C51432A3C0174] - 7/3/2015 - 08:39:00 ---A- . (.Microsoft Corporation - English wordbreaker.) -- C:\WINDOWS\system32\langwrbk.dll [89600] O44 - LFC:[MD5.774D60CB0AD198F493CEFC9057755A05] - 7/3/2015 - 08:39:00 ---A- . (.Microsoft Corporation - Microsoft LAN Manager 2.1 Network Driver fo.) -- C:\WINDOWS\system32\lanman.drv [221600] O44 - LFC:[MD5.DF1674CEE518CF7E2C6EF5A2651D3AF9] - 7/3/2015 - 08:39:00 ---A- . (.Microsoft Corporation - Windows Media Logagent Proxy.) -- C:\WINDOWS\system32\laprxy.dll [6656] O44 - LFC:[MD5.3307A07B81206F354F0D4BEFEE922437] - 7/3/2015 - 08:39:02 ---A- . (.Microsoft Corporation - Windows Genuine Advantage Validation.) -- C:\WINDOWS\system32\LegitCheckControl.dll [1485176] O44 - LFC:[MD5.27F8FC90A721946A0BCA2333EDE168B2] - 7/3/2015 - 08:39:04 ---A- . (.Microsoft Corporation - Licdll Module.) -- C:\WINDOWS\system32\licdll.dll [423936] O44 - LFC:[MD5.A2D6BCF77269AD022339100A73DDE0C5] - 7/3/2015 - 08:39:04 ---A- . (.Microsoft Corporation - Microsoft® License Manager DLL.) -- C:\WINDOWS\system32\licmgr10.dll [43520] O44 - LFC:[MD5.062CAA55CF5FFCC3FB7D73D0F5436742] - 7/3/2015 - 08:39:04 ---A- . (.Microsoft Corporation - Modem Monitor Applet.) -- C:\WINDOWS\system32\lights.exe [29696] O44 - LFC:[MD5.A7DB739AE99A796D91580147E919CC59] - 7/3/2015 - 08:39:04 ---A- . (.Microsoft Corporation - TCPIP NetBios Transport Services DLL.) -- C:\WINDOWS\system32\lmhsvc.dll [13824] O44 - LFC:[MD5.2DC5A8019E2387987905F77C664E4BE2] - 7/3/2015 - 08:39:04 ---A- . (.Microsoft Corporation - Windows Volume Tracking.) -- C:\WINDOWS\system32\linkinfo.dll [19968] O44 - LFC:[MD5.536460507B20AE0F03D7BEE8111028CF] - 7/3/2015 - 08:39:06 ---A- . (...) -- C:\WINDOWS\system32\loadfix.com [1131] O44 - LFC:[MD5.7780EB6237F16BA8128312EFA6363DBD] - 7/3/2015 - 08:39:06 ---A- . (...) -- C:\WINDOWS\system32\locale.nls [265822] O44 - LFC:[MD5.12A560167297E39A376A14E6CC457F7A] - 7/3/2015 - 08:39:06 ---A- . (...) -- C:\WINDOWS\system32\login.cmd [487] O44 - LFC:[MD5.D791EBD9326017897801FF13B64A66AF] - 7/3/2015 - 08:39:06 ---A- . (.Microsoft Corporation - Liquid Motion Runtime Control.) -- C:\WINDOWS\system32\lmrt.dll [399872] O44 - LFC:[MD5.6358C181BF021970A897C1FAB0ECF5D2] - 7/3/2015 - 08:39:06 ---A- . (.Microsoft Corporation - Load & Unload Performance Counters.) -- C:\WINDOWS\system32\loadperf.dll [97280] O44 - LFC:[MD5.3448A021575CE05A091248710A06CF06] - 7/3/2015 - 08:39:06 ---A- . (.Microsoft Corporation - Load PerfMon Counters.) -- C:\WINDOWS\system32\lodctr.exe [5120] O44 - LFC:[MD5.2FF923C32DEE4ECC7271A62FBF546953] - 7/3/2015 - 08:39:06 ---A- . (.Microsoft Corporation - Local Monitor UI DLL.) -- C:\WINDOWS\system32\localui.dll [11776] O44 - LFC:[MD5.355C90CF387E6D7FF5CE8E221D85CB17] - 7/3/2015 - 08:39:06 ---A- . (.Microsoft Corporation - Local Spooler DLL.) -- C:\WINDOWS\system32\localspl.dll [346112] O44 - LFC:[MD5.8EB3F7B700AB00A2F51B171178965A1C] - 7/3/2015 - 08:39:06 ---A- . (.Microsoft Corporation - Local Users and Groups MMC Snapin.) -- C:\WINDOWS\system32\localsec.dll [221696] O44 - LFC:[MD5.9FAD7DFF67555FF1E06BC4A3893024A7] - 7/3/2015 - 08:39:06 ---A- . (.Microsoft Corporation - Logon Screen Saver.) -- C:\WINDOWS\system32\logon.scr [220672] O44 - LFC:[MD5.6FF938E44CFA498DE4647B44042B0E2E] - 7/3/2015 - 08:39:06 ---A- . (.Microsoft Corporation - Performance Log Utility.) -- C:\WINDOWS\system32\logman.exe [59392] O44 - LFC:[MD5.AAED593F84AFA419BBAE8572AF87CF6A] - 7/3/2015 - 08:39:06 ---A- . (.Microsoft Corporation - Rpc Locator.) -- C:\WINDOWS\system32\locator.exe [75264] O44 - LFC:[MD5.43DFBDB9DF34EE3618A37DC895EABE40] - 7/3/2015 - 08:39:06 ---A- . (.Microsoft Corporation - Schedule Dialog.) -- C:\WINDOWS\system32\loghours.dll [50176] O44 - LFC:[MD5.1D5F3B7E6EC0D7F239225104D1B15A15] - 7/3/2015 - 08:39:06 ---A- . (.Microsoft Corporation - Win95-to-WinNT Migration Dll, Win95 Side.) -- C:\WINDOWS\system32\lnkstub.exe [25088] O44 - LFC:[MD5.2081A5B5E4ABA206A0A8A1A97DF0FB23] - 7/3/2015 - 08:39:06 ---A- . (.Microsoft Corporation - Windows Logon UI.) -- C:\WINDOWS\system32\logonui.exe [514560] O44 - LFC:[MD5.82FDC4378317D93D2CF63D55C59478A6] - 7/3/2015 - 08:39:06 ---A- . (.Microsoft Corporation - Windows Media Player Logagent.) -- C:\WINDOWS\system32\logagent.exe [103936] O44 - LFC:[MD5.98FAC2ADB556164207AF1E803946643D] - 7/3/2015 - 08:39:08 ---A- . (...) -- C:\WINDOWS\system32\lusrmgr.msc [42166] O44 - LFC:[MD5.D17AD56E811620719A3B914D076296C8] - 7/3/2015 - 08:39:08 ---A- . (.Microsoft Corporation - LPR Print Monitor UI.) -- C:\WINDOWS\system32\lprmonui.dll [9216] O44 - LFC:[MD5.7BD2D27143F94B2103AC694EBBB7CE10] - 7/3/2015 - 08:39:08 ---A- . (.Microsoft Corporation - LPR Print Monitor.) -- C:\WINDOWS\system32\lprhelp.dll [10240] O44 - LFC:[MD5.5C53AEAC3FD476088E7985C842B9B048] - 7/3/2015 - 08:39:08 ---A- . (.Microsoft Corporation - LSA Server DLL.) -- C:\WINDOWS\system32\lsasrv.dll [730112] O44 - LFC:[MD5.BF2466B3E18E970D8A976FB95FC1CA85] - 7/3/2015 - 08:39:08 ---A- . (.Microsoft Corporation - LSA Shell (Export Version).) -- C:\WINDOWS\system32\lsass.exe [13312] O44 - LFC:[MD5.012DF358CEBAA23ACB26D82077820817] - 7/3/2015 - 08:39:08 ---A- . (.Microsoft Corporation - Language Pack.) -- C:\WINDOWS\system32\lpk.dll [22016] O44 - LFC:[MD5.6EF5E49DD5C4007E892FAF9ECA13C296] - 7/3/2015 - 08:39:08 ---A- . (.Microsoft Corporation - TCP/IP Lpq Command.) -- C:\WINDOWS\system32\lpq.exe [6144] O44 - LFC:[MD5.F90F96C7182EDD87DDE1CD3BD5EFFBA4] - 7/3/2015 - 08:39:08 ---A- . (.Microsoft Corporation - TCP/IP Lpr Command.) -- C:\WINDOWS\system32\lpr.exe [8192] O44 - LFC:[MD5.A739D74FAD1F72A3B251EBAC3480E4EB] - 7/3/2015 - 08:39:10 ---A- . (.Microsoft Corporation - Control Panel DLL.) -- C:\WINDOWS\system32\main.cpl [187904] O44 - LFC:[MD5.C3200506FB212A0F4FB736A80E646C40] - 7/3/2015 - 08:39:10 ---A- . (.Microsoft Corporation - LZ Expand/Compress API DLL.) -- C:\WINDOWS\system32\lz32.dll [2560] O44 - LFC:[MD5.05C5CC171B2D2FFC135B63062F24445F] - 7/3/2015 - 08:39:10 ---A- . (.Microsoft Corporation - Microsoft Magnifier hook library file.) -- C:\WINDOWS\system32\mag_hook.dll [8192] O44 - LFC:[MD5.435C7907F33DED3DA09E63F9C8A2B17A] - 7/3/2015 - 08:39:10 ---A- . (.Microsoft Corporation - Microsoft Magnifier.) -- C:\WINDOWS\system32\magnify.exe [72704] O44 - LFC:[MD5.3DEE07C13C39194F627A4031E909332F] - 7/3/2015 - 08:39:10 ---A- . (.Microsoft Corporation - Microsoft® Cabinet Maker.) -- C:\WINDOWS\system32\makecab.exe [57344] O44 - LFC:[MD5.C7F038338BF55DE73B57C1FC7B23671A] - 7/3/2015 - 08:39:10 ---A- . (.Microsoft Corporation - Windows file expansion library.) -- C:\WINDOWS\system32\lzexpand.dll [9936] O44 - LFC:[MD5.FD35409BAECF5971BFD8DFCDD33D29A9] - 7/3/2015 - 08:39:12 ---A- . (...) -- C:\WINDOWS\system32\mciqtz32.dll [35328] O44 - LFC:[MD5.E81BBE78A8EF85ACD490B3E64EF63A7C] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - Extended MAPI 1.0 for Windows NT.) -- C:\WINDOWS\system32\mapi32.dll [112128] O44 - LFC:[MD5.E81BBE78A8EF85ACD490B3E64EF63A7C] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - Extended MAPI 1.0 for Windows NT.) -- C:\WINDOWS\system32\mapistub.dll [112128] O44 - LFC:[MD5.9066FC4E2EAD886EA9527232A840A67A] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - MCD Server.) -- C:\WINDOWS\system32\mcdsrv32.dll [10496] O44 - LFC:[MD5.3EC5E74205EBB0AFE3C3EF873B0C47EE] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - MCI OLE Control DLL.) -- C:\WINDOWS\system32\mci32.ocx [215880] O44 - LFC:[MD5.9F331426EAB6948011FE11DCC07FFD2F] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - MCI OLE DLL.) -- C:\WINDOWS\system32\mciole32.dll [7680] O44 - LFC:[MD5.174BD475D798303DF480416F4BEDB58E] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - MCI driver for AVI.) -- C:\WINDOWS\system32\mciavi.drv [73376] O44 - LFC:[MD5.2D8A1862C77E015E4CAD0096C77AFB47] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - MCI driver for MIDI sequencer.) -- C:\WINDOWS\system32\mciseq.dll [23040] O44 - LFC:[MD5.26C7F2EFBC94964CDE27EBE9CB5395A3] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - MCI driver for MIDI sequencer.) -- C:\WINDOWS\system32\mciseq.drv [25264] O44 - LFC:[MD5.BB60963DD720B05988644D88C2A291B3] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - MCI driver for cdaudio devices.) -- C:\WINDOWS\system32\mcicda.dll [17408] O44 - LFC:[MD5.9FBA36F1063D7854000F85379D129836] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - MCI driver for waveform audio.) -- C:\WINDOWS\system32\mciwave.dll [23552] O44 - LFC:[MD5.E05EE7069DE3CCD5B984CFF5AC82858F] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - MCI driver for waveform audio.) -- C:\WINDOWS\system32\mciwave.drv [28160] O44 - LFC:[MD5.CEB721BBF51E4C7B104085717DBA51D8] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - MCIOLE16 - OLE Handler DLL for MCI Objects.) -- C:\WINDOWS\system32\mciole16.dll [8192] O44 - LFC:[MD5.EA661A1D2559FDAE688FBA932B8D251C] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - Medium Changer CoInstaller.) -- C:\WINDOWS\system32\mchgrcoi.dll [4608] O44 - LFC:[MD5.D1F8BE91ED4DDB671D42E473E3FE71AB] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - Medium changer class driver.) -- C:\WINDOWS\system32\Drivers\mcd.sys [7680] O44 - LFC:[MD5.8B4AE27321C55DD8862A285F79D3727B] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - Microsoft MDHCP Client COM Interface.) -- C:\WINDOWS\system32\mdhcp.dll [50176] O44 - LFC:[MD5.93F02F396720478C656D65ECFB65A497] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - Microsoft Multicast subagent.) -- C:\WINDOWS\system32\mcastmib.dll [14336] O44 - LFC:[MD5.35EEBA3A664170F7E10C8BB8D1644863] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - OpenGL MCD Client DLL.) -- C:\WINDOWS\system32\mcd32.dll [10240] O44 - LFC:[MD5.BF1E563411DE62DD38DFC12B88B8BB28] - 7/3/2015 - 08:39:12 ---A- . (.Microsoft Corporation - Video For Windows MCI driver.) -- C:\WINDOWS\system32\mciavi32.dll [84480] O44 - LFC:[MD5.897EB07B0CABDA44D92CDDE23D9A84C1] - 7/3/2015 - 08:39:18 ---A- . (.Microsoft Corporation - Modem Class Installer.) -- C:\WINDOWS\system32\mdminst.dll [118272] O44 - LFC:[MD5.390762963E6B4C861E5E0CA5A3E56E40] - 7/3/2015 - 08:39:26 ---A- . (...) -- C:\WINDOWS\system32\mem.exe [39274] O44 - LFC:[MD5.2FDAE072FDF96930257949D289E950F1] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - 32-bit to 16-bit Metafile Conversion DLL.) -- C:\WINDOWS\system32\mf3216.dll [40960] O44 - LFC:[MD5.A4CCA3F3145BA93383DFB126EC61C695] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc70CHS.dll [40960] O44 - LFC:[MD5.A0502BCED5C98A51E7E305029BD4009B] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc70CHT.dll [45056] O44 - LFC:[MD5.054809EA25F0110122B17835E94848F2] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc70DEU.dll [61440] O44 - LFC:[MD5.3F0E5AD6604D6585C2219D6688514817] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc70ENU.dll [57344] O44 - LFC:[MD5.D88BE83455C13B80B1AB103E82052F33] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc70ESP.dll [61440] O44 - LFC:[MD5.8F59C1FB4C18F08C0D4D24550E2F7375] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc70FRA.dll [61440] O44 - LFC:[MD5.78C3F9FFBC860D2153D6470BC65556FE] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc70ITA.dll [61440] O44 - LFC:[MD5.8448C67B7FF7A65AEAA25747D0E861B7] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc70JPN.dll [49152] O44 - LFC:[MD5.E83773E9ED198BB59C072B453AF4F797] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc70KOR.dll [49152] O44 - LFC:[MD5.530CC3BEBAA37E3C7CE658FFDAF6B52E] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - MFCDLL Shared Library - Retail Version.) -- C:\WINDOWS\system32\mfc40.dll [954368] O44 - LFC:[MD5.842900DEDBC8E3E8DBCCCB298FD88F65] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - MFCDLL Shared Library - Retail Version.) -- C:\WINDOWS\system32\mfc40u.dll [953856] O44 - LFC:[MD5.34FCAF1810A5E85CEF2DEB2E3BDB8400] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - MFCDLL Shared Library - Retail Version.) -- C:\WINDOWS\system32\mfc42.dll [978944] O44 - LFC:[MD5.97AE3239E0340025963DA9D7D5DE63F6] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - MFCDLL Shared Library - Retail Version.) -- C:\WINDOWS\system32\mfc42u.dll [974848] O44 - LFC:[MD5.5D3C0F40336B490EDE971C394CFB8F78] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - MFCDLL Shared Library - Retail Version.) -- C:\WINDOWS\system32\mfc70.dll [1024000] O44 - LFC:[MD5.C440493ABF8CF179FF3351357C1EB426] - 7/3/2015 - 08:39:28 ---A- . (.Microsoft Corporation - MFCDLL Shared Library - Retail Version.) -- C:\WINDOWS\system32\mfc70u.dll [1017344] O44 - LFC:[MD5.F0C3773C480C8E8FD8DD8BF82689D390] - 7/3/2015 - 08:39:30 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc71CHS.dll [40960] O44 - LFC:[MD5.B80E70737148130AC3975F84E88ED8B0] - 7/3/2015 - 08:39:30 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc71CHT.dll [45056] O44 - LFC:[MD5.92436C5844333188D8746079640419BF] - 7/3/2015 - 08:39:30 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc71DEU.dll [65536] O44 - LFC:[MD5.DF8241122459E097DD393B74D3ABF64E] - 7/3/2015 - 08:39:30 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc71ENU.dll [57344] O44 - LFC:[MD5.B1219D49B804F8D20D4A812E9AA773FB] - 7/3/2015 - 08:39:30 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc71ESP.dll [61440] O44 - LFC:[MD5.4CF93C1BD454AC576D787FC8256E3D58] - 7/3/2015 - 08:39:30 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc71FRA.dll [61440] O44 - LFC:[MD5.A31727B0310F97C279B4278A44D68F2E] - 7/3/2015 - 08:39:30 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc71ITA.dll [61440] O44 - LFC:[MD5.DCDB167567AAD5A54EF6096324F7A67B] - 7/3/2015 - 08:39:30 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc71JPN.dll [49152] O44 - LFC:[MD5.337E4EDA92C2858386E0072F604FE2D3] - 7/3/2015 - 08:39:30 ---A- . (.Microsoft Corporation - MFC Language Specific Resources.) -- C:\WINDOWS\system32\mfc71KOR.dll [49152] O44 - LFC:[MD5.0EAD1C87DC75863E7CFF7B2691C1B90C] - 7/3/2015 - 08:39:30 ---A- . (.Microsoft Corporation - MFCDLL Shared Library - Retail Version.) -- C:\WINDOWS\system32\mfc71.dll [1060864] O44 - LFC:[MD5.1A53510BFE257CE75CB6EA4D596243BE] - 7/3/2015 - 08:39:30 ---A- . (.Microsoft Corporation - MFCDLL Shared Library - Retail Version.) -- C:\WINDOWS\system32\mfc71u.dll [1054208] O44 - LFC:[MD5.5ED071407F58C1BE06AE8D251D6CCC6C] - 7/3/2015 - 08:39:30 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\mfcsubs.dll [22528] O44 - LFC:[MD5.6FAFC044FAC0A871A0D9BE448FF83832] - 7/3/2015 - 08:39:32 ---A- . (...) -- C:\WINDOWS\system32\mib.bin [46258] O44 - LFC:[MD5.5C12660A97822F6E61576943B49AAAD6] - 7/3/2015 - 08:39:32 ---A- . (.Microsoft Corporation - Microsoft MIDI Mapper.) -- C:\WINDOWS\system32\midimap.dll [18944] O44 - LFC:[MD5.1E744353BD534405187A404667DA3DC3] - 7/3/2015 - 08:39:32 ---A- . (.Microsoft Corporation - Microsoft SNMP Manager API (uses WinSNMP).) -- C:\WINDOWS\system32\mgmtapi.dll [14848] O44 - LFC:[MD5.09B246A4B374782ACB3FBD7BB7828A8E] - 7/3/2015 - 08:39:32 ---A- . (.Microsoft Corporation - NT migration dll support.) -- C:\WINDOWS\system32\miglibnt.dll [60928] O44 - LFC:[MD5.F27291CAF61157C368A9F507268B7D04] - 7/3/2015 - 08:39:32 ---A- . (.Microsoft Corporation - Win95-to-WinNT Migration Dll, Win95 Side.) -- C:\WINDOWS\system32\migpwd.exe [51712] O44 - LFC:[MD5.ED434A3EBE29070A7E0138C42482EB93] - 7/3/2015 - 08:39:34 ---A- . (...) -- C:\WINDOWS\system32\mlang.dat [673088] O44 - LFC:[MD5.E6ADAE80F3F688C17AD418B90B2EDBE6] - 7/3/2015 - 08:39:34 ---A- . (.Microsoft Corporation - HP Media Label Library.) -- C:\WINDOWS\system32\mll_hp.dll [3584] O44 - LFC:[MD5.9A425D4F1C1ED0DA1A35B25DE5632378] - 7/3/2015 - 08:39:34 ---A- . (.Microsoft Corporation - MMCFx.) -- C:\WINDOWS\system32\microsoft.managementconsole.dll [184320] O44 - LFC:[MD5.DD095EF2EC68F8CA09812F7B473C9A8A] - 7/3/2015 - 08:39:34 ---A- . (.Microsoft Corporation - MTF (Microsoft Tape Format) Media Label Lib.) -- C:\WINDOWS\system32\mll_mtf.dll [7680] O44 - LFC:[MD5.6D38937CC4CABB62C6ACF2CCC4CDAA50] - 7/3/2015 - 08:39:34 ---A- . (.Microsoft Corporation - Microsoft (R) IMimeFilter Persistent Handle.) -- C:\WINDOWS\system32\mimefilt.dll [29696] O44 - LFC:[MD5.682B5487811C86C8D7A5C86C34295599] - 7/3/2015 - 08:39:34 ---A- . (.Microsoft Corporation - Microsoft Management Console.) -- C:\WINDOWS\system32\mmc.exe [1414656] O44 - LFC:[MD5.B714735C12A70171DE28657948FD91F1] - 7/3/2015 - 08:39:34 ---A- . (.Microsoft Corporation - Multi Language Support DLL.) -- C:\WINDOWS\system32\mlang.dll [586240] O44 - LFC:[MD5.8259311F748CA2703776C2F5382EEE22] - 7/3/2015 - 08:39:34 ---A- . (.Microsoft Corporation - QIC113 Media Label Library.) -- C:\WINDOWS\system32\mll_qic.dll [5632] O44 - LFC:[MD5.6C8FFEB1A4F7DB9D8F5EF68D953AC139] - 7/3/2015 - 08:39:36 ---A- . (...) -- C:\WINDOWS\system32\mmdriver.inf [1492] O44 - LFC:[MD5.0F93F0A941DC94B83BE820F51174695D] - 7/3/2015 - 08:39:36 ---A- . (.Microsoft Corporation - Control Panel Drivers Applet.) -- C:\WINDOWS\system32\mmsys.cpl [618496] O44 - LFC:[MD5.4AE068242760A1FB6E1A44BF4E16AFA6] - 7/3/2015 - 08:39:36 ---A- . (.Microsoft Corporation - Frame buffer simulator.) -- C:\WINDOWS\system32\Drivers\mnmdd.sys [4224] O44 - LFC:[MD5.98C084215EA2B7A131266DE871EC9B60] - 7/3/2015 - 08:39:36 ---A- . (.Microsoft Corporation - MMC Base DLL.) -- C:\WINDOWS\system32\mmcbase.dll [163328] O44 - LFC:[MD5.B1749E895F132AF150DA76EB6ACC4C7B] - 7/3/2015 - 08:39:36 ---A- . (.Microsoft Corporation - MMC Node Manager DLL.) -- C:\WINDOWS\system32\mmcndmgr.dll [1872896] O44 - LFC:[MD5.3F8C2784BD466834FA87F973D0FBB120] - 7/3/2015 - 08:39:36 ---A- . (.Microsoft Corporation - MMC Performance Tool.) -- C:\WINDOWS\system32\mmcperf.exe [33792] O44 - LFC:[MD5.1C22A3866112ED41E1F3684DAE9AD5D2] - 7/3/2015 - 08:39:36 ---A- . (.Microsoft Corporation - MMC Shell Extension DLL.) -- C:\WINDOWS\system32\mmcshext.dll [61440] O44 - LFC:[MD5.B7500F857A8F94E0B686F2DEF91A94C1] - 7/3/2015 - 08:39:36 ---A- . (.Microsoft Corporation - MMCEx.) -- C:\WINDOWS\system32\mmcex.dll [397312] O44 - LFC:[MD5.4BD42056A26567FF609902DC2840BFEC] - 7/3/2015 - 08:39:36 ---A- . (.Microsoft Corporation - MMCFxCommon.) -- C:\WINDOWS\system32\mmcfxcommon.dll [106496] O44 - LFC:[MD5.8D46C08EAB8CFF699883DE999A0EB589] - 7/3/2015 - 08:39:36 ---A- . (.Microsoft Corporation - Microsoft Multimedia Controls Utilities.) -- C:\WINDOWS\system32\mmutilse.dll [119808] O44 - LFC:[MD5.D17918709F510B4EF2E98D89EBD1F74D] - 7/3/2015 - 08:39:36 ---A- . (.Microsoft Corporation - Microsoft Synchronization Manager.) -- C:\WINDOWS\system32\mobsync.dll [207360] O44 - LFC:[MD5.95786E866A54C7782E60855D2BAE5410] - 7/3/2015 - 08:39:36 ---A- . (.Microsoft Corporation - Microsoft Synchronization Manager.) -- C:\WINDOWS\system32\mobsync.exe [143360] O44 - LFC:[MD5.EB43DD6FA260DFFC314559833868CC28] - 7/3/2015 - 08:39:36 ---A- . (.Microsoft Corporation - MultiMedia Kernel support Driver.) -- C:\WINDOWS\system32\mmdrv.dll [12288] O44 - LFC:[MD5.AAB73D4BF9CFED0DCDD00A11133751C6] - 7/3/2015 - 08:39:36 ---A- . (.Microsoft Corporation - Multimedia background task support module.) -- C:\WINDOWS\system32\mmtask.tsk [1152] O44 - LFC:[MD5.BAC7CA4576EF5509F336F5B007DC195B] - 7/3/2015 - 08:39:36 ---A- . (.Microsoft Corporation - System APIs for Multimedia.) -- C:\WINDOWS\system32\mmsystem.dll [68768] O44 - LFC:[MD5.57D6CDA520791B7BBAEC752D49701776] - 7/3/2015 - 08:39:38 ---A- . (.Microsoft Corporation - DOS Device MODE Utility.) -- C:\WINDOWS\system32\mode.com [19456] O44 - LFC:[MD5.06AAEF7FBE85EBD7936CA87891D7C444] - 7/3/2015 - 08:39:38 ---A- . (.Microsoft Corporation - ModeX Display Driver.) -- C:\WINDOWS\system32\modex.dll [10112] O44 - LFC:[MD5.2EF8C49FD0FCBEE4A94B47D3E1F36C86] - 7/3/2015 - 08:39:38 ---A- . (.Microsoft Corporation - More Utility.) -- C:\WINDOWS\system32\more.com [16896] O44 - LFC:[MD5.1A1FAA5102466F418494E94FF9B0B091] - 7/3/2015 - 08:39:38 ---A- . (.Microsoft Corporation - Mount Manager.) -- C:\WINDOWS\system32\Drivers\mountmgr.sys [42752] O44 - LFC:[MD5.36F816041F5935954E7F03E05BEBA755] - 7/3/2015 - 08:39:38 ---A- . (.Microsoft Corporation - Mount Volume Utility.) -- C:\WINDOWS\system32\mountvol.exe [10240] O44 - LFC:[MD5.FE4A73CDBC882A19D070F1C01586E81A] - 7/3/2015 - 08:39:38 ---A- . (.Microsoft Corporation - Windows Modem Properties.) -- C:\WINDOWS\system32\modemui.dll [153600] O44 - LFC:[MD5.093CE46C61596734994D5C93DC584F5C] - 7/3/2015 - 08:39:38 ---A- . (.Microsoft Corporation - Windows NT Setup Icon Resources Library.) -- C:\WINDOWS\system32\moricons.dll [216064] O44 - LFC:[MD5.7D29780AC88BB7292CDCFF71BA67433D] - 7/3/2015 - 08:39:40 ---A- . (.Microsoft Corporation - WOW MOUSE Driver Module.) -- C:\WINDOWS\system32\mouse.drv [2032] O44 - LFC:[MD5.84AC06ECC066322ED277ACA0A2ED2532] - 7/3/2015 - 08:39:42 ---A- . (...) -- C:\WINDOWS\system32\mpeg2data.ax [118272] O44 - LFC:[MD5.E78ABD0A79B1161C2EEF6CB0B588F002] - 7/3/2015 - 08:39:42 ---A- . (...) -- C:\WINDOWS\system32\mpg2splt.ax [148992] O44 - LFC:[MD5.B936E20CB2A73A44F8DE083539F4C198] - 7/3/2015 - 08:39:42 ---A- . (.Microsoft Corporation - Corona Windows Media MPEG-4 S Video Decoder.) -- C:\WINDOWS\system32\mp4sdmod.dll [384512] O44 - LFC:[MD5.26DBC37A59DA920D96E00802FA983332] - 7/3/2015 - 08:39:42 ---A- . (.Microsoft Corporation - Corona Windows Media MPEG-4 Video Decoder.) -- C:\WINDOWS\system32\mpg4dmod.dll [240640] O44 - LFC:[MD5.A2A9DE5A458B72FA708225D07012AB56] - 7/3/2015 - 08:39:42 ---A- . (.Microsoft Corporation - Microsoft MPEG-4 Video Decompressor.) -- C:\WINDOWS\system32\mpg4ds32.ax [262416] O44 - LFC:[MD5.DD7BD97FB8BD800963789158A5E4B41D] - 7/3/2015 - 08:39:42 ---A- . (.Microsoft Corporation - Multiple Provider Router DLL.) -- C:\WINDOWS\system32\mpr.dll [59904] O44 - LFC:[MD5.D6FB5B020B9091DACE6AC6CE8CC49D06] - 7/3/2015 - 08:39:42 ---A- . (.Microsoft Corporation - Windows Media MPEG-4 Video Decoder.) -- C:\WINDOWS\system32\mp43dmod.dll [310272] O44 - LFC:[MD5.EA5B8BECA3F279C757578CD7F1E95855] - 7/3/2015 - 08:39:42 ---A- . (.Microsoft Corporation - Windows NT MP Router Administration DLL.) -- C:\WINDOWS\system32\mprapi.dll [87040] O44 - LFC:[MD5.A7E06854EA2A20AEE8EC32BD8C754298] - 7/3/2015 - 08:39:42 ---A- . (.Microsoft Corporation - Windows NT Multiple Provider Notification A.) -- C:\WINDOWS\system32\mpnotify.exe [22016] O44 - LFC:[MD5.0BF61BE8AF9662A123EF40DB710431C0] - 7/3/2015 - 08:39:44 ---A- . (...) -- C:\WINDOWS\system32\mqperf.ini [10110] O44 - LFC:[MD5.9C10756715DF1689261F7F0451F7E133] - 7/3/2015 - 08:39:44 ---A- . (...) -- C:\WINDOWS\system32\mqprfsym.h [2755] O44 - LFC:[MD5.3DCA91DA05450DB41EE7115B54E528D3] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Demand Dial Manager Supervisor.) -- C:\WINDOWS\system32\mprddm.dll [69120] O44 - LFC:[MD5.7E699FF5F59B5D9DE5390E3C34C67CF5] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248] O44 - LFC:[MD5.B37D6067174291AA8EADE3F94A03CBFF] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - MS DTC log manager DLL.) -- C:\WINDOWS\system32\mqlogmgr.dll [89088] O44 - LFC:[MD5.FD293A55F2FA2F114735C48CD53DC6B9] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - MSMQ ISAPI EXTENSION.) -- C:\WINDOWS\system32\mqise.dll [16896] O44 - LFC:[MD5.80C4F524083A902636A72194211F37B0] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - MSMQ Trigger Generic Object.) -- C:\WINDOWS\system32\mqgentr.dll [60928] O44 - LFC:[MD5.F368830BF8BF7130022AD797A18E0DD3] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Message Queueing Dependent Client.) -- C:\WINDOWS\system32\mqrtdep.dll [123904] O44 - LFC:[MD5.3A99E3D7DF5F1B0E185DED43D8E37877] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Message Queuing 1.0 Type Library.) -- C:\WINDOWS\system32\mqoa10.tlb [36864] O44 - LFC:[MD5.D9561DA579217635B90F500D4AC2AB1D] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Message Queuing 2.0 Type Library.) -- C:\WINDOWS\system32\mqoa20.tlb [55296] O44 - LFC:[MD5.6A34A7B00E901C25F27C61C277C7956F] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Message Queuing ActiveX Interface.) -- C:\WINDOWS\system32\mqoa.dll [225280] O44 - LFC:[MD5.D66033F4B26B3D6B4506141C7E930075] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Message Queuing Type Library.) -- C:\WINDOWS\system32\mqoa.tlb [81408] O44 - LFC:[MD5.06068D3F45630F3B1E188A5BF54319B2] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Multi-Protocol Router Service Messages DLL.) -- C:\WINDOWS\system32\mprmsg.dll [99840] O44 - LFC:[MD5.69A5ADF546505F4C69EF3046BF798B49] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Multiple Provider.) -- C:\WINDOWS\system32\mprui.dll [47104] O44 - LFC:[MD5.0FCDF46260A74392AAE8E8720BE38BF2] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Windows NT Certificate Dialogs.) -- C:\WINDOWS\system32\mqcertui.dll [10752] O44 - LFC:[MD5.70C14F5CCA5CF73F8A645C73A01D8726] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Windows NT MQ Access Control Device Driver.) -- C:\WINDOWS\system32\Drivers\mqac.sys [92544] O44 - LFC:[MD5.59CE9FE91B7DB14B08358C6935652FF4] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Windows NT MQ Client AD Access.) -- C:\WINDOWS\system32\mqad.dll [138240] O44 - LFC:[MD5.10FC9B9CCBC87E933707B230C3C1D15C] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Windows NT MQ Client Directory Service.) -- C:\WINDOWS\system32\mqdscli.dll [47616] O44 - LFC:[MD5.18961AC0F2E1145BCE59C508C01880F3] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Windows NT MQ Performance Coutners.) -- C:\WINDOWS\system32\mqperf.dll [8192] O44 - LFC:[MD5.F3CE8E0DEF03D3F614376A1B7669CFDC] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Windows NT MQ Queue Manager.) -- C:\WINDOWS\system32\mqqm.dll [663040] O44 - LFC:[MD5.FA1F037FE1B6303217BF5A07E8EAD236] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Windows NT MQ Run time DLL.) -- C:\WINDOWS\system32\mqrt.dll [177152] O44 - LFC:[MD5.0697D1008D3B99E1BA58248E5F3F2520] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Windows NT MSMQ Admin.) -- C:\WINDOWS\system32\mqsnap.dll [517632] O44 - LFC:[MD5.B26A94881EE8B490D9A8A82EC4D53003] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Windows NT, MSMQ 2.0 Security.) -- C:\WINDOWS\system32\mqsec.dll [95744] O44 - LFC:[MD5.413B2F6E0F073996C3318B8B47595319] - 7/3/2015 - 08:39:44 ---A- . (.Microsoft Corporation - Windows NT, MSMQ messages Backup/Restore Ut.) -- C:\WINDOWS\system32\mqbkup.exe [19968] O44 - LFC:[MD5.EB7C7FE8846524A5FE82D0A35341AFA8] - 7/3/2015 - 08:39:46 ---A- . (.Microsoft Corporation - MSMQ Trigger Object Module.) -- C:\WINDOWS\system32\mqtrig.dll [187392] O44 - LFC:[MD5.36B260716990F02D510390D9F4E6B073] - 7/3/2015 - 08:39:46 ---A- . (.Microsoft Corporation - MSMQ Upgrade.) -- C:\WINDOWS\system32\mqupgrd.dll [49152] O44 - LFC:[MD5.AFB909B537AAE1BEAE7BBDB6A36D40B0] - 7/3/2015 - 08:39:46 ---A- . (.Microsoft Corporation - Message Queuing Service.) -- C:\WINDOWS\system32\mqsvc.exe [4608] O44 - LFC:[MD5.C08214EE1A9C82288645CCBE73960265] - 7/3/2015 - 08:39:46 ---A- . (.Microsoft Corporation - Microsoft Windows Malicious Software Remova.) -- C:\WINDOWS\system32\mrt.exe [7680] O44 - LFC:[MD5.7E198AB39BDA23A9876DE3E74F0014BA] - 7/3/2015 - 08:39:46 ---A- . (.Microsoft Corporation - Multicast Information.) -- C:\WINDOWS\system32\mrinfo.exe [12800] O44 - LFC:[MD5.C443CA4650FFA91CB39B35E80EC493F2] - 7/3/2015 - 08:39:46 ---A- . (.Microsoft Corporation - Windows NT MQ Utility DLL.) -- C:\WINDOWS\system32\mqutil.dll [471552] O44 - LFC:[MD5.7F955FF3B1BB93376EBE75D5ACCDC6DB] - 7/3/2015 - 08:39:46 ---A- . (.Microsoft Corporation - Windows NT MSMQ Trigger Service.) -- C:\WINDOWS\system32\mqtgsvc.exe [117248] O44 - LFC:[MD5.FB2FCCC70F7174C7BF64F48E96D3ADF4] - 7/3/2015 - 08:39:46 ---A- . (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\system32\Drivers\mrxsmb.sys [457856] O44 - LFC:[MD5.4FEFD389D71126EE581B9F9CB2918BE4] - 7/3/2015 - 08:39:46 ---A- . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\WINDOWS\system32\Drivers\mrxdav.sys [180096] O44 - LFC:[MD5.734936AAD2A03F561DA18D04B1478FF6] - 7/3/2015 - 08:39:54 ---A- . (.Microsoft Corporation - Active Accessibility text support.) -- C:\WINDOWS\system32\msaatext.dll [102912] O44 - LFC:[MD5.2098AB52BD5316E59AA36F3437B13BE6] - 7/3/2015 - 08:39:54 ---A- . (.Microsoft Corporation - Microsoft ACM Audio Filter.) -- C:\WINDOWS\system32\msacm32.dll [71680] O44 - LFC:[MD5.8EE0B6EDCD5FE63BDEEEB82351B110EE] - 7/3/2015 - 08:39:54 ---A- . (.Microsoft Corporation - Microsoft Audio Compression Manager.) -- C:\WINDOWS\system32\msacm.dll [61168] O44 - LFC:[MD5.9A3BD5F55AADFF859539142F6328A66E] - 7/3/2015 - 08:39:54 ---A- . (.Microsoft Corporation - Microsoft Sound Mapper.) -- C:\WINDOWS\system32\msacm32.drv [20480] O44 - LFC:[MD5.3AED76082731F7DA2E6E0F58E525F186] - 7/3/2015 - 08:39:54 ---A- . (.Microsoft Corporation - Windows Media Audio Decoder.) -- C:\WINDOWS\system32\msadds32.ax [221184] O44 - LFC:[MD5.EC63595D72A69FB5B4E481A7B90CB513] - 7/3/2015 - 08:39:56 ---A- . (...) -- C:\WINDOWS\system32\mscdexnt.exe [817] O44 - LFC:[MD5.FC9E716B2913F6D40FA1A8720ED3E73A] - 7/3/2015 - 08:39:56 ---A- . (.Microsoft Corporation - ASN.1 Runtime APIs.) -- C:\WINDOWS\system32\msasn1.dll [58880] O44 - LFC:[MD5.F24B12786D60A17008319E3F2AEE7799] - 7/3/2015 - 08:39:56 ---A- . (.Microsoft Corporation - DPA Client for 32 bit platforms.) -- C:\WINDOWS\system32\msapsspc.dll [86016] O44 - LFC:[MD5.7CCA0E1A3B950B80A6C8D91FDF956487] - 7/3/2015 - 08:39:56 ---A- . (.Microsoft Corporation - MSCAT32 Forwarder DLL.) -- C:\WINDOWS\system32\mscat32.dll [7168] O44 - LFC:[MD5.A2514F76118A631B13632A2B58023514] - 7/3/2015 - 08:39:56 ---A- . (.Microsoft Corporation - MSComm.) -- C:\WINDOWS\system32\mscomm32.ocx [119616] O44 - LFC:[MD5.C5648BE5409E0AABDA8C9047BAC8F603] - 7/3/2015 - 08:39:56 ---A- . (.Microsoft Corporation - Microsoft ADPCM CODEC for MSACM.) -- C:\WINDOWS\system32\msadp32.acm [14848] O44 - LFC:[MD5.7ED9AF3E29A3F6A22B7B039CDE5E7D32] - 7/3/2015 - 08:39:56 ---A- . (.Microsoft Corporation - Microsoft Color Matching System DLL.) -- C:\WINDOWS\system32\mscms.dll [74240] O44 - LFC:[MD5.3973673288371C24056FEDA47AD3CF96] - 7/3/2015 - 08:39:56 ---A- . (.Microsoft Corporation - Microsoft Common Controls 2 ActiveX Control.) -- C:\WINDOWS\system32\mscomct2.ocx [659264] O44 - LFC:[MD5.A26B5E4178D163D644DC731D206A6137] - 7/3/2015 - 08:39:56 ---A- . