cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 15/04/2013 19:29:54 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\c\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

2,97 Gb Total Physical Memory | 1,69 Gb Available Physical Memory | 57,01% Memory free
5,93 Gb Paging File | 4,31 Gb Available in Paging File | 72,72% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116,44 Gb Total Space | 51,22 Gb Free Space | 43,99% Space Free | Partition Type: NTFS
Drive D: | 106,67 Gb Total Space | 106,17 Gb Free Space | 99,53% Space Free | Partition Type: NTFS
Drive F: | 465,76 Gb Total Space | 216,14 Gb Free Space | 46,41% Space Free | Partition Type: NTFS

Computer Name: PC-DE-CORINNE | User Name: c | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2013/04/15 19:25:16 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\c\Desktop\OTL.exe
PRC - [2013/04/15 18:32:02 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013/03/01 01:41:46 | 000,356,376 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe
PRC - [2012/12/18 16:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012/11/23 04:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2012/10/04 17:34:36 | 000,115,032 | R--- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Messenger\SweetIM.exe
PRC - [2012/08/15 20:08:34 | 000,231,768 | ---- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
PRC - [2012/01/23 06:43:08 | 000,247,728 | ---- | M] (TomTom) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
PRC - [2012/01/23 06:43:08 | 000,092,592 | ---- | M] (TomTom) -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
PRC - [2011/12/12 01:00:00 | 000,122,000 | ---- | M] (Seiko Epson Corporation) -- C:\Windows\System32\escsvc.exe
PRC - [2011/10/31 15:25:08 | 001,058,400 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files\EPSON Software\Event Manager\EEventManager.exe
PRC - [2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/05/14 18:07:14 | 000,759,048 | ---- | M] (ABBYY) -- C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
PRC - [2008/10/08 00:22:01 | 003,054,136 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2008/07/19 04:52:16 | 000,104,936 | ---- | M] (CyberLink) -- C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2008/07/15 20:29:00 | 007,651,328 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
PRC - [2008/07/15 20:22:46 | 000,217,088 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\HControl.exe
PRC - [2008/07/09 18:14:06 | 000,191,032 | ---- | M] (ATK) -- C:\Program Files\P4G\BatteryLife.exe
PRC - [2008/07/03 05:27:11 | 006,266,880 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2008/06/24 05:16:24 | 002,482,176 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe
PRC - [2008/06/19 21:18:12 | 000,154,168 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe
PRC - [2008/06/18 07:10:24 | 000,297,528 | ---- | M] (ASUS) -- C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
PRC - [2008/06/04 02:29:08 | 000,851,968 | ---- | M] (ATK) -- C:\Program Files\ASUS\Splendid\ACMON.exe
PRC - [2008/01/26 03:32:38 | 000,778,240 | ---- | M] () -- C:\Program Files\P4P\P4P.exe
PRC - [2008/01/23 19:51:28 | 000,151,552 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\WDC.exe
PRC - [2008/01/12 07:40:10 | 000,098,304 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
PRC - [2007/11/30 20:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files\ASUS\ASUS Live Update\ALU.exe
PRC - [2007/11/05 04:48:06 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe
PRC - [2007/10/03 06:53:00 | 000,094,208 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
PRC - [2007/08/15 20:20:16 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe
PRC - [2007/08/08 09:08:40 | 000,094,208 | ---- | M] () -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe
PRC - [2007/08/03 21:24:54 | 000,125,496 | ---- | M] () -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
PRC - [2007/07/14 02:25:10 | 000,741,376 | ---- | M] (ChkMail) -- C:\Program Files\ChkMail\ChkMail\ChkMail.exe
PRC - [2007/07/06 01:53:44 | 001,040,384 | ---- | M] () -- C:\Program Files\Wireless Console 2\wcourier.exe
PRC - [2007/05/18 11:31:16 | 000,073,728 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
PRC - [2005/07/07 00:43:42 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\Windows\System32\ACEngSvr.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2013/04/15 18:32:01 | 003,133,336 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012/08/17 21:38:56 | 000,479,160 | ---- | M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\dblite.dll
MOD - [2008/07/19 04:52:08 | 000,649,704 | ---- | M] () -- C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll
MOD - [2008/07/02 20:31:06 | 000,184,320 | ---- | M] () -- C:\Program Files\asus\VirtualCamera\virtualCamera.ax
MOD - [2008/06/09 18:55:08 | 000,013,096 | ---- | M] () -- C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll
MOD - [2008/01/26 03:32:38 | 000,778,240 | ---- | M] () -- C:\Program Files\P4P\P4P.exe
MOD - [2008/01/12 07:40:10 | 000,098,304 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
MOD - [2007/11/30 20:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files\ASUS\ASUS Live Update\ALU.exe
MOD - [2007/11/13 00:41:50 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\MsgTran.dll
MOD - [2007/08/14 22:59:54 | 006,365,184 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\QtGui4.dll
MOD - [2007/08/08 11:52:08 | 000,331,776 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\AdsmendecExt.dll
MOD - [2007/07/12 22:55:52 | 000,131,072 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
MOD - [2007/07/12 22:55:28 | 001,581,056 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\QtCore4.dll
MOD - [2007/06/15 19:28:36 | 000,147,456 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll
MOD - [2007/06/02 02:08:18 | 000,143,360 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV - [2013/04/15 18:32:01 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/04/14 10:27:28 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2013/03/01 01:41:46 | 000,356,376 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe -- (AVP)
SRV - [2013/02/28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/12/18 16:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012/03/06 16:01:18 | 000,932,240 | ---- | M] (Canal+ Distribution) [On_Demand | Stopped] -- C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe -- (Service CANALPLAY)
SRV - [2012/01/23 06:43:08 | 000,092,592 | ---- | M] (TomTom) [Auto | Running] -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2011/12/12 01:00:00 | 000,122,000 | ---- | M] (Seiko Epson Corporation) [Auto | Running] -- C:\Windows\System32\escsvc.exe -- (EpsonScanSvc)
SRV - [2011/12/01 19:14:28 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV - [2009/05/14 18:07:14 | 000,759,048 | ---- | M] (ABBYY) [Auto | Running] -- C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Sprint.9.0)
SRV - [2007/10/03 06:53:00 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
SRV - [2007/08/08 09:08:40 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2007/08/03 21:24:54 | 000,125,496 | ---- | M] () [Auto | Running] -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe -- (spmgr)
SRV - [2007/05/18 11:31:16 | 000,073,728 | ---- | M] () [Auto | Running] -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2013/04/04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2013/03/01 01:41:42 | 000,589,144 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF)
DRV - [2013/03/01 01:41:40 | 000,043,608 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\kltdi.sys -- (kltdi)
DRV - [2013/03/01 01:41:40 | 000,025,944 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2013/03/01 01:41:40 | 000,025,944 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klkbdflt.sys -- (klkbdflt)
DRV - [2012/08/23 16:44:32 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2012/08/23 16:40:25 | 000,049,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2012/08/13 16:49:44 | 000,144,344 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\kneps.sys -- (kneps)
DRV - [2012/08/02 15:09:30 | 000,024,408 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\klim6.sys -- (KLIM6)
DRV - [2012/06/19 17:28:12 | 000,136,024 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\kl1.sys -- (kl1)
DRV - [2011/06/27 01:37:12 | 002,191,872 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2011/05/18 09:09:04 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dc3d.sys -- (dc3d)
DRV - [2010/11/20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009/07/14 00:13:48 | 001,035,776 | ---- | M] (LSI Corp) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2008/06/29 23:52:25 | 000,112,128 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcHdmi.sys -- (IntcHdmiAddService)
DRV - [2008/06/09 10:45:07 | 001,748,352 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC)
DRV - [2008/06/03 08:41:51 | 000,015,928 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2008/05/29 19:21:02 | 000,015,416 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | Boot | Running] -- C:\Windows\System32\drivers\lullaby.sys -- (lullaby)
DRV - [2008/05/02 07:59:39 | 000,122,368 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2008/02/16 02:42:42 | 000,046,592 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2007/12/19 02:12:12 | 000,054,784 | ---- | M] (ITE Tech. Inc. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\itecir.sys -- (itecir)
DRV - [2007/08/11 05:19:26 | 000,029,752 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | Boot | Running] -- C:\Windows\System32\drivers\AsDsm.sys -- (AsDsm)
DRV - [2007/08/03 06:26:21 | 000,020,936 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys -- (ghaio)
DRV - [2007/07/30 20:54:02 | 000,038,400 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007/07/30 19:42:58 | 000,043,008 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2007/07/24 20:09:04 | 000,013,880 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\ATKGFNEX\ASMMAP.sys -- (ASMMAP)
DRV - [2006/12/14 09:11:57 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}


IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2925507726-1892683941-3297751366-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
IE - HKU\S-1-5-21-2925507726-1892683941-3297751366-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
IE - HKU\S-1-5-21-2925507726-1892683941-3297751366-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2925507726-1892683941-3297751366-1000\..\SearchScopes,DefaultScope = {BEC4D0B6-2521-4E0F-B178-8BEFF2AE73CE}
IE - HKU\S-1-5-21-2925507726-1892683941-3297751366-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2925507726-1892683941-3297751366-1000\..\SearchScopes\{AB25FEE4-EEFC-4A30-944F-08E027AAFF63}: "URL" = http://fr.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
IE - HKU\S-1-5-21-2925507726-1892683941-3297751366-1000\..\SearchScopes\{BEC4D0B6-2521-4E0F-B178-8BEFF2AE73CE}: "URL" = http://www.google.com/search?hl=en&q={searchTerms}
IE - HKU\S-1-5-21-2925507726-1892683941-3297751366-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=827316&ilc=12"
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.fr/"
FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.14
FF - prefs.js..extensions.enabledAddons: %7BEEE6C361-6118-11DC-9C72-001320C79847%7D:1.9.0.0
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0.1
FF - prefs.js..keyword.URL: "http://search.sweetim.com/search.asp?barid={D29B1EF7-0980-11E2-9E39-00235442A5A4}&src=2&crg=3.1010000.120009&q="
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: ""


