TechSpot

Ran multiple scans but threats keep appearing

By Tingler
Mar 13, 2016
  1. Hi
    I have ran multiple virus/malware scans which keep showing the same issues-even after re-booting the issues keep appearing. I am running Win7 Home premium with Avast Premier ans Malwarebytes-also Adblock on Google Chrome. I have downloaded JRT and Frst as advised on this site.
    Logs as follows
    Adwear scan log-
    # AdwCleaner v5.101 - Logfile created 13/03/2016 at 07:53:44
    # Updated 07/03/2016 by Xplode
    # Database : 2016-03-08.1 [Server]
    # Operating system : Windows 7 Home Premium Service Pack 1 (x64)
    # Username : Tingler - TINGLER-PC
    # Running from : C:\Users\Tingler\Downloads\adwcleaner_5.101.exe
    # Option : Scan
    # Support : http://toolslib.net/forum

    ***** [ Services ] *****


    ***** [ Folders ] *****


    ***** [ Files ] *****


    ***** [ DLL ] *****


    ***** [ Shortcuts ] *****


    ***** [ Scheduled tasks ] *****


    ***** [ Registry ] *****


    ***** [ Web browsers ] *****

    [C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Found : recuva.en.softonic.com
    [C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Found : xplayer.en.softonic.com
    [C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Found : photoscape.en.softonic.com
    [C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Found : uk.ask.com
    [C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Found : mysearch.avg.com

    *************************

    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [1730 bytes] - [11/03/2016 18:17:49]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C2].txt - [2009 bytes] - [12/03/2016 11:09:10]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C3].txt - [2195 bytes] - [12/03/2016 11:28:06]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C4].txt - [2474 bytes] - [12/03/2016 14:26:58]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C5].txt - [2660 bytes] - [12/03/2016 17:08:01]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C6].txt - [3240 bytes] - [12/03/2016 20:35:57]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C7].txt - [3315 bytes] - [12/03/2016 21:37:58]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C8].txt - [3502 bytes] - [13/03/2016 06:34:09]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S10].txt - [2911 bytes] - [12/03/2016 18:01:40]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S11].txt - [3005 bytes] - [12/03/2016 20:33:54]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S12].txt - [3010 bytes] - [12/03/2016 20:55:55]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S13].txt - [3104 bytes] - [12/03/2016 21:36:11]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S14].txt - [3291 bytes] - [13/03/2016 06:31:57]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S15].txt - [2871 bytes] - [13/03/2016 07:08:34]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S16].txt - [2965 bytes] - [13/03/2016 07:19:44]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S17].txt - [2636 bytes] - [13/03/2016 07:53:44]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S1].txt - [817 bytes] - [10/03/2016 17:20:18]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S2].txt - [1518 bytes] - [11/03/2016 18:15:19]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S3].txt - [1095 bytes] - [11/03/2016 18:22:21]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S4].txt - [1797 bytes] - [12/03/2016 11:05:48]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S5].txt - [1983 bytes] - [12/03/2016 11:25:40]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S6].txt - [1562 bytes] - [12/03/2016 12:06:20]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S7].txt - [2262 bytes] - [12/03/2016 14:23:17]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S8].txt - [2448 bytes] - [12/03/2016 17:05:51]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S9].txt - [2027 bytes] - [12/03/2016 17:19:49]

    ########## EOF - C:\Program Files (x86)\AdwCleaner\AdwCleaner[S17].txt - [3566 bytes] ##########

    Adwear on re-boot-

    # AdwCleaner v5.101 - Logfile created 13/03/2016 at 07:55:36
    # Updated 07/03/2016 by Xplode
    # Database : 2016-03-08.1 [Server]
    # Operating system : Windows 7 Home Premium Service Pack 1 (x64)
    # Username : Tingler - TINGLER-PC
    # Running from : C:\Users\Tingler\Downloads\adwcleaner_5.101.exe
    # Option : Clean
    # Support : http://toolslib.net/forum

    ***** [ Services ] *****


    ***** [ Folders ] *****


    ***** [ Files ] *****


    ***** [ DLLs ] *****


    ***** [ Shortcuts ] *****


    ***** [ Scheduled tasks ] *****


    ***** [ Registry ] *****


    ***** [ Web browsers ] *****

    [-] [C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : recuva.en.softonic.com
    [-] [C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : xplayer.en.softonic.com
    [-] [C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : photoscape.en.softonic.com
    [-] [C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : uk.ask.com
    [-] [C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mysearch.avg.com

    *************************

    :: "Tracing" keys removed
    :: Winsock settings cleared

    *************************

    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [1730 bytes] - [11/03/2016 18:17:49]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C2].txt - [2009 bytes] - [12/03/2016 11:09:10]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C3].txt - [2195 bytes] - [12/03/2016 11:28:06]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C4].txt - [2474 bytes] - [12/03/2016 14:26:58]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C5].txt - [2660 bytes] - [12/03/2016 17:08:01]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C6].txt - [3240 bytes] - [12/03/2016 20:35:57]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C7].txt - [3315 bytes] - [12/03/2016 21:37:58]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C8].txt - [3502 bytes] - [13/03/2016 06:34:09]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C9].txt - [2097 bytes] - [13/03/2016 07:55:36]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S10].txt - [2911 bytes] - [12/03/2016 18:01:40]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S11].txt - [3005 bytes] - [12/03/2016 20:33:54]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S12].txt - [3010 bytes] - [12/03/2016 20:55:55]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S13].txt - [3104 bytes] - [12/03/2016 21:36:11]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S14].txt - [3291 bytes] - [13/03/2016 06:31:57]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S15].txt - [2871 bytes] - [13/03/2016 07:08:34]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S16].txt - [2965 bytes] - [13/03/2016 07:19:44]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S17].txt - [3666 bytes] - [13/03/2016 07:53:44]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S1].txt - [817 bytes] - [10/03/2016 17:20:18]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S2].txt - [1518 bytes] - [11/03/2016 18:15:19]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S3].txt - [1095 bytes] - [11/03/2016 18:22:21]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S4].txt - [1797 bytes] - [12/03/2016 11:05:48]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S5].txt - [1983 bytes] - [12/03/2016 11:25:40]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S6].txt - [1562 bytes] - [12/03/2016 12:06:20]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S7].txt - [2262 bytes] - [12/03/2016 14:23:17]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S8].txt - [2448 bytes] - [12/03/2016 17:05:51]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S9].txt - [2027 bytes] - [12/03/2016 17:19:49]

    ########## EOF - C:\Program Files (x86)\AdwCleaner\AdwCleaner[C9].txt - [3778 bytes] ##########
    will create a second post as the logs are too large for one post
     
  2. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    JRT Log-
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Malwarebytes
    Version: 8.0.3 (02.09.2016)
    Operating System: Windows 7 Home Premium x64
    Ran by Tingler (Administrator) on 13/03/2016 at 6:47:29.15
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    File System: 18

    Successfully deleted: C:\Users\Tingler\AppData\Local\nico mak computing (Folder)
    Successfully deleted: C:\Users\Tingler\AppData\Roaming\cleanmypc software (Folder)
    Successfully deleted: C:\Users\Tingler\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Tingler\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3R52SH54 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Tingler\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Tingler\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8MZ19QS9 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Tingler\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Tingler\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G29TJDQ3 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Tingler\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Tingler\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T5XVJM0E (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3R52SH54 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8MZ19QS9 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G29TJDQ3 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T5XVJM0E (Temporary Internet Files Folder)



    Registry: 0





    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on 13/03/2016 at 6:53:03.08
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    JRT addi
     
  3. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    JRT additional log
    Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
    Ran by Tingler (2016-03-13 07:05:36)
    Running from C:\Users\Tingler\Downloads
    Windows 7 Home Premium Service Pack 1 (X64) (2016-02-29 15:00:44)
    Boot Mode: Normal
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-2621528677-2587945157-656946973-500 - Administrator - Disabled)
    Guest (S-1-5-21-2621528677-2587945157-656946973-501 - Limited - Disabled)
    HomeGroupUser$ (S-1-5-21-2621528677-2587945157-656946973-1004 - Limited - Enabled)
    Tingler (S-1-5-21-2621528677-2587945157-656946973-1001 - Administrator - Enabled) => C:\Users\Tingler

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
    FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

    ==================== Installed Programs ======================

    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.182 - Adobe Systems Incorporated)
    Any Video Converter Ultimate 5.9.1 (HKLM-x32\...\Any Video Converter Ultimate_is1) (Version: - Any-Video-Converter.com)
    Apple Application Support (32-bit) (HKLM-x32\...\{7FA9ECCF-A2DE-4DA1-BFF3-81260DBDA68F}) (Version: 4.1.2 - Apple Inc.)
    Apple Application Support (64-bit) (HKLM\...\{691F30EB-9009-475A-B8A9-E1BF39598FD5}) (Version: 4.1.2 - Apple Inc.)
    Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
    Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
    Avast Premier (HKLM-x32\...\Avast) (Version: 11.1.2253 - AVAST Software)
    Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
    CleanMyPC - Registry Cleaner (HKLM-x32\...\CleanMyPC - Registry Cleaner_is1) (Version: - CleanMyPC Software)
    Dell Resource CD (HKLM-x32\...\{42929F0F-CE14-47AF-9FC7-FF297A603021}) (Version: 1.00.0000 - Dell Inc.)
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.87 - Google Inc.)
    Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
    IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6217.0 - IDT)
    Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation)
    iTunes (HKLM\...\{FBEB98F8-64E4-4FA3-A15E-4A9F42FF962E}) (Version: 12.3.2.35 - Apple Inc.)
    Kaspersky Cleaner (HKLM-x32\...\{6D8461B7-6026-497C-A94B-95BC1A4E3EBC}) (Version: 1.0.0.106 - Kaspersky Lab)
    Kaspersky Software Updater Beta (HKLM-x32\...\InstallWIX_{A19807B6-6057-456E-A560-A2A04862C1C6}) (Version: 1.5.1.202 - Kaspersky Lab)
    Kaspersky Software Updater Beta (x32 Version: 1.5.1.202 - Kaspersky Lab) Hidden
    Malwarebytes Anti-Malware v2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes Anti-Malware)
    Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation)
    Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.)
    SafeZone Stable 1.48.2066.44 (x32 Version: 1.48.2066.44 - Avast Software) Hidden
    Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.)
    Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.112 - Skype Technologies S.A.)
    VBA (2627.01) (x32 Version: 6.03.00.9402 - Microsoft Corporation) Hidden
    Vuze Leap 1.7 (HKU\S-1-5-21-2621528677-2587945157-656946973-1001\...\{a9a27088-7578-499d-ad2b-67ba95a4def4}) (Version: 1.7 - Azureus Software, Inc.)
    WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)

    ==================== Custom CLSID (Whitelisted): ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    Task: {0CD7B74A-6B2C-408B-83B2-4FFF858097E7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-10] (Adobe Systems Incorporated)
    Task: {336B39D3-7A47-4166-AA09-50BC555D1946} - System32\Tasks\SafeZone scheduled Autoupdate 1457546441 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-02-01] (Avast Software)
    Task: {45F175E3-C861-433A-8602-100BF8E947C5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-12] (Google Inc.)
    Task: {4FA2D5B8-6E70-4BAE-A398-ACB2A1440FF3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
    Task: {75A7B952-34F8-47AA-AC73-A6F03B47800F} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2621528677-2587945157-656946973-1001
    Task: {9F63FB68-C4C4-4520-A60A-491F3ABD4F61} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-03-09] (AVAST Software)
    Task: {A7FD6362-3715-4129-95F0-CC1B5C3EBDBC} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-02-21] (AVAST Software)
    Task: {E899C636-04B6-4947-8015-23E43D7E64C2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-12] (Google Inc.)

    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    ==================== Shortcuts =============================

    (The entries could be listed to be restored or removed.)

    ==================== Loaded Modules (Whitelisted) ==============

    2015-12-17 18:38 - 2015-12-17 18:38 - 00085800 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
    2015-12-17 18:38 - 2015-12-17 18:38 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
    2016-03-09 18:08 - 2016-03-09 18:08 - 00113496 _____ () C:\Program Files\AVAST Software\Avast\log.dll
    2016-03-09 18:08 - 2016-03-09 18:08 - 00133768 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
    2016-03-12 16:06 - 2016-03-12 16:06 - 02840576 _____ () C:\Program Files\AVAST Software\Avast\defs\16031203\algo.dll
    2016-03-09 18:08 - 2016-03-09 18:08 - 00480760 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
    2016-03-09 17:56 - 2016-03-09 17:56 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the ADS will be removed.)

    AlternateDataStreams: C:\ProgramData\TEMP:ECF54A0E [316]

    ==================== Safe Mode (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


    ==================== EXE Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)


    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, it will be removed from the registry.)


    ==================== Hosts content: ===============================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-14 02:34 - 2016-03-08 08:09 - 00000828 ____A C:\Windows\system32\Drivers\etc\hosts


    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-2621528677-2587945157-656946973-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Tingler\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
    DNS Servers: 10.0.0.1
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
    Windows Firewall is disabled.

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    (Currently there is no automatic fix for this section.)


    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    FirewallRules: [{DD664B2F-EAAB-4F85-99EB-AA0AAE227FE6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    FirewallRules: [{BE143B2C-6CF6-4392-97A2-33B716DF5A6B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    FirewallRules: [{8E4EB6E5-D09C-4828-9C19-5E3E949BAA5E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [{25179375-3178-48C5-AB27-A0A0614345C6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [UDP Query User{BB39D6F7-5209-4273-BAB3-1407C58D10C9}C:\users\tingler\appdata\roaming\vuze leap\vuzeleap.exe] => (Allow) C:\users\tingler\appdata\roaming\vuze leap\vuzeleap.exe
    FirewallRules: [TCP Query User{B790D777-FDB6-4114-A87C-FC0496AB787C}C:\users\tingler\appdata\roaming\vuze leap\vuzeleap.exe] => (Allow) C:\users\tingler\appdata\roaming\vuze leap\vuzeleap.exe
    FirewallRules: [{1AC453DB-172C-49DC-8F77-568F3F51C75D}] => (Allow) C:\Users\Tingler\AppData\Roaming\Vuze Leap\VuzeLeap.exe
    FirewallRules: [{9BE914E4-2ACF-4C35-BCF0-5A9CAD3275C5}] => (Allow) C:\Users\Tingler\AppData\Roaming\Vuze Leap\VuzeLeap.exe
    FirewallRules: [{F144172F-C250-4446-A701-88ECA922E862}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
    FirewallRules: [{C6C3C03B-583E-4C13-B30B-C21E438B456E}] => (Allow) C:\Program Files\iTunes\iTunes.exe
    FirewallRules: [{94B262BF-1FE9-4922-A8A3-CA81F68E9622}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
    FirewallRules: [{E0600049-24BE-4C9F-A206-FD432E582D02}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
    FirewallRules: [{A1E89B41-A5D6-4DA4-B6B8-F88F2C5E39F4}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
    FirewallRules: [{1BE71A58-6280-4972-8C53-E3FD3330F819}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
    FirewallRules: [{368861DD-6E94-46D1-B664-F0BAC9727CE4}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
    FirewallRules: [{F96DAC09-98B1-4FAE-A950-CA9B9C47C0DD}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
    FirewallRules: [{196C99AE-AE52-4F2B-A6BD-DB545831EBD3}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    ==================== Restore Points =========================

    06-03-2016 06:38:11 Device Driver Package Install: Avast Network Service
    06-03-2016 06:45:36 Device Driver Package Install: Avast Network Service
    06-03-2016 06:56:20 Device Driver Package Install: Avast Network Service
    06-03-2016 07:39:10 Device Driver Package Install: Avast Network Service
    08-03-2016 09:43:47 Configured IDT Audio
    09-03-2016 05:40:15 Installed Kaspersky Cleaner
    09-03-2016 17:59:05 Device Driver Package Install: Avast Network Service
    09-03-2016 18:09:10 Device Driver Package Install: Avast Network Service
    13-03-2016 06:47:37 JRT Pre-Junkware Removal

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (03/09/2016 06:09:14 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
    Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

    Details:
    AddLegacyDriverFiles: Unable to back up image of binary qqwmmdgh.

    System Error:
    The system cannot find the file specified.
    .

    Error: (03/09/2016 05:59:11 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
    Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

    Details:
    AddLegacyDriverFiles: Unable to back up image of binary qqwmmdgh.

    System Error:
    The system cannot find the file specified.
    .

    Error: (03/08/2016 06:06:08 PM) (Source: ESENT) (EventID: 439) (User: )
    Description: Windows (3484) Windows: Unable to write a shadowed header for file C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk. Error -1032.

    Error: (03/08/2016 06:06:08 PM) (Source: ESENT) (EventID: 490) (User: )
    Description: Windows (3484) Windows: An attempt to open the file "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8).

    Error: (03/06/2016 06:45:41 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
    Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

    Details:
    AddLegacyDriverFiles: Unable to back up image of binary mhqwicpl.

    System Error:
    The system cannot find the file specified.
    .

    Error: (03/06/2016 06:38:18 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
    Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

    Details:
    AddLegacyDriverFiles: Unable to back up image of binary mhqwicpl.

    System Error:
    The system cannot find the file specified.
    .

    Error: (03/03/2016 07:25:12 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
    Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: C:\Program Files (x86)\Samsung\Kies\Kies.exe . Error code = 0x800700d8

    Error: (03/03/2016 07:25:12 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
    Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: C:\Program Files (x86)\Samsung\Kies\Kies.exe . Error code = 0x800700d8

    Error: (03/03/2016 09:42:37 AM) (Source: VSS) (EventID: 8194) (User: )
    Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
    .
    This is often caused by incorrect security settings in either the writer or requestor process.


    Operation:
    Gathering Writer Data

    Context:
    Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
    Writer Name: System Writer
    Writer Instance ID: {0bf33e79-4e9a-483e-bc06-fd88b7c93e54}

    Error: (03/01/2016 03:15:07 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
    Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - Failed to compile: System.ServiceModel, Version=3.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80070020


    System errors:
    =============
    Error: (03/13/2016 06:47:18 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
    Description: The following fatal alert was generated: 40. The internal error state is 252.

    Error: (03/13/2016 06:36:44 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
    Description: The following boot-start or system-start driver(s) failed to load:
    aswNetSec

    Error: (03/13/2016 06:34:39 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The Windows Media Player Network Sharing Service service failed to start due to the following error:
    %%1069

    Error: (03/13/2016 06:34:39 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
    Description: The WMPNetworkSvc service was unable to log on as NT AUTHORITY\NetworkService with the currently configured password due to the following error:
    %%50

    To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

    Error: (03/13/2016 06:34:39 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The Windows Search service failed to start due to the following error:
    %%1069

    Error: (03/13/2016 06:34:39 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
    Description: The WSearch service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error:
    %%50

    To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

    Error: (03/13/2016 06:34:09 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
    Description: The Software Protection service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

    Error: (03/13/2016 06:34:09 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
    Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

    Error: (03/13/2016 06:34:09 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
    Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

    Error: (03/13/2016 06:34:09 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The iPod Service service terminated unexpectedly. It has done this 1 time(s).


    ==================== Memory info ===========================

    Processor: Pentium(R) Dual-Core CPU T4400 @ 2.20GHz
    Percentage of memory in use: 78%
    Total physical RAM: 3032.36 MB
    Available physical RAM: 664.41 MB
    Total Virtual: 6062.92 MB
    Available Virtual: 3288.17 MB

    ==================== Drives ================================

    Drive c: (OS) (Fixed) (Total:451.07 GB) (Free:112.88 GB) NTFS
    Drive e: (RECOVERY) (Fixed) (Total:14.65 GB) (Free:5.57 GB) NTFS ==>[system with boot components (obtained from drive)]

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 880B8533)
    Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
    Partition 2: (Active) - (Size=14.6 GB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=451.1 GB) - (Type=07 NTFS)

    ==================== End of Addition.txt ============================
     
  4. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-03-13 06:43 - 2009-07-14 04:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2016-03-13 06:43 - 2009-07-14 04:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2016-03-13 06:36 - 2009-07-14 05:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
    2016-03-12 10:07 - 2012-10-15 05:02 - 00000000 ____D C:\05592960dfb32d20d379da435681
    2016-03-12 10:06 - 2012-10-16 04:18 - 00000000 ____D C:\0449f9ab9cdff1353affaf9739
    2016-03-12 10:06 - 2012-03-13 05:00 - 00000000 ___DC C:\608fb177380080c4b4
    2016-03-12 10:06 - 2012-01-11 21:39 - 00000000 ___DC C:\64c0bb8734382473337080479f
    2016-03-09 18:13 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\inf
    2016-03-06 07:48 - 2009-07-14 05:13 - 00727660 _____ C:\Windows\system32\PerfStringBackup.INI
    2016-03-05 07:21 - 2009-07-14 04:45 - 00274320 _____ C:\Windows\system32\FNTCACHE.DAT
    2016-03-03 20:36 - 2009-07-14 05:32 - 00000000 ____D C:\Windows\Downloaded Program Files
    2016-03-03 12:27 - 2009-07-14 07:45 - 00000000 ____D C:\Windows\ShellNew
    2016-03-02 07:10 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\rescache
    2016-03-02 05:12 - 2009-07-14 04:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
    ==================== Files in the root of some directories =======
    2016-03-12 17:32 - 2016-03-12 17:47 - 0000115 _____ () C:\Users\Tingler\AppData\Roaming\LogFile.txt
    2016-03-12 21:22 - 2016-03-12 21:22 - 0000017 _____ () C:\Users\Tingler\AppData\Local\resmon.resmoncfg
    Some files in TEMP:
    ====================
    C:\Users\Tingler\AppData\Local\Temp\sqlite3.dll
    ==================== Bamital & volsnap =================
    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2016-03-01 08:32

    ==================== End of FRST.txt ============================
     
  5. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    Sorry for all the additional posts but the txt files were too large for a single post
    thanks in advance for any help/advice anyone can give me with this
    Jim
     
  6. Broni

    Broni Malware Annihilator Posts: 52,898   +344

    Welcome aboard [​IMG]

    Please, complete all steps listed here: http://www.techspot.com/vb/topic58138.html
    Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
    Attached logs won't be reviewed.

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.
     
  7. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    Thanks for looking into this
    what additional information do I need to post?
     
  8. Broni

    Broni Malware Annihilator Posts: 52,898   +344

    You only posted Addition.txt log form FRST.
    I still need FRST.txt log.
     