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provi.) -- C:\WINDOWS\system32\msafd.dll [3584] O44 - LFC:[MD5.864180F7BFF48CD367CF1368067D5764] - 7/3/2015 - 08:39:56 ---A- . (.Microsoft Corporation - Security Audit Events DLL.) -- C:\WINDOWS\system32\msaudite.dll [65024] O44 - LFC:[MD5.E52859FCB7A827CACFCE7963184C7D24] - 7/3/2015 - 08:39:56 ---A- . (.Microsoft Corporation - Windows Common Controls ActiveX Control DLL.) -- C:\WINDOWS\system32\mscomctl.ocx [1070152] O44 - LFC:[MD5.714CF24FC19A20AE0DC701B48DED2CF6] - 7/3/2015 - 08:39:56 ---A- . (.Microsoft Corporation - Windows Common Controls ActiveX Control DLL.) -- C:\WINDOWS\system32\mscomctl32.ocx [1066176] O44 - LFC:[MD5.36427ED6CEC83DA7023F5C718579D634] - 7/3/2015 - 08:39:56 ---A- . (.Microsoft Corporation - Windows Media Audio.) -- C:\WINDOWS\system32\msaud32.acm [282654] O44 - LFC:[MD5.F258CD340F6FCE21274F06A6A997C1CE] - 7/3/2015 - 08:39:58 ---A- . (.Microsoft Corporation - MSCTF Server DLL.) -- C:\WINDOWS\system32\MSCTF.dll [300032] O44 - LFC:[MD5.B4D94640165326F45D7616DEC65D9A02] - 7/3/2015 - 08:39:58 ---A- . (.Microsoft Corporation - MSCTFP Server DLL.) -- C:\WINDOWS\system32\MSCTFP.dll [68608] O44 - LFC:[MD5.E247BDD1D31BCB928C312CBA6B7EF732] - 7/3/2015 - 08:39:58 ---A- . (.Microsoft Corporation - Microsoft Data Access - Built-In Diagnostic.) -- C:\WINDOWS\system32\msdadiag.dll [118784] O44 - LFC:[MD5.D1FABAFE05416D43CD997B1FC410827F] - 7/3/2015 - 08:39:58 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Code Page Tran.) -- C:\WINDOWS\system32\mscpx32r.dLL [12288] O44 - LFC:[MD5.84AEC8A7AB18AEBC1207BF109CE83101] - 7/3/2015 - 08:39:58 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Code Page Tran.) -- C:\WINDOWS\system32\mscpxl32.dLL [36864] O44 - LFC:[MD5.01F0CBEB457CAE7EF0CA52C7CCA5B0E8] - 7/3/2015 - 08:39:58 ---A- . (.Microsoft Corporation - Microsoft Data Access - OLE DB Runtime Rout.) -- C:\WINDOWS\system32\msdart.dll [151552] O44 - LFC:[MD5.30B7D847BA9075AA8E1122FB6AF3D1B5] - 7/3/2015 - 08:39:58 ---A- . (.Microsoft Corporation - Microsoft Text Frame Work Service IME.) -- C:\WINDOWS\system32\MSCTFIME.IME [177152] O44 - LFC:[MD5.B9FB94A8DA62711C6955825DEFB25C5A] - 7/3/2015 - 08:40:00 ---A- . (...) -- C:\WINDOWS\msdfmap.ini [1405] O44 - LFC:[MD5.D25C03D04159D462D69F294BA7142BDB] - 7/3/2015 - 08:40:00 ---A- . (...) -- C:\WINDOWS\system32\msdmo.dll [14336] O44 - LFC:[MD5.39BBA51C9D8C3E79E8A40F2821BBA5CA] - 7/3/2015 - 08:40:00 ---A- . (.Microsoft Corporation - MSDatGrd.OCX.) -- C:\WINDOWS\system32\msdatgrd.ocx [278352] O44 - LFC:[MD5.C8054E6E5FCA4D8E7DBC3B78185202CD] - 7/3/2015 - 08:40:00 ---A- . (.Microsoft Corporation - MSDatLst.) -- C:\WINDOWS\system32\msdatlst.ocx [252240] O44 - LFC:[MD5.FAFA2B6DEDAA65A82F7AD23D5D4C82A1] - 7/3/2015 - 08:40:00 ---A- . (.Microsoft Corporation - Microsoft Data Access - Data Source Interfa.) -- C:\WINDOWS\system32\msdatsrc.tlb [12288] O44 - LFC:[MD5.9F30392C1F715FEA026FC6BF3770AA05] - 7/3/2015 - 08:40:00 ---A- . (.Microsoft Corporation - Microsoft Patch Engine.) -- C:\WINDOWS\system32\msdelta.dll [312128] O44 - LFC:[MD5.3D811BF538D6F359735D757C94F484B6] - 7/3/2015 - 08:40:00 ---A- . (.Microsoft Corporation - Microsoft Visual Studio 7.0 Debugging Proxy.) -- C:\WINDOWS\system32\msdbg2.dll [265720] O44 - LFC:[MD5.FBB6A85C7DF973B5644688CFE2627DBD] - 7/3/2015 - 08:40:00 ---A- . (.Microsoft Corporation - Windows Rights Management client.) -- C:\WINDOWS\system32\msdrm.dll [339336] O44 - LFC:[MD5.498E898CA1C33B739E6EB89DF04FC391] - 7/3/2015 - 08:40:02 ---A- . (...) -- C:\WINDOWS\system32\msdxm.ocx [844314] O44 - LFC:[MD5.C2A64A4E8E3CAA6FAF7A35EF8089A64B] - 7/3/2015 - 08:40:02 ---A- . (...) -- C:\WINDOWS\system32\msdxmlc.dll [4126] O44 - LFC:[MD5.F8DA833A1DFB4E6E277E320B586127A5] - 7/3/2015 - 08:40:02 ---A- . (...) -- C:\WINDOWS\system32\msencode.dll [94282] O44 - LFC:[MD5.C801BCC242116A9DBE4695CB52C7BC3D] - 7/3/2015 - 08:40:02 ---A- . (.Microsoft Corporation - Microsoft Jet Excel Isam.) -- C:\WINDOWS\system32\msexcl40.dll [304152] O44 - LFC:[MD5.26FC52194D0DAC7E7D5223856AF94C14] - 7/3/2015 - 08:40:02 ---A- . (.Microsoft Corporation - Microsoft Jet Exchange Isam.) -- C:\WINDOWS\system32\msexch40.dll [518944] O44 - LFC:[MD5.0A02C63C8B144BD8C86B103DEE7C86A2] - 7/3/2015 - 08:40:04 ---A- . (.Microsoft Corporation - MS General Packet Classifier.) -- C:\WINDOWS\system32\Drivers\msgpc.sys [35072] O44 - LFC:[MD5.20E06689D038E05795863694B5E1DCD7] - 7/3/2015 - 08:40:04 ---A- . (.Microsoft Corporation - MSFlexGrid.) -- C:\WINDOWS\system32\msflxgrd.ocx [258880] O44 - LFC:[MD5.C941EA2454BA8350021D774DAF0F1027] - 7/3/2015 - 08:40:04 ---A- . (.Microsoft Corporation - Mailslot driver.) -- C:\WINDOWS\system32\Drivers\msfs.sys [19072] O44 - LFC:[MD5.33271A2667334B9A8842C65A079EF375] - 7/3/2015 - 08:40:04 ---A- . (.Microsoft Corporation - Microsoft CCITT G.711 (A-Law and u-Law) COD.) -- C:\WINDOWS\system32\msg711.acm [9216] O44 - LFC:[MD5.2F697232BA7AF5E3D6E987E3BF7790C3] - 7/3/2015 - 08:40:04 ---A- . (.Microsoft Corporation - Microsoft Feeds Background Sync.) -- C:\WINDOWS\system32\msfeedsbs.dll [55296] O44 - LFC:[MD5.BEE58CB76E620CCAE9F259479D216FA5] - 7/3/2015 - 08:40:04 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\WINDOWS\system32\msfeeds.dll [630272] O44 - LFC:[MD5.FEE2BA1AD38F457F418E82EA30724053] - 7/3/2015 - 08:40:04 ---A- . (.Microsoft Corporation - Microsoft Feeds Synchronization.) -- C:\WINDOWS\system32\msfeedssync.exe [13312] O44 - LFC:[MD5.3A9846E207DAFC13009C048A2F6F8C2A] - 7/3/2015 - 08:40:04 ---A- . (.Microsoft Corporation - Microsoft GSM 6.10 Audio CODEC for MSACM.) -- C:\WINDOWS\system32\msgsm32.acm [19968] O44 - LFC:[MD5.986B1FF5814366D71E0AC5755C88F2D3] - 7/3/2015 - 08:40:04 ---A- . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792] O44 - LFC:[MD5.FAEF7E596E9C1ACC1324981394959C9D] - 7/3/2015 - 08:40:04 ---A- . (.Microsoft Corporation - Rich Text Edit Control, v4.1.) -- C:\WINDOWS\system32\msftedit.dll [539136] O44 - LFC:[MD5.D7B7A57C0E57C836F18CF12A4C62A1CA] - 7/3/2015 - 08:40:04 ---A- . (.Microsoft Corporation - Windows NT Logon GINA DLL.) -- C:\WINDOWS\system32\msgina.dll [997376] O44 - LFC:[MD5.AD8F83F16A3CE2B093B38B279B419387] - 7/3/2015 - 08:40:06 ---A- . (.Microsoft Corporation - Microsoft (R) HTML Application host.) -- C:\WINDOWS\system32\mshta.exe [45568] O44 - LFC:[MD5.64D68F1F2B4B2B0A04FCB46FDCFDE155] - 7/3/2015 - 08:40:06 ---A- . (.Microsoft Corporation - Microsoft (R) HTML Application host.) -- C:\WINDOWS\system32\mshta.exe.mui [2560] O44 - LFC:[MD5.3DB2624CCB1663BF6D62311B2B9E7B55] - 7/3/2015 - 08:40:06 ---A- . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll [6022144] O44 - LFC:[MD5.363B11116347A85219AF5DD2B7CB2A41] - 7/3/2015 - 08:40:06 ---A- . (.Microsoft Corporation - Microsoft Hierarchical FlexGrid Control.) -- C:\WINDOWS\system32\mshflxgd.ocx [443488] O44 - LFC:[MD5.EA817DC2C977376369547295B7212C43] - 7/3/2015 - 08:40:06 ---A- . (.Microsoft Corporation - Microsoft® HTML Editing Component's Resourc.) -- C:\WINDOWS\system32\mshtmler.dll [48128] O44 - LFC:[MD5.49C873B0CA0B20DCBD439CB876582976] - 7/3/2015 - 08:40:06 ---A- . (.Microsoft Corporation - Microsoft® HTML Editing Component.) -- C:\WINDOWS\system32\mshtmled.dll [67072] O44 - LFC:[MD5.29DE97770503ACBD60392A9DBF6A7894] - 7/3/2015 - 08:40:06 ---A- . (.Microsoft Corporation - Microsoft® MSHTML Typelib.) -- C:\WINDOWS\system32\mshtml.tlb [1638912] O44 - LFC:[MD5.85AC5F11D4759D13674B3E92EAC3F140] - 7/3/2015 - 08:40:08 ---A- . (.Microsoft Corporation - Microsoft Identity Manager.) -- C:\WINDOWS\system32\msident.dll [51712] O44 - LFC:[MD5.7ED041C7F82A381417AA3F43AB55F95A] - 7/3/2015 - 08:40:08 ---A- . (.Microsoft Corporation - Microsoft Identity Manager.) -- C:\WINDOWS\system32\msidntld.dll [14848] O44 - LFC:[MD5.1B91D3900A53801716075C5EEC568C4B] - 7/3/2015 - 08:40:08 ---A- . (.Microsoft Corporation - Microsoft Internet Explorer FTP Folder Shel.) -- C:\WINDOWS\system32\msieftp.dll [248832] O44 - LFC:[MD5.E47E364C96467FD54FA44D59F927C3AB] - 7/3/2015 - 08:40:08 ---A- . (.Microsoft Corporation - User Idle Monitor.) -- C:\WINDOWS\system32\msidle.dll [6656] O44 - LFC:[MD5.8B28221C3D95B0477572F58AD6C7039C] - 7/3/2015 - 08:40:08 ---A- . (.Microsoft Corporation - Windows Installer.) -- C:\WINDOWS\system32\msi.dll [4443648] O44 - LFC:[MD5.7F7BC88C8FB6B52989E0E93084B5E678] - 7/3/2015 - 08:40:08 ---A- . (.Microsoft Corporation - Windows® installer.) -- C:\WINDOWS\system32\msiexec.exe [95744] O44 - LFC:[MD5.511F74A2C5764B5921CAB15D3CAB7F35] - 7/3/2015 - 08:40:08 ---A- . (.Microsoft Corporation - Windows® installer.) -- C:\WINDOWS\system32\msihnd.dll [332800] O44 - LFC:[MD5.E11457C66FDD966EE415FBBC6D9BE643] - 7/3/2015 - 08:40:10 ---A- . (.Microsoft Corporation - Active IMM Server DLL.) -- C:\WINDOWS\system32\MSIMTF.dll [159232] O44 - LFC:[MD5.AFFC87E2501FCE8F09D4C10BA6421CCF] - 7/3/2015 - 08:40:10 ---A- . (.Microsoft Corporation - GDIEXT Client DLL.) -- C:\WINDOWS\system32\msimg32.dll [4608] O44 - LFC:[MD5.B920865C9C2F4F28151B269B3A8B11AA] - 7/3/2015 - 08:40:10 ---A- . (.Microsoft Corporation - Microsoft Internet Transfer Control DLL.) -- C:\WINDOWS\system32\msinet.ocx [136008] O44 - LFC:[MD5.8EA69F32CA030BFE0FCEB798349F8349] - 7/3/2015 - 08:40:10 ---A- . (.Microsoft Corporation - Windows® Installer International Messages.) -- C:\WINDOWS\system32\msimsg.dll [2560] O44 - LFC:[MD5.077F067C69073D1EBC84984E7FE5BA44] - 7/3/2015 - 08:40:12 ---A- . (...) -- C:\WINDOWS\system32\msjetoledb40.dll [355112] O44 - LFC:[MD5.98E53CA00D3C0A2E9FAA4E59C101AEBA] - 7/3/2015 - 08:40:12 ---A- . (.Microsoft Corporation - LangageBar Add In.) -- C:\WINDOWS\system32\mslbui.dll [25088] O44 - LFC:[MD5.317C54DCAB9EE29CD4B9F55D197A90D1] - 7/3/2015 - 08:40:12 ---A- . (.Microsoft Corporation - MSI Signature SIP Provider.) -- C:\WINDOWS\system32\msisip.dll [18944] O44 - LFC:[MD5.90C69F8DAD5EC6DE50DF96A5D330939B] - 7/3/2015 - 08:40:12 ---A- . (.Microsoft Corporation - MSMask.) -- C:\WINDOWS\system32\msmask32.ocx [178512] O44 - LFC:[MD5.0D14F07B29FBF0D750AA2495DD72B968] - 7/3/2015 - 08:40:12 ---A- . (.Microsoft Corporation - Microsoft Jet Database Engine Error DLL.) -- C:\WINDOWS\system32\msjter40.dll [60192] O44 - LFC:[MD5.7E2B58CE8C4013287371667880B1080D] - 7/3/2015 - 08:40:12 ---A- . (.Microsoft Corporation - Microsoft Jet Database Engine International.) -- C:\WINDOWS\system32\msjint40.dll [151583] O44 - LFC:[MD5.04B37EC9114F6464054108C2BFDBD9CF] - 7/3/2015 - 08:40:12 ---A- . (.Microsoft Corporation - Microsoft Jet Engine Library.) -- C:\WINDOWS\system32\msjet40.dll [1520664] O44 - LFC:[MD5.E5DE87DDDB8CBE4687EADF296E58452A] - 7/3/2015 - 08:40:12 ---A- . (.Microsoft Corporation - Microsoft Jet Expression Service.) -- C:\WINDOWS\system32\msjtes40.dll [248608] O44 - LFC:[MD5.A766D8571D6E9EEFF5E7118744BC926F] - 7/3/2015 - 08:40:12 ---A- . (.Microsoft Corporation - Microsoft Jet Lotus 1-2-3 Isam.) -- C:\WINDOWS\system32\msltus40.dll [219936] O44 - LFC:[MD5.2ACCD352451EC0F99AF2AD9DB6DB4439] - 7/3/2015 - 08:40:12 ---A- . (.Microsoft Corporation - Microsoft Line Services library file.) -- C:\WINDOWS\system32\msls31.dll [156160] O44 - LFC:[MD5.25EE6D07A7FA24AC7C4DF5996F52E25E] - 7/3/2015 - 08:40:14 ---A- . (.Microsoft Corporation - DRM ActiveX Network Object.) -- C:\WINDOWS\system32\msnetobj.dll [259072] O44 - LFC:[MD5.A4388DF80E52695AE92EE5F3F61F1619] - 7/3/2015 - 08:40:14 ---A- . (.Microsoft Corporation - MSN Internet Access.) -- C:\WINDOWS\system32\msnsspc.dll [290816] O44 - LFC:[MD5.2AEF7123FE24E1AF6A2243035F879CBE] - 7/3/2015 - 08:40:14 ---A- . (.Microsoft Corporation - System object audit names.) -- C:\WINDOWS\system32\msobjs.dll [33280] O44 - LFC:[MD5.EF0E78F9EC64AABE6A762FF8D261889B] - 7/3/2015 - 08:40:16 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Driver for Ora.) -- C:\WINDOWS\system32\msorc32r.dll [20480] O44 - LFC:[MD5.5B0FC92409A7171C73EBCB6CD28AE047] - 7/3/2015 - 08:40:16 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Driver for Ora.) -- C:\WINDOWS\system32\msorcl32.dll [143360] O44 - LFC:[MD5.F0135128BA2FBF86FA49C43FD8A37972] - 7/3/2015 - 08:40:16 ---A- . (.Microsoft Corporation - Microsoft Jet Paradox Isam.) -- C:\WINDOWS\system32\mspbde40.dll [355104] O44 - LFC:[MD5.C7E39EA41233E9F5B86C8DA3A9F1E4A8] - 7/3/2015 - 08:40:16 ---A- . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\mspmsnsv.dll [52224] O44 - LFC:[MD5.C5970A9F0E202CBD9DC56B68A7AAA822] - 7/3/2015 - 08:40:16 ---A- . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\mspmsp.dll [201728] O44 - LFC:[MD5.C6BB1D1500DB4A0E224CB65E6C7E8A80] - 7/3/2015 - 08:40:16 ---A- . (.Microsoft Corporation - Microsoft Privilege Translations.) -- C:\WINDOWS\system32\msprivs.dll [48128] O44 - LFC:[MD5.B85E95679B5ADC12311BCD3F5385D623] - 7/3/2015 - 08:40:16 ---A- . (.Microsoft Corporation - Microsoft(R) Patch Engine.) -- C:\WINDOWS\system32\mspatcha.dll [29696] O44 - LFC:[MD5.478EDB9F7D60A257617D503F7CB84169] - 7/3/2015 - 08:40:16 ---A- . (.Microsoft Corporation - Ports Class Installer.) -- C:\WINDOWS\system32\msports.dll [41984] O44 - LFC:[MD5.8F37174BCD260D96A875450B5ACC4955] - 7/3/2015 - 08:40:18 ---A- . (.Microsoft Corporation - DRM.) -- C:\WINDOWS\system32\mssap.dll [134656] O44 - LFC:[MD5.FD75DFF1A3A9C5CBB66F3A5D7208200C] - 7/3/2015 - 08:40:18 ---A- . (.Microsoft Corporation - Internet Ratings and Local User Management.) -- C:\WINDOWS\system32\msratelc.dll [60416] O44 - LFC:[MD5.29BD913D8FD1FEB6728DC9B43B55C1D2] - 7/3/2015 - 08:40:18 ---A- . (.Microsoft Corporation - Internet Ratings and Local User Management.) -- C:\WINDOWS\system32\msrating.dll [193536] O44 - LFC:[MD5.5895E11854382F5DBF7DC9DA893C5D33] - 7/3/2015 - 08:40:18 ---A- . (.Microsoft Corporation - Internet Ratings and Local User Management.) -- C:\WINDOWS\system32\msrating.dll.mui [49152] O44 - LFC:[MD5.7C3B97E9DFD2F823BB4F4088CBF7EB89] - 7/3/2015 - 08:40:18 ---A- . (.Microsoft Corporation - Microsoft (R) Red ISAM.) -- C:\WINDOWS\system32\msrd2x40.dll [287768] O44 - LFC:[MD5.7B9245A87145B4C0B1C412F26F5BE662] - 7/3/2015 - 08:40:18 ---A- . (.Microsoft Corporation - Microsoft (R) Red ISAM.) -- C:\WINDOWS\system32\msrd3x40.dll [322336] O44 - LFC:[MD5.8203ED0092BAFB896FE97C26F4F617F8] - 7/3/2015 - 08:40:18 ---A- . (.Microsoft Corporation - Microsoft Jet Briefcase Reconciler Library.) -- C:\WINDOWS\system32\msrclr40.dll [73802] O44 - LFC:[MD5.2A3147AC68A3A8039AAE4EDF19B7470E] - 7/3/2015 - 08:40:18 ---A- . (.Microsoft Corporation - Microsoft Jet Briefcase Reconciler Resource.) -- C:\WINDOWS\system32\msrecr40.dll [28746] O44 - LFC:[MD5.61FC8479F93B42F4DA540DF1B8DA99D7] - 7/3/2015 - 08:40:18 ---A- . (.Microsoft Corporation - Microsoft RLE Compressor.) -- C:\WINDOWS\system32\msrle32.dll [11264] O44 - LFC:[MD5.46D5CD50E96168344110A161F60BDD67] - 7/3/2015 - 08:40:18 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop Services Web Acces.) -- C:\WINDOWS\system32\msrdpwebaccess.dll [44544] O44 - LFC:[MD5.030686BB296ACEDFBF7F92BEE328AB3A] - 7/3/2015 - 08:40:18 ---A- . (.Microsoft Corporation - Microsoft Replication Library.) -- C:\WINDOWS\system32\msrepl40.dll [559904] O44 - LFC:[MD5.CC18D5E5878C0D23233E2A37C3F58189] - 7/3/2015 - 08:40:18 ---A- . (.Microsoft Corporation - Microsoft Screen Video Decompressor.) -- C:\WINDOWS\system32\msscds32.ax [69632] O44 - LFC:[MD5.1ABDF34A8880F77340614437B10B3C21] - 7/3/2015 - 08:40:18 ---A- . (.Microsoft Corporation - Microsoft® Forms DLL.) -- C:\WINDOWS\system32\msr2c.dll [69632] O44 - LFC:[MD5.AC2CF44EEC82C6126D287A0B5924890A] - 7/3/2015 - 08:40:18 ---A- . (.Microsoft Corporation - Microsoft® Forms DLL.) -- C:\WINDOWS\system32\msr2cenu.dll [7168] O44 - LFC:[MD5.0E921C7E1284AFDE99E1C4AE217A7EEC] - 7/3/2015 - 08:40:20 ---A- . (.Microsoft Corporation - MSSIP32 Forwarder DLL.) -- C:\WINDOWS\system32\mssip32.dll [4608] O44 - LFC:[MD5.DE5160912F4483F37704BE65C315B545] - 7/3/2015 - 08:40:20 ---A- . (.Microsoft Corporation - Microsoft (R) Script Control.) -- C:\WINDOWS\system32\msscript.ocx [110592] O44 - LFC:[MD5.4BC1FBE017E7FF008003ED9A509471F1] - 7/3/2015 - 08:40:20 ---A- . (.Microsoft Corporation - Microsoft (R) Timed Interactive Multimedia.) -- C:\WINDOWS\system32\mstime.dll [611840] O44 - LFC:[MD5.383297E2D7C5D4E54DB6F448DACBB026] - 7/3/2015 - 08:40:20 ---A- . (.Microsoft Corporation - Microsoft Jet Text Isam.) -- C:\WINDOWS\system32\mstext40.dll [264992] O44 - LFC:[MD5.3E62CF18441A03A440B280182E4B6935] - 7/3/2015 - 08:40:20 ---A- . (.Microsoft Corporation - Microsoft Standard Data Formating Object DL.) -- C:\WINDOWS\system32\msstdfmt.dll [129872] O44 - LFC:[MD5.568B07313D95BD82BF7C9089FBAB1118] - 7/3/2015 - 08:40:20 ---A- . (.Microsoft Corporation - Microsoft System Health Agent Validator Mes.) -- C:\WINDOWS\system32\msshavmsg.dll [76800] O44 - LFC:[MD5.F7BBAA9485F04E46A053E147CDFAD079] - 7/3/2015 - 08:40:20 ---A- . (.Microsoft Corporation - Microsoft System Health Agent.) -- C:\WINDOWS\system32\mssha.dll [155136] O44 - LFC:[MD5.4D8B6AFE50BAE7BD301967BB38675221] - 7/3/2015 - 08:40:20 ---A- . (.Microsoft Corporation - Microsoft Trust Signing APIs.) -- C:\WINDOWS\system32\mssign32.dll [35840] O44 - LFC:[MD5.82A1E41B2A39A0FFD03C7129820DC3B1] - 7/3/2015 - 08:40:20 ---A- . (.Microsoft Corporation - Windows Media Secure Content Provider.) -- C:\WINDOWS\system32\msscp.dll [356352] O44 - LFC:[MD5.FC997A9D29A5662BCB9EDEF5133E4EE6] - 7/3/2015 - 08:40:20 ---A- . (.Microsoft Corporation - msprop32.ocx.) -- C:\WINDOWS\system32\msstkprp.dll [107840] O44 - LFC:[MD5.B2867BB5FEE8495F57A24077848A9808] - 7/3/2015 - 08:40:20 ---A- . (.Microsoft Corporation - msswch.) -- C:\WINDOWS\system32\msswch.dll [13312] O44 - LFC:[MD5.A595558277A088ABB61295B5F075C743] - 7/3/2015 - 08:40:20 ---A- . (.Microsoft Corporation - msswchx.) -- C:\WINDOWS\system32\msswchx.exe [6656] O44 - LFC:[MD5.DF252F37880142ED5574C2BE4DADF5A7] - 7/3/2015 - 08:40:22 ---A- . (...) -- C:\WINDOWS\system32\msvcrt10.dll [210944] O44 - LFC:[MD5.17AA58A54C00F1746B8654C050491F43] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - MSUTB Server DLL.) -- C:\WINDOWS\system32\msutb.dll [195072] O44 - LFC:[MD5.11CE755E00794C8CCD1A4F71282F8167] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Microsoft (R) C++ Runtime Library.) -- C:\WINDOWS\system32\msvcp50.dll [565760] O44 - LFC:[MD5.F404830F3CD9BF8F2515E489C0CDA297] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Microsoft (R) C++ Runtime Library.) -- C:\WINDOWS\system32\msvcp60.dll [413696] O44 - LFC:[MD5.1C59CE39DF670CA45E3962BDA56D22CD] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll [136704] O44 - LFC:[MD5.02D267236B49C0771264955C021327D4] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Microsoft Video 1 Compressor.) -- C:\WINDOWS\system32\msvidc32.dll [28672] O44 - LFC:[MD5.235B2311786AC007AD644B12A2DA8AC7] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Microsoft Video for Windows DLL.) -- C:\WINDOWS\system32\msvfw32.dll [121344] O44 - LFC:[MD5.8D8A3965D5D4CCBBE4489DA028CEF6FC] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Microsoft® C Runtime Library.) -- C:\WINDOWS\system32\msvcr70.dll [339968] O44 - LFC:[MD5.837B1E310F2AA8B20F07A9B1CE90AC4F] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Microsoft® C Runtime Library.) -- C:\WINDOWS\system32\msvcr71.dll [344064] O44 - LFC:[MD5.73CACA2878DE3E0B87B1D45941E500CB] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Microsoft® C Runtime Library.) -- C:\WINDOWS\system32\msvcrt20.dll [253952] O44 - LFC:[MD5.07B8A966FA4D08B797DE3FCC5C67EAB6] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Microsoft® C++ Runtime Library.) -- C:\WINDOWS\system32\msvci70.dll [54784] O44 - LFC:[MD5.D04F7AACA2319A3BCDB2C5D5DD6F6026] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Microsoft® C++ Runtime Library.) -- C:\WINDOWS\system32\msvcp70.dll [487424] O44 - LFC:[MD5.1874BBAD9AE4C993B74B7ABAA8B9D535] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Microsoft® C++ Runtime Library.) -- C:\WINDOWS\system32\msvcp71.dll [503808] O44 - LFC:[MD5.2D65D56C2F8B6CC5EBFF8E7200C30304] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Microsoft® Terminal Server Licensing.) -- C:\WINDOWS\system32\mstlsapi.dll [116224] O44 - LFC:[MD5.7A660EDC0757849DF5F8706FB6E9F740] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - VC 4.x CRT DLL (Forwarded to msvcrt.dll).) -- C:\WINDOWS\system32\msvcrt40.dll [61440] O44 - LFC:[MD5.157B3267A46A79DD900104F241DA8C4C] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Visual Basic Virtual Machine.) -- C:\WINDOWS\system32\msvbvm50.dll [1355776] O44 - LFC:[MD5.A2E69B9E777C6D5970439946633DB4A1] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Visual Basic Virtual Machine.) -- C:\WINDOWS\system32\msvbvm60.dll [1386496] O44 - LFC:[MD5.06B8485FB1DA9A552B10AB978CD1AC85] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Windows NT CRT DLL.) -- C:\WINDOWS\system32\msvcrt.dll [343040] O44 - LFC:[MD5.07F04F6125E0DC1E73145D8BE5E6A167] - 7/3/2015 - 08:40:22 ---A- . (.Microsoft Corporation - Windows NT IOStreams DLL.) -- C:\WINDOWS\system32\msvcirt.dll [57344] O44 - LFC:[MD5.3F0CF84469AD2DC8382312814A223BCE] - 7/3/2015 - 08:40:24 ---A- . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\WINDOWS\system32\msvidctl.dll [1428992] O44 - LFC:[MD5.764F09C51591490BE48BC462CA5B256D] - 7/3/2015 - 08:40:24 ---A- . (.Microsoft Corporation - ISAPI dll for Web Printing.) -- C:\WINDOWS\system32\msw3prt.dll [74752] O44 - LFC:[MD5.89DFC470C3B517D21E67CD8720373AC2] - 7/3/2015 - 08:40:24 ---A- . (.Microsoft Corporation - MSWebDVD Module.) -- C:\WINDOWS\system32\mswebdvd.dll [204800] O44 - LFC:[MD5.03A02D5A2D50198BDF6C62AF209438D0] - 7/3/2015 - 08:40:24 ---A- . (.Microsoft Corporation - MSXML 3.0 SP10.) -- C:\WINDOWS\system32\msxml3.dll [1172992] O44 - LFC:[MD5.AFDC647D16B285B9AE6140335B3B3255] - 7/3/2015 - 08:40:24 ---A- . (.Microsoft Corporation - Microsoft Jet Sort Library.) -- C:\WINDOWS\system32\mswstr10.dll [621344] O44 - LFC:[MD5.E294A5F16D91D654C4CA0140379D2D28] - 7/3/2015 - 08:40:24 ---A- . (.Microsoft Corporation - Microsoft Jet Sort Tables.) -- C:\WINDOWS\system32\mswdat10.dll [838432] O44 - LFC:[MD5.3BD1548E27B2DF1090E42FEAC1BBA78B] - 7/3/2015 - 08:40:24 ---A- . (.Microsoft Corporation - Microsoft Jet xBASE Isam.) -- C:\WINDOWS\system32\msxbde40.dll [355104] O44 - LFC:[MD5.AD060CFCE701410D7FA4B3461AB83EF5] - 7/3/2015 - 08:40:24 ---A- . (.Microsoft Corporation - Microsoft Video for Windows DLL.) -- C:\WINDOWS\system32\msvideo.dll [126912] O44 - LFC:[MD5.FCEE5FCB99F7C724593365C706D28388] - 7/3/2015 - 08:40:24 ---A- . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provi.) -- C:\WINDOWS\system32\mswsock.dll [245248] O44 - LFC:[MD5.0E552F559EDB48AC376A1E54B20996FD] - 7/3/2015 - 08:40:24 ---A- . (.Microsoft Corporation - Microsoft Winsock Control DLL.) -- C:\WINDOWS\system32\mswinsck.ocx [126800] O44 - LFC:[MD5.E29683D37DED7EC7B813687F7776E956] - 7/3/2015 - 08:40:24 ---A- . (.Microsoft Corporation - Windows Media Device Manager Core.) -- C:\WINDOWS\system32\mswmdm.dll [245760] O44 - LFC:[MD5.2BA64A3195CF794E559D2CFF107B2A02] - 7/3/2015 - 08:40:24 ---A- . (.Microsoft Corporation - XML OM for Win32.) -- C:\WINDOWS\system32\msxml.dll [506368] O44 - LFC:[MD5.CC2F861B1C25F7507DF0EA46E4EE5096] - 7/3/2015 - 08:40:24 ---A- . (.Microsoft Corporation - XML OM for Win32.) -- C:\WINDOWS\system32\msxml2.dll [701440] O44 - LFC:[MD5.A89DB3EC6C2E1A8D630C6D162A54A981] - 7/3/2015 - 08:40:24 ---A- . (.Microsoft Corporation - XML Resources for Win32.) -- C:\WINDOWS\system32\msxml2r.dll [37916] O44 - LFC:[MD5.46954876ED60FED39C10E527D56C8E19] - 7/3/2015 - 08:40:26 ---A- . (.Microsoft Corporation - MS DTC amd MTS clustering support DLL.) -- C:\WINDOWS\system32\mtxclu.dll [66560] O44 - LFC:[MD5.1AED278AA410387ACAB0C57188D3DAD2] - 7/3/2015 - 08:40:26 ---A- . (.Microsoft Corporation - MSXML 4.0 SP3 Resources.) -- C:\WINDOWS\system32\msxml4r.dll [88904] O44 - LFC:[MD5.FB35DC61EB4ECC8148A307DEA7202669] - 7/3/2015 - 08:40:26 ---A- . (.Microsoft Corporation - MSXML 4.0 SP3.) -- C:\WINDOWS\system32\msxml4.dll [1402312] O44 - LFC:[MD5.99D90F4F3B804E399DEE506E2CA867B5] - 7/3/2015 - 08:40:26 ---A- . (.Microsoft Corporation - MSXML 6.0 SP2.) -- C:\WINDOWS\system32\msxml6.dll [1446912] O44 - LFC:[MD5.AF284B373AED682050A40C93CB2C584B] - 7/3/2015 - 08:40:26 ---A- . (.Microsoft Corporation - Microsoft Update Catalog Web Control.) -- C:\WINDOWS\system32\MicrosoftUpdateCatalogWebControl.dll [140456] O44 - LFC:[MD5.BBDFDBEAD1B7A1CFD44BFFFD177FB627] - 7/3/2015 - 08:40:26 ---A- . (.Microsoft Corporation - Microsoft Update Client UI Plugin.) -- C:\WINDOWS\system32\mucltui.dll [275696] O44 - LFC:[MD5.34A0D56B1332DD8E38D5078D5EE17080] - 7/3/2015 - 08:40:26 ---A- . (.Microsoft Corporation - Microsoft Update Client UI Plugin.) -- C:\WINDOWS\system32\mucltui.dll.mui [17136] O44 - LFC:[MD5.F7B1AD991491F02AF6DA70B00B8BF114] - 7/3/2015 - 08:40:26 ---A- . (.Microsoft Corporation - Multiple UNC Provider driver.) -- C:\WINDOWS\system32\Drivers\mup.sys [105472] O44 - LFC:[MD5.B440B6C746F6831F1923E76819412B0C] - 7/3/2015 - 08:40:26 ---A- . (.Microsoft Corporation - XML Resources for Win32.) -- C:\WINDOWS\system32\msxmlr.dll [26624] O44 - LFC:[MD5.572334E13E0D4C8A2986CCA2A736DCE5] - 7/3/2015 - 08:40:26 ---A- . (.Microsoft Corporation - XML Resources.) -- C:\WINDOWS\system32\msxml3r.dll [44032] O44 - LFC:[MD5.89AFA12F6A1AD5837377E0B01C11E40E] - 7/3/2015 - 08:40:26 ---A- . (.Microsoft Corporation - XML Resources.) -- C:\WINDOWS\system32\msxml6r.dll [79872] O44 - LFC:[MD5.8CE3E969D857AAC02C3FE23AA0DC7B82] - 7/3/2015 - 08:40:28 ---A- . (.Marvell Semiconductor Inc. - Marvell Aux NV Bridge DLL.) -- C:\WINDOWS\system32\Drivers\mv61xxmm.sys [14184] O44 - LFC:[MD5.6090786DAA545A3EC7D34A46A8CD1661] - 7/3/2015 - 08:40:28 ---A- . (.Marvell Semiconductor Inc. - Marvell Aux NV Bridge DLL.) -- C:\WINDOWS\system32\Drivers\mv64xxmm.sys [5632] O44 - LFC:[MD5.70EBDF0D7D16CDDA5FAA7D3102748371] - 7/3/2015 - 08:40:28 ---A- . (.Marvell Semiconductor Inc. - Marvell Aux NV Bridge DLL.) -- C:\WINDOWS\system32\Drivers\mvxxmm.sys [14184] O44 - LFC:[MD5.7F5EA5E787345B33766A741F189F7F09] - 7/3/2015 - 08:40:28 ---A- . (.Microsoft Corporation - Microsoft Update Web Control.) -- C:\WINDOWS\system32\muweb.dll [222448] O44 - LFC:[MD5.A1226C81B5DC433CC6A6CA28D84AC303] - 7/3/2015 - 08:40:30 ---A- . (.Microsoft Corporation - Computer Management.) -- C:\WINDOWS\system32\mycomput.dll [90112] O44 - LFC:[MD5.B7C643F9DB1E8A201D3B773F23466472] - 7/3/2015 - 08:40:30 ---A- . (.Microsoft Corporation - Microsoft Narrator Keyboard and WinEvent ho.) -- C:\WINDOWS\system32\narrhook.dll [35840] O44 - LFC:[MD5.21F839F2281473642AC2060F30E19DC7] - 7/3/2015 - 08:40:30 ---A- . (.Microsoft Corporation - Microsoft Narrator.) -- C:\WINDOWS\system32\narrator.exe [53760] O44 - LFC:[MD5.538A270F35A713C360B7ED4168BB7521] - 7/3/2015 - 08:40:30 ---A- . (.Microsoft Corporation - My Documents Folder UI.) -- C:\WINDOWS\system32\mydocs.dll [90624] O44 - LFC:[MD5.87906187B3AF89582380D156DA601F68] - 7/3/2015 - 08:40:30 ---A- . (.Microsoft Corporation - NAP IPSec Enforcement Client.) -- C:\WINDOWS\system32\napipsec.dll [30208] O44 - LFC:[MD5.5099188F965E8C3DA76281E9CBCB0E7F] - 7/3/2015 - 08:40:30 ---A- . (.Microsoft Corporation - NAP Netsh Helper.) -- C:\WINDOWS\system32\napmontr.dll [193024] O44 - LFC:[MD5.3AF52290B3C5F21E25F1C582A60CEBF2] - 7/3/2015 - 08:40:30 ---A- . (.Microsoft Corporation - Network Access Protection Client UI.) -- C:\WINDOWS\system32\napstat.exe [176640] O44 - LFC:[MD5.4170E1FF3BB69CD9CCA58A1A0B8225CF] - 7/3/2015 - 08:40:30 ---A- . (.Microsoft Corporation - Network Connections Control-Panel Stub.) -- C:\WINDOWS\system32\ncpa.cpl [35840] O44 - LFC:[MD5.EC29A79F1E76DC509E24D401F29D0678] - 7/3/2015 - 08:40:30 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\ncobjapi.dll [36352] O44 - LFC:[MD5.4827686E0DAE2C302B02578DF7941B15] - 7/3/2015 - 08:40:30 ---A- . (.Microsoft Corporation - TCP/IP NetBios Information.) -- C:\WINDOWS\system32\nbtstat.exe [20480] O44 - LFC:[MD5.470D9EA1F31E6EB3134316C696170F04] - 7/3/2015 - 08:40:32 ---A- . (...) -- C:\WINDOWS\system32\net.hlp [102446] O44 - LFC:[MD5.EDC1531A49C80614B2CFDA43CA8659AB] - 7/3/2015 - 08:40:32 ---A- . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) -- C:\WINDOWS\system32\Drivers\ndiswan.sys [91520] O44 - LFC:[MD5.4B6424D5A198284129312CE23FB7D74B] - 7/3/2015 - 08:40:32 ---A- . (.Microsoft Corporation - NDDEAPI - Server Side.) -- C:\WINDOWS\system32\nddeapir.exe [4096] O44 - LFC:[MD5.091735A5F20ACB1DC147383A905AE002] - 7/3/2015 - 08:40:32 ---A- . (.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) -- C:\WINDOWS\system32\Drivers\ndistapi.sys [10496] O44 - LFC:[MD5.1DF7F42665C94B825322FAE71721130D] - 7/3/2015 - 08:40:32 ---A- . (.Microsoft Corporation - NDIS 5.1 wrapper driver.) -- C:\WINDOWS\system32\Drivers\ndis.sys [182656] O44 - LFC:[MD5.4589963D84F2984FA5949A72162BA4F4] - 7/3/2015 - 08:40:32 ---A- . (.Microsoft Corporation - NDIS Proxy TAPI Service Provider.) -- C:\WINDOWS\system32\ndptsp.tsp [56832] O44 - LFC:[MD5.2F597BB467E05B1FE3830EABD821B8E0] - 7/3/2015 - 08:40:32 ---A- . (.Microsoft Corporation - NDIS Proxy.) -- C:\WINDOWS\system32\Drivers\ndproxy.sys [40960] O44 - LFC:[MD5.FD3DA8425624B98903407DF608CF2C11] - 7/3/2015 - 08:40:32 ---A- . (.Microsoft Corporation - Net Command.) -- C:\WINDOWS\system32\net.exe [42496] O44 - LFC:[MD5.3F14C041342E3FBA343F2A1D11E74BBA] - 7/3/2015 - 08:40:32 ---A- . (.Microsoft Corporation - Net Command.) -- C:\WINDOWS\system32\net1.exe [124928] O44 - LFC:[MD5.21E455EDE9A7482805BF901B2BDF36D6] - 7/3/2015 - 08:40:32 ---A- . (.Microsoft Corporation - Netork Setup Wizard Support DLL.) -- C:\WINDOWS\system32\ncxpnt.dll [7680] O44 - LFC:[MD5.0709321C452771521DBD21523E455CA3] - 7/3/2015 - 08:40:32 ---A- . (.Microsoft Corporation - Network DDE NetBIOS Interface.) -- C:\WINDOWS\system32\nddenb32.dll [18944] O44 - LFC:[MD5.013C1148C1EC025596896E093F60F608] - 7/3/2015 - 08:40:32 ---A- . (.Microsoft Corporation - Network DDE Share Management APIs.) -- C:\WINDOWS\system32\nddeapi.dll [17920] O44 - LFC:[MD5.D8F01AB82D5699A6A278651777D00B67] - 7/3/2015 - 08:40:34 ---A- . (.Microsoft Corporation - Microsoft Network Dynamic Link Library for.) -- C:\WINDOWS\system32\netapi.dll [108464] O44 - LFC:[MD5.6F8DCD60628DA34AB303CEADB5186043] - 7/3/2015 - 08:40:34 ---A- . (.Microsoft Corporation - Net Win32 API DLL.) -- C:\WINDOWS\system32\netapi32.dll [339968] O44 - LFC:[MD5.5D81CF9A2F1A3A756B66CF684911CDF0] - 7/3/2015 - 08:40:34 ---A- . (.Microsoft Corporation - NetBIOS interface driver.) -- C:\WINDOWS\system32\Drivers\netbios.sys [34688] O44 - LFC:[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - 7/3/2015 - 08:40:36 ---A- . (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\system32\Drivers\netbt.sys [162816] O44 - LFC:[MD5.37A62C6092AADD2EFDE0468DD8818E99] - 7/3/2015 - 08:40:36 ---A- . (.Microsoft Corporation - Network Configuration Objects.) -- C:\WINDOWS\system32\netcfgx.dll [622592] O44 - LFC:[MD5.B857BA82860D7FF85AE29B095645563B] - 7/3/2015 - 08:40:36 ---A- . (.Microsoft Corporation - Network DDE - DDE Communication.) -- C:\WINDOWS\system32\netdde.exe [111104] O44 - LFC:[MD5.DA45AD502B4F2B7FC4ADEBA2E309F384] - 7/3/2015 - 08:40:38 ---A- . (.Microsoft Corporation - Net Event Handler.) -- C:\WINDOWS\system32\netevent.dll [214016] O44 - LFC:[MD5.B5DF0B198690FB739B44E9FBAB9B436E] - 7/3/2015 - 08:40:40 ---A- . (.Microsoft Corporation - Net Help Messages DLL.) -- C:\WINDOWS\system32\neth.dll [253952] O44 - LFC:[MD5.06CF9EEDB7E827205C6948C9DAF56974] - 7/3/2015 - 08:40:40 ---A- . (.Microsoft Corporation - Net Logon Services DLL.) -- C:\WINDOWS\system32\netlogon.dll [407040] O44 - LFC:[MD5.20FD44370267CCD0A64A1B31861C21D2] - 7/3/2015 - 08:40:40 ---A- . (.Microsoft Corporation - Net Messages DLL.) -- C:\WINDOWS\system32\netmsg.dll [171008] O44 - LFC:[MD5.13E67B55B3ABD7BF3FE7AAE5A0F9A9DE] - 7/3/2015 - 08:40:40 ---A- . (.Microsoft Corporation - Network Connections Manager.) -- C:\WINDOWS\system32\netman.dll [198144] O44 - LFC:[MD5.9B186C49AA4554094D2BAFE50ACDCDEB] - 7/3/2015 - 08:40:40 ---A- . (.Microsoft Corporation - System Control Panel Applet; Network ID Pag.) -- C:\WINDOWS\system32\netid.dll [139264] O44 - LFC:[MD5.54BE97C55070B7856B54C0D86FF253E5] - 7/3/2015 - 08:40:42 ---A- . (.Microsoft Corporation - Map Network Drives/Network Places Wizard.) -- C:\WINDOWS\system32\netplwiz.dll [875008] O44 - LFC:[MD5.B41D53899E37CC43DA85DA19998BEE81] - 7/3/2015 - 08:40:42 ---A- . (.Microsoft Corporation - Net Remote Admin Protocol DLL.) -- C:\WINDOWS\system32\netrap.dll [11776] O44 - LFC:[MD5.2073E759F5458A8432B088F047E430D5] - 7/3/2015 - 08:40:42 ---A- . (.Microsoft Corporation - Network Setup Wizard Control Panel Applet.) -- C:\WINDOWS\system32\netsetup.cpl [25600] O44 - LFC:[MD5.AC5DF42FE314C1446B1DAD237BFCFFE0] - 7/3/2015 - 08:40:44 ---A- . (.Microsoft Corporation - NT LM UI Common Code - GUI Classes.) -- C:\WINDOWS\system32\netui0.dll [80896] O44 - LFC:[MD5.1414E666316CA7D9823DBD2D4ADA5971] - 7/3/2015 - 08:40:44 ---A- . (.Microsoft Corporation - NT LM UI Common Code - GUI Classes.) -- C:\WINDOWS\system32\netui2.dll [308224] O44 - LFC:[MD5.ED5A816D8E11E03F1937AC3C56826EE4] - 7/3/2015 - 08:40:44 ---A- . (.Microsoft Corporation - NT LM UI Common Code - Networking classes.) -- C:\WINDOWS\system32\netui1.dll [245760] O44 - LFC:[MD5.6309955F8A1BDD10A8467C50ED3F023E] - 7/3/2015 - 08:40:44 ---A- . (.Microsoft Corporation - Network Command Shell.) -- C:\WINDOWS\system32\netsh.exe [86016] O44 - LFC:[MD5.062F837C1FBDB6A0A75F82EFC2EE8E74] - 7/3/2015 - 08:40:44 ---A- . (.Microsoft Corporation - Network Connections Shell.) -- C:\WINDOWS\system32\netshell.dll [1703936] O44 - LFC:[MD5.8A7EE413726790398D6B315B7CFB5B0A] - 7/3/2015 - 08:40:44 ---A- . (.Microsoft Corporation - TCP/IP Netstat Command.) -- C:\WINDOWS\system32\netstat.exe [36864] O44 - LFC:[MD5.04D08BE5F163C108BAFE2988182F62C2] - 7/3/2015 - 08:40:44 ---A- . (.Microsoft Corporation - Win32 Cabinet Self-Extractor.) -- C:\WINDOWS\system32\netsetup.exe [329728] O44 - LFC:[MD5.EDF56E4601B55BA6411402478D222BEB] - 7/3/2015 - 08:40:46 ---A- . (...) -- C:\WINDOWS\system32\netware.drv [2656] O44 - LFC:[MD5.03C76895F47A1339A697269000675266] - 7/3/2015 - 08:40:46 ---A- . (.Microsoft Corporation - Add Hardware Device Library.) -- C:\WINDOWS\system32\newdev.dll [247808] O44 - LFC:[MD5.5E835121A3899CFA37E285E0CA2B4E7D] - 7/3/2015 - 08:40:48 ---A- . (...) -- C:\WINDOWS\system32\nlsfunc.exe [7052] O44 - LFC:[MD5.453FE5FDA0EF1CE341DF5EBFA5D6681C] - 7/3/2015 - 08:40:48 ---A- . (.Microsoft Corporation - HTML filter.) -- C:\WINDOWS\system32\nlhtml.dll [98304] O44 - LFC:[MD5.E5244A5462FA1F0267D8923538530AF4] - 7/3/2015 - 08:40:48 ---A- . (.Microsoft Corporation - Nls Downlevel DLL.) -- C:\WINDOWS\system32\nlsdl.dll [24576] O44 - LFC:[MD5.5A34DB0802A96719F9DC08DFC7F356D1] - 7/3/2015 - 08:40:50 ---A- . (...) -- C:\WINDOWS\system32\noise.chs [1696] O44 - LFC:[MD5.6C114885CC2C983BA24F9A4EDE9A48FA] - 7/3/2015 - 08:40:50 ---A- . (...) -- C:\WINDOWS\system32\noise.cht [1696] O44 - LFC:[MD5.DE78E0C57BC478D47CC2F470B68E1A45] - 7/3/2015 - 08:40:50 ---A- . (...) -- C:\WINDOWS\system32\noise.dat [741] O44 - LFC:[MD5.AB3BF6AB274C57123827AFA60354642E] - 7/3/2015 - 08:40:50 ---A- . (...) -- C:\WINDOWS\system32\noise.deu [149848] O44 - LFC:[MD5.65FCC5383C64AE4B0C8100AC75C0F286] - 7/3/2015 - 08:40:50 ---A- . (...) -- C:\WINDOWS\system32\noise.eng [751] O44 - LFC:[MD5.65FCC5383C64AE4B0C8100AC75C0F286] - 7/3/2015 - 08:40:50 ---A- . (...) -- C:\WINDOWS\system32\noise.enu [751] O44 - LFC:[MD5.BF87CC5F09459CFCEFC35A5AB2990E39] - 7/3/2015 - 08:40:50 ---A- . (...) -- C:\WINDOWS\system32\noise.esn [19684] O44 - LFC:[MD5.D0AD0F15FE9249099C98FADC8CCA9B6E] - 7/3/2015 - 08:40:50 ---A- . (...) -- C:\WINDOWS\system32\noise.fra [49196] O44 - LFC:[MD5.010A2958104B44ABF12E483A400E3B05] - 7/3/2015 - 08:40:50 ---A- . (...) -- C:\WINDOWS\system32\noise.ita [19618] O44 - LFC:[MD5.1E421A6BCF2203CC61B821ADA9DE878B] - 7/3/2015 - 08:40:50 ---A- . (.Microsoft Corporation - Netmon NT Driver.) -- C:\WINDOWS\system32\Drivers\nmnt.sys [40320] O44 - LFC:[MD5.FA6AD4783B2EA52F678AF3808574FB37] - 7/3/2015 - 08:40:52 ---A- . (...) -- C:\WINDOWS\system32\noise.nld [13256] O44 - LFC:[MD5.B71838718F68831B161AE562BF68ECF7] - 7/3/2015 - 08:40:52 ---A- . (...) -- C:\WINDOWS\system32\noise.sve [13730] O44 - LFC:[MD5.BDD9B70A185CA6DEFEAA59BB55B70644] - 7/3/2015 - 08:40:52 ---A- . (...) -- C:\WINDOWS\system32\noise.tha [697] O44 - LFC:[MD5.DA5748A89E22A3932387E65694B25BBB] - 7/3/2015 - 08:40:52 ---A- . (...) -- C:\WINDOWS\system32\normidna.nls [59342] O44 - LFC:[MD5.3831A5E217D6FA828CCE1011DA26E677] - 7/3/2015 - 08:40:52 ---A- . (...) -- C:\WINDOWS\system32\normnfc.nls [45794] O44 - LFC:[MD5.DBDE664E0BA4BACD0A6A04AE2232B205] - 7/3/2015 - 08:40:52 ---A- . (...) -- C:\WINDOWS\system32\normnfd.nls [39284] O44 - LFC:[MD5.C9B88B759FE81D59CE8EBF5A0A8EB75A] - 7/3/2015 - 08:40:52 ---A- . (...) -- C:\WINDOWS\system32\normnfkc.nls [66384] O44 - LFC:[MD5.3CAB6AB66759FCDF73B61EE262C9ACF4] - 7/3/2015 - 08:40:52 ---A- . (...) -- C:\WINDOWS\system32\normnfkd.nls [60294] O44 - LFC:[MD5.3182D64AE053D6FB034F44B6DEF8034A] - 7/3/2015 - 08:40:52 ---A- . (.Microsoft Corporation - NPFS Driver.) -- C:\WINDOWS\system32\Drivers\npfs.sys [30848] O44 - LFC:[MD5.68A131335A20B343923A2957EB1E413D] - 7/3/2015 - 08:40:52 ---A- . (.Microsoft Corporation - NPP Tools Helper DLL.) -- C:\WINDOWS\system32\npptools.dll [54784] O44 - LFC:[MD5.E8F945B7F0A938FEDB44AE9996898F6C] - 7/3/2015 - 08:40:52 ---A- . (.Microsoft Corporation - Notepad.) -- C:\WINDOWS\NOTEPAD.EXE [69120] O44 - LFC:[MD5.E8F945B7F0A938FEDB44AE9996898F6C] - 7/3/2015 - 08:40:52 ---A- . (.Microsoft Corporation - Notepad.) -- C:\WINDOWS\system32\notepad.exe [69120] O44 - LFC:[MD5.10753A3ADC3E39A3B10CC3F08E98E6B4] - 7/3/2015 - 08:40:52 ---A- . (.Microsoft Corporation - Unicode Normalization DLL.) -- C:\WINDOWS\system32\normaliz.dll [23552] O44 - LFC:[MD5.4C1718D6FCC35C25D1616247D374672B] - 7/3/2015 - 08:40:52 ---A- . (.Microsoft Corporation - nslookup APP.) -- C:\WINDOWS\system32\nslookup.exe [76800] O44 - LFC:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 7/3/2015 - 08:40:54 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27866] O44 - LFC:[MD5.CF9ED169FF86D935E47999E82359E898] - 7/3/2015 - 08:40:54 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146] O44 - LFC:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 7/3/2015 - 08:40:54 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370] O44 - LFC:[MD5.15CE4DBC22FAB90B3CA5352AF1FFF81C] - 7/3/2015 - 08:40:54 ---A- . (.Microsoft Corporation - NT Layer DLL.) -- C:\WINDOWS\system32\ntdll.dll [718336] O44 - LFC:[MD5.060D8088F95A3A4BEA0F0E11A65F853D] - 7/3/2015 - 08:40:54 ---A- . (.Microsoft Corporation - Windows Backup Utility.) -- C:\WINDOWS\system32\ntbackup.exe [1200640] O44 - LFC:[MD5.B2DE3452DE03674C6CEC68B8C8CE7C78] - 7/3/2015 - 08:40:54 RSHA- . (...) -- C:\NTDETECT.COM [47564] O44 - LFC:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 7/3/2015 - 08:40:56 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274] O44 - LFC:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 7/3/2015 - 08:40:56 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146] O44 - LFC:[MD5.4E16974702B0C733F1E669247E8E0D22] - 7/3/2015 - 08:40:56 ---A- . (...) -- C:\WINDOWS\system32\ntimage.gif [48794] O44 - LFC:[MD5.4FE09F868CE65B334B42862C372C69CC] - 7/3/2015 - 08:40:56 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [33840] O44 - LFC:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 7/3/2015 - 08:40:56 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560] O44 - LFC:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 7/3/2015 - 08:40:56 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648] O44 - LFC:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 7/3/2015 - 08:40:56 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424] O44 - LFC:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 7/3/2015 - 08:40:56 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560] O44 - LFC:[MD5.CE2988207714CAE6881935C6B48438C4] - 7/3/2015 - 08:40:56 ---A- . (.Microsoft Corporation - Lanman Control dll.) -- C:\WINDOWS\system32\ntlanui.dll [57856] O44 - LFC:[MD5.36468087E22C57A83DF758B3F90DF73F] - 7/3/2015 - 08:40:56 ---A- . (.Microsoft Corporation - Microsoft® Lan Manager.) -- C:\WINDOWS\system32\ntlanman.dll [44032] O44 - LFC:[MD5.B464BD425D5D09ABE4192234D1577B22] - 7/3/2015 - 08:40:56 ---A- . (.Microsoft Corporation - Microsoft® License Server Interface DLL.) -- C:\WINDOWS\system32\ntlsapi.dll [8192] O44 - LFC:[MD5.4C51D5275AE8A16999EDFE7E647D00DE] - 7/3/2015 - 08:40:56 ---A- . (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [576384] O44 - LFC:[MD5.30FE5893927F94CBBC84C2BDD0765093] - 7/3/2015 - 08:40:56 ---A- . (.Microsoft Corporation - NT5DS.) -- C:\WINDOWS\system32\ntdsapi.dll [68096] O44 - LFC:[MD5.53ECB38FFC7A8BAB844994ABF3BF81BB] - 7/3/2015 - 08:40:56 ---A- . (.Microsoft Corporation - NT5DS.) -- C:\WINDOWS\system32\ntdsbcli.dll [26112] O44 - LFC:[MD5.00CF98B20E2DC88500B72C47226B8C59] - 7/3/2015 - 08:40:56 ---A- . (.Microsoft Corporation - Network object shell UI.) -- C:\WINDOWS\system32\ntlanui2.dll [14336] O44 - LFC:[MD5.C1B29B4E6EEA9510610DB2EC4D6DB160] - 7/3/2015 - 08:40:56 RSHA- . (...) -- C:\ntldr [250048] O44 - LFC:[MD5.247B9EC05417E1DBBB77039AC8570C50] - 7/3/2015 - 08:40:58 ---A- . (...) -- C:\WINDOWS\system32\ntmsmgr.msc [26209] O44 - LFC:[MD5.E32DAB465E868AA82F441928658A8509] - 7/3/2015 - 08:40:58 ---A- . (...) -- C:\WINDOWS\system32\ntmsoprq.msc [32968] O44 - LFC:[MD5.A4A50A53FFBFEC545CDA85E98AF2106B] - 7/3/2015 - 08:40:58 ---A- . (.Microsoft Corporation - NT Kernel & System.) -- C:\WINDOWS\system32\ntoskrnl.exe [2193536] O44 - LFC:[MD5.DA76C8716F7295DB65F0E0AAE45343F8] - 7/3/2015 - 08:40:58 ---A- . (.Microsoft Corporation - Removable Storage Manager DB Object APIs.) -- C:\WINDOWS\system32\ntmsdba.dll [179200] O44 - LFC:[MD5.4B03E5C6ABB23BC03074B406140D1758] - 7/3/2015 - 08:40:58 ---A- . (.Microsoft Corporation - Removable Storage Manager Event Logger.) -- C:\WINDOWS\system32\ntmsevt.dll [36864] O44 - LFC:[MD5.156F64A3345BD23C600655FB4D10BC08] - 7/3/2015 - 08:40:58 ---A- . (.Microsoft Corporation - Removable Storage Manager.) -- C:\WINDOWS\system32\ntmssvc.dll [435200] O44 - LFC:[MD5.11E9EF7DC6ED377DB1A98F4D0FCBE983] - 7/3/2015 - 08:40:58 ---A- . (.Microsoft Corporation - Removable Storage Public Interfaces.) -- C:\WINDOWS\system32\ntmsapi.dll [40960] O44 - LFC:[MD5.1DF175698CA61D738E8A0E872328086D] - 7/3/2015 - 08:40:58 ---A- . (.Microsoft Corporation - Removable Storage Service.) -- C:\WINDOWS\system32\ntmsmgr.dll [488448] O44 - LFC:[MD5.68D1BCB93D09782BB9C6EC0CEF89FDA4] - 7/3/2015 - 08:40:58 ---A- . (.Microsoft Corporation - Spooler Setup DLL.) -- C:\WINDOWS\system32\ntprint.dll [91136] O44 - LFC:[MD5.3225C2BCBCAF3F0D994DADC82112E233] - 7/3/2015 - 08:40:58 ---A- . (.Microsoft Corporation - Symbolic Debugger Extensions.) -- C:\WINDOWS\system32\ntsdexts.dll [36864] O44 - LFC:[MD5.43C797488AED00AE5170B0531F8FC6E9] - 7/3/2015 - 08:40:58 ---A- . (.Microsoft Corporation - Symbolic Debugger for Windows 2000.) -- C:\WINDOWS\system32\ntsd.exe [31744] O44 - LFC:[MD5.549290DBC280C887681D7652978DBBE0] - 7/3/2015 - 08:40:58 ---A- . (.Microsoft Corporation - Windows NT MARTA provider.) -- C:\WINDOWS\system32\ntmarta.dll [118784] O44 - LFC:[MD5.681B807E53BDADA337735C28C0E48A1B] - 7/3/2015 - 08:41:00 ---A- . (.Microsoft Corporation - NTVDM.EXE.) -- C:\WINDOWS\system32\ntvdm.exe [420864] O44 - LFC:[MD5.B7C38AFC4B3D6B67DD4981718BE177CE] - 7/3/2015 - 08:41:00 ---A- . (.Microsoft Corporation - NTVDMD.DLL.) -- C:\WINDOWS\system32\ntvdmd.dll [15360] O44 - LFC:[MD5.73C1E1F395918BC2C6DD67AF7591A3AD] - 7/3/2015 - 08:41:00 ---A- . (.Microsoft Corporation - NULL Driver.) -- C:\WINDOWS\system32\Drivers\null.sys [2944] O44 - LFC:[MD5.A70A2D85AD143D6BB823C246CEB699A5] - 7/3/2015 - 08:41:00 ---A- . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\WINDOWS\system32\ntshrui.dll [143360] O44 - LFC:[MD5.8389C89722B4381D34B3AB26F3A7BF1E] - 7/3/2015 - 08:41:00 ---A- . (.Microsoft Corporation - Windows User Manager.) -- C:\WINDOWS\system32\nusrmgr.cpl [257024] O44 - LFC:[MD5.113976FD8FE7E395888AEBAFAD83D8F7] - 7/3/2015 - 08:41:02 ---A- . (...) -- C:\WINDOWS\system32\nw16.exe [3252] O44 - LFC:[MD5.D5B7F5185B117AA90A472C7627B55CE9] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - Client Service for NetWare Applet.) -- C:\WINDOWS\system32\nwc.cpl [36864] O44 - LFC:[MD5.06E587F41466569F32BEAAC7260E8AEC] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - Client Service for NetWare Provider and Aut.) -- C:\WINDOWS\system32\nwprovau.dll [142336] O44 - LFC:[MD5.2C2FD0E6B0180F94C260DD26706AA5F4] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - Client Service for Netware.) -- C:\WINDOWS\system32\nwwks.dll [65536] O44 - LFC:[MD5.92DDAE2DF95D44434E94CB0F8FF662E3] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - Event Messages for Client Service for NetWa.) -- C:\WINDOWS\system32\nwevent.dll [6144] O44 - LFC:[MD5.E77A74BF45361E04C1AB0E9E50C5F855] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - NW Win32 API DLL.) -- C:\WINDOWS\system32\nwapi32.dll [64000] O44 - LFC:[MD5.A6792C90AA197F69C9792C19B0BAF452] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - NW Windows/Dos API DLL.) -- C:\WINDOWS\system32\nwapi16.dll [17408] O44 - LFC:[MD5.4BE69E1632F3098A2130301BE85C53F8] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - NWC Configuration DLL.) -- C:\WINDOWS\system32\nwcfg.dll [20480] O44 - LFC:[MD5.C99B3415198D1AAB7227F2C88FD664B9] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - NWLINK2 Forwarder Driver.) -- C:\WINDOWS\system32\Drivers\nwlnkfwd.sys [32512] O44 - LFC:[MD5.56D34A67C05E94E16377C60609741FF8] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - NWLINK2 IPX Netbios Protocol Driver.) -- C:\WINDOWS\system32\Drivers\nwlnknb.sys [63232] O44 - LFC:[MD5.8B8B1BE2DBA4025DA6786C645F77F123] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - NWLINK2 IPX Protocol Driver.) -- C:\WINDOWS\system32\Drivers\nwlnkipx.sys [88320] O44 - LFC:[MD5.C0BB7D1615E1ACBDC99757F6CEAF8CF0] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - NWLINK2 SPX Protocol Driver.) -- C:\WINDOWS\system32\Drivers\nwlnkspx.sys [55936] O44 - LFC:[MD5.B305F3FAD35083837EF46A0BBCE2FC57] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - NWLINK2 Traffic Filter Driver.) -- C:\WINDOWS\system32\Drivers\nwlnkflt.sys [12416] O44 - LFC:[MD5.520A7136CB4B1C75155E656FCB24C446] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - NetWare Logon Script Utility.) -- C:\WINDOWS\system32\nwscript.exe [126464] O44 - LFC:[MD5.36B9B950E3D2E100970A48D8BAD86740] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - NetWare Redirector File System Driver.) -- C:\WINDOWS\system32\Drivers\nwrdr.sys [163584] O44 - LFC:[MD5.584C4DA856450CB22EBBE7A68CC6250F] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - Oakley Key Manager.) -- C:\WINDOWS\system32\oakley.dll [278528] O44 - LFC:[MD5.9D57D0CC9A03A5CF796870A8FCB93F9B] - 7/3/2015 - 08:41:02 ---A- . (.Microsoft Corporation - Object Picker Dialog.) -- C:\WINDOWS\system32\objsel.dll [286208] O44 - LFC:[MD5.1CCE844C2835F33EC15A9A8D30341C9F] - 7/3/2015 - 08:41:04 ---A- . (.Microsoft Corporation - Object Control Viewer.) -- C:\WINDOWS\system32\occache.dll [206848] O44 - LFC:[MD5.0B698BC91749B56C561283519F9EE272] - 7/3/2015 - 08:41:06 ---A- . (...) -- C:\WINDOWS\system32\odbcconf.rsp [4310] O44 - LFC:[MD5.98786BE1ADF623D957105689510BC81D] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft BCP for ODBC.) -- C:\WINDOWS\system32\odbcbcp.dll [24576] O44 - LFC:[MD5.2B6B61FE79E9706BE306856F7A795133] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft Data Access - "ODBC Administrator.) -- C:\WINDOWS\system32\odbcad32.exe [32768] O44 - LFC:[MD5.A7EFFE47A2CE361DBD5C60267DBC7C3D] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Control Panel.) -- C:\WINDOWS\system32\odbccp32.cpl [32768] O44 - LFC:[MD5.B34859A7AF5E5BF4D0724F29E9607D7F] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Cursor Library.) -- C:\WINDOWS\system32\odbccr32.dll [65536] O44 - LFC:[MD5.CD27BE381E2494E7EDEB930B6A729956] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Cursor Library.) -- C:\WINDOWS\system32\odbccu32.dll [65536] O44 - LFC:[MD5.0B33238AEAF1EF2223B85246AB2CCA88] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Driver Configu.) -- C:\WINDOWS\system32\odbcconf.dll [135168] O44 - LFC:[MD5.3AFB256A97EE75F570059D287820D847] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Driver Configu.) -- C:\WINDOWS\system32\odbcconf.exe [69632] O44 - LFC:[MD5.2008B4938B1C02003240B0148E14478F] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Driver Generic.) -- C:\WINDOWS\system32\odbc32gt.dll [16384] O44 - LFC:[MD5.1D604A51408D039E5692160C2DC44FF7] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Driver Manager.) -- C:\WINDOWS\system32\odbc32.dll [253952] O44 - LFC:[MD5.7B2E6EA379987B725299D15B796A5429] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Driver Manager.) -- C:\WINDOWS\system32\odbcp32r.dll [12288] O44 - LFC:[MD5.E5B3F5558E25724385316A8BC0448013] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Driver Manager.) -- C:\WINDOWS\system32\odbctrac.dll [147456] O44 - LFC:[MD5.2C288AA87E4723AC9FF4D76A192EC3F8] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Installer.) -- C:\WINDOWS\system32\odbccp32.dll [106496] O44 - LFC:[MD5.6B7C6B32F8E84D56C6260D684019FEA2] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft Data Access - ODBC Resources.) -- C:\WINDOWS\system32\odbcint.dll [94208] O44 - LFC:[MD5.5CE275CDC5FFB77B1EC29DBDFE4B6689] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft ODBC Desktop Driver Pack 3.5.) -- C:\WINDOWS\system32\odbcji32.dll [53279] O44 - LFC:[MD5.1B05DCC75FBB903A17E3E0DDAEA8D508] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft ODBC Desktop Driver Pack 3.5.) -- C:\WINDOWS\system32\odbcjt32.dll [278559] O44 - LFC:[MD5.7FDC88E8511D8D53ED25CE1B814B917E] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Microsoft ODBC Driver Generic Thunk.) -- C:\WINDOWS\system32\odbc16gt.dll [26224] O44 - LFC:[MD5.E8AD95D21A9CB39EE760EC920800178E] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - ODBC (3.0) driver for DBase.) -- C:\WINDOWS\system32\oddbse32.dll [20511] O44 - LFC:[MD5.796A796558189D41F0032B287E2960B6] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - ODBC (3.0) driver for Excel.) -- C:\WINDOWS\system32\odexl32.dll [20510] O44 - LFC:[MD5.409B5475C0BBBB61B822918E515D4EC8] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - ODBC (3.0) driver for FoxPro.) -- C:\WINDOWS\system32\odfox32.dll [20510] O44 - LFC:[MD5.F248D9A9AA1A29283C3FBB01BD107BF3] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - ODBC (3.0) driver for Paradox.) -- C:\WINDOWS\system32\odpdx32.dll [20510] O44 - LFC:[MD5.91AB5C07E28305253CB8FD8709CD3724] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - ODBC (3.0) driver for text files.) -- C:\WINDOWS\system32\odtext32.dll [20511] O44 - LFC:[MD5.8A18BCE83D7E2AEA2AB0C96E8F9B2D73] - 7/3/2015 - 08:41:06 ---A- . (.Microsoft Corporation - Optional Component Manager Library.) -- C:\WINDOWS\system32\ocmanage.dll [67584] O44 - LFC:[MD5.6FF56E89D90A71C85F9E74BBC053DBEB] - 7/3/2015 - 08:41:14 ---A- . (...) -- C:\WINDOWS\system32\oembios.dat [4463] O44 - LFC:[MD5.41773926062E66E7DF3B391FCFB72C8A] - 7/3/2015 - 08:41:14 ---A- . (...) -- C:\WINDOWS\system32\oembios.sig [6761] O44 - LFC:[MD5.20200EE3CFE10E9F0C028D8653BE11C6] - 7/3/2015 - 08:41:16 ---A- . (.Microsoft Corporation - Active Accessibility Core Component.) -- C:\WINDOWS\system32\oleacc.dll [220160] O44 - LFC:[MD5.99F59B3392AD68F08BB528791F5D880D] - 7/3/2015 - 08:41:16 ---A- . (.Microsoft Corporation - Active Accessibility Resource DLL.) -- C:\WINDOWS\system32\oleaccrc.dll [20480] O44 - LFC:[MD5.59B408E5B8489B0B36A0D783D150EDCC] - 7/3/2015 - 08:41:16 ---A- . (.Microsoft Corporation - Microsoft OLE for Windows.) -- C:\WINDOWS\system32\ole32.dll [1289728] O44 - LFC:[MD5.86440EDFF27095E03741AEDC5752AA51] - 7/3/2015 - 08:41:16 ---A- . (.Microsoft Corporation - Microsoft OLE for Windows.) -- C:\WINDOWS\system32\olecnv32.dll [37376] O44 - LFC:[MD5.0B467F470CC9918FDCEEDCFD7DC4D697] - 7/3/2015 - 08:41:16 ---A- . (.Microsoft Corporation - Microsoft Windows(TM) OLE 2.0 User Interfac.) -- C:\WINDOWS\system32\oledlg.dll [122880] O44 - LFC:[MD5.6874D2A757F06DC1D8B3C80A47755013] - 7/3/2015 - 08:41:16 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\oleaut32.dll [552448] O44 - LFC:[MD5.5652F6CE1D9E9D8068B9D29BC21B5409] - 7/3/2015 - 08:41:16 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\olepro32.dll [84992] O44 - LFC:[MD5.145AA8ECF0526C093F71117C181694AB] - 7/3/2015 - 08:41:16 ---A- . (.Microsoft Corporation - OLE 2.1 16/32 Interoperability Library.) -- C:\WINDOWS\system32\ole2.dll [39744] O44 - LFC:[MD5.EB38BE7D7CF9EC15442A9D24CB39A2AC] - 7/3/2015 - 08:41:16 ---A- . (.Microsoft Corporation - OLE 2.1 16/32 Interoperability Library.) -- C:\WINDOWS\system32\ole2disp.dll [169520] O44 - LFC:[MD5.32CFCC848A57F87638E31E8735515F80] - 7/3/2015 - 08:41:16 ---A- . (.Microsoft Corporation - OLE 2.1 16/32 Interoperability Library.) -- C:\WINDOWS\system32\ole2nls.dll [153008] O44 - LFC:[MD5.D475029D732983ED962A8FF61688C912] - 7/3/2015 - 08:41:16 ---A- . (.Microsoft Corporation - Object Linking and Embedding Client Library.) -- C:\WINDOWS\system32\olecli.dll [82944] O44 - LFC:[MD5.FA1B9CAE64B23C950DA3D96ABBF23BD0] - 7/3/2015 - 08:41:16 ---A- . (.Microsoft Corporation - Object Linking and Embedding Client Library.) -- C:\WINDOWS\system32\olecli32.dll [74752] O44 - LFC:[MD5.16BF834A84A7DC0D24EDC8E924C90637] - 7/3/2015 - 08:41:16 ---A- . (.Microsoft Corporation - Object Linking and Embedding Server Library.) -- C:\WINDOWS\system32\olesvr.dll [24064] O44 - LFC:[MD5.A4193695D32BF9024461B1070264D262] - 7/3/2015 - 08:41:16 ---A- . (.Microsoft Corporation - OffFilt.) -- C:\WINDOWS\system32\offfilt.dll [192000] O44 - LFC:[MD5.8A6529DC08593AD4D1D52858C358DE30] - 7/3/2015 - 08:41:16 ---A- . (.Microsoft Corporation - Oleprn DLL.) -- C:\WINDOWS\system32\oleprn.dll [107008] O44 - LFC:[MD5.4BB30DDC53EBC76895E38694580CDFE9] - 7/3/2015 - 08:41:18 ---A- . (.Microsoft Corporation - ACPI Operation Registration Driver.) -- C:\WINDOWS\system32\Drivers\oprghdlr.sys [3456] O44 - LFC:[MD5.CA04959077AFE36369D37B3504740C87] - 7/3/2015 - 08:41:18 ---A- . (.Microsoft Corporation - IEEE 802.1X supplicant library.) -- C:\WINDOWS\system32\onex.dll [144384] O44 - LFC:[MD5.AE9543F20FCC1E7BCAA13051CC076147] - 7/3/2015 - 08:41:18 ---A- . (.Microsoft Corporation - Microsoft OLE for Windows.) -- C:\WINDOWS\system32\olethk32.dll [69120] O44 - LFC:[MD5.D8361BEAB7109AB8B069F7F5028E37B1] - 7/3/2015 - 08:41:18 ---A- . (.Microsoft Corporation - Object Linking and Embedding Server Library.) -- C:\WINDOWS\system32\olesvr32.dll [22016] O44 - LFC:[MD5.4BF1D916FD6F96F2DEF9832D7083AF2D] - 7/3/2015 - 08:41:18 ---A- . (.Microsoft Corporation - Open Files.) -- C:\WINDOWS\system32\openfiles.exe [67584] O44 - LFC:[MD5.F5DF4C09808DBD4D84A3871A5A3DB91B] - 7/3/2015 - 08:41:18 ---A- . (.Microsoft Corporation - OpenGL Client DLL.) -- C:\WINDOWS\system32\opengl32.dll [713728] O44 - LFC:[MD5.65771F818306EEBBCBE4ABD9BF01AE1B] - 7/3/2015 - 08:41:20 ---A- . (...) -- C:\WINDOWS\system32\pagefileconfig.vbs [167219] O44 - LFC:[MD5.7515469C718985005DBEAC4245CBEFD5] - 7/3/2015 - 08:41:20 ---A- . (.Microsoft Corporation - On-Screen Keyboard.) -- C:\WINDOWS\system32\osk.exe [215552] O44 - LFC:[MD5.8D17C45EDA7D93ACC24CA52124BCBB69] - 7/3/2015 - 08:41:20 ---A- . (.Microsoft Corporation - Peer-to-Peer Graphing.) -- C:\WINDOWS\system32\p2pgraph.dll [313856] O44 - LFC:[MD5.937A02981F11B2CE96B1D493C95AED2B] - 7/3/2015 - 08:41:20 ---A- . (.Microsoft Corporation - Peer-to-Peer Group Authentication Service.) -- C:\WINDOWS\system32\p2pgasvc.dll [105472] O44 - LFC:[MD5.9185E1E605B290E07DE74C4462E5645F] - 7/3/2015 - 08:41:20 ---A- . (.Microsoft Corporation - Peer-to-Peer Grouping.) -- C:\WINDOWS\system32\p2p.dll [153600] O44 - LFC:[MD5.3A0A755505BCCDBCC5F4C41A3CD1A0A3] - 7/3/2015 - 08:41:20 ---A- . (.Microsoft Corporation - Peer-to-Peer NetSh Helper.) -- C:\WINDOWS\system32\p2pnetsh.dll [115712] O44 - LFC:[MD5.4A1035CB8F0D57BE41873B5183D96CF4] - 7/3/2015 - 08:41:20 ---A- . (.Microsoft Corporation - Peer-to-Peer Services.) -- C:\WINDOWS\system32\p2psvc.dll [554496] O44 - LFC:[MD5.1F82BA9A2B2E6C8F62AD6EFB08D5DC2C] - 7/3/2015 - 08:41:20 ---A- . (.Microsoft Corporation - Uninstall Interface.) -- C:\WINDOWS\system32\osuninst.dll [67584] O44 - LFC:[MD5.9EB34E0554A1D69D623F355D6ABD65B9] - 7/3/2015 - 08:41:20 ---A- . (.Microsoft Corporation - Windows Packager application file.) -- C:\WINDOWS\system32\packager.exe [60416] O44 - LFC:[MD5.07C923FC5DC711D03E91D73684C4BD93] - 7/3/2015 - 08:41:20 ---A- . (.Microsoft Corporation - Windows Uninstall Utility.) -- C:\WINDOWS\system32\osuninst.exe [40448] O44 - LFC:[MD5.1CAD39337202BA05BA929A44CA585A6A] - 7/3/2015 - 08:41:22 ---A- . (.Microsoft Corporation - Auto Enrollment DLL.) -- C:\WINDOWS\system32\pautoenr.dll [67584] O44 - LFC:[MD5.CC6D4FBE5E52819E3E30F0ED0F31A4FC] - 7/3/2015 - 08:41:22 ---A- . (.Microsoft Corporation - PANOSE(tm) Font Mapper.) -- C:\WINDOWS\system32\panmap.dll [10240] O44 - LFC:[MD5.BEB3BA25197665D82EC7065B724171C6] - 7/3/2015 - 08:41:22 ---A- . (.Microsoft Corporation - Partition Manager.) -- C:\WINDOWS\system32\Drivers\partmgr.sys [19712] O44 - LFC:[MD5.52E430CAFC7AD202F9F0A31EAECC766D] - 7/3/2015 - 08:41:22 ---A- . (.Microsoft Corporation - TCP/IP PathPing Command.) -- C:\WINDOWS\system32\pathping.exe [21504] O44 - LFC:[MD5.70E98B3FD8E963A6A46A2E6247E0BEA1] - 7/3/2015 - 08:41:22 ---A- . (.Microsoft Corporation - VDM Parallel Driver.) -- C:\WINDOWS\system32\Drivers\parvdm.sys [6784] O44 - LFC:[MD5.A029A434A3035429628CA35102FFB907] - 7/3/2015 - 08:41:24 ---A- . (...) -- C:\WINDOWS\system32\pcl.sep [114] O44 - LFC:[MD5.A219903CCF74233761D92BEF471A07B1] - 7/3/2015 - 08:41:24 ---A- . (.Microsoft Corporation - NT Plug and Play PCI Enumerator.) -- C:\WINDOWS\system32\Drivers\pci.sys [68224] O44 - LFC:[MD5.52E60F29221D0D1AC16737E8DBF7C3E9] - 7/3/2015 - 08:41:24 ---A- . (.Microsoft Corporation - PCI IDE Bus Driver Extension.) -- C:\WINDOWS\system32\Drivers\pciidex.sys [24960] O44 - LFC:[MD5.9E89EF60E9EE05E3F2EEF2DA7397F1C1] - 7/3/2015 - 08:41:24 ---A- . (.Microsoft Corporation - PCMCIA Bus Driver.) -- C:\WINDOWS\system32\Drivers\pcmcia.sys [120192] O44 - LFC:[MD5.6C42A39DE143DC93B50B5316A07026F8] - 7/3/2015 - 08:41:24 ---A- . (.Microsoft Corporation - Pentium Floating Point Divide Error Utility.) -- C:\WINDOWS\system32\pentnt.exe [15360] O44 - LFC:[MD5.054BD21220B8A99B7E8F32B2FBCBDFDB] - 7/3/2015 - 08:41:24 ---A- . (.Microsoft Corporation - Windows Performance Data Helper DLL.) -- C:\WINDOWS\system32\pdh.dll [284160] O44 - LFC:[MD5.3DB1150555EB9AFAC9B15919A3387689] - 7/3/2015 - 08:41:26 ---A- . (...) -- C:\WINDOWS\system32\perfci.h [427] O44 - LFC:[MD5.4B2463A8E911B278401C8F0EA1CEC53F] - 7/3/2015 - 08:41:26 ---A- . (...) -- C:\WINDOWS\system32\perfci.ini [2891] O44 - LFC:[MD5.ECA2A3B283482FB78B446902F0BBA7DC] - 7/3/2015 - 08:41:26 ---A- . (...) -- C:\WINDOWS\system32\perfd009.dat [28626] O44 - LFC:[MD5.AADCE464ACAC4C193EFF809913995856] - 7/3/2015 - 08:41:26 ---A- . (...) -- C:\WINDOWS\system32\perffilt.h [140] O44 - LFC:[MD5.067B180FD07C8484DEAF0D2D06574390] - 7/3/2015 - 08:41:26 ---A- . (...) -- C:\WINDOWS\system32\perffilt.ini [1152] O44 - LFC:[MD5.7796CCDEE5911408F15092CF3C3A563C] - 7/3/2015 - 08:41:26 ---A- . (...) -- C:\WINDOWS\system32\perfi009.dat [272128] O44 - LFC:[MD5.525EF84F0AF3E892F02289A53048DFEC] - 7/3/2015 - 08:41:26 ---A- . (...) -- C:\WINDOWS\system32\perfwci.h [435] O44 - LFC:[MD5.AF81CA46480759D4D55EB2621F592FF9] - 7/3/2015 - 08:41:26 ---A- . (...) -- C:\WINDOWS\system32\perfwci.ini [2732] O44 - LFC:[MD5.03F46B4C5C39C956C15D4838D5743A39] - 7/3/2015 - 08:41:26 ---A- . (.Microsoft Corporation - Client Service for Netware Counters.) -- C:\WINDOWS\system32\perfnw.dll [5632] O44 - LFC:[MD5.DBE2B62353660ECCA0D75EA307A717E9] - 7/3/2015 - 08:41:26 ---A- . (.Microsoft Corporation - Performance Counters.) -- C:\WINDOWS\system32\perfctrs.dll [39936] O44 - LFC:[MD5.EBBCE3D0D19127579C9ABBDFE7874A36] - 7/3/2015 - 08:41:26 ---A- . (.Microsoft Corporation - Performance Monitor Command Line Shell.) -- C:\WINDOWS\system32\perfmon.exe [15872] O44 - LFC:[MD5.7EFD2114EAD1AC72342610D7192BFB32] - 7/3/2015 - 08:41:26 ---A- . (.Microsoft Corporation - Windows 2000 Terminal Services Performance.) -- C:\WINDOWS\system32\perfts.dll [12288] O44 - LFC:[MD5.ABFB673B24A9B3287761D497529FB5B9] - 7/3/2015 - 08:41:26 ---A- . (.Microsoft Corporation - Windows Disk Performance Objects DLL.) -- C:\WINDOWS\system32\perfdisk.dll [26624] O44 - LFC:[MD5.913AF88B0291D7D3A0FDC92F5E1CC7D7] - 7/3/2015 - 08:41:26 ---A- . (.Microsoft Corporation - Windows Network Service Performance Objects.) -- C:\WINDOWS\system32\perfnet.dll [17920] O44 - LFC:[MD5.ACDAFCD14EC0ECE89198503746A5C147] - 7/3/2015 - 08:41:26 ---A- . (.Microsoft Corporation - Windows System Performance Objects DLL.) -- C:\WINDOWS\system32\perfos.dll [25088] O44 - LFC:[MD5.1793CC660605F63B14FB96C7707F75BA] - 7/3/2015 - 08:41:26 ---A- . (.Microsoft Corporation - Windows System Process Performance Objects.) -- C:\WINDOWS\system32\perfproc.dll [34816] O44 - LFC:[MD5.369CD2CB36F9E33E8B3BA234C0BDB502] - 7/3/2015 - 08:41:26 R---- . (...) -- C:\WINDOWS\system32\perfmon.msc [58273] O44 - LFC:[MD5.FB30009167CEE7350030E444042B73E5] - 7/3/2015 - 08:41:28 ---A- . (...) -- C:\WINDOWS\system32\pid.inf [974] O44 - LFC:[MD5.5A0BCBF2A6A14396E800FF0A57AE5968] - 7/3/2015 - 08:41:28 ---A- . (.Microsoft Corporation - Photo Printing Wizard.) -- C:\WINDOWS\system32\photowiz.dll [176128] O44 - LFC:[MD5.0BEFC40200EDAEC3A9D0FB072013DA6D] - 7/3/2015 - 08:41:28 ---A- . (.Microsoft Corporation - PicClip.) -- C:\WINDOWS\system32\picclp32.ocx [100160] O44 - LFC:[MD5.3A4AE76165216890ED2F96FEE86AB7D2] - 7/3/2015 - 08:41:28 ---A- . (.Microsoft Corporation - Pid3.0 generation.) -- C:\WINDOWS\system32\pidgen.dll [24064] O44 - LFC:[MD5.66CDF02D86C9F0B4300EE981A614D296] - 7/3/2015 - 08:41:28 ---A- . (.Microsoft Corporation - TCP/IP Ping Command.) -- C:\WINDOWS\system32\ping.exe [17920] O44 - LFC:[MD5.7BFEBDF2F50A6A0A576A9DE171538086] - 7/3/2015 - 08:41:28 ---A- . (.Microsoft Corporation - Windows NT PIF Manager Icon Resources Libra.) -- C:\WINDOWS\system32\pifmgr.dll [35328] O44 - LFC:[MD5.AE930E8BFEDD9AA50213D7DB0C95C345] - 7/3/2015 - 08:41:30 ---A- . (.Microsoft Corporation - Effects Control Panel extension.) -- C:\WINDOWS\system32\plustab.dll [30720] O44 - LFC:[MD5.E5FA1B044DAC5F6F600A1742D73F6936] - 7/3/2015 - 08:41:30 ---A- . (.Microsoft Corporation - IE PNG plugin image decoder.) -- C:\WINDOWS\system32\pngfilt.dll [46592] O44 - LFC:[MD5.DE973CC0AF24F1D24B5470E111BCE291] - 7/3/2015 - 08:41:30 ---A- . (.Microsoft Corporation - IPv6 Ping Command.) -- C:\WINDOWS\system32\ping6.exe [33280] O44 - LFC:[MD5.57F8A50513E43AAF6A7B23389E389BBC] - 7/3/2015 - 08:41:30 ---A- . (.Microsoft Corporation - Microsoft LAN Manager 2.1 Network Dynamic L.) -- C:\WINDOWS\system32\pmspl.dll [46592] O44 - LFC:[MD5.BA71647BD0BF68A3A127E061FA816E9B] - 7/3/2015 - 08:41:30 ---A- . (.Microsoft Corporation - Photo Metadata Handler.) -- C:\WINDOWS\system32\photometadatahandler.dll [412160] O44 - LFC:[MD5.12E483D58BC9242543FA86E1591A1D4C] - 7/3/2015 - 08:41:30 ---A- . (.Microsoft Corporation - Pin Tool Application.) -- C:\WINDOWS\system32\pintool.exe [84480] O44 - LFC:[MD5.AF1449AC1D79D37C7026C1D8912DDA8E] - 7/3/2015 - 08:41:32 ---A- . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\WINDOWS\system32\pnrpnsp.dll [58880] O44 - LFC:[MD5.BFA8FFFA7716FC9962C007A9D92F19A3] - 7/3/2015 - 08:41:32 ---A- . (.Microsoft Corporation - Policy Storage dll.) -- C:\WINDOWS\system32\polstore.dll [105472] O44 - LFC:[MD5.E49F2B510A4309DD3FCB437C5B8024B2] - 7/3/2015 - 08:41:32 ---A- . (.Microsoft Corporation - Power Management Configuration Control Pane.) -- C:\WINDOWS\system32\powercfg.cpl [114688] O44 - LFC:[MD5.50A166237A0FA771261275A405646CC0] - 7/3/2015 - 08:41:32 ---A- . (.Microsoft Corporation - Power Profile Helper DLL.) -- C:\WINDOWS\system32\powrprof.dll [17408] O44 - LFC:[MD5.8EC667F737001EEA1651A8A9D8F5E11D] - 7/3/2015 - 08:41:32 ---A- . (.Microsoft Corporation - Power Settings Command-Line Tool.) -- C:\WINDOWS\system32\powercfg.exe [49152] O44 - LFC:[MD5.478A1DAC75FE6C1BFCD873A4D212401A] - 7/3/2015 - 08:41:34 ---A- . (...) -- C:\WINDOWS\system32\prncnfg.vbs [35755] O44 - LFC:[MD5.5E1178ECAAC473B2E50F3D6F09794D62] - 7/3/2015 - 08:41:34 ---A- . (...) -- C:\WINDOWS\system32\prndrvr.vbs [25415] O44 - LFC:[MD5.CDCAA536A14C6564F1EFD304DCBA773F] - 7/3/2015 - 08:41:34 ---A- . (...) -- C:\WINDOWS\system32\prnjobs.vbs [21527] O44 - LFC:[MD5.4460B82D83B9EC9E47489B26CA4E80C1] - 7/3/2015 - 08:41:34 ---A- . (...) -- C:\WINDOWS\system32\prnmngr.vbs [32546] O44 - LFC:[MD5.55EB62F65989F8807D4E6489B8EABA95] - 7/3/2015 - 08:41:34 ---A- . (...) -- C:\WINDOWS\system32\prnport.vbs [29454] O44 - LFC:[MD5.5CED90627A04EC02F5023816CDBB69BA] - 7/3/2015 - 08:41:34 ---A- . (...) -- C:\WINDOWS\system32\prnqctl.vbs [15860] O44 - LFC:[MD5.4E32B83B472E4A922B6B4C3C20FF780B] - 7/3/2015 - 08:41:34 ---A- . (.Microsoft Corporation - Perflib Event Messages.) -- C:\WINDOWS\system32\prflbmsg.dll [16384] O44 - LFC:[MD5.B2CF9F1F606DEC23F70A40B01DF3C396] - 7/3/2015 - 08:41:34 ---A- . (.Microsoft Corporation - Print UI DLL.) -- C:\WINDOWS\system32\printui.dll [560640] O44 - LFC:[MD5.76B96ED5304319F208515AA3362F623F] - 7/3/2015 - 08:41:34 ---A- . (.Microsoft Corporation - Print Utility.) -- C:\WINDOWS\system32\print.exe [9216] O44 - LFC:[MD5.8004F1C84488D73BD5C118F777A17F40] - 7/3/2015 - 08:41:38 ---A- . (...) -- C:\WINDOWS\system32\prodspec.ini [343] O44 - LFC:[MD5.CF645DD270F3A7DBA0AB0B282FFA4526] - 7/3/2015 - 08:41:38 ---A- . (.Intel Corporation - Intel Procedural Textures.) -- C:\WINDOWS\system32\proctexe.ocx [81920] O44 - LFC:[MD5.B703072AF60373AEBC8F0BA1EA211F5E] - 7/3/2015 - 08:41:38 ---A- . (.Microsoft Corporation - Program Manager.) -- C:\WINDOWS\system32\progman.exe [109568] O44 - LFC:[MD5.FCFA1C55971CC229D353B3A15ACCD995] - 7/3/2015 - 08:41:38 ---A- . (.Microsoft Corporation - Userenv.) -- C:\WINDOWS\system32\profmap.dll [27648] O44 - LFC:[MD5.4E173B55801B28447BFC3C4FDA13FCCA] - 7/3/2015 - 08:41:40 ---A- . (...) -- C:\WINDOWS\system32\pschdcnt.h [3010] O44 - LFC:[MD5.F779197391BC2A2F3E9CC4D7E5628932] - 7/3/2015 - 08:41:40 ---A- . (...) -- C:\WINDOWS\system32\pschdprf.ini [6877] O44 - LFC:[MD5.C09741B9886EF0D15EC3B1443352FB62] - 7/3/2015 - 08:41:40 ---A- . (...) -- C:\WINDOWS\system32\pscript.sep [51] O44 - LFC:[MD5.CDF815D1673A0A030D36A39E98CC00BD] - 7/3/2015 - 08:41:40 ---A- . (...) -- C:\WINDOWS\system32\pubprn.vbs [3708] O44 - LFC:[MD5.9CE00002EEC0E03B6B910A5BFAAD59A4] - 7/3/2015 - 08:41:40 ---A- . (.Microsoft Corporation - DCOM Proxy for NPPAgent Object.) -- C:\WINDOWS\system32\psnppagn.dll [8192] O44 - LFC:[MD5.D8E11D311785F89F1D70A28B0E879127] - 7/3/2015 - 08:41:40 ---A- . (.Microsoft Corporation - MS QoS Packet Scheduler.) -- C:\WINDOWS\system32\Drivers\psched.sys [70272] O44 - LFC:[MD5.B4459D13473D07FCB43365C02732DE16] - 7/3/2015 - 08:41:40 ---A- . (.Microsoft Corporation - Microsoft® Windows(TM) PSched Performance M.) -- C:\WINDOWS\system32\pschdprf.dll [10752] O44 - LFC:[MD5.10DB9944615AF1C63EF7F5511C0ACEC4] - 7/3/2015 - 08:41:40 ---A- . (.Microsoft Corporation - ProQuota.) -- C:\WINDOWS\system32\proquota.exe [50688] O44 - LFC:[MD5.9CFCB3CA3D83B4EAA133F0644A2C6F31] - 7/3/2015 - 08:41:40 ---A- . (.Microsoft Corporation - Process Status Helper.) -- C:\WINDOWS\system32\psapi.dll [23040] O44 - LFC:[MD5.A14D324C50EB71FB480DDD60481D0C04] - 7/3/2015 - 08:41:40 ---A- . (.Microsoft Corporation - Protected Storage COM interfaces.) -- C:\WINDOWS\system32\pstorec.dll [43520] O44 - LFC:[MD5.9C300A0CA0A6CBD50D22B3D725EDEA30] - 7/3/2015 - 08:41:40 ---A- . (.Microsoft Corporation - Protected Storage default provider.) -- C:\WINDOWS\system32\psbase.dll [97280] O44 - LFC:[MD5.853D0D0C6F02D7BFDF1CF99DD7553732] - 7/3/2015 - 08:41:40 ---A- . (.Microsoft Corporation - Protected storage server.) -- C:\WINDOWS\system32\pstorsvc.dll [34304] O44 - LFC:[MD5.BADD8E359595F3A646E944757426D919] - 7/3/2015 - 08:41:40 ---A- . (.Microsoft Corporation - Proxy Config Tool for Windows HTTP Services.) -- C:\WINDOWS\system32\proxycfg.exe [9216] O44 - LFC:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 7/3/2015 - 08:41:40 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Lib.) -- C:\WINDOWS\system32\Drivers\ptilink.sys [17792] O44 - LFC:[MD5.54B0324241BBF3642159918F9A4F16FB] - 7/3/2015 - 08:41:42 ---A- . (...) -- C:\WINDOWS\system32\qcap.dll [192512] O44 - LFC:[MD5.652EFA19CA7EF9ABD4FD68E89A6906C7] - 7/3/2015 - 08:41:42 ---A- . (...) -- C:\WINDOWS\system32\qdv.dll [279040] O44 - LFC:[MD5.5DE54E97A890596043AB5B6388733C18] - 7/3/2015 - 08:41:42 ---A- . (...) -- C:\WINDOWS\system32\qdvd.dll [386048] O44 - LFC:[MD5.04ECFF1368C10CAF7197D9845C1EE453] - 7/3/2015 - 08:41:42 ---A- . (...) -- C:\WINDOWS\system32\qedit.dll [562688] O44 - LFC:[MD5.922DF04AC61B975D90706F7724B03B45] - 7/3/2015 - 08:41:42 ---A- . (...) -- C:\WINDOWS\system32\qedwipes.dll [733696] O44 - LFC:[MD5.F90D3E24EC230E25FAC70D1823164D17] - 7/3/2015 - 08:41:42 ---A- . (.Microsoft Corporation - DirectShow ASF Support.) -- C:\WINDOWS\system32\qasf.dll [237568] O44 - LFC:[MD5.10EB039A0FADC619792E19AF530A4C50] - 7/3/2015 - 08:41:42 ---A- . (.Microsoft Corporation - Microsoft® QFE Checker Tool.) -- C:\WINDOWS\system32\qfecheck.exe [36864] O44 - LFC:[MD5.FB8E05CEDB3EF65C80FEBD2698C80998] - 7/3/2015 - 08:41:42 ---A- . (.Microsoft Corporation - Quarantine Agent Proxy.) -- C:\WINDOWS\system32\qagent.dll [150528] O44 - LFC:[MD5.0102140028FAD045756796E1C685D695] - 7/3/2015 - 08:41:42 ---A- . (.Microsoft Corporation - Quarantine Agent Service Run-Time.) -- C:\WINDOWS\system32\qagentrt.dll [291328] O44 - LFC:[MD5.492D127C533F328380F0BD1C2C59B44B] - 7/3/2015 - 08:41:42 ---A- . (.Microsoft Corporation - Quarantine Client WMI Provider.) -- C:\WINDOWS\system32\qcliprov.dll [62464] O44 - LFC:[MD5.B9C876AF88A150D80882EFCF6299917E] - 7/3/2015 - 08:41:44 ---A- . (...) -- C:\WINDOWS\system32\quartz.dll [1292288] O44 - LFC:[MD5.EC636C470D3D795AEDF12DB886B8AC24] - 7/3/2015 - 08:41:44 ---A- . (.Microsoft Corporation - Content Index Utility DLL.) -- C:\WINDOWS\system32\query.dll [1435648] O44 - LFC:[MD5.FDAF71CA6BD75EF52FA3B8D4B72EAB62] - 7/3/2015 - 08:41:44 ---A- . (.Microsoft Corporation - Microsoft Windows GetQosByName Service Prov.) -- C:\WINDOWS\system32\qosname.dll [8192] O44 - LFC:[MD5.8AE93AACC648921BAACB8602991AC4B3] - 7/3/2015 - 08:41:44 ---A- . (.Microsoft Corporation - Quarantine Utilities.) -- C:\WINDOWS\system32\qutil.dll [76800] O44 - LFC:[MD5.51064C1F2D0E493121CFD2A78A1FBC3B] - 7/3/2015 - 08:41:46 ---A- . (...) -- C:\WINDOWS\system32\rasctrnm.h [1818] O44 - LFC:[MD5.646D5B7CDAE916331E1D4E481B08C22D] - 7/3/2015 - 08:41:46 ---A- . (...) -- C:\WINDOWS\system32\rasctrs.ini [3458] O44 - LFC:[MD5.FE0D99D6F31E4FAD8159F690D68DED9C] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - RAS Automatic Connection Driver.) -- C:\WINDOWS\system32\Drivers\rasacd.sys [8832] O44 - LFC:[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\system32\Drivers\rasl2tp.sys [51328] O44 - LFC:[MD5.A704B3608EBF79E190E62549E0A2CCDE] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - RAS Monitor DLL.) -- C:\WINDOWS\system32\rasmontr.dll [143360] O44 - LFC:[MD5.92C4F48B62B0B876194584C3FF09CCB6] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - Remote Access API.) -- C:\WINDOWS\system32\rasapi32.dll [237056] O44 - LFC:[MD5.6F9BEF24C578D5D6740E080BEDD6A448] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - Remote Access AutoDial Helper.) -- C:\WINDOWS\system32\rasadhlp.dll [7680] O44 - LFC:[MD5.AD188BE7BDF94E8DF4CA0A55C00A5073] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576] O44 - LFC:[MD5.C1851546274FE7272509FCA81A63F61E] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - Remote Access Client Side Command Line Dial.) -- C:\WINDOWS\system32\rasdial.exe [11264] O44 - LFC:[MD5.401A8C0BE0BAA7D7A470F0942244152D] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - Remote Access Common Dialog API.) -- C:\WINDOWS\system32\rasdlg.dll [658432] O44 - LFC:[MD5.4DEF926F6A0545AE486A03C84F2EE482] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasman.dll [61440] O44 - LFC:[MD5.76A9A3CBEADD68CC57CDA5E1D7448235] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368] O44 - LFC:[MD5.783DC8E5111D28E7EAB4A56795F92476] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - Remote Access Device DLL for modems, PADs a.) -- C:\WINDOWS\system32\rasmxs.dll [22528] O44 - LFC:[MD5.CE6C2F08B259620D5DD87D11FD4B17A4] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - Remote Access Dialer.) -- C:\WINDOWS\system32\rasautou.exe [11776] O44 - LFC:[MD5.AFFF5C71FB6D60F8A0486C5D5118C24D] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - Remote Access PPP CHAP.) -- C:\WINDOWS\system32\raschap.dll [79872] O44 - LFC:[MD5.D0545A010ED2259A740C8414899A938F] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - Remote Access PPP.) -- C:\WINDOWS\system32\rasppp.dll [210944] O44 - LFC:[MD5.818D262CFDC84CC0BF8244EFDF4D9252] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - Remote Access Phonebook.) -- C:\WINDOWS\system32\rasphone.exe [56832] O44 - LFC:[MD5.B0B0D7905AC71BC278F17F455E182611] - 7/3/2015 - 08:41:46 ---A- . (.Microsoft Corporation - Windows NT Remote Access Perfmon Counter dl.) -- C:\WINDOWS\system32\rasctrs.dll [11776] O44 - LFC:[MD5.DB6D23B99EE69EBE2A20B1EAAFF0C998] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - Microsoft Remote Assistance.) -- C:\WINDOWS\system32\rcbdyctl.dll [102400] O44 - LFC:[MD5.FC1F164B1DF33802CC7DC15203C043F4] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - Microsoft Remote Assistance.) -- C:\WINDOWS\system32\rcimlby.exe [35840] O44 - LFC:[MD5.FDBB1D60066FCFBB7452FD8F9829B242] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - PTI DirectParallel(R) mini-port/call-manage.) -- C:\WINDOWS\system32\Drivers\raspti.sys [16512] O44 - LFC:[MD5.EFEEC01B1D3CF84F16DDD24D9D9D8F99] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) -- C:\WINDOWS\system32\Drivers\raspptp.sys [48384] O44 - LFC:[MD5.5BC962F2654137C9909C3D4603587DEE] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - RAS PPPoE mini-port/call-manager driver.) -- C:\WINDOWS\system32\Drivers\raspppoe.sys [41472] O44 - LFC:[MD5.A655C88AA555BB8EF8957BD29408827F] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - RAS Quarantine Enforcement Client.) -- C:\WINDOWS\system32\rasqec.dll [61952] O44 - LFC:[MD5.A3C0A42C88C7C1E3C65AB2DA3A5E6B0C] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - RDP Display Driver.) -- C:\WINDOWS\system32\rdpdd.dll [92424] O44 - LFC:[MD5.4912D5B403614CE99C28420F75353332] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys [4224] O44 - LFC:[MD5.01524CD237223B18ADBB48F70083F101] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - Raw WAN Transport.) -- C:\WINDOWS\system32\Drivers\rawwan.sys [34432] O44 - LFC:[MD5.77050C6615F6EB5402F832B27FD695E0] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) -- C:\WINDOWS\system32\Drivers\rdbss.sys [174848] O44 - LFC:[MD5.B8AE25C09B8C26FF72820430294E4EF6] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - Remote Access Admin APIs dll.) -- C:\WINDOWS\system32\rassapi.dll [16384] O44 - LFC:[MD5.BEA61A1493663CF74AEA84243DFF7F9B] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - Remote Access Media DLL for COM ports.) -- C:\WINDOWS\system32\rasser.dll [12800] O44 - LFC:[MD5.C84B060A6181A2E70DE0A77142DF975E] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - Remote Access PPP EAP-TLS.) -- C:\WINDOWS\system32\rastls.dll [150016] O44 - LFC:[MD5.5DFECCC58C3010CDEB96F92DAB7EEB36] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - Remote Access Service NT RADIUS client modu.) -- C:\WINDOWS\system32\rasrad.dll [23552] O44 - LFC:[MD5.5F7692CEC90E2E9AA32CD58321E234B8] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - Remote Access TAPI Compliance Layer.) -- C:\WINDOWS\system32\rastapi.dll [58368] O44 - LFC:[MD5.B6BC80A8D51B1BEBF0C58BDF493E7675] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - RemoteApp Logon Application.) -- C:\WINDOWS\system32\rdpinit.exe [158720] O44 - LFC:[MD5.323DA0DE3B5F441622469D29F1C684B3] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - RemoteApp Shell.) -- C:\WINDOWS\system32\rdpshell.exe [243200] O44 - LFC:[MD5.1ED259755AE18F8C0F50E82B5F504B64] - 7/3/2015 - 08:41:48 ---A- . (.Microsoft Corporation - TCP/IP Remote Copy Command.) -- C:\WINDOWS\system32\rcp.exe [21504] O44 - LFC:[MD5.058710B720282CA82B909912D3EF28DB] - 7/3/2015 - 08:41:50 ----- . (.Microsoft Corporation - Registry Editor.) -- C:\WINDOWS\regedit.exe [146432] O44 - LFC:[MD5.D6AEA0E2D8C85086A9AA5BE7E7CB167A] - 7/3/2015 - 08:41:50 ---A- . (...) -- C:\WINDOWS\system32\redir.exe [3338] O44 - LFC:[MD5.E4C7A808ED068AA8946182947C363EFF] - 7/3/2015 - 08:41:50 ---A- . (.Microsoft Corporation - Recover Files Utility.) -- C:\WINDOWS\system32\recover.exe [7168] O44 - LFC:[MD5.220F30E5AA93D2B782AD4475E369873D] - 7/3/2015 - 08:41:50 ---A- . (.Microsoft Corporation - Registry Configuration APIs.) -- C:\WINDOWS\system32\regapi.dll [49152] O44 - LFC:[MD5.C65122B94F7C82065FE86C32CF271F6D] - 7/3/2015 - 08:41:50 ---A- . (.Microsoft Corporation - Registry Console Tool.) -- C:\WINDOWS\system32\reg.exe [50176] O44 - LFC:[MD5.8B0DC42333E6F52D40F4AE4FFB72C056] - 7/3/2015 - 08:41:52 ---A- . (.Microsoft - RegWizCtrl Module.) -- C:\WINDOWS\system32\regwizc.dll [397824] O44 - LFC:[MD5.2D86B1565FF0847BDCBEFBB31B9A3A9E] - 7/3/2015 - 08:41:52 ---A- . (.Microsoft - RegWizExe.) -- C:\WINDOWS\system32\regwiz.exe [4608] O44 - LFC:[MD5.F51EBB6FC536A6B2D588FD668D3A8249] - 7/3/2015 - 08:41:52 ---A- . (.Microsoft Corporation - Microsoft Cluster Resource Utility DLL.) -- C:\WINDOWS\system32\resutils.dll [58880] O44 - LFC:[MD5.EA16139AB2419133EB5F7D3405198105] - 7/3/2015 - 08:41:52 ---A- . (.Microsoft Corporation - Microsoft Rendezvous Control.) -- C:\WINDOWS\system32\rend.dll [107520] O44 - LFC:[MD5.FBDB9D0935B9907B809B381FDDF1627F] - 7/3/2015 - 08:41:52 ---A- . (.Microsoft Corporation - Microsoft(C) Register Server.) -- C:\WINDOWS\system32\regsvr32.exe [11776] O44 - LFC:[MD5.D2285A408D34161A09B8445498C5C64E] - 7/3/2015 - 08:41:52 ---A- . (.Microsoft Corporation - Microsoft® Windows(TM) Remote Service Provi.) -- C:\WINDOWS\system32\remotesp.tsp [76800] O44 - LFC:[MD5.9120AB7AFB37D9C8C481D9AF6E18B0D7] - 7/3/2015 - 08:41:52 ---A- . (.Microsoft Corporation - Performance Relogging Utility.) -- C:\WINDOWS\system32\relog.exe [32768] O44 - LFC:[MD5.F85D7108339843CAA94ABB7DE8D41C9D] - 7/3/2015 - 08:41:52 ---A- . (.Microsoft Corporation - Registry Editor Utility.) -- C:\WINDOWS\system32\regedt32.exe [3584] O44 - LFC:[MD5.5B19B557B0C188210A56A6B699D90B8F] - 7/3/2015 - 08:41:52 ---A- . (.Microsoft Corporation - Remote Registry Service.) -- C:\WINDOWS\system32\regsvc.dll [59904] O44 - LFC:[MD5.CB7001845011F4E4DE909136A59BB48C] - 7/3/2015 - 08:41:52 ---A- . (.Microsoft Corporation - Replace File Utility.) -- C:\WINDOWS\system32\replace.exe [12800] O44 - LFC:[MD5.CED05751354AA6587D008AE53C92B7C0] - 7/3/2015 - 08:41:52 ---A- . (.Microsoft Corporation - TCP/IP Remote Exec Command.) -- C:\WINDOWS\system32\rexec.exe [13824] O44 - LFC:[MD5.21F412DBFFFE34D39287E13674DB04F1] - 7/3/2015 - 08:41:54 ---A- . (.Microsoft Corporation - Reliable Multicast Transport.) -- C:\WINDOWS\system32\Drivers\RMCast.sys [203776] O44 - LFC:[MD5.601844CBCF617FF8C868130CA5B2039D] - 7/3/2015 - 08:41:54 ---A- . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\WINDOWS\system32\Drivers\rndismp.sys [30592] O44 - LFC:[MD5.4D6C16BA8BEE975E7518DDD2B3C6C66D] - 7/3/2015 - 08:41:54 ---A- . (.Microsoft Corporation - Rich Text Edit Control, v3.0.) -- C:\WINDOWS\system32\riched20.dll [433664] O44 - LFC:[MD5.4231528316B2ACB6D40E797F55CCC1FB] - 7/3/2015 - 08:41:54 ---A- . (.Microsoft Corporation - RichTx32.OCX.) -- C:\WINDOWS\system32\richtx32.ocx [218432] O44 - LFC:[MD5.C5D683D7A5ECE0C47BFFCC29454018CC] - 7/3/2015 - 08:41:54 ---A- . (.Microsoft Corporation - Windows Rights Management Services Activati.) -- C:\WINDOWS\system32\RmActivate.exe [567176] O44 - LFC:[MD5.8B1B563FD19FCD9FB085730CF6A27544] - 7/3/2015 - 08:41:54 ---A- . (.Microsoft Corporation - Windows Rights Management Services Activati.) -- C:\WINDOWS\system32\RmActivate_isv.exe [575880] O44 - LFC:[MD5.90769F8AA54F638CD9AD2BD2B61F7ED6] - 7/3/2015 - 08:41:54 ---A- . (.Microsoft Corporation - Windows Rights Management Services Activati.) -- C:\WINDOWS\system32\RmActivate_ssp.exe [362888] O44 - LFC:[MD5.1DAF7E5974B1C77B866F3FF0AF8673FC] - 7/3/2015 - 08:41:54 ---A- . (.Microsoft Corporation - Windows Rights Management Services Activati.) -- C:\WINDOWS\system32\RmActivate_ssp_isv.exe [361872] O44 - LFC:[MD5.9AEA4DD54F59A0DC59AC2F1DC4E087D7] - 7/3/2015 - 08:41:54 ---A- . (.Microsoft Corporation - Windows Socket2 NameSpace DLL.) -- C:\WINDOWS\system32\rnr20.dll [3072] O44 - LFC:[MD5.D4931277DF5393E84A48B27DF40914E3] - 7/3/2015 - 08:41:54 ---A- . (.Microsoft Corporation - Wrapper Dll for Richedit 1.0.) -- C:\WINDOWS\system32\riched32.dll [3584] O44 - LFC:[MD5.9222562D44021B988B9F9F62207FB6F2] - 7/3/2015 - 08:41:56 ---A- . (.Microsoft Corporation - Distributed COM Services.) -- C:\WINDOWS\system32\rpcss.dll [401408] O44 - LFC:[MD5.D8B0B4ADE32574B2D9C5CC34DC0DBBE7] - 7/3/2015 - 08:41:56 ---A- . (.Microsoft Corporation - Legacy Non-Pnp Modem Device Driver.) -- C:\WINDOWS\system32\Drivers\rootmdm.sys [5888] O44 - LFC:[MD5.2A4535D8989D4F9412E511DAD57A5B72] - 7/3/2015 - 08:41:56 ---A- . (.Microsoft Corporation - Microsoft Routing Table DLL.) -- C:\WINDOWS\system32\routetab.dll [6656] O44 - LFC:[MD5.D17453539D0BFD2DF8539E8B0D393684] - 7/3/2015 - 08:41:56 ---A- . (.Microsoft Corporation - Remote Procedure Call Name Service Client.) -- C:\WINDOWS\system32\rpcns4.dll [22016] O44 - LFC:[MD5.44C164B34A72F29087ECA32411F2ED44] - 7/3/2015 - 08:41:56 ---A- . (.Microsoft Corporation - Remote Procedure Call Runtime.) -- C:\WINDOWS\system32\rpcrt4.dll [591360] O44 - LFC:[MD5.1698407D6E8AE8F61B02551AD293DA47] - 7/3/2015 - 08:41:56 ---A- . (.Microsoft Corporation - Router Console Monitor.) -- C:\WINDOWS\system32\routemon.exe [25600] O44 - LFC:[MD5.67D442F0DBEE60CFB43F821B554F44F6] - 7/3/2015 - 08:41:56 ---A- . (.Microsoft Corporation - TCP/IP Route Command.) -- C:\WINDOWS\system32\route.exe [19968] O44 - LFC:[MD5.CAC196B987D19045259D276EC6913561] - 7/3/2015 - 08:41:58 ---A- . (...) -- C:\WINDOWS\system32\rsaci.rat [3167] O44 - LFC:[MD5.710FEF4FE7C5E88ACE284222DCFA1006] - 7/3/2015 - 08:41:58 ---A- . (.Microsoft Corp - Removable Storage Manager Command Line Inte.) -- C:\WINDOWS\system32\rsm.exe [49152] O44 - LFC:[MD5.99BD7085BCF2B5DBE47192E6EB1EA798] - 7/3/2015 - 08:41:58 ---A- . (.Microsoft Corporation - FSA Proxy / Stub.) -- C:\WINDOWS\system32\rsfsaps.dll [28672] O44 - LFC:[MD5.54DAE3EA34802B4ED9AE1C6B1209FA56] - 7/3/2015 - 08:41:58 ---A- . (.Microsoft Corporation - Microsoft Enhanced Cryptographic Provider.) -- C:\WINDOWS\system32\rsaenh.dll [208384] O44 - LFC:[MD5.F3F4E3E0DFA3A9D6EA3307A2741827C4] - 7/3/2015 - 08:41:58 ---A- . (.Microsoft Corporation - RSM Proxy Stub.) -- C:\WINDOWS\system32\rsmps.dll [18944] O44 - LFC:[MD5.12D50FC03BCFCCF785C6C6F650B758D5] - 7/3/2015 - 08:41:58 ---A- . (.Microsoft Corporation - Remote Storage Recall Notification.) -- C:\WINDOWS\system32\rsnotify.exe [107520] O44 - LFC:[MD5.A666CF5BD046B64C3BE0B9FE7B36A000] - 7/3/2015 - 08:41:58 ---A- . (.Microsoft Corporation - Removable Storage Sink Layer.) -- C:\WINDOWS\system32\rsmsink.exe [24576] O44 - LFC:[MD5.A176D8473DA0E7CB4E3BC73244A2DF5B] - 7/3/2015 - 08:41:58 ---A- . (.Microsoft Corporation - Removable Storage UI Layer.) -- C:\WINDOWS\system32\rsmui.exe [49152] O44 - LFC:[MD5.F99B7C7118733F1CD1713FC6A5473C1D] - 7/3/2015 - 08:41:58 ---A- . (.Microsoft Corporation - Security Shell Extension.) -- C:\WINDOWS\system32\rshx32.dll [39936] O44 - LFC:[MD5.4E04412089EB106BE2B24B74D9093DB2] - 7/3/2015 - 08:41:58 ---A- . (.Microsoft Corporation - TCP/IP Remote Shell Command.) -- C:\WINDOWS\system32\rsh.exe [14848] O44 - LFC:[MD5.104C432F0EC4EC78B8D84CC687949222] - 7/3/2015 - 08:42:00 ---A- . (...) -- C:\WINDOWS\system32\rsvp.ini [12082] O44 - LFC:[MD5.42A74887C8763DEB3EABA791C8106531] - 7/3/2015 - 08:42:00 ---A- . (...) -- C:\WINDOWS\system32\rsvpcnts.h [3178] O44 - LFC:[MD5.743D7D59767073A617B1DCC6C546F234] - 7/3/2015 - 08:42:00 ---A- . (.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) -- C:\WINDOWS\system32\Drivers\rspndr.sys [62848] O44 - LFC:[MD5.471B3F9741D762ABE75E9DEEA4787E47] - 7/3/2015 - 08:42:00 ---A- . (.Microsoft Corporation - Microsoft RSVP.) -- C:\WINDOWS\system32\rsvp.exe [132608] O44 - LFC:[MD5.D022E59E6F132660B2D7E66D41FFB341] - 7/3/2015 - 08:42:00 ---A- . (.Microsoft Corporation - Microsoft Router IPX MIB subagent.) -- C:\WINDOWS\system32\rtipxmib.dll [31744] O44 - LFC:[MD5.72451FD61DDBB0A1FB071B7C3CDE5594] - 7/3/2015 - 08:42:00 ---A- . (.Microsoft Corporation - Microsoft Windows Rsvp 1.0 Service Provider.) -- C:\WINDOWS\system32\rsvpsp.dll [92672] O44 - LFC:[MD5.F9DD799E07ED5028DB2F1FFEA72C9357] - 7/3/2015 - 08:42:00 ---A- . (.Microsoft Corporation - Microsoft® Windows(TM) RSVP Performance Mon.) -- C:\WINDOWS\system32\rsvpperf.dll [9728] O44 - LFC:[MD5.3CED2B6471EF54A7AF65B46AA81C453A] - 7/3/2015 - 08:42:00 ---A- . (.Microsoft Corporation - RSVP Messages DLL.) -- C:\WINDOWS\system32\rsvpmsg.dll [23552] O44 - LFC:[MD5.192719F2E2FA71BADF7F3B4AD9E9DCF1] - 7/3/2015 - 08:42:00 ---A- . (.Microsoft Corporation - RSoP Service Application.) -- C:\WINDOWS\system32\rsopprov.exe [62976] O44 - LFC:[MD5.B92A85618A470F4406CEE8785CE89B4F] - 7/3/2015 - 08:42:00 ---A- . (.Microsoft Corporation - Routing Table Manager.) -- C:\WINDOWS\system32\rtm.dll [98304] O44 - LFC:[MD5.876CCF164E08D6B903CD14398E056DD2] - 7/3/2015 - 08:42:00 ---A- . (.Microsoft Corporation - Routing Utilities.) -- C:\WINDOWS\system32\rtutils.dll [44032] O44 - LFC:[MD5.D69290339A5BD2AAF674EA6ABF670F6D] - 7/3/2015 - 08:42:00 ---A- . (.Microsoft Corporation - Run As Utility.) -- C:\WINDOWS\system32\runas.exe [16384] O44 - LFC:[MD5.C10F6916C61A70926ADF2365B56F2FEA] - 7/3/2015 - 08:42:00 ---A- . (.Microsoft Corporation - Run Once Wrapper.) -- C:\WINDOWS\system32\runonce.exe [14336] O44 - LFC:[MD5.037B1E7798960E0420003D05BB577EE6] - 7/3/2015 - 08:42:00 ---A- . (.Microsoft Corporation - Run a DLL as an App.) -- C:\WINDOWS\system32\rundll32.exe [33280] O44 - LFC:[MD5.60DFBC0768ACDC1E2B8C19EBF5F1157B] - 7/3/2015 - 08:42:00 ---A- . (.Microsoft Corporation - responder install Utility.) -- C:\WINDOWS\system32\rspndr.exe [10752] O44 - LFC:[MD5.7C529517565B1A0D0EED297A087AE5B5] - 7/3/2015 - 08:42:00 R---- . (...) -- C:\WINDOWS\system32\rsop.msc [44451] O44 - LFC:[MD5.F4F1A07AB05D84E300FFCF3AF55C5CA9] - 7/3/2015 - 08:42:04 ---A- . (...) -- C:\WINDOWS\system32\sbe.dll [270848] O44 - LFC:[MD5.FB6A2AD43B478FC9E306C32DF975DE50] - 7/3/2015 - 08:42:04 ---A- . (.Microsoft Corporation - A tool to aid in developing services for Wi.) -- C:\WINDOWS\system32\sc.exe [35328] O44 - LFC:[MD5.8329A39D5A402A75A74301D6A62ECDA1] - 7/3/2015 - 08:42:04 ---A- . (.Microsoft Corporation - SAM Library DLL.) -- C:\WINDOWS\system32\samlib.dll [64000] O44 - LFC:[MD5.F05B8CDB7FE0E55DCCFB1D946CE80064] - 7/3/2015 - 08:42:04 ---A- . (.Microsoft Corporation - SAM Server DLL.) -- C:\WINDOWS\system32\samsrv.dll [415744] O44 - LFC:[MD5.FF257CCCA321CD2A697BB5CA38C9EC87] - 7/3/2015 - 08:42:04 ---A- . (.Microsoft Corporation - SCardDlg - Smart Card Common Dialog.) -- C:\WINDOWS\system32\scarddlg.dll [69632] O44 - LFC:[MD5.FF3BF3DCBB9603ECFE22DEA8D6A02D78] - 7/3/2015 - 08:42:04 ---A- . (.Microsoft Corporation - Stream Buffer IO DLL.) -- C:\WINDOWS\system32\sbeio.dll [159232] O44 - LFC:[MD5.473AEFCD0D33ED3BB04FC9755AE37DBF] - 7/3/2015 - 08:42:04 ---A- . (.Microsoft Corporation - Windows NT Save Dump Utility.) -- C:\WINDOWS\system32\savedump.exe [13312] O44 - LFC:[MD5.11E41821248E9704D5F392EDA5F01572] - 7/3/2015 - 08:42:06 ---A- . (.Microsoft Corporation - Infineon SICRYPT® Base Smart Card CSP.) -- C:\WINDOWS\system32\sccbase.dll [169984] O44 - LFC:[MD5.2F43F90516ECD8AB23D64DCC9E13602B] - 7/3/2015 - 08:42:06 ---A- . (.Microsoft Corporation - Infineon SICRYPT® Smart Card Crypto Provide.) -- C:\WINDOWS\system32\sccsccp.dll [171008] O44 - LFC:[MD5.63FF9068E5BDA0BC9ECD38FBBB216E24] - 7/3/2015 - 08:42:06 ---A- . (.Microsoft Corporation - Secondary Logon Service Notification DLL.) -- C:\WINDOWS\system32\sclgntfy.dll [20480] O44 - LFC:[MD5.5DC7AF2ACB347203796DD555D50BE8C4] - 7/3/2015 - 08:42:06 ---A- . (.Microsoft Corporation - Smart Card Base Service Providers.) -- C:\WINDOWS\system32\scardssp.dll [118784] O44 - LFC:[MD5.167C199073BBD5EE64DDC70417D9EFF2] - 7/3/2015 - 08:42:06 ---A- . (.Microsoft Corporation - Smart Card Redirection for TS.) -- C:\WINDOWS\system32\scredir.dll [26624] O44 - LFC:[MD5.86D007E7A654B9A71D1D7D856B104353] - 7/3/2015 - 08:42:06 ---A- . (.Microsoft Corporation - Smart Card Resource Management Server.) -- C:\WINDOWS\system32\scardsvr.exe [95744] O44 - LFC:[MD5.4D6D7D56E5F77786FF7D890198E9D813] - 7/3/2015 - 08:42:06 ---A- . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll [153088] O44 - LFC:[MD5.A86BB5E61BF3E39B62AB4C7E7085A084] - 7/3/2015 - 08:42:06 ---A- . (.Microsoft Corporation - Windows Security Configuration Editor Clien.) -- C:\WINDOWS\system32\scecli.dll [181248] O44 - LFC:[MD5.B24A42A413E694AD73FDFB7FBD492C31] - 7/3/2015 - 08:42:06 ---A- . (.Microsoft Corporation - Windows Security Configuration Editor Engin.) -- C:\WINDOWS\system32\scesrv.dll [314880] O44 - LFC:[MD5.6CEAADB356C2A5B55F8FBC1F7A31E068] - 7/3/2015 - 08:42:07 ---A- . (.Microsoft Corporation - Secure Digital Host Controller Class Instal.) -- C:\WINDOWS\system32\sdhcinst.dll [29184] O44 - LFC:[MD5.90A3935D05B494A5A39D37E71F09A677] - 7/3/2015 - 08:42:08 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\Drivers\secdrv.sys [20480] O44 - LFC:[MD5.9DAAC1F5A12B2293F7A5C4A15D5F4E8F] - 7/3/2015 - 08:42:08 ---A- . (.Microsoft Corporation - AppFix & AppHelp Installer.) -- C:\WINDOWS\system32\sdbinst.exe [77312] O44 - LFC:[MD5.7BA27A296EE84861BFE97B96874CCAA6] - 7/3/2015 - 08:42:08 ---A- . (.Microsoft Corporation - Default Screen Saver.) -- C:\WINDOWS\system32\scrnsave.scr [9216] O44 - LFC:[MD5.8EDB46B71BF5C9847D60E3D117E19E47] - 7/3/2015 - 08:42:08 ---A- . (.Microsoft Corporation - Microsoft (R) Script Runtime.) -- C:\WINDOWS\system32\scrrun.dll [172032] O44 - LFC:[MD5.36872188E83015C162283A770ED1C96A] - 7/3/2015 - 08:42:08 ---A- . (.Microsoft Corporation - Microsoft Sdpblb.) -- C:\WINDOWS\system32\sdpblb.dll [130048] O44 - LFC:[MD5.D1A72286E21C356960ABA52393FC7EC8] - 7/3/2015 - 08:42:08 ---A- . (.Microsoft Corporation - SCSI Port Driver.) -- C:\WINDOWS\system32\Drivers\scsiport.sys [96384] O44 - LFC:[MD5.CF106F24787BA435A6BCA51A54C44193] - 7/3/2015 - 08:42:08 ---A- . (.Microsoft Corporation - Schedule Tasks.) -- C:\WINDOWS\system32\schtasks.exe [121856] O44 - LFC:[MD5.CBE612E2BB6A10E3563336191EDA1250] - 7/3/2015 - 08:42:08 ---A- . (.Microsoft Corporation - Secondary Logon Service DLL.) -- C:\WINDOWS\system32\seclogon.dll [18944] O44 - LFC:[MD5.8D04819A3CE51B9EB47E5689B44D43C4] - 7/3/2015 - 08:42:08 ---A- . (.Microsoft Corporation - SecureDigital Bus Driver.) -- C:\WINDOWS\system32\Drivers\sdbus.sys [79232] O44 - LFC:[MD5.EB166D42E4F632ECC09DF53B51ED4628] - 7/3/2015 - 08:42:08 ---A- . (.Microsoft Corporation - Windows (R) Script Component Runtime.) -- C:\WINDOWS\system32\scrobj.dll [180224] O44 - LFC:[MD5.45808E221A6A90359D44DED609A2FA0A] - 7/3/2015 - 08:42:08 ---A- . (.Microsoft Corporation - Windows Security Configuration Editor Comma.) -- C:\WINDOWS\system32\secedit.exe [18944] O44 - LFC:[MD5.796F913484A6138F540A1202057FCEFA] - 7/3/2015 - 08:42:08 ---A- . (.No owner - ScriptPW Module.) -- C:\WINDOWS\system32\scriptpw.dll [10240] O44 - LFC:[MD5.EF87B52460AADDEBACC81590A9E88678] - 7/3/2015 - 08:42:10 ---A- . (...) -- C:\WINDOWS\system32\secpol.msc [36364] O44 - LFC:[MD5.8588009E29654C772D891CD9CE983A1C] - 7/3/2015 - 08:42:10 ---A- . (...) -- C:\WINDOWS\system32\secupd.dat [4569] O44 - LFC:[MD5.D6C4FE43694B4B079516CC16F8082255] - 7/3/2015 - 08:42:10 ---A- . (...) -- C:\WINDOWS\system32\secupd.sig [7208] O44 - LFC:[MD5.3CBA2210FA39C6ED7895634842E930DD] - 7/3/2015 - 08:42:10 ---A- . (.Microsoft Corporation - SENS Connectivity API DLL.) -- C:\WINDOWS\system32\sensapi.dll [7168] O44 - LFC:[MD5.7D9E1E46E76A637DBF30E02572DF2549] - 7/3/2015 - 08:42:10 ---A- . (.Microsoft Corporation - SENS Setup/Setup Tool.) -- C:\WINDOWS\system32\senscfg.dll [13824] O44 - LFC:[MD5.0A8D7A185B60F4C38B052824B0FC51DC] - 7/3/2015 - 08:42:10 ---A- . (.Microsoft Corporation - Security Support Provider Interface.) -- C:\WINDOWS\system32\secur32.dll [56832] O44 - LFC:[MD5.8BCD11D38FCE43A519246A91CC40DE6A] - 7/3/2015 - 08:42:10 ---A- . (.Microsoft Corporation - Security Support Provider Interface.) -- C:\WINDOWS\system32\security.dll [5632] O44 - LFC:[MD5.94A6F74639A917CD16B904B6E47C7B8A] - 7/3/2015 - 08:42:10 ---A- . (.Microsoft Corporation - Send Console Message.) -- C:\WINDOWS\system32\sendcmsg.dll [29184] O44 - LFC:[MD5.94B26802AF755849AB0C4359235E881D] - 7/3/2015 - 08:42:10 ---A- . (.Microsoft Corporation - Send Mail.) -- C:\WINDOWS\system32\sendmail.dll [54784] O44 - LFC:[MD5.7FDD5D0684ECA8C1F68B4D99D124DCD0] - 7/3/2015 - 08:42:10 ---A- . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] O44 - LFC:[MD5.E70D8C0DDC39B60B6D37D39A9EF4B659] - 7/3/2015 - 08:42:10 ---A- . (.Microsoft Corporation - Windows Rights Management Desktop Security.) -- C:\WINDOWS\system32\SecProc.dll [558984] O44 - LFC:[MD5.17F6F2C615E7237AB5FAC01C7E0508DB] - 7/3/2015 - 08:42:10 ---A- . (.Microsoft Corporation - Windows Rights Management Desktop Security.) -- C:\WINDOWS\system32\SecProc_isv.dll [562064] O44 - LFC:[MD5.BA1E0505A4BE177AF160C90E542231CD] - 7/3/2015 - 08:42:10 ---A- . (.Microsoft Corporation - Windows Rights Management Services Server S.) -- C:\WINDOWS\system32\SecProc_ssp.dll [192904] O44 - LFC:[MD5.F953864E631A0D67AA9235FBD02F253C] - 7/3/2015 - 08:42:10 ---A- . (.Microsoft Corporation - Windows Rights Management Services Server S.) -- C:\WINDOWS\system32\SecProc_ssp_isv.dll [192912] O44 - LFC:[MD5.30275FC3DF5B5C2F1D2E72250B820706] - 7/3/2015 - 08:42:11 ---A- . (...) -- C:\WINDOWS\system32\setupol.exe [6144] O44 - LFC:[MD5.E8089AA2A6F7FEE89B38C1F2D77BA6C6] - 7/3/2015 - 08:42:12 ---A- . (...) -- C:\WINDOWS\system32\services.msc [33464] O44 - LFC:[MD5.CCA207A8896D4C6A0C9CE29A4AE411A7] - 7/3/2015 - 08:42:12 ---A- . (.Microsoft Corporation - Serial Device Driver.) -- C:\WINDOWS\system32\Drivers\serial.sys [64512] O44 - LFC:[MD5.0F29512CCD6BEAD730039FB4BD2C85CE] - 7/3/2015 - 08:42:12 ---A- . (.Microsoft Corporation - Serial Port Enumerator.) -- C:\WINDOWS\system32\Drivers\serenum.sys [15744] O44 - LFC:[MD5.EA298CF4B11F1249084D4CCB17C562A1] - 7/3/2015 - 08:42:12 ---A- . (.Microsoft Corporation - Serial Port Property Pages.) -- C:\WINDOWS\system32\serialui.dll [14336] O44 - LFC:[MD5.C519E15665CD89A91AD383FCE3CB556A] - 7/3/2015 - 08:42:12 ---A- . (.Microsoft Corporation - Services and Controller app.) -- C:\WINDOWS\system32\services.exe [110592] O44 - LFC:[MD5.E73F18195CCF4AAAA87B2D22E83F791C] - 7/3/2015 - 08:42:12 ---A- . (.Microsoft Corporation - Unimodem Serial Wave driver.) -- C:\WINDOWS\system32\serwvdrv.dll [14848] O44 - LFC:[MD5.7149F73425EF389BEA3FBAA2483EC0E2] - 7/3/2015 - 08:42:12 ---A- . (.Microsoft Corporation - Windows NT High Contrast Invocation.) -- C:\WINDOWS\system32\sethc.exe [31232] O44 - LFC:[MD5.6A4FF6403B925EBEFE84931B22522D61] - 7/3/2015 - 08:42:14 ---A- . (...) -- C:\WINDOWS\system32\setup.bmp [240120] O44 - LFC:[MD5.AD7B906FC883959E56E210B2B077CA00] - 7/3/2015 - 08:42:14 ---A- . (...) -- C:\WINDOWS\system32\setver.exe [11753] O44 - LFC:[MD5.B726ACE88025433615F2918B0FD07F9C] - 7/3/2015 - 08:42:14 ---A- . (.Microsoft Corporation - Microsoft Windows Setup Utility.) -- C:\WINDOWS\system32\setupn.exe [32768] O44 - LFC:[MD5.0A63A76041A8575D0DD2B4EB6BB05F7E] - 7/3/2015 - 08:42:14 ---A- . (.Microsoft Corporation - Windows 2000 Setup Dynlink.) -- C:\WINDOWS\system32\setupdll.dll [414208] O44 - LFC:[MD5.18DBCDCAFCD83E3A5646D359DCD03C93] - 7/3/2015 - 08:42:14 ---A- . (.Microsoft Corporation - Windows 2000 System File Checker.) -- C:\WINDOWS\system32\sfc.exe [9728] O44 - LFC:[MD5.96E1C926F22EE1BFBAE82901A35F6BF3] - 7/3/2015 - 08:42:14 ---A- . (.Microsoft Corporation - Windows File Protection.) -- C:\WINDOWS\system32\sfc.dll [5120] O44 - LFC:[MD5.759A1524C60DA113B43C5A13B5FD39AC] - 7/3/2015 - 08:42:14 ---A- . (.Microsoft Corporation - Windows NT Setup Executable.) -- C:\WINDOWS\system32\setup.exe [23040] O44 - LFC:[MD5.ED0CE2DEEC594778004306E3FA8CAC33] - 7/3/2015 - 08:42:14 ---A- . (.Microsoft Corporation - Windows Setup API.) -- C:\WINDOWS\system32\setupapi.dll [985088] O44 - LFC:[MD5.68062C0ECE86AB7801B5B47FDC855A06] - 7/3/2015 - 08:42:16 ---A- . (...) -- C:\WINDOWS\system32\share.exe [882] O44 - LFC:[MD5.8E6B8C671615D126FDC553D1E2DE5562] - 7/3/2015 - 08:42:16 ---A- . (.Microsoft Corporation - SCSI Floppy Driver.) -- C:\WINDOWS\system32\Drivers\sfloppy.sys [11392] O44 - LFC:[MD5.B5A5231BBB443092AFB8A33EF7AEAEB2] - 7/3/2015 - 08:42:16 ---A- . (.Microsoft Corporation - Shell Doc Object and Control Library.) -- C:\WINDOWS\system32\shdoclc.dll [549376] O44 - LFC:[MD5.1786A2F788B6F2E93C8A43D1C253A432] - 7/3/2015 - 08:42:16 ---A- . (.Microsoft Corporation - Shell Doc Object and Control Library.) -- C:\WINDOWS\system32\shdocvw.dll [1510400] O44 - LFC:[MD5.0FA803C64DF0914B41F807EA276BF2A6] - 7/3/2015 - 08:42:16 ---A- . (.Microsoft Corporation - Small Form Factor Disk Driver.) -- C:\WINDOWS\system32\Drivers\sffdisk.sys [11904] O44 - LFC:[MD5.D66D22D76878BF3483A6BE30183FB648] - 7/3/2015 - 08:42:16 ---A- . (.Microsoft Corporation - Small Form Factor MMC Protocol Driver.) -- C:\WINDOWS\system32\Drivers\sffp_mmc.sys [10240] O44 - LFC:[MD5.C17C331E435ED8737525C86A7557B3AC] - 7/3/2015 - 08:42:16 ---A- . (.Microsoft Corporation - Small Form Factor SD Protocol Driver.) -- C:\WINDOWS\system32\Drivers\sffp_sd.sys [11008] O44 - LFC:[MD5.E17798E1E6FF1CA9C67B8576570E05EE] - 7/3/2015 - 08:42:16 ---A- . (.Microsoft Corporation - Windows 2000 System File Checker.) -- C:\WINDOWS\system32\sfcfiles.dll [1614848] O44 - LFC:[MD5.6B5DB6789177A4FD0DEBC248041D0739] - 7/3/2015 - 08:42:16 ---A- . (.Microsoft Corporation - Windows File Protection.) -- C:\WINDOWS\system32\sfc_os.dll [140288] O44 - LFC:[MD5.BE5E6567A7FF378F552574E754BC510D] - 7/3/2015 - 08:42:16 ---A- . (.Microsoft Corporation - Windows NT Macintosh File Service Client.) -- C:\WINDOWS\system32\sfmapi.dll [23552] O44 - LFC:[MD5.DC8A8C47542EDD026AD8F4AC3D6C2292] - 7/3/2015 - 08:42:16 ---A- . (.Microsoft Corporation - Windows Shell library.) -- C:\WINDOWS\system32\shell.dll [5120] O44 - LFC:[MD5.29B6A85A733ABE65B371023F790B2599] - 7/3/2015 - 08:42:18 ---A- . (.Microsoft Corporation - Media File Property Extractor Shell Extensi.) -- C:\WINDOWS\system32\shmedia.dll [152064] O44 - LFC:[MD5.0EEB3D08B6BAD0DE021EAA187D00AD4F] - 7/3/2015 - 08:42:18 ---A- . (.Microsoft Corporation - Share Creation Wizard.) -- C:\WINDOWS\system32\shrpubw.exe [77824] O44 - LFC:[MD5.C14AA05881A35B6D6BB8D55B117EE22D] - 7/3/2015 - 08:42:18 ---A- . (.Microsoft Corporation - Shell Folder Service.) -- C:\WINDOWS\system32\shfolder.dll [25088] O44 - LFC:[MD5.E2A710E33C19E5E9C1ACBF5DF4156109] - 7/3/2015 - 08:42:18 ---A- . (.Microsoft Corporation - Shell Light-weight Utility Library.) -- C:\WINDOWS\system32\shlwapi.dll [474112] O44 - LFC:[MD5.BB6DF8EC2F2AAF61DE7CF7E721AF963A] - 7/3/2015 - 08:42:18 ---A- . (.Microsoft Corporation - Shell scrap object handler.) -- C:\WINDOWS\system32\shscrap.dll [27648] O44 - LFC:[MD5.FE04792B53C9633AE1E6F86B2E9C1E5A] - 7/3/2015 - 08:42:18 ---A- . (.Microsoft Corporation - Shim Engine DLL.) -- C:\WINDOWS\system32\shimeng.dll [66048] O44 - LFC:[MD5.2B86C9EEE08AF3B536203F1A13B464B5] - 7/3/2015 - 08:42:18 ---A- . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe [45056] O44 - LFC:[MD5.99E1FFCA52D7C008F0F9F68F374A4AE5] - 7/3/2015 - 08:42:18 ---A- . (.Microsoft Corporation - Windows Picture and Fax Viewer.) -- C:\WINDOWS\system32\shimgvw.dll [439808] O44 - LFC:[MD5.287D66D215A5156AF6C5B2882732C9B3] - 7/3/2015 - 08:42:18 ---A- . (.Microsoft Corporation - Windows Remote Shutdown Tool.) -- C:\WINDOWS\system32\shutdown.exe [19456] O44 - LFC:[MD5.0E235315C8FF6D9C0198F1E74604A681] - 7/3/2015 - 08:42:18 ---A- . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\shell32.dll [8463872] O44 - LFC:[MD5.888CD7B39C37E13A2419BECFAAF0A28C] - 7/3/2015 - 08:42:18 ---A- . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\WINDOWS\system32\shsvcs.dll [135168] O44 - LFC:[MD5.E5EDBD51476DB5001ABF5C82AE5C3DD1] - 7/3/2015 - 08:42:18 ---A- . (.Microsoft Corporation - Windows Shell User Logon.) -- C:\WINDOWS\system32\shgina.dll [68096] O44 - LFC:[MD5.AB60820AC53F0F454E8B9B423CB5D83F] - 7/3/2015 - 08:42:20 ---A- . (.Microsoft Corporation - File Integrity Settings.) -- C:\WINDOWS\system32\sigtab.dll [13312] O44 - LFC:[MD5.1AEFE261E5F1A754847626DB85ECA5FD] - 7/3/2015 - 08:42:20 ---A- . (.Microsoft Corporation - File Signature Verification.) -- C:\WINDOWS\system32\sigverif.exe [70144] O44 - LFC:[MD5.E96508DC9BDB0DB62638D3D99D8270D7] - 7/3/2015 - 08:42:20 ---A- . (.Microsoft Corporation - Microsoft Data Access - OLE DB Simple Provi.) -- C:\WINDOWS\system32\simpdata.tlb [16384] O44 - LFC:[MD5.1C09A8B349471D9586A8ADDF0878C059] - 7/3/2015 - 08:42:20 ---A- . (.Microsoft Corporation - Single-Instance Store Backup Support Functi.) -- C:\WINDOWS\system32\sisbkup.dll [13824] O44 - LFC:[MD5.CA59C3256B6F4F2DECB9890F304DA473] - 7/3/2015 - 08:42:24 ---A- . (.Microsoft Corporation - Compatibility Tab Shell Extension DLL.) -- C:\WINDOWS\system32\slayerxp.dll [25088] O44 - LFC:[MD5.D7EDD711DABD96B1261F7A02A56DB379] - 7/3/2015 - 08:42:24 ---A- . (.Microsoft Corporation - Microsoft® Serial Keys Utility.) -- C:\WINDOWS\system32\skeys.exe [26112] O44 - LFC:[MD5.4A6FE2E69946DFDFCAD304C0AA47E9EC] - 7/3/2015 - 08:42:24 ---A- . (.Microsoft Corporation - Serial Keys.) -- C:\WINDOWS\system32\skdll.dll [5632] O44 - LFC:[MD5.200C3F8E80B72B63558B3BC47A6807A0] - 7/3/2015 - 08:42:24 ---A- . (.Schlumberger Technology Corporation - Schlumberger Smart Card CryptoAPI Library.) -- C:\WINDOWS\system32\slbcsp.dll [306176] O44 - LFC:[MD5.D0EF547189EEFFA475F939DB753BAE60] - 7/3/2015 - 08:42:24 ---A- . (.Schlumberger Technology Corporation - Schlumberger Smart Card CryptoAPI Resource.) -- C:\WINDOWS\system32\slbrccsp.dll [14848] O44 - LFC:[MD5.421B2F81CBB65F94A70A3316C7BE0E7C] - 7/3/2015 - 08:42:24 ---A- . (.Schlumberger Technology Corporation - Schlumberger Smart Card Interoperability Li.) -- C:\WINDOWS\system32\slbiop.dll [98304] O44 - LFC:[MD5.0DBB250A89E2E1C9281009AC269F0805] - 7/3/2015 - 08:42:24 ---A- . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm [86016] O44 - LFC:[MD5.C7ABBC59B43274B1109DF6B24D617051] - 7/3/2015 - 08:42:28 ---A- . (.Microsoft Corporation - Performance Logs and Alerts Service.) -- C:\WINDOWS\system32\smlogsvc.exe [89600] O44 - LFC:[MD5.B6A31666905B58AC4819B3F55979FF71] - 7/3/2015 - 08:42:28 ---A- . (.Microsoft Corporation - Performance Logs and Alerts Snap-in.) -- C:\WINDOWS\system32\smlogcfg.dll [362496] O44 - LFC:[MD5.017DAECF0ED3AA731313433601EC40FA] - 7/3/2015 - 08:42:28 ---A- . (.Microsoft Corporation - Smard Card Driver Library.) -- C:\WINDOWS\system32\Drivers\smclib.sys [14592] O44 - LFC:[MD5.E59EE4D24DE74A110A8829FEC6C642E4] - 7/3/2015 - 08:42:28 ---A- . (.Microsoft Corporation - System Management BIOS Driver Installer.) -- C:\WINDOWS\system32\smbinst.exe [8192] O44 - LFC:[MD5.5F816C1F539266D2D4C78694239DA0B5] - 7/3/2015 - 08:42:28 ---A- . (.Microsoft Corporation - Windows NT Session Manager.) -- C:\WINDOWS\system32\smss.exe [50688] O44 - LFC:[MD5.5C1F0537E61F87B435F56E00B4F20EE8] - 7/3/2015 - 08:42:30 ---A- . (.Microsoft Corporation - SNMP Utility Library.) -- C:\WINDOWS\system32\snmpapi.dll [18944] O44 - LFC:[MD5.5A966F183C1804A3324BFC1411600729] - 7/3/2015 - 08:42:30 ---A- . (.Microsoft Corporation - SNMP snap-in.) -- C:\WINDOWS\system32\snmpsnap.dll [182272] O44 - LFC:[MD5.97C0AA29F21D236EF6C7361C349BDCF0] - 7/3/2015 - 08:42:32 ---A- . (...) -- C:\WINDOWS\system32\sortkey.nls [262148] O44 - LFC:[MD5.56B8519463F1067AB96FB123B395F948] - 7/3/2015 - 08:42:32 ---A- . (...) -- C:\WINDOWS\system32\sorttbls.nls [23044] O44 - LFC:[MD5.0CE97F997318122E726FC94E56F3CBF3] - 7/3/2015 - 08:42:32 ---A- . (.Microsoft Corporation - Softpub Forwarder DLL.) -- C:\WINDOWS\system32\softpub.dll [5632] O44 - LFC:[MD5.1DE6ABBFCCB3F8E3FA19898A182998D2] - 7/3/2015 - 08:42:32 ---A- . (.Microsoft Corporation - Sort Utility.) -- C:\WINDOWS\system32\sort.exe [24576] O44 - LFC:[MD5.028A1F74926DC3DF2D9629EDC9AEBAFB] - 7/3/2015 - 08:42:32 ---A- . (.Microsoft Corporation - WOW SOUND Driver Module.) -- C:\WINDOWS\system32\sound.drv [1744] O44 - LFC:[MD5.4DEEA507636692E622D5FD33CDC6522C] - 7/3/2015 - 08:42:48 ---A- . (.Microsoft Corporation - Microsoft® Service Pack IIS Update.) -- C:\WINDOWS\system32\spiisupd.exe [12800] O44 - LFC:[MD5.245E2DC2AA48F07ECEAB28A3FBDBC41B] - 7/3/2015 - 08:42:48 ---A- . (.Microsoft Corporation - Peer-to-Peer Custom Setup.) -- C:\WINDOWS\system32\spnpinst.exe [11264] O44 - LFC:[MD5.258DD5D4283FD9F9A7166BE9AE45CE73] - 7/3/2015 - 08:42:48 ---A- . (.Microsoft Corporation - Spooler SubSystem App.) -- C:\WINDOWS\system32\spoolsv.exe [58880] O44 - LFC:[MD5.79E3A8C328E7E569C32B0998377D9742] - 7/3/2015 - 08:42:48 ---A- . (.Microsoft Corporation - Spooler SubSystem DLL.) -- C:\WINDOWS\system32\spoolss.dll [75264] O44 - LFC:[MD5.10289F161B74CB252C3B57E4DA89EB65] - 7/3/2015 - 08:42:56 ---A- . (...) -- C:\WINDOWS\system32\sqlsodbc.chm [46133] O44 - LFC:[MD5.CA69E11B8F02817CFBE11CD3C8C1ED0B] - 7/3/2015 - 08:42:56 ---A- . (.Microsoft Corporation - Microsoft SQL Server ODBC Driver.) -- C:\WINDOWS\system32\sqlsrv32.dll [446464] O44 - LFC:[MD5.22C1146F6B8669FB541B206EC3C0EAA4] - 7/3/2015 - 08:42:56 ---A- . (.Microsoft Corporation - Microsoft SQL Server ODBC Driver.) -- C:\WINDOWS\system32\sqlsrv32.rll [90112] O44 - LFC:[MD5.1CA26DD982B002341A62C9A758F25E1B] - 7/3/2015 - 08:42:56 ---A- . (.Microsoft Corporation - Restores registry to restart GUI-mode part.) -- C:\WINDOWS\system32\sprestrt.exe [9728] O44 - LFC:[MD5.F3AAB4C184A2EBD95BBEB711246952C9] - 7/3/2015 - 08:42:56 ---A- . (.Microsoft Corporation - String Function .DLL for SQL Enterprise Com.) -- C:\WINDOWS\system32\sqlunirl.dll [180800] O44 - LFC:[MD5.1C3C9B5B42A50D2D86CAF2EC05D34B3C] - 7/3/2015 - 08:42:56 ---A- . (.Perle Systems Ltd. - Specialix MPS NT Upgrade CoInstaller.) -- C:\WINDOWS\system32\spxcoins.dll [24661] O44 - LFC:[MD5.07EBBE91C46376AB0D38D61A629185B0] - 7/3/2015 - 08:42:58 ---A- . (.Microsoft Corporation - Bezier Curves Screen Saver.) -- C:\WINDOWS\system32\ssbezier.scr [19968] O44 - LFC:[MD5.2C0033EA0853E27C8E30603642D9FA84] - 7/3/2015 - 08:42:58 ---A- . (.Microsoft Corporation - Direct3D Flying Objects Screen Saver.) -- C:\WINDOWS\system32\ss3dfo.scr [704512] O44 - LFC:[MD5.3695B8D03745B2F8022B161238347A9D] - 7/3/2015 - 08:42:58 ---A- . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [99840] O44 - LFC:[MD5.9B390283569EA58D43D2586032B892F5] - 7/3/2015 - 08:42:58 ---A- . (.Microsoft Corporation - Server driver.) -- C:\WINDOWS\system32\Drivers\srv.sys [357888] O44 - LFC:[MD5.0E3F47B359D4FD3D8E935C39E20754ED] - 7/3/2015 - 08:42:58 ---A- . (.Microsoft Corporation - Unicode Function .DLL for SQL Enterprise Co.) -- C:\WINDOWS\system32\sqlwid.dll [24603] O44 - LFC:[MD5.350427E625989ABB1CC40A664FBF2FE7] - 7/3/2015 - 08:42:58 ---A- . (.Microsoft Corporation - Unicode/ANSI Function .DLL for SQL Enterpri.) -- C:\WINDOWS\system32\sqlwoa.dll [49179] O44 - LFC:[MD5.E27992B5BE536EDE2D50A253A880C852] - 7/3/2015 - 08:43:00 ---A- . (.Microsoft Corporation - Direct3D Flowerbox Screen Saver.) -- C:\WINDOWS\system32\ssflwbox.scr [393216] O44 - LFC:[MD5.6700DBF0268936EDF0922FE469DD3138] - 7/3/2015 - 08:43:00 ---A- . (.Microsoft Corporation - Marquee Screen Saver.) -- C:\WINDOWS\system32\ssmarque.scr [20992] O44 - LFC:[MD5.5E453CB99DF0838226DEFC05F3484CDF] - 7/3/2015 - 08:43:00 ---A- . (.Microsoft Corporation - My Pictures Slideshow Screensaver.) -- C:\WINDOWS\system32\ssmypics.scr [47104] O44 - LFC:[MD5.636F1508799C0333FAD8E7F82FE545CA] - 7/3/2015 - 08:43:00 ---A- . (.Microsoft Corporation - Mystify Screen Saver.) -- C:\WINDOWS\system32\ssmyst.scr [18944] O44 - LFC:[MD5.D66709F79D595DD378C995C3347349C1] - 7/3/2015 - 08:43:02 ---A- . (.Microsoft Corporation - Direct3D 3D Text Screen Saver.) -- C:\WINDOWS\system32\sstext3d.scr [679936] O44 - LFC:[MD5.D5B0ED8ECA34F8480E555F47269AB0BA] - 7/3/2015 - 08:43:02 ---A- . (.Microsoft Corporation - Direct3D Pipes Screen Saver.) -- C:\WINDOWS\system32\sspipes.scr [610304] O44 - LFC:[MD5.7430A0EC3EF934AE7C4D6807D36ECEBA] - 7/3/2015 - 08:43:02 ---A- . (.Microsoft Corporation - Microsoft OLE 2.1 for Windows NT(TM) Operat.) -- C:\WINDOWS\system32\stdole32.tlb [7168] O44 - LFC:[MD5.93FEB3C49788C4B6E8585787BFACA673] - 7/3/2015 - 08:43:02 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\stdole2.tlb [16896] O44 - LFC:[MD5.3A5CD674ADA85BCC1FF26B81B4CDEFB5] - 7/3/2015 - 08:43:02 ---A- . (.Microsoft Corporation - OLE 2.1 16/32 Interoperability Library.) -- C:\WINDOWS\system32\storage.dll [4208] O44 - LFC:[MD5.86984E591641191236033D2A4D80ED56] - 7/3/2015 - 08:43:02 ---A- . (.Microsoft Corporation - Starfield Screen Saver.) -- C:\WINDOWS\system32\ssstars.scr [14336] O44 - LFC:[MD5.20518FD38B03E858DFCE386D02C27AEA] - 7/3/2015 - 08:43:02 ---A- . (.Microsoft Corporation - Still Image Class Installer.) -- C:\WINDOWS\system32\sti_ci.dll [136704] O44 - LFC:[MD5.A9AAA9D9A1C08E7017B21577DCD3411D] - 7/3/2015 - 08:43:02 ---A- . (.Microsoft Corporation - Still Image Devices Monitor.) -- C:\WINDOWS\system32\stimon.exe [14848] O44 - LFC:[MD5.3CAEAE7608F1BD7BA873A3B02895B106] - 7/3/2015 - 08:43:02 ---A- . (.Microsoft Corporation - Still Image Devices client DLL.) -- C:\WINDOWS\system32\sti.dll [68096] O44 - LFC:[MD5.50512FC9B7878E3C2C147BC17326A7DB] - 7/3/2015 - 08:43:02 ---A- . (.Microsoft Corporation - Systray shell service object.) -- C:\WINDOWS\system32\stobject.dll [121856] O44 - LFC:[MD5.27C6D03BCDB8CFEB96B716F3D8BE3E18] - 7/3/2015 - 08:43:04 ---A- . (.Microsoft Corporation - Generic Host Process for Win32 Services.) -- C:\WINDOWS\system32\svchost.exe [14336] O44 - LFC:[MD5.46FB43F37ADDEE530208CA14059946C4] - 7/3/2015 - 08:43:04 ---A- . (.Microsoft Corporation - Stream Filter Library.) -- C:\WINDOWS\system32\strmfilt.dll [75776] O44 - LFC:[MD5.77847EF3CEC784B13705E5EF338BB165] - 7/3/2015 - 08:43:04 ---A- . (.Microsoft Corporation - Subst Utility.) -- C:\WINDOWS\system32\subst.exe [9216] O44 - LFC:[MD5.B01E7E9DC9165D918BC8560E6B254C51] - 7/3/2015 - 08:43:04 ---A- . (.Microsoft Corporation - Windows 2000 Service Pack Setup.) -- C:\WINDOWS\system32\svcpack.dll [6144] O44 - LFC:[MD5.C119B6F403F22677F3C0650C2A8A1D4A] - 7/3/2015 - 08:43:04 ---A- . (.Microsoft Corporation - Windows Media Services Streamer Dll.) -- C:\WINDOWS\system32\strmdll.dll [247326] O44 - LFC:[MD5.A3336EBD2527F6EB214F4593DCF67F6C] - 7/3/2015 - 08:43:22 ---A- . (.Microsoft Corporation - Fusion 2.5.) -- C:\WINDOWS\system32\sxs.dll [713216] O44 - LFC:[MD5.E8541A428C00F8196302FD777BA06E3A] - 7/3/2015 - 08:43:22 ---A- . (.Microsoft Corporation - Microsoft® Volume Shadow Copy Service softw.) -- C:\WINDOWS\system32\swprv.dll [138752] O44 - LFC:[MD5.A47502CBAD6155056DF60F95F2959122] - 7/3/2015 - 08:43:24 ---A- . (.Microsoft Corporation - Create a Briefcase.) -- C:\WINDOWS\system32\syncapp.exe [51200] O44 - LFC:[MD5.2280760948E8CA34CF0EEDF659683C56] - 7/3/2015 - 08:43:24 ---A- . (.Microsoft Corporation - SAM Lock Tool.) -- C:\WINDOWS\system32\syskey.exe [36864] O44 - LFC:[MD5.F0CB83F058E3A84DC58FBABAF7B0533A] - 7/3/2015 - 08:43:24 ---A- . (.Microsoft Corporation - SysInfo.) -- C:\WINDOWS\system32\sysinfo.ocx [80208] O44 - LFC:[MD5.C504A9FE17F997F8B1F8561D0A68DE52] - 7/3/2015 - 08:43:24 ---A- . (.Microsoft Corporation - System Applet for the Control Panel.) -- C:\WINDOWS\system32\sysdm.cpl [300544] O44 - LFC:[MD5.A279F4091F940C15A288767F4285C0FF] - 7/3/2015 - 08:43:24 ---A- . (.Microsoft Corporation - System Information.) -- C:\WINDOWS\system32\systeminfo.exe [71680] O44 - LFC:[MD5.773A1193E8B2B54132CCC9AE3000852F] - 7/3/2015 - 08:43:24 ---A- . (.Microsoft Corporation - System Monitor Control.) -- C:\WINDOWS\system32\sysmon.ocx [218624] O44 - LFC:[MD5.E9757A25AB913FA5525F22E0E68DDB03] - 7/3/2015 - 08:43:24 ---A- . (.Microsoft Corporation - Windows Briefcase Engine.) -- C:\WINDOWS\system32\synceng.dll [58368] O44 - LFC:[MD5.A60FC9CA376DBA1235C63E960996F013] - 7/3/2015 - 08:43:24 ---A- . (.Microsoft Corporation - Windows Briefcase.) -- C:\WINDOWS\system32\syncui.dll [191488] O44 - LFC:[MD5.283CAD5E151AE7C73D7F733D527D774E] - 7/3/2015 - 08:43:24 ---A- . (.Microsoft Corporation - Windows System Editor application file.) -- C:\WINDOWS\system32\sysedit.exe [18896] O44 - LFC:[MD5.02232F2DB7C3A2EA291BB75EBF1ED060] - 7/3/2015 - 08:43:24 ---A- . (.Microsoft Corporation - Windows System Inventory.) -- C:\WINDOWS\system32\sysinv.dll [15872] O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 7/3/2015 - 08:43:25 ---A- . (...) -- C:\WINDOWS\system.ini [227] O44 - LFC:[MD5.74943B60374CB5F9C6F9907F8BD2F79A] - 7/3/2015 - 08:43:26 ---A- . (...) -- C:\WINDOWS\system32\sysprint.sep [3214] O44 - LFC:[MD5.9E1F3509104FCEB377A58A16E8243D39] - 7/3/2015 - 08:43:26 ---A- . (...) -- C:\WINDOWS\system32\sysprtj.sep [3577] O44 - LFC:[MD5.E22C39EAA1FEA6BB4A7BF4FE7BE6BE5E] - 7/3/2015 - 08:43:26 ---A- . (.Microsoft Corporation - System stand-alone Optional Component Manag.) -- C:\WINDOWS\system32\sysocmgr.exe [106496] O44 - LFC:[MD5.46E07FD3A40760FDA18CF6B4FC691742] - 7/3/2015 - 08:43:26 ---A- . (.Microsoft Corporation - Systray .exe stub.) -- C:\WINDOWS\system32\systray.exe [3072] O44 - LFC:[MD5.72174586311092393977B3BF13ADA779] - 7/3/2015 - 08:43:26 ---A- . (.Microsoft Corporation - Windows NT System Setup.) -- C:\WINDOWS\system32\syssetup.dll [990208] O44 - LFC:[MD5.4A00D59AE6D75BDFC2C8E5182C4B1376] - 7/3/2015 - 08:43:26 ---A- . (.Microsoft Corporation - Windows System Driver core component.) -- C:\WINDOWS\system32\system.drv [3360] O44 - LFC:[MD5.3E24C20CA467FF487F0FE89A1440E2BB] - 7/3/2015 - 08:43:28 ---A- . (.Microsoft Corporation - Microsoft T2Embed Font Embedding.) -- C:\WINDOWS\system32\t2embed.dll [119808] O44 - LFC:[MD5.3F8411328E808A8794A41DA9ACB22DD9] - 7/3/2015 - 08:43:28 ---A- . (.Microsoft Corporation - Microsoft TAPI3.) -- C:\WINDOWS\system32\tapi3.dll [858624] O44 - LFC:[MD5.00AABF131B4823785818DB99A075A313] - 7/3/2015 - 08:43:28 ---A- . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony API Client.) -- C:\WINDOWS\system32\tapi32.dll [181760] O44 - LFC:[MD5.8B5C837AE7DE45502AA1B8457A04D900] - 7/3/2015 - 08:43:28 ---A- . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony API UI DLL.) -- C:\WINDOWS\system32\tapiui.dll [78848] O44 - LFC:[MD5.6951B89B4F591AA694048A6CD0E5224A] - 7/3/2015 - 08:43:28 ---A- . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Performanc.) -- C:\WINDOWS\system32\tapiperf.dll [5632] O44 - LFC:[MD5.E2B32B10ACC5D97623275AAFB67E5F03] - 7/3/2015 - 08:43:28 ---A- . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\WINDOWS\system32\tapisrv.dll [249856] O44 - LFC:[MD5.381575677C1C0C6184138307F1A4CDC3] - 7/3/2015 - 08:43:28 ---A- . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server1.) -- C:\WINDOWS\system32\tapi.dll [19200] O44 - LFC:[MD5.FD6093E3DECD925F1CFFC8A0DD539D72] - 7/3/2015 - 08:43:28 ---A- . (.Microsoft Corporation - SCSI Tape Class Driver.) -- C:\WINDOWS\system32\Drivers\tape.sys [14976] O44 - LFC:[MD5.79ED276AAE03D4F62551871D8094F09A] - 7/3/2015 - 08:43:28 ---A- . (.Microsoft Corporation - TABCTL32 OLE Control DLL.) -- C:\WINDOWS\system32\tabctl32.ocx [221504] O44 - LFC:[MD5.D84209D3FB6FC9A1FD1519CAE28DC9E7] - 7/3/2015 - 08:43:30 ---A- . (...) -- C:\WINDOWS\system32\tcpmon.ini [53478] O44 - LFC:[MD5.F4A3C6ABE7818B1B53F58FA1ADB605CD] - 7/3/2015 - 08:43:30 ---A- . (.Microsoft Corporation - IPv6 driver.) -- C:\WINDOWS\system32\Drivers\tcpip6.sys [226880] O44 - LFC:[MD5.3045293662B6602A2EE7D754C8F1EDCC] - 7/3/2015 - 08:43:30 ---A- . (.Microsoft Corporation - Kill Process.) -- C:\WINDOWS\system32\taskkill.exe [76288] O44 - LFC:[MD5.FE5EFDA6DC7982336D20DE5607DF7524] - 7/3/2015 - 08:43:30 ---A- . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Administra.) -- C:\WINDOWS\system32\tcmsetup.exe [12288] O44 - LFC:[MD5.AE0382AD9C73D343D85E1A50C80B7C20] - 7/3/2015 - 08:43:30 ---A- . (.Microsoft Corporation - Standard TCP/IP Port Monitor DLL.) -- C:\WINDOWS\system32\tcpmon.dll [45568] O44 - LFC:[MD5.8357809E111E09393633039769D96281] - 7/3/2015 - 08:43:30 ---A- . (.Microsoft Corporation - Standard TCP/IP Port Monitor Helper DLL.) -- C:\WINDOWS\system32\tcpmib.dll [14848] O44 - LFC:[MD5.6AAC07E99F7D4DF61EF0C3798CB931AD] - 7/3/2015 - 08:43:30 ---A- . (.Microsoft Corporation - Standard TCP/IP Port Monitor UI DLL.) -- C:\WINDOWS\system32\tcpmonui.dll [45568] O44 - LFC:[MD5.954053BC42429995A1B07E8AA9389456] - 7/3/2015 - 08:43:30 ---A- . (.Microsoft Corporation - TCP/IP Protocol Driver.) -- C:\WINDOWS\system32\Drivers\tcpip.sys [361600] O44 - LFC:[MD5.32933B07FC16D9F778BEE12545FA1B1A] - 7/3/2015 - 08:43:30 ---A- . (.Microsoft Corporation - TCP/IP Services Application.) -- C:\WINDOWS\system32\tcpsvcs.exe [19456] O44 - LFC:[MD5.9BAA9D6879028C32FCE8808C4C7E86BE] - 7/3/2015 - 08:43:30 ---A- . (.Microsoft Corporation - TDC ActiveX Control.) -- C:\WINDOWS\system32\tdc.ocx [66560] O44 - LFC:[MD5.0539D5E53587F82D1B4FD74C5BE205CF] - 7/3/2015 - 08:43:30 ---A- . (.Microsoft Corporation - TDI Wrapper.) -- C:\WINDOWS\system32\Drivers\tdi.sys [19072] O44 - LFC:[MD5.E8B108654C5789AD3F75E08B0A89C609] - 7/3/2015 - 08:43:30 ---A- . (.Microsoft Corporation - Task List.) -- C:\WINDOWS\system32\tasklist.exe [77824] O44 - LFC:[MD5.F4DFD83153E8C9088AE2DB704107060D] - 7/3/2015 - 08:43:30 ---A- . (.Microsoft Corporation - Task Manager.) -- C:\WINDOWS\TASKMAN.EXE [15360] O44 - LFC:[MD5.F4DFD83153E8C9088AE2DB704107060D] - 7/3/2015 - 08:43:30 ---A- . (.Microsoft Corporation - Task Manager.) -- C:\WINDOWS\system32\taskman.exe [15360] O44 - LFC:[MD5.2CD1C3506A85B38E2D17E61ADED175C4] - 7/3/2015 - 08:43:30 ---A- . (.Microsoft Corporation - Windows TaskManager.) -- C:\WINDOWS\system32\taskmgr.exe [135680] O44 - LFC:[MD5.72AA643C526DDB882B7DA9394947DF16] - 7/3/2015 - 08:43:32 ---A- . (...) -- C:\WINDOWS\system32\termcap [862] O44 - LFC:[MD5.6D21D0A95286DCD09E354B612F592EB7] - 7/3/2015 - 08:43:32 ---A- . (...) -- C:\WINDOWS\system32\ticrf.rat [1988] O44 - LFC:[MD5.8EDD9DCD5196B6C54A622E9549F667B8] - 7/3/2015 - 08:43:32 ---A- . (.Microsoft Corporation - Microsoft TAPI3 Terminal Manager.) -- C:\WINDOWS\system32\termmgr.dll [358400] O44 - LFC:[MD5.971EB043532293651F46BB55CD7CD101] - 7/3/2015 - 08:43:32 ---A- . (.Microsoft Corporation - Microsoft Telnet Client.) -- C:\WINDOWS\system32\telnet.exe [76288] O44 - LFC:[MD5.56062C7CF2C8AD68D30925127AE2CD35] - 7/3/2015 - 08:43:32 ---A- . (.Microsoft Corporation - Telephony Control Panel.) -- C:\WINDOWS\system32\telephon.cpl [28160] O44 - LFC:[MD5.53D82396CD8241AF6182A4CDD120F14F] - 7/3/2015 - 08:43:32 ---A- . (.Microsoft Corporation - Time Date Control Panel Applet.) -- C:\WINDOWS\system32\timedate.cpl [94208] O44 - LFC:[MD5.9E7425234ADDEDABC7BF7ADDAFD72FD9] - 7/3/2015 - 08:43:32 ---A- . (.Microsoft Corporation - Timer driver for PC compatibles.) -- C:\WINDOWS\system32\timer.drv [4048] O44 - LFC:[MD5.C6E8683B44521D6D5E86443BC3464FB3] - 7/3/2015 - 08:43:32 ---A- . (.Microsoft Corporation - Trivial File Transfer Protocol App.) -- C:\WINDOWS\system32\tftp.exe [16896] O44 - LFC:[MD5.EE9710428FFB95FD3845D41E7148AC31] - 7/3/2015 - 08:43:32 ---A- . (.Microsoft Corporation - Windows Theme API.) -- C:\WINDOWS\system32\themeui.dll [386560] O44 - LFC:[MD5.3A0624FE39EC75AEAF49141C776C128A] - 7/3/2015 - 08:43:34 ---A- . (.Microsoft Corporation - Microsoft Telnet Server Helper.) -- C:\WINDOWS\system32\tlntsess.exe [80896] O44 - LFC:[MD5.94010103AFA6BA4D85A94008152BBF28] - 7/3/2015 - 08:43:34 ---A- . (.Microsoft Corporation - Microsoft Telnet Server Proxy Stub.) -- C:\WINDOWS\system32\tlntsvrp.dll [7168] O44 - LFC:[MD5.FA51FB71FBD5022B08E9EC55C5DB7BF3] - 7/3/2015 - 08:43:34 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\tlntadmn.exe [61440] O44 - LFC:[MD5.DB7205804759FF62C34E3EFD8A4CC76A] - 7/3/2015 - 08:43:34 ---A- . (.Microsoft Corporation - Telnet.) -- C:\WINDOWS\system32\tlntsvr.exe [73216] O44 - LFC:[MD5.C86363C599E5D6836C21A3A3FD21C388] - 7/3/2015 - 08:43:34 ---A- . (.Microsoft Corporation - Windows Debug/Tool helper library.) -- C:\WINDOWS\system32\toolhelp.dll [13888] O44 - LFC:[MD5.56B82E4FC6F57D3616E86BAED5FEF52E] - 7/3/2015 - 08:43:36 ---A- . (.Microsoft Corporation - Event Trace Report Tool.) -- C:\WINDOWS\system32\tracerpt.exe [259584] O44 - LFC:[MD5.EB872025AA2142741C4664D71C4AD4D1] - 7/3/2015 - 08:43:36 ---A- . (.Microsoft Corporation - IPv6 Traceroute Command.) -- C:\WINDOWS\system32\tracert6.exe [31744] O44 - LFC:[MD5.1F3A82333046F4B97B2BB148ABF38D54] - 7/3/2015 - 08:43:36 ---A- . (.Microsoft Corporation - Microsoft Traffic Control 1.0 DLL.) -- C:\WINDOWS\system32\traffic.dll [31232] O44 - LFC:[MD5.7862D384F7C1636544C83B75B57006E7] - 7/3/2015 - 08:43:36 ---A- . (.Microsoft Corporation - TCP/IP Traceroute Command.) -- C:\WINDOWS\system32\tracert.exe [12288] O44 - LFC:[MD5.A52DD5B6566B092143AE42877F2EDD62] - 7/3/2015 - 08:43:36 ---A- . (.Microsoft Corporation - Windows Tour Launcher.) -- C:\WINDOWS\system32\tourstart.exe [347136] O44 - LFC:[MD5.735F504DEEFE4E2AD06360FCE2842DD4] - 7/3/2015 - 08:43:38 ---A- . (...) -- C:\WINDOWS\system32\tsd32.dll [15360] O44 - LFC:[MD5.55BCA12F7F523D35CA3CB833C725F54E] - 7/3/2015 - 08:43:38 ---A- . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] O44 - LFC:[MD5.DB6451BFBFB6995AABFF2F9C6FEC23D9] - 7/3/2015 - 08:43:38 ---A- . (.Microsoft Corporation - Framebuffer Display Driver.) -- C:\WINDOWS\system32\tsddd.dll [12168] O44 - LFC:[MD5.D298960EFC98B61A7AD5E8699F141476] - 7/3/2015 - 08:43:38 ---A- . (.Microsoft Corporation - Terminal Services Application Compatibility.) -- C:\WINDOWS\system32\tsappcmp.dll [52224] O44 - LFC:[MD5.0A38F11C446ADA33CAFA1B415AF568E2] - 7/3/2015 - 08:43:38 ---A- . (.Microsoft Corporation - Tree Walk Utility.) -- C:\WINDOWS\system32\tree.com [12800] O44 - LFC:[MD5.E8CD0D7E169ECCE2D4FD829DAAB786ED] - 7/3/2015 - 08:43:40 ---A- . (.DSP GROUP, INC. - DSP Group TrueSpeech(TM) Audio Codec for MS.) -- C:\WINDOWS\system32\tssoft32.acm [8192] O44 - LFC:[MD5.BF7D9B2DC1A0DD078553BB145D0C9E58] - 7/3/2015 - 08:43:40 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop Services Web Proxy.) -- C:\WINDOWS\system32\tswbprxy.exe [46080] O44 - LFC:[MD5.7ABB5DF75D0D68F741E9F5674FB8008F] - 7/3/2015 - 08:43:40 ---A- . (.Microsoft Corporation - Remote Desktop Programs WMI provider.) -- C:\WINDOWS\system32\tspubwmi.dll [134144] O44 - LFC:[MD5.E23C2933A53B4459482E84BB56D24681] - 7/3/2015 - 08:43:40 ---A- . (.Microsoft Corporation - Web Service Security Package.) -- C:\WINDOWS\system32\tspkg.dll [50688] O44 - LFC:[MD5.0BEA3F79A36B1F67B2CE0F595524C77C] - 7/3/2015 - 08:43:40 ---A- . (.Twain Working Group - Twain Source Manager (Image Acquisition Int.) -- C:\WINDOWS\twain.dll [94784] O44 - LFC:[MD5.6B5070F063CE5536A6C883B671E05884] - 7/3/2015 - 08:43:40 ---A- . (.Twain Working Group - Twain_32 Source Manager (Image Acquisition.) -- C:\WINDOWS\twain_32.dll [50688] O44 - LFC:[MD5.F725FE3E7E9B7B6A1B4CFBD1EBDBCCDE] - 7/3/2015 - 08:43:42 ---A- . (.Microsoft Corporation - Command line performance monitor.) -- C:\WINDOWS\system32\typeperf.exe [36352] O44 - LFC:[MD5.7161255DFA81E67B66B746D2504D2F2B] - 7/3/2015 - 08:43:42 ---A- . (.Microsoft Corporation - OLE 2.1 16/32 Interoperability Library.) -- C:\WINDOWS\system32\typelib.dll [177856] O44 - LFC:[MD5.4763CE0B8CF4CA355DB2FE6C74675DB8] - 7/3/2015 - 08:43:42 ---A- . (.Microsoft Corporation - Previous Versions property page.) -- C:\WINDOWS\system32\twext.dll [57856] O44 - LFC:[MD5.17E0CF9C8CBB717D05948656BCD86EFA] - 7/3/2015 - 08:43:42 ---A- . (.Microsoft Corporation - Simple Kernel-mode File-based Log.) -- C:\WINDOWS\system32\txflog.dll [101376] O44 - LFC:[MD5.A68224457DD43D18E40E02262D4A9398] - 7/3/2015 - 08:43:42 ---A- . (.Twain Working Group - Twain.dll Client's 32-Bit Thunking Server.) -- C:\WINDOWS\twunk_32.exe [25600] O44 - LFC:[MD5.F36A271706EDD23C94956AFB56981184] - 7/3/2015 - 08:43:42 ---A- . (.Twain Working Group - Twain_32.dll Client's 16-Bit Thunking Serve.) -- C:\WINDOWS\twunk_16.exe [49680] O44 - LFC:[MD5.7553C7284720AD31B2AEC248411E2CF0] - 7/3/2015 - 08:43:44 ---A- . (.Microsoft Corporation - FAT Utility DLL.) -- C:\WINDOWS\system32\ufat.dll [82432] O44 - LFC:[MD5.D94E3DEA7BD29C5B3B06C4429FEFAA94] - 7/3/2015 - 08:43:44 ---A- . (.Microsoft Corporation - File Utilities Support DLL.) -- C:\WINDOWS\system32\ulib.dll [278528] O44 - LFC:[MD5.156A34FAA6390A0AB6FB23F8F19EB1D5] - 7/3/2015 - 08:43:44 ---A- . (.Microsoft Corporation - Microsoft Timezone change tool.) -- C:\WINDOWS\system32\tzchange.exe [46080] O44 - LFC:[MD5.09319E6BDD44B4F658E0EB4A23410CFF] - 7/3/2015 - 08:43:44 ---A- . (.Microsoft Corporation - Microsoft UI Automation Core.) -- C:\WINDOWS\system32\uiautomationcore.dll [611328] O44 - LFC:[MD5.5787B80C2E3C5E2F56C2A233D91FA2C9] - 7/3/2015 - 08:43:44 ---A- . (.Microsoft Corporation - UDF File System Driver.) -- C:\WINDOWS\system32\Drivers\udfs.sys [66048] O44 - LFC:[MD5.7E9F5A96E34C047E3F0A46415F41FBDA] - 7/3/2015 - 08:43:44 ---A- . (.Microsoft Corporation - eXfat Utility DLL.) -- C:\WINDOWS\system32\uexfat.dll [57344] O44 - LFC:[MD5.D0EE9D30E36B812EAE1E3655D8D447F8] - 7/3/2015 - 08:43:46 ---A- . (...) -- C:\WINDOWS\system32\unicode.nls [89588] O44 - LFC:[MD5.42A06C5D90EB3F30FEC7C98CB7F9E39D] - 7/3/2015 - 08:43:46 ---A- . (.Microsoft Corporation - NTFS Utility DLL.) -- C:\WINDOWS\system32\untfs.dll [316416] O44 - LFC:[MD5.C2E927CB306E77A17724E45ECBF5D790] - 7/3/2015 - 08:43:46 ---A- . (.Microsoft Corporation - UManDlg DLL.) -- C:\WINDOWS\system32\umandlg.dll [35840] O44 - LFC:[MD5.1E178FDBAD2FBF68032A808A9F4DEC4C] - 7/3/2015 - 08:43:46 ---A- . (.Microsoft Corporation - Unimodem 5 Service Provider.) -- C:\WINDOWS\system32\unimdm.tsp [206848] O44 - LFC:[MD5.995252FCC4692B5B97EE17D596C9386E] - 7/3/2015 - 08:43:46 ---A- . (.Microsoft Corporation - Unimodem AT Mini Driver Platform Driver for.) -- C:\WINDOWS\system32\uniplat.dll [13824] O44 - LFC:[MD5.19AE6CBA05B9005698A6DEDCC88F202E] - 7/3/2015 - 08:43:46 ---A- . (.Microsoft Corporation - Unimodem Service Provider AT Mini Driver.) -- C:\WINDOWS\system32\unimdmat.dll [74240] O44 - LFC:[MD5.EC2AD9AC452E0A8D976FB1B1718517CE] - 7/3/2015 - 08:43:46 ---A- . (.Microsoft Corporation - Unimodem Tranform Module.) -- C:\WINDOWS\system32\umdmxfrm.dll [13312] O44 - LFC:[MD5.0369157219E140175810A8BE3FAC5136] - 7/3/2015 - 08:43:46 ---A- . (.Microsoft Corporation - Unload PerfMon Counters.) -- C:\WINDOWS\system32\unlodctr.exe [4096] O44 - LFC:[MD5.774619D46B04F75614261F1BE274BA5D] - 7/3/2015 - 08:43:46 ---A- . (.Microsoft Corporation - User-mode Plug-and-Play Service.) -- C:\WINDOWS\system32\umpnpmgr.dll [123392] O44 - LFC:[MD5.402DDC88356B1BAC0EE3DD1580C76A31] - 7/3/2015 - 08:43:50 ---A- . (.Microsoft Corporation - Update Driver.) -- C:\WINDOWS\system32\Drivers\update.sys [384768] O44 - LFC:[MD5.1AB3CDDE553B6E064D2E754EFE20285C] - 7/3/2015 - 08:43:51 ---A- . (.Microsoft Corporation - Default Hub Driver for USB.) -- C:\WINDOWS\system32\Drivers\usbhub.sys [59520] O44 - LFC:[MD5.D8B72BC1A9D28F98497C730E7FC13DFB] - 7/3/2015 - 08:43:51 ---A- . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\WINDOWS\system32\Drivers\usbehci.sys [30464] O44 - LFC:[MD5.6DF35CA139C3BC15CC74390ABB114EFE] - 7/3/2015 - 08:43:51 ---A- . (.Microsoft Corporation - USB 1.1 & 2.0 Port Driver.) -- C:\WINDOWS\system32\Drivers\usbport.sys [144128] O44 - LFC:[MD5.029E00FF19E7D30AC9CAE51402AC2906] - 7/3/2015 - 08:43:52 ---A- . (.Microsoft Corporation - Internet Shortcut Shell Extension DLL.) -- C:\WINDOWS\system32\url.dll [105984] O44 - LFC:[MD5.1387AB5807E7A29D880699CC733F6AED] - 7/3/2015 - 08:43:52 ---A- . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll [1216000] O44 - LFC:[MD5.A1E4807311DAA8C29B43487F9D1B36AF] - 7/3/2015 - 08:43:52 ---A- . (.Microsoft Corporation - Registry Utility DLL.) -- C:\WINDOWS\system32\ureg.dll [17920] O44 - LFC:[MD5.C74F25C77D6C3EDF58221E4060D8CD16] - 7/3/2015 - 08:43:52 ---A- . (.Microsoft Corporation - Remote NDIS USB Driver.) -- C:\WINDOWS\system32\Drivers\usb8023.sys [12928] O44 - LFC:[MD5.F26385E8BA4549B5186B774EC0E45D86] - 7/3/2015 - 08:43:52 ---A- . (.Microsoft Corporation - Standard Dynamic Printing Port Monitor DLL.) -- C:\WINDOWS\system32\usbmon.dll [16896] O44 - LFC:[MD5.55105AABA83A430309CC1F5BBC4C5DA7] - 7/3/2015 - 08:43:52 ---A- . (.Microsoft Corporation - UHCI USB Miniport Driver.) -- C:\WINDOWS\system32\Drivers\usbuhci.sys [20736] O44 - LFC:[MD5.5C4ADB808B54126C1ED2FBA0EAE06C63] - 7/3/2015 - 08:43:52 ---A- . (.Microsoft Corporation - UPNP Tray Monitor and Folder.) -- C:\WINDOWS\system32\upnpui.dll [239616] O44 - LFC:[MD5.05365FB38FCA1E98F7A566AAAF5D1815] - 7/3/2015 - 08:43:52 ---A- . (.Microsoft Corporation - UPS Service.) -- C:\WINDOWS\system32\ups.exe [18432] O44 - LFC:[MD5.64CA8ED4B0980AAE46BEB3727046E860] - 7/3/2015 - 08:43:52 ---A- . (.Microsoft Corporation - USB CCID Driver.) -- C:\WINDOWS\system32\Drivers\usbccid.sys [29184] O44 - LFC:[MD5.1B611611C28D2DF25BC057D79C6F13FC] - 7/3/2015 - 08:43:52 ---A- . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) -- C:\WINDOWS\system32\Drivers\usbccgp.sys [32384] O44 - LFC:[MD5.A32426D9B14A089EAA1D922E0C5801A9] - 7/3/2015 - 08:43:52 ---A- . (.Microsoft Corporation - USB Mass Storage Class Driver.) -- C:\WINDOWS\system32\Drivers\usbstor.sys [26368] O44 - LFC:[MD5.04FE5EF6ED4818EC4839EA5C611A6310] - 7/3/2015 - 08:43:52 ---A- . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\WINDOWS\system32\Drivers\usbd.sys [5376] O44 - LFC:[MD5.F002378C8416D21C4B7ED1B15398E647] - 7/3/2015 - 08:43:52 ---A- . (.Microsoft Corporation - Windows User-interface core component.) -- C:\WINDOWS\system32\user.exe [47872] O44 - LFC:[MD5.1D845821F5ADB076831DE4C2818F858B] - 7/3/2015 - 08:43:54 ---A- . (.Microsoft Corporation - Uniscribe Unicode script processor.) -- C:\WINDOWS\system32\usp10.dll [406016] O44 - LFC:[MD5.43D13C80EBEC0135A3611E0F616F179B] - 7/3/2015 - 08:43:54 ---A- . (.Microsoft Corporation - Userenv.) -- C:\WINDOWS\system32\userenv.dll [727040] O44 - LFC:[MD5.A93AEE1928A9D7CE3E16D24EC7380F89] - 7/3/2015 - 08:43:54 ---A- . (.Microsoft Corporation - Userinit Logon Application.) -- C:\WINDOWS\system32\userinit.exe [26112] O44 - LFC:[MD5.0845E936C85AD45B452CBC86A316CF2A] - 7/3/2015 - 08:43:54 ---A- . (.Microsoft Corporation - UtilMan EXE.) -- C:\WINDOWS\system32\utilman.exe [50176] O44 - LFC:[MD5.9D39D9E07C180127252E176EC2B41487] - 7/3/2015 - 08:43:54 ---A- . (.Microsoft Corporation - WinStation utility support DLL.) -- C:\WINDOWS\system32\utildll.dll [25600] O44 - LFC:[MD5.B26B135FF1B9F60C9388B4A7D16F600B] - 7/3/2015 - 08:43:54 ---A- . (.Microsoft Corporation - Windows XP USER API Client DLL.) -- C:\WINDOWS\system32\user32.dll [578560] O44 - LFC:[MD5.86491AD7BC0964089CD4E703E65D45DB] - 7/3/2015 - 08:43:56 ---A- . (...) -- C:\WINDOWS\system32\v7vga.rom [18832] O44 - LFC:[MD5.8C68E7B815B225220AF43ABFDDA38AAB] - 7/3/2015 - 08:43:56 ---A- . (...) -- C:\WINDOWS\system32\vbicodec.ax [53248] O44 - LFC:[MD5.7A2CC3719B255E6B5D74396183B7715B] - 7/3/2015 - 08:43:56 ---A- . (.Microsoft Corporation - Microsoft UxTheme Library.) -- C:\WINDOWS\system32\uxtheme.dll [218624] O44 - LFC:[MD5.69832690CF24C5A038BF70F82059BA2B] - 7/3/2015 - 08:43:56 ---A- . (.Microsoft Corporation - VBI Surface Allocator Filter.) -- C:\WINDOWS\system32\vbisurf.ax [30208] O44 - LFC:[MD5.CAFBD14F56A68E6C1A55C0EAC7E487FA] - 7/3/2015 - 08:43:56 ---A- . (.Microsoft Corporation - Visual Basic for Applications Development E.) -- C:\WINDOWS\system32\vbajet32.dll [30749] O44 - LFC:[MD5.FE8F5AFDBAA3D9A3E871ADD8AF12F69A] - 7/3/2015 - 08:43:58 ---A- . (.Microsoft Corporation - 32-bit MSCDEX Virtual Device Driver.) -- C:\WINDOWS\system32\vcdex.dll [7680] O44 - LFC:[MD5.6E83376494410F324A9698863127C4DB] - 7/3/2015 - 08:43:58 ---A- . (.Microsoft Corporation - Microsoft (R) VBScript.) -- C:\WINDOWS\system32\vbscript.dll [420864] O44 - LFC:[MD5.0DFA4D5E8205614EDA53394E637812E4] - 7/3/2015 - 08:44:00 ---A- . (.Microsoft Corporation - VDMDBG.DLL.) -- C:\WINDOWS\system32\vdmdbg.dll [26112] O44 - LFC:[MD5.D022D32A7BCB0B54C34BD687AC00564C] - 7/3/2015 - 08:44:00 ---A- . (.Microsoft Corporation - Version Checking and File Installation Libr.) -- C:\WINDOWS\system32\ver.dll [9008] O44 - LFC:[MD5.FB60471A0FFFD621F1CFB0A32067A0E6] - 7/3/2015 - 08:44:00 ---A- . (.Microsoft Corporation - Virtual Dos Machine Network Interface Libra.) -- C:\WINDOWS\system32\vdmredir.dll [51712] O44 - LFC:[MD5.001ACB94BA42ABB192820B8CC3D16A83] - 7/3/2015 - 08:44:02 ---A- . (.Microsoft Corporation - Driver Verifier Manager.) -- C:\WINDOWS\system32\verifier.exe [98304] O44 - LFC:[MD5.23FE524810B8992BD8E1F2C2A32B3DF9] - 7/3/2015 - 08:44:02 ---A- . (.Microsoft Corporation - Standard application verifier provider dll.) -- C:\WINDOWS\system32\verifier.dll [26624] O44 - LFC:[MD5.ECB7591870F8BFB1A4C17B718AD5A4AA] - 7/3/2015 - 08:44:02 ---A- . (.Microsoft Corporation - VGA 16 Colour Display Driver.) -- C:\WINDOWS\system32\vga.dll [9344] O44 - LFC:[MD5.91790D6749EBED90E2C40479C0A91879] - 7/3/2015 - 08:44:02 ---A- . (.Microsoft Corporation - Verify Class ID.) -- C:\WINDOWS\system32\verclsid.exe [28672] O44 - LFC:[MD5.C7CE131408739B0B3A318BE2D0032719] - 7/3/2015 - 08:44:02 ---A- . (.Microsoft Corporation - Version Checking and File Installation Libr.) -- C:\WINDOWS\system32\version.dll [18944] O44 - LFC:[MD5.908A0E4EB81B2649BB12A69DD1D0E948] - 7/3/2015 - 08:44:02 ---A- . (.Microsoft Corporation - vfpodbc.) -- C:\WINDOWS\system32\vfpodbc.dll [20535] O44 - LFC:[MD5.1FB5E4AD68B9091148D2A28CF6831D77] - 7/3/2015 - 08:44:04 ---A- . (.Microsoft Corporation - 256 Color VGA\SVGA Display Driver.) -- C:\WINDOWS\system32\vga256.dll [51456] O44 - LFC:[MD5.D5A9D4E5DFD788A5F427DEC60A278FBD] - 7/3/2015 - 08:44:04 ---A- . (.Microsoft Corporation - 32K/64K color VGA\SVGA Display Driver.) -- C:\WINDOWS\system32\vga64k.dll [18176] O44 - LFC:[MD5.0D3A8FAFCEACD8B7625CD549757A7DF1] - 7/3/2015 - 08:44:04 ---A- . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys [20992] O44 - LFC:[MD5.9C86BBB80450AF95B6A4EA8EBDA93D76] - 7/3/2015 - 08:44:04 ---A- . (.Microsoft Corporation - WOW Display Driver Module.) -- C:\WINDOWS\system32\vga.drv [2176] O44 - LFC:[MD5.496EC9D90953AEB7F259D292E7D3EEAE] - 7/3/2015 - 08:44:08 ---A- . (...) -- C:\WINDOWS\system32\vwipxspx.exe [1129] O44 - LFC:[MD5.4185D5A698A9D90E19D78732D5229A58] - 7/3/2015 - 08:44:08 ---A- . (.Microsoft Corporation - 32-bit Joystick Virtual Device Driver.) -- C:\WINDOWS\system32\vjoy.dll [4608] O44 - LFC:[MD5.CDF76989D9FE20B7CC79C9C3F7BA2D4C] - 7/3/2015 - 08:44:08 ---A- . (.Microsoft Corporation - Command Line Interface for Microsoft® Volum.) -- C:\WINDOWS\system32\vssadmin.exe [33792] O44 - LFC:[MD5.ACACB8B14E66109B8ACD6644B5574B9A] - 7/3/2015 - 08:44:08 ---A- . (.Microsoft Corporation - Microsoft® Volume Shadow Copy Requestor/Wri.) -- C:\WINDOWS\system32\vssapi.dll [430592] O44 - LFC:[MD5.CC01C7628F58FA48224B2D537A91D822] - 7/3/2015 - 08:44:08 ---A- . (.Microsoft Corporation - Microsoft® Volume Shadow Copy Service proxy.) -- C:\WINDOWS\system32\vss_ps.dll [16896] O44 - LFC:[MD5.7A9DB3A67C333BF0BD42E42B8596854B] - 7/3/2015 - 08:44:08 ---A- . (.Microsoft Corporation - Microsoft® Volume Shadow Copy Service.) -- C:\WINDOWS\system32\vssvc.exe [289792] O44 - LFC:[MD5.E28726B72C46821A28830E077D39A55B] - 7/3/2015 - 08:44:08 ---A- . (.Microsoft Corporation - Video Port Driver.) -- C:\WINDOWS\system32\Drivers\videoprt.sys [81664] O44 - LFC:[MD5.6A4BD2F2587EDED88B6BD63AE55050BB] - 7/3/2015 - 08:44:08 ---A- . (.Microsoft Corporation - Virtual Dos Machine IPX/SPX Interface Libra.) -- C:\WINDOWS\system32\vwipxspx.dll [19456] O44 - LFC:[MD5.4C8FCB5CC53AAB716D810740FE59D025] - 7/3/2015 - 08:44:08 ---A- . (.Microsoft Corporation - Volume Shadow Copy Driver.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [52352] O44 - LFC:[MD5.B14CA7F013C02BFACE23EF9E7B4816B5] - 7/3/2015 - 08:44:08 ---A- . (.Microsoft Corporation - Windows VMM Registry Library.) -- C:\WINDOWS\vmmreg32.dll [18944] O44 - LFC:[MD5.C147AFA614B9925479D47CD173329789] - 7/3/2015 - 08:44:08 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\WINDOWS\system32\Drivers\viaide.sys [13976] O44 - LFC:[MD5.6100A808600F44D999CEBDEF8841C7A3] - 7/3/2015 - 08:44:10 ---A- . (.Microsoft Corporation - SSL service for HTTP.) -- C:\WINDOWS\system32\w3ssl.dll [15872] O44 - LFC:[MD5.5D7628FFBFB6FF709F2DA8513EEAE409] - 7/3/2015 - 08:44:10 ---A- . (.Microsoft Corporation - Windows NT Topology Maintenance Tool.) -- C:\WINDOWS\system32\w32topl.dll [22016] O44 - LFC:[MD5.2DC9E3A42B947F3E9B903AC2C36BED83] - 7/3/2015 - 08:44:10 ---A- . (.Microsoft Corporation - Windows Time Service Diagnostic Tool.) -- C:\WINDOWS\system32\w32tm.exe [52736] O44 - LFC:[MD5.9F8A0D0CBB2FA265A754516128C00E22] - 7/3/2015 - 08:44:10 ---A- . (.Microsoft Corporation - Windows Time Service.) -- C:\WINDOWS\system32\w32time.dll [175616] O44 - LFC:[MD5.5D10827B66C97C11D29612BA0380A9B7] - 7/3/2015 - 08:44:14 ---A- . (...) -- C:\WINDOWS\system32\wbcache.deu [65489] O44 - LFC:[MD5.5D10827B66C97C11D29612BA0380A9B7] - 7/3/2015 - 08:44:14 ---A- . (...) -- C:\WINDOWS\system32\wbcache.enu [65489] O44 - LFC:[MD5.E20B95BAEDB550F32DD489265C1DA1F6] - 7/3/2015 - 08:44:14 ---A- . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) -- C:\WINDOWS\system32\Drivers\wanarp.sys [34560] O44 - LFC:[MD5.88DE252338BB4F25A15099CAD5A87D27] - 7/3/2015 - 08:44:14 ---A- . (.Microsoft Corporation - Microsoft Wave MSP.) -- C:\WINDOWS\system32\wavemsp.dll [215552] O44 - LFC:[MD5.9A10AACBFDC4922715375FB4065EC930] - 7/3/2015 - 08:44:14 ---A- . (.Microsoft Corporation - Watchdog Driver.) -- C:\WINDOWS\system32\watchdog.sys [17664] O44 - LFC:[MD5.5D10827B66C97C11D29612BA0380A9B7] - 7/3/2015 - 08:44:16 ---A- . (...) -- C:\WINDOWS\system32\wbcache.esn [65489] O44 - LFC:[MD5.5D10827B66C97C11D29612BA0380A9B7] - 7/3/2015 - 08:44:16 ---A- . (...) -- C:\WINDOWS\system32\wbcache.fra [65489] O44 - LFC:[MD5.5D10827B66C97C11D29612BA0380A9B7] - 7/3/2015 - 08:44:16 ---A- . (...) -- C:\WINDOWS\system32\wbcache.ita [65489] O44 - LFC:[MD5.5D10827B66C97C11D29612BA0380A9B7] - 7/3/2015 - 08:44:16 ---A- . (...) -- C:\WINDOWS\system32\wbcache.nld [65489] O44 - LFC:[MD5.5D10827B66C97C11D29612BA0380A9B7] - 7/3/2015 - 08:44:16 ---A- . (...) -- C:\WINDOWS\system32\wbcache.sve [65489] O44 - LFC:[MD5.F2BAE36CE7B07CDC32366B8E39C9F546] - 7/3/2015 - 08:44:16 ---A- . (...) -- C:\WINDOWS\system32\wbdbase.deu [1309184] O44 - LFC:[MD5.57E8595A50934D8D74D72EE3F3541166] - 7/3/2015 - 08:44:16 ---A- . (...) -- C:\WINDOWS\system32\wbdbase.enu [957440] O44 - LFC:[MD5.47BDD284DD36F5693F0E0FE820394E96] - 7/3/2015 - 08:44:16 ---A- . (...) -- C:\WINDOWS\system32\wbdbase.esn [750080] O44 - LFC:[MD5.8803C0E2B48BD8C600FE8110AE30B4EC] - 7/3/2015 - 08:44:16 ---A- . (...) -- C:\WINDOWS\system32\wbdbase.fra [786944] O44 - LFC:[MD5.955B85225FDB1E3EFD8451B5C99D9C7E] - 7/3/2015 - 08:44:16 ---A- . (...) -- C:\WINDOWS\system32\wbdbase.ita [867840] O44 - LFC:[MD5.5D616E8BA1B03511F344DA510AE48E12] - 7/3/2015 - 08:44:16 ---A- . (...) -- C:\WINDOWS\system32\wbdbase.nld [1095680] O44 - LFC:[MD5.DDFCDFA3E61D479F9DD0CDC73BDA446A] - 7/3/2015 - 08:44:16 ---A- . (...) -- C:\WINDOWS\system32\wbdbase.sve [937984] O44 - LFC:[MD5.1A69323DFACCE17817F68AC0E53DE42C] - 7/3/2015 - 08:44:20 ---A- . (...) -- C:\WINDOWS\system32\wdl.trm [4096] O44 - LFC:[MD5.BAE413E34804DDD5C763B3BEC1005FCB] - 7/3/2015 - 08:44:20 ---A- . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll [54272] O44 - LFC:[MD5.F42DDDD518B982CD2BDB0AF7D5171359] - 7/3/2015 - 08:44:24 ---A- . (...) -- C:\WINDOWS\system32\webfldrs.msi [1326080] O44 - LFC:[MD5.AE831B9821C224274CEFB2DD78D5CF2F] - 7/3/2015 - 08:44:24 ---A- . (.Microsoft Corporation - Indexing Service Webhits.) -- C:\WINDOWS\system32\webhits.dll [40448] O44 - LFC:[MD5.EA7AE79E273FE65879A2D6B5DBE913FB] - 7/3/2015 - 08:44:24 ---A- . (.Microsoft Corporation - Shell WebView Content & Control Library.) -- C:\WINDOWS\system32\webvw.dll [135680] O44 - LFC:[MD5.703591CD1403BC19E7198CA7B314E132] - 7/3/2015 - 08:44:24 ---A- . (.Microsoft Corporation - Web DAV Service DLL.) -- C:\WINDOWS\system32\webclnt.dll [68096] O44 - LFC:[MD5.CC8915DB4E33E8FB29CA0D2DBF75306E] - 7/3/2015 - 08:44:24 ---A- . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll [236544] O44 - LFC:[MD5.2FCCA89EA18CBABAD85B47D8D0CC375B] - 7/3/2015 - 08:44:26 ---A- . (.Microsoft Corporation - Win32 Cabinet Self-Extractor.) -- C:\WINDOWS\system32\wextract.exe [65024] O44 - LFC:[MD5.485FE82CA36117F5E1599831EDD6FB14] - 7/3/2015 - 08:44:26 ---A- . (.Microsoft Corporation - Windows Picture Acquisition Wizard.) -- C:\WINDOWS\system32\wiaacmgr.exe [433664] O44 - LFC:[MD5.5302ADA9B0793C84151FC463DD65D7BF] - 7/3/2015 - 08:44:26 ---A- . (.Microsoft Corporation - Windows for Workgroups network driver.) -- C:\WINDOWS\system32\wfwnet.drv [13600] O44 - LFC:[MD5.BEF31EF51A02F4E18A06EB1806F51403] - 7/3/2015 - 08:44:28 ---A- . (...) -- C:\WINDOWS\system32\wiasf.ax [40448] O44 - LFC:[MD5.BF67AC2C1F41BE892B98E9B8E91C0CB8] - 7/3/2015 - 08:44:28 ---A- . (.Microsoft Corporation - Imaging Devices Shell Folder UI.) -- C:\WINDOWS\system32\wiashext.dll [589312] O44 - LFC:[MD5.78A94730586C2DEB9876B06B244091A8] - 7/3/2015 - 08:44:28 ---A- . (.Microsoft Corporation - Microsoft Windows Codecs Library.) -- C:\WINDOWS\system32\windowscodecs.dll [712704] O44 - LFC:[MD5.8BAD69CBAC032D4BBACFCE0306174C30] - 7/3/2015 - 08:44:28 ---A- . (.Microsoft Corporation - Still Image Devices Service.) -- C:\WINDOWS\system32\wiaservc.dll [333824] O44 - LFC:[MD5.0E876FC0327377F08657A1A0383DDA59] - 7/3/2015 - 08:44:28 ---A- . (.Microsoft Corporation - WIA Scanner Default UI.) -- C:\WINDOWS\system32\wiadefui.dll [463360] O44 - LFC:[MD5.477BB51076B926E1A68840C267540042] - 7/3/2015 - 08:44:28 ---A- . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll [75776] O44 - LFC:[MD5.7A81D6CEFB55C0ABD620EF817B6248EE] - 7/3/2015 - 08:44:28 ---A- . (.Microsoft Corporation - WIA TWAIN compatibility layer.) -- C:\WINDOWS\system32\wiadss.dll [124416] O44 - LFC:[MD5.39DD0C97932CDFDCF006569E1A942728] - 7/3/2015 - 08:44:28 ---A- . (.Microsoft Corporation - WIA Video Stream device USD.) -- C:\WINDOWS\system32\wiavusd.dll [145408] O44 - LFC:[MD5.C664AF64A38797CE1D355A51629148A0] - 7/3/2015 - 08:44:28 ---A- . (.Microsoft Corporation - WIA Video.) -- C:\WINDOWS\system32\wiavideo.dll [111104] O44 - LFC:[MD5.8715347D6B7B2E3A7CFE5ADF2D510CE3] - 7/3/2015 - 08:44:29 ---A- . (...) -- C:\WINDOWS\win.ini [477] O44 - LFC:[MD5.BD1A87DCE29C6FA7B2200712D9738D69] - 7/3/2015 - 08:44:30 ---A- . (.Microsoft Corporation - Microsoft Windows Codecs Extended Library.) -- C:\WINDOWS\system32\windowscodecsext.dll [347648] O44 - LFC:[MD5.F4E19C0616E5A1F1765F74CB768E04A7] - 7/3/2015 - 08:44:30 ---A- . (.Microsoft Corporation - WIN.COM for compatibility.) -- C:\WINDOWS\system32\win.com [18432] O44 - LFC:[MD5.67E592A0E02980273CA567661C68C069] - 7/3/2015 - 08:44:30 ---A- . (.Microsoft Corporation - Windows WIFE interface core component.) -- C:\WINDOWS\system32\wifeman.dll [9216] O44 - LFC:[MD5.C980C971AD4FF3CA5CEFDEF40932D3A1] - 7/3/2015 - 08:44:32 ---A- . (...) -- C:\WINDOWS\system32\win87em.dll [13312] O44 - LFC:[MD5.53CE541B4B1F2D227B0F1FA08915DC7A] - 7/3/2015 - 08:44:32 ---A- . (.Microsoft Corporation - 32-bit Spooler API DLL.) -- C:\WINDOWS\system32\win32spl.dll [104960] O44 - LFC:[MD5.80AAA73D56272FD54DC6DE8643D10E9F] - 7/3/2015 - 08:44:32 ---A- . (.Microsoft Corporation - Multi-User Win32 Driver.) -- C:\WINDOWS\system32\win32k.sys [1879040] O44 - LFC:[MD5.17063190E94407460CC520F88BDA0041] - 7/3/2015 - 08:44:48 ---A- . (.Microsoft Corporation - Windows Branding Resources.) -- C:\WINDOWS\system32\winbrand.dll [1647616] O44 - LFC:[MD5.8955C6718A3E3118394DCE266BA4F4B4] - 7/3/2015 - 08:44:50 ---A- . (...) -- C:\WINDOWS\system32\winhelp.hlp [32674] O44 - LFC:[MD5.8AF91E4B4C1F5338EBE1548117304296] - 7/3/2015 - 08:44:50 ---A- . (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\WINDOWS\system32\wininet.dll [920064] O44 - LFC:[MD5.492AB295EBB6226E8329EAE7A21A7386] - 7/3/2015 - 08:44:50 ---A- . (.Microsoft Corporation - Microsoft Fax API Support DLL.) -- C:\WINDOWS\system32\winfax.dll [9216] O44 - LFC:[MD5.65A9495A436F5402BC1C467E1B926C27] - 7/3/2015 - 08:44:50 ---A- . (.Microsoft Corporation - Microsoft® Help.) -- C:\WINDOWS\winhlp32.exe [283648] O44 - LFC:[MD5.59CD0AA0B19874A2B3B97D84DA09261C] - 7/3/2015 - 08:44:50 ---A- . (.Microsoft Corporation - RemoteApps Winstation Library.) -- C:\WINDOWS\system32\winlogonnotification.dll [45056] O44 - LFC:[MD5.CB61F20255C666E59F076247203D8496] - 7/3/2015 - 08:44:50 ---A- . (.Microsoft Corporation - WinFX Runtime Components.) -- C:\WINDOWS\system32\winfxdocobj.exe [208384] O44 - LFC:[MD5.D0A8A9FAD0A3ECC77D545498651C79EB] - 7/3/2015 - 08:44:50 ---A- . (.Microsoft Corporation - Windows HTTP Services.) -- C:\WINDOWS\system32\winhttp.dll [354816] O44 - LFC:[MD5.8E6F7D51A5CB299C25621C6C1AB57E84] - 7/3/2015 - 08:44:50 ---A- . (.Microsoft Corporation - Windows Help Engine application file.) -- C:\WINDOWS\winhelp.exe [256192] O44 - LFC:[MD5.248712EA6BA17B9FF0C542A3828375DD] - 7/3/2015 - 08:44:50 ---A- . (.Microsoft Corporation - Windows IPSec SPD Client DLL.) -- C:\WINDOWS\system32\winipsec.dll [32256] O44 - LFC:[MD5.4A83111AA75D8A26AB0EABC03CFC95E0] - 7/3/2015 - 08:44:50 ---A- . (.Microsoft Corporation - Windows NT Logon Application.) -- C:\WINDOWS\system32\winlogon.exe [509440] O44 - LFC:[MD5.37B726C72699456BF34134C2BB89727A] - 7/3/2015 - 08:44:50 ---A- . (.Microsoft Corporation - Windows Winhlp32 Stub.) -- C:\WINDOWS\system32\winhlp32.exe [8192] O44 - LFC:[MD5.68A2A86C78D46C6A79A6E93C340B1AE5] - 7/3/2015 - 08:44:52 ---A- . (.Microsoft Corporation - MCI API DLL.) -- C:\WINDOWS\system32\winmm.dll [176128] O44 - LFC:[MD5.8DEFA9F833E4A4F67BA9CEAB1FA9F6FA] - 7/3/2015 - 08:44:52 ---A- . (.Microsoft Corporation - System Information.) -- C:\WINDOWS\system32\winmsd.exe [11776] O44 - LFC:[MD5.37F4D55260E037EE9862D0AF93348755] - 7/3/2015 - 08:44:52 ---A- . (.Microsoft Corporation - Windows IME interface core component.) -- C:\WINDOWS\system32\winnls.dll [5120] O44 - LFC:[MD5.B34C518960C9600E12508A552702D4F0] - 7/3/2015 - 08:44:52 ---A- . (.Microsoft Corporation - Windows Setup BillBrd DLL.) -- C:\WINDOWS\system32\winntbbu.dll [756224] O44 - LFC:[MD5.DF2D3B93C7D673343EC95CDE1FD8A0D1] - 7/3/2015 - 08:44:56 ---A- . (.Microsoft Corporation - File Risk Estimation.) -- C:\WINDOWS\system32\winshfhc.dll [17408] O44 - LFC:[MD5.D72B9EC3337B247A666F098F3D6B43DE] - 7/3/2015 - 08:44:56 ---A- . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll [16896] O44 - LFC:[MD5.02988B904C386B500CD08639C4C20EEA] - 7/3/2015 - 08:44:56 ---A- . (.Microsoft Corporation - Microsoft Smart Card API.) -- C:\WINDOWS\system32\winscard.dll [99328] O44 - LFC:[MD5.0B4B94B78123E8035B84105BC024F9F8] - 7/3/2015 - 08:44:56 ---A- . (.Microsoft Corporation - Windows 16-bit WOW Psuedo Printer Driver (l.) -- C:\WINDOWS\system32\winspool.exe [2112] O44 - LFC:[MD5.0DDFD6315DA4B29D09D09B6873EA460B] - 7/3/2015 - 08:44:56 ---A- . (.Microsoft Corporation - Windows NT Non-Win16 application shell.) -- C:\WINDOWS\system32\winoldap.mod [2080] O44 - LFC:[MD5.68485C5EF0E2EFCEBF21BBB1042B823B] - 7/3/2015 - 08:44:56 ---A- . (.Microsoft Corporation - Windows Socket 16-Bit DLL.) -- C:\WINDOWS\system32\winsock.dll [2864] O44 - LFC:[MD5.BD83ABA61E8ACCC8D9FFB869F29418CE] - 7/3/2015 - 08:44:56 ---A- . (.Microsoft Corporation - Windows Spooler Driver.) -- C:\WINDOWS\system32\winspool.drv [146432] O44 - LFC:[MD5.BA529C83AD2F49693DE42FFBDE8D37AE] - 7/3/2015 - 08:44:58 ---A- . (.Microsoft Corporation - Microsoft Trust Verification APIs.) -- C:\WINDOWS\system32\wintrust.dll [178176] O44 - LFC:[MD5.7E444B04608638A60013F95B1A4EE7DC] - 7/3/2015 - 08:44:58 ---A- . (.Microsoft Corporation - Streams DLL.) -- C:\WINDOWS\system32\winstrm.dll [18944] O44 - LFC:[MD5.331B01DD3D2F0EFB16F9149F42305D64] - 7/3/2015 - 08:44:58 ---A- . (.Microsoft Corporation - Version Reporter Applet.) -- C:\WINDOWS\system32\winver.exe [5632] O44 - LFC:[MD5.A6430B97C05DA8A4BA70E8280B2E6287] - 7/3/2015 - 08:44:58 ---A- . (.Microsoft Corporation - Windows Server DLL.) -- C:\WINDOWS\system32\winsrv.dll [293376] O44 - LFC:[MD5.430CEB794F6E6EF8AC86958C242366D6] - 7/3/2015 - 08:44:58 ---A- . (.Microsoft Corporation - Winstation Library.) -- C:\WINDOWS\system32\winsta.dll [53760] O44 - LFC:[MD5.4EE8FFA94992AAAA804028AEF94696D8] - 7/3/2015 - 08:44:58 ---A- . (.Microsoft Corporation - WorkspaceRuntime ProxyStub DLL.) -- C:\WINDOWS\system32\wksprtps.dll [12800] O44 - LFC:[MD5.EE4E2F7757C9F5B2B7B8367E25C60237] - 7/3/2015 - 08:44:58 ---A- . (.Microsoft Corporation - WorkspaceRuntime.) -- C:\WINDOWS\system32\wksprt.exe [223232] O44 - LFC:[MD5.3B9324D60DD321BAB7BF6F77931D3FD1] - 7/3/2015 - 08:44:58 ---A- . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [134144] O44 - LFC:[MD5.2CC34E8BB667EEF78899546E12649196] - 7/3/2015 - 08:45:00 ---A- . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll [92672] O44 - LFC:[MD5.C509442573D9A66C2A07BDE053A0ADB6] - 7/3/2015 - 08:45:00 ---A- . (.Microsoft Corporation - Corona Windows Media Audio 9 Encoder/Transc.) -- C:\WINDOWS\system32\wmadmoe.dll [670720] O44 - LFC:[MD5.D5374ABFE13B5455EB26569DED5D7916] - 7/3/2015 - 08:45:00 ---A- . (.Microsoft Corporation - Corona Windows Media Audio Decoder.) -- C:\WINDOWS\system32\wmadmod.dll [408064] O44 - LFC:[MD5.0492CF5870F0E616B0C71695A433D162] - 7/3/2015 - 08:45:00 ---A- . (.Microsoft Corporation - Win32 LDAP API DLL.) -- C:\WINDOWS\system32\wldap32.dll [172032] O44 - LFC:[MD5.3406C40E64755CC43919218AF12A616D] - 7/3/2015 - 08:45:00 ---A- . (.Microsoft Corporation - Windows Media ASF DLL.) -- C:\WINDOWS\system32\wmasf.dll [230912] O44 - LFC:[MD5.A3F63E2DF74E7C87EDC9465FA06BC1D1] - 7/3/2015 - 08:45:00 ---A- . (.Microsoft Corporation - Windows Media Device Manager Logger.) -- C:\WINDOWS\system32\wmdmlog.dll [27136] O44 - LFC:[MD5.B941A5F4729B823934401818989FF0DE] - 7/3/2015 - 08:45:00 ---A- . (.Microsoft Corporation - Windows Media Device Manager Proxy Stub.) -- C:\WINDOWS\system32\wmdmps.dll [23552] O44 - LFC:[MD5.A8E132C8674D7D52945BAA8296AEFCFF] - 7/3/2015 - 08:45:00 ---A- . (.Microsoft Corporation - Windows Media Services Error Definitions.) -- C:\WINDOWS\system32\wmerrenu.dll [51200] O44 - LFC:[MD5.9EEFE69139FDBB4A3C327630F8EB993A] - 7/3/2015 - 08:45:00 ---A- . (.Microsoft Corporation - Windows Wireless LAN 802.11 Client Side API.) -- C:\WINDOWS\system32\wlanapi.dll [69120] O44 - LFC:[MD5.7B0770526801F05D58C51A3DFB87B4BD] - 7/3/2015 - 08:45:02 ---A- . (.Microsoft Corporation - WMI DC and DP functionality.) -- C:\WINDOWS\system32\wmi.dll [5632] O44 - LFC:[MD5.2F31B7F954BED437F2C75026C65CAF7B] - 7/3/2015 - 08:45:02 ---A- . (.Microsoft Corporation - WMILIB WMI support library Dll.) -- C:\WINDOWS\system32\Drivers\wmilib.sys [4352] O44 - LFC:[MD5.C1B3CFFE4940B5ABBB0F89BBD3F76940] - 7/3/2015 - 08:45:02 ---A- . (.Microsoft Corporation - Windows Media Error Definitions (English).) -- C:\WINDOWS\system32\wmerror.dll [168448] O44 - LFC:[MD5.812466CECD47EC365FE51BA23C7CD43B] - 7/3/2015 - 08:45:02 ---A- . (.Microsoft Corporation - Windows Media Indexer DLL.) -- C:\WINDOWS\system32\wmidx.dll [151552] O44 - LFC:[MD5.447D65E92E0353CCB103DCED7044D6C3] - 7/3/2015 - 08:45:04 ---A- . (.Microsoft Corporation - WDM Provider Dynamic Property Page CoInstal.) -- C:\WINDOWS\system32\wmiprop.dll [18944] O44 - LFC:[MD5.55515C2BB7AFE5592174823B7F93C05C] - 7/3/2015 - 08:45:04 ---A- . (.Microsoft Corporation - WMI Filter Manager.) -- C:\WINDOWS\system32\wmiscmgr.dll [55808] O44 - LFC:[MD5.C829882C3C71C5B13E62DDCAEB1BA728] - 7/3/2015 - 08:45:06 ---A- . (.Microsoft Corporation - Windows Media Filter Shim.) -- C:\WINDOWS\system32\wmpasf.dll [114688] O44 - LFC:[MD5.CDB2CDE938E6FA552F5C44F69F3C46BB] - 7/3/2015 - 08:45:06 ---A- . (.Microsoft Corporation - Windows Media Network Plugin Manager DLL.) -- C:\WINDOWS\system32\wmnetmgr.dll [1053696] O44 - LFC:[MD5.B9610D4A0230892D66DFB847DEBF181C] - 7/3/2015 - 08:45:06 ---A- . (.Microsoft Corporation - Windows Media Player Core.) -- C:\WINDOWS\system32\wmp.dll [4886528] O44 - LFC:[MD5.B21D87CFEA61C1DA0FBE821FB41EC62B] - 7/3/2015 - 08:45:06 ---A- . (.Microsoft Corporation - Windows Media Player.) -- C:\WINDOWS\system32\wmp.ocx [20480] O44 - LFC:[MD5.93F10D7C6FB1EFC75CB8E14E435047E4] - 7/3/2015 - 08:45:08 ---A- . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll [233472] O44 - LFC:[MD5.EF3EC9DCFEECE43A1F69C8A95505E47A] - 7/3/2015 - 08:45:08 ---A- . (.Microsoft Corporation - Windows Media Photo Codec.) -- C:\WINDOWS\system32\wmphoto.dll [276992] O44 - LFC:[MD5.CA839E5E1FD8034DBCA955F278CA4190] - 7/3/2015 - 08:45:08 ---A- . (.Microsoft Corporation - Windows Media Player Launcher.) -- C:\WINDOWS\system32\wmpshell.dll [102400] O44 - LFC:[MD5.F4F43F437997AAC1C2C02C2FB52085D2] - 7/3/2015 - 08:45:08 ---A- . (.Microsoft Corporation - Windows Media Player.) -- C:\WINDOWS\system32\wmpcd.dll [20480] O44 - LFC:[MD5.391A962D21DFC73B2B5BBC3B35B9BDE3] - 7/3/2015 - 08:45:08 ---A- . (.Microsoft Corporation - Windows Media Player.) -- C:\WINDOWS\system32\wmpcore.dll [20480] O44 - LFC:[MD5.3F8E3DCC2303A8B683D65895B1438BF2] - 7/3/2015 - 08:45:08 ---A- . (.Microsoft Corporation - Windows Media Player.) -- C:\WINDOWS\system32\wmploc.dll [2940928] O44 - LFC:[MD5.F9574952CE08D37C9485DC3930DEC253] - 7/3/2015 - 08:45:10 ---A- . (.Microsoft Corporation - Corona Windows Media Screen Encoder.) -- C:\WINDOWS\system32\wmsdmoe2.dll [1119744] O44 - LFC:[MD5.C337105B5A13A3C666ECDABFCDE5C229] - 7/3/2015 - 08:45:10 ---A- . (.Microsoft Corporation - Corona Windows Media Video Decoder.) -- C:\WINDOWS\system32\wmvdmod.dll [810496] O44 - LFC:[MD5.AB1DC520F57A2282259B62035B4271BD] - 7/3/2015 - 08:45:10 ---A- . (.Microsoft Corporation - Corona Windows Media Video Encoder.) -- C:\WINDOWS\system32\wmvdmoe2.dll [1001472] O44 - LFC:[MD5.B948993BC485CFFEADE246F1C66652E8] - 7/3/2015 - 08:45:10 ---A- . (.Microsoft Corporation - Windows Media Playback/Authoring DLL.) -- C:\WINDOWS\system32\wmvcore.dll [2113536] O44 - LFC:[MD5.EB35C9C31683951143CE5C6CB4DDB89C] - 7/3/2015 - 08:45:10 ---A- . (.Microsoft Corporation - Windows Media Player.) -- C:\WINDOWS\system32\wmpui.dll [20480] O44 - LFC:[MD5.E699E6484E9504CDB8D5B3A49364E93F] - 7/3/2015 - 08:45:10 ---A- . (.Microsoft Corporation - Windows Media Screen Decoder.) -- C:\WINDOWS\system32\wmsdmod.dll [759296] O44 - LFC:[MD5.22091EFAB019A725FF7FA195A2DBDD43] - 7/3/2015 - 08:45:10 ---A- . (.Microsoft Corporation - Windows Media Screen Encoder.) -- C:\WINDOWS\system32\wmsdmoe.dll [115200] O44 - LFC:[MD5.D9686345161D4FE00E9B9DC4FB589B65] - 7/3/2015 - 08:45:10 ---A- . (.Microsoft Corporation - Windows Media Speech Decoder.) -- C:\WINDOWS\system32\wmspdmod.dll [485376] O44 - LFC:[MD5.439221F57A63FD7D47E54FE99FDBBBAC] - 7/3/2015 - 08:45:10 ---A- . (.Microsoft Corporation - Windows Media Speech Encoder.) -- C:\WINDOWS\system32\wmspdmoe.dll [897024] O44 - LFC:[MD5.6AAC759B663746279AA072404A6E9448] - 7/3/2015 - 08:45:10 ---A- . (.Microsoft Corporation - Windows Media Streamer DLL.) -- C:\WINDOWS\system32\wmstream.dll [303616] O44 - LFC:[MD5.7C300C535ECE3301C029DFE0E17930BC] - 7/3/2015 - 08:45:10 ---A- . (.Microsoft Corporation - Windows Media Video Decoder V8.) -- C:\WINDOWS\system32\wmv8ds32.ax [278559] O44 - LFC:[MD5.DB5AC0F93742D926BDEAA7BB6CE591C1] - 7/3/2015 - 08:45:10 ---A- . (.Microsoft Corporation - Windows Media Video Decoder.) -- C:\WINDOWS\system32\wmvds32.ax [258048] O44 - LFC:[MD5.045DF7AE14CAAED71338916D6FB66812] - 7/3/2015 - 08:45:12 ---A- . (.Microsoft Corporation - 32-bit WOW Subsystem Library.) -- C:\WINDOWS\system32\wow32.dll [264192] O44 - LFC:[MD5.CEA8F7E45B7B098F5FB085BB6A6A4432] - 7/3/2015 - 08:45:12 ---A- . (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\wscript.exe [155648] O44 - LFC:[MD5.C7758F43F68584FFBC17AFD0C3B3F9BD] - 7/3/2015 - 08:45:12 ---A- . (.Microsoft Corporation - Support exe for Internet Printing.) -- C:\WINDOWS\system32\wpnpinst.exe [11264] O44 - LFC:[MD5.F92E1076C42FCD6DB3D72D8CFE9816D5] - 7/3/2015 - 08:45:12 ---A- . (.Microsoft Corporation - Windows Security Center Notification App.) -- C:\WINDOWS\system32\wscntfy.exe [13824] O44 - LFC:[MD5.2CCC474EB85CEAA3E1FA1726580A3E5A] - 7/3/2015 - 08:45:12 ---A- . (.Microsoft Corporation - Windows Socket 2.0 32-Bit DLL.) -- C:\WINDOWS\system32\ws2_32.dll [82432] O44 - LFC:[MD5.9789E95E1D88EEB4B922BF3EA7779C28] - 7/3/2015 - 08:45:12 ---A- . (.Microsoft Corporation - Windows Socket 2.0 Helper for Windows NT.) -- C:\WINDOWS\system32\ws2help.dll [19968] O44 - LFC:[MD5.90CE97657B3F0B651EE8F438A4AB577E] - 7/3/2015 - 08:45:12 ---A- . (.Microsoft Corporation - Windows WPA Balloon Reminder.) -- C:\WINDOWS\system32\wpabaln.exe [32256] O44 - LFC:[MD5.5BD0D6D04C254E4A5EF694F8FF68264E] - 7/3/2015 - 08:45:12 ---A- . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\system32\wowexec.exe [10368] O44 - LFC:[MD5.A7B82D6B38A2ACD3B2684E7371C6CE93] - 7/3/2015 - 08:45:12 ---A- . (.Microsoft Corporation - Windows Win16 Debugging Helper.) -- C:\WINDOWS\system32\wowdeb.exe [2736] O44 - LFC:[MD5.6ABE6E225ADB5A751622A9CC3BC19CE8] - 7/3/2015 - 08:45:12 ---A- . (.Microsoft Corporation - Winsock2 IFS Layer.) -- C:\WINDOWS\system32\Drivers\ws2ifsl.sys [12032] O44 - LFC:[MD5.60B8C0DB5A8E4D7B4712DF66D6FF2788] - 7/3/2015 - 08:45:14 ---A- . (.Microsoft Corporation - IPv6 Helper DLL.) -- C:\WINDOWS\system32\wship6.dll [14336] O44 - LFC:[MD5.E55547EFD03559997B83F3E7159C40D5] - 7/3/2015 - 08:45:14 ---A- . (.Microsoft Corporation - Microsoft (R) Shell Extension for Windows S.) -- C:\WINDOWS\system32\wshext.dll [90112] O44 - LFC:[MD5.F6A9EE1C95920BC52402FEF681C820F0] - 7/3/2015 - 08:45:14 ---A- . (.Microsoft Corporation - Microsoft (R) Windows Script Controller.) -- C:\WINDOWS\system32\wshcon.dll [36864] O44 - LFC:[MD5.277F3E3333F1D10CA428568197FCCE70] - 7/3/2015 - 08:45:14 ---A- . (.Microsoft Corporation - Microsoft WinSNMP v2.0 Manager API.) -- C:\WINDOWS\system32\wsnmp32.dll [41984] O44 - LFC:[MD5.811BB60991FC03A63F2F844A3F9C6488] - 7/3/2015 - 08:45:14 ---A- . (.Microsoft Corporation - NWLINK2 Socket Helper DLL.) -- C:\WINDOWS\system32\wshisn.dll [11776] O44 - LFC:[MD5.5B24A151B955ADD67326554584297C39] - 7/3/2015 - 08:45:14 ---A- . (.Microsoft Corporation - Netbios Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshnetbs.dll [7168] O44 - LFC:[MD5.254D6FA37C3C1884CF41562715F49331] - 7/3/2015 - 08:45:14 ---A- . (.Microsoft Corporation - Security Center.) -- C:\WINDOWS\system32\wscui.cpl [148480] O44 - LFC:[MD5.8B6EEB735F2A7430D44B032568405AE4] - 7/3/2015 - 08:45:14 ---A- . (.Microsoft Corporation - Security Configuration UI Module.) -- C:\WINDOWS\system32\wsecedit.dll [604160] O44 - LFC:[MD5.FDDD15421393EC28E42B12F690FA9FE4] - 7/3/2015 - 08:45:14 ---A- . (.Microsoft Corporation - Windows Script Host Runtime Library.) -- C:\WINDOWS\system32\wshom.ocx [135168] O44 - LFC:[MD5.7C278E6408D1DCE642230C0585A854D5] - 7/3/2015 - 08:45:14 ---A- . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] O44 - LFC:[MD5.67156D5A9AC356DC99D7BCCB388E3316] - 7/3/2015 - 08:45:14 ---A- . (.Microsoft Corporation - Windows Socket 32-Bit DLL.) -- C:\WINDOWS\system32\wsock32.dll [22528] O44 - LFC:[MD5.79A0CBDC58D951DFEE9345A736029B7D] - 7/3/2015 - 08:45:14 ---A- . (.Microsoft Corporation - Windows Sockets Helper DLL for PGM.) -- C:\WINDOWS\system32\WshRm.dll [11264] O44 - LFC:[MD5.064C79A6B3DB1AEEDD6494F7C0CD5F36] - 7/3/2015 - 08:45:14 ---A- . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshatm.dll [9216] O44 - LFC:[MD5.46C55935FA730144449C884A472827E0] - 7/3/2015 - 08:45:14 ---A- . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshbth.dll [108032] O44 - LFC:[MD5.4E3D06D6E68EEDB52565080F55B460D3] - 7/3/2015 - 08:45:14 ---A- . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshtcpip.dll [19456] O44 - LFC:[MD5.372DC86CEA7C860F7F5C94012DE68922] - 7/3/2015 - 08:45:16 ---A- . (...) -- C:\WINDOWS\system32\wstpager.ax [164352] O44 - LFC:[MD5.CCBF788C49E7C486C5420D74AFF9DD62] - 7/3/2015 - 08:45:16 ---A- . (...) -- C:\WINDOWS\system32\wstrenderer.ax [239616] O44 - LFC:[MD5.FC49037B53F540A2308ECD4374A5C349] - 7/3/2015 - 08:45:16 ---A- . (.Microsoft Corporation - Automatic Updates Control Panel.) -- C:\WINDOWS\system32\wuaucpl.cpl.mui [15384] O44 - LFC:[MD5.10CDCFD49D2EFED21AA3F94CA221A162] - 7/3/2015 - 08:45:16 ---A- . (.Microsoft Corporation - WST Decoder Filter.) -- C:\WINDOWS\system32\wstdecod.dll [50688] O44 - LFC:[MD5.0E2735281FBB9A764D5584C2A5DCBA59] - 7/3/2015 - 08:45:16 ---A- . (.Microsoft Corporation - Windows Terminal Server SDK APIs.) -- C:\WINDOWS\system32\wtsapi32.dll [18432] O44 - LFC:[MD5.086D3BAAB62616874AFB672D7362492F] - 7/3/2015 - 08:45:16 ---A- . (.Microsoft Corporation - Windows Update Agent.) -- C:\WINDOWS\system32\wuaueng.dll.mui [17944] O44 - LFC:[MD5.6198AFA9092016D3FD04FF41FD62D13F] - 7/3/2015 - 08:45:16 ---A- . (.Microsoft Corporation - Windows Update Client API.) -- C:\WINDOWS\system32\wuapi.dll.mui [15384] O44 - LFC:[MD5.18473F44D6DE85C8CB4E70F503C5EA64] - 7/3/2015 - 08:45:18 ---A- . (.Microsoft Corporation - Downlevel API Server DLL.) -- C:\WINDOWS\system32\xactsrv.dll [91648] O44 - LFC:[MD5.9F45D6316D06EC8FAC0CF07279823DDE] - 7/3/2015 - 08:45:18 ---A- . (.Microsoft Corporation - Extended Copy Utility.) -- C:\WINDOWS\system32\xcopy.exe [30720] O44 - LFC:[MD5.D1E18F4AE94FFEC7270BE0A10C0B295E] - 7/3/2015 - 08:45:18 ---A- . (.Microsoft Corporation - Microsoft XmlLite Library.) -- C:\WINDOWS\system32\xmllite.dll [121856] O44 - LFC:[MD5.C6965DA3999400037FD10B9D695CA052] - 7/3/2015 - 08:45:18 ---A- . (.Microsoft Corporation - Windows Update Client UI Plugin.) -- C:\WINDOWS\system32\wucltui.dll.mui [22040] O44 - LFC:[MD5.5C382832CC8DA8D940BB902C5C656DFB] - 7/3/2015 - 08:45:18 ---A- . (.Microsoft Corporation - Windows Update Manager for NT.) -- C:\WINDOWS\system32\wupdmgr.exe [32256] O44 - LFC:[MD5.BDC0C99E472176C8C2C853A68ADC5073] - 7/3/2015 - 08:45:18 ---A- . (.Microsoft Corporation - Windows Update client proxy stub 2.) -- C:\WINDOWS\system32\wups2.dll [45080] O44 - LFC:[MD5.FF53377DF21A723403C28825977212C5] - 7/3/2015 - 08:45:18 ---A- . (.Microsoft Corporation - Wireless Zero Configuration Service UI.) -- C:\WINDOWS\system32\wzcdlg.dll [383488] O44 - LFC:[MD5.F5E58BEB16304B96BCD756C475FF6CA4] - 7/3/2015 - 08:45:18 ---A- . (.Microsoft Corporation - XEnroll.) -- C:\WINDOWS\system32\xenroll.dll [174200] O44 - LFC:[MD5.566382CA5F2C41FEAEEEFAC908F1EB92] - 7/3/2015 - 08:45:20 ---A- . (.Microsoft Corporation - Network Provisioning Service Client API.) -- C:\WINDOWS\system32\xmlprovi.dll [50176] O44 - LFC:[MD5.295D21F14C335B53CB8154E5B1F892B9] - 7/3/2015 - 08:45:20 ---A- . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024] O44 - LFC:[MD5.FE2571A8C9FFAB1D45502D6B0BF472AA] - 7/3/2015 - 08:45:20 ---A- . (.Microsoft Corporation - Windows XP End of Service notification.) -- C:\WINDOWS\system32\xp_eos.exe [13312] O44 - LFC:[MD5.29F3ECD623330AD06005482A84C2A741] - 7/3/2015 - 08:45:22 ---A- . (.Microsoft Corporation - Service Pack 1 Messages.) -- C:\WINDOWS\system32\xpsp1res.dll [187392] O44 - LFC:[MD5.16403217AB6FC5C30C14C6B12098AD4B] - 7/3/2015 - 08:45:22 ---A- . (.Microsoft Corporation - Service Pack 2 Messages.) -- C:\WINDOWS\system32\xpsp2res.dll [2897920] O44 - LFC:[MD5.7FACB452456EF5C053AF3EE4B228FE0D] - 7/3/2015 - 08:45:22 ---A- . (.Microsoft Corporation - Service Pack 2 OOB Messages.) -- C:\WINDOWS\system32\xpob2res.dll [438784] O44 - LFC:[MD5.1B3B381E1AAB46F7B321A46150D890CB] - 7/3/2015 - 08:45:22 ---A- . (.Microsoft Corporation - Service Pack 3 Messages.) -- C:\WINDOWS\system32\xpsp3res.dll [689152] O44 - LFC:[MD5.94FDCDEAB19D5151D388EDC3502F18BB] - 7/3/2015 - 08:45:22 ---A- . (.Microsoft Corporation - Service Pack 4 Messages.) -- C:\WINDOWS\system32\xpsp4res.dll [7168] O44 - LFC:[MD5.C444B433A340C24B51A2DACE9D13FC70] - 7/3/2015 - 08:45:34 ---A- . (.Microsoft Corporation - Compressed (zipped) Folders.) -- C:\WINDOWS\system32\zipfldr.dll [338432] O44 - LFC:[MD5.949A7F297F35D3C067352B9B47F7CCA2] - 7/3/2015 - 08:45:45 ---A- . (...) -- C:\WINDOWS\system32\mnt.exe [5632] O44 - LFC:[MD5.958011325B4BD0FB2E17609F17F17084] - 7/3/2015 - 08:45:48 ---A- . (.iLE d.o.p. - No Comment.) -- C:\WINDOWS\system32\setupold.exe [28672] O44 - LFC:[MD5.55B541287A3AF84F70CEB004E76DB302] - 7/3/2015 - 08:45:50 ---A- . (...) -- C:\WINDOWS\system32\presetup.cmd [3330] O44 - LFC:[MD5.0E9FC8A7D836208029482491B4EAD3AB] - 7/3/2015 - 08:45:50 ---A- . (...) -- C:\WINDOWS\system32\setup.cmd [14357] O44 - LFC:[MD5.69426BFE0A59550AC5848BCECA2874CA] - 7/3/2015 - 09:37:12 ---A- . (...) -- C:\WINDOWS\system32\$winnt$.0 [881] O44 - LFC:[MD5.A54A7FA6E109CFE9232DB7609AF4DB4C] - 7/3/2015 - 09:37:17 RSHA- . (...) -- C:\boot.ini [327] O44 - LFC:[MD5.C7F0D7AA3A3C2DF333AFDD593106F39F] - 7/3/2015 - 09:38:36 ---A- . (.VIA Technologies, Inc. - ATA/ATAPI devices Hot-Plug/DIPM monitor.) -- C:\WINDOWS\system32\Drivers\xfilt.sys [23192] O44 - LFC:[MD5.C147AFA614B9925479D47CD173329789] - 7/3/2015 - 09:38:36 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\WINDOWS\system32\Drivers\videX32.sys [13976] O44 - LFC:[MD5.3FE791B7714A592B17C4DD8C24B382AF] - 7/3/2015 - 09:39:17 ---A- . (.Microsoft Corporation - Property Pages for Storage Devices.) -- C:\WINDOWS\system32\storprop.dll [74752] O44 - LFC:[MD5.E2E9BEBB8E6737F8028157A6A1E55DAD] - 7/3/2015 - 09:39:31 ---A- . (...) -- C:\WINDOWS\system32\pid.PNF [4444] O44 - LFC:[MD5.D85938F272D1BCF3DB3A31FC0A048928] - 7/3/2015 - 09:41:00 ---A- . (.Microsoft Corporation - MS AGPv3.5 Filter.) -- C:\WINDOWS\system32\Drivers\UAGP35.SYS [44672] O44 - LFC:[MD5.C2D7189CDD37453234A9BBCB58E50883] - 7/3/2015 - 09:41:10 ---A- . (.Microsoft Corporation - USB UI Dll.) -- C:\WINDOWS\system32\usbui.dll [74240] O44 - LFC:[MD5.E9648254056BCE81A85380C0C3647DC4] - 7/3/2015 - 09:41:14 ---A- . (.VIA Technologies, Inc. - NDIS 5.0 miniport driver.) -- C:\WINDOWS\system32\Drivers\fetnd5.sys [27165] O44 - LFC:[MD5.DEB04DA35CC871B6D309B77E1443C796] - 7/3/2015 - 09:42:09 ---A- . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 7/3/2015 - 09:42:20 ----- . (...) -- C:\WINDOWS\Sti_Trace.log [0] O44 - LFC:[MD5.D9F724AA26C010A217C97606B160ED68] - 7/3/2015 - 09:42:27 ---A- . (.Microsoft Corporation - AudStub Driver.) -- C:\WINDOWS\system32\Drivers\audstub.sys [3072] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 7/3/2015 - 09:44:46 ---A- . (...) -- C:\WINDOWS\system32\h323log.txt [0] O44 - LFC:[MD5.7902E06337A9534BCBF418F01D6CE30A] - 7/3/2015 - 16:34:24 ---A- . (.Microsoft Corporation - Anywhere access client.) -- C:\WINDOWS\system32\aaclient.dll [131072] O44 - LFC:[MD5.841FB340ABC439B4557FBDD32B7BA11D] - 7/3/2015 - 16:34:24 ---A- . (.Microsoft Corporation - Control Panel DLL.) -- C:\WINDOWS\system32\access.cpl [68608] O44 - LFC:[MD5.D4B13D675DEC600C5A0ED2BB0EB301E6] - 7/3/2015 - 16:34:24 ---A- . (.Microsoft Corporation - Microsoft Accessibility Wizard.) -- C:\WINDOWS\system32\accwiz.exe [184320] O44 - LFC:[MD5.441086F355F0DEA94621984C9A3BE765] - 7/3/2015 - 16:34:24 ---A- . (.Microsoft Corporation - Microsoft Internet Account Manager Resource.) -- C:\WINDOWS\system32\acctres.dll [64512] O44 - LFC:[MD5.1204FA2AB2A5F321125F777E8D061B22] - 7/3/2015 - 16:34:48 ---A- . (.Microsoft Corporation - Async Trace DLL.) -- C:\WINDOWS\system32\atrace.dll [11264] O44 - LFC:[MD5.399495998BCEEA80F23E57CCAB074508] - 7/3/2015 - 16:34:48 ---A- . (.Microsoft Corporation - Metering Controls.) -- C:\WINDOWS\system32\avmeter.dll [16384] O44 - LFC:[MD5.B82C4535E430DDC631FEC10D63390ECA] - 7/3/2015 - 16:34:48 ---A- . (.Microsoft Corporation - TAPI 3.0 Dialer and IP Multicast Conference.) -- C:\WINDOWS\system32\avtapi.dll [227840] O44 - LFC:[MD5.F415ACC27107AA6DADABE339949EE670] - 7/3/2015 - 16:34:48 ---A- . (.Microsoft Corporation - Wave Manipulation Component.) -- C:\WINDOWS\system32\avwav.dll [73216] O44 - LFC:[MD5.08763C1AE79D88D122207D0471E834DB] - 7/3/2015 - 16:34:50 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service 2.0.) -- C:\WINDOWS\system32\bitsprx3.dll [7168] O44 - LFC:[MD5.97AE3A4180CAB360F44F7F03E5E0F409] - 7/3/2015 - 16:34:50 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service 2.5.) -- C:\WINDOWS\system32\bitsprx4.dll [7168] O44 - LFC:[MD5.9B2E14F4D66A59306584566A705F8CDD] - 7/3/2015 - 16:34:50 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service Pro.) -- C:\WINDOWS\system32\bitsprx2.dll [8192] O44 - LFC:[MD5.DAC71A10A6A71CB6E3F427AE3283734B] - 7/3/2015 - 16:34:52 ---A- . (...) -- C:\WINDOWS\Blue Lace 16.bmp [1272] O44 - LFC:[MD5.405E1EF8E3C88E9BCD2853382BB12430] - 7/3/2015 - 16:34:52 ---A- . (...) -- C:\WINDOWS\system32\bopomofo.uce [22984] O44 - LFC:[MD5.39F43DBCE366B2561DF073B4C0839299] - 7/3/2015 - 16:34:56 ---A- . (...) -- C:\WINDOWS\Soap Bubbles.bmp [65978] O44 - LFC:[MD5.829E4805B0E12B383EE09ABDC9E2DC3C] - 7/3/2015 - 16:35:14 ---A- . (.Microsoft Corporation - Windows Calculator application file.) -- C:\WINDOWS\system32\calc.exe [114688] O44 - LFC:[MD5.28CDB50D882D3BAD993D25BE596307EA] - 7/3/2015 - 16:35:18 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\catsrv.dll [226304] O44 - LFC:[MD5.5F5E83E18E9344BCD680704101CEA78A] - 7/3/2015 - 16:35:18 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\catsrvps.dll [85504] O44 - LFC:[MD5.0D72D44A333628B15288C69738583A2E] - 7/3/2015 - 16:35:20 ---A- . (.Microsoft Corporation - Modem Connection Driver.) -- C:\WINDOWS\system32\cdmodem.dll [15872] O44 - LFC:[MD5.846300110A32ACDEE7CB60E54C7F693A] - 7/3/2015 - 16:35:20 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\catsrvut.dll [625664] O44 - LFC:[MD5.AC9FA2BA34225342A8897930503AE12F] - 7/3/2015 - 16:35:22 ---A- . (.Microsoft Corporation - Character Map.) -- C:\WINDOWS\system32\charmap.exe [80384] O44 - LFC:[MD5.AA4A015E2ACAE6127FDF833F301C1FE4] - 7/3/2015 - 16:35:22 ---A- . (.Microsoft Corporation - Configuration Backend Interface.) -- C:\WINDOWS\system32\cfgbkend.dll [38912] O44 - LFC:[MD5.33B37BB0C69F2DBD19277220435590BE] - 7/3/2015 - 16:35:24 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\clbcatex.dll [110592] O44 - LFC:[MD5.F137A0CA70003DB20448D540651FA003] - 7/3/2015 - 16:35:26 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\clbcatq.dll [498688] O44 - LFC:[MD5.1C2C0143333F9651F088E29344D3BD0F] - 7/3/2015 - 16:35:26 ---A- . (.Microsoft Corporation - WMI Snapins.) -- C:\WINDOWS\system32\cmprops.dll [185344] O44 - LFC:[MD5.7A526169AC958E6602023A39734C8684] - 7/3/2015 - 16:35:26 ---A- . (.Microsoft Corporation - Windows NT ClipBook Viewer.) -- C:\WINDOWS\system32\clipbrd.exe [102912] O44 - LFC:[MD5.73D70ED3EC3BBFD8FD35DF431C38F374] - 7/3/2015 - 16:35:28 ---A- . (...) -- C:\WINDOWS\Coffee Bean.bmp [17062] O44 - LFC:[MD5.690D97864735E8ECD87F55777E266690] - 7/3/2015 - 16:35:28 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\colbact.dll [60416] O44 - LFC:[MD5.035FECD913735E843E95510D7CC89A4E] - 7/3/2015 - 16:35:28 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comaddin.dll [28160] O44 - LFC:[MD5.E7427B6BD2F2B32403C23A4FE15DF3B3] - 7/3/2015 - 16:36:02 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comrepl.dll [97792] O44 - LFC:[MD5.85A335171B8D56B09276D1C6DF2A63B2] - 7/3/2015 - 16:36:02 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comsnap.dll [167424] O44 - LFC:[MD5.ED0C0DF222209E43AD9AFBF3FE87DDE0] - 7/3/2015 - 16:36:02 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comsvcs.dll [1267200] O44 - LFC:[MD5.E0950A5B73350A26AB063EF6772FDCA4] - 7/3/2015 - 16:36:02 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comuid.dll [539648] O44 - LFC:[MD5.238BDCE83AF21A6C2C0FCF216D3260E3] - 7/3/2015 - 16:36:12 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\dcomcnfg.exe [6144] O44 - LFC:[MD5.3A8B85AB7B415BF3F8AFE285DFE0CE29] - 7/3/2015 - 16:37:20 ---A- . (...) -- C:\WINDOWS\FeatherTexture.bmp [16730] O44 - LFC:[MD5.5D43C9A33F18C707BA169AFDA88BDF30] - 7/3/2015 - 16:37:24 ---A- . (.Microsoft Corporation - Filter Library.) -- C:\WINDOWS\system32\fltlib.dll [16896] O44 - LFC:[MD5.1DE61BAEDE3FD349B7AE86F428C25482] - 7/3/2015 - 16:37:24 ---A- . (.Microsoft Corporation - Filter Manager Control Program.) -- C:\WINDOWS\system32\fltMc.exe [23040] O44 - LFC:[MD5.B2CF4B0786F8212CB92ED2B50C6DB6B0] - 7/3/2015 - 16:37:24 ---A- . (.Microsoft Corporation - Microsoft Filesystem Filter Manager.) -- C:\WINDOWS\system32\Drivers\fltMgr.sys [129792] O44 - LFC:[MD5.4D9B5E540158BF8E9B1BCAC1AEDD8C60] - 7/3/2015 - 16:37:26 ---A- . (.Microsoft Corporation - Entertainment Pack FreeCell Game.) -- C:\WINDOWS\system32\freecell.exe [55296] O44 - LFC:[MD5.4FDED87068052EEB9B72A97FDBC141DB] - 7/3/2015 - 16:37:30 ---A- . (...) -- C:\WINDOWS\system32\gb2312.uce [24006] O44 - LFC:[MD5.60B9959D333C3D11255D8695D2685430] - 7/3/2015 - 16:37:30 ---A- . (.Microsoft Corporation - Unicode name Dll for UCE.) -- C:\WINDOWS\system32\getuname.dll [605696] O44 - LFC:[MD5.203EF178BF8B0A8EC34E27E4DEDB6349] - 7/3/2015 - 16:37:32 ---A- . (...) -- C:\WINDOWS\Gone Fishing.bmp [17336] O44 - LFC:[MD5.1AC5E83598D4F2143B59A2D893C3279A] - 7/3/2015 - 16:37:34 ---A- . (...) -- C:\WINDOWS\Greenstone.bmp [26582] O44 - LFC:[MD5.F759A6E14403BC3D7A55CCAD1B8F7B4A] - 7/3/2015 - 16:37:44 ---A- . (.Hilgraeve, Inc. - HyperTerminal Applet Library.) -- C:\WINDOWS\system32\hticons.dll [44544] O44 - LFC:[MD5.277BDF16A94BE0D063988D692541650B] - 7/3/2015 - 16:37:44 ---A- . (.Hilgraeve, Inc. - HyperTerminal Applet Library.) -- C:\WINDOWS\system32\hypertrm.dll [347136] O44 - LFC:[MD5.DF6551E4C4C46655A0C76194F1FCEA5D] - 7/3/2015 - 16:37:46 ---A- . (.Microsoft Corporation - DLL Interface to TermDD Device Driver.) -- C:\WINDOWS\system32\icaapi.dll [11264] O44 - LFC:[MD5.009F0BE67B62150904D266A1D5BDC95B] - 7/3/2015 - 16:37:48 ---A- . (.Microsoft Corporation - Internet Connection Wizard Autodialer.) -- C:\WINDOWS\system32\icwdial.dll [73728] O44 - LFC:[MD5.BE085C746EA903B38204053FF709C634] - 7/3/2015 - 16:37:48 ---A- . (.Microsoft Corporation - Internet Connection Wizard.) -- C:\WINDOWS\system32\icfgnt5.dll [16384] O44 - LFC:[MD5.922ED2C991F4D05107467C854D38BB71] - 7/3/2015 - 16:37:48 ---A- . (.Microsoft Corporation - Internet Connection Wizard.) -- C:\WINDOWS\system32\icwphbk.dll [65536] O44 - LFC:[MD5.038F6AD6CEE43585D814CDBC7CDFD3EC] - 7/3/2015 - 16:37:50 ---A- . (...) -- C:\WINDOWS\system32\ideograf.uce [60458] O44 - LFC:[MD5.474EABDCA846408BB854EE6542888D29] - 7/3/2015 - 16:37:56 ---A- . (.Microsoft Corporation - Internet Connection Wizard Library.) -- C:\WINDOWS\system32\inetcfg.dll [274432] O44 - LFC:[MD5.3B438284E0F22B154E9ECC27FE0EC3AE] - 7/3/2015 - 16:37:56 ---A- . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll [692736] O44 - LFC:[MD5.A1E481512C1602C36D3384FEB7DDEC12] - 7/3/2015 - 16:37:56 ---A- . (.Microsoft Corporation - User Location Services Component Module.) -- C:\WINDOWS\system32\ils.dll [81920] O44 - LFC:[MD5.A6F6923B46802785B9A47A03AE3CD8BF] - 7/3/2015 - 16:37:58 ---A- . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\WINDOWS\system32\inetres.dll [48128] O44 - LFC:[MD5.E135606BD22651CB8A8136B4141A56B5] - 7/3/2015 - 16:38:06 ---A- . (.Microsoft Corporation - Internet Signup.) -- C:\WINDOWS\system32\isign32.dll [81920] O44 - LFC:[MD5.0C56AFBBDFA19694CA03F159A5724EA6] - 7/3/2015 - 16:38:08 ---A- . (.Intel Corporation - ISR Debug 32-bit Engine.) -- C:\WINDOWS\system32\isrdbg32.dll [32768] O44 - LFC:[MD5.7C0C25F4BA1084C4ABBEEA2C74194C5F] - 7/3/2015 - 16:38:10 ---A- . (...) -- C:\WINDOWS\system32\kanji_1.uce [6948] O44 - LFC:[MD5.529BBD63519BBD654EF328454019693F] - 7/3/2015 - 16:38:10 ---A- . (...) -- C:\WINDOWS\system32\kanji_2.uce [8484] O44 - LFC:[MD5.7A7A04370A6030B9B0E8178DAD4A6E41] - 7/3/2015 - 16:38:20 ---A- . (...) -- C:\WINDOWS\system32\korean.uce [12876] O44 - LFC:[MD5.2553AD01F1ED5CDD939F5D12303E9709] - 7/3/2015 - 16:39:04 ---A- . (.Microsoft Corporation - Remote Desktop Connection.) -- C:\WINDOWS\system32\mstsc.exe [1034240] O44 - LFC:[MD5.C8605F6CD65D38512A526366F0761841] - 7/3/2015 - 16:39:04 ---A- . (.Microsoft Corporation - Remote Desktop Services ActiveX Client.) -- C:\WINDOWS\system32\mstscax.dll [2691072] O44 - LFC:[MD5.6895427873D6C37A6D6DA7C3DB37DA14] - 7/3/2015 - 16:39:04 ---A- . (.Microsoft Corporation - Windows Product Activation Configuration WM.) -- C:\WINDOWS\system32\licwmi.dll [58880] O44 - LFC:[MD5.1497D0AB91183A5B51EF37CCFC88C6C5] - 7/3/2015 - 16:39:06 ---A- . (.Microsoft Corporation - Session Logoff Utility.) -- C:\WINDOWS\system32\logoff.exe [15360] O44 - LFC:[MD5.621822F2F2BDE521D3FC687B62659B76] - 7/3/2015 - 16:39:36 ---A- . (.Microsoft Corporation - Application Sharing Display Driver.) -- C:\WINDOWS\system32\mnmdd.dll [34560] O44 - LFC:[MD5.D18F1F0C101D06A1C1ADF26EED16FCDD] - 7/3/2015 - 16:39:36 ---A- . (.Microsoft Corporation - NetMeeting Remote Desktop Sharing.) -- C:\WINDOWS\system32\mnmsrvc.exe [32768] O44 - LFC:[MD5.56C0F2EF981F235AB011FBFE26D92088] - 7/3/2015 - 16:39:36 ---A- . (.Microsoft Corporation - WMI Snapin Helpers.) -- C:\WINDOWS\system32\mmfutil.dll [17408] O44 - LFC:[MD5.954BD0D7C3CB90D23C136FEC90999377] - 7/3/2015 - 16:39:42 ---A- . (.Microsoft Corporation - Media Player.) -- C:\WINDOWS\system32\mplay32.exe [123392] O44 - LFC:[MD5.BBF115327F043F0BD46C58393261E6DD] - 7/3/2015 - 16:39:58 ---A- . (.Microsoft Corporation - Conferencing Utility Dll.) -- C:\WINDOWS\system32\msconf.dll [69632] O44 - LFC:[MD5.CDD932EDCB756FB5F7CE5E2F090BA838] - 7/3/2015 - 16:40:00 ---A- . (...) -- C:\WINDOWS\system32\msdtcprf.h [768] O44 - LFC:[MD5.28E3647CBB608139AFB076103208552B] - 7/3/2015 - 16:40:00 ---A- . (...) -- C:\WINDOWS\system32\msdtcprf.ini [1931] O44 - LFC:[MD5.BCAB0BC4EDD47B54252D82D10A6EF5F5] - 7/3/2015 - 16:40:00 ---A- . (.Microsoft Corporation - MS DTC OLE Transactions interface proxy DLL.) -- C:\WINDOWS\system32\msdtcprx.dll [428032] O44 - LFC:[MD5.8F3FFBB7890106572AC04EB9AD37417A] - 7/3/2015 - 16:40:00 ---A- . (.Microsoft Corporation - MS DTC administrative component DLL.) -- C:\WINDOWS\system32\msdtcuiu.dll [161792] O44 - LFC:[MD5.A137F1470499A205ABBB9AAFB3B6F2B1] - 7/3/2015 - 16:40:00 ---A- . (.Microsoft Corporation - MS DTC console program.) -- C:\WINDOWS\system32\msdtc.exe [6144] O44 - LFC:[MD5.110C8A0FF284DA86E637FEC98F14D6BC] - 7/3/2015 - 16:40:00 ---A- . (.Microsoft Corporation - MS DTC log manager DLL.) -- C:\WINDOWS\system32\msdtclog.dll [58880] O44 - LFC:[MD5.7C4F9779614844B1263246B81BA6685D] - 7/3/2015 - 16:40:00 ---A- . (.Microsoft Corporation - MS DTC transaction manager DLL.) -- C:\WINDOWS\system32\msdtctm.dll [956928] O44 - LFC:[MD5.DE60FA13A37BEA1EE44228DCB60F44BF] - 7/3/2015 - 16:40:04 ---A- . (.Microsoft Corporation - Message Utility.) -- C:\WINDOWS\system32\msg.exe [20992] O44 - LFC:[MD5.B87F759738C52E8D6FBCDAAA84C6486F] - 7/3/2015 - 16:40:04 ---A- . (.Microsoft Corporation - Microsoft G.723.1 CODEC for MSACM.) -- C:\WINDOWS\system32\msg723.acm [118784] O44 - LFC:[MD5.C6FD300A6100AC89BC4CB944C19FA2A9] - 7/3/2015 - 16:40:04 ---A- . (.Microsoft Corporation - Microsoft H.261 ICM Driver.) -- C:\WINDOWS\system32\msh261.drv [188416] O44 - LFC:[MD5.BE1B85306352E0AC901EC08506792B6B] - 7/3/2015 - 16:40:06 ---A- . (.Microsoft Corporation - The Microsoft Hearts Network.) -- C:\WINDOWS\system32\mshearts.exe [126976] O44 - LFC:[MD5.871888B4AA0CA343E73C81E94AD4ED93] - 7/3/2015 - 16:40:16 ---A- . (.Microsoft Corporation - Microsoft Internet Account Manager.) -- C:\WINDOWS\system32\msoeacct.dll [252928] O44 - LFC:[MD5.0485AB01B862FB91C21D39BD60BDF2AC] - 7/3/2015 - 16:40:16 ---A- . (.Microsoft Corporation - Microsoft Outlook Express RT Lib.) -- C:\WINDOWS\system32\msoert2.dll [105984] O44 - LFC:[MD5.66711BAF72A538CFA790E6180549F567] - 7/3/2015 - 16:40:16 ---A- . (.Microsoft Corporation - Paint.) -- C:\WINDOWS\system32\mspaint.exe [343040] O44 - LFC:[MD5.D5788A5243D1DD160E0F97AA4808B2BE] - 7/3/2015 - 16:40:20 ---A- . (.Microsoft Corporation - Task Scheduler Setup.) -- C:\WINDOWS\system32\mstinit.exe [12288] O44 - LFC:[MD5.4044E880593FE1AC9942190FCE414BE7] - 7/3/2015 - 16:40:20 ---A- . (.Microsoft Corporation - Task Scheduler interface DLL.) -- C:\WINDOWS\system32\mstask.dll [274944] O44 - LFC:[MD5.6B8A8B42D34A1D7279C2A948D5740B1D] - 7/3/2015 - 16:40:26 ---A- . (.Microsoft Corporation - Microsoft database support DLL for Oracle.) -- C:\WINDOWS\system32\mtxoci.dll [91648] O44 - LFC:[MD5.7827FB784D9B3029F3DAF73D3331A9CC] - 7/3/2015 - 16:40:26 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\mtxdm.dll [30720] O44 - LFC:[MD5.BC958016A1F7A23A1A9282C82D73D074] - 7/3/2015 - 16:40:26 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\mtxex.dll [4096] O44 - LFC:[MD5.2A516AC024EA9E34AE0F0297293EABAB] - 7/3/2015 - 16:40:26 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\mtxlegih.dll [34304] O44 - LFC:[MD5.14E333392A7C41AF18F21849AEE1741E] - 7/3/2015 - 16:40:50 ---A- . (.Microsoft Corporation - NMMKCERT Library.) -- C:\WINDOWS\system32\nmmkcert.dll [28672] O44 - LFC:[MD5.3C891D38FF07120FD926F51A37568646] - 7/3/2015 - 16:40:50 ---A- . (.Microsoft Corporation - NetMeeting Event Logging DLL.) -- C:\WINDOWS\system32\nmevtmsg.dll [12288] O44 - LFC:[MD5.280920B6773C74C3649A934257112BE1] - 7/3/2015 - 16:41:34 ---A- . (...) -- C:\WINDOWS\Prairie Wind.bmp [65954] O44 - LFC:[MD5.1556473E920CA676702516DA38DCAC86] - 7/3/2015 - 16:41:42 ---A- . (.Microsoft Corporation - Query Terminal Server Utility.) -- C:\WINDOWS\system32\qappsrv.exe [16896] O44 - LFC:[MD5.F1DAC7969C1337AF790BD1D981AA780C] - 7/3/2015 - 16:41:44 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service Pro.) -- C:\WINDOWS\system32\qmgrprxy.dll [18944] O44 - LFC:[MD5.574738F61FCA2935F5265DC4E5691314] - 7/3/2015 - 16:41:44 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\WINDOWS\system32\qmgr.dll [409088] O44 - LFC:[MD5.59AD4CEDBFCD1EEFCAC19E25BA15E2F3] - 7/3/2015 - 16:41:44 ---A- . (.Microsoft Corporation - Microsoft Remote Assistance.) -- C:\WINDOWS\system32\racpldlg.dll [43520] O44 - LFC:[MD5.5AD00EED5722CAABDDAAC1CB92F68E57] - 7/3/2015 - 16:41:44 ---A- . (.Microsoft Corporation - Query Process Utility.) -- C:\WINDOWS\system32\qprocess.exe [19968] O44 - LFC:[MD5.1317CB79629C34B5FF8260C297B09A1C] - 7/3/2015 - 16:41:44 ---A- . (.Microsoft Corporation - Query Session Utility.) -- C:\WINDOWS\system32\qwinsta.exe [22016] O44 - LFC:[MD5.DCCF6ED915BC05C244801B550AD12B17] - 7/3/2015 - 16:41:48 ---A- . (.Microsoft Corporation - RDP Clip Monitor.) -- C:\WINDOWS\system32\rdpclip.exe [62976] O44 - LFC:[MD5.B84AA6E863DE4A3BD9A0A39AEC207ECC] - 7/3/2015 - 16:41:48 ---A- . (.Microsoft Corporation - RDSHost Client Module.) -- C:\WINDOWS\system32\rdchost.dll [147968] O44 - LFC:[MD5.092D468C0BDF67EC129C28692276AC88] - 7/3/2015 - 16:41:48 ---A- . (.Microsoft Corporation - Terminal Server Connection Configuration Ex.) -- C:\WINDOWS\system32\rdpcfgex.dll [4096] O44 - LFC:[MD5.C29AB058E20C56E8D1ECB44FEDEBC69F] - 7/3/2015 - 16:41:50 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop TSRDP Session Add-.) -- C:\WINDOWS\system32\rdsaddin.exe [13824] O44 - LFC:[MD5.C7C84DF7233F4834CD190F3DCCAF50CA] - 7/3/2015 - 16:41:50 ---A- . (.Microsoft Corporation - RDP Extension DLL.) -- C:\WINDOWS\system32\rdpwsx.dll [87176] O44 - LFC:[MD5.C7D9BC54354B8C706ABF172D48313F1B] - 7/3/2015 - 16:41:50 ---A- . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only,.) -- C:\WINDOWS\system32\Drivers\rdpwd.sys [139784] O44 - LFC:[MD5.57E036885A222D1A8EF237C7399BE98B] - 7/3/2015 - 16:41:50 ---A- . (.Microsoft Corporation - RDSHost Server Module.) -- C:\WINDOWS\system32\rdshost.exe [67072] O44 - LFC:[MD5.31DD1EF4149B0F22AFB12A2DD360B34D] - 7/3/2015 - 16:41:50 ---A- . (.Microsoft Corporation - Terminal Server MultiMedia Driver.) -- C:\WINDOWS\system32\rdpsnd.dll [19968] O44 - LFC:[MD5.927A66BD587E31CB12D3AB25381658DC] - 7/3/2015 - 16:41:52 ---A- . (...) -- C:\WINDOWS\Rhododendron.bmp [17362] O44 - LFC:[MD5.4114B8D04AEE5FF6700A5CE1130D64FA] - 7/3/2015 - 16:41:52 ---A- . (.Microsoft Corporation - Registry Initializer.) -- C:\WINDOWS\system32\regini.exe [33792] O44 - LFC:[MD5.B30637E52CB169F89335119978BDBD3E] - 7/3/2015 - 16:41:52 ---A- . (.Microsoft Corporation - Remote Sessions CPL Extension.) -- C:\WINDOWS\system32\remotepg.dll [60416] O44 - LFC:[MD5.88F105251EE261ACF11AD88E7567258C] - 7/3/2015 - 16:41:52 ---A- . (.Microsoft Corporation - Terminal Services Reset Utility.) -- C:\WINDOWS\system32\reset.exe [9728] O44 - LFC:[MD5.28D9646A6B8DE72980B683AF06D9D981] - 7/3/2015 - 16:41:54 ---A- . (.Microsoft Corporation - RPC/HTTP Downlevel Side-by-side Runtime.) -- C:\WINDOWS\system32\rhttpaa.dll [290304] O44 - LFC:[MD5.5B4AC407E566076BB726BA91E067D313] - 7/3/2015 - 16:42:02 ---A- . (...) -- C:\WINDOWS\River Sumida.bmp [26680] O44 - LFC:[MD5.482A0A0E3AE3F6A2564F8BE32767DCDB] - 7/3/2015 - 16:42:02 ---A- . (.Microsoft Corporation - Microsoft Help Center Desktop Manager.) -- C:\WINDOWS\system32\safrdm.dll [29696] O44 - LFC:[MD5.62A9B35C335A85311DC1280568CE9D89] - 7/3/2015 - 16:42:02 ---A- . (.Microsoft Corporation - Microsoft Help Center Session Resolver.) -- C:\WINDOWS\system32\safrslv.dll [45568] O44 - LFC:[MD5.CC8E648AE54B18037F7D0A91D196FE91] - 7/3/2015 - 16:42:02 ---A- . (.Microsoft Corporation - Microsoft PCHealth Remote Assistance File O.) -- C:\WINDOWS\system32\safrcdlg.dll [43520] O44 - LFC:[MD5.4ED862390A8986E2423122FC6A326EC4] - 7/3/2015 - 16:42:02 ---A- . (.Microsoft Corporation - Reset Session Utility.) -- C:\WINDOWS\system32\rwinsta.exe [15872] O44 - LFC:[MD5.EB3BFC14E41FBAA41B4FD4489AA82D39] - 7/3/2015 - 16:42:04 ---A- . (...) -- C:\WINDOWS\Santa Fe Stucco.bmp [65832] O44 - LFC:[MD5.0A9A7365A1CA4319AA7C1D6CD8E4EAFA] - 7/3/2015 - 16:42:06 ---A- . (.Microsoft Corporation - Task Scheduler Engine.) -- C:\WINDOWS\system32\schedsvc.dll [192512] O44 - LFC:[MD5.3C37BF86641BDA977C3BF8A840F3B7FA] - 7/3/2015 - 16:42:12 ---A- . (.Microsoft Corporation - Microsoft® Remote Desktop Help Session Mana.) -- C:\WINDOWS\system32\sessmgr.exe [141312] O44 - LFC:[MD5.8E7C1B8BBA4070615D6E2F704F272255] - 7/3/2015 - 16:42:12 ---A- . (.Microsoft Corporation - WMI Snapins.) -- C:\WINDOWS\system32\servdeps.dll [56320] O44 - LFC:[MD5.A72C27CE68318023981A4E034F85131C] - 7/3/2015 - 16:42:16 ---A- . (.Microsoft Corporation - Session Remote Control Utility.) -- C:\WINDOWS\system32\shadow.exe [14848] O44 - LFC:[MD5.8CA32E9D986FA76F60EFBCFCD9D80A58] - 7/3/2015 - 16:42:18 ---A- . (...) -- C:\WINDOWS\system32\shiftjis.uce [16740] O44 - LFC:[MD5.B22332758A8293C14DB318748A928CC4] - 7/3/2015 - 16:42:30 ---A- . (.Microsoft Corporation - Sound Recorder accessory.) -- C:\WINDOWS\system32\sndrec32.exe [131584] O44 - LFC:[MD5.7DF33946B5911E75320CCA9AC1A3492B] - 7/3/2015 - 16:42:30 ---A- . (.Microsoft Corporation - Volume Control.) -- C:\WINDOWS\system32\sndvol32.exe [138752] O44 - LFC:[MD5.81051BCC2CF1BEDF378224B0A93E2877] - 7/3/2015 - 16:42:32 ---A- . (...) -- C:\WINDOWS\desktop.ini [2] O44 - LFC:[MD5.81051BCC2CF1BEDF378224B0A93E2877] - 7/3/2015 - 16:42:32 ---A- . (...) -- C:\WINDOWS\system32\desktop.ini [2] O44 - LFC:[MD5.373E7A863A1A345C60EDB9E20EC32311] - 7/3/2015 - 16:42:32 ---A- . (.Microsoft Corporation - Solitaire Game Applet.) -- C:\WINDOWS\system32\sol.exe [56832] O44 - LFC:[MD5.8D1492DBE9A856EE306EDC5A103E0BF2] - 7/3/2015 - 16:42:46 ---A- . (.Microsoft Corporation - Spider.) -- C:\WINDOWS\system32\spider.exe [538624] O44 - LFC:[MD5.77A54BDFBAD4604E6131AE68E3CF76D6] - 7/3/2015 - 16:42:58 ---A- . (.Microsoft Corporation - SR CLIENT DLL.) -- C:\WINDOWS\system32\srclient.dll [67584] O44 - LFC:[MD5.76BB022C2FB6902FD5BDD4F78FC13A5D] - 7/3/2015 - 16:42:58 ---A- . (.Microsoft Corporation - System Restore Filesystem Filter Driver.) -- C:\WINDOWS\system32\Drivers\sr.sys [73472] O44 - LFC:[MD5.92E2A2574186BCBB7027A6048E1B8B1B] - 7/3/2015 - 16:42:58 ---A- . (.Microsoft Corporation - System Restore Restore Operation Library.) -- C:\WINDOWS\system32\srrstr.dll [239104] O44 - LFC:[MD5.3805DF0AC4296A34BA4BF93B346CC378] - 7/3/2015 - 16:42:58 ---A- . (.Microsoft Corporation - System Restore Service.) -- C:\WINDOWS\system32\srsvc.dll [171008] O44 - LFC:[MD5.3D075865DCC26931972F6476AD0497BE] - 7/3/2015 - 16:43:00 ---A- . (.Microsoft Corporation - SSDP Client API DLL.) -- C:\WINDOWS\system32\ssdpapi.dll [34816] O44 - LFC:[MD5.0A5679B3714EDAB99E357057EE88FCA6] - 7/3/2015 - 16:43:00 ---A- . (.Microsoft Corporation - SSDP Service DLL.) -- C:\WINDOWS\system32\ssdpsrv.dll [71680] O44 - LFC:[MD5.9089B700986B7A441F79FE68F96E5149] - 7/3/2015 - 16:43:02 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\stclient.dll [59392] O44 - LFC:[MD5.30F5568679A54042F99CA9EC1102EBCD] - 7/3/2015 - 16:43:04 ---A- . (...) -- C:\WINDOWS\system32\subrange.uce [93702] O44 - LFC:[MD5.6471A66807F5E104E4885F5B67349397] - 7/3/2015 - 16:43:30 ---A- . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys [12040] O44 - LFC:[MD5.C0578456F29E5F26285F81B7B71FE57D] - 7/3/2015 - 16:43:30 ---A- . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys [22024] O44 - LFC:[MD5.5128852A18AE46C387F87BF27DA4C9DD] - 7/3/2015 - 16:43:32 ---A- . (.Microsoft Corporation - Terminal Server Service.) -- C:\WINDOWS\system32\termsrv.dll [296960] O44 - LFC:[MD5.900D05DAB18DA23083358D0839DC1134] - 7/3/2015 - 16:43:38 ---A- . (.Microsoft Corporation - Session Connection Utility.) -- C:\WINDOWS\system32\tscon.exe [14848] O44 - LFC:[MD5.A125CBFE55C05735417786DD15A5BE76] - 7/3/2015 - 16:43:38 ---A- . (.Microsoft Corporation - Terminal Server Configuration WMI provider.) -- C:\WINDOWS\system32\tscfgwmi.dll [93696] O44 - LFC:[MD5.4A547D74B435E78418BE06406250C1D3] - 7/3/2015 - 16:43:40 ---A- . (...) -- C:\WINDOWS\system32\tslabels.h [3286] O44 - LFC:[MD5.03C361FAB5AD67924C5150A384C62BE6] - 7/3/2015 - 16:43:40 ---A- . (...) -- C:\WINDOWS\system32\tslabels.ini [13223] O44 - LFC:[MD5.8799E1D0AA33A333DCDEDA52040C02F0] - 7/3/2015 - 16:43:40 ---A- . (.Microsoft Corporation - RD Gateway QEC.) -- C:\WINDOWS\system32\tsgqec.dll [36864] O44 - LFC:[MD5.DC8AAE44CDB63F178BC7B993B43C3318] - 7/3/2015 - 16:43:40 ---A- . (.Microsoft Corporation - Session Disconnection Utility.) -- C:\WINDOWS\system32\tsdiscon.exe [14848] O44 - LFC:[MD5.725902D25A3B8F234F729CA057052C41] - 7/3/2015 - 16:43:40 ---A- . (.Microsoft Corporation - System Shutdown Utility.) -- C:\WINDOWS\system32\tsshutdn.exe [16896] O44 - LFC:[MD5.F5FE756927FEF0F4A069DE0A832B5F0F] - 7/3/2015 - 16:43:40 ---A- . (.Microsoft Corporation - Terminal Services End Process Utility.) -- C:\WINDOWS\system32\tskill.exe [16384] O44 - LFC:[MD5.053582991FFDE38FC470D6ED7133A297] - 7/3/2015 - 16:43:44 ---A- . (.Microsoft Corporation - UPnP Device Host ISAPI Extension.) -- C:\WINDOWS\system32\udhisapi.dll [26624] O44 - LFC:[MD5.FB11420FC0AF573B5A86DC7C1C4737F7] - 7/3/2015 - 16:43:52 ---A- . (.Microsoft Corporation - UPnP Device Host Container.) -- C:\WINDOWS\system32\upnpcont.exe [16896] O44 - LFC:[MD5.1EBAFEB9A3FBDC41B8D9C7F0F687AD91] - 7/3/2015 - 16:43:52 ---A- . (.Microsoft Corporation - UPnP Device Host.) -- C:\WINDOWS\system32\upnphost.dll [185856] O44 - LFC:[MD5.93C088C2AEB2F23E720BDA7E32BD5117] - 7/3/2015 - 16:43:52 ---A- . (.Microsoft Corporation - Universal Plug and Play API.) -- C:\WINDOWS\system32\upnp.dll [133632] O44 - LFC:[MD5.F463BC45CD34ADE54F801746B6D322B1] - 7/3/2015 - 16:43:54 ---A- . (...) -- C:\WINDOWS\system32\usrlogon.cmd [1161] O44 - LFC:[MD5.2F3CDC1D898FD25B2547F5BFEB01FD0D] - 7/3/2015 - 16:44:32 -SH-- . (...) -- C:\WINDOWS\winnt.bmp [48680] O44 - LFC:[MD5.2F3CDC1D898FD25B2547F5BFEB01FD0D] - 7/3/2015 - 16:44:32 -SH-- . (...) -- C:\WINDOWS\winnt256.bmp [48680] O44 - LFC:[MD5.FEFC52216D2787EA1DE42BABA01AF9BF] - 7/3/2015 - 16:44:48 ---A- . (.Microsoft Corporation - Windows for Workgroups Chat (NT).) -- C:\WINDOWS\system32\winchat.exe [35328] O44 - LFC:[MD5.9C45D38B74634C9DED60BEC640C5C3CA] - 7/3/2015 - 16:44:52 ---A- . (.Microsoft Corporation - Entertainment Pack Minesweeper Game.) -- C:\WINDOWS\system32\winmine.exe [119808] O44 - LFC:[MD5.2CE7B1EEB99C14032C0E2201B004F80E] - 7/3/2015 - 16:45:02 ---A- . (...) -- C:\WINDOWS\system32\wmimgmt.msc [63488] O44 - LFC:[MD5.BB75ED2CEA65D2DE97E88FDE1B1A0BF8] - 7/3/2015 - 16:45:12 ---A- . (.Microsoft Corporation - Windows Write.) -- C:\WINDOWS\system32\write.exe [5632] O44 - LFC:[MD5.C31DD4CEC06D2908AE5F212A0B13805B] - 7/3/2015 - 16:45:16 ---A- . (.Microsoft Corporation - Automatic Updates Control Panel.) -- C:\WINDOWS\system32\wuaucpl.cpl [219160] O44 - LFC:[MD5.FC3EC24FCE372C89423E015A2AC1A31E] - 7/3/2015 - 16:45:16 ---A- . (.Microsoft Corporation - Windows Update Agent.) -- C:\WINDOWS\system32\wuaueng.dll [1933848] O44 - LFC:[MD5.09201D6BAEF7984633270D347B5C215E] - 7/3/2015 - 16:45:16 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Client.) -- C:\WINDOWS\system32\wuauclt1.exe [172504] O44 - LFC:[MD5.F0EA9AE7565345467B3E45AC1A4B5A1E] - 7/3/2015 - 16:45:16 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Engine.) -- C:\WINDOWS\system32\wuaueng1.dll [194520] O44 - LFC:[MD5.1A617835452EEE5060976C9B9F5FE635] - 7/3/2015 - 16:45:16 ---A- . (.Microsoft Corporation - Windows Update Client API.) -- C:\WINDOWS\system32\wuapi.dll [577048] O44 - LFC:[MD5.2E0B0A051FFAA86E358465BB0880D453] - 7/3/2015 - 16:45:16 ---A- . (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53784] O44 - LFC:[MD5.37E17DF31E2883F394FABFBC93AC3069] - 7/3/2015 - 16:45:18 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [23064] O44 - LFC:[MD5.C88C65DF1ED4DFD34CFBD11CDFE519A3] - 7/3/2015 - 16:45:18 ---A- . (.Microsoft Corporation - Windows Update Client UI Plugin.) -- C:\WINDOWS\system32\wucltui.dll [329240] O44 - LFC:[MD5.3BFB62E9ACEDF3442DDB3CA5EB305E93] - 7/3/2015 - 16:45:18 ---A- . (.Microsoft Corporation - Windows Update Web Control.) -- C:\WINDOWS\system32\wuweb.dll [210968] O44 - LFC:[MD5.3458EDA96E30FBD0477A2800D3FB1909] - 7/3/2015 - 16:45:18 ---A- . (.Microsoft Corporation - Windows Update client proxy stub.) -- C:\WINDOWS\system32\wups.dll [35864] O44 - LFC:[MD5.AE3470D2BF8F16FD93FA54167B87172D] - 7/3/2015 - 16:45:20 ---A- . (.Microsoft Corporation - MS DTC helper APIs DLL.) -- C:\WINDOWS\system32\xolehlp.dll [11776] O44 - LFC:[MD5.5290EA6951F4724259F423B12C8E1393] - 7/3/2015 - 16:45:32 ---A- . (...) -- C:\WINDOWS\Zapotec.bmp [9522] O44 - LFC:[MD5.47EA20320E3D6FDC7B7BB22B2B881CA6] - 7/3/2015 - 17:47:14 ---A- . (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [195712] O44 - LFC:[MD5.88155247177638048422893737429D9E] - 7/3/2015 - 17:47:15 ---A- . (.Microsoft Corporation - Terminal Server Driver.) -- C:\WINDOWS\system32\Drivers\termdd.sys [40840] O44 - LFC:[MD5.487403459F0B2F1A3ADEEF02496BD80E] - 7/3/2015 - 17:47:51 ---A- . (...) -- C:\WINDOWS\vb.ini [36] O44 - LFC:[MD5.6C2F0BA210C2B53EF07653ABAC6C2490] - 7/3/2015 - 17:47:51 ---A- . (...) -- C:\WINDOWS\vbaddin.ini [37] O44 - LFC:[MD5.4B41C9C1807C21E75576C085EAFD0F50] - 7/3/2015 - 17:48:03 ---A- . (...) -- C:\WINDOWS\system32\emptyregdb.dat [21640] O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 7/3/2015 - 17:50:00 R-HA- . (...) -- C:\WINDOWS\WindowsShell.Manifest [749] O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 7/3/2015 - 17:50:00 R-HA- . (...) -- C:\WINDOWS\system32\cdplayer.exe.manifest [749] O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 7/3/2015 - 17:50:00 R-HA- . (...) -- C:\WINDOWS\system32\ncpa.cpl.manifest [749] O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 7/3/2015 - 17:50:00 R-HA- . (...) -- C:\WINDOWS\system32\nwc.cpl.manifest [749] O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 7/3/2015 - 17:50:00 R-HA- . (...) -- C:\WINDOWS\system32\sapi.cpl.manifest [749] O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 7/3/2015 - 17:50:00 R-HA- . (...) -- C:\WINDOWS\system32\wuaucpl.cpl.manifest [749] O44 - LFC:[MD5.5D76C3FB736514E1D7C88791E7322784] - 7/3/2015 - 17:50:04 R-HA- . (...) -- C:\WINDOWS\system32\WindowsLogon.manifest [488] O44 - LFC:[MD5.5D76C3FB736514E1D7C88791E7322784] - 7/3/2015 - 17:50:04 R-HA- . (...) -- C:\WINDOWS\system32\logonui.exe.manifest [488] O44 - LFC:[MD5.53D7F47255085310F50604FDE3076F97] - 7/3/2015 - 17:51:37 ---A- . (...) -- C:\WINDOWS\ODBCINST.INI [4161] O44 - LFC:[MD5.DC17DD0189B0C36D863B4DD0A036C10F] - 7/3/2015 - 17:51:51 ---A- . (...) -- C:\WINDOWS\WMSysPr9.prx [316640] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 7/3/2015 - 17:52:02 ---A- . (...) -- C:\AUTOEXEC.BAT [0] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 7/3/2015 - 17:52:02 ---A- . (...) -- C:\CONFIG.SYS [0] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 7/3/2015 - 17:52:02 ---A- . (...) -- C:\WINDOWS\control.ini [0] O44 - LFC:[MD5.01C47C2ECED034EF6F8C1552A97CFF00] - 7/3/2015 - 17:52:02 ---A- . (...) -- C:\WINDOWS\system32\CONFIG.NT [2577] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 7/3/2015 - 17:52:02 RSHA- . (...) -- C:\IO.SYS [0] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 7/3/2015 - 17:52:02 RSHA- . (...) -- C:\MSDOS.SYS [0] O44 - LFC:[MD5.527FCE2822A952C2A98B3B95215C6D0A] - 7/3/2015 - 17:55:18 ---A- . (...) -- C:\WINDOWS\system32\$winnt$.inf [784] O44 - LFC:[MD5.D82CAD2A5E4B9E4D68A9FA5D6EACE8E2] - 7/3/2015 - 17:56:12 ---A- . (...) -- C:\WINDOWS\REGLOCS.OLD [8192] O44 - LFC:[MD5.9310C1FEDDA523D389ACF26109CA0BAD] - 7/3/2015 - 21:16:18 ---A- . (...) -- C:\WINDOWS\system32\VTDispl2.cfg [57570] O44 - LFC:[MD5.85D2B80F146CBF77D126784E7A6591BC] - 7/3/2015 - 21:16:18 ---A- . (...) -- C:\WINDOWS\system32\VTDispl3.cfg [52029] O44 - LFC:[MD5.2AF1F2D485D2AF2C229830E17016D3AD] - 7/3/2015 - 21:16:18 ---A- . (...) -- C:\WINDOWS\system32\VTDisply.cfg [72732] O44 - LFC:[MD5.DDB641C7A818CDD08EA57408840A5C76] - 7/3/2015 - 21:16:18 ---A- . (...) -- C:\WINDOWS\system32\VTGama_2.cfg [36732] O44 - LFC:[MD5.E90F9E90C0F8203F89EACFAE91986626] - 7/3/2015 - 21:16:18 ---A- . (...) -- C:\WINDOWS\system32\VTGamma2.cfg [52062] O44 - LFC:[MD5.FA0E30E8ADD9D37BA3CE2AB483214E22] - 7/3/2015 - 21:16:18 ---A- . (...) -- C:\WINDOWS\system32\VTInfo2.cfg [44076] O44 - LFC:[MD5.6DCF1FE651984EF808844E19F22DF1FA] - 7/3/2015 - 21:16:18 ---A- . (.Copyright (C) VIA/S3 Graphics Co, Ltd. - VIA/S3G Miniport Driver.) -- C:\WINDOWS\system32\Drivers\vtmini.sys [296960] O44 - LFC:[MD5.64729C72408C58D38F9CB59331AA77A8] - 7/3/2015 - 21:16:18 ---A- . (.S3 Graphics Co., Ltd. - S3 Graphics Display Adapter Information Uti.) -- C:\WINDOWS\system32\VTInfo2.dll [342016] O44 - LFC:[MD5.B919AF42FEC5EA5B1938179639784CB0] - 7/3/2015 - 21:16:18 ---A- . (.S3 Graphics Co., Ltd. - S3 multi-chip display switch utility (32-bi.) -- C:\WINDOWS\system32\VTDisply.dll [727040] O44 - LFC:[MD5.25481CF2F2C3135BACE322F847E07F7B] - 7/3/2015 - 21:16:18 ---A- . (.S3 Graphics Co., Ltd. - S3Gamma Plus (32-bit).) -- C:\WINDOWS\system32\VTGamma2.dll [519168] O44 - LFC:[MD5.CC0444811F1F100BB6DF2531CE7E21C1] - 7/3/2015 - 21:16:18 ---A- . (.S3 Graphics Co., Ltd. - s3iset32.) -- C:\WINDOWS\system32\s3iset32.dll [473600] O44 - LFC:[MD5.2065DD87BB95ED0B17F9C77AFEE09379] - 7/3/2015 - 21:16:18 ---A- . (.S3 Graphics Co., Ltd. - s3iset32.) -- C:\WINDOWS\system32\s3minset.exe [297472] O44 - LFC:[MD5.FF64CE162B16567F9807C3F6C60D337C] - 7/3/2015 - 21:16:18 ---A- . (.VIA - SetMode.) -- C:\WINDOWS\system32\VModes.exe [65536] O44 - LFC:[MD5.98484BCC316D637FF635A70C896B37F7] - 7/3/2015 - 21:16:18 ---A- . (.VIA/S3 Graphics Co, Ltd. - VIA/S3G Graphics Driver.) -- C:\WINDOWS\system32\vtdisp.dll [1711616] O44 - LFC:[MD5.A951D944FE1567A231566AA293C2E924] - 7/3/2015 - 21:16:18 ---A- . (.VIA/S3 Graphics, Inc. - UniChrome(Pro) IGP ICD Driver.) -- C:\WINDOWS\system32\vticd.dll [1900544] O44 - LFC:[MD5.14EEB8779135A293D7504A7A89434AD6] - 7/3/2015 - 21:16:19 ---A- . (...) -- C:\WINDOWS\system32\VTOvrly2.cfg [34375] O44 - LFC:[MD5.7ECD3DD6B739DFAF2B9B00BF0DAC443B] - 7/3/2015 - 21:16:19 ---A- . (...) -- C:\WINDOWS\system32\VTTrayP2.cfg [37162] O44 - LFC:[MD5.C81CEF8A580F8EE79D8727EB44BF100A] - 7/3/2015 - 21:16:19 ---A- . (...) -- C:\WINDOWS\system32\VTTrayp.cfg [51124] O44 - LFC:[MD5.8B84DA4A7F495870266F92C5ACEA4796] - 7/3/2015 - 21:16:19 ---A- . (...) -- C:\WINDOWS\system32\VTovrlay.cfg [59798] O44 - LFC:[MD5.8FF5202659BCCAFD17D6C24FA894A7F2] - 7/3/2015 - 21:16:19 ---A- . (.S3 Graphics Co., Ltd. - S3ColorPus/S3Overlay Utility.) -- C:\WINDOWS\system32\VTovrlay.dll [594944] O44 - LFC:[MD5.530D1545E2DA3BCB1BB68457BC75A9AD] - 7/3/2015 - 21:16:19 ---A- . (.S3 Graphics Co., Ltd. - s3contrl (32-bit).) -- C:\WINDOWS\system32\VTTrayp.exe [199168] O44 - LFC:[MD5.AB4177025353ED30A67F1B4D9806F6C0] - 7/3/2015 - 21:16:19 ---A- . (.S3 Graphics, Inc. - No Comment.) -- C:\WINDOWS\system32\VTTimer.exe [94208] O44 - LFC:[MD5.B8D51A5F2961AE381723F964978AA848] - 9/3/2015 - 11:50:21 ---A- . (.Realtek Semiconductor Corp. - Driver Removing for Windows x64 or x86_32.) -- C:\WINDOWS\Alcrmv.exe [217088] O44 - LFC:[MD5.A3CF502659EF4EBA42C70E832ED967ED] - 9/3/2015 - 11:50:21 ---A- . (.Realtek Semiconductor Corp. - Driver Update for Windows x64 or x86_32.) -- C:\WINDOWS\alcupd.exe [315392] O44 - LFC:[MD5.BB47824F9B42B7EF93E4F7129782A48E] - 9/3/2015 - 11:50:22 ---A- . (.No owner - RtlCPAPI Module.) -- C:\WINDOWS\system32\RtlCPAPI.dll [147456] O44 - LFC:[MD5.3390B4635D37163CB5B2C0A13403B58B] - 9/3/2015 - 11:50:22 ---A- . (.Realtek Semiconductor Corp. - Realtek AC97 Audio Control Panel.) -- C:\WINDOWS\system32\alsndmgr.cpl [18804736] O44 - LFC:[MD5.80FD4D46B0E9B620CF757A9A5C789329] - 9/3/2015 - 11:50:22 ---A- . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\soundman.exe [577536] O44 - LFC:[MD5.C99E22EFE74C8B3EFF93E227472FE247] - 9/3/2015 - 11:50:25 ---A- . (...) -- C:\WINDOWS\system32\alsndmgr.wav [141016] O44 - LFC:[MD5.336402653D18149456C1AF57A6529A99] - 9/3/2015 - 11:50:25 ---A- . (.Realtek Semiconductor Corp. - Realtek Audio Control Panel.) -- C:\WINDOWS\system32\RTLCPL.exe [10528768] O44 - LFC:[MD5.6CB08593487F5701D2D2254E693EAFCE] - 9/3/2015 - 11:50:38 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Descrambler Filter.) -- C:\WINDOWS\system32\Drivers\drmk.sys [60160] O44 - LFC:[MD5.AEF54BF915BF5C2ED1B856EF94E89721] - 9/3/2015 - 11:50:39 ---A- . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) -- C:\WINDOWS\system32\Drivers\portcls.sys [146048] O44 - LFC:[MD5.9B9F1C38D559047B8AC0DBA2D5FEBDE9] - 9/3/2015 - 11:50:39 ---A- . (.Microsoft Corporation - User CSA Library.) -- C:\WINDOWS\system32\ksuser.dll [4096] O44 - LFC:[MD5.F1941197A42F9F373CC70042FC82C950] - 9/3/2015 - 11:50:39 ---A- . (.Microsoft Corporation - WDM Streaming ActiveMovie Proxy.) -- C:\WINDOWS\system32\ksproxy.ax [129536] O44 - LFC:[MD5.DD8520280304B6145A6BE31008748C7C] - 9/3/2015 - 11:50:40 R--A- . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\WINDOWS\system32\Drivers\alcxwdm.sys [4122368] O44 - LFC:[MD5.325BB26842FC7CCC1FCCE2C457317F3E] - 9/3/2015 - 11:50:47 ---A- . (.Microsoft Corporation - MS Proxy Clock.) -- C:\WINDOWS\system32\Drivers\MSPCLOCK.sys [5376] O44 - LFC:[MD5.BAD59648BA099DA4A17680B39730CB3D] - 9/3/2015 - 11:50:49 ---A- . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\WINDOWS\system32\Drivers\MSPQM.sys [4992] O44 - LFC:[MD5.D1575E71568F4D9E14CA56B7B0453BF1] - 9/3/2015 - 11:50:51 ---A- . (.Microsoft Corporation - MS KS Server.) -- C:\WINDOWS\system32\Drivers\MSKSSRV.sys [7552] O44 - LFC:[MD5.8B83F3ED0F1688B4958F77CD6D2BF290] - 9/3/2015 - 11:50:53 ---A- . (.Microsoft Corporation - System Audio WDM Filter.) -- C:\WINDOWS\system32\Drivers\sysaudio.sys [60800] O44 - LFC:[MD5.8F5FCFF8E8848AFAC920905FBD9D33C8] - 9/3/2015 - 11:50:57 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Audio Descrambler Filt.) -- C:\WINDOWS\system32\Drivers\drmkaud.sys [2944] O44 - LFC:[MD5.692BCF44383D056AED41B045A323D378] - 9/3/2015 - 11:50:59 ---A- . (.Microsoft Corporation - Kernel Mode Audio Mixer.) -- C:\WINDOWS\system32\Drivers\kmixer.sys [172416] O44 - LFC:[MD5.8BED39E3C35D6A489438B8141717A557] - 9/3/2015 - 11:51:01 ---A- . (.Microsoft Corporation - Microsoft Acoustic Echo Canceller.) -- C:\WINDOWS\system32\Drivers\aec.sys [142592] O44 - LFC:[MD5.8CE882BCC6CF8A62F2B2323D95CB3D01] - 9/3/2015 - 11:51:02 ---A- . (.Microsoft Corporation - Microsoft GS Wavetable Synthesizer.) -- C:\WINDOWS\system32\Drivers\swmidi.sys [56576] O44 - LFC:[MD5.8A208DFCF89792A484E76C40E5F50B45] - 9/3/2015 - 11:51:05 ---A- . (.Microsoft Corporation - Microsoft Kernel DLS Synthesizer.) -- C:\WINDOWS\system32\Drivers\DMusic.sys [52864] O44 - LFC:[MD5.6768ACF64B18196494413695F0C3A00F] - 9/3/2015 - 11:51:07 ---A- . (.Microsoft Corporation - MMSYSTEM Wave/Midi API mapper.) -- C:\WINDOWS\system32\Drivers\wdmaud.sys [83072] O44 - LFC:[MD5.AB8B92451ECB048A4D1DE7C3FFCB4A9F] - 9/3/2015 - 11:51:09 ---A- . (.Microsoft Corporation - Microsoft Kernel Audio Splitter.) -- C:\WINDOWS\system32\Drivers\splitter.sys [6272] O44 - LFC:[MD5.43C3571EADA5BC1EDEAD7CA22AD66F30] - 9/3/2015 - 11:51:14 ---A- . (...) -- C:\WINDOWS\system32\ChCfg.exe [49152] O44 - LFC:[MD5.BB8DC530B88F47DD2A37915480AA6CD2] - 9/3/2015 - 22:14:35 ---A- . (.Microsoft Corporation - Universal Serial Bus Camera DShow Extension.) -- C:\WINDOWS\system32\dshowext.ax [20992] O44 - LFC:[MD5.264C642770CB6269A67AC8E0ED74419F] - 9/3/2015 - 22:14:36 ---A- . (.Microsoft Corporation - WDM Streaming TvTuner.) -- C:\WINDOWS\system32\kstvtune.ax [61952] O44 - LFC:[MD5.813236B1183CFCF289E367BD5DE6E29E] - 9/3/2015 - 22:14:38 ---A- . (.Microsoft Corporation - USB Video Class Driver.) -- C:\WINDOWS\system32\Drivers\usbvideo.sys [123008] O44 - LFC:[MD5.D5C3D43D0616FF699DB771928AC0E2CD] - 9/3/2015 - 22:14:38 ---A- . (.Microsoft Corporation - WDM Streaming Crossbar.) -- C:\WINDOWS\system32\ksxbar.ax [43008] O44 - LFC:[MD5.C9EF69B25DFA1C0E7932CB02FB8A7E91] - 9/3/2015 - 22:14:38 ---A- . (.Microsoft Corporation - WDM Streaming Video Capture.) -- C:\WINDOWS\system32\kswdmcap.ax [91136] O44 - LFC:[MD5.E2A57AC21705D3A05BB89BE201FA5C0C] - 9/3/2015 - 22:14:39 ---A- . (.Microsoft Corporation - VfW MM Driver for WDM Video Capture Devices.) -- C:\WINDOWS\system32\vfwwdm32.dll [53760] O44 - LFC:[MD5.94BA90C6AF5C50FF5F7A6392514C4642] - 9/3/2015 - 22:14:39 ---A- . (.Microsoft Corporation - Video Capture Interface Server.) -- C:\WINDOWS\system32\vidcap.ax [28672] O44 - LFC:[MD5.0BE5AEF125BE881C4F854C554F2B025C] - 9/3/2015 - 22:14:49 ---A- . (.Microsoft Corporation - WDM Closed Caption VBI Codec.) -- C:\WINDOWS\system32\Drivers\CCDECODE.sys [17024] O44 - LFC:[MD5.5B50F1B2A2ED47D560577B221DA734DB] - 9/3/2015 - 22:14:52 ---A- . (.Microsoft Corporation - WDM NABTS/FEC VBI Codec.) -- C:\WINDOWS\system32\Drivers\NABTSFEC.sys [85248] O44 - LFC:[MD5.C98B39829C2BBD34E454150633C62C78] - 9/3/2015 - 22:14:57 ---A- . (.Microsoft Corporation - WDM WST Codec Driver.) -- C:\WINDOWS\system32\Drivers\WSTCODEC.SYS [19200] O44 - LFC:[MD5.866D538EBE33709A5C9F5C62B73B7D14] - 9/3/2015 - 22:15:03 ---A- . (.Microsoft Corporation - Microsoft Slip Deframing Filter Minidriver.) -- C:\WINDOWS\system32\Drivers\SLIP.sys [11136] O44 - LFC:[MD5.7366AF0CA5F98A7653851FC2C1D05B0D] - 9/3/2015 - 22:15:07 ---A- . (.Microsoft Corporation - WDM Streaming IPSINK Property Set Interface.) -- C:\WINDOWS\system32\ipsink.ax [16384] O44 - LFC:[MD5.77813007BA6265C4B6098187E6ED79D2] - 9/3/2015 - 22:15:08 ---A- . (.Microsoft Corporation - Microsoft IP Test Driver.) -- C:\WINDOWS\system32\Drivers\StreamIP.sys [15232] O44 - LFC:[MD5.7FF1F1FD8609C149AA432F95A8163D97] - 9/3/2015 - 22:15:11 ---A- . (.Microsoft Corporation - Microsoft IP Driver.) -- C:\WINDOWS\system32\Drivers\NdisIP.sys [10880] O44 - LFC:[MD5.E53736A9E30C45FA9E7B5EAC55056D1D] - 9/3/2015 - 22:15:18 ---A- . (.Microsoft Corporation - WDM Tee/Communication Transform Filter.) -- C:\WINDOWS\system32\Drivers\MSTEE.sys [5504] ~ Files: 2331 Scanned in 01mn 34s ---\\ Exportar a chave da aplicação autorizada (047) O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\Priston Tale 2\PT2Start.exe" [Enabled] .(.No owner.) -- C:\Program Files\Priston Tale 2\PT2Start.exe O47 - AAKE:Key Export SP - "C:\Program Files\Mozilla Firefox\firefox.exe" [Enabled] .(.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe O47 - AAKE:Key Export SP - "C:\Program Files\Orbitdownloader\orbitdm.exe" [Enabled] .(.Orbitdownloader.com.) -- C:\Program Files\Orbitdownloader\orbitdm.exe O47 - AAKE:Key Export SP - "C:\Program Files\Orbitdownloader\orbitnet.exe" [Enabled] .(.Orbitdownloader.com.) -- C:\Program Files\Orbitdownloader\orbitnet.exe O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe ~ Keys Export: 8 Scanned in 00mn 00s ---\\ Negação do serviço (Local Security Authority) (048) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Windows Security Configuration Editor Client Engine.) -- C:\WINDOWS\system32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\WINDOWS\system32\tspkg.dll ~ LSA: 7 Scanned in 00mn 00s ---\\ Controlo do Modo de Segurança (CSB) (49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager I/O Driver.) -- C:\WINDOWS\system32\Drivers\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - System Restore Filesystem Filter Driver.) -- C:\WINDOWS\system32\Drivers\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager I/O Driver.) -- C:\WINDOWS\system32\Drivers\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - System Restore Filesystem Filter Driver.) -- C:\WINDOWS\system32\Drivers\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.) ~ CSB: 21 Scanned in 00mn 00s ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ~ IFEO: Scanned in 00mn 00s ---\\ Pesquisa de infeções nos drivers (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - DSP Group TrueSpeech(TM) Audio Codec for MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm ~ TDSD: 12 Scanned in 00mn 00s ---\\ Enumeração das chaves do registo StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\MSConfig [Key] . (.Microsoft Corporation - System Configuration Utility.) -- C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.exe ~ SMSR Keys: 1 Scanned in 00mn 00s ---\\ Enumeração das chaves do registo SecurityProviders (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - DPA Client for 32 bit platforms.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\WINDOWS\system32\credssp.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - DPA Client for 32 bit platforms.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\WINDOWS\system32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest.dll ~ MSCP: 8 Scanned in 00mn 00s ---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnablELUA"=0 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0 ~ MWPS: 10 Scanned in 00mn 00s ---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=323 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=67108863 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=67108863 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=323 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0 ~ MWPE Keys: 7 Scanned in 00mn 00s ---\\ Lista dos drivers do sistema (SDL) (O58) O58 - SDL:24/9/2008 - 09:40:22 R--A- . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\WINDOWS\system32\Drivers\alcxwdm.sys [4122368] O58 - SDL:14/1/2015 - 00:42:14 ---A- . (.RAVISENT Technologies Inc. - CineMaster C 1.2 WDM Main Driver.) -- C:\WINDOWS\system32\Drivers\cinemst2.sys [262528] O58 - SDL:14/1/2015 - 00:42:14 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\Drivers\cpqdap01.sys [11776] O58 - SDL:7/3/2015 - 08:36:18 ---A- . (.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmboot.sys [799744] O58 - SDL:7/3/2015 - 08:36:18 ---A- . (.Microsoft Corp., Veritas Software - NT Disk Manager I/O Driver.) -- C:\WINDOWS\system32\Drivers\dmio.sys [153344] O58 - SDL:7/3/2015 - 08:36:18 ---A- . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys [5888] O58 - SDL:17/8/2001 - 02:13:08 ---A- . (.VIA Technologies, Inc. - NDIS 5.0 miniport driver.) -- C:\WINDOWS\system32\Drivers\fetnd5.sys [27165] O58 - SDL:1/4/2011 - 14:37:18 ---A- . (.VIA Technologies, Inc. - NDIS 5.0 miniport driver.) -- C:\WINDOWS\system32\Drivers\fetnd5bv.sys [48128] O58 - SDL:7/3/2015 - 08:37:38 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\hdaudbus.sys [144384] O58 - SDL:21/11/2014 - 05:14:06 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\mbam.sys [23256] O58 - SDL:21/11/2014 - 05:14:14 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\WINDOWS\system32\Drivers\mbamchameleon.sys [54360] O58 - SDL:31/3/2015 - 15:42:35 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys [114904] O58 - SDL:7/3/2015 - 08:40:28 ---A- . (.Marvell Semiconductor Inc. - Marvell Aux NV Bridge DLL.) -- C:\WINDOWS\system32\Drivers\mv61xxmm.sys [14184] O58 - SDL:7/3/2015 - 08:40:28 ---A- . (.Marvell Semiconductor Inc. - Marvell Aux NV Bridge DLL.) -- C:\WINDOWS\system32\Drivers\mv64xxmm.sys [5632] O58 - SDL:7/3/2015 - 08:40:28 ---A- . (.Marvell Semiconductor Inc. - Marvell Aux NV Bridge DLL.) -- C:\WINDOWS\system32\Drivers\mvxxmm.sys [14184] O58 - SDL:14/1/2015 - 00:42:14 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\nikedrv.sys [12032] O58 - SDL:7/3/2015 - 08:41:40 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\Drivers\ptilink.sys [17792] O58 - SDL:14/1/2015 - 00:42:14 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\Drivers\rio8drv.sys [12032] O58 - SDL:14/1/2015 - 00:42:14 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\riodrv.sys [12032] O58 - SDL:7/3/2015 - 08:42:08 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\Drivers\secdrv.sys [20480] O58 - SDL:14/1/2015 - 00:42:14 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\Drivers\tsbvcap.sys [21376] O58 - SDL:14/1/2015 - 00:42:14 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\Drivers\vdmindvd.sys [58112] O58 - SDL:2/7/2003 - 04:42:00 ---A- . (.VIA Technologies, Inc. - VIA NT AGP Filter.) -- C:\WINDOWS\system32\Drivers\VIAAGP1.SYS [27904] O58 - SDL:7/3/2015 - 08:44:08 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\WINDOWS\system32\Drivers\viaide.sys [13976] O58 - SDL:11/2/2010 - 02:59:18 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\WINDOWS\system32\Drivers\videX32.sys [13976] O58 - SDL:10/11/2009 - 12:14:58 ---A- . (.Copyright (C) VIA/S3 Graphics Co, Ltd. - VIA/S3G Miniport Driver.) -- C:\WINDOWS\system32\Drivers\vtmini.sys [296960] O58 - SDL:24/10/2002 - 08:07:24 ---A- . (.VIA Technologies, Inc. - VIA USB Host Controller Lower Filter Driver.) -- C:\WINDOWS\system32\Drivers\vulfnth.sys [6912] O58 - SDL:31/10/2002 - 05:15:30 ---A- . (.VIA Technologies, Inc. - VIA USB Roothub Lower Filter Driver.) -- C:\WINDOWS\system32\Drivers\vulfntr.sys [10240] O58 - SDL:11/2/2010 - 02:59:48 ---A- . (.VIA Technologies, Inc. - ATA/ATAPI devices Hot-Plug/DIPM monitor.) -- C:\WINDOWS\system32\Drivers\xfilt.sys [23192] O58 - SDL:7/3/2015 - 08:34:34 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9029] O58 - SDL:7/3/2015 - 08:36:04 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097] O58 - SDL:3/4/1996 - 11:33:26 ---A- . (...) -- C:\WINDOWS\system32\giveio.sys [5248] O58 - SDL:7/3/2015 - 08:37:40 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4768] O58 - SDL:7/3/2015 - 08:38:18 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809] O58 - SDL:7/3/2015 - 08:38:18 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537] O58 - SDL:7/3/2015 - 08:40:54 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27866] O58 - SDL:7/3/2015 - 08:40:54 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146] O58 - SDL:7/3/2015 - 08:40:54 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370] O58 - SDL:7/3/2015 - 08:40:56 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274] O58 - SDL:7/3/2015 - 08:40:56 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146] O58 - SDL:7/3/2015 - 08:40:56 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [33840] O58 - SDL:7/3/2015 - 08:40:56 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560] O58 - SDL:7/3/2015 - 08:40:56 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648] O58 - SDL:7/3/2015 - 08:40:56 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424] O58 - SDL:7/3/2015 - 08:40:56 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560] O58 - SDL:29/12/2012 - 12:59:38 ---A- . (.Almico Software - SpeedFan x32 Driver.) -- C:\WINDOWS\system32\speedfan.sys [24184] ~ Drivers: 46 Scanned in 00mn 00s ---\\ Últimos ficheiros alterados ou criados (Utilizador) (061) O61 - LFC: 13/3/2015 - 23:35:15 ---A- . (.BlueSprig.) -- C:\Documents and Settings\Lucifer\My Documents\Downloads\jetboost-setup.exe [3511744] O61 - LFC: 13/3/2015 - 23:35:15 ---A- . (.ReviverSoft LLC.) -- C:\Documents and Settings\Lucifer\My Documents\Downloads\RegistryReviverSetup.exe [4162200] =>PUP.RegistryReviver O61 - LFC: 18/3/2015 - 23:35:14 ---A- . (.FreeDownloadManager.ORG.) -- C:\Documents and Settings\Lucifer\Application Data\Free Download Manager\Update\fdminst.exe [8041553] O61 - LFC: 18/3/2015 - 23:35:15 ---A- . (...) -- C:\Documents and Settings\Lucifer\My Documents\Downloads\instspeedfan451.exe [2218504] O61 - LFC: 18/3/2015 - 23:35:15 ---A- . (.Microsoft Corporation.) -- C:\Documents and Settings\Lucifer\My Documents\Downloads\dotNetFx40_Full_setup.exe [889416] O61 - LFC: 18/3/2015 - 23:35:15 ---A- . (.Piriform Ltd.) -- C:\Documents and Settings\Lucifer\My Documents\Downloads\ccsetup503.exe [5325696] O61 - LFC: 20/3/2015 - 23:35:14 ---A- . (...) -- C:\Documents and Settings\Lucifer\Application Data\ZHP\ZHPCleaner.exe [1734656] =>.Nicolas Coolman O61 - LFC: 20/3/2015 - 23:35:14 ---A- . (.SosVirus.) -- C:\Documents and Settings\Lucifer\Desktop\AdsFix.exe [2446984] O61 - LFC: 20/3/2015 - 23:35:15 ---A- . (...) -- C:\Documents and Settings\Lucifer\My Documents\Downloads\ZHPCleaner.exe [1734656] =>.Nicolas Coolman O61 - LFC: 20/3/2015 - 23:35:15 ---A- . (.Bleeping Computer, LLC.) -- C:\Documents and Settings\Lucifer\My Documents\Downloads\rkill.com [1943800] O61 - LFC: 20/3/2015 - 23:35:15 ---A- . (.Kaspersky Lab ZAO.) -- C:\Documents and Settings\Lucifer\My Documents\Downloads\tdsskiller.exe [4197016] O61 - LFC: 20/3/2015 - 23:35:15 ---A- . (.Malwarebytes Corporation.) -- C:\Documents and Settings\Lucifer\My Documents\Downloads\mbam-setup-2.0.4.1028.exe [20447072] O61 - LFC: 20/3/2015 - 23:35:15 ---A- . (.SosVirus.) -- C:\Documents and Settings\Lucifer\My Documents\Downloads\AdsFix.exe [2446984] O61 - LFC: 25/3/2015 - 23:35:15 ---A- . (.Nicolas Coolman.) -- C:\Documents and Settings\Lucifer\My Documents\Downloads\ZHPDiag2.exe [6877328] =>.Nicolas Coolman ~ 8 Fichiers temporaires (Temporary files) ~ 5 Fichiers cookies (Cookies files) ~ Files: 14 Scanned in 00mn 01s ---\\ Lista das ferramentas de remoção de vírus (LAT) (063) O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Lista dos serviços Legacy du registo (064) O64 - Services: CurCS - 7/3/2015 - C:\WINDOWS\system32\drivers\dmload.sys (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD O64 - Services: CurCS - 3/4/1996 - C:\WINDOWS\system32\giveio.sys (giveio) .(...) - LEGACY_GIVEIO O64 - Services: CurCS - 29/12/2012 - C:\WINDOWS\system32\speedfan.sys (speedfan) .(.Almico Software - SpeedFan x32 Driver.) - LEGACY_SPEEDFAN ~ Legacy: 121 Scanned in 00mn 00s ---\\ Associações Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\shell32.dll O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe ~ FASS Keys: 10 Scanned in 00mn 00s ---\\ Menu de inicialização Internet (068) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Listagem dos serviços iniciados pelo Svchost (SSS) (O83) O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Software installation Service.) -- C:\WINDOWS\system32\appmgmts.dll [167936] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496] O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [78336] O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464] O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - Logical Disk Manager service dll.) -- C:\WINDOWS\system32\dmserver.dll [23552] O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - DHCP Client Service.) -- C:\WINDOWS\system32\dhcpcsvc.dll [126976] O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040] O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\es.dll [253952] O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\WINDOWS\system32\shsvcs.dll [135168] O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504] O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [99840] O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [134144] O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792] O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Network Connections Manager.) -- C:\WINDOWS\system32\netman.dll [198144] O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll [245248] O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Removable Storage Manager.) -- C:\WINDOWS\system32\ntmssvc.dll [435200] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248] O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Task Scheduler Engine.) -- C:\WINDOWS\system32\schedsvc.dll [192512] O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - Secondary Logon Service DLL.) -- C:\WINDOWS\system32\seclogon.dll [18944] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\WINDOWS\system32\ipnathlp.dll [330752] O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - System Restore Service.) -- C:\WINDOWS\system32\srsvc.dll [171008] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\WINDOWS\system32\tapisrv.dll [249856] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\WINDOWS\system32\shsvcs.dll [135168] O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Windows Time Service.) -- C:\WINDOWS\system32\w32time.dll [175616] O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Wireless Zero Configuration Service.) -- C:\WINDOWS\system32\wzcsvc.dll [483328] O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - Advanced Windows 32 Base API.) -- C:\WINDOWS\system32\advapi32.dll [618496] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [144896] O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024] O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Quarantine Agent Service Run-Time.) -- C:\WINDOWS\system32\qagentrt.dll [291328] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Key Management Service.) -- C:\WINDOWS\system32\kmsvc.dll [61440] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\WINDOWS\system32\qmgr.dll [409088] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [23064] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\WINDOWS\system32\shsvcs.dll [135168] O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400] O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\mspmsnsv.dll [52224] ~ Services: 40 Scanned in 00mn 00s ---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84) [MD5.DDECD827991125293E99AF3EB73BCC1C] [SPRF][20/3/2015] (.SosVirus - AdsFix.) -- C:\Documents and Settings\Lucifer\Desktop\AdsFix.exe [2446984] [MD5.D41D8CD98F00B204E9800998ECF8427E] [SPRF][8/3/2015] (...) -- C:\Documents and Settings\Lucifer\Desktop\Cliente Full MonsterPK v4950.exe [1039514095] ~ Files: 2 Scanned in 00mn 00s ---\\ Pesquisa de infeção no Registo Mestre de Inicialização (MBR) (080) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net Run by Lucifer at 18/3/2015 23:36:32 device: opened successfully user: MBR read successfully Disk trace: called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys atapi.sys hal.dll videX32.sys PCIIDEX.SYS C:\WINDOWS\system32\drivers\videX32.sys VIA Technologies, Inc. VIA PCI IDE MINI Driver 1 nt!IofCallDriver[0x804E3735] >> \Device\Harddisk0\DR0[0x8578FAB8] 3 CLASSPNP[0xF75AEFD7] >> nt!IofCallDriver[0x804E3735] >> \Device\Ide\IdeDeviceP3T0L0-7[0x857988E8] kernel: MBR read successfully user & kernel MBR OK ~ MBR: 13 Scanned in 00mn 02s ---\\ Pesquisa de infeção no Registo Mestre de Inicialização (MBRCheck) (080) Written by ad13, http://ad13.geekstog Run by Lucifer at 18/3/2015 23:36:34 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 04s ---\\ Scâner Aditional (088) Database Version : 13008 - (8/3/2015) Clés trouvées (Keys found) : 0 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 0 Fichiers trouvés (Files found) : 0 ~ Additionnel Scan: 103405 Items scanned in 00mn 29s ---\\ Informações complémentaires do módulos ~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Gestão do Proxy (R5) ~ http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects do navegador (02) ~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Aplicações iniciadas por registo & pastas (04) ~ http://nicolascoolman.fr/o50-image-file-execution-options-zhpdiag/ =>.Image File Execution Options (IFEO) (O50) ~ AMI: 4 Scanned in 00mn 00s ---\\ Sumário das deteções encontradas na sua estação http://nicolascoolman.fr/pup-imesh =>PUP.iMesh http://www.nicolascoolman.fr/blog/ =>PUP.RegistryReviver ~ MSI: 2 link(s) detected in 00mn 00s End of the scan (3159 lines in 04mn 15s)(0.4)