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@canalplay.com/CanalPlay: C:\Program Files\Lecteur CANALPLAY\npcplay.dll (Canal+ Distribution)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{EB132DB0-A4CA-11DF-9732-0E29E0D72085}: C:\Program Files\Object\facetheme
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\url_advisor@kaspersky.com [2013/04/14 20:31:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\virtual_keyboard@kaspersky.com [2013/04/14 20:31:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\content_blocker@kaspersky.com [2013/04/14 20:30:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/04/15 18:32:03 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{EB132DB0-A4CA-11DF-9732-0E29E0D72085}: C:\Program Files\Object\facetheme
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/04/15 18:32:03 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2012/03/02 12:37:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\c\AppData\Roaming\mozilla\Extensions
[2012/03/02 12:37:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\c\AppData\Roaming\mozilla\Extensions\home2@tomtom.com
[2013/03/30 09:05:48 | 000,000,000 | ---D | M] (IMinent Toolbar) -- C:\Users\c\AppData\Roaming\mozilla\Firefox\Profiles\gpe5b3j8.default\extensions
[2013/03/30 09:05:48 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\c\AppData\Roaming\mozilla\Firefox\Profiles\gpe5b3j8.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011/07/04 16:53:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\c\AppData\Roaming\mozilla\Firefox\Profiles\gpe5b3j8.default\extensions\chrome
[2011/07/04 16:53:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\c\AppData\Roaming\mozilla\Firefox\Profiles\gpe5b3j8.default\extensions\components
[2013/01/25 14:24:33 | 000,190,000 | ---- | M] () (No name found) -- C:\Users\c\AppData\Roaming\mozilla\firefox\profiles\gpe5b3j8.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
[2013/01/25 14:24:46 | 000,003,915 | ---- | M] () -- C:\Users\c\AppData\Roaming\mozilla\firefox\profiles\gpe5b3j8.default\searchplugins\sweetim.xml
[2012/10/01 12:09:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
[2013/04/15 18:32:03 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2013/04/15 18:31:58 | 000,001,609 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
[2013/04/15 18:31:58 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2013/04/15 18:31:58 | 000,002,035 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml
[2013/04/15 18:31:58 | 000,001,472 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
[2013/04/15 18:31:58 | 000,001,399 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
[2013/04/15 18:31:58 | 000,001,169 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml

[color=#E56717]========== Chrome ==========[/color]

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_278.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\25.0.1364.172\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\25.0.1364.172\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - Extension: avast! WebRep = C:\Users\c\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\
CHR - Extension: avast! WebRep = C:\Users\c\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\
CHR - Extension: SweetIM for Facebook = C:\Users\c\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of
CHR - Extension: SweetIM for Facebook = C:\Users\c\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\
CHR - Extension: avast! WebRep = C:\Users\c\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\
CHR - Extension: avast! WebRep = C:\Users\c\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\
CHR - Extension: SweetIM for Facebook = C:\Users\c\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of
CHR - Extension: SweetIM for Facebook = C:\Users\c\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\

O1 HOSTS File: ([2006/09/18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Content Blocker Plugin) - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Virtual Keyboard Plugin) - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
O2 - BHO: (URL Advisor Plugin) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
O3 - HKU\S-1-5-21-2925507726-1892683941-3297751366-1000\..\Toolbar\WebBrowser: (no name) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No CLSID value found.
O3 - HKU\S-1-5-21-2925507726-1892683941-3297751366-1000\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe ()
O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [ChkMail] C:\Program Files\ChkMail\ChkMail\ChkMail.exe (ChkMail)
O4 - HKLM..\Run: [CLMLServer] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
O4 - HKLM..\Run: [EEventManager] C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe ()
O4 - HKLM..\Run: [P2Go_Menu] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [PowerForPhone] C:\Program Files\P4P\P4P.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.)
O4 - HKU\S-1-5-21-2925507726-1892683941-3297751366-1000..\Run: [TomTomHOME.exe] C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Rechercher sur le Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found
O9 - Extra Button: Clavier virtuel - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O9 - Extra Button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Analyse des liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{61E2A48A-A33E-4A3F-A8D5-F7F07B7ABD62}: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O24 - Desktop WallPaper: C:\Windows\ASUS\wallpapers\ASUS.jpg
O24 - Desktop BackupWallPaper: C:\Windows\ASUS\wallpapers\ASUS.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2011/03/05 17:57:06 | 000,000,120 | ---- | M] () - F:\Autorun.inf -- [ NTFS ]
O33 - MountPoints2\{ff9ab948-1c35-11e1-bb48-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{ff9ab948-1c35-11e1-bb48-806e6f6e6963}\Shell\AutoRun\command - "" = E:\InstallNavi.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found


SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Dossiers Web
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv50 - C:\Windows\System32\ir50_32.dll (Intel Corporation)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2013/04/15 19:25:08 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\c\Desktop\OTL.exe
[2013/04/15 13:01:18 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
[2013/04/15 13:01:17 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpvideominiport.sys
[2013/04/15 13:01:16 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
[2013/04/15 13:01:16 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RdpGroupPolicyExtension.dll
[2013/04/15 13:01:14 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\TsUsbFlt.sys
[2013/04/15 13:01:14 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll
[2013/04/15 13:01:14 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbGDCoInstaller.dll
[2013/04/15 13:01:14 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wksprtPS.dll
[2013/04/15 13:01:13 | 002,739,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorets.dll
[2013/04/15 13:01:13 | 000,317,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wksprt.exe
[2013/04/15 13:01:13 | 000,269,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll
[2013/04/15 13:01:13 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpudd.dll
[2013/04/15 13:01:13 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpendp_winip.dll
[2013/04/15 13:01:13 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSWbPrxy.exe
[2013/04/15 13:01:13 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsRdpWebAccess.dll
[2013/04/15 12:57:23 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll
[2013/04/15 11:34:39 | 000,000,000 | ---D | C] -- C:\Users\c\Documents\Document
[2013/04/15 02:39:21 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
[2013/04/15 02:39:21 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2013/04/15 02:39:21 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2013/04/15 02:39:21 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2013/04/15 02:39:21 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/04/15 02:39:21 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/04/15 02:39:21 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/04/15 02:39:21 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/04/15 02:39:21 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/04/15 02:39:21 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/04/15 02:39:21 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013/04/15 02:39:21 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/04/15 02:39:21 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/04/15 02:39:20 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2013/04/15 02:39:20 | 001,988,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2013/04/15 02:39:20 | 001,504,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2013/04/15 02:39:20 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013/04/15 02:39:20 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2013/04/15 02:39:20 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013/04/15 02:39:20 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2013/04/15 02:39:20 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2013/04/15 02:39:20 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2013/04/15 02:39:20 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2013/04/15 02:39:20 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
[2013/04/15 02:39:20 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013/04/14 23:44:15 | 000,000,000 | ---D | C] -- C:\Users\c\AppData\Roaming\Malwarebytes
[2013/04/14 23:44:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013/04/14 23:44:00 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013/04/14 23:44:00 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013/04/14 23:43:27 | 000,000,000 | ---D | C] -- C:\Users\c\AppData\Local\Programs
[2013/04/14 20:31:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus 2013
[2013/04/14 20:30:54 | 000,000,000 | ---D | C] -- C:\Windows\ELAMBKUP
[2013/04/14 20:30:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2013/04/14 20:30:43 | 000,000,000 | ---D | C] -- C:\Program Files\Kaspersky Lab
[2013/04/14 20:30:29 | 000,589,144 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys
[2013/04/14 20:30:29 | 000,075,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klflt.sys
[2013/04/12 22:20:51 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013/04/12 22:20:49 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013/04/12 22:20:48 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013/04/12 22:20:47 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013/04/12 22:20:47 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013/04/12 22:20:44 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013/04/12 22:20:44 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013/04/12 22:20:41 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013/04/10 10:12:06 | 002,347,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2013/04/10 10:11:57 | 003,968,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2013/04/10 10:11:57 | 003,913,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2013/04/10 10:11:53 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2013/04/08 20:42:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013/03/30 08:18:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2013/03/25 21:30:39 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usb8023.sys
[2013/03/18 00:32:11 | 000,000,000 | ---D | C] -- C:\Users\c\AppData\Roaming\Epson
[2013/03/18 00:16:13 | 000,000,000 | ---D | C] -- C:\Users\c\AppData\Local\ABBYY
[2013/03/18 00:15:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint
[2013/03/18 00:15:34 | 000,000,000 | ---D | C] -- C:\Program Files\ABBYY FineReader 9.0 Sprint
[2013/03/18 00:15:34 | 000,000,000 | ---D | C] -- C:\ProgramData\ABBYY
[2013/03/18 00:15:34 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ABBYY
[2013/03/18 00:14:10 | 000,000,000 | ---D | C] -- C:\ProgramData\UDL
[2013/03/18 00:11:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
[2013/03/18 00:10:18 | 000,081,408 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\E_FD4BINE.DLL
[2013/03/18 00:08:51 | 000,000,000 | ---D | C] -- C:\Users\c\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EPSON Software
[2013/03/18 00:08:49 | 000,000,000 | ---D | C] -- C:\Program Files\EPSON Software
[2013/03/17 23:49:05 | 000,008,192 | ---- | C] (SEIKO EPSON CORP.) -- C:\Windows\System32\E_DCINST.DLL
[2013/03/17 23:49:02 | 000,095,232 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\E_FLBINE.DLL
[2013/03/17 23:48:26 | 000,342,016 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\System32\esw2ud.dll
[2013/03/17 23:48:26 | 000,122,000 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\System32\escsvc.exe
[2013/03/17 23:48:16 | 000,000,000 | ---D | C] -- C:\Program Files\epson
[2013/03/17 23:38:55 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\EPSON
[2013/03/17 23:38:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
[2013/03/17 23:38:44 | 000,000,000 | ---D | C] -- C:\ProgramData\EPSON