  9. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
    Ran by Tingler (administrator) on TINGLER-PC (13-03-2016 07:03:05)
    Running from C:\Users\Tingler\Downloads
    Loaded Profiles: Tingler (Available Profiles: Tingler)
    Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
    Internet Explorer Version 8 (Default browser: Chrome)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\stacsv64.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
    (Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\AESTSr64.exe
    (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
    (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
    (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
    HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-12-17] (Apple Inc.)
    HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [444416 2009-06-29] (IDT, Inc.)
    HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7137664 2016-03-09] (AVAST Software)
    HKU\S-1-5-21-2621528677-2587945157-656946973-1001\...\Run: [Registry Cleaner Scheduler] => C:\Program Files (x86)\CleanMyPC\Registry Cleaner\RCHelper.exe [1401224 2011-10-06] (CleanMyPC Software)
    HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-03-01] (Microsoft Corporation)
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-03-09] (AVAST Software)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Kaspersky Software Updater Beta.lnk [2016-03-09]
    ShortcutTarget: Kaspersky Software Updater Beta.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Software Updater Beta\ksu.exe (AO Kaspersky Lab)

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
    Tcpip\..\Interfaces\{29E1561A-ACB0-49F3-B8DF-AD2EF0522867}: [NameServer] 10.0.0.1
    Tcpip\..\Interfaces\{29E1561A-ACB0-49F3-B8DF-AD2EF0522867}: [DhcpNameServer] 192.168.1.254
    Tcpip\..\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}: [NameServer] 10.0.0.1

    Internet Explorer:
    ==================
    BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-03-09] (AVAST Software)
    BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-09] (AVAST Software)
    DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
    Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
    Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
    Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
    Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)

    FireFox:
    ========
    FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
    FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-12] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-12] (Google Inc.)
    FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
    FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-03-09]
    FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

    Chrome:
    =======
    CHR Profile: C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Snooker) - C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjohiacoelemalmancnccjggomjnkfod [2016-03-12]
    CHR Extension: (YouTube) - C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-29]
    CHR Extension: (Pool) - C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\cedbddnnmhgnedpamoenmdkhnpnfbpjb [2016-02-29]
    CHR Extension: (Google Search) - C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-29]
    CHR Extension: (AdBlock) - C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-03-11]
    CHR Extension: (Sniper Team Game Collection) - C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\hclgbbaloijjnkpigapgmocdpoblnlec [2016-02-29]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-02-29]
    CHR Extension: (Gmail) - C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-29]
    CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-03-09]

    ==================== Services (Whitelisted) ========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\AESTSr64.exe [89600 2009-03-02] (Andrea Electronics Corporation)
    R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
    R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-03-09] (AVAST Software)
    R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [119128 2016-03-09] (AVAST Software)
    S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
    S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
    R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
    R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe [240128 2009-06-29] (IDT, Inc.)
    S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

    ===================== Drivers (Whitelisted) ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-03-09] (AVAST Software)
    R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-03-09] (AVAST Software)
    R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-03-09] (AVAST Software)
    R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [478128 2016-03-09] (AVAST Software)
    S1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [552880 2016-03-09] (AVAST Software)
    R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-03-09] (AVAST Software)
    R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-03-09] (AVAST Software)
    R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-03-09] (AVAST Software)
    R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-03-09] (AVAST Software)
    R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-03-09] (AVAST Software)
    R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-03-09] (AVAST Software)
    S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
    R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
    S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-03-12] (Malwarebytes)
    S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-03-13 07:03 - 2016-03-13 07:03 - 00010362 _____ C:\Users\Tingler\Downloads\FRST.txt
    2016-03-13 07:02 - 2016-03-13 07:03 - 00000000 ____D C:\FRST
    2016-03-13 07:02 - 2016-03-13 07:02 - 02374144 _____ (Farbar) C:\Users\Tingler\Downloads\FRST64.exe
    2016-03-13 06:53 - 2016-03-13 06:53 - 00003365 _____ C:\Users\Tingler\Desktop\JRT.txt
    2016-03-13 06:46 - 2016-03-13 06:46 - 01609216 _____ (Malwarebytes) C:\Users\Tingler\Downloads\JRT.exe
    2016-03-12 21:22 - 2016-03-12 21:22 - 00000017 _____ C:\Users\Tingler\AppData\Local\resmon.resmoncfg
    2016-03-12 21:02 - 2016-03-12 21:02 - 00001103 _____ C:\Users\Tingler\Desktop\CleanMyPC - Registry Cleaner.lnk
    2016-03-12 21:02 - 2016-03-12 21:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CleanMyPC Registry Cleaner
    2016-03-12 21:02 - 2016-03-12 21:02 - 00000000 ____D C:\Program Files (x86)\CleanMyPC
    2016-03-12 17:55 - 2016-03-12 17:55 - 00002269 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
    2016-03-12 17:54 - 2016-03-13 07:00 - 00000900 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2016-03-12 17:54 - 2016-03-13 06:36 - 00000896 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2016-03-12 17:54 - 2016-03-12 17:54 - 00003896 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
    2016-03-12 17:54 - 2016-03-12 17:54 - 00003644 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
    2016-03-12 09:57 - 2016-03-12 09:57 - 00001108 _____ C:\Users\Public\Desktop\Picasa 3.lnk
    2016-03-12 09:56 - 2016-03-12 10:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
    2016-03-10 17:20 - 2016-03-13 06:34 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
    2016-03-10 17:19 - 2016-03-10 17:19 - 01524224 _____ C:\Users\Tingler\Downloads\adwcleaner_5.101.exe
    2016-03-10 09:29 - 2016-03-10 09:30 - 00191992 _____ C:\TDSSKiller.3.1.0.9_10.03.2016_09.29.22_log.txt
    2016-03-09 18:08 - 2016-03-09 18:08 - 00552880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswnetsec.sys
    2016-03-09 18:08 - 2016-03-09 18:08 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
    2016-03-09 18:08 - 2016-03-09 18:08 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr
    2016-03-09 18:07 - 2016-03-09 18:07 - 00478128 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
    2016-03-09 18:01 - 2016-03-09 18:01 - 00000000 ____D C:\Users\Tingler\AppData\Roaming\AVAST Software
    2016-03-09 18:01 - 2016-03-09 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
    2016-03-09 18:00 - 2016-03-09 18:14 - 00003052 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1457546441
    2016-03-09 18:00 - 2016-03-09 18:00 - 00001039 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
    2016-03-09 17:57 - 2016-03-12 16:06 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
    2016-03-09 17:57 - 2016-03-09 18:09 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
    2016-03-09 17:57 - 2016-03-09 18:09 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
    2016-03-09 17:57 - 2016-03-09 18:08 - 00463744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
    2016-03-09 17:57 - 2016-03-09 18:08 - 00287016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
    2016-03-09 17:57 - 2016-03-09 18:08 - 00165344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
    2016-03-09 17:57 - 2016-03-09 18:08 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
    2016-03-09 17:57 - 2016-03-09 18:08 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
    2016-03-09 17:57 - 2016-03-09 18:08 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
    2016-03-09 17:57 - 2016-03-09 18:08 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
    2016-03-09 17:55 - 2016-03-09 17:56 - 00000000 ____D C:\Program Files\AVAST Software
    2016-03-09 17:54 - 2016-03-09 17:54 - 00450504 _____ (AVAST Software) C:\Windows\system32\Drivers\uofqjsfl.sys
    2016-03-09 17:45 - 2016-03-09 17:45 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
    2016-03-09 17:35 - 2016-03-09 17:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Software Updater Beta
    2016-03-09 17:35 - 2016-03-09 17:35 - 00000000 ____D C:\ProgramData\Kaspersky Lab
    2016-03-09 05:45 - 2016-03-12 20:39 - 00001354 _____ C:\Windows\Tasks\SCHEDLGU.TXT
    2016-03-09 05:40 - 2016-03-09 17:35 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
    2016-03-09 05:40 - 2016-03-09 05:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Cleaner
    2016-03-09 05:38 - 2016-03-09 05:39 - 00190660 _____ C:\TDSSKiller.3.1.0.9_09.03.2016_05.38.01_log.txt
    2016-03-08 09:42 - 2016-03-08 09:43 - 00000000 ____D C:\Program Files\IDT
    2016-03-08 07:32 - 2016-03-08 07:32 - 00001104 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
    2016-03-06 06:36 - 2016-03-06 06:36 - 00450504 _____ (AVAST Software) C:\Windows\system32\Drivers\pcineovz.sys
    2016-03-03 20:36 - 2016-03-11 05:54 - 00000000 ____D C:\Users\Tingler\AppData\Roaming\Adobe
    2016-03-03 20:35 - 2016-03-13 06:45 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
    2016-03-03 20:35 - 2016-03-10 20:45 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2016-03-03 20:35 - 2016-03-10 20:45 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2016-03-03 20:35 - 2016-03-10 20:45 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2016-03-03 20:35 - 2016-03-03 20:35 - 00000000 ____D C:\Windows\SysWOW64\Macromed
    2016-03-03 20:35 - 2016-03-03 20:35 - 00000000 ____D C:\Windows\system32\Macromed
    2016-03-03 19:25 - 2016-03-03 19:25 - 00000000 ____D C:\Users\Public\Documents\CrashDump
    2016-03-03 19:22 - 2016-03-04 11:37 - 00000000 ____D C:\Users\Tingler\AppData\Local\Samsung
    2016-03-03 19:21 - 2016-03-04 07:29 - 00000000 ____D C:\Users\Tingler\Documents\samsung
    2016-03-03 19:19 - 2013-12-30 10:53 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
    2016-03-03 18:57 - 2016-03-03 18:57 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
    2016-03-03 18:57 - 2016-01-08 08:51 - 00213088 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
    2016-03-03 18:57 - 2016-01-08 08:51 - 00120416 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
    2016-03-03 18:56 - 2016-03-04 11:37 - 00000000 ____D C:\Users\Tingler\AppData\Roaming\Samsung
    2016-03-03 18:56 - 2016-03-04 11:37 - 00000000 ____D C:\ProgramData\Samsung
    2016-03-03 18:56 - 2016-02-03 09:29 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll
    2016-03-03 18:55 - 2016-03-04 11:26 - 00000000 ____D C:\Program Files (x86)\Samsung
    2016-03-03 14:34 - 2016-03-03 14:34 - 00000193 _____ C:\Windows\WORDPAD.INI
    2016-03-03 12:40 - 2016-03-05 07:21 - 00000000 ____D C:\Users\Tingler\AppData\Local\Kingsoft
    2016-03-03 12:17 - 2016-03-03 12:17 - 00000000 ____D C:\ProgramData\Kingsoft
    2016-03-03 12:16 - 2016-03-03 12:42 - 00000000 ____D C:\Users\Tingler\AppData\Roaming\Kingsoft
    2016-03-02 09:56 - 2014-05-14 16:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
    2016-03-02 09:56 - 2014-05-14 16:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
    2016-03-02 09:56 - 2014-05-14 16:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
    2016-03-02 09:56 - 2014-05-14 16:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
    2016-03-02 09:55 - 2014-05-14 16:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
    2016-03-02 09:55 - 2014-05-14 16:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
    2016-03-02 09:55 - 2014-05-14 16:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
    2016-03-02 09:55 - 2014-05-14 16:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
    2016-03-02 09:55 - 2014-05-14 16:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
    2016-03-02 09:55 - 2014-05-14 16:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
    2016-03-02 09:55 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
    2016-03-02 09:55 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
    2016-03-02 09:55 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
    2016-03-02 09:55 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
    2016-03-01 14:19 - 2016-03-01 14:20 - 00000000 ____D C:\Windows\system32\SPReview
    2016-03-01 14:19 - 2016-03-01 14:19 - 00000000 ____D C:\Windows\system32\EventProviders
    2016-03-01 13:06 - 2010-11-20 13:33 - 01924480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
    2016-03-01 13:06 - 2010-11-20 13:28 - 01731936 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
    2016-03-01 13:06 - 2010-11-20 13:27 - 14633472 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
    2016-03-01 13:06 - 2010-11-20 13:27 - 14174208 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
    2016-03-01 13:06 - 2010-11-20 13:27 - 08988160 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2016-03-01 13:06 - 2010-11-20 13:27 - 03715584 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
    2016-03-01 13:06 - 2010-11-20 13:27 - 03650560 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
    2016-03-01 13:06 - 2010-11-20 13:27 - 03008000 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
    2016-03-01 13:06 - 2010-11-20 13:27 - 02314752 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
    2016-03-01 13:06 - 2010-11-20 13:27 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
    2016-03-01 13:06 - 2010-11-20 13:27 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
    2016-03-01 13:06 - 2010-11-20 13:27 - 01465344 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
    2016-03-01 13:06 - 2010-11-20 13:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
    2016-03-01 13:06 - 2010-11-20 13:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
    2016-03-01 13:06 - 2010-11-20 13:27 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
    2016-03-01 13:06 - 2010-11-20 13:26 - 12260864 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2016-03-01 13:06 - 2010-11-20 13:26 - 04120064 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
    2016-03-01 13:06 - 2010-11-20 13:26 - 03205120 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
    2016-03-01 13:06 - 2010-11-20 13:26 - 01838080 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
    2016-03-01 13:06 - 2010-11-20 13:25 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
    2016-03-01 13:06 - 2010-11-20 13:25 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
    2016-03-01 13:06 - 2010-11-20 13:25 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
    2016-03-01 13:06 - 2010-11-20 12:21 - 12872192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
    2016-03-01 13:06 - 2010-11-20 12:21 - 00870912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
    2016-03-01 13:06 - 2010-11-20 12:21 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
    2016-03-01 13:06 - 2010-11-20 12:19 - 05977600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2016-03-01 13:06 - 2010-11-20 12:19 - 03215872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
    2016-03-01 13:06 - 2010-11-20 12:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40.dll
    2016-03-01 13:06 - 2010-11-20 12:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40u.dll
    2016-03-01 13:06 - 2010-11-20 12:18 - 01171456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
    2016-03-01 13:06 - 2010-11-20 12:18 - 00739840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
    2016-03-01 13:06 - 2010-11-20 11:07 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
    2016-03-01 13:06 - 2010-11-05 01:58 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
    2016-03-01 13:06 - 2010-11-05 01:57 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
    2016-03-01 13:06 - 2010-11-05 01:57 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
    2016-03-01 13:06 - 2010-11-05 01:57 - 00048976 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
    2016-03-01 13:05 - 2010-11-20 13:39 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll
    2016-03-01 13:05 - 2010-11-20 13:34 - 00215936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
    2016-03-01 13:05 - 2010-11-20 13:33 - 01659776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
    2016-03-01 13:05 - 2010-11-20 13:33 - 00982912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
    2016-03-01 13:05 - 2010-11-20 13:33 - 00951680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
    2016-03-01 13:05 - 2010-11-20 13:33 - 00376192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
    2016-03-01 13:05 - 2010-11-20 13:33 - 00299392 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
    2016-03-01 13:05 - 2010-11-20 13:33 - 00273792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
    2016-03-01 13:05 - 2010-11-20 13:33 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
    2016-03-01 13:05 - 2010-11-20 13:33 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
    2016-03-01 13:05 - 2010-11-20 13:32 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
    2016-03-01 13:05 - 2010-11-20 13:28 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
    2016-03-01 13:05 - 2010-11-20 13:28 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
    2016-03-01 13:05 - 2010-11-20 13:28 - 00459248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
    2016-03-01 13:05 - 2010-11-20 13:27 - 03860992 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 03027968 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
    2016-03-01 13:05 - 2010-11-20 13:27 - 02652160 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 02543616 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 02086912 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 02018304 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01900544 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
    2016-03-01 13:05 - 2010-11-20 13:27 - 01881088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01753088 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01646080 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01572352 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01556992 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01509888 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01490944 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01326080 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01281024 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01219584 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01212416 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01197056 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01118208 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01098240 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01026560 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 01008128 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00960512 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00867840 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00849920 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00800256 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll
     
  10. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    2016-03-01 13:05 - 2010-11-20 13:27 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00695808 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00612864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00582656 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00577536 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00481280 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL
    2016-03-01 13:05 - 2010-11-20 13:27 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00457216 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00326144 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL
    2016-03-01 13:05 - 2010-11-20 13:27 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
    2016-03-01 13:05 - 2010-11-20 13:27 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 03391488 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 02444288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 02067456 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 01866240 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 01544192 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 01340416 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 01244160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 00955904 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 00919040 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 00853504 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
    2016-03-01 13:05 - 2010-11-20 13:26 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 00787968 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 00715264 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 00321024 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 00317952 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 00281600 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll
    2016-03-01 13:05 - 2010-11-20 13:26 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
    2016-03-01 13:05 - 2010-11-20 13:25 - 03957760 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe
    2016-03-01 13:05 - 2010-11-20 13:25 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
    2016-03-01 13:05 - 2010-11-20 13:25 - 01927680 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
    2016-03-01 13:05 - 2010-11-20 13:25 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll
    2016-03-01 13:05 - 2010-11-20 13:25 - 01600512 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
    2016-03-01 13:05 - 2010-11-20 13:25 - 01504256 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
    2016-03-01 13:05 - 2010-11-20 13:25 - 01456128 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
    2016-03-01 13:05 - 2010-11-20 13:25 - 01116672 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
    2016-03-01 13:05 - 2010-11-20 13:25 - 00958464 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
    2016-03-01 13:05 - 2010-11-20 13:25 - 00897536 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll
    2016-03-01 13:05 - 2010-11-20 13:25 - 00705024 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
    2016-03-01 13:05 - 2010-11-20 13:25 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
    2016-03-01 13:05 - 2010-11-20 13:25 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe
    2016-03-01 13:05 - 2010-11-20 13:25 - 00594432 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
    2016-03-01 13:05 - 2010-11-20 13:25 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
    2016-03-01 13:05 - 2010-11-20 13:25 - 00390656 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
    2016-03-01 13:05 - 2010-11-20 13:25 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
    2016-03-01 13:05 - 2010-11-20 13:25 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe
    2016-03-01 13:05 - 2010-11-20 13:24 - 02872320 _____ (Microsoft Corporation) C:\Windows\explorer.exe
    2016-03-01 13:05 - 2010-11-20 13:24 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe
    2016-03-01 13:05 - 2010-11-20 13:24 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe
    2016-03-01 13:05 - 2010-11-20 13:24 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe
    2016-03-01 13:05 - 2010-11-20 12:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthFWSnapin.dll
    2016-03-01 13:05 - 2010-11-20 12:24 - 01292096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 01619456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
    2016-03-01 13:05 - 2010-11-20 12:21 - 01548288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 01229824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RacEngn.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 01010688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 00980992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 00283648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
    2016-03-01 13:05 - 2010-11-20 12:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
    2016-03-01 13:05 - 2010-11-20 12:20 - 01414144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
    2016-03-01 13:05 - 2010-11-20 12:20 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
    2016-03-01 13:05 - 2010-11-20 12:20 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
    2016-03-01 13:05 - 2010-11-20 12:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbc32.dll
    2016-03-01 13:05 - 2010-11-20 12:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
    2016-03-01 13:05 - 2010-11-20 12:20 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
    2016-03-01 13:05 - 2010-11-20 12:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
    2016-03-01 13:05 - 2010-11-20 12:19 - 10990080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2016-03-01 13:05 - 2010-11-20 12:19 - 03207680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
    2016-03-01 13:05 - 2010-11-20 12:19 - 02291712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
    2016-03-01 13:05 - 2010-11-20 12:19 - 02064384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2016-03-01 13:05 - 2010-11-20 12:19 - 01698816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
    2016-03-01 13:05 - 2010-11-20 12:19 - 01493504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
    2016-03-01 13:05 - 2010-11-20 12:19 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
    2016-03-01 13:05 - 2010-11-20 12:19 - 01390080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
    2016-03-01 13:05 - 2010-11-20 12:19 - 00606208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll
    2016-03-01 13:05 - 2010-11-20 12:19 - 00599552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2016-03-01 13:05 - 2010-11-20 12:19 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
    2016-03-01 13:05 - 2010-11-20 12:19 - 00389120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2016-03-01 13:05 - 2010-11-20 12:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
    2016-03-01 13:05 - 2010-11-20 12:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
    2016-03-01 13:05 - 2010-11-20 12:18 - 01371136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
    2016-03-01 13:05 - 2010-11-20 12:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
    2016-03-01 13:05 - 2010-11-20 12:18 - 01154048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
    2016-03-01 13:05 - 2010-11-20 12:18 - 01076736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
    2016-03-01 13:05 - 2010-11-20 12:18 - 00522752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
    2016-03-01 13:05 - 2010-11-20 12:18 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
    2016-03-01 13:05 - 2010-11-20 12:18 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
    2016-03-01 13:05 - 2010-11-20 12:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3api.dll
    2016-03-01 13:05 - 2010-11-20 12:17 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
    2016-03-01 13:05 - 2010-11-20 12:17 - 01049600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
    2016-03-01 13:05 - 2010-11-20 12:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
    2016-03-01 13:05 - 2010-11-20 12:17 - 00322048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
    2016-03-01 13:05 - 2010-11-20 11:05 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll
    2016-03-01 13:05 - 2010-11-20 11:04 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
    2016-03-01 13:05 - 2010-11-20 09:53 - 03126272 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2016-03-01 13:05 - 2010-11-20 09:28 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
    2016-03-01 13:05 - 2010-11-20 09:27 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
    2016-03-01 13:05 - 2010-11-20 09:27 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
    2016-03-01 13:05 - 2010-11-20 09:25 - 00753664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
    2016-03-01 13:05 - 2010-11-20 09:23 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
    2016-03-01 13:05 - 2010-11-20 09:23 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
    2016-03-01 13:05 - 2010-11-20 09:21 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
    2016-03-01 13:05 - 2010-11-20 03:52 - 00419880 _____ C:\Windows\SysWOW64\locale.nls
    2016-03-01 13:05 - 2010-11-20 03:52 - 00419880 _____ C:\Windows\system32\locale.nls
    2016-03-01 13:05 - 2010-11-05 02:20 - 00347904 _____ C:\Windows\system32\systemsf.ebd
    2016-03-01 13:05 - 2010-11-05 01:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
    2016-03-01 13:05 - 2010-11-05 01:53 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
    2016-03-01 13:05 - 2010-11-05 01:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
    2016-03-01 13:05 - 2010-11-05 01:53 - 00109928 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
    2016-03-01 13:05 - 2010-11-05 01:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
    2016-03-01 13:05 - 2009-07-14 01:16 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpmonui.dll
    2016-03-01 13:04 - 2010-11-20 13:44 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe
    2016-03-01 13:04 - 2010-11-20 13:34 - 00363392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
    2016-03-01 13:04 - 2010-11-20 13:34 - 00295808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
    2016-03-01 13:04 - 2010-11-20 13:34 - 00071552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
    2016-03-01 13:04 - 2010-11-20 13:33 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
    2016-03-01 13:04 - 2010-11-20 13:33 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
    2016-03-01 13:04 - 2010-11-20 13:33 - 00366976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
    2016-03-01 13:04 - 2010-11-20 13:33 - 00289664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
    2016-03-01 13:04 - 2010-11-20 13:33 - 00263040 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
    2016-03-01 13:04 - 2010-11-20 13:33 - 00189824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
    2016-03-01 13:04 - 2010-11-20 13:33 - 00184704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
    2016-03-01 13:04 - 2010-11-20 13:33 - 00171392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys
    2016-03-01 13:04 - 2010-11-20 13:33 - 00152960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
    2016-03-01 13:04 - 2010-11-20 13:33 - 00140672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys
    2016-03-01 13:04 - 2010-11-20 13:33 - 00103808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys
    2016-03-01 13:04 - 2010-11-20 13:33 - 00095616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
    2016-03-01 13:04 - 2010-11-20 13:33 - 00078720 _____ (Hewlett-Packard Company) C:\Windows\system32\Drivers\HpSAMD.sys
    2016-03-01 13:04 - 2010-11-20 13:33 - 00075136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
    2016-03-01 13:04 - 2010-11-20 13:33 - 00063360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys
    2016-03-01 13:04 - 2010-11-20 13:33 - 00031104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys
    2016-03-01 13:04 - 2010-11-20 13:33 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
    2016-03-01 13:04 - 2010-11-20 13:32 - 00334208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
    2016-03-01 13:04 - 2010-11-20 13:32 - 00179072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
    2016-03-01 13:04 - 2010-11-20 13:32 - 00112000 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
    2016-03-01 13:04 - 2010-11-20 13:32 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
    2016-03-01 13:04 - 2010-11-20 13:29 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
    2016-03-01 13:04 - 2010-11-20 13:28 - 00780008 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
    2016-03-01 13:04 - 2010-11-20 13:28 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
    2016-03-01 13:04 - 2010-11-20 13:28 - 00298104 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
    2016-03-01 13:04 - 2010-11-20 13:28 - 00223248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
    2016-03-01 13:04 - 2010-11-20 13:28 - 00166784 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 03211776 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 02262528 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 02250752 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 02193920 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 02072576 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 01808384 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 01689600 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 01363968 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 01243136 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
    2016-03-01 13:04 - 2010-11-20 13:27 - 01158656 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 01082880 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 01050624 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 01024512 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00933888 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00799744 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00691200 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00633344 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00605696 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00418816 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00253440 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
    2016-03-01 13:04 - 2010-11-20 13:27 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL
    2016-03-01 13:04 - 2010-11-20 13:27 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
    2016-03-01 13:04 - 2010-11-20 13:27 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 02746880 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 01457664 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00934912 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00551936 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
    2016-03-01 13:04 - 2010-11-20 13:26 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00403968 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
    2016-03-01 13:04 - 2010-11-20 13:26 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00116224 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\fms.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll
    2016-03-01 13:04 - 2010-11-20 13:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll
    2016-03-01 13:04 - 2010-11-20 13:25 - 01264640 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
    2016-03-01 13:04 - 2010-11-20 13:25 - 00974336 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe
    2016-03-01 13:04 - 2010-11-20 13:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll
    2016-03-01 13:04 - 2010-11-20 13:25 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
    2016-03-01 13:04 - 2010-11-20 13:25 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
    2016-03-01 13:04 - 2010-11-20 13:25 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
    2016-03-01 13:04 - 2010-11-20 13:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll
    2016-03-01 13:04 - 2010-11-20 13:25 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
    2016-03-01 13:04 - 2010-11-20 13:25 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
    2016-03-01 13:04 - 2010-11-20 13:25 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
    2016-03-01 13:04 - 2010-11-20 13:25 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
    2016-03-01 13:04 - 2010-11-20 13:25 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
    2016-03-01 13:04 - 2010-11-20 13:25 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
    2016-03-01 13:04 - 2010-11-20 13:25 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
    2016-03-01 13:04 - 2010-11-20 13:25 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll
    2016-03-01 13:04 - 2010-11-20 13:25 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
    2016-03-01 13:04 - 2010-11-20 13:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
    2016-03-01 13:04 - 2010-11-20 13:25 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe
    2016-03-01 13:04 - 2010-11-20 13:25 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
    2016-03-01 13:04 - 2010-11-20 13:25 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll
    2016-03-01 13:04 - 2010-11-20 13:25 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
    2016-03-01 13:04 - 2010-11-20 13:25 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
    2016-03-01 13:04 - 2010-11-20 13:25 - 00128000 _____ (Microsoft) C:\Windows\system32\Robocopy.exe
    2016-03-01 13:04 - 2010-11-20 13:25 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe
    2016-03-01 13:04 - 2010-11-20 13:25 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
    2016-03-01 13:04 - 2010-11-20 13:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
    2016-03-01 13:04 - 2010-11-20 13:24 - 01538560 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2016-03-01 13:04 - 2010-11-20 13:24 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
    2016-03-01 13:04 - 2010-11-20 13:24 - 00793088 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
    2016-03-01 13:04 - 2010-11-20 13:24 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
    2016-03-01 13:04 - 2010-11-20 13:24 - 00763904 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
    2016-03-01 13:04 - 2010-11-20 13:24 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
    2016-03-01 13:04 - 2010-11-20 13:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe
    2016-03-01 13:04 - 2010-11-20 13:24 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl
    2016-03-01 13:04 - 2010-11-20 13:24 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
    2016-03-01 13:04 - 2010-11-20 13:24 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
    2016-03-01 13:04 - 2010-11-20 13:24 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
    2016-03-01 13:04 - 2010-11-20 13:24 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
    2016-03-01 13:04 - 2010-11-20 13:24 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe
    2016-03-01 13:04 - 2010-11-20 13:24 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
    2016-03-01 13:04 - 2010-11-20 13:24 - 00300032 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe
    2016-03-01 13:04 - 2010-11-20 13:24 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax
    2016-03-01 13:04 - 2010-11-20 13:24 - 00272896 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
    2016-03-01 13:04 - 2010-11-20 13:24 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
    2016-03-01 13:04 - 2010-11-20 13:24 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv
    2016-03-01 13:04 - 2010-11-20 13:24 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
    2016-03-01 13:04 - 2010-11-20 13:24 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe
    2016-03-01 13:04 - 2010-11-20 12:55 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
    2016-03-01 13:04 - 2010-11-20 12:51 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
    2016-03-01 13:04 - 2010-11-20 12:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\basecsp.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncCenter.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsservices.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPEncEn.dll
     