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2013/04/15 19:34:20 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013/04/15 19:34:02 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/04/15 19:27:01 | 000,010,048 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/04/15 19:27:01 | 000,010,048 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/04/15 19:25:16 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\c\Desktop\OTL.exe
[2013/04/15 19:19:33 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2013/04/15 19:19:31 | 000,001,042 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/04/15 19:19:21 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/04/15 19:19:14 | 2388,480,000 | -HS- | M] () -- C:\hiberfil.sys
[2013/04/15 19:02:12 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/04/15 11:18:16 | 000,704,480 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2013/04/15 11:18:16 | 000,616,008 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013/04/15 11:18:16 | 000,130,754 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2013/04/15 11:18:16 | 000,106,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013/04/15 02:39:21 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
[2013/04/15 02:39:21 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2013/04/15 02:39:21 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2013/04/15 02:39:21 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2013/04/15 02:39:21 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/04/15 02:39:21 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/04/15 02:39:21 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/04/15 02:39:21 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/04/15 02:39:21 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/04/15 02:39:21 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/04/15 02:39:21 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013/04/15 02:39:21 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/04/15 02:39:21 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/04/15 02:39:20 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2013/04/15 02:39:20 | 001,988,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2013/04/15 02:39:20 | 001,504,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2013/04/15 02:39:20 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013/04/15 02:39:20 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2013/04/15 02:39:20 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013/04/15 02:39:20 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2013/04/15 02:39:20 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2013/04/15 02:39:20 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2013/04/15 02:39:20 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2013/04/15 02:39:20 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
[2013/04/15 02:39:20 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013/04/14 23:44:02 | 000,001,078 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/04/14 20:43:03 | 000,002,503 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2013/04/14 20:31:44 | 000,001,088 | ---- | M] () -- C:\Users\Public\Desktop\Kaspersky Anti-Virus 2013.lnk
[2013/04/14 19:18:58 | 260,670,202 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013/04/14 13:33:28 | 000,013,152 | ---- | M] () -- C:\bootsqm.dat
[2013/04/14 10:27:27 | 000,691,592 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013/04/14 10:27:27 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013/04/14 10:09:30 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2013/04/13 08:23:51 | 000,412,136 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013/04/10 08:33:33 | 000,002,136 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013/04/04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013/03/30 08:18:52 | 000,002,177 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2013/03/19 07:04:13 | 003,968,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2013/03/19 07:04:10 | 003,913,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2013/03/19 06:48:45 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2013/03/18 00:14:12 | 000,002,124 | ---- | M] () -- C:\Users\Public\Desktop\Epson Easy Photo Print.lnk
[2013/03/18 00:13:15 | 000,000,308 | ---- | M] () -- C:\Windows\setup.iss
[2013/03/18 00:12:01 | 000,002,390 | ---- | M] () -- C:\Users\Public\Desktop\Guide d'utilisation EPSON XP-102 103 Series.lnk
[2013/03/17 23:48:27 | 000,000,941 | ---- | M] () -- C:\Users\Public\Desktop\EPSON Scan.lnk

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2013/04/15 19:34:20 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013/04/14 23:44:02 | 000,001,078 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/04/14 20:31:54 | 000,001,088 | ---- | C] () -- C:\Users\Public\Desktop\Kaspersky Anti-Virus 2013.lnk
[2013/04/14 13:33:28 | 000,013,152 | ---- | C] () -- C:\bootsqm.dat
[2013/03/30 08:18:52 | 000,002,177 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2013/03/18 00:14:12 | 000,002,124 | ---- | C] () -- C:\Users\Public\Desktop\Epson Easy Photo Print.lnk
[2013/03/18 00:12:51 | 000,000,308 | ---- | C] () -- C:\Windows\setup.iss
[2013/03/18 00:12:01 | 000,002,390 | ---- | C] () -- C:\Users\Public\Desktop\Guide d'utilisation EPSON XP-102 103 Series.lnk
[2013/03/17 23:48:27 | 000,000,941 | ---- | C] () -- C:\Users\Public\Desktop\EPSON Scan.lnk
[2011/12/21 18:37:20 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
[2011/12/01 18:44:40 | 000,000,382 | ---- | C] () -- C:\Windows\ODBC.INI
[2011/12/01 18:14:34 | 000,021,680 | ---- | C] () -- C:\Windows\System32\emptyregdb.dat
[2011/06/10 06:34:52 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2008/07/02 04:28:38 | 000,061,440 | ---- | C] () -- C:\Program Files\Common Files\CPInstallAction.dll
[2008/05/22 18:35:54 | 000,051,962 | ---- | C] () -- C:\Program Files\Common Files\banner.jpg

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2009/07/14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[color=#E56717]========== LOP Check ==========[/color]

[2013/03/18 00:32:11 | 000,000,000 | ---D | M] -- C:\Users\c\AppData\Roaming\Epson
[2012/10/01 09:22:48 | 000,000,000 | ---D | M] -- C:\Users\c\AppData\Roaming\OfferBox
[2011/12/21 18:37:24 | 000,000,000 | ---D | M] -- C:\Users\c\AppData\Roaming\pdfforge
[2012/03/02 12:37:04 | 000,000,000 | ---D | M] -- C:\Users\c\AppData\Roaming\TomTom
[2012/10/26 11:31:04 | 000,000,000 | ---D | M] -- C:\Users\c\AppData\Roaming\Windows Live Writer

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
[2009/06/10 23:42:20 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
[2010/11/20 14:40:07 | 000,383,786 | RHS- | M] () -- C:\bootmgr
[2011/12/01 18:02:42 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2013/04/14 13:33:28 | 000,013,152 | ---- | M] () -- C:\bootsqm.dat
[2007/04/04 21:01:54 | 000,000,019 | ---- | M] () -- C:\CA21.txt
[2009/06/10 23:42:20 | 000,000,010 | ---- | M] () -- C:\config.sys
[2008/10/08 00:30:46 | 000,022,344 | ---- | M] () -- C:\devlist.txt
[2008/10/08 00:30:39 | 000,000,009 | ---- | M] () -- C:\Finish.log
[2013/04/15 19:19:14 | 2388,480,000 | -HS- | M] () -- C:\hiberfil.sys
[2008/08/08 09:22:19 | 000,000,030 | ---- | M] () -- C:\NERO.LOG
[2008/07/04 06:35:34 | 000,000,021 | ---- | M] () -- C:\NIS2008.TXT
[2007/03/16 01:18:45 | 000,000,025 | ---- | M] () -- C:\OFFICE2007_A.TXT
[2013/04/15 19:19:19 | 3184,644,096 | -HS- | M] () -- C:\pagefile.sys
[2008/10/07 11:25:48 | 000,000,105 | ---- | M] () -- C:\Pass.txt
[2008/08/18 12:58:09 | 000,002,561 | ---- | M] () -- C:\Patch.LOG
[2013/04/15 19:34:20 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2008/04/29 16:30:15 | 000,000,020 | ---- | M] () -- C:\READER_A.TXT
[2008/07/22 07:12:09 | 000,000,006 | ---- | M] () -- C:\RECOVERY.DAT
[2008/10/08 00:11:52 | 000,000,426 | ---- | M] () -- C:\RHDSetup.log
[2008/10/08 00:23:05 | 000,000,159 | ---- | M] () -- C:\setup.log
[2008/10/07 23:13:02 | 000,000,166 | ---- | M] () -- C:\SumHidd.txt
[2008/10/07 23:12:14 | 000,000,098 | ---- | M] () -- C:\SumOS.txt
[2008/08/01 00:40:18 | 000,000,021 | ---- | M] () -- C:\V552.txt
[2008/07/21 14:40:21 | 001,048,576 | RH-- | M] () -- C:\X71A.BIN
[2008/07/22 07:12:09 | 000,000,013 | ---- | M] () -- C:\X71A_VISTA.10

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

[color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
[2009/07/14 06:41:57 | 000,000,174 | -HS- | M] () -- C:\Program Files\desktop.ini

[color=#A23BEC]< %PROGRAMFILES%\*. >[/color]
[2013/03/18 00:16:41 | 000,000,000 | ---D | M] -- C:\Program Files\ABBYY FineReader 9.0 Sprint
[2012/09/28 17:41:33 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2012/10/06 14:46:09 | 000,000,000 | ---D | M] -- C:\Program Files\Apple Software Update
[2011/12/01 18:08:47 | 000,000,000 | ---D | M] -- C:\Program Files\ASUS
[2011/12/01 18:08:48 | 000,000,000 | ---D | M] -- C:\Program Files\Atheros
[2011/12/01 18:08:48 | 000,000,000 | ---D | M] -- C:\Program Files\ATKGFNEX
[2012/10/01 12:50:38 | 000,000,000 | ---D | M] -- C:\Program Files\AVAST Software
[2012/02/03 15:13:53 | 000,000,000 | ---D | M] -- C:\Program Files\Bbox
[2012/02/03 15:13:57 | 000,000,000 | ---D | M] -- C:\Program Files\BboxUpdate
[2011/12/01 18:08:48 | 000,000,000 | ---D | M] -- C:\Program Files\ChkMail
[2011/12/01 18:08:49 | 000,000,000 | ---D | M] -- C:\Program Files\Cisco
[2013/04/08 20:42:27 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2011/12/01 18:09:06 | 000,000,000 | ---D | M] -- C:\Program Files\CyberLink
[2013/01/25 14:32:19 | 000,000,000 | ---D | M] -- C:\Program Files\DriverTuner
[2012/03/24 10:21:28 | 000,000,000 | ---D | M] -- C:\Program Files\DVD Maker
[2013/03/18 00:11:01 | 000,000,000 | ---D | M] -- C:\Program Files\epson
[2013/03/18 00:13:46 | 000,000,000 | ---D | M] -- C:\Program Files\EPSON Software
[2011/12/01 18:22:42 | 000,000,000 | -HSD | M] -- C:\Program Files\Fichiers communs
[2013/03/30 08:18:34 | 000,000,000 | ---D | M] -- C:\Program Files\Google
[2013/03/18 00:13:40 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2013/04/15 13:00:28 | 000,000,000 | ---D | M] -- C:\Program Files\Intel
[2013/04/15 09:08:22 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2013/04/14 20:30:43 | 000,000,000 | ---D | M] -- C:\Program Files\Kaspersky Lab
[2012/10/26 21:44:33 | 000,000,000 | ---D | M] -- C:\Program Files\Lecteur CANALPLAY
[2013/04/14 23:44:06 | 000,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012/09/04 19:14:15 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft
[2011/12/01 18:09:08 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Games
[2012/02/17 00:09:08 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2013/03/18 09:26:27 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
[2011/12/01 18:57:01 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2011/12/01 18:42:00 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio
[2011/12/01 19:18:21 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Works
[2011/12/20 21:13:48 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2013/04/15 18:32:03 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2013/04/15 19:09:59 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Maintenance Service
[2009/07/14 06:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2012/01/28 20:41:04 | 000,000,000 | ---D | M] -- C:\Program Files\MSECache
[2012/02/11 08:56:15 | 000,000,000 | ---D | M] -- C:\Program Files\NewSoft
[2011/12/01 18:09:09 | 000,000,000 | ---D | M] -- C:\Program Files\P4G
[2011/12/01 18:09:09 | 000,000,000 | ---D | M] -- C:\Program Files\P4P
[2011/12/21 18:44:48 | 000,000,000 | ---D | M] -- C:\Program Files\PDFCreator
[2012/10/06 14:47:49 | 000,000,000 | ---D | M] -- C:\Program Files\QuickTime
[2011/12/01 18:09:09 | 000,000,000 | ---D | M] -- C:\Program Files\Realtek
[2009/07/14 06:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2013/04/08 20:42:27 | 000,000,000 | R--D | M] -- C:\Program Files\Skype
[2012/10/01 09:54:02 | 000,000,000 | ---D | M] -- C:\Program Files\Software
[2013/01/25 14:24:50 | 000,000,000 | ---D | M] -- C:\Program Files\SweetIM
[2013/01/25 14:24:04 | 000,000,000 | ---D | M] -- C:\Program Files\sweetpacks bundle uninstaller
[2011/12/01 18:05:56 | 000,000,000 | ---D | M] -- C:\Program Files\Synaptics
[2012/02/03 14:56:52 | 000,000,000 | ---D | M] -- C:\Program Files\Techcity
[2012/03/02 12:36:44 | 000,000,000 | ---D | M] -- C:\Program Files\TomTom HOME 2
[2012/03/02 12:36:53 | 000,000,000 | ---D | M] -- C:\Program Files\TomTom International B.V
[2009/07/14 06:53:23 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2011/12/01 19:08:30 | 000,000,000 | ---D | M] -- C:\Program Files\VideoLAN
[2011/12/01 18:09:09 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Calendar
[2011/12/01 18:09:09 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Collaboration
[2012/03/24 10:21:26 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Defender
[2012/05/14 17:59:35 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Journal
[2011/12/01 19:03:06 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live
[2012/03/24 10:21:28 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Mail
[2012/03/24 10:21:27 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2011/12/01 18:22:42 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2011/12/01 18:09:10 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Photo Gallery
[2012/03/24 10:21:27 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Photo Viewer
[2012/03/24 10:21:27 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Portable Devices
[2012/03/24 10:21:28 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar
[2011/12/01 18:09:17 | 000,000,000 | ---D | M] -- C:\Program Files\Wireless Console 2

[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\drivers\AGP440.sys

[color=#A23BEC]< MD5 for: APPMGMTS.DLL >[/color]
[2009/07/14 03:14:53 | 000,149,504 | ---- | M] (Microsoft Corporation) MD5=A45D184DF6A8803DA13A0B329517A64A -- C:\Windows\winsxs\x86_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.1.7600.16385_none_81a53e87bd5d36aa\appmgmts.dll

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\drivers\atapi.sys

[color=#A23BEC]< MD5 for: AUTOCHK.EXE >[/color]
[2009/07/14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\System32\autochk.exe
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2009/07/14 01:45:01 | 000,006,144 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\drivers\beep.sys
[2009/07/14 01:45:01 | 000,006,144 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\winsxs\x86_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_c3f6f77668f0ddcc\beep.sys

[color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color]
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2011/02/26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009/07/14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011/02/26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2009/10/31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2011/02/26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010/11/20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2009/08/03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009/08/03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009/10/31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe

[color=#A23BEC]< MD5 for: HIDSERV.DLL >[/color]
[2009/07/14 03:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=2BC6F6A1992B3A77F5F41432CA6B3B6B -- C:\Windows\System32\hidserv.dll
[2009/07/14 03:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=2BC6F6A1992B3A77F5F41432CA6B3B6B -- C:\Windows\winsxs\x86_microsoft-windows-hid-user_31bf3856ad364e35_6.1.7600.16385_none_d6829e90e8c23da8\hidserv.dll

[color=#A23BEC]< MD5 for: IASTOR.SYS >[/color]
[2008/05/07 11:40:01 | 000,317,976 | ---- | M] (Intel Corporation) MD5=80C633722DA72E97F3F5B3B11325696D -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_x86_neutral_55ef5f4d4432a543\iaStor.sys
[2008/05/07 11:40:01 | 000,317,976 | ---- | M] (Intel Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\drivers\iaStor.sys

[color=#A23BEC]< MD5 for: IASTORV.SYS >[/color]
[2011/03/11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090\iaStorV.sys
[2011/03/11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys
[2011/03/11 07:43:55 | 000,332,160 | ---- | M] (Intel Corporation) MD5=71F1A494FEDF4B33C02C4A6A28D6D9E9 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_aef580fde910b4b0\iaStorV.sys
[2011/03/11 07:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys
[2009/07/14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
[2010/11/20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys
[2010/11/20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys
[2011/03/11 07:52:21 | 000,332,160 | ---- | M] (Intel Corporation) MD5=B9039A34C2F8769490DCC494E2402445 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_afae2d45020c148b\iaStorV.sys
[2011/03/11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\drivers\iaStorV.sys

[color=#A23BEC]< MD5 for: IMM32.DLL >[/color]
[2010/11/20 14:19:22 | 000,118,272 | ---- | M] (Microsoft Corporation) MD5=4A8E2F20809CC161107FAA94F6CF2685 -- C:\Windows\System32\imm32.dll
[2010/11/20 14:19:22 | 000,118,272 | ---- | M] (Microsoft Corporation) MD5=4A8E2F20809CC161107FAA94F6CF2685 -- C:\Windows\winsxs\x86_microsoft-windows-imm32_31bf3856ad364e35_6.1.7601.17514_none_5e5d8801d8ad160d\imm32.dll
[2009/07/14 03:15:32 | 000,118,272 | ---- | M] (Microsoft Corporation) MD5=5DF8132ADF721329234403189FC94E16 -- C:\Windows\winsxs\x86_microsoft-windows-imm32_31bf3856ad364e35_6.1.7600.16385_none_5c2c7439dbbe9273\imm32.dll

[color=#A23BEC]< MD5 for: KERNEL32.DLL >[/color]
[2009/12/08 13:33:31 | 000,857,088 | ---- | M] (Microsoft Corporation) MD5=0369BA73CE6D918745579B24339765E8 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.16481_none_93903c22b7a2b5ea\kernel32.dll
[2012/08/20 19:54:52 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=0B0ACE1E9F27AA44B4FAC72F881B908C -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.21306_none_94753f2bd07b1432\kernel32.dll
[2011/07/16 06:25:25 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=12DD18C6ECADEDB922E40B494D315206 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.21010_none_946467d1d088a0a4\kernel32.dll
[2012/11/30 06:47:07 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=22BB6AFDE3D162C3F5E631267070E46D -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.21386_none_941ebfcbd0bbf3ba\kernel32.dll
[2012/10/04 18:43:05 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=3ED262888758E350C29E02207AF9AC59 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17965_none_95904772b4b53b61\kernel32.dll
[2009/07/14 03:15:35 | 000,857,088 | ---- | M] (Microsoft Corporation) MD5=4605F7EE9805F7E1C98D6C959DD2949C -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.16385_none_93943b64b79f1e1f\kernel32.dll
[2010/11/20 14:19:26 | 000,857,600 | ---- | M] (Microsoft Corporation) MD5=5553784D774CA845380650E010BBDA2C -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17514_none_95c54f2cb48da1b9\kernel32.dll
[2012/10/04 18:49:12 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=5EB52C62998CF36BAE774FC67775EAEB -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.17135_none_93ca306cb776b1bd\kernel32.dll
[2012/10/04 18:32:16 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=63350392C018D28C87E6FCB638DFCFE8 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22125_none_9644fc0fcdb29ea9\kernel32.dll
[2012/11/30 07:01:46 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=6D0D4B00C7CB4FA829F396A83B327894 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22177_none_9610ed07cdd95d0c\kernel32.dll
[2012/08/20 19:40:01 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=6F93A0F455963DC8A9A16BB682C8D589 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17932_none_95adb658b49f9b89\kernel32.dll
[2011/07/16 06:34:28 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=7E99A20C758ABB5AE89C7AEEA3A9AEB2 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.16850_none_93afb334b78b3d5c\kernel32.dll
[2013/01/04 06:44:29 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=89C816E5DA817EB6E97BAC7E644041E8 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.21416_none_946a7125d0832d4a\kernel32.dll
[2012/08/18 13:21:20 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=8EA21D5227121072B985525B6C0C36A0 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.17107_none_93eca0c4b75c9098\kernel32.dll
[2012/08/20 19:34:45 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=9139B25AA9CA8749A11F2BE863EF391B -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22091_none_95f5498dcdeeffbd\kernel32.dll
[2011/07/16 06:54:28 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=921F8B3FF01501C9934CCB3C270833D7 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.21772_none_960c0dc1cdddb3a2\kernel32.dll
[2013/01/04 06:46:33 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=A2CB61B68566F6DB067607273119D27B -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.17206_none_93eba260b75d7468\kernel32.dll
[2012/10/04 18:51:02 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=A49F39AD51987F9360C316D85040D763 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.21335_none_9453cf1dd0944eae\kernel32.dll
[2012/11/30 06:47:44 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=AE09B85158C66E2C154C5C9B3C0027B3 -- C:\Windows\System32\kernel32.dll
[2012/11/30 06:47:44 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=AE09B85158C66E2C154C5C9B3C0027B3 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18015_none_95c62f30b48ce2ee\kernel32.dll
[2011/07/16 06:27:30 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=E570CBD732848438EAC574EB3442A2A8 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17651_none_95971084b4b0c29f\kernel32.dll
[2012/11/30 07:00:06 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=E9F8A2515D2ADCB9B1208E3576AB31D2 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.17179_none_93a2f1e4b79386dd\kernel32.dll
[2009/12/08 13:57:44 | 000,857,088 | ---- | M] (Microsoft Corporation) MD5=EB7B2309A2B16EEB73C2C13477FEF8FB -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.20591_none_940f0901d0c871a5\kernel32.dll
[2013/01/04 06:46:46 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=F14125F0B2ACB29963E896E3441DC30C -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22209_none_965e9ef5cd9ec94a\kernel32.dll