  11. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    2016-03-01 13:04 - 2010-11-20 12:21 - 01175040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00850432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webservices.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqlsrv32.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00626176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlangpui.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxs.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpeffects.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shlwapi.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSATAPI.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsvcs.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskcomp.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srchadmin.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scansetting.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00224256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpipcfg.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spp.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\regapi.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
    2016-03-01 13:04 - 2010-11-20 12:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samcli.dll
    2016-03-01 13:04 - 2010-11-20 12:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVCORE.DLL
    2016-03-01 13:04 - 2010-11-20 12:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
    2016-03-01 13:04 - 2010-11-20 12:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pnidui.dll
    2016-03-01 13:04 - 2010-11-20 12:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pla.dll
    2016-03-01 13:04 - 2010-11-20 12:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
    2016-03-01 13:04 - 2010-11-20 12:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
    2016-03-01 13:04 - 2010-11-20 12:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NaturalLanguage6.dll
    2016-03-01 13:04 - 2010-11-20 12:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceApi.dll
    2016-03-01 13:04 - 2010-11-20 12:20 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
    2016-03-01 13:04 - 2010-11-20 12:20 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
    2016-03-01 13:04 - 2010-11-20 12:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercpl.dll
    2016-03-01 13:04 - 2010-11-20 12:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netdiagfx.dll
    2016-03-01 13:04 - 2010-11-20 12:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\onex.dll
    2016-03-01 13:04 - 2010-11-20 12:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL
    2016-03-01 13:04 - 2010-11-20 12:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll
    2016-03-01 13:04 - 2010-11-20 12:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
    2016-03-01 13:04 - 2010-11-20 12:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prncache.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 02341376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 01163264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00830464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
    2016-03-01 13:04 - 2010-11-20 12:19 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2fs.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00716800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ipsmsnap.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00257024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00232448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedynos.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedyn.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msutb.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fde.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IPHLPAPI.DLL
    2016-03-01 13:04 - 2010-11-20 12:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hbaapi.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mimefilt.dll
    2016-03-01 13:04 - 2010-11-20 12:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msasn1.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 01792000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certmgr.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroles.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuxiliaryDisplayCpl.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXPTaskRingtone.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00508416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00252928 _____ (Microsoft) C:\Windows\SysWOW64\DShowRdpFilter.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00222208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
    2016-03-01 13:04 - 2010-11-20 12:18 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
    2016-03-01 13:04 - 2010-11-20 12:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
    2016-03-01 13:04 - 2010-11-20 12:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
    2016-03-01 13:04 - 2010-11-20 12:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe
    2016-03-01 13:04 - 2010-11-20 12:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe
    2016-03-01 13:04 - 2010-11-20 12:17 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
    2016-03-01 13:04 - 2010-11-20 12:17 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
    2016-03-01 13:04 - 2010-11-20 12:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\net1.exe
    2016-03-01 13:04 - 2010-11-20 12:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\proquota.exe
    2016-03-01 13:04 - 2010-11-20 12:16 - 01466368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2016-03-01 13:04 - 2010-11-20 12:16 - 00905216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmsys.cpl
    2016-03-01 13:04 - 2010-11-20 12:16 - 00776192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe
    2016-03-01 13:04 - 2010-11-20 12:16 - 00679424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe
    2016-03-01 13:04 - 2010-11-20 12:16 - 00668160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
    2016-03-01 13:04 - 2010-11-20 12:16 - 00658944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe
    2016-03-01 13:04 - 2010-11-20 12:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
    2016-03-01 13:04 - 2010-11-20 12:08 - 00837632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
    2016-03-01 13:04 - 2010-11-20 12:08 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
    2016-03-01 13:04 - 2010-11-20 12:08 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
    2016-03-01 13:04 - 2010-11-20 11:04 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
    2016-03-01 13:04 - 2010-11-20 10:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys
    2016-03-01 13:04 - 2010-11-20 10:52 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys
    2016-03-01 13:04 - 2010-11-20 10:52 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\raspptp.sys
    2016-03-01 13:04 - 2010-11-20 10:52 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
    2016-03-01 13:04 - 2010-11-20 10:52 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipfltdrv.sys
    2016-03-01 13:04 - 2010-11-20 10:44 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
    2016-03-01 13:04 - 2010-11-20 10:44 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys
    2016-03-01 13:04 - 2010-11-20 10:44 - 00184960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
    2016-03-01 13:04 - 2010-11-20 10:44 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
    2016-03-01 13:04 - 2010-11-20 10:43 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
    2016-03-01 13:04 - 2010-11-20 10:43 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winusb.sys
    2016-03-01 13:04 - 2010-11-20 10:33 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
    2016-03-01 13:04 - 2010-11-20 09:49 - 00367104 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
    2016-03-01 13:04 - 2010-11-20 09:27 - 00309248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
    2016-03-01 13:04 - 2010-11-20 09:27 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
    2016-03-01 13:04 - 2010-11-20 09:26 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
    2016-03-01 13:04 - 2010-11-20 09:26 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
    2016-03-01 13:04 - 2010-11-20 09:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
    2016-03-01 13:04 - 2010-11-20 09:26 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
    2016-03-01 13:04 - 2010-11-05 01:58 - 00155472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
    2016-03-01 13:04 - 2010-11-05 01:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
    2016-03-01 13:04 - 2010-11-05 01:57 - 00154960 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
    2016-03-01 13:03 - 2010-11-20 13:44 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL
    2016-03-01 13:03 - 2010-11-20 13:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL
    2016-03-01 13:03 - 2010-11-20 13:33 - 00288640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
    2016-03-01 13:03 - 2010-11-20 13:33 - 00213888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
    2016-03-01 13:03 - 2010-11-20 13:33 - 00155008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys
    2016-03-01 13:03 - 2010-11-20 13:33 - 00094592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
    2016-03-01 13:03 - 2010-11-20 13:33 - 00014720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys
    2016-03-01 13:03 - 2010-11-20 13:32 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll
    2016-03-01 13:03 - 2010-11-20 13:32 - 00155520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
    2016-03-01 13:03 - 2010-11-20 13:27 - 02146816 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 01911808 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 01672704 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
    2016-03-01 13:03 - 2010-11-20 13:27 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
    2016-03-01 13:03 - 2010-11-20 13:27 - 00898560 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00812032 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00781312 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00681472 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
    2016-03-01 13:03 - 2010-11-20 13:27 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00636416 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00594432 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00527872 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00451072 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00435712 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00431104 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00403968 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00344576 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00300032 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00290304 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
    2016-03-01 13:03 - 2010-11-20 13:27 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00221696 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
    2016-03-01 13:03 - 2010-11-20 13:27 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\QCLIPROV.DLL
    2016-03-01 13:03 - 2010-11-20 13:27 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\msdmo.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
    2016-03-01 13:03 - 2010-11-20 13:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 01087488 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00861184 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00623104 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00573952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00240640 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\KMSVC.DLL
    2016-03-01 13:03 - 2010-11-20 13:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll
    2016-03-01 13:03 - 2010-11-20 13:26 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\HotStartUserAgent.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 03745792 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 03524608 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 01065984 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00840192 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00749568 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00549888 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00472064 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\amstream.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\CertPolEng.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\takeown.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
    2016-03-01 13:03 - 2010-11-20 13:25 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\BWUnpairElevated.dll
    2016-03-01 13:03 - 2010-11-20 13:25 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00899584 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr
    2016-03-01 13:03 - 2010-11-20 13:24 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl
    2016-03-01 13:03 - 2010-11-20 13:24 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
     
  12. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    2016-03-01 13:03 - 2010-11-20 13:24 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl
    2016-03-01 13:03 - 2010-11-20 13:24 - 00474112 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
    2016-03-01 13:03 - 2010-11-20 13:24 - 00373248 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl
    2016-03-01 13:03 - 2010-11-20 13:24 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl
    2016-03-01 13:03 - 2010-11-20 13:24 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr
    2016-03-01 13:03 - 2010-11-20 13:24 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
    2016-03-01 13:03 - 2010-11-20 13:24 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
    2016-03-01 13:03 - 2010-11-20 13:24 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr
    2016-03-01 13:03 - 2010-11-20 13:24 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr
    2016-03-01 13:03 - 2010-11-20 13:24 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax
    2016-03-01 13:03 - 2010-11-20 13:24 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
    2016-03-01 13:03 - 2010-11-20 13:24 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\iscsicli.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax
    2016-03-01 13:03 - 2010-11-20 13:24 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\desk.cpl
    2016-03-01 13:03 - 2010-11-20 13:24 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
    2016-03-01 13:03 - 2010-11-20 13:24 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax
    2016-03-01 13:03 - 2010-11-20 13:24 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax
    2016-03-01 13:03 - 2010-11-20 13:24 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\mobsync.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax
    2016-03-01 13:03 - 2010-11-20 13:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\cmstp.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax
    2016-03-01 13:03 - 2010-11-20 13:24 - 00071168 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax
    2016-03-01 13:03 - 2010-11-20 13:24 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\djoin.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\g711codc.ax
    2016-03-01 13:03 - 2010-11-20 13:24 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
    2016-03-01 13:03 - 2010-11-20 13:24 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\vbisurf.ax
    2016-03-01 13:03 - 2010-11-20 13:02 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
    2016-03-01 13:03 - 2010-11-20 12:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NAPHLPR.DLL
    2016-03-01 13:03 - 2010-11-20 12:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NAPCRYPT.DLL
    2016-03-01 13:03 - 2010-11-20 12:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsCpl.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanpref.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMNetMgr.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Vault.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00902656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
    2016-03-01 13:03 - 2010-11-20 12:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
    2016-03-01 13:03 - 2010-11-20 12:21 - 00738816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00616960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
    2016-03-01 13:03 - 2010-11-20 12:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmdev.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\riched20.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00436736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmnet.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shwebsvc.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiadefui.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00410624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanui.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00372224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\termmgr.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizeng.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDSp.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\raschap.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqlcese30.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00307712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpdxm.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tapisrv.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00229376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wavemsp.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdwcn.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcomapi.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpsrcwp.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasppp.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scecli.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vdsbas.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\syncui.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remotepg.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twext.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxlib.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiavideo.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShServiceObj.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpshell.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppinst.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srvcli.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QUTIL.DLL
    2016-03-01 13:03 - 2010-11-20 12:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserAccountControlSettings.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdmat.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vfwwdm32.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpd3d.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsnmp32.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wkscli.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RpcRtRemote.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wtsapi32.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtutils.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\utildll.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vpnikeapi.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sisbkup.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll
    2016-03-01 13:03 - 2010-11-20 12:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsbyuv.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\networkmap.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\networkexplorer.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcenter.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpcServices.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\onexui.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OobeFldr.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00656384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PerfCenterCPL.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceStatus.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnfldr.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshipsec.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\photowiz.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00283136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdv.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OnLineIDCpl.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qcap.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceSyncProvider.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetapi.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QAGENT.DLL
    2016-03-01 13:03 - 2010-11-20 12:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\provsvc.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netjoin.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00153088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mydocs.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prntvpt.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netid.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL
    2016-03-01 13:03 - 2010-11-20 12:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nci.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olethk32.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QCLIPROV.DLL
    2016-03-01 13:03 - 2010-11-20 12:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntlanman.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptui.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
    2016-03-01 13:03 - 2010-11-20 12:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdhui.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00856576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallControlPanel.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontext.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00592384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00429056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\localsec.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxclu.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hgcpl.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtrmgr.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprddm.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MediaMetadataHandler.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAC3ENC.DLL
    2016-03-01 13:03 - 2010-11-20 12:19 - 00219648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iTVData.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
    2016-03-01 13:03 - 2010-11-20 12:19 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstask.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasrad.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprapi.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00148992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ifsutil.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logoncli.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasrecst.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvfw32.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fphc.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00096256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00093696 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\SysWOW64\fms.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciavi32.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasacct.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdeploy.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iyuv_32.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\httpapi.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvidc32.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsium.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msyuv.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lsmproxy.dll
    2016-03-01 13:03 - 2010-11-20 12:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrle32.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 03727872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\accessibilitycpl.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 01400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DxpTaskSync.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 01040384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 01003520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00744448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00743424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00740864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\batmeter.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00685056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsuiext.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00537600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenterCPL.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00484864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceCenter.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00402944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00333824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3ui.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroleui.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00257024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpx.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\audiodev.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00242176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\defaultlocationcpl.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00211456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairingFolder.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxdiagn.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00205312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efscore.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\activeds.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dskquoui.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsldp.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoplay.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabview.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EhStorAPI.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00115200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3msm.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscmmc.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\avifil32.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3cfg.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\amstream.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cca.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\acppage.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscapi.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzSqlExt.dll
    2016-03-01 13:03 - 2010-11-20 12:18 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
    2016-03-01 13:03 - 2010-11-20 12:17 - 00586752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfrgui.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimserv.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eudcedit.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00276480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskraid.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sethc.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskmgr.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PkgMgr.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetup.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfmon.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00144896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsicli.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskpart.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00098816 _____ (Microsoft) C:\Windows\SysWOW64\Robocopy.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nslookup.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logagent.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\isoburn.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmstp.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MuiUnattend.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w32tm.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\takeown.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\runonce.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzutil.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ftp.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userinit.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiougc.exe
    2016-03-01 13:03 - 2010-11-20 12:17 - 00024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
    2016-03-01 13:03 - 2010-11-20 12:16 - 00878592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Bubbles.scr
    2016-03-01 13:03 - 2010-11-20 12:16 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl
    2016-03-01 13:03 - 2010-11-20 12:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appwiz.cpl
    2016-03-01 13:03 - 2010-11-20 12:16 - 00516096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\main.cpl
    2016-03-01 13:03 - 2010-11-20 12:16 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
    2016-03-01 13:03 - 2010-11-20 12:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoScreensaver.scr
    2016-03-01 13:03 - 2010-11-20 12:16 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
    2016-03-01 13:03 - 2010-11-20 12:16 - 00345088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl
    2016-03-01 13:03 - 2010-11-20 12:16 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysdm.cpl
    2016-03-01 13:03 - 2010-11-20 12:16 - 00293888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ssText3d.scr
    2016-03-01 13:03 - 2010-11-20 12:16 - 00281088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdm.tsp
    2016-03-01 13:03 - 2010-11-20 12:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mystify.scr
    2016-03-01 13:03 - 2010-11-20 12:16 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Ribbons.scr
    2016-03-01 13:03 - 2010-11-20 12:16 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSNP.ax
    2016-03-01 13:03 - 2010-11-20 12:16 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
    2016-03-01 13:03 - 2010-11-20 12:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
    2016-03-01 13:03 - 2010-11-20 12:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bitsadmin.exe
    2016-03-01 13:03 - 2010-11-20 12:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdmaud.drv
    2016-03-01 13:03 - 2010-11-20 12:16 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VBICodec.ax
    2016-03-01 13:03 - 2010-11-20 12:16 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl
    2016-03-01 13:03 - 2010-11-20 12:16 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\desk.cpl
    2016-03-01 13:03 - 2010-11-20 12:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Kswdmcap.ax
    2016-03-01 13:03 - 2010-11-20 12:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kstvtune.ax
    2016-03-01 13:03 - 2010-11-20 12:16 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
    2016-03-01 13:03 - 2010-11-20 12:16 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mpeg2Data.ax
    2016-03-01 13:03 - 2010-11-20 12:16 - 00068608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSTPager.ax
    2016-03-01 13:03 - 2010-11-20 12:08 - 00663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
    2016-03-01 13:03 - 2010-11-20 12:08 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
    2016-03-01 13:03 - 2010-11-20 12:08 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
    2016-03-01 13:03 - 2010-11-20 11:04 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
    2016-03-01 13:03 - 2010-11-20 10:52 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
    2016-03-01 13:03 - 2010-11-20 10:52 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
    2016-03-01 13:03 - 2010-11-20 10:51 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
    2016-03-01 13:03 - 2010-11-20 10:50 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndisuio.sys
    2016-03-01 13:03 - 2010-11-20 10:49 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
    2016-03-01 13:03 - 2010-11-20 10:44 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
    2016-03-01 13:03 - 2010-11-20 10:44 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
    2016-03-01 13:03 - 2010-11-20 10:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umbus.sys
    2016-03-01 13:03 - 2010-11-20 10:43 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
    2016-03-01 13:03 - 2010-11-20 09:49 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
    2016-03-01 13:03 - 2010-11-20 09:06 - 00294400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
    2016-03-01 13:03 - 2010-11-05 02:11 - 00433512 _____ (Microsoft Corporation) C:\Windows\system32\MCEWMDRMNDBootstrap.dll
    2016-03-01 13:03 - 2010-11-05 02:11 - 00312168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCEWMDRMNDBootstrap.dll
    2016-03-01 13:03 - 2010-11-05 01:58 - 00080720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 01080320 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\napdsnap.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\shgina.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\TRAPI.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\wshirda.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\riched32.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\rdpcfgex.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
    2016-03-01 13:02 - 2010-11-20 13:27 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
    2016-03-01 13:02 - 2010-11-20 13:27 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
     
  13. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    2016-03-01 13:02 - 2010-11-20 13:26 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll
    2016-03-01 13:02 - 2010-11-20 13:26 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
    2016-03-01 13:02 - 2010-11-20 13:26 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
    2016-03-01 13:02 - 2010-11-20 13:26 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll
    2016-03-01 13:02 - 2010-11-20 13:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\luainstall.dll
    2016-03-01 13:02 - 2010-11-20 13:26 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\FXSMON.dll
    2016-03-01 13:02 - 2010-11-20 13:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz32.dll
    2016-03-01 13:02 - 2010-11-20 13:26 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dsauth.dll
    2016-03-01 13:02 - 2010-11-20 13:26 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll
    2016-03-01 13:02 - 2010-11-20 13:25 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\repair-bde.exe
    2016-03-01 13:02 - 2010-11-20 13:25 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
    2016-03-01 13:02 - 2010-11-20 13:25 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
    2016-03-01 13:02 - 2010-11-20 13:25 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll
    2016-03-01 13:02 - 2010-11-20 13:25 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll
    2016-03-01 13:02 - 2010-11-20 13:25 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll
    2016-03-01 13:02 - 2010-11-20 13:25 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL
    2016-03-01 13:02 - 2010-11-20 13:24 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
    2016-03-01 13:02 - 2010-11-20 13:24 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe
    2016-03-01 13:02 - 2010-11-20 13:24 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\choice.exe
    2016-03-01 13:02 - 2010-11-20 13:24 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\LogonUI.exe
    2016-03-01 13:02 - 2010-11-20 13:24 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\FXSUNATD.exe
    2016-03-01 13:02 - 2010-11-20 13:24 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
    2016-03-01 13:02 - 2010-11-20 13:24 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
    2016-03-01 13:02 - 2010-11-20 13:16 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
    2016-03-01 13:02 - 2010-11-20 13:15 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
    2016-03-01 13:02 - 2010-11-20 13:15 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
    2016-03-01 13:02 - 2010-11-20 13:14 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll
    2016-03-01 13:02 - 2010-11-20 13:13 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\RDPENCDD.dll
    2016-03-01 13:02 - 2010-11-20 13:13 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
    2016-03-01 13:02 - 2010-11-20 13:12 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\pifmgr.dll
    2016-03-01 13:02 - 2010-11-20 13:02 - 00457216 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
    2016-03-01 13:02 - 2010-11-20 13:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUQ.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUF.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDSG.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\kbdlk41a.dll
    2016-03-01 13:02 - 2010-11-20 13:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDGKL.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ1.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDSF.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDPO.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDNEPR.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR1.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDUS.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR1.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTURME.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAJIK.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDMON.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAORI.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT1.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBULG.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBLR.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
    2016-03-01 13:02 - 2010-11-20 13:02 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGEO.DLL
    2016-03-01 13:02 - 2010-11-20 12:58 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll
    2016-03-01 13:02 - 2010-11-20 12:54 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\BlbEvents.dll
    2016-03-01 13:02 - 2010-11-20 12:51 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpps.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimgvw.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsdchngr.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TRAPI.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdprefdrvapi.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shgina.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spopk.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schedcli.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\syssetup.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshirda.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shunimpl.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\riched32.dll
    2016-03-01 13:02 - 2010-11-20 12:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
    2016-03-01 13:02 - 2010-11-20 12:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
    2016-03-01 13:02 - 2010-11-20 12:20 - 00121344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
    2016-03-01 13:02 - 2010-11-20 12:20 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\napdsnap.dll
    2016-03-01 13:02 - 2010-11-20 12:20 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
    2016-03-01 13:02 - 2010-11-20 12:20 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
    2016-03-01 13:02 - 2010-11-20 12:20 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netutils.dll
    2016-03-01 13:02 - 2010-11-20 12:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfts.dll
    2016-03-01 13:02 - 2010-11-20 12:20 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
    2016-03-01 13:02 - 2010-11-20 12:19 - 00082944 _____ (Radius Inc.) C:\Windows\SysWOW64\iccvid.dll
    2016-03-01 13:02 - 2010-11-20 12:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetmib1.dll
    2016-03-01 13:02 - 2010-11-20 12:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\luainstall.dll
    2016-03-01 13:02 - 2010-11-20 12:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciqtz32.dll
    2016-03-01 13:02 - 2010-11-20 12:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdmo.dll
    2016-03-01 13:02 - 2010-11-20 12:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\muifontsetup.dll
    2016-03-01 13:02 - 2010-11-20 12:18 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
    2016-03-01 13:02 - 2010-11-20 12:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabinet.dll
    2016-03-01 13:02 - 2010-11-20 12:18 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertPolEng.dll
    2016-03-01 13:02 - 2010-11-20 12:18 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
    2016-03-01 13:02 - 2010-11-20 12:18 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
    2016-03-01 13:02 - 2010-11-20 12:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsauth.dll
    2016-03-01 13:02 - 2010-11-20 12:18 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscdll.dll
    2016-03-01 13:02 - 2010-11-20 12:18 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elsTrans.dll
    2016-03-01 13:02 - 2010-11-20 12:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bitsperf.dll
    2016-03-01 13:02 - 2010-11-20 12:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_ISCII.DLL
    2016-03-01 13:02 - 2010-11-20 12:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browseui.dll
    2016-03-01 13:02 - 2010-11-20 12:17 - 00280064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
    2016-03-01 13:02 - 2010-11-20 12:17 - 00278016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
    2016-03-01 13:02 - 2010-11-20 12:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mobsync.exe
    2016-03-01 13:02 - 2010-11-20 12:17 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findstr.exe
    2016-03-01 13:02 - 2010-11-20 12:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unlodctr.exe
    2016-03-01 13:02 - 2010-11-20 12:17 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
    2016-03-01 13:02 - 2010-11-20 12:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
    2016-03-01 13:02 - 2010-11-20 12:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
    2016-03-01 13:02 - 2010-11-20 12:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
    2016-03-01 13:02 - 2010-11-20 12:17 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
    2016-03-01 13:02 - 2010-11-20 12:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSDvbNP.ax
    2016-03-01 13:02 - 2010-11-20 12:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksxbar.ax
    2016-03-01 13:02 - 2010-11-20 12:16 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\g711codc.ax
    2016-03-01 13:02 - 2010-11-20 12:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbisurf.ax
    2016-03-01 13:02 - 2010-11-20 12:08 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00119808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imm32.dll
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTUQ.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTUF.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDSG.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdlk41a.dll
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDGR1.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDGKL.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDCZ1.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDSF.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDPO.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDNEPR.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINTAM.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINORI.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINMAR.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINKAN.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINHIN.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINBEN.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDUS.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDUGHR1.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTURME.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAJIK.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDMON.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDMAORI.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDLT1.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINTEL.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDGEO.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBULG.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBLR.DLL
    2016-03-01 13:02 - 2010-11-20 12:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
    2016-03-01 13:02 - 2010-11-20 12:07 - 01164800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
    2016-03-01 13:02 - 2010-11-20 12:07 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizres.dll
    2016-03-01 13:02 - 2010-11-20 12:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
    2016-03-01 13:02 - 2010-11-20 12:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
    2016-03-01 13:02 - 2010-11-20 12:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pifmgr.dll
    2016-03-01 13:02 - 2010-11-20 12:00 - 01027584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10.IME
    2016-03-01 13:02 - 2010-11-20 12:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imkr80.ime
    2016-03-01 13:02 - 2010-11-20 11:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnaddr.dll
    2016-03-01 13:02 - 2010-11-20 11:37 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbrpm.sys
    2016-03-01 13:02 - 2010-11-20 11:34 - 00482816 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
    2016-03-01 13:02 - 2010-11-20 10:51 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
    2016-03-01 13:02 - 2010-11-20 10:49 - 00386048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
    2016-03-01 13:02 - 2010-11-20 10:44 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys
    2016-03-01 13:02 - 2010-11-20 10:43 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
    2016-03-01 13:02 - 2010-11-20 10:43 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
    2016-03-01 13:02 - 2010-11-20 10:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
    2016-03-01 13:02 - 2010-11-20 10:42 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
    2016-03-01 13:02 - 2010-11-20 10:34 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
    2016-03-01 13:02 - 2010-11-20 10:33 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CompositeBus.sys
    2016-03-01 13:02 - 2010-11-20 10:33 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
    2016-03-01 13:02 - 2010-11-20 10:14 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
    2016-03-01 13:02 - 2010-11-20 10:09 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys
    2016-03-01 13:02 - 2010-11-20 10:04 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
    2016-03-01 13:02 - 2010-11-20 09:30 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpipmi.sys
    2016-03-01 13:02 - 2010-11-20 09:26 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
    2016-03-01 13:02 - 2010-11-20 09:22 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdi.sys
    2016-03-01 13:02 - 2010-11-20 09:19 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys
    2016-03-01 13:02 - 2010-11-10 01:48 - 00010429 _____ C:\Windows\system32\ScavengeSpace.xml
    2016-03-01 13:02 - 2010-11-05 02:20 - 00105559 _____ C:\Windows\SysWOW64\RacRules.xml
    2016-03-01 13:02 - 2010-11-05 02:20 - 00105559 _____ C:\Windows\system32\RacRules.xml
    2016-03-01 13:01 - 2010-11-20 13:26 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll
    2016-03-01 13:01 - 2010-11-20 12:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdscore.dll
    2016-03-01 13:01 - 2009-06-10 21:39 - 00001041 _____ C:\Windows\SysWOW64\tcpbidi.xml
    2016-03-01 13:00 - 2010-11-20 12:21 - 00363008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wbemcomn.dll
    2016-03-01 12:53 - 2010-11-20 13:27 - 00529408 _____ (Microsoft Corporation) C:\Windows\system32\wbemcomn.dll
    2016-03-01 12:35 - 2016-03-01 12:35 - 00001755 _____ C:\Users\Public\Desktop\iTunes.lnk
    2016-03-01 12:35 - 2016-03-01 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
    2016-03-01 12:33 - 2016-03-01 12:34 - 00000000 ____D C:\Program Files\iTunes
    2016-03-01 12:33 - 2016-03-01 12:34 - 00000000 ____D C:\Program Files (x86)\iTunes
    2016-03-01 12:33 - 2016-03-01 12:33 - 00000000 ____D C:\Program Files\iPod
    2016-03-01 06:28 - 2016-03-12 09:49 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit
    2016-02-29 22:34 - 2016-02-29 22:34 - 00262144 _____ C:\Windows\system32\config\userdiff
    2016-02-29 22:34 - 2009-08-12 07:09 - 00000024 ___RH C:\Windows\DELL_version
    2016-02-29 19:31 - 2016-02-29 19:31 - 00000962 _____ C:\Users\Tingler\Desktop\Vuze Leap.lnk
    2016-02-29 19:20 - 2016-03-12 17:54 - 00000000 ____D C:\Users\Tingler\AppData\Local\Deployment
    2016-02-29 16:20 - 2016-02-29 16:24 - 00000000 ____D C:\Windows\system32\MRT
    2016-02-29 16:20 - 2016-02-29 16:20 - 146614896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2016-02-29 16:18 - 2011-04-09 07:02 - 05562240 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2016-02-29 16:18 - 2011-04-09 06:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
    2016-02-29 16:18 - 2011-04-09 06:02 - 03967872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
    2016-02-29 16:18 - 2011-04-09 06:02 - 03912576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
    2016-02-29 16:18 - 2011-04-09 05:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
    2016-02-29 15:36 - 2016-02-23 18:28 - 00552880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswCCED.tmp
    2016-02-29 15:36 - 2016-02-23 18:28 - 00463744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswCD70.tmp
    2016-02-29 15:36 - 2016-02-21 14:22 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswCCFD.tmp
    2016-02-29 15:36 - 2016-02-21 14:20 - 00287016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswCD91.tmp
    2016-02-29 15:36 - 2016-02-21 14:20 - 00165344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswCDA1.tmp
    2016-02-29 15:36 - 2016-02-21 14:20 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswCD4F.tmp
    2016-02-29 15:36 - 2016-02-21 14:20 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswCD2E.tmp
    2016-02-29 15:36 - 2016-02-21 14:20 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswCD60.tmp
    2016-02-29 15:36 - 2016-02-21 14:20 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswCD3F.tmp
    2016-02-29 15:36 - 2016-02-21 14:19 - 01065720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswCD0E.tmp
    2016-02-29 15:20 - 2016-03-05 17:47 - 00057560 _____ C:\Users\Tingler\AppData\Local\GDIPFONTCACHEV1.DAT
    2016-02-29 15:12 - 2016-03-03 09:56 - 00000000 ____D C:\Windows\Minidump
    2016-02-29 15:05 - 2016-02-29 15:05 - 00000000 ____D C:\Users\Default\AppData\Roaming\AVAST Software
    2016-02-29 15:05 - 2016-02-29 15:05 - 00000000 ____D C:\Users\Default User\AppData\Roaming\AVAST Software
    2016-02-29 15:01 - 2016-02-29 15:01 - 00001445 _____ C:\Users\Tingler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
     