[color=#A23BEC]< MD5 for: MSWSOCK.DLL >[/color]
[2009/07/14 03:15:51 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=11A41F17527ED75D6B758FDD7F4FD00D -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7600.16385_none_b829ad298e9f53ff\mswsock.dll
[2010/11/20 14:19:56 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=8999B8631C7FD9F7F9EC3CAFD953BA24 -- C:\Windows\System32\mswsock.dll
[2010/11/20 14:19:56 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=8999B8631C7FD9F7F9EC3CAFD953BA24 -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.17514_none_ba5ac0f18b8dd799\mswsock.dll

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2012/08/22 19:05:16 | 000,712,048 | ---- | M] (Microsoft Corporation) MD5=15B74B6283CEBCCE3054C1001CA01B5E -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.22097_none_aa0491cf93ad1c31\ndis.sys
[2009/07/14 03:20:44 | 000,710,720 | ---- | M] (Microsoft Corporation) MD5=23759D175A0A9BAAF04D05047BC135A8 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_a79d81ea7d62a289\ndis.sys
[2012/08/22 19:16:46 | 000,712,048 | ---- | M] (Microsoft Corporation) MD5=8C9C922D71F1CD4DEF73F186416B7896 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17939_none_a9bdfee47a5cd154\ndis.sys
[2010/11/20 14:30:06 | 000,712,576 | ---- | M] (Microsoft Corporation) MD5=E7C54812A2AAF43316EB6930C1FFA108 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_a9ce95b27a512623\ndis.sys
[2012/08/22 19:16:46 | 000,712,048 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\drivers\ndis.sys

[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2010/11/20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
[2010/11/20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll
[2009/07/14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll

[color=#A23BEC]< MD5 for: NTFS.SYS >[/color]
[2012/08/31 19:18:09 | 001,211,760 | ---- | M] (Microsoft Corporation) MD5=0D87503986BB3DFED58E343FE39DDE13 -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17945_none_a8592bc67b451464\ntfs.sys
[2011/03/11 07:44:01 | 001,210,240 | ---- | M] (Microsoft Corporation) MD5=187002CE05693C306F43C873F821381F -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7600.16778_none_a65558427e3453b4\ntfs.sys
[2010/11/20 14:30:06 | 001,211,264 | ---- | M] (Microsoft Corporation) MD5=33C3093D09017CFE2E219F2472BFF6EB -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17514_none_a87893a87b2db29e\ntfs.sys
[2009/07/14 03:20:44 | 001,210,432 | ---- | M] (Microsoft Corporation) MD5=3795DCD21F740EE799FB7223234215AF -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7600.16385_none_a6477fe07e3f2f04\ntfs.sys
[2012/08/31 19:21:56 | 001,210,736 | ---- | M] (Microsoft Corporation) MD5=5126C5402C730C2A953275D8497A4715 -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7600.17119_none_a69715e87e02f01c\ntfs.sys
[2012/08/31 19:20:14 | 001,210,736 | ---- | M] (Microsoft Corporation) MD5=72D1BB12770F86033C73E288CD8E3869 -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7600.21316_none_a71db3bb97234108\ntfs.sys
[2013/03/02 07:01:18 | 001,211,240 | ---- | M] (Microsoft Corporation) MD5=76371F9D9FCDE3ACDFEC3D7C3E585FB5 -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7600.21483_none_a6cf054f975eb5c1\ntfs.sys
[2011/03/11 07:39:00 | 001,211,264 | ---- | M] (Microsoft Corporation) MD5=81189C3D7763838E55C397759D49007A -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17577_none_a83ab4fe7b5ba649\ntfs.sys
[2013/03/02 07:07:36 | 001,212,264 | ---- | M] (Microsoft Corporation) MD5=9CDAEBE5160B9AF02AE17C62BDB6C4B5 -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.18106_none_a88545c87b23ee60\ntfs.sys
[2013/03/02 07:09:19 | 001,210,712 | ---- | M] (Microsoft Corporation) MD5=A458A5F7FD79C477D40ED42CF5A230CB -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7600.17267_none_a65f079e7e2d464a\ntfs.sys
[2011/03/11 07:52:25 | 001,210,752 | ---- | M] (Microsoft Corporation) MD5=A7266D82DB9675AFBDED39695B69EDAC -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7600.20921_none_a70e0489972fb38f\ntfs.sys
[2013/03/02 06:30:20 | 001,213,272 | ---- | M] (Microsoft Corporation) MD5=BDC9CE1B497B6C266ED70E3D34184F40 -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.22272_none_a8bf31f7947dec65\ntfs.sys
[2011/03/11 07:28:10 | 001,211,264 | ---- | M] (Microsoft Corporation) MD5=E2EDE3F02F95B896A1C7C6F0CC0C4083 -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.21680_none_a8b27fd79487b0a3\ntfs.sys
[2012/08/31 19:01:43 | 001,212,272 | ---- | M] (Microsoft Corporation) MD5=E6C295C6F8E639957235FEE1D95077F4 -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.22104_none_a90ce01994435e55\ntfs.sys
[2013/03/02 07:07:36 | 001,212,264 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\drivers\ntfs.sys

[color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color]
[2011/03/11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41\nvstor.sys
[2011/03/11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys
[2011/03/11 07:44:01 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4520B63899E867F354EE012D34E11536 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_39bef1ad20475e88\nvstor.sys
[2011/03/11 07:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys
[2011/03/11 07:52:25 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=8A7583A3B58D3EEB28BB26626526BC91 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_3a779df43942be63\nvstor.sys
[2010/11/20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys
[2010/11/20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys
[2009/07/14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys
[2011/03/11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\drivers\nvstor.sys

[color=#A23BEC]< MD5 for: PROQUOTA.EXE >[/color]
[2010/11/20 14:17:30 | 000,028,672 | ---- | M] (Microsoft Corporation) MD5=2E77BAB79F078654782F83F0A0AEFE31 -- C:\Windows\System32\proquota.exe
[2010/11/20 14:17:30 | 000,028,672 | ---- | M] (Microsoft Corporation) MD5=2E77BAB79F078654782F83F0A0AEFE31 -- C:\Windows\winsxs\x86_microsoft-windows-proquota_31bf3856ad364e35_6.1.7601.17514_none_29ce61c2f0a740f4\proquota.exe
[2009/07/14 03:14:29 | 000,028,160 | ---- | M] (Microsoft Corporation) MD5=8CDF71E78469BE54C29C1AD2FC8DE611 -- C:\Windows\winsxs\x86_microsoft-windows-proquota_31bf3856ad364e35_6.1.7600.16385_none_279d4dfaf3b8bd5a\proquota.exe

[color=#A23BEC]< MD5 for: QMGR.DLL >[/color]
[2009/07/14 03:16:12 | 000,589,312 | ---- | M] (Microsoft Corporation) MD5=53F476476F55A27F580661BDE09C4EC4 -- C:\Windows\winsxs\x86_microsoft-windows-bits-client_31bf3856ad364e35_6.1.7600.16385_none_23671b105ac5a0fd\qmgr.dll
[2010/11/20 14:20:58 | 000,585,728 | ---- | M] (Microsoft Corporation) MD5=E585445D5021971FAE10393F0F1C3961 -- C:\Windows\System32\qmgr.dll
[2010/11/20 14:20:58 | 000,585,728 | ---- | M] (Microsoft Corporation) MD5=E585445D5021971FAE10393F0F1C3961 -- C:\Windows\winsxs\x86_microsoft-windows-bits-client_31bf3856ad364e35_6.1.7601.17514_none_25982ed857b42497\qmgr.dll

[color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
[2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll

[color=#A23BEC]< MD5 for: SPOOLSV.EXE >[/color]
[2012/02/11 07:31:45 | 000,316,928 | ---- | M] (Microsoft Corporation) MD5=13B48314BF02091B30597DF20B71CBAC -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7600.21149_none_d6daba6e3bd61215\spoolsv.exe
[2010/08/20 06:25:14 | 000,316,928 | ---- | M] (Microsoft Corporation) MD5=2FB4CE429488156B19C0D8E5C4552043 -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7600.20785_none_d6ab9bc23bf9f1c6\spoolsv.exe
[2009/07/14 03:14:41 | 000,316,416 | ---- | M] (Microsoft Corporation) MD5=49B6DD6AB3715B7A67965F17194E98A9 -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7600.16385_none_d621f94522dc5a87\spoolsv.exe
[2010/11/20 14:17:45 | 000,317,440 | ---- | M] (Microsoft Corporation) MD5=866A43013535DC8587C258E43579C764 -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.17514_none_d8530d0d1fcade21\spoolsv.exe
[2012/02/11 07:37:49 | 000,317,440 | ---- | M] (Microsoft Corporation) MD5=9AEA093B8F9C37CF45538382CABA2475 -- C:\Windows\System32\spoolsv.exe
[2012/02/11 07:37:49 | 000,317,440 | ---- | M] (Microsoft Corporation) MD5=9AEA093B8F9C37CF45538382CABA2475 -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.17777_none_d815322f1ff8cc1a\spoolsv.exe
[2012/02/11 07:21:14 | 000,317,952 | ---- | M] (Microsoft Corporation) MD5=CAE10A25F936C053E41CBE0FA06FF15D -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.21921_none_d8cedec038f3454c\spoolsv.exe
[2010/08/21 07:32:37 | 000,316,928 | ---- | M] (Microsoft Corporation) MD5=D1BB750EB51694DE183E08B9C33BE5B2 -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7600.16661_none_d6339da722cfb4be\spoolsv.exe
[2012/02/11 07:41:06 | 000,316,928 | ---- | M] (Microsoft Corporation) MD5=E17323B0AA9FB3FF9945731D736EDA2F -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7600.16962_none_d634a3a322cec58a\spoolsv.exe

[color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2013/04/04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe

[color=#A23BEC]< MD5 for: TERMSRV.DLL >[/color]
[2010/11/20 14:21:28 | 000,521,216 | ---- | M] (Microsoft Corporation) MD5=382C804C92811BE57829D8E550A900E2 -- C:\Windows\System32\termsrv.dll
[2010/11/20 14:21:28 | 000,521,216 | ---- | M] (Microsoft Corporation) MD5=382C804C92811BE57829D8E550A900E2 -- C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_90a6abb3b286306d\termsrv.dll
[2009/07/14 03:16:15 | 000,543,232 | ---- | M] (Microsoft Corporation) MD5=A01E50A04D7B1960B33E92B9080E6A94 -- C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7600.16385_none_8e7597ebb597acd3\termsrv.dll

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

[color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color]
[2009/07/14 03:19:10 | 000,245,328 | ---- | M] (Microsoft Corporation) MD5=58DF9D2481A56EDDE167E51B334D44FD -- C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1.7600.16385_none_158d0da45d68903e\volsnap.sys
[2010/11/20 14:30:16 | 000,245,632 | ---- | M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7 -- C:\Windows\System32\drivers\volsnap.sys
[2010/11/20 14:30:16 | 000,245,632 | ---- | M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7 -- C:\Windows\System32\DriverStore\FileRepository\volume.inf_x86_neutral_6dee0205881d1a1d\volsnap.sys
[2010/11/20 14:30:16 | 000,245,632 | ---- | M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7 -- C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1.7601.17514_none_17be216c5a5713d8\volsnap.sys

[color=#A23BEC]< MD5 for: WININET.DLL >[/color]
[2011/12/14 04:28:29 | 001,127,424 | ---- | M] (Microsoft Corporation) MD5=022A78194E2C7106F5AF9F2BC6AC8774 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20546_none_1ae194a0d542b9ba\wininet.dll
[2013/02/02 05:30:21 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=03728C624D05C2F157BBD46F6B7F6EA0 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16470_none_1a318655bc42d5b9\wininet.dll
[2012/11/14 03:33:20 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=0635D714351F842D43EA184E75C4A3FF -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20565_none_1acaf47ed553d845\wininet.dll
[2009/07/14 03:16:19 | 000,977,920 | ---- | M] (Microsoft Corporation) MD5=0D874F3BC751CC2198AF2E6783FB8B35 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.16385_none_1c7990d87a289fd4\wininet.dll
[2012/02/28 02:58:46 | 001,127,424 | ---- | M] (Microsoft Corporation) MD5=11A34DCA08EB2A586246F2D6C2A81D58 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20548_none_1ae39534d540ec68\wininet.dll
[2013/02/02 05:36:46 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=1284D72C04B553ED5382EA14303D66DB -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20580_none_1ab05334d5689174\wininet.dll
[2013/01/08 22:41:13 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=16C45E6881449C6330567E51C13920FA -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20573_none_1abe23fed55dc188\wininet.dll
[2011/11/05 06:31:42 | 000,982,016 | ---- | M] (Microsoft Corporation) MD5=1903228FE0C7D402B26A217F8D7713FD -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.21855_none_1f0a05d1905446a1\wininet.dll
[2011/11/05 06:35:00 | 000,981,504 | ---- | M] (Microsoft Corporation) MD5=19714FA7D7204D9BEE1EE12791DA9010 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17720_none_1e9bd7587722d451\wininet.dll
[2010/12/21 07:29:12 | 000,981,504 | ---- | M] (Microsoft Corporation) MD5=1B3DD46BC6396143A205EAAF05F38039 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.20862_none_1d15d4359338b053\wininet.dll
[2012/05/18 00:35:47 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=1C191A4F0960F21B5D58C8A65BAF5427 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16446_none_1a57f7d5bc2519f0\wininet.dll
[2011/12/14 04:57:18 | 001,127,424 | ---- | M] (Microsoft Corporation) MD5=1D94FA7C81D2FFE494AF094619BA706F -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16441_none_1a52f663bc299b3d\wininet.dll
[2011/08/20 06:38:10 | 000,981,504 | ---- | M] (Microsoft Corporation) MD5=1DBC7303366C0C9B80E51C4B4BECB7ED -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.16869_none_1c933b567a14bf11\wininet.dll
[2012/08/24 09:12:40 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=2895E29EFCFC0B1BCF8AEE1A0C67913C -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20557_none_1ad7c4fed549ef02\wininet.dll
[2012/05/18 00:19:05 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=43BAC67996D8765A5F1B3A4EA6231E21 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20551_none_1ad1c342d54f56f8\wininet.dll
[2010/11/20 14:21:36 | 000,980,992 | ---- | M] (Microsoft Corporation) MD5=44214C94911C7CFB1D52CB64D5E8368D -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_1eaaa4a07717236e\wininet.dll
[2012/02/28 03:11:07 | 001,127,424 | ---- | M] (Microsoft Corporation) MD5=44465367256D1C72B58F5ABAA19E7016 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16443_none_1a54f6f7bc27cdeb\wininet.dll
[2013/02/22 05:35:17 | 001,129,984 | ---- | M] (Microsoft Corporation) MD5=490E24D5E427DFA55B1C1182F0DB861C -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20586_none_1ab654f0d563297e\wininet.dll
[2012/06/29 00:54:19 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=54C30A4066A28F9A017E095E283B2762 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20554_none_1ad4c420d54ca2fd\wininet.dll
[2012/08/24 08:51:27 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=5553611E2F9EA6F613079177F1233068 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16450_none_1a47262dbc329dd7\wininet.dll
[2011/12/16 10:02:26 | 000,981,504 | ---- | M] (Microsoft Corporation) MD5=653109C31F7F190072C9E4DF31154225 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.16930_none_1caaaa667a048456\wininet.dll
[2012/10/08 09:37:57 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=6E3AC8A54A1881806BA2B58539483788 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20562_none_1ac7f3a0d5568c40\wininet.dll
[2011/08/20 07:53:02 | 000,981,504 | ---- | M] (Microsoft Corporation) MD5=7570FA3FC82E08FB637E32D2D95DB41D -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.21795_none_1edec43b9074b93e\wininet.dll
[2012/06/29 02:09:01 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=75A97A2C060E72AB49E071E08C7DD2BA -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16448_none_1a59f869bc234c9e\wininet.dll
[2010/12/21 07:38:22 | 000,981,504 | ---- | M] (Microsoft Corporation) MD5=78B9ADA2BC8946AF7B17678E0D07A773 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.16723_none_1cb8776479f9ba1c\wininet.dll
[2011/08/20 06:35:24 | 000,982,016 | ---- | M] (Microsoft Corporation) MD5=79FFA6C81F9F5B2244C5668D08387EA6 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.21033_none_1d371e4b931fa640\wininet.dll
[2011/11/05 06:35:50 | 000,981,504 | ---- | M] (Microsoft Corporation) MD5=7F5B51FACA193430346970283C50769F -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.16912_none_1cc24ad279f27f22\wininet.dll
[2012/11/14 03:57:37 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=7FA3A810F383588D46220967DE8B64FF -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16457_none_1a4e2833bc2c4f38\wininet.dll
[2011/12/16 11:00:03 | 000,982,016 | ---- | M] (Microsoft Corporation) MD5=808C0CE9D4DBC0A6F72761294EB10FB2 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.21878_none_1ef766d79061ca88\wininet.dll
[2011/12/16 09:51:05 | 000,982,016 | ---- | M] (Microsoft Corporation) MD5=8DFDD881CEF74ED749BA968E060418CA -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.21108_none_1d5c91679302ce47\wininet.dll
[2012/06/02 10:25:08 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=8E87270C4704CF2951E1E7820D6C8A2B -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16447_none_1a58f81fbc243347\wininet.dll
[2012/10/08 09:48:03 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=9CB0D2A9A77D91D9614355EE9FF00519 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16455_none_1a4c279fbc2e1c8a\wininet.dll
[2012/02/18 09:49:18 | 001,126,912 | ---- | M] (Microsoft Corporation) MD5=A1236375B74EA63C75657D564890C436 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16421_none_1a68963bbc19635b\wininet.dll
[2013/01/09 00:03:20 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=B49B56B64F57699A1A663D2CF7D0A56F -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16464_none_1a405769bc371f24\wininet.dll
[2011/12/16 09:54:22 | 000,981,504 | ---- | M] (Microsoft Corporation) MD5=BDB7450CC556F238FD973C9DA300FEB8 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17744_none_1e8a38a8772f718f\wininet.dll
[2013/02/22 05:38:00 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=C5B6468422DB1C8AA36C32CBB0197E5E -- C:\Windows\System32\wininet.dll
[2013/02/22 05:38:00 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=C5B6468422DB1C8AA36C32CBB0197E5E -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16476_none_1a378811bc3d6dc3\wininet.dll
[2011/08/20 06:31:05 | 000,981,504 | ---- | M] (Microsoft Corporation) MD5=DBF24E87CB605A4F6E7424DD86F7A62C -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17671_none_1e66c620774a7c36\wininet.dll
[2012/06/02 10:16:44 | 001,129,472 | ---- | M] (Microsoft Corporation) MD5=E430161A632F9A8FE512DE0CA5685559 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20553_none_1ad3c3d6d54d89a6\wininet.dll
[2011/11/05 06:37:37 | 000,982,016 | ---- | M] (Microsoft Corporation) MD5=E49448ACD38A375E4FBCCB87056E1467 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.21085_none_1d030f43934664a3\wininet.dll