  14. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    2016-02-29 15:00 - 2016-02-29 15:00 - 00000020 ___SH C:\Users\Tingler\ntuser.ini
    2016-02-29 14:51 - 2016-02-29 14:51 - 00022744 _____ C:\Windows\system32\emptyregdb.dat
    2016-02-29 14:39 - 2016-03-12 21:15 - 00000000 ____D C:\Users\Tingler
    2016-02-29 14:39 - 2016-02-29 14:39 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
    2016-02-29 14:39 - 2016-02-29 14:39 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
    2016-02-29 14:39 - 2016-02-29 14:39 - 00000000 _SHDL C:\Users\Tingler\My Documents
    2016-02-29 14:39 - 2016-02-29 14:39 - 00000000 _SHDL C:\Users\Tingler\Documents\My Videos
    2016-02-29 14:39 - 2016-02-29 14:39 - 00000000 _SHDL C:\Users\Tingler\Documents\My Pictures
    2016-02-29 14:39 - 2016-02-29 14:39 - 00000000 _SHDL C:\Users\Tingler\Documents\My Music
    2016-02-29 14:39 - 2009-07-14 07:44 - 00000000 ____D C:\Users\Tingler\AppData\Roaming\Media Center Programs
    2016-02-29 14:37 - 2016-02-29 14:37 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
    2016-02-29 14:37 - 2016-02-29 14:37 - 00000000 ____D C:\Windows\system32\SRSLabs
    2016-02-29 14:37 - 2009-06-29 12:44 - 12151808 _____ (IDT, Inc.) C:\Windows\system32\idtcpl64.cpl
    2016-02-29 14:37 - 2009-06-29 12:44 - 03593216 _____ (IDT, Inc.) C:\Windows\system32\stlang64.dll
    2016-02-29 14:37 - 2009-06-29 12:44 - 00564224 _____ (IDT, Inc.) C:\Windows\system32\idt64mp1.exe
    2016-02-29 14:37 - 2009-05-12 14:28 - 00057856 _____ (Creative Technology Ltd.) C:\Windows\system32\ctppld64.dll
    2016-02-29 14:37 - 2009-05-12 14:27 - 00652288 _____ (Creative Technology Ltd.) C:\Windows\system32\ctapo64.dll
    2016-02-29 14:37 - 2009-05-12 14:25 - 00511488 _____ (Creative Technology Ltd.) C:\Windows\system32\ctapo32.dll
    2016-02-29 14:37 - 2009-03-02 12:59 - 00165888 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTAC64.dll
    2016-02-29 14:37 - 2009-03-02 12:58 - 00068608 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTAR64.dll
    2016-02-29 14:37 - 2009-03-02 12:47 - 00090624 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTCo64.dll
    2016-02-29 14:37 - 2009-03-02 12:08 - 00431104 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTEC64.dll
    2016-02-29 13:17 - 2016-02-29 13:17 - 00000000 ____D C:\NPE
    2016-02-29 13:15 - 2016-02-29 14:47 - 00000000 ____D C:\Users\Tingler\AppData\Local\NPE
    2016-02-29 13:15 - 2016-02-29 14:43 - 00000000 ____D C:\ProgramData\Norton
    2016-02-29 09:14 - 2016-02-29 09:14 - 00000929 _____ C:\Windows\SysWOW64\${LOGFILE}
    2016-02-29 05:24 - 2016-02-29 14:47 - 00000000 ____D C:\Users\Tingler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
    2016-02-29 05:24 - 2016-02-29 14:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
    2016-02-29 05:24 - 2016-02-29 10:19 - 00001116 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
    2016-02-29 05:23 - 2016-02-29 14:42 - 00000000 ____D C:\Program Files\WinRAR
    2016-02-28 21:25 - 2016-02-29 14:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® Matrix Storage Manager
    2016-02-28 21:25 - 2016-02-29 14:42 - 00000000 ____D C:\Program Files (x86)\Intel
    2016-02-28 21:25 - 2009-06-04 18:54 - 00408600 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStor.sys
    2016-02-28 19:02 - 2016-03-04 11:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
    2016-02-28 19:02 - 2009-06-29 12:44 - 01431040 _____ (IDT, Inc.) C:\Windows\system32\stapo64.dll
    2016-02-28 19:02 - 2009-06-29 12:44 - 00598016 ____N (IDT, Inc.) C:\Windows\system32\stapi64.dll
    2016-02-28 19:02 - 2009-06-29 12:44 - 00487424 _____ (IDT, Inc.) C:\Windows\system32\Drivers\stwrt64.sys
    2016-02-28 19:02 - 2009-06-29 12:44 - 00431616 _____ (IDT, Inc.) C:\Windows\system32\stcplx64.dll
    2016-02-28 19:02 - 2009-06-29 12:44 - 00209920 _____ (IDT, Inc.) C:\Windows\system32\st646217.dll
    2016-02-28 19:02 - 2009-05-12 14:25 - 00511488 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\ctapo32.dll
    2016-02-28 18:59 - 2016-02-29 14:44 - 00000000 ____D C:\Windows\SysWOW64\vmm32
    2016-02-28 18:59 - 2016-02-29 14:42 - 00000000 ____D C:\Program Files (x86)\Dell
    2016-02-28 18:37 - 2016-03-08 14:47 - 00000000 ____D C:\Users\Tingler\AppData\Local\ElevatedDiagnostics
    2016-02-28 12:19 - 2016-02-29 14:48 - 00000000 ____D C:\Users\Tingler\Documents\Any Video Converter Ultimate
    2016-02-28 12:18 - 2016-03-08 18:58 - 00000000 ____D C:\Users\Tingler\AppData\Roaming\Anvsoft
    2016-02-28 12:18 - 2016-02-29 14:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvsoft
    2016-02-28 12:18 - 2016-02-29 14:42 - 00000000 ____D C:\Program Files (x86)\Anvsoft
    2016-02-28 12:18 - 2016-02-29 10:15 - 00001286 _____ C:\Users\Tingler\Desktop\Any Video Converter Ultimate.lnk
    2016-02-27 16:33 - 2016-02-29 14:51 - 00000000 ____D C:\Windows\System32\Tasks\Games
    2016-02-27 15:35 - 2016-03-08 20:36 - 00000000 ____D C:\Users\Tingler\AppData\Local\Microsoft Games
    2016-02-26 14:51 - 2016-02-29 14:47 - 00000000 ____D C:\Users\Tingler\AppData\Roaming\Apple Computer
    2016-02-26 14:51 - 2016-02-29 14:47 - 00000000 ____D C:\Users\Tingler\AppData\Local\Apple Computer
    2016-02-26 14:50 - 2016-02-29 14:43 - 00000000 ____D C:\ProgramData\Apple Computer
    2016-02-26 14:49 - 2016-03-01 12:33 - 00000000 ____D C:\Program Files\Common Files\Apple
    2016-02-26 14:49 - 2016-02-29 14:51 - 00000000 ____D C:\Windows\System32\Tasks\Apple
    2016-02-26 14:49 - 2016-02-29 14:47 - 00000000 ____D C:\Users\Tingler\AppData\Local\Apple
    2016-02-26 14:49 - 2016-02-29 14:42 - 00000000 ____D C:\Program Files (x86)\Bonjour
    2016-02-26 14:49 - 2016-02-29 14:42 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
    2016-02-26 14:49 - 2016-02-29 14:41 - 00000000 ____D C:\Program Files\Bonjour
    2016-02-26 14:49 - 2016-02-29 10:15 - 00002507 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
    2016-02-26 14:48 - 2016-02-29 14:43 - 00000000 ____D C:\ProgramData\Apple
    2016-02-26 09:59 - 2016-03-12 05:51 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
    2016-02-26 09:59 - 2016-03-08 07:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
    2016-02-26 09:58 - 2016-03-08 07:32 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
    2016-02-26 09:58 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
    2016-02-26 09:58 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
    2016-02-26 09:58 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
    2016-02-26 07:46 - 2016-02-29 14:44 - 00000000 ____D C:\Windows\system32\system32
    2016-02-26 07:33 - 2016-02-29 14:48 - 00000000 ____D C:\Users\Tingler\AppData\Roaming\WinRAR
    2016-02-25 12:39 - 2016-02-29 14:43 - 00000000 ____D C:\ProgramData\Malwarebytes
    2016-02-25 12:34 - 2016-02-29 14:43 - 00000000 ____D C:\ProgramData\WinZip
    2016-02-25 12:33 - 2016-02-29 14:43 - 00000000 ____D C:\ProgramData\UniqueId
    2016-02-25 10:31 - 2016-03-13 06:36 - 00000000 ____D C:\ProgramData\TEMP
    2016-02-25 10:31 - 2016-03-03 19:10 - 00000000 ____D C:\Users\Tingler\AppData\Local\Downloaded Installations
    2016-02-23 05:11 - 2016-03-12 17:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
    2016-02-21 19:58 - 2016-03-06 14:13 - 00007168 ____H C:\Users\Tingler\Desktop\photothumb.db
    2016-02-21 19:57 - 2016-02-29 14:47 - 00000000 ____D C:\Users\Tingler\AppData\Roaming\PhotoScape
    2016-02-21 17:40 - 2016-02-21 17:40 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
    2016-02-21 16:37 - 2016-03-12 21:36 - 00000000 ___RD C:\Users\Tingler\Desktop\Vuze Downloads
    2016-02-21 16:15 - 2016-02-29 14:48 - 00000000 ____D C:\Users\Tingler\AppData\Roaming\Vuze Leap
    2016-02-21 16:15 - 2016-02-29 14:47 - 00000000 ____D C:\Users\Tingler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vuze Leap
    2016-02-21 14:20 - 2016-02-29 14:51 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
    2016-02-21 14:20 - 2016-02-29 14:41 - 00000000 ____D C:\Program Files\Common Files\AV
    2016-02-21 14:18 - 2016-03-09 17:56 - 00000000 ____D C:\ProgramData\AVAST Software
    2016-02-21 14:12 - 2016-02-29 14:48 - 00000000 ____D C:\Users\Tingler\Tracing
    2016-02-21 14:09 - 2016-03-12 18:00 - 00000000 ___RD C:\Users\Tingler\Desktop\Jim
    2016-02-21 14:07 - 2016-02-29 14:47 - 00000000 ____D C:\Users\Tingler\AppData\Roaming\Skype
    2016-02-21 14:07 - 2016-02-29 14:43 - 00000000 ___RD C:\Program Files (x86)\Skype
    2016-02-21 14:07 - 2016-02-29 14:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
    2016-02-21 14:06 - 2016-02-29 14:43 - 00000000 ____D C:\ProgramData\Skype
    2016-02-21 14:06 - 2015-12-02 13:18 - 00301728 _____ (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
    2016-02-21 13:54 - 2016-03-12 17:54 - 00000000 ____D C:\Program Files (x86)\Google
    2016-02-21 13:54 - 2016-03-12 09:57 - 00000000 ____D C:\Users\Tingler\AppData\Local\Google
    2016-02-21 13:53 - 2016-02-29 14:47 - 00000000 ____D C:\Users\Tingler\AppData\Local\Apps\2.0
    2016-02-21 13:51 - 2016-02-21 13:51 - 00000000 ____D C:\Users\Tingler\AppData\Local\VirtualStore
    2016-02-21 11:10 - 2016-02-21 11:40 - 88907776 ____H C:\~062f
    2016-02-21 11:10 - 2016-02-21 11:10 - 209715200 ____H C:\~062e
    2016-02-21 11:10 - 2016-02-21 11:10 - 209715200 ____H C:\~062d
    2016-02-21 11:10 - 2016-02-21 11:10 - 00000728 ____H C:\~0630
    2016-02-21 11:09 - 2016-02-21 11:10 - 209715200 ____H C:\~062c
    2016-02-21 11:09 - 2016-02-21 11:09 - 209715200 ____H C:\~062b
    2016-02-21 11:09 - 2016-02-21 11:09 - 209715200 ____H C:\~062a
    2016-02-21 11:09 - 2016-02-21 11:09 - 209715200 ____H C:\~0629
    2016-02-21 11:09 - 2016-02-21 11:09 - 209715200 ____H C:\~0628
    2016-02-21 11:09 - 2016-02-21 11:09 - 209715200 ____H C:\~0627
    2016-02-21 11:09 - 2016-02-21 11:09 - 209715200 ____H C:\~0626
    2016-02-21 11:09 - 2016-02-21 11:09 - 209715200 ____H C:\~0625
    2016-02-21 11:09 - 2016-02-21 11:09 - 209715200 ____H C:\~0624
    2016-02-21 11:09 - 2016-02-21 11:09 - 209715200 ____H C:\~0623
    2016-02-21 11:08 - 2016-02-21 11:09 - 209715200 ____H C:\~0622
    2016-02-21 11:08 - 2016-02-21 11:08 - 209715200 ____H C:\~0621
    2016-02-21 11:08 - 2016-02-21 11:08 - 209715200 ____H C:\~0620
    2016-02-21 11:08 - 2016-02-21 11:08 - 209715200 ____H C:\~061f
    2016-02-21 11:08 - 2016-02-21 11:08 - 209715200 ____H C:\~061e
    2016-02-21 11:08 - 2016-02-21 11:08 - 209715200 ____H C:\~061d
    2016-02-21 11:08 - 2016-02-21 11:08 - 209715200 ____H C:\~061c
    2016-02-21 11:08 - 2016-02-21 11:08 - 209715200 ____H C:\~061b
    2016-02-21 11:08 - 2016-02-21 11:08 - 209715200 ____H C:\~061a
    2016-02-21 11:08 - 2016-02-21 11:08 - 209715200 ____H C:\~0619
    2016-02-21 11:07 - 2016-02-21 11:08 - 209715200 ____H C:\~0618
    2016-02-21 11:07 - 2016-02-21 11:07 - 209715200 ____H C:\~0617
    2016-02-21 11:07 - 2016-02-21 11:07 - 209715200 ____H C:\~0616
    2016-02-21 11:07 - 2016-02-21 11:07 - 209715200 ____H C:\~0615
    2016-02-21 11:07 - 2016-02-21 11:07 - 209715200 ____H C:\~0614
    2016-02-21 11:07 - 2016-02-21 11:07 - 209715200 ____H C:\~0613
    2016-02-21 11:07 - 2016-02-21 11:07 - 209715200 ____H C:\~0612
    2016-02-21 11:07 - 2016-02-21 11:07 - 209715200 ____H C:\~0611
    2016-02-21 11:07 - 2016-02-21 11:07 - 209715200 ____H C:\~0610
    2016-02-21 11:07 - 2016-02-21 11:07 - 209715200 ____H C:\~060f
    2016-02-21 11:07 - 2016-02-21 11:07 - 209715200 ____H C:\~060e
    2016-02-21 11:06 - 2016-02-21 11:07 - 209715200 ____H C:\~060d
    2016-02-21 11:06 - 2016-02-21 11:06 - 209715200 ____H C:\~060c
    2016-02-21 11:06 - 2016-02-21 11:06 - 209715200 ____H C:\~060b
    2016-02-21 11:06 - 2016-02-21 11:06 - 209715200 ____H C:\~060a
    2016-02-21 11:06 - 2016-02-21 11:06 - 209715200 ____H C:\~0609
    2016-02-21 11:06 - 2016-02-21 11:06 - 209715200 ____H C:\~0608
    2016-02-21 11:06 - 2016-02-21 11:06 - 209715200 ____H C:\~0607
    2016-02-21 11:06 - 2016-02-21 11:06 - 209715200 ____H C:\~0606
    2016-02-21 11:06 - 2016-02-21 11:06 - 209715200 ____H C:\~0605
    2016-02-21 11:06 - 2016-02-21 11:06 - 209715200 ____H C:\~0604
    2016-02-21 11:06 - 2016-02-21 11:06 - 209715200 ____H C:\~0603
    2016-02-21 11:05 - 2016-02-21 11:06 - 209715200 ____H C:\~0602
    2016-02-21 11:05 - 2016-02-21 11:05 - 209715200 ____H C:\~0601
    2016-02-21 11:05 - 2016-02-21 11:05 - 209715200 ____H C:\~0600
    2016-02-21 11:05 - 2016-02-21 11:05 - 209715200 ____H C:\~05ff
    2016-02-21 11:05 - 2016-02-21 11:05 - 209715200 ____H C:\~05fe
    2016-02-21 11:05 - 2016-02-21 11:05 - 209715200 ____H C:\~05fd
    2016-02-21 11:05 - 2016-02-21 11:05 - 209715200 ____H C:\~05fc
    2016-02-21 11:05 - 2016-02-21 11:05 - 209715200 ____H C:\~05fb
    2016-02-21 11:05 - 2016-02-21 11:05 - 209715200 ____H C:\~05fa
    2016-02-21 11:05 - 2016-02-21 11:05 - 209715200 ____H C:\~05f9
    2016-02-21 11:04 - 2016-02-21 11:05 - 209715200 ____H C:\~05f8
    2016-02-21 11:04 - 2016-02-21 11:04 - 209715200 ____H C:\~05f7
    2016-02-21 11:04 - 2016-02-21 11:04 - 209715200 ____H C:\~05f6
    2016-02-21 11:04 - 2016-02-21 11:04 - 209715200 ____H C:\~05f5
    2016-02-21 11:04 - 2016-02-21 11:04 - 209715200 ____H C:\~05f4
    2016-02-21 11:04 - 2016-02-21 11:04 - 209715200 ____H C:\~05f3
    2016-02-21 11:04 - 2016-02-21 11:04 - 209715200 ____H C:\~05f2
    2016-02-21 11:04 - 2016-02-21 11:04 - 209715200 ____H C:\~05f1
    2016-02-21 11:04 - 2016-02-21 11:04 - 209715200 ____H C:\~05f0
    2016-02-21 11:04 - 2016-02-21 11:04 - 209715200 ____H C:\~05ef
    2016-02-21 11:04 - 2016-02-21 11:04 - 209715200 ____H C:\~05ee
    2016-02-21 11:03 - 2016-02-21 11:04 - 209715200 ____H C:\~05ed
    2016-02-21 11:03 - 2016-02-21 11:03 - 209715200 ____H C:\~05ec
    2016-02-21 11:03 - 2016-02-21 11:03 - 209715200 ____H C:\~05eb
    2016-02-21 11:03 - 2016-02-21 11:03 - 209715200 ____H C:\~05ea
    2016-02-21 11:03 - 2016-02-21 11:03 - 209715200 ____H C:\~05e9
    2016-02-21 11:03 - 2016-02-21 11:03 - 209715200 ____H C:\~05e8
    2016-02-21 11:03 - 2016-02-21 11:03 - 209715200 ____H C:\~05e7
    2016-02-21 11:03 - 2016-02-21 11:03 - 209715200 ____H C:\~05e6
    2016-02-21 11:03 - 2016-02-21 11:03 - 209715200 ____H C:\~05e5
    2016-02-21 11:03 - 2016-02-21 11:03 - 209715200 ____H C:\~05e4
    2016-02-21 11:03 - 2016-02-21 11:03 - 209715200 ____H C:\~05e3
    2016-02-21 11:02 - 2016-02-21 11:03 - 209715200 ____H C:\~05e2
    2016-02-21 11:02 - 2016-02-21 11:02 - 209715200 ____H C:\~05e1
    2016-02-21 11:02 - 2016-02-21 11:02 - 209715200 ____H C:\~05e0
    2016-02-21 11:02 - 2016-02-21 11:02 - 209715200 ____H C:\~05df
    2016-02-21 11:02 - 2016-02-21 11:02 - 209715200 ____H C:\~05de
    2016-02-21 11:02 - 2016-02-21 11:02 - 209715200 ____H C:\~05dd
    2016-02-21 11:02 - 2016-02-21 11:02 - 209715200 ____H C:\~05dc
    2016-02-21 11:02 - 2016-02-21 11:02 - 209715200 ____H C:\~05db
    2016-02-21 11:02 - 2016-02-21 11:02 - 209715200 ____H C:\~05da
    2016-02-21 11:02 - 2016-02-21 11:02 - 209715200 ____H C:\~05d9
    2016-02-21 11:02 - 2016-02-21 11:02 - 209715200 ____H C:\~05d8
    2016-02-21 11:01 - 2016-02-21 11:02 - 209715200 ____H C:\~05d7
    2016-02-21 11:01 - 2016-02-21 11:01 - 209715200 ____H C:\~05d6
    2016-02-21 11:01 - 2016-02-21 11:01 - 209715200 ____H C:\~05d5
    2016-02-21 11:01 - 2016-02-21 11:01 - 209715200 ____H C:\~05d4
    2016-02-21 11:01 - 2016-02-21 11:01 - 209715200 ____H C:\~05d3
    2016-02-21 11:01 - 2016-02-21 11:01 - 209715200 ____H C:\~05d2
    2016-02-21 11:01 - 2016-02-21 11:01 - 209715200 ____H C:\~05d1
    2016-02-21 11:01 - 2016-02-21 11:01 - 209715200 ____H C:\~05d0
    2016-02-21 11:01 - 2016-02-21 11:01 - 209715200 ____H C:\~05cf
    2016-02-21 11:01 - 2016-02-21 11:01 - 209715200 ____H C:\~05ce
    2016-02-21 11:01 - 2016-02-21 11:01 - 209715200 ____H C:\~05cd
    2016-02-21 11:00 - 2016-02-21 11:01 - 209715200 ____H C:\~05cc
    2016-02-21 11:00 - 2016-02-21 11:00 - 209715200 ____H C:\~05cb
    2016-02-21 11:00 - 2016-02-21 11:00 - 209715200 ____H C:\~05ca
    2016-02-21 11:00 - 2016-02-21 11:00 - 209715200 ____H C:\~05c9
    2016-02-21 11:00 - 2016-02-21 11:00 - 209715200 ____H C:\~05c8
    2016-02-21 11:00 - 2016-02-21 11:00 - 209715200 ____H C:\~05c7
    2016-02-21 11:00 - 2016-02-21 11:00 - 209715200 ____H C:\~05c6
    2016-02-21 11:00 - 2016-02-21 11:00 - 209715200 ____H C:\~05c5
    2016-02-21 11:00 - 2016-02-21 11:00 - 209715200 ____H C:\~05c4
    2016-02-21 11:00 - 2016-02-21 11:00 - 209715200 ____H C:\~05c3
    2016-02-21 11:00 - 2016-02-21 11:00 - 209715200 ____H C:\~05c2
    2016-02-21 10:59 - 2016-02-21 11:00 - 209715200 ____H C:\~05c1
    2016-02-21 10:59 - 2016-02-21 10:59 - 209715200 ____H C:\~05c0
    2016-02-21 10:59 - 2016-02-21 10:59 - 209715200 ____H C:\~05bf
    2016-02-21 10:59 - 2016-02-21 10:59 - 209715200 ____H C:\~05be
    2016-02-21 10:59 - 2016-02-21 10:59 - 209715200 ____H C:\~05bd
    2016-02-21 10:59 - 2016-02-21 10:59 - 209715200 ____H C:\~05bc
    2016-02-21 10:59 - 2016-02-21 10:59 - 209715200 ____H C:\~05bb
    2016-02-21 10:59 - 2016-02-21 10:59 - 209715200 ____H C:\~05ba
    2016-02-21 10:59 - 2016-02-21 10:59 - 209715200 ____H C:\~05b9
    2016-02-21 10:59 - 2016-02-21 10:59 - 209715200 ____H C:\~05b8
    2016-02-21 10:59 - 2016-02-21 10:59 - 209715200 ____H C:\~05b7
    2016-02-21 10:59 - 2016-02-21 10:59 - 209715200 ____H C:\~05b6
    2016-02-21 10:58 - 2016-02-21 10:59 - 209715200 ____H C:\~05b5
    2016-02-21 10:58 - 2016-02-21 10:58 - 209715200 ____H C:\~05b4
    2016-02-21 10:58 - 2016-02-21 10:58 - 209715200 ____H C:\~05b3
    2016-02-21 10:58 - 2016-02-21 10:58 - 209715200 ____H C:\~05b2
    2016-02-21 10:58 - 2016-02-21 10:58 - 209715200 ____H C:\~05b1
    2016-02-21 10:58 - 2016-02-21 10:58 - 209715200 ____H C:\~05b0
    2016-02-21 10:58 - 2016-02-21 10:58 - 209715200 ____H C:\~05af
    2016-02-21 10:58 - 2016-02-21 10:58 - 209715200 ____H C:\~05ae
    2016-02-21 10:58 - 2016-02-21 10:58 - 209715200 ____H C:\~05ad
    2016-02-21 10:58 - 2016-02-21 10:58 - 209715200 ____H C:\~05ac
    2016-02-21 10:58 - 2016-02-21 10:58 - 209715200 ____H C:\~05ab
    2016-02-21 10:57 - 2016-02-21 10:58 - 209715200 ____H C:\~05aa
    2016-02-21 10:57 - 2016-02-21 10:57 - 209715200 ____H C:\~05a9
    2016-02-21 10:57 - 2016-02-21 10:57 - 209715200 ____H C:\~05a8
    2016-02-21 10:57 - 2016-02-21 10:57 - 209715200 ____H C:\~05a7
    2016-02-21 10:57 - 2016-02-21 10:57 - 209715200 ____H C:\~05a6
    2016-02-21 10:57 - 2016-02-21 10:57 - 209715200 ____H C:\~05a5
    2016-02-21 10:57 - 2016-02-21 10:57 - 209715200 ____H C:\~05a4
    2016-02-21 10:57 - 2016-02-21 10:57 - 209715200 ____H C:\~05a3
    2016-02-21 10:57 - 2016-02-21 10:57 - 209715200 ____H C:\~05a2
    2016-02-21 10:57 - 2016-02-21 10:57 - 209715200 ____H C:\~05a1
    2016-02-21 10:57 - 2016-02-21 10:57 - 209715200 ____H C:\~05a0
    2016-02-21 10:56 - 2016-02-21 10:57 - 209715200 ____H C:\~059f
    2016-02-21 10:56 - 2016-02-21 10:56 - 209715200 ____H C:\~059e
    2016-02-21 10:56 - 2016-02-21 10:56 - 209715200 ____H C:\~059d
    2016-02-21 10:56 - 2016-02-21 10:56 - 209715200 ____H C:\~059c
    2016-02-21 10:56 - 2016-02-21 10:56 - 209715200 ____H C:\~059b
    2016-02-21 10:56 - 2016-02-21 10:56 - 209715200 ____H C:\~059a
    2016-02-21 10:56 - 2016-02-21 10:56 - 209715200 ____H C:\~0599
    2016-02-21 10:56 - 2016-02-21 10:56 - 209715200 ____H C:\~0598
    2016-02-21 10:56 - 2016-02-21 10:56 - 209715200 ____H C:\~0597
    2016-02-21 10:56 - 2016-02-21 10:56 - 209715200 ____H C:\~0596
    2016-02-21 10:56 - 2016-02-21 10:56 - 209715200 ____H C:\~0595
    2016-02-21 10:55 - 2016-02-21 10:56 - 209715200 ____H C:\~0594
    2016-02-21 10:55 - 2016-02-21 10:55 - 209715200 ____H C:\~0593
    2016-02-21 10:55 - 2016-02-21 10:55 - 209715200 ____H C:\~0592
    2016-02-21 10:55 - 2016-02-21 10:55 - 209715200 ____H C:\~0591
    2016-02-21 10:55 - 2016-02-21 10:55 - 209715200 ____H C:\~0590
    2016-02-21 10:55 - 2016-02-21 10:55 - 209715200 ____H C:\~058f
    2016-02-21 10:55 - 2016-02-21 10:55 - 209715200 ____H C:\~058e
    2016-02-21 10:55 - 2016-02-21 10:55 - 209715200 ____H C:\~058d
    2016-02-21 10:55 - 2016-02-21 10:55 - 209715200 ____H C:\~058c
    2016-02-21 10:55 - 2016-02-21 10:55 - 209715200 ____H C:\~058b
    2016-02-21 10:55 - 2016-02-21 10:55 - 209715200 ____H C:\~058a
    2016-02-21 10:54 - 2016-02-21 10:55 - 209715200 ____H C:\~0589
    2016-02-21 10:54 - 2016-02-21 10:54 - 209715200 ____H C:\~0588
    2016-02-21 10:54 - 2016-02-21 10:54 - 209715200 ____H C:\~0587
    2016-02-21 10:54 - 2016-02-21 10:54 - 209715200 ____H C:\~0586
    2016-02-21 10:54 - 2016-02-21 10:54 - 209715200 ____H C:\~0585
    2016-02-21 10:54 - 2016-02-21 10:54 - 209715200 ____H C:\~0584
    2016-02-21 10:54 - 2016-02-21 10:54 - 209715200 ____H C:\~0583
    2016-02-21 10:54 - 2016-02-21 10:54 - 209715200 ____H C:\~0582
    2016-02-21 10:54 - 2016-02-21 10:54 - 209715200 ____H C:\~0581
    2016-02-21 10:54 - 2016-02-21 10:54 - 209715200 ____H C:\~0580
    2016-02-21 10:54 - 2016-02-21 10:54 - 209715200 ____H C:\~057f
    2016-02-21 10:54 - 2016-02-21 10:54 - 209715200 ____H C:\~057e
    2016-02-21 10:53 - 2016-02-21 10:54 - 209715200 ____H C:\~057d
    2016-02-21 10:53 - 2016-02-21 10:53 - 209715200 ____H C:\~057c
    2016-02-21 10:53 - 2016-02-21 10:53 - 209715200 ____H C:\~057b
    2016-02-21 10:53 - 2016-02-21 10:53 - 209715200 ____H C:\~057a
    2016-02-21 10:53 - 2016-02-21 10:53 - 209715200 ____H C:\~0579
    2016-02-21 10:53 - 2016-02-21 10:53 - 209715200 ____H C:\~0578
    2016-02-21 10:53 - 2016-02-21 10:53 - 209715200 ____H C:\~0577
    2016-02-21 10:53 - 2016-02-21 10:53 - 209715200 ____H C:\~0576
    2016-02-21 10:53 - 2016-02-21 10:53 - 209715200 ____H C:\~0575
    2016-02-21 10:53 - 2016-02-21 10:53 - 209715200 ____H C:\~0574
    2016-02-21 10:53 - 2016-02-21 10:53 - 209715200 ____H C:\~0573
    2016-02-21 10:53 - 2016-02-21 10:53 - 209715200 ____H C:\~0572
    2016-02-21 10:52 - 2016-02-21 10:53 - 209715200 ____H C:\~0571
    2016-02-21 10:52 - 2016-02-21 10:52 - 209715200 ____H C:\~0570
    2016-02-21 10:52 - 2016-02-21 10:52 - 209715200 ____H C:\~056f
    2016-02-21 10:52 - 2016-02-21 10:52 - 209715200 ____H C:\~056e
    2016-02-21 10:52 - 2016-02-21 10:52 - 209715200 ____H C:\~056d
    2016-02-21 10:52 - 2016-02-21 10:52 - 209715200 ____H C:\~056c
    2016-02-21 10:52 - 2016-02-21 10:52 - 209715200 ____H C:\~056b
    2016-02-21 10:52 - 2016-02-21 10:52 - 209715200 ____H C:\~056a
    2016-02-21 10:52 - 2016-02-21 10:52 - 209715200 ____H C:\~0569
    2016-02-21 10:52 - 2016-02-21 10:52 - 209715200 ____H C:\~0568
    2016-02-21 10:52 - 2016-02-21 10:52 - 209715200 ____H C:\~0567
    2016-02-21 10:51 - 2016-02-21 10:52 - 209715200 ____H C:\~0566
    2016-02-21 10:51 - 2016-02-21 10:51 - 209715200 ____H C:\~0565
    2016-02-21 10:51 - 2016-02-21 10:51 - 209715200 ____H C:\~0564
    2016-02-21 10:51 - 2016-02-21 10:51 - 209715200 ____H C:\~0563
    2016-02-21 10:51 - 2016-02-21 10:51 - 209715200 ____H C:\~0562
    2016-02-21 10:51 - 2016-02-21 10:51 - 209715200 ____H C:\~0561
    2016-02-21 10:51 - 2016-02-21 10:51 - 209715200 ____H C:\~0560
    2016-02-21 10:51 - 2016-02-21 10:51 - 209715200 ____H C:\~055f
    2016-02-21 10:51 - 2016-02-21 10:51 - 209715200 ____H C:\~055e
    2016-02-21 10:51 - 2016-02-21 10:51 - 209715200 ____H C:\~055d
    2016-02-21 10:51 - 2016-02-21 10:51 - 209715200 ____H C:\~055c
    2016-02-21 10:51 - 2016-02-21 10:51 - 209715200 ____H C:\~055b
    2016-02-21 10:50 - 2016-02-21 10:51 - 209715200 ____H C:\~055a
    2016-02-21 10:50 - 2016-02-21 10:50 - 209715200 ____H C:\~0559
    2016-02-21 10:50 - 2016-02-21 10:50 - 209715200 ____H C:\~0558
    2016-02-21 10:50 - 2016-02-21 10:50 - 209715200 ____H C:\~0557
    2016-02-21 10:50 - 2016-02-21 10:50 - 209715200 ____H C:\~0556
    2016-02-21 10:50 - 2016-02-21 10:50 - 209715200 ____H C:\~0555
    2016-02-21 10:50 - 2016-02-21 10:50 - 209715200 ____H C:\~0554
    2016-02-21 10:50 - 2016-02-21 10:50 - 209715200 ____H C:\~0553
    2016-02-21 10:50 - 2016-02-21 10:50 - 209715200 ____H C:\~0552
    2016-02-21 10:50 - 2016-02-21 10:50 - 209715200 ____H C:\~0551
    2016-02-21 10:50 - 2016-02-21 10:50 - 209715200 ____H C:\~0550
    2016-02-21 10:50 - 2016-02-21 10:50 - 209715200 ____H C:\~054f
    2016-02-21 10:49 - 2016-02-21 10:50 - 209715200 ____H C:\~054e
    2016-02-21 10:49 - 2016-02-21 10:49 - 209715200 ____H C:\~054d
    2016-02-21 10:49 - 2016-02-21 10:49 - 209715200 ____H C:\~054c
    2016-02-21 10:49 - 2016-02-21 10:49 - 209715200 ____H C:\~054b
    2016-02-21 10:49 - 2016-02-21 10:49 - 209715200 ____H C:\~054a
    2016-02-21 10:49 - 2016-02-21 10:49 - 209715200 ____H C:\~0549
    2016-02-21 10:49 - 2016-02-21 10:49 - 209715200 ____H C:\~0548
    2016-02-21 10:49 - 2016-02-21 10:49 - 209715200 ____H C:\~0547
    2016-02-21 10:49 - 2016-02-21 10:49 - 209715200 ____H C:\~0546
    2016-02-21 10:49 - 2016-02-21 10:49 - 209715200 ____H C:\~0545
    2016-02-21 10:49 - 2016-02-21 10:49 - 209715200 ____H C:\~0544
    2016-02-21 10:49 - 2016-02-21 10:49 - 209715200 ____H C:\~0543
    2016-02-21 10:49 - 2016-02-21 10:49 - 209715200 ____H C:\~0542
    2016-02-21 10:48 - 2016-02-21 10:49 - 209715200 ____H C:\~0541
    2016-02-21 10:48 - 2016-02-21 10:48 - 209715200 ____H C:\~0540
    2016-02-21 10:48 - 2016-02-21 10:48 - 209715200 ____H C:\~053f
    2016-02-21 10:48 - 2016-02-21 10:48 - 209715200 ____H C:\~053e
    2016-02-21 10:48 - 2016-02-21 10:48 - 209715200 ____H C:\~053d
    2016-02-21 10:48 - 2016-02-21 10:48 - 209715200 ____H C:\~053c
    2016-02-21 10:48 - 2016-02-21 10:48 - 209715200 ____H C:\~053b
    2016-02-21 10:48 - 2016-02-21 10:48 - 209715200 ____H C:\~053a
    2016-02-21 10:48 - 2016-02-21 10:48 - 209715200 ____H C:\~0539
    2016-02-21 10:48 - 2016-02-21 10:48 - 209715200 ____H C:\~0538
    2016-02-21 10:48 - 2016-02-21 10:48 - 209715200 ____H C:\~0537
    2016-02-21 10:48 - 2016-02-21 10:48 - 209715200 ____H C:\~0536
    2016-02-21 10:47 - 2016-02-21 10:48 - 209715200 ____H C:\~0535
    2016-02-21 10:47 - 2016-02-21 10:47 - 209715200 ____H C:\~0534
    2016-02-21 10:47 - 2016-02-21 10:47 - 209715200 ____H C:\~0533
    2016-02-21 10:47 - 2016-02-21 10:47 - 209715200 ____H C:\~0532
    2016-02-21 10:47 - 2016-02-21 10:47 - 209715200 ____H C:\~0531
    2016-02-21 10:47 - 2016-02-21 10:47 - 209715200 ____H C:\~0530
    2016-02-21 10:47 - 2016-02-21 10:47 - 209715200 ____H C:\~052f
    2016-02-21 10:47 - 2016-02-21 10:47 - 209715200 ____H C:\~052e
    2016-02-21 10:47 - 2016-02-21 10:47 - 209715200 ____H C:\~052d
    2016-02-21 10:47 - 2016-02-21 10:47 - 209715200 ____H C:\~052c
    2016-02-21 10:47 - 2016-02-21 10:47 - 209715200 ____H C:\~052b
    2016-02-21 10:47 - 2016-02-21 10:47 - 209715200 ____H C:\~052a
    2016-02-21 10:46 - 2016-02-21 10:47 - 209715200 ____H C:\~0529
    2016-02-21 10:46 - 2016-02-21 10:46 - 209715200 ____H C:\~0528
    2016-02-21 10:46 - 2016-02-21 10:46 - 209715200 ____H C:\~0527
    2016-02-21 10:46 - 2016-02-21 10:46 - 209715200 ____H C:\~0526
    2016-02-21 10:46 - 2016-02-21 10:46 - 209715200 ____H C:\~0525
    2016-02-21 10:46 - 2016-02-21 10:46 - 209715200 ____H C:\~0524
    2016-02-21 10:46 - 2016-02-21 10:46 - 209715200 ____H C:\~0523
    2016-02-21 10:46 - 2016-02-21 10:46 - 209715200 ____H C:\~0522
    2016-02-21 10:46 - 2016-02-21 10:46 - 209715200 ____H C:\~0521
    2016-02-21 10:46 - 2016-02-21 10:46 - 209715200 ____H C:\~0520
    2016-02-21 10:46 - 2016-02-21 10:46 - 209715200 ____H C:\~051f
    2016-02-21 10:46 - 2016-02-21 10:46 - 209715200 ____H C:\~051e
    2016-02-21 10:46 - 2016-02-21 10:46 - 209715200 ____H C:\~051d
    2016-02-21 10:45 - 2016-02-21 10:46 - 209715200 ____H C:\~051c
    2016-02-21 10:45 - 2016-02-21 10:45 - 209715200 ____H C:\~051b
    2016-02-21 10:45 - 2016-02-21 10:45 - 209715200 ____H C:\~051a
    2016-02-21 10:45 - 2016-02-21 10:45 - 209715200 ____H C:\~0519
    2016-02-21 10:45 - 2016-02-21 10:45 - 209715200 ____H C:\~0518
    2016-02-21 10:45 - 2016-02-21 10:45 - 209715200 ____H C:\~0517
    2016-02-21 10:45 - 2016-02-21 10:45 - 209715200 ____H C:\~0516
    2016-02-21 10:45 - 2016-02-21 10:45 - 209715200 ____H C:\~0515
    2016-02-21 10:45 - 2016-02-21 10:45 - 209715200 ____H C:\~0514
    2016-02-21 10:45 - 2016-02-21 10:45 - 209715200 ____H C:\~0513
    2016-02-21 10:45 - 2016-02-21 10:45 - 209715200 ____H C:\~0512
    2016-02-21 10:45 - 2016-02-21 10:45 - 209715200 ____H C:\~0511
    2016-02-21 10:44 - 2016-02-21 10:45 - 209715200 ____H C:\~0510
    2016-02-21 10:44 - 2016-02-21 10:44 - 209715200 ____H C:\~050f
     
  15. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    2016-02-21 10:44 - 2016-02-21 10:44 - 209715200 ____H C:\~050e
    2016-02-21 10:44 - 2016-02-21 10:44 - 209715200 ____H C:\~050d
    2016-02-21 10:44 - 2016-02-21 10:44 - 209715200 ____H C:\~050c
    2016-02-21 10:44 - 2016-02-21 10:44 - 209715200 ____H C:\~050b
    2016-02-21 10:44 - 2016-02-21 10:44 - 209715200 ____H C:\~050a
    2016-02-21 10:44 - 2016-02-21 10:44 - 209715200 ____H C:\~0509
    2016-02-21 10:44 - 2016-02-21 10:44 - 209715200 ____H C:\~0508
    2016-02-21 10:44 - 2016-02-21 10:44 - 209715200 ____H C:\~0507
    2016-02-21 10:44 - 2016-02-21 10:44 - 209715200 ____H C:\~0506
    2016-02-21 10:44 - 2016-02-21 10:44 - 209715200 ____H C:\~0505
    2016-02-21 10:44 - 2016-02-21 10:44 - 209715200 ____H C:\~0504
    2016-02-21 10:43 - 2016-02-21 10:44 - 209715200 ____H C:\~0503
    2016-02-21 10:43 - 2016-02-21 10:43 - 209715200 ____H C:\~0502
    2016-02-21 10:43 - 2016-02-21 10:43 - 209715200 ____H C:\~0501
    2016-02-21 10:43 - 2016-02-21 10:43 - 209715200 ____H C:\~0500
    2016-02-21 10:43 - 2016-02-21 10:43 - 209715200 ____H C:\~04ff
    2016-02-21 10:43 - 2016-02-21 10:43 - 209715200 ____H C:\~04fe
    2016-02-21 10:43 - 2016-02-21 10:43 - 209715200 ____H C:\~04fd
    2016-02-21 10:43 - 2016-02-21 10:43 - 209715200 ____H C:\~04fc
    2016-02-21 10:43 - 2016-02-21 10:43 - 209715200 ____H C:\~04fb
    2016-02-21 10:43 - 2016-02-21 10:43 - 209715200 ____H C:\~04fa
    2016-02-21 10:43 - 2016-02-21 10:43 - 209715200 ____H C:\~04f9
    2016-02-21 10:43 - 2016-02-21 10:43 - 209715200 ____H C:\~04f8
    2016-02-21 10:43 - 2016-02-21 10:43 - 209715200 ____H C:\~04f7
    2016-02-21 10:42 - 2016-02-21 10:43 - 209715200 ____H C:\~04f6
    2016-02-21 10:42 - 2016-02-21 10:42 - 209715200 ____H C:\~04f5
    2016-02-21 10:42 - 2016-02-21 10:42 - 209715200 ____H C:\~04f4
    2016-02-21 10:42 - 2016-02-21 10:42 - 209715200 ____H C:\~04f3
    2016-02-21 10:42 - 2016-02-21 10:42 - 209715200 ____H C:\~04f2
    2016-02-21 10:42 - 2016-02-21 10:42 - 209715200 ____H C:\~04f1
    2016-02-21 10:42 - 2016-02-21 10:42 - 209715200 ____H C:\~04f0
    2016-02-21 10:42 - 2016-02-21 10:42 - 209715200 ____H C:\~04ef
    2016-02-21 10:42 - 2016-02-21 10:42 - 209715200 ____H C:\~04ee
    2016-02-21 10:42 - 2016-02-21 10:42 - 209715200 ____H C:\~04ed
    2016-02-21 10:42 - 2016-02-21 10:42 - 209715200 ____H C:\~04ec
    2016-02-21 10:42 - 2016-02-21 10:42 - 209715200 ____H C:\~04eb
    2016-02-21 10:41 - 2016-02-21 10:42 - 209715200 ____H C:\~04ea
    2016-02-21 10:41 - 2016-02-21 10:41 - 209715200 ____H C:\~04e9
    2016-02-21 10:41 - 2016-02-21 10:41 - 209715200 ____H C:\~04e8
    2016-02-21 10:41 - 2016-02-21 10:41 - 209715200 ____H C:\~04e7
    2016-02-21 10:41 - 2016-02-21 10:41 - 209715200 ____H C:\~04e6
    2016-02-21 10:41 - 2016-02-21 10:41 - 209715200 ____H C:\~04e5
    2016-02-21 10:41 - 2016-02-21 10:41 - 209715200 ____H C:\~04e4
    2016-02-21 10:41 - 2016-02-21 10:41 - 209715200 ____H C:\~04e3
    2016-02-21 10:41 - 2016-02-21 10:41 - 209715200 ____H C:\~04e2
    2016-02-21 10:41 - 2016-02-21 10:41 - 209715200 ____H C:\~04e1
    2016-02-21 10:41 - 2016-02-21 10:41 - 209715200 ____H C:\~04e0
    2016-02-21 10:41 - 2016-02-21 10:41 - 209715200 ____H C:\~04df
    2016-02-21 10:41 - 2016-02-21 10:41 - 209715200 ____H C:\~04de
    2016-02-21 10:40 - 2016-02-21 10:41 - 209715200 ____H C:\~04dd
    2016-02-21 10:40 - 2016-02-21 10:40 - 209715200 ____H C:\~04dc
    2016-02-21 10:40 - 2016-02-21 10:40 - 209715200 ____H C:\~04db
    2016-02-21 10:40 - 2016-02-21 10:40 - 209715200 ____H C:\~04da
    2016-02-21 10:40 - 2016-02-21 10:40 - 209715200 ____H C:\~04d9
    2016-02-21 10:40 - 2016-02-21 10:40 - 209715200 ____H C:\~04d8
    2016-02-21 10:40 - 2016-02-21 10:40 - 209715200 ____H C:\~04d7
    2016-02-21 10:40 - 2016-02-21 10:40 - 209715200 ____H C:\~04d6
    2016-02-21 10:40 - 2016-02-21 10:40 - 209715200 ____H C:\~04d5
    2016-02-21 10:40 - 2016-02-21 10:40 - 209715200 ____H C:\~04d4
    2016-02-21 10:40 - 2016-02-21 10:40 - 209715200 ____H C:\~04d3
    2016-02-21 10:40 - 2016-02-21 10:40 - 209715200 ____H C:\~04d2
    2016-02-21 10:39 - 2016-02-21 10:40 - 209715200 ____H C:\~04d1
    2016-02-21 10:39 - 2016-02-21 10:39 - 209715200 ____H C:\~04d0
    2016-02-21 10:39 - 2016-02-21 10:39 - 209715200 ____H C:\~04cf
    2016-02-21 10:39 - 2016-02-21 10:39 - 209715200 ____H C:\~04ce
    2016-02-21 10:39 - 2016-02-21 10:39 - 209715200 ____H C:\~04cd
    2016-02-21 10:39 - 2016-02-21 10:39 - 209715200 ____H C:\~04cc
    2016-02-21 10:39 - 2016-02-21 10:39 - 209715200 ____H C:\~04cb
    2016-02-21 10:39 - 2016-02-21 10:39 - 209715200 ____H C:\~04ca
    2016-02-21 10:38 - 2016-02-21 10:39 - 209715200 ____H C:\~04c9
    2016-02-21 10:38 - 2016-02-21 10:38 - 209715200 ____H C:\~04c8
    2016-02-21 10:38 - 2016-02-21 10:38 - 209715200 ____H C:\~04c7
    2016-02-21 10:38 - 2016-02-21 10:38 - 209715200 ____H C:\~04c6
    2016-02-21 10:38 - 2016-02-21 10:38 - 209715200 ____H C:\~04c5
    2016-02-21 10:38 - 2016-02-21 10:38 - 209715200 ____H C:\~04c4
    2016-02-21 10:38 - 2016-02-21 10:38 - 209715200 ____H C:\~04c3
    2016-02-21 10:38 - 2016-02-21 10:38 - 209715200 ____H C:\~04c2
    2016-02-21 10:38 - 2016-02-21 10:38 - 209715200 ____H C:\~04c1
    2016-02-21 10:38 - 2016-02-21 10:38 - 209715200 ____H C:\~04c0
    2016-02-21 10:38 - 2016-02-21 10:38 - 209715200 ____H C:\~04bf
    2016-02-21 10:38 - 2016-02-21 10:38 - 209715200 ____H C:\~04be
    2016-02-21 10:38 - 2016-02-21 10:38 - 209715200 ____H C:\~04bd
    2016-02-21 10:37 - 2016-02-21 10:38 - 209715200 ____H C:\~04bc
    2016-02-21 10:37 - 2016-02-21 10:37 - 209715200 ____H C:\~04bb
    2016-02-21 10:37 - 2016-02-21 10:37 - 209715200 ____H C:\~04ba
    2016-02-21 10:37 - 2016-02-21 10:37 - 209715200 ____H C:\~04b9
    2016-02-21 10:37 - 2016-02-21 10:37 - 209715200 ____H C:\~04b8
    2016-02-21 10:37 - 2016-02-21 10:37 - 209715200 ____H C:\~04b7
    2016-02-21 10:37 - 2016-02-21 10:37 - 209715200 ____H C:\~04b6
    2016-02-21 10:37 - 2016-02-21 10:37 - 209715200 ____H C:\~04b5
    2016-02-21 10:37 - 2016-02-21 10:37 - 209715200 ____H C:\~04b4
    2016-02-21 10:37 - 2016-02-21 10:37 - 209715200 ____H C:\~04b3
    2016-02-21 10:37 - 2016-02-21 10:37 - 209715200 ____H C:\~04b2
    2016-02-21 10:37 - 2016-02-21 10:37 - 209715200 ____H C:\~04b1
    2016-02-21 10:36 - 2016-02-21 10:37 - 209715200 ____H C:\~04b0
    2016-02-21 10:36 - 2016-02-21 10:36 - 209715200 ____H C:\~04af
    2016-02-21 10:36 - 2016-02-21 10:36 - 209715200 ____H C:\~04ae
    2016-02-21 10:36 - 2016-02-21 10:36 - 209715200 ____H C:\~04ad
    2016-02-21 10:36 - 2016-02-21 10:36 - 209715200 ____H C:\~04ac
    2016-02-21 10:36 - 2016-02-21 10:36 - 209715200 ____H C:\~04ab
    2016-02-21 10:36 - 2016-02-21 10:36 - 209715200 ____H C:\~04aa
    2016-02-21 10:36 - 2016-02-21 10:36 - 209715200 ____H C:\~04a9
    2016-02-21 10:36 - 2016-02-21 10:36 - 209715200 ____H C:\~04a8
    2016-02-21 10:36 - 2016-02-21 10:36 - 209715200 ____H C:\~04a7
    2016-02-21 10:36 - 2016-02-21 10:36 - 209715200 ____H C:\~04a6
    2016-02-21 10:36 - 2016-02-21 10:36 - 209715200 ____H C:\~04a5
    2016-02-21 10:35 - 2016-02-21 10:36 - 209715200 ____H C:\~04a4
    2016-02-21 10:35 - 2016-02-21 10:35 - 209715200 ____H C:\~04a3
    2016-02-21 10:35 - 2016-02-21 10:35 - 209715200 ____H C:\~04a2
    2016-02-21 10:35 - 2016-02-21 10:35 - 209715200 ____H C:\~04a1
    2016-02-21 10:35 - 2016-02-21 10:35 - 209715200 ____H C:\~04a0
    2016-02-21 10:35 - 2016-02-21 10:35 - 209715200 ____H C:\~049f
    2016-02-21 10:35 - 2016-02-21 10:35 - 209715200 ____H C:\~049e
    2016-02-21 10:35 - 2016-02-21 10:35 - 209715200 ____H C:\~049d
    2016-02-21 10:35 - 2016-02-21 10:35 - 209715200 ____H C:\~049c
    2016-02-21 10:35 - 2016-02-21 10:35 - 209715200 ____H C:\~049b
    2016-02-21 10:35 - 2016-02-21 10:35 - 209715200 ____H C:\~049a
    2016-02-21 10:35 - 2016-02-21 10:35 - 209715200 ____H C:\~0499
    2016-02-21 10:35 - 2016-02-21 10:35 - 209715200 ____H C:\~0498
    2016-02-21 10:34 - 2016-02-21 10:35 - 209715200 ____H C:\~0497
    2016-02-21 10:34 - 2016-02-21 10:34 - 209715200 ____H C:\~0496
    2016-02-21 10:34 - 2016-02-21 10:34 - 209715200 ____H C:\~0495
    2016-02-21 10:34 - 2016-02-21 10:34 - 209715200 ____H C:\~0494
    2016-02-21 10:34 - 2016-02-21 10:34 - 209715200 ____H C:\~0493
    2016-02-21 10:34 - 2016-02-21 10:34 - 209715200 ____H C:\~0492
    2016-02-21 10:34 - 2016-02-21 10:34 - 209715200 ____H C:\~0491
    2016-02-21 10:34 - 2016-02-21 10:34 - 209715200 ____H C:\~0490
    2016-02-21 10:34 - 2016-02-21 10:34 - 209715200 ____H C:\~048f
    2016-02-21 10:34 - 2016-02-21 10:34 - 209715200 ____H C:\~048e
    2016-02-21 10:34 - 2016-02-21 10:34 - 209715200 ____H C:\~048d
    2016-02-21 10:34 - 2016-02-21 10:34 - 209715200 ____H C:\~048c
    2016-02-21 10:34 - 2016-02-21 10:34 - 209715200 ____H C:\~048b
    2016-02-21 10:33 - 2016-02-21 10:34 - 209715200 ____H C:\~048a
    2016-02-21 10:33 - 2016-02-21 10:33 - 209715200 ____H C:\~0489
    2016-02-21 10:33 - 2016-02-21 10:33 - 209715200 ____H C:\~0488
    2016-02-21 10:33 - 2016-02-21 10:33 - 209715200 ____H C:\~0487
    2016-02-21 10:33 - 2016-02-21 10:33 - 209715200 ____H C:\~0486
    2016-02-21 10:33 - 2016-02-21 10:33 - 209715200 ____H C:\~0485
    2016-02-21 10:33 - 2016-02-21 10:33 - 209715200 ____H C:\~0484
    2016-02-21 10:33 - 2016-02-21 10:33 - 209715200 ____H C:\~0483
    2016-02-21 10:33 - 2016-02-21 10:33 - 209715200 ____H C:\~0482
    2016-02-21 10:33 - 2016-02-21 10:33 - 209715200 ____H C:\~0481
    2016-02-21 10:33 - 2016-02-21 10:33 - 209715200 ____H C:\~0480
    2016-02-21 10:33 - 2016-02-21 10:33 - 209715200 ____H C:\~047f
    2016-02-21 10:33 - 2016-02-21 10:33 - 209715200 ____H C:\~047e
    2016-02-21 10:32 - 2016-02-21 10:33 - 209715200 ____H C:\~047d
    2016-02-21 10:32 - 2016-02-21 10:32 - 209715200 ____H C:\~047c
    2016-02-21 10:32 - 2016-02-21 10:32 - 209715200 ____H C:\~047b
    2016-02-21 10:32 - 2016-02-21 10:32 - 209715200 ____H C:\~047a
    2016-02-21 10:32 - 2016-02-21 10:32 - 209715200 ____H C:\~0479
    2016-02-21 10:32 - 2016-02-21 10:32 - 209715200 ____H C:\~0478
    2016-02-21 10:32 - 2016-02-21 10:32 - 209715200 ____H C:\~0477
    2016-02-21 10:32 - 2016-02-21 10:32 - 209715200 ____H C:\~0476
    2016-02-21 10:32 - 2016-02-21 10:32 - 209715200 ____H C:\~0475
    2016-02-21 10:32 - 2016-02-21 10:32 - 209715200 ____H C:\~0474
    2016-02-21 10:32 - 2016-02-21 10:32 - 209715200 ____H C:\~0473
    2016-02-21 10:32 - 2016-02-21 10:32 - 209715200 ____H C:\~0472
    2016-02-21 10:32 - 2016-02-21 10:32 - 209715200 ____H C:\~0471
    2016-02-21 10:31 - 2016-02-21 10:32 - 209715200 ____H C:\~0470
    2016-02-21 10:31 - 2016-02-21 10:31 - 209715200 ____H C:\~046f
    2016-02-21 10:31 - 2016-02-21 10:31 - 209715200 ____H C:\~046e
    2016-02-21 10:31 - 2016-02-21 10:31 - 209715200 ____H C:\~046d
    2016-02-21 10:31 - 2016-02-21 10:31 - 209715200 ____H C:\~046c
    2016-02-21 10:31 - 2016-02-21 10:31 - 209715200 ____H C:\~046b
    2016-02-21 10:31 - 2016-02-21 10:31 - 209715200 ____H C:\~046a
    2016-02-21 10:31 - 2016-02-21 10:31 - 209715200 ____H C:\~0469
    2016-02-21 10:31 - 2016-02-21 10:31 - 209715200 ____H C:\~0468
    2016-02-21 10:31 - 2016-02-21 10:31 - 209715200 ____H C:\~0467
    2016-02-21 10:31 - 2016-02-21 10:31 - 209715200 ____H C:\~0466
    2016-02-21 10:31 - 2016-02-21 10:31 - 209715200 ____H C:\~0465
    2016-02-21 10:31 - 2016-02-21 10:31 - 209715200 ____H C:\~0464
    2016-02-21 10:31 - 2016-02-21 10:31 - 209715200 ____H C:\~0463
    2016-02-21 10:30 - 2016-02-21 10:31 - 209715200 ____H C:\~0462
    2016-02-21 10:30 - 2016-02-21 10:30 - 209715200 ____H C:\~0461
    2016-02-21 10:30 - 2016-02-21 10:30 - 209715200 ____H C:\~0460
    2016-02-21 10:30 - 2016-02-21 10:30 - 209715200 ____H C:\~045f
    2016-02-21 10:30 - 2016-02-21 10:30 - 209715200 ____H C:\~045e
    2016-02-21 10:30 - 2016-02-21 10:30 - 209715200 ____H C:\~045d
    2016-02-21 10:30 - 2016-02-21 10:30 - 209715200 ____H C:\~045c
    2016-02-21 10:30 - 2016-02-21 10:30 - 209715200 ____H C:\~045b
    2016-02-21 10:30 - 2016-02-21 10:30 - 209715200 ____H C:\~045a
    2016-02-21 10:30 - 2016-02-21 10:30 - 209715200 ____H C:\~0459
    2016-02-21 10:30 - 2016-02-21 10:30 - 209715200 ____H C:\~0458
    2016-02-21 10:30 - 2016-02-21 10:30 - 209715200 ____H C:\~0457
    2016-02-21 10:29 - 2016-02-21 10:30 - 209715200 ____H C:\~0456
    2016-02-21 10:29 - 2016-02-21 10:29 - 209715200 ____H C:\~0455
    2016-02-21 10:29 - 2016-02-21 10:29 - 209715200 ____H C:\~0454
    2016-02-21 10:29 - 2016-02-21 10:29 - 209715200 ____H C:\~0453
    2016-02-21 10:29 - 2016-02-21 10:29 - 209715200 ____H C:\~0452
    2016-02-21 10:29 - 2016-02-21 10:29 - 209715200 ____H C:\~0451
    2016-02-21 10:29 - 2016-02-21 10:29 - 209715200 ____H C:\~0450
    2016-02-21 10:29 - 2016-02-21 10:29 - 209715200 ____H C:\~044f
    2016-02-21 10:29 - 2016-02-21 10:29 - 209715200 ____H C:\~044e
    2016-02-21 10:29 - 2016-02-21 10:29 - 209715200 ____H C:\~044d
    2016-02-21 10:29 - 2016-02-21 10:29 - 209715200 ____H C:\~044c
    2016-02-21 10:29 - 2016-02-21 10:29 - 209715200 ____H C:\~044b
    2016-02-21 10:28 - 2016-02-21 10:29 - 209715200 ____H C:\~044a
    2016-02-21 10:28 - 2016-02-21 10:28 - 209715200 ____H C:\~0449
    2016-02-21 10:28 - 2016-02-21 10:28 - 209715200 ____H C:\~0448
    2016-02-21 10:28 - 2016-02-21 10:28 - 209715200 ____H C:\~0447
    2016-02-21 10:28 - 2016-02-21 10:28 - 209715200 ____H C:\~0446
    2016-02-21 10:28 - 2016-02-21 10:28 - 209715200 ____H C:\~0445
    2016-02-21 10:28 - 2016-02-21 10:28 - 209715200 ____H C:\~0444
    2016-02-21 10:28 - 2016-02-21 10:28 - 209715200 ____H C:\~0443
    2016-02-21 10:28 - 2016-02-21 10:28 - 209715200 ____H C:\~0442
    2016-02-21 10:28 - 2016-02-21 10:28 - 209715200 ____H C:\~0441
    2016-02-21 10:27 - 2016-02-21 10:28 - 209715200 ____H C:\~0440
    2016-02-21 10:27 - 2016-02-21 10:27 - 209715200 ____H C:\~043f
    2016-02-21 10:27 - 2016-02-21 10:27 - 209715200 ____H C:\~043e
    2016-02-21 10:27 - 2016-02-21 10:27 - 209715200 ____H C:\~043d
    2016-02-21 10:27 - 2016-02-21 10:27 - 209715200 ____H C:\~043c
    2016-02-21 10:27 - 2016-02-21 10:27 - 209715200 ____H C:\~043b
    2016-02-21 10:27 - 2016-02-21 10:27 - 209715200 ____H C:\~043a
    2016-02-21 10:27 - 2016-02-21 10:27 - 209715200 ____H C:\~0439
    2016-02-21 10:27 - 2016-02-21 10:27 - 209715200 ____H C:\~0438
    2016-02-21 10:27 - 2016-02-21 10:27 - 209715200 ____H C:\~0437
    2016-02-21 10:27 - 2016-02-21 10:27 - 209715200 ____H C:\~0436
    2016-02-21 10:27 - 2016-02-21 10:27 - 209715200 ____H C:\~0435
    2016-02-21 10:26 - 2016-02-21 10:27 - 209715200 ____H C:\~0434
    2016-02-21 10:26 - 2016-02-21 10:26 - 209715200 ____H C:\~0433
    2016-02-21 10:26 - 2016-02-21 10:26 - 209715200 ____H C:\~0432
    2016-02-21 10:26 - 2016-02-21 10:26 - 209715200 ____H C:\~0431
    2016-02-21 10:26 - 2016-02-21 10:26 - 209715200 ____H C:\~0430
    2016-02-21 10:26 - 2016-02-21 10:26 - 209715200 ____H C:\~042f