[color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\System32\wininit.exe
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2009/10/28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009/10/28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009/10/28 07:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2009/10/28 07:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010/11/20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010/11/20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010/11/20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2010/11/20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009/07/14 03:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
[2009/07/14 03:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
[2013/04/04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2013/04/04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe

[color=#A23BEC]< MD5 for: WS2_32.DLL >[/color]
[2010/11/20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\System32\ws2_32.dll
[2010/11/20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
[2009/07/14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s >[/color]
"Debug" =
"" = mnmsrvc
"Kmode" = \SystemRoot\System32\win32k.sys
"Optional" = Posix [binary data]
"Posix" = %SystemRoot%\system32\psxss.exe
"Required" = DebugWindows [binary data]
"Windows" = %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\CSRSS]
"CsrSrvSharedSectionBase" = 2137980928

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]
[2012/06/19 17:28:12 | 000,136,024 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\kl1.sys
[2012/08/13 18:24:22 | 000,075,096 | ---- | M] (Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klflt.sys
[2013/03/01 01:41:42 | 000,589,144 | ---- | M] (Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klif.sys
[2012/08/02 15:09:30 | 000,024,408 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klim6.sys
[2013/03/01 01:41:40 | 000,025,944 | ---- | M] (Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klkbdflt.sys
[2013/03/01 01:41:40 | 000,025,944 | ---- | M] (Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klmouflt.sys
[2013/03/01 01:41:40 | 000,043,608 | ---- | M] (Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\kltdi.sys
[2012/08/13 16:49:44 | 000,144,344 | ---- | M] (Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\kneps.sys

[color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]