    2016-02-21 10:26 - 2016-02-21 10:26 - 209715200 ____H C:\~042e
    2016-02-21 10:26 - 2016-02-21 10:26 - 209715200 ____H C:\~042d
    2016-02-21 10:26 - 2016-02-21 10:26 - 209715200 ____H C:\~042c
    2016-02-21 10:26 - 2016-02-21 10:26 - 209715200 ____H C:\~042b
    2016-02-21 10:26 - 2016-02-21 10:26 - 209715200 ____H C:\~042a
    2016-02-21 10:26 - 2016-02-21 10:26 - 209715200 ____H C:\~0429
    2016-02-21 10:25 - 2016-02-21 10:26 - 209715200 ____H C:\~0428
    2016-02-21 10:25 - 2016-02-21 10:25 - 209715200 ____H C:\~0427
    2016-02-21 10:25 - 2016-02-21 10:25 - 209715200 ____H C:\~0426
    2016-02-21 10:25 - 2016-02-21 10:25 - 209715200 ____H C:\~0425
    2016-02-21 10:25 - 2016-02-21 10:25 - 209715200 ____H C:\~0424
    2016-02-21 10:25 - 2016-02-21 10:25 - 209715200 ____H C:\~0423
    2016-02-21 10:25 - 2016-02-21 10:25 - 209715200 ____H C:\~0422
    2016-02-21 10:25 - 2016-02-21 10:25 - 209715200 ____H C:\~0421
    2016-02-21 10:25 - 2016-02-21 10:25 - 209715200 ____H C:\~0420
    2016-02-21 10:25 - 2016-02-21 10:25 - 209715200 ____H C:\~041f
    2016-02-21 10:25 - 2016-02-21 10:25 - 209715200 ____H C:\~041e
    2016-02-21 10:24 - 2016-02-21 10:25 - 209715200 ____H C:\~041d
    2016-02-21 10:24 - 2016-02-21 10:24 - 209715200 ____H C:\~041c
    2016-02-21 10:24 - 2016-02-21 10:24 - 209715200 ____H C:\~041b
    2016-02-21 10:24 - 2016-02-21 10:24 - 209715200 ____H C:\~041a
    2016-02-21 10:24 - 2016-02-21 10:24 - 209715200 ____H C:\~0419
    2016-02-21 10:24 - 2016-02-21 10:24 - 209715200 ____H C:\~0418
    2016-02-21 10:24 - 2016-02-21 10:24 - 209715200 ____H C:\~0417
    2016-02-21 10:24 - 2016-02-21 10:24 - 209715200 ____H C:\~0416
    2016-02-21 10:24 - 2016-02-21 10:24 - 209715200 ____H C:\~0415
    2016-02-21 10:24 - 2016-02-21 10:24 - 209715200 ____H C:\~0414
    2016-02-21 10:24 - 2016-02-21 10:24 - 209715200 ____H C:\~0413
    2016-02-21 10:24 - 2016-02-21 10:24 - 209715200 ____H C:\~0412
    2016-02-21 10:23 - 2016-02-21 10:24 - 209715200 ____H C:\~0411
    2016-02-21 10:23 - 2016-02-21 10:23 - 209715200 ____H C:\~0410
    2016-02-21 10:23 - 2016-02-21 10:23 - 209715200 ____H C:\~040f
    2016-02-21 10:23 - 2016-02-21 10:23 - 209715200 ____H C:\~040e
    2016-02-21 10:23 - 2016-02-21 10:23 - 209715200 ____H C:\~040d
    2016-02-21 10:23 - 2016-02-21 10:23 - 209715200 ____H C:\~040c
    2016-02-21 10:23 - 2016-02-21 10:23 - 209715200 ____H C:\~040b
    2016-02-21 10:23 - 2016-02-21 10:23 - 209715200 ____H C:\~040a
    2016-02-21 10:23 - 2016-02-21 10:23 - 209715200 ____H C:\~0409
    2016-02-21 10:23 - 2016-02-21 10:23 - 209715200 ____H C:\~0408
    2016-02-21 10:22 - 2016-02-21 10:23 - 209715200 ____H C:\~0407
    2016-02-21 10:22 - 2016-02-21 10:22 - 209715200 ____H C:\~0406
    2016-02-21 10:22 - 2016-02-21 10:22 - 209715200 ____H C:\~0405
    2016-02-21 10:22 - 2016-02-21 10:22 - 209715200 ____H C:\~0404
    2016-02-21 10:22 - 2016-02-21 10:22 - 209715200 ____H C:\~0403
    2016-02-21 10:22 - 2016-02-21 10:22 - 209715200 ____H C:\~0402
    2016-02-21 10:22 - 2016-02-21 10:22 - 209715200 ____H C:\~0401
    2016-02-21 10:22 - 2016-02-21 10:22 - 209715200 ____H C:\~0400
    2016-02-21 10:22 - 2016-02-21 10:22 - 209715200 ____H C:\~03ff
    2016-02-21 10:21 - 2016-02-21 10:22 - 209715200 ____H C:\~03fe
    2016-02-21 10:21 - 2016-02-21 10:21 - 209715200 ____H C:\~03fd
    2016-02-21 10:21 - 2016-02-21 10:21 - 209715200 ____H C:\~03fc
    2016-02-21 10:21 - 2016-02-21 10:21 - 209715200 ____H C:\~03fb
    2016-02-21 10:21 - 2016-02-21 10:21 - 209715200 ____H C:\~03fa
    2016-02-21 10:21 - 2016-02-21 10:21 - 209715200 ____H C:\~03f9
    2016-02-21 10:21 - 2016-02-21 10:21 - 209715200 ____H C:\~03f8
    2016-02-21 10:21 - 2016-02-21 10:21 - 209715200 ____H C:\~03f7
    2016-02-21 10:21 - 2016-02-21 10:21 - 209715200 ____H C:\~03f6
    2016-02-21 10:20 - 2016-02-21 10:21 - 209715200 ____H C:\~03f5
    2016-02-21 10:20 - 2016-02-21 10:20 - 209715200 ____H C:\~03f4
    2016-02-21 10:20 - 2016-02-21 10:20 - 209715200 ____H C:\~03f3
    2016-02-21 10:20 - 2016-02-21 10:20 - 209715200 ____H C:\~03f2
    2016-02-21 10:20 - 2016-02-21 10:20 - 209715200 ____H C:\~03f1
    2016-02-21 10:20 - 2016-02-21 10:20 - 209715200 ____H C:\~03f0
    2016-02-21 10:20 - 2016-02-21 10:20 - 209715200 ____H C:\~03ef
    2016-02-21 10:20 - 2016-02-21 10:20 - 209715200 ____H C:\~03ee
    2016-02-21 10:20 - 2016-02-21 10:20 - 209715200 ____H C:\~03ed
    2016-02-21 10:20 - 2016-02-21 10:20 - 209715200 ____H C:\~03ec
    2016-02-21 10:20 - 2016-02-21 10:20 - 209715200 ____H C:\~03eb
    2016-02-21 10:19 - 2016-02-21 10:20 - 209715200 ____H C:\~03ea
    2016-02-21 10:19 - 2016-02-21 10:19 - 209715200 ____H C:\~03e9
    2016-02-21 10:19 - 2016-02-21 10:19 - 209715200 ____H C:\~03e8
    2016-02-21 10:19 - 2016-02-21 10:19 - 209715200 ____H C:\~03e7
    2016-02-21 10:19 - 2016-02-21 10:19 - 209715200 ____H C:\~03e6
    2016-02-21 10:19 - 2016-02-21 10:19 - 209715200 ____H C:\~03e5
    2016-02-21 10:19 - 2016-02-21 10:19 - 209715200 ____H C:\~03e4
    2016-02-21 10:19 - 2016-02-21 10:19 - 209715200 ____H C:\~03e3
    2016-02-21 10:19 - 2016-02-21 10:19 - 209715200 ____H C:\~03e2
    2016-02-21 10:19 - 2016-02-21 10:19 - 209715200 ____H C:\~03e1
    2016-02-21 10:19 - 2016-02-21 10:19 - 209715200 ____H C:\~03e0
    2016-02-21 10:19 - 2016-02-21 10:19 - 209715200 ____H C:\~03df
    2016-02-21 10:19 - 2016-02-21 10:19 - 209715200 ____H C:\~03de
    2016-02-21 10:19 - 2016-02-21 10:19 - 209715200 ____H C:\~03dd
    2016-02-21 10:18 - 2016-02-21 10:19 - 209715200 ____H C:\~03dc
    2016-02-21 10:18 - 2016-02-21 10:18 - 209715200 ____H C:\~03db
    2016-02-21 10:18 - 2016-02-21 10:18 - 209715200 ____H C:\~03da
    2016-02-21 10:18 - 2016-02-21 10:18 - 209715200 ____H C:\~03d9
    2016-02-21 10:18 - 2016-02-21 10:18 - 209715200 ____H C:\~03d8
    2016-02-21 10:18 - 2016-02-21 10:18 - 209715200 ____H C:\~03d7
    2016-02-21 10:18 - 2016-02-21 10:18 - 209715200 ____H C:\~03d6
    2016-02-21 10:18 - 2016-02-21 10:18 - 209715200 ____H C:\~03d5
    2016-02-21 10:18 - 2016-02-21 10:18 - 209715200 ____H C:\~03d4
    2016-02-21 10:18 - 2016-02-21 10:18 - 209715200 ____H C:\~03d3
    2016-02-21 10:18 - 2016-02-21 10:18 - 209715200 ____H C:\~03d2
    2016-02-21 10:18 - 2016-02-21 10:18 - 209715200 ____H C:\~03d1
    2016-02-21 10:18 - 2016-02-21 10:18 - 209715200 ____H C:\~03d0
    2016-02-21 10:17 - 2016-02-21 10:18 - 209715200 ____H C:\~03cf
    2016-02-21 10:17 - 2016-02-21 10:17 - 209715200 ____H C:\~03ce
    2016-02-21 10:17 - 2016-02-21 10:17 - 209715200 ____H C:\~03cd
    2016-02-21 10:17 - 2016-02-21 10:17 - 209715200 ____H C:\~03cc
    2016-02-21 10:17 - 2016-02-21 10:17 - 209715200 ____H C:\~03cb
    2016-02-21 10:17 - 2016-02-21 10:17 - 209715200 ____H C:\~03ca
    2016-02-21 10:17 - 2016-02-21 10:17 - 209715200 ____H C:\~03c9
    2016-02-21 10:17 - 2016-02-21 10:17 - 209715200 ____H C:\~03c8
    2016-02-21 10:17 - 2016-02-21 10:17 - 209715200 ____H C:\~03c7
    2016-02-21 10:17 - 2016-02-21 10:17 - 209715200 ____H C:\~03c6
    2016-02-21 10:17 - 2016-02-21 10:17 - 209715200 ____H C:\~03c5
    2016-02-21 10:17 - 2016-02-21 10:17 - 209715200 ____H C:\~03c4
    2016-02-21 10:17 - 2016-02-21 10:17 - 209715200 ____H C:\~03c3
    2016-02-21 10:17 - 2016-02-21 10:17 - 209715200 ____H C:\~03c2
    2016-02-21 10:16 - 2016-02-21 10:17 - 209715200 ____H C:\~03c1
    2016-02-21 10:16 - 2016-02-21 10:16 - 209715200 ____H C:\~03c0
    2016-02-21 10:16 - 2016-02-21 10:16 - 209715200 ____H C:\~03bf
    2016-02-21 10:16 - 2016-02-21 10:16 - 209715200 ____H C:\~03be
    2016-02-21 10:16 - 2016-02-21 10:16 - 209715200 ____H C:\~03bd
    2016-02-21 10:16 - 2016-02-21 10:16 - 209715200 ____H C:\~03bc
    2016-02-21 10:16 - 2016-02-21 10:16 - 209715200 ____H C:\~03bb
    2016-02-21 10:16 - 2016-02-21 10:16 - 209715200 ____H C:\~03ba
    2016-02-21 10:16 - 2016-02-21 10:16 - 209715200 ____H C:\~03b9
    2016-02-21 10:16 - 2016-02-21 10:16 - 209715200 ____H C:\~03b8
    2016-02-21 10:16 - 2016-02-21 10:16 - 209715200 ____H C:\~03b7
    2016-02-21 10:16 - 2016-02-21 10:16 - 209715200 ____H C:\~03b6
    2016-02-21 10:16 - 2016-02-21 10:16 - 209715200 ____H C:\~03b5
    2016-02-21 10:15 - 2016-02-21 10:16 - 209715200 ____H C:\~03b4
    2016-02-21 10:15 - 2016-02-21 10:15 - 209715200 ____H C:\~03b3
    2016-02-21 10:15 - 2016-02-21 10:15 - 209715200 ____H C:\~03b2
    2016-02-21 10:15 - 2016-02-21 10:15 - 209715200 ____H C:\~03b1
    2016-02-21 10:15 - 2016-02-21 10:15 - 209715200 ____H C:\~03b0
    2016-02-21 10:15 - 2016-02-21 10:15 - 209715200 ____H C:\~03af
    2016-02-21 10:15 - 2016-02-21 10:15 - 209715200 ____H C:\~03ae
    2016-02-21 10:15 - 2016-02-21 10:15 - 209715200 ____H C:\~03ad
    2016-02-21 10:15 - 2016-02-21 10:15 - 209715200 ____H C:\~03ac
    2016-02-21 10:15 - 2016-02-21 10:15 - 209715200 ____H C:\~03ab
    2016-02-21 10:15 - 2016-02-21 10:15 - 209715200 ____H C:\~03aa
    2016-02-21 10:15 - 2016-02-21 10:15 - 209715200 ____H C:\~03a9
    2016-02-21 10:15 - 2016-02-21 10:15 - 209715200 ____H C:\~03a8
    2016-02-21 10:14 - 2016-02-21 10:15 - 209715200 ____H C:\~03a7
    2016-02-21 10:14 - 2016-02-21 10:14 - 209715200 ____H C:\~03a6
    2016-02-21 10:14 - 2016-02-21 10:14 - 209715200 ____H C:\~03a5
    2016-02-21 10:14 - 2016-02-21 10:14 - 209715200 ____H C:\~03a4
    2016-02-21 10:14 - 2016-02-21 10:14 - 209715200 ____H C:\~03a3
    2016-02-21 10:14 - 2016-02-21 10:14 - 209715200 ____H C:\~03a2
    2016-02-21 10:14 - 2016-02-21 10:14 - 209715200 ____H C:\~03a1
    2016-02-21 10:14 - 2016-02-21 10:14 - 209715200 ____H C:\~03a0
    2016-02-21 10:14 - 2016-02-21 10:14 - 209715200 ____H C:\~039f
    2016-02-21 10:14 - 2016-02-21 10:14 - 209715200 ____H C:\~039e
    2016-02-21 10:14 - 2016-02-21 10:14 - 209715200 ____H C:\~039d
    2016-02-21 10:14 - 2016-02-21 10:14 - 209715200 ____H C:\~039c
    2016-02-21 10:14 - 2016-02-21 10:14 - 209715200 ____H C:\~039b
    2016-02-21 10:13 - 2016-02-21 10:14 - 209715200 ____H C:\~039a
    2016-02-21 10:13 - 2016-02-21 10:13 - 209715200 ____H C:\~0399
    2016-02-21 10:13 - 2016-02-21 10:13 - 209715200 ____H C:\~0398
    2016-02-21 10:13 - 2016-02-21 10:13 - 209715200 ____H C:\~0397
    2016-02-21 10:13 - 2016-02-21 10:13 - 209715200 ____H C:\~0396
    2016-02-21 10:13 - 2016-02-21 10:13 - 209715200 ____H C:\~0395
    2016-02-21 10:13 - 2016-02-21 10:13 - 209715200 ____H C:\~0394
    2016-02-21 10:13 - 2016-02-21 10:13 - 209715200 ____H C:\~0393
    2016-02-21 10:13 - 2016-02-21 10:13 - 209715200 ____H C:\~0392
    2016-02-21 10:13 - 2016-02-21 10:13 - 209715200 ____H C:\~0391
    2016-02-21 10:13 - 2016-02-21 10:13 - 209715200 ____H C:\~0390
    2016-02-21 10:13 - 2016-02-21 10:13 - 209715200 ____H C:\~038f
    2016-02-21 10:13 - 2016-02-21 10:13 - 209715200 ____H C:\~038e
    2016-02-21 10:12 - 2016-02-21 10:13 - 209715200 ____H C:\~038d
    2016-02-21 10:12 - 2016-02-21 10:12 - 209715200 ____H C:\~038c
    2016-02-21 10:12 - 2016-02-21 10:12 - 209715200 ____H C:\~038b
    2016-02-21 10:12 - 2016-02-21 10:12 - 209715200 ____H C:\~038a
    2016-02-21 10:12 - 2016-02-21 10:12 - 209715200 ____H C:\~0389
    2016-02-21 10:12 - 2016-02-21 10:12 - 209715200 ____H C:\~0388
    2016-02-21 10:12 - 2016-02-21 10:12 - 209715200 ____H C:\~0387
    2016-02-21 10:12 - 2016-02-21 10:12 - 209715200 ____H C:\~0386
    2016-02-21 10:12 - 2016-02-21 10:12 - 209715200 ____H C:\~0385
    2016-02-21 10:12 - 2016-02-21 10:12 - 209715200 ____H C:\~0384
    2016-02-21 10:12 - 2016-02-21 10:12 - 209715200 ____H C:\~0383
    2016-02-21 10:12 - 2016-02-21 10:12 - 209715200 ____H C:\~0382
    2016-02-21 10:12 - 2016-02-21 10:12 - 209715200 ____H C:\~0381
    2016-02-21 10:12 - 2016-02-21 10:12 - 209715200 ____H C:\~0380
    2016-02-21 10:11 - 2016-02-21 10:12 - 209715200 ____H C:\~037f
    2016-02-21 10:11 - 2016-02-21 10:11 - 209715200 ____H C:\~037e
    2016-02-21 10:11 - 2016-02-21 10:11 - 209715200 ____H C:\~037d
    2016-02-21 10:11 - 2016-02-21 10:11 - 209715200 ____H C:\~037c
    2016-02-21 10:11 - 2016-02-21 10:11 - 209715200 ____H C:\~037b
    2016-02-21 10:11 - 2016-02-21 10:11 - 209715200 ____H C:\~037a
    2016-02-21 10:11 - 2016-02-21 10:11 - 209715200 ____H C:\~0379
    2016-02-21 10:11 - 2016-02-21 10:11 - 209715200 ____H C:\~0378
    2016-02-21 10:11 - 2016-02-21 10:11 - 209715200 ____H C:\~0377
    2016-02-21 10:11 - 2016-02-21 10:11 - 209715200 ____H C:\~0376
    2016-02-21 10:11 - 2016-02-21 10:11 - 209715200 ____H C:\~0375
    2016-02-21 10:11 - 2016-02-21 10:11 - 209715200 ____H C:\~0374
    2016-02-21 10:11 - 2016-02-21 10:11 - 209715200 ____H C:\~0373
    2016-02-21 10:11 - 2016-02-21 10:11 - 209715200 ____H C:\~0372
    2016-02-21 10:10 - 2016-02-21 10:11 - 209715200 ____H C:\~0371
    2016-02-21 10:10 - 2016-02-21 10:10 - 209715200 ____H C:\~0370
    2016-02-21 10:10 - 2016-02-21 10:10 - 209715200 ____H C:\~036f
    2016-02-21 10:10 - 2016-02-21 10:10 - 209715200 ____H C:\~036e
    2016-02-21 10:10 - 2016-02-21 10:10 - 209715200 ____H C:\~036d
    2016-02-21 10:10 - 2016-02-21 10:10 - 209715200 ____H C:\~036c
    2016-02-21 10:10 - 2016-02-21 10:10 - 209715200 ____H C:\~036b
    2016-02-21 10:10 - 2016-02-21 10:10 - 209715200 ____H C:\~036a
    2016-02-21 10:10 - 2016-02-21 10:10 - 209715200 ____H C:\~0369
    2016-02-21 10:10 - 2016-02-21 10:10 - 209715200 ____H C:\~0368
    2016-02-21 10:10 - 2016-02-21 10:10 - 209715200 ____H C:\~0367
    2016-02-21 10:10 - 2016-02-21 10:10 - 209715200 ____H C:\~0366
    2016-02-21 10:10 - 2016-02-21 10:10 - 209715200 ____H C:\~0365
    2016-02-21 10:10 - 2016-02-21 10:10 - 209715200 ____H C:\~0364
    2016-02-21 10:10 - 2016-02-21 10:10 - 209715200 ____H C:\~0363
    2016-02-21 10:09 - 2016-02-21 10:10 - 209715200 ____H C:\~0362
    2016-02-21 10:09 - 2016-02-21 10:09 - 209715200 ____H C:\~0361
    2016-02-21 10:09 - 2016-02-21 10:09 - 209715200 ____H C:\~0360
    2016-02-21 10:09 - 2016-02-21 10:09 - 209715200 ____H C:\~035f
    2016-02-21 10:09 - 2016-02-21 10:09 - 209715200 ____H C:\~035e
    2016-02-21 10:09 - 2016-02-21 10:09 - 209715200 ____H C:\~035d
    2016-02-21 10:09 - 2016-02-21 10:09 - 209715200 ____H C:\~035c
    2016-02-21 10:09 - 2016-02-21 10:09 - 209715200 ____H C:\~035b
    2016-02-21 10:09 - 2016-02-21 10:09 - 209715200 ____H C:\~035a
    2016-02-21 10:09 - 2016-02-21 10:09 - 209715200 ____H C:\~0359
    2016-02-21 10:09 - 2016-02-21 10:09 - 209715200 ____H C:\~0358
    2016-02-21 10:09 - 2016-02-21 10:09 - 209715200 ____H C:\~0357
    2016-02-21 10:09 - 2016-02-21 10:09 - 209715200 ____H C:\~0356
    2016-02-21 10:09 - 2016-02-21 10:09 - 209715200 ____H C:\~0355
    2016-02-21 10:08 - 2016-02-21 10:09 - 209715200 ____H C:\~0354
    2016-02-21 10:08 - 2016-02-21 10:08 - 209715200 ____H C:\~0353
    2016-02-21 10:08 - 2016-02-21 10:08 - 209715200 ____H C:\~0352
    2016-02-21 10:08 - 2016-02-21 10:08 - 209715200 ____H C:\~0351
    2016-02-21 10:08 - 2016-02-21 10:08 - 209715200 ____H C:\~0350
    2016-02-21 10:08 - 2016-02-21 10:08 - 209715200 ____H C:\~034f
     