[color=#A23BEC]< c:\$recycle.bin\*.* /s >[/color]
[2012/03/27 09:43:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I05WWGR.JPG
[2013/03/30 08:29:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I0YQ5AP.jpg
[2013/03/30 08:24:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I148S8D.jpg
[2013/03/30 09:03:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I1CGYKY.jpg
[2013/03/30 08:26:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I238CQ9.jpg
[2013/03/30 08:51:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I3E9WHV.jpg
[2013/03/30 08:20:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I3K3WG0.jpg
[2013/03/30 08:32:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I3Z3D63.jpg
[2013/03/30 09:00:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I40EMMW.jpg
[2013/03/30 08:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I42CL0B.jpg
[2013/03/30 08:26:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I49BTRZ.jpg
[2013/03/30 08:49:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I4QLK7T.jpg
[2013/03/30 08:58:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I5ZUZGJ.jpg
[2013/03/30 08:26:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I6FFGSI.jpg
[2013/03/30 08:24:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I6PC5GP.jpg
[2013/03/30 08:25:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I6QW5W4.jpg
[2013/03/30 08:30:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I71RB1P.jpg
[2013/03/30 08:31:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I73KZUX.jpg
[2012/03/27 09:43:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I7CC9DA.JPG
[2013/03/30 08:19:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I7M4X72.jpg
[2013/03/30 08:21:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I7MGK3C.jpg
[2013/03/30 08:29:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I84SU0L.jpg
[2013/03/30 08:16:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I97HH7M.jpg
[2013/03/30 08:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I9B88VX.jpg
[2013/03/30 08:18:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$I9F9J8H.jpg
[2013/03/06 20:06:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IA0OLO3.jpg
[2013/03/30 08:34:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IA9BYAI.jpg
[2013/03/30 08:17:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IAH0MB6.jpg
[2013/03/30 08:52:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IAMXQ9L.jpg
[2013/03/30 08:26:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IBB38UD.jpg
[2013/03/30 09:00:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IBIPOVJ.jpg
[2013/03/30 08:26:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IBLA9SZ.jpg
[2012/03/27 09:43:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IBRM6FZ.JPG
[2013/03/30 08:50:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IBUL59E.jpg
[2013/03/30 08:30:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IC3CXIE.jpg
[2013/03/30 08:30:11 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$ICFREYJ.jpg
[2013/03/30 08:42:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$ICW1KCB.jpg
[2013/03/30 08:49:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$ICYK9HR.jpg
[2013/03/30 08:18:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IDDYE2O.jpg
[2013/03/30 08:33:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IDIGXMW.jpg
[2013/03/30 08:17:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IDUI22E.jpg
[2013/03/30 08:26:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IE4M33G.jpg
[2013/03/30 08:29:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IEGUUJC.jpg
[2013/03/30 09:02:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IEKFA1A.jpg
[2013/03/30 08:29:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IEM067G.jpg
[2013/03/30 08:31:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IEXWHZY.jpg
[2013/03/30 08:52:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IFOX980.jpg
[2013/03/30 08:25:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IG8MUWE.jpg
[2013/03/30 08:20:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IG9NQKV.jpg
[2013/03/30 08:47:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IG9VL4W.jpg
[2013/03/30 08:30:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IGJPKZB.jpg
[2013/03/30 08:29:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IGPQ15U.jpg
[2013/03/30 08:28:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IGS2ZEY.jpg
[2013/03/30 08:21:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IGTFL7T.jpg
[2013/03/30 08:25:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IGWV1G8.jpg
[2013/03/30 08:53:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IHADOAM.jpg
[2013/03/30 08:30:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IHAI4ES.jpg
[2013/03/30 08:26:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IHEMIDF.jpg
[2013/03/30 08:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IHHQX22.jpg
[2013/03/06 20:06:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IHV00JQ.jpg
[2013/03/30 08:54:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IHX5AGK.jpg
[2013/03/30 08:26:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IJ6CEUF.jpg
[2013/03/30 08:36:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IJK9EQ2.jpg
[2012/03/27 09:43:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IJTTQI9.JPG
[2013/03/30 09:03:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IJXYC9L.jpg
[2013/03/30 08:33:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IK13DYH.jpg
[2013/03/30 08:27:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IKAJSKN.jpg
[2013/03/30 09:03:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IKSUK5M.jpg
[2013/03/30 08:27:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IL0UD0X.jpg
[2013/03/30 08:32:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IL513H2.jpg
[2013/03/30 08:56:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IL63A1J.jpg
[2013/03/30 08:51:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$ILFZ5IH.jpg
[2013/03/30 08:30:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$ILLWIX4.jpg
[2013/03/30 08:26:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IM72MHP.jpg
[2013/03/30 08:31:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IMOTDOX.jpg
[2013/03/30 08:29:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IMQG5M1.jpg
[2013/03/30 08:18:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IN0XKL0.jpg
[2013/03/30 08:51:11 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$INKGQ21.jpg
[2013/03/30 08:20:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$INOVGA2.jpg
[2013/03/30 08:39:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$INU434P.jpg
[2013/03/30 08:29:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$INZ7ZW4.jpg
[2013/03/30 09:04:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IOAGX1G.jpg
[2013/03/30 08:51:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IOC6H58.jpg
[2013/03/30 09:02:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IOGWC4K.jpg
[2013/03/30 09:05:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IOHDCQ7.jpg
[2012/11/02 10:36:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IOQDKN1.zip
[2013/03/30 08:19:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IOT2BE3.jpg
[2013/03/30 08:21:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IOZSUOG.jpg
[2013/03/30 08:30:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IP1T0DG.jpg
[2013/03/30 08:31:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IPJ7A20.jpg
[2012/03/27 09:43:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IPR1B6W.JPG
[2013/03/30 08:20:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IQ31NUV.jpg
[2013/03/30 08:32:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IQ85DO2.jpg
[2012/03/27 09:43:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IQDX1W0.JPG
[2013/03/06 20:06:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IQUFQLX.jpg
[2013/03/30 08:25:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IR70UH2.jpg
[2013/03/30 09:02:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IRKLZH6.jpg
[2012/03/27 09:43:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IS32D2Q.JPG
[2013/03/30 09:04:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$ISYWK0F.jpg
[2013/03/30 08:33:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IU3I3EZ.jpg
[2013/03/30 09:05:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IUCV3UV.jpg
[2012/03/27 09:43:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IV6ZL1T.JPG
[2013/03/30 08:28:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IV78RG3.jpg
[2013/03/30 08:26:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IVJSGTM.jpg
[2013/03/30 08:32:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IVTAJQB.jpg
[2013/03/30 08:26:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IW2WD96.jpg
[2013/03/30 09:04:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IWRK5SA.jpg
[2013/03/30 08:54:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IXOQW96.jpg
[2013/03/30 08:22:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IYL86T6.jpg
[2013/03/30 08:29:19 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IYRCMK5.jpg
[2012/11/19 11:42:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IYZJ5D5.JPG
[2013/03/30 08:23:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$IZBLOBB.jpg
[2012/12/18 22:24:40 | 002,405,265 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R0YQ5AP.jpg
[2012/11/19 21:38:16 | 002,252,053 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R148S8D.jpg
[2013/02/26 22:26:56 | 002,605,291 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R1CGYKY.jpg
[2012/11/19 23:17:46 | 002,351,222 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R238CQ9.jpg
[2013/02/04 23:22:02 | 002,050,263 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R3E9WHV.jpg
[2012/10/19 00:13:26 | 002,101,436 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R3K3WG0.jpg
[2013/01/10 18:36:58 | 001,498,093 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R3Z3D63.jpg
[2013/02/19 21:53:12 | 000,309,035 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R40EMMW.jpg
[2012/12/18 22:30:52 | 002,210,349 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R42CL0B.jpg
[2012/11/20 18:43:36 | 001,006,696 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R49BTRZ.jpg
[2013/02/02 17:46:22 | 001,465,469 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R4QLK7T.jpg
[2013/02/17 16:10:12 | 001,117,014 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R5ZUZGJ.jpg
[2012/11/20 18:43:24 | 001,754,264 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R6FFGSI.jpg
[2012/11/19 21:37:40 | 002,961,377 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R6PC5GP.jpg
[2012/11/19 21:47:10 | 002,994,123 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R6QW5W4.jpg
[2012/12/19 00:28:56 | 001,337,739 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R71RB1P.jpg
[2012/12/24 12:58:00 | 001,512,713 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R73KZUX.jpg
[2012/10/15 15:52:10 | 001,893,414 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R7M4X72.jpg
[2012/10/30 01:41:56 | 002,534,760 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R7MGK3C.jpg
[2012/12/18 22:21:30 | 001,841,373 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R84SU0L.jpg
[2012/10/10 15:02:04 | 002,051,332 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R97HH7M.jpg
[2012/12/18 23:17:02 | 002,555,056 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R9B88VX.jpg
[2012/10/15 15:52:00 | 002,101,900 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$R9F9J8H.jpg
[2013/03/02 14:54:02 | 002,512,661 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RA0OLO3.jpg
[2013/01/18 14:36:30 | 001,397,711 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RA9BYAI.jpg
[2012/10/10 15:05:50 | 001,481,743 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RAH0MB6.jpg
[2013/02/04 23:22:44 | 000,416,500 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RAMXQ9L.jpg
[2012/11/20 18:47:24 | 001,634,266 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RBB38UD.jpg
[2013/02/19 21:56:10 | 002,131,449 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RBIPOVJ.jpg
[2012/11/20 18:47:32 | 001,632,463 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RBLA9SZ.jpg
[2013/02/02 18:10:22 | 002,011,092 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RBUL59E.jpg
[2012/12/18 22:25:04 | 002,397,654 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RC3CXIE.jpg
[2012/12/18 22:27:34 | 002,099,738 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RCFREYJ.jpg
[2013/01/30 11:42:08 | 003,436,174 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RCW1KCB.jpg
[2013/02/02 17:46:08 | 001,485,712 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RCYK9HR.jpg
[2012/10/15 15:51:56 | 002,014,761 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RDDYE2O.jpg
[2013/01/16 16:40:26 | 003,454,131 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RDIGXMW.jpg
[2012/10/10 15:04:54 | 001,966,932 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RDUI22E.jpg
[2012/11/20 18:48:42 | 000,927,226 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RE4M33G.jpg
[2012/12/18 22:24:14 | 002,405,471 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$REGUUJC.jpg
[2013/02/26 20:23:36 | 001,335,066 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$REKFA1A.jpg
[2012/12/18 22:21:36 | 002,910,077 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$REM067G.jpg
[2012/12/19 00:32:38 | 001,307,684 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$REXWHZY.jpg
[2013/02/04 23:22:40 | 000,364,027 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RFOX980.jpg
[2012/11/19 23:01:36 | 002,203,989 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RG8MUWE.jpg
[2012/10/17 23:12:38 | 000,308,992 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RG9NQKV.jpg
[2013/02/01 16:57:58 | 003,635,615 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RG9VL4W.jpg
[2012/12/18 22:27:26 | 002,630,439 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RGJPKZB.jpg
[2012/12/18 22:23:10 | 002,423,469 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RGPQ15U.jpg
[2012/12/18 22:21:22 | 001,671,050 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RGS2ZEY.jpg
[2012/10/30 02:02:08 | 002,044,570 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RGTFL7T.jpg
[2012/11/19 21:44:40 | 002,736,480 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RGWV1G8.jpg
[2013/02/07 15:20:02 | 001,368,183 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RHADOAM.jpg
[2012/12/18 22:27:44 | 001,950,504 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RHAI4ES.jpg
[2012/11/19 23:17:30 | 001,847,115 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RHEMIDF.jpg
[2012/12/18 22:30:36 | 002,059,534 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RHHQX22.jpg
[2013/03/02 14:54:10 | 002,462,582 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RHV00JQ.jpg
[2013/02/08 17:49:32 | 002,542,808 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RHX5AGK.jpg
[2012/11/19 23:17:34 | 002,052,229 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RJ6CEUF.jpg
[2013/03/30 08:36:02 | 002,482,839 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RJK9EQ2.jpg
[2013/02/27 23:21:50 | 002,211,846 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RJXYC9L.jpg
[2013/01/15 15:50:14 | 002,462,096 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RK13DYH.jpg
[2012/11/20 18:49:04 | 000,949,729 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RKAJSKN.jpg
[2013/02/27 23:21:54 | 002,131,556 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RKSUK5M.jpg
[2012/11/20 18:48:54 | 001,089,216 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RL0UD0X.jpg
[2013/01/10 18:36:24 | 002,325,828 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RL513H2.jpg
[2013/02/17 13:44:32 | 001,231,074 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RL63A1J.jpg
[2013/02/02 18:13:42 | 001,453,982 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RLFZ5IH.jpg
[2012/12/19 00:29:10 | 001,390,695 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RLLWIX4.jpg
[2012/11/20 18:47:20 | 001,546,740 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RM72MHP.jpg
[2012/12/24 12:58:06 | 002,247,366 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RMOTDOX.jpg
[2012/12/18 22:24:50 | 002,447,268 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RMQG5M1.jpg
[2012/10/15 15:51:22 | 001,359,750 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RN0XKL0.jpg
[2013/02/02 18:13:38 | 001,462,279 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RNKGQ21.jpg
[2012/10/17 23:12:58 | 000,440,096 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RNOVGA2.jpg
[2013/03/30 08:39:22 | 001,884,805 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RNU434P.jpg
[2012/12/18 22:21:42 | 002,549,695 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RNZ7ZW4.jpg
[2013/03/06 21:16:20 | 000,058,036 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$ROAGX1G.jpg
[2013/02/02 18:13:00 | 001,613,968 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$ROC6H58.jpg
[2013/02/26 20:23:44 | 001,530,347 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$ROGWC4K.jpg
[2013/03/06 21:16:44 | 000,067,794 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$ROHDCQ7.jpg
[2012/11/02 10:35:18 | 000,000,022 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$ROQDKN1.zip
[2012/10/15 16:13:58 | 001,987,119 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$ROT2BE3.jpg
[2012/10/30 02:01:42 | 001,855,848 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$ROZSUOG.jpg
[2012/12/18 22:29:14 | 002,524,771 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RP1T0DG.jpg
[2012/12/18 22:23:20 | 002,602,720 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RPJ7A20.jpg
[2012/10/19 00:12:38 | 001,668,761 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RQ31NUV.jpg
[2013/01/14 17:37:24 | 002,610,583 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RQ85DO2.jpg
[2013/02/28 17:50:26 | 002,193,246 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RQUFQLX.jpg
[2012/11/19 21:49:24 | 001,337,621 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RR70UH2.jpg
[2013/02/26 20:23:40 | 001,372,046 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RRKLZH6.jpg
[2013/03/06 21:16:12 | 000,063,426 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RSYWK0F.jpg
[2013/01/14 17:38:28 | 002,035,503 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RU3I3EZ.jpg
[2013/03/06 21:16:32 | 000,087,201 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RUCV3UV.jpg
[2012/12/18 21:30:42 | 002,032,399 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RV78RG3.jpg
[2012/11/20 18:48:32 | 000,938,337 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RVJSGTM.jpg
[2013/01/10 18:36:40 | 002,264,368 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RVTAJQB.jpg
[2012/11/20 18:47:28 | 001,534,743 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RW2WD96.jpg
[2013/02/28 17:50:00 | 002,272,290 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RWRK5SA.jpg
[2013/02/08 17:48:52 | 002,563,366 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RXOQW96.jpg
[2012/10/30 10:12:50 | 001,943,844 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RYL86T6.jpg
[2012/12/18 22:22:04 | 002,886,942 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RYRCMK5.jpg
[2008/10/08 19:21:02 | 001,594,936 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RYZJ5D5.JPG
[2012/11/19 20:23:16 | 002,610,157 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\$RZBLOBB.jpg
[2011/12/01 16:04:39 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-2925507726-1892683941-3297751366-1000\desktop.ini
[2009/07/14 06:53:46 | 000,032,482 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2009/07/14 06:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2012/01/17 19:08:15 | 000,001,042 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2012/01/17 19:08:16 | 000,001,046 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2012/05/26 17:12:06 | 000,001,002 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job

< End of report >

Publicité


Signaler le contenu de ce document

Publicité