  16. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    2016-02-21 10:08 - 2016-02-21 10:08 - 209715200 ____H C:\~034e
    2016-02-21 10:08 - 2016-02-21 10:08 - 209715200 ____H C:\~034d
    2016-02-21 10:08 - 2016-02-21 10:08 - 209715200 ____H C:\~034c
    2016-02-21 10:08 - 2016-02-21 10:08 - 209715200 ____H C:\~034b
    2016-02-21 10:08 - 2016-02-21 10:08 - 209715200 ____H C:\~034a
    2016-02-21 10:08 - 2016-02-21 10:08 - 209715200 ____H C:\~0349
    2016-02-21 10:08 - 2016-02-21 10:08 - 209715200 ____H C:\~0348
    2016-02-21 10:08 - 2016-02-21 10:08 - 209715200 ____H C:\~0347
    2016-02-21 10:07 - 2016-02-21 10:08 - 209715200 ____H C:\~0346
    2016-02-21 10:07 - 2016-02-21 10:07 - 209715200 ____H C:\~0345
    2016-02-21 10:07 - 2016-02-21 10:07 - 209715200 ____H C:\~0344
    2016-02-21 10:07 - 2016-02-21 10:07 - 209715200 ____H C:\~0343
    2016-02-21 10:07 - 2016-02-21 10:07 - 209715200 ____H C:\~0342
    2016-02-21 10:07 - 2016-02-21 10:07 - 209715200 ____H C:\~0341
    2016-02-21 10:07 - 2016-02-21 10:07 - 209715200 ____H C:\~0340
    2016-02-21 10:07 - 2016-02-21 10:07 - 209715200 ____H C:\~033f
    2016-02-21 10:07 - 2016-02-21 10:07 - 209715200 ____H C:\~033e
    2016-02-21 10:07 - 2016-02-21 10:07 - 209715200 ____H C:\~033d
    2016-02-21 10:07 - 2016-02-21 10:07 - 209715200 ____H C:\~033c
    2016-02-21 10:07 - 2016-02-21 10:07 - 209715200 ____H C:\~033b
    2016-02-21 10:07 - 2016-02-21 10:07 - 209715200 ____H C:\~033a
    2016-02-21 10:07 - 2016-02-21 10:07 - 209715200 ____H C:\~0339
    2016-02-21 10:07 - 2016-02-21 10:07 - 209715200 ____H C:\~0338
    2016-02-21 10:06 - 2016-02-21 10:07 - 209715200 ____H C:\~0337
    2016-02-21 10:06 - 2016-02-21 10:06 - 209715200 ____H C:\~0336
    2016-02-21 10:06 - 2016-02-21 10:06 - 209715200 ____H C:\~0335
    2016-02-21 10:06 - 2016-02-21 10:06 - 209715200 ____H C:\~0334
    2016-02-21 10:06 - 2016-02-21 10:06 - 209715200 ____H C:\~0333
    2016-02-21 10:06 - 2016-02-21 10:06 - 209715200 ____H C:\~0332
    2016-02-21 10:06 - 2016-02-21 10:06 - 209715200 ____H C:\~0331
    2016-02-21 10:06 - 2016-02-21 10:06 - 209715200 ____H C:\~0330
    2016-02-21 10:06 - 2016-02-21 10:06 - 209715200 ____H C:\~032f
    2016-02-21 10:06 - 2016-02-21 10:06 - 209715200 ____H C:\~032e
    2016-02-21 10:06 - 2016-02-21 10:06 - 209715200 ____H C:\~032d
    2016-02-21 10:06 - 2016-02-21 10:06 - 209715200 ____H C:\~032c
    2016-02-21 10:06 - 2016-02-21 10:06 - 209715200 ____H C:\~032b
    2016-02-21 10:06 - 2016-02-21 10:06 - 209715200 ____H C:\~032a
    2016-02-21 10:06 - 2016-02-21 10:06 - 209715200 ____H C:\~0329
    2016-02-21 10:05 - 2016-02-21 10:06 - 209715200 ____H C:\~0328
    2016-02-21 10:05 - 2016-02-21 10:05 - 209715200 ____H C:\~0327
    2016-02-21 10:05 - 2016-02-21 10:05 - 209715200 ____H C:\~0326
    2016-02-21 10:05 - 2016-02-21 10:05 - 209715200 ____H C:\~0325
    2016-02-21 10:05 - 2016-02-21 10:05 - 209715200 ____H C:\~0324
    2016-02-21 10:05 - 2016-02-21 10:05 - 209715200 ____H C:\~0323
    2016-02-21 10:05 - 2016-02-21 10:05 - 209715200 ____H C:\~0322
    2016-02-21 10:05 - 2016-02-21 10:05 - 209715200 ____H C:\~0321
    2016-02-21 10:05 - 2016-02-21 10:05 - 209715200 ____H C:\~0320
    2016-02-21 10:05 - 2016-02-21 10:05 - 209715200 ____H C:\~031f
    2016-02-21 10:05 - 2016-02-21 10:05 - 209715200 ____H C:\~031e
    2016-02-21 10:05 - 2016-02-21 10:05 - 209715200 ____H C:\~031d
    2016-02-21 10:05 - 2016-02-21 10:05 - 209715200 ____H C:\~031c
    2016-02-21 10:05 - 2016-02-21 10:05 - 209715200 ____H C:\~031b
    2016-02-21 10:05 - 2016-02-21 10:05 - 209715200 ____H C:\~031a
    2016-02-21 10:05 - 2016-02-21 10:05 - 209715200 ____H C:\~0319
    2016-02-21 10:04 - 2016-02-21 10:05 - 209715200 ____H C:\~0318
    2016-02-21 10:04 - 2016-02-21 10:04 - 209715200 ____H C:\~0317
    2016-02-21 10:04 - 2016-02-21 10:04 - 209715200 ____H C:\~0316
    2016-02-21 10:04 - 2016-02-21 10:04 - 209715200 ____H C:\~0315
    2016-02-21 10:04 - 2016-02-21 10:04 - 209715200 ____H C:\~0314
    2016-02-21 10:04 - 2016-02-21 10:04 - 209715200 ____H C:\~0313
    2016-02-21 10:04 - 2016-02-21 10:04 - 209715200 ____H C:\~0312
    2016-02-21 10:04 - 2016-02-21 10:04 - 209715200 ____H C:\~0311
    2016-02-21 10:04 - 2016-02-21 10:04 - 209715200 ____H C:\~0310
    2016-02-21 10:04 - 2016-02-21 10:04 - 209715200 ____H C:\~030f
    2016-02-21 10:04 - 2016-02-21 10:04 - 209715200 ____H C:\~030e
    2016-02-21 10:04 - 2016-02-21 10:04 - 209715200 ____H C:\~030d
    2016-02-21 10:04 - 2016-02-21 10:04 - 209715200 ____H C:\~030c
    2016-02-21 10:04 - 2016-02-21 10:04 - 209715200 ____H C:\~030b
    2016-02-21 10:04 - 2016-02-21 10:04 - 209715200 ____H C:\~030a
    2016-02-21 10:03 - 2016-02-21 10:04 - 209715200 ____H C:\~0309
    2016-02-21 10:03 - 2016-02-21 10:03 - 209715200 ____H C:\~0308
    2016-02-21 10:03 - 2016-02-21 10:03 - 209715200 ____H C:\~0307
    2016-02-21 10:03 - 2016-02-21 10:03 - 209715200 ____H C:\~0306
    2016-02-21 10:03 - 2016-02-21 10:03 - 209715200 ____H C:\~0305
    2016-02-21 10:03 - 2016-02-21 10:03 - 209715200 ____H C:\~0304
    2016-02-21 10:03 - 2016-02-21 10:03 - 209715200 ____H C:\~0303
    2016-02-21 10:03 - 2016-02-21 10:03 - 209715200 ____H C:\~0302
    2016-02-21 10:03 - 2016-02-21 10:03 - 209715200 ____H C:\~0301
    2016-02-21 10:03 - 2016-02-21 10:03 - 209715200 ____H C:\~0300
    2016-02-21 10:03 - 2016-02-21 10:03 - 209715200 ____H C:\~02ff
    2016-02-21 10:03 - 2016-02-21 10:03 - 209715200 ____H C:\~02fe
    2016-02-21 10:03 - 2016-02-21 10:03 - 209715200 ____H C:\~02fd
    2016-02-21 10:03 - 2016-02-21 10:03 - 209715200 ____H C:\~02fc
    2016-02-21 10:02 - 2016-02-21 10:03 - 209715200 ____H C:\~02fb
    2016-02-21 10:02 - 2016-02-21 10:02 - 209715200 ____H C:\~02fa
    2016-02-21 10:02 - 2016-02-21 10:02 - 209715200 ____H C:\~02f9
    2016-02-21 10:02 - 2016-02-21 10:02 - 209715200 ____H C:\~02f8
    2016-02-21 10:02 - 2016-02-21 10:02 - 209715200 ____H C:\~02f7
    2016-02-21 10:02 - 2016-02-21 10:02 - 209715200 ____H C:\~02f6
    2016-02-21 10:02 - 2016-02-21 10:02 - 209715200 ____H C:\~02f5
    2016-02-21 10:02 - 2016-02-21 10:02 - 209715200 ____H C:\~02f4
    2016-02-21 10:02 - 2016-02-21 10:02 - 209715200 ____H C:\~02f3
    2016-02-21 10:02 - 2016-02-21 10:02 - 209715200 ____H C:\~02f2
    2016-02-21 10:02 - 2016-02-21 10:02 - 209715200 ____H C:\~02f1
    2016-02-21 10:02 - 2016-02-21 10:02 - 209715200 ____H C:\~02f0
    2016-02-21 10:02 - 2016-02-21 10:02 - 209715200 ____H C:\~02ef
    2016-02-21 10:02 - 2016-02-21 10:02 - 209715200 ____H C:\~02ee
    2016-02-21 10:02 - 2016-02-21 10:02 - 209715200 ____H C:\~02ed
    2016-02-21 10:02 - 2016-02-21 10:02 - 209715200 ____H C:\~02ec
    2016-02-21 10:01 - 2016-02-21 10:02 - 209715200 ____H C:\~02eb
    2016-02-21 10:01 - 2016-02-21 10:01 - 209715200 ____H C:\~02ea
    2016-02-21 10:01 - 2016-02-21 10:01 - 209715200 ____H C:\~02e9
    2016-02-21 10:01 - 2016-02-21 10:01 - 209715200 ____H C:\~02e8
    2016-02-21 10:01 - 2016-02-21 10:01 - 209715200 ____H C:\~02e7
    2016-02-21 10:01 - 2016-02-21 10:01 - 209715200 ____H C:\~02e6
    2016-02-21 10:01 - 2016-02-21 10:01 - 209715200 ____H C:\~02e5
    2016-02-21 10:01 - 2016-02-21 10:01 - 209715200 ____H C:\~02e4
    2016-02-21 10:01 - 2016-02-21 10:01 - 209715200 ____H C:\~02e3
    2016-02-21 10:01 - 2016-02-21 10:01 - 209715200 ____H C:\~02e2
    2016-02-21 10:01 - 2016-02-21 10:01 - 209715200 ____H C:\~02e1
    2016-02-21 10:01 - 2016-02-21 10:01 - 209715200 ____H C:\~02e0
    2016-02-21 10:01 - 2016-02-21 10:01 - 209715200 ____H C:\~02df
    2016-02-21 10:01 - 2016-02-21 10:01 - 209715200 ____H C:\~02de
    2016-02-21 10:01 - 2016-02-21 10:01 - 209715200 ____H C:\~02dd
    2016-02-21 10:00 - 2016-02-21 10:01 - 209715200 ____H C:\~02dc
    2016-02-21 10:00 - 2016-02-21 10:00 - 209715200 ____H C:\~02db
    2016-02-21 10:00 - 2016-02-21 10:00 - 209715200 ____H C:\~02da
    2016-02-21 10:00 - 2016-02-21 10:00 - 209715200 ____H C:\~02d9
    2016-02-21 10:00 - 2016-02-21 10:00 - 209715200 ____H C:\~02d8
    2016-02-21 10:00 - 2016-02-21 10:00 - 209715200 ____H C:\~02d7
    2016-02-21 10:00 - 2016-02-21 10:00 - 209715200 ____H C:\~02d6
    2016-02-21 10:00 - 2016-02-21 10:00 - 209715200 ____H C:\~02d5
    2016-02-21 10:00 - 2016-02-21 10:00 - 209715200 ____H C:\~02d4
    2016-02-21 10:00 - 2016-02-21 10:00 - 209715200 ____H C:\~02d3
    2016-02-21 10:00 - 2016-02-21 10:00 - 209715200 ____H C:\~02d2
    2016-02-21 10:00 - 2016-02-21 10:00 - 209715200 ____H C:\~02d1
    2016-02-21 10:00 - 2016-02-21 10:00 - 209715200 ____H C:\~02d0
    2016-02-21 10:00 - 2016-02-21 10:00 - 209715200 ____H C:\~02cf
    2016-02-21 10:00 - 2016-02-21 10:00 - 209715200 ____H C:\~02ce
    2016-02-21 10:00 - 2016-02-21 10:00 - 209715200 ____H C:\~02cd
    2016-02-21 09:59 - 2016-02-21 10:00 - 209715200 ____H C:\~02cc
    2016-02-21 09:59 - 2016-02-21 09:59 - 209715200 ____H C:\~02cb
    2016-02-21 09:59 - 2016-02-21 09:59 - 209715200 ____H C:\~02ca
    2016-02-21 09:59 - 2016-02-21 09:59 - 209715200 ____H C:\~02c9
    2016-02-21 09:59 - 2016-02-21 09:59 - 209715200 ____H C:\~02c8
    2016-02-21 09:59 - 2016-02-21 09:59 - 209715200 ____H C:\~02c7
    2016-02-21 09:59 - 2016-02-21 09:59 - 209715200 ____H C:\~02c6
    2016-02-21 09:59 - 2016-02-21 09:59 - 209715200 ____H C:\~02c5
    2016-02-21 09:59 - 2016-02-21 09:59 - 209715200 ____H C:\~02c4
    2016-02-21 09:59 - 2016-02-21 09:59 - 209715200 ____H C:\~02c3
    2016-02-21 09:59 - 2016-02-21 09:59 - 209715200 ____H C:\~02c2
    2016-02-21 09:59 - 2016-02-21 09:59 - 209715200 ____H C:\~02c1
    2016-02-21 09:59 - 2016-02-21 09:59 - 209715200 ____H C:\~02c0
    2016-02-21 09:59 - 2016-02-21 09:59 - 209715200 ____H C:\~02bf
    2016-02-21 09:59 - 2016-02-21 09:59 - 209715200 ____H C:\~02be
    2016-02-21 09:58 - 2016-02-21 09:59 - 209715200 ____H C:\~02bd
    2016-02-21 09:58 - 2016-02-21 09:58 - 209715200 ____H C:\~02bc
    2016-02-21 09:58 - 2016-02-21 09:58 - 209715200 ____H C:\~02bb
    2016-02-21 09:58 - 2016-02-21 09:58 - 209715200 ____H C:\~02ba
    2016-02-21 09:58 - 2016-02-21 09:58 - 209715200 ____H C:\~02b9
    2016-02-21 09:58 - 2016-02-21 09:58 - 209715200 ____H C:\~02b8
    2016-02-21 09:58 - 2016-02-21 09:58 - 209715200 ____H C:\~02b7
    2016-02-21 09:58 - 2016-02-21 09:58 - 209715200 ____H C:\~02b6
    2016-02-21 09:58 - 2016-02-21 09:58 - 209715200 ____H C:\~02b5
    2016-02-21 09:58 - 2016-02-21 09:58 - 209715200 ____H C:\~02b4
    2016-02-21 09:58 - 2016-02-21 09:58 - 209715200 ____H C:\~02b3
    2016-02-21 09:58 - 2016-02-21 09:58 - 209715200 ____H C:\~02b2
    2016-02-21 09:58 - 2016-02-21 09:58 - 209715200 ____H C:\~02b1
    2016-02-21 09:58 - 2016-02-21 09:58 - 209715200 ____H C:\~02b0
    2016-02-21 09:58 - 2016-02-21 09:58 - 209715200 ____H C:\~02af
    2016-02-21 09:57 - 2016-02-21 09:58 - 209715200 ____H C:\~02ae
    2016-02-21 09:57 - 2016-02-21 09:57 - 209715200 ____H C:\~02ad
    2016-02-21 09:57 - 2016-02-21 09:57 - 209715200 ____H C:\~02ac
    2016-02-21 09:57 - 2016-02-21 09:57 - 209715200 ____H C:\~02ab
    2016-02-21 09:57 - 2016-02-21 09:57 - 209715200 ____H C:\~02aa
    2016-02-21 09:57 - 2016-02-21 09:57 - 209715200 ____H C:\~02a9
    2016-02-21 09:57 - 2016-02-21 09:57 - 209715200 ____H C:\~02a8
    2016-02-21 09:57 - 2016-02-21 09:57 - 209715200 ____H C:\~02a7
    2016-02-21 09:57 - 2016-02-21 09:57 - 209715200 ____H C:\~02a6
    2016-02-21 09:57 - 2016-02-21 09:57 - 209715200 ____H C:\~02a5
    2016-02-21 09:57 - 2016-02-21 09:57 - 209715200 ____H C:\~02a4
    2016-02-21 09:57 - 2016-02-21 09:57 - 209715200 ____H C:\~02a3
    2016-02-21 09:57 - 2016-02-21 09:57 - 209715200 ____H C:\~02a2
    2016-02-21 09:56 - 2016-02-21 09:57 - 209715200 ____H C:\~02a1
    2016-02-21 09:56 - 2016-02-21 09:56 - 209715200 ____H C:\~02a0
    2016-02-21 09:56 - 2016-02-21 09:56 - 209715200 ____H C:\~029f
    2016-02-21 09:56 - 2016-02-21 09:56 - 209715200 ____H C:\~029e
    2016-02-21 09:56 - 2016-02-21 09:56 - 209715200 ____H C:\~029d
    2016-02-21 09:56 - 2016-02-21 09:56 - 209715200 ____H C:\~029c
    2016-02-21 09:56 - 2016-02-21 09:56 - 209715200 ____H C:\~029b
    2016-02-21 09:56 - 2016-02-21 09:56 - 209715200 ____H C:\~029a
    2016-02-21 09:56 - 2016-02-21 09:56 - 209715200 ____H C:\~0299
    2016-02-21 09:56 - 2016-02-21 09:56 - 209715200 ____H C:\~0298
    2016-02-21 09:56 - 2016-02-21 09:56 - 209715200 ____H C:\~0297
    2016-02-21 09:55 - 2016-02-21 09:56 - 209715200 ____H C:\~0296
    2016-02-21 09:55 - 2016-02-21 09:55 - 209715200 ____H C:\~0295
    2016-02-21 09:55 - 2016-02-21 09:55 - 209715200 ____H C:\~0294
    2016-02-21 09:55 - 2016-02-21 09:55 - 209715200 ____H C:\~0293
    2016-02-21 09:55 - 2016-02-21 09:55 - 209715200 ____H C:\~0292
    2016-02-21 09:55 - 2016-02-21 09:55 - 209715200 ____H C:\~0291
    2016-02-21 09:55 - 2016-02-21 09:55 - 209715200 ____H C:\~0290
    2016-02-21 09:55 - 2016-02-21 09:55 - 209715200 ____H C:\~028f
    2016-02-21 09:55 - 2016-02-21 09:55 - 209715200 ____H C:\~028e
    2016-02-21 09:55 - 2016-02-21 09:55 - 209715200 ____H C:\~028d
    2016-02-21 09:55 - 2016-02-21 09:55 - 209715200 ____H C:\~028c
    2016-02-21 09:55 - 2016-02-21 09:55 - 209715200 ____H C:\~028b
    2016-02-21 09:55 - 2016-02-21 09:55 - 209715200 ____H C:\~028a
    2016-02-21 09:55 - 2016-02-21 09:55 - 209715200 ____H C:\~0289
    2016-02-21 09:55 - 2016-02-21 09:55 - 209715200 ____H C:\~0288
    2016-02-21 09:54 - 2016-02-21 09:55 - 209715200 ____H C:\~0287
    2016-02-21 09:54 - 2016-02-21 09:54 - 209715200 ____H C:\~0286
    2016-02-21 09:54 - 2016-02-21 09:54 - 209715200 ____H C:\~0285
    2016-02-21 09:54 - 2016-02-21 09:54 - 209715200 ____H C:\~0284
    2016-02-21 09:54 - 2016-02-21 09:54 - 209715200 ____H C:\~0283
    2016-02-21 09:54 - 2016-02-21 09:54 - 209715200 ____H C:\~0282
    2016-02-21 09:54 - 2016-02-21 09:54 - 209715200 ____H C:\~0281
    2016-02-21 09:54 - 2016-02-21 09:54 - 209715200 ____H C:\~0280
    2016-02-21 09:54 - 2016-02-21 09:54 - 209715200 ____H C:\~027f
    2016-02-21 09:54 - 2016-02-21 09:54 - 209715200 ____H C:\~027e
    2016-02-21 09:54 - 2016-02-21 09:54 - 209715200 ____H C:\~027d
    2016-02-21 09:54 - 2016-02-21 09:54 - 209715200 ____H C:\~027c
    2016-02-21 09:54 - 2016-02-21 09:54 - 209715200 ____H C:\~027b
    2016-02-21 09:54 - 2016-02-21 09:54 - 209715200 ____H C:\~027a
    2016-02-21 09:54 - 2016-02-21 09:54 - 209715200 ____H C:\~0279
    2016-02-21 09:53 - 2016-02-21 09:54 - 209715200 ____H C:\~0278
    2016-02-21 09:53 - 2016-02-21 09:53 - 209715200 ____H C:\~0277
    2016-02-21 09:53 - 2016-02-21 09:53 - 209715200 ____H C:\~0276
    2016-02-21 09:53 - 2016-02-21 09:53 - 209715200 ____H C:\~0275
    2016-02-21 09:53 - 2016-02-21 09:53 - 209715200 ____H C:\~0274
    2016-02-21 09:53 - 2016-02-21 09:53 - 209715200 ____H C:\~0273
    2016-02-21 09:53 - 2016-02-21 09:53 - 209715200 ____H C:\~0272
    2016-02-21 09:53 - 2016-02-21 09:53 - 209715200 ____H C:\~0271
    2016-02-21 09:53 - 2016-02-21 09:53 - 209715200 ____H C:\~0270
    2016-02-21 09:53 - 2016-02-21 09:53 - 209715200 ____H C:\~026f
    2016-02-21 09:53 - 2016-02-21 09:53 - 209715200 ____H C:\~026e
    2016-02-21 09:53 - 2016-02-21 09:53 - 209715200 ____H C:\~026d
    2016-02-21 09:53 - 2016-02-21 09:53 - 209715200 ____H C:\~026c
    2016-02-21 09:53 - 2016-02-21 09:53 - 209715200 ____H C:\~026b
    2016-02-21 09:53 - 2016-02-21 09:53 - 209715200 ____H C:\~026a
    2016-02-21 09:53 - 2016-02-21 09:53 - 209715200 ____H C:\~0269
    2016-02-21 09:52 - 2016-02-21 09:53 - 209715200 ____H C:\~0268
    2016-02-21 09:52 - 2016-02-21 09:52 - 209715200 ____H C:\~0267
    2016-02-21 09:52 - 2016-02-21 09:52 - 209715200 ____H C:\~0266
    2016-02-21 09:52 - 2016-02-21 09:52 - 209715200 ____H C:\~0265
    2016-02-21 09:52 - 2016-02-21 09:52 - 209715200 ____H C:\~0264
    2016-02-21 09:52 - 2016-02-21 09:52 - 209715200 ____H C:\~0263
    2016-02-21 09:52 - 2016-02-21 09:52 - 209715200 ____H C:\~0262
    2016-02-21 09:52 - 2016-02-21 09:52 - 209715200 ____H C:\~0261
    2016-02-21 09:52 - 2016-02-21 09:52 - 209715200 ____H C:\~0260
    2016-02-21 09:52 - 2016-02-21 09:52 - 209715200 ____H C:\~025f
    2016-02-21 09:52 - 2016-02-21 09:52 - 209715200 ____H C:\~025e
    2016-02-21 09:52 - 2016-02-21 09:52 - 209715200 ____H C:\~025d
    2016-02-21 09:52 - 2016-02-21 09:52 - 209715200 ____H C:\~025c
    2016-02-21 09:52 - 2016-02-21 09:52 - 209715200 ____H C:\~025b
    2016-02-21 09:52 - 2016-02-21 09:52 - 209715200 ____H C:\~025a
    2016-02-21 09:51 - 2016-02-21 09:52 - 209715200 ____H C:\~0259
    2016-02-21 09:51 - 2016-02-21 09:51 - 209715200 ____H C:\~0258
    2016-02-21 09:51 - 2016-02-21 09:51 - 209715200 ____H C:\~0257
    2016-02-21 09:51 - 2016-02-21 09:51 - 209715200 ____H C:\~0256
    2016-02-21 09:51 - 2016-02-21 09:51 - 209715200 ____H C:\~0255
    2016-02-21 09:51 - 2016-02-21 09:51 - 209715200 ____H C:\~0254
    2016-02-21 09:51 - 2016-02-21 09:51 - 209715200 ____H C:\~0253
    2016-02-21 09:51 - 2016-02-21 09:51 - 209715200 ____H C:\~0252
    2016-02-21 09:51 - 2016-02-21 09:51 - 209715200 ____H C:\~0251
    2016-02-21 09:51 - 2016-02-21 09:51 - 209715200 ____H C:\~0250
    2016-02-21 09:51 - 2016-02-21 09:51 - 209715200 ____H C:\~024f
    2016-02-21 09:51 - 2016-02-21 09:51 - 209715200 ____H C:\~024e
    2016-02-21 09:51 - 2016-02-21 09:51 - 209715200 ____H C:\~024d
    2016-02-21 09:50 - 2016-02-21 09:51 - 209715200 ____H C:\~024c
    2016-02-21 09:50 - 2016-02-21 09:50 - 209715200 ____H C:\~024b
    2016-02-21 09:50 - 2016-02-21 09:50 - 209715200 ____H C:\~024a
    2016-02-21 09:50 - 2016-02-21 09:50 - 209715200 ____H C:\~0249
    2016-02-21 09:50 - 2016-02-21 09:50 - 209715200 ____H C:\~0248
    2016-02-21 09:50 - 2016-02-21 09:50 - 209715200 ____H C:\~0247
    2016-02-21 09:50 - 2016-02-21 09:50 - 209715200 ____H C:\~0246
    2016-02-21 09:50 - 2016-02-21 09:50 - 209715200 ____H C:\~0245
    2016-02-21 09:50 - 2016-02-21 09:50 - 209715200 ____H C:\~0244
    2016-02-21 09:50 - 2016-02-21 09:50 - 209715200 ____H C:\~0243
    2016-02-21 09:50 - 2016-02-21 09:50 - 209715200 ____H C:\~0242
    2016-02-21 09:50 - 2016-02-21 09:50 - 209715200 ____H C:\~0241
    2016-02-21 09:50 - 2016-02-21 09:50 - 209715200 ____H C:\~0240
    2016-02-21 09:50 - 2016-02-21 09:50 - 209715200 ____H C:\~023f
    2016-02-21 09:50 - 2016-02-21 09:50 - 209715200 ____H C:\~023e
    2016-02-21 09:49 - 2016-02-21 09:50 - 209715200 ____H C:\~023d
    2016-02-21 09:49 - 2016-02-21 09:49 - 209715200 ____H C:\~023c
    2016-02-21 09:49 - 2016-02-21 09:49 - 209715200 ____H C:\~023b
    2016-02-21 09:49 - 2016-02-21 09:49 - 209715200 ____H C:\~023a
    2016-02-21 09:49 - 2016-02-21 09:49 - 209715200 ____H C:\~0239
    2016-02-21 09:49 - 2016-02-21 09:49 - 209715200 ____H C:\~0238
    2016-02-21 09:49 - 2016-02-21 09:49 - 209715200 ____H C:\~0237
    2016-02-21 09:49 - 2016-02-21 09:49 - 209715200 ____H C:\~0236
    2016-02-21 09:49 - 2016-02-21 09:49 - 209715200 ____H C:\~0235
    2016-02-21 09:49 - 2016-02-21 09:49 - 209715200 ____H C:\~0234
    2016-02-21 09:49 - 2016-02-21 09:49 - 209715200 ____H C:\~0233
    2016-02-21 09:49 - 2016-02-21 09:49 - 209715200 ____H C:\~0232
    2016-02-21 09:49 - 2016-02-21 09:49 - 209715200 ____H C:\~0231
    2016-02-21 09:49 - 2016-02-21 09:49 - 209715200 ____H C:\~0230
    2016-02-21 09:49 - 2016-02-21 09:49 - 209715200 ____H C:\~022f
    2016-02-21 09:48 - 2016-02-21 09:49 - 209715200 ____H C:\~022e
    2016-02-21 09:48 - 2016-02-21 09:48 - 209715200 ____H C:\~022d
    2016-02-21 09:48 - 2016-02-21 09:48 - 209715200 ____H C:\~022c
    2016-02-21 09:48 - 2016-02-21 09:48 - 209715200 ____H C:\~022b
    2016-02-21 09:48 - 2016-02-21 09:48 - 209715200 ____H C:\~022a
    2016-02-21 09:48 - 2016-02-21 09:48 - 209715200 ____H C:\~0229
    2016-02-21 09:48 - 2016-02-21 09:48 - 209715200 ____H C:\~0228
    2016-02-21 09:48 - 2016-02-21 09:48 - 209715200 ____H C:\~0227
    2016-02-21 09:48 - 2016-02-21 09:48 - 209715200 ____H C:\~0226
    2016-02-21 09:48 - 2016-02-21 09:48 - 209715200 ____H C:\~0225
    2016-02-21 09:48 - 2016-02-21 09:48 - 209715200 ____H C:\~0224
    2016-02-21 09:48 - 2016-02-21 09:48 - 209715200 ____H C:\~0223
    2016-02-21 09:48 - 2016-02-21 09:48 - 209715200 ____H C:\~0222
    2016-02-21 09:48 - 2016-02-21 09:48 - 209715200 ____H C:\~0221
    2016-02-21 09:48 - 2016-02-21 09:48 - 209715200 ____H C:\~0220
    2016-02-21 09:47 - 2016-02-21 09:48 - 209715200 ____H C:\~021f
    2016-02-21 09:47 - 2016-02-21 09:47 - 209715200 ____H C:\~021e
    2016-02-21 09:47 - 2016-02-21 09:47 - 209715200 ____H C:\~021d
    2016-02-21 09:47 - 2016-02-21 09:47 - 209715200 ____H C:\~021c
    2016-02-21 09:47 - 2016-02-21 09:47 - 209715200 ____H C:\~021b
    2016-02-21 09:47 - 2016-02-21 09:47 - 209715200 ____H C:\~021a
    2016-02-21 09:47 - 2016-02-21 09:47 - 209715200 ____H C:\~0219
    2016-02-21 09:47 - 2016-02-21 09:47 - 209715200 ____H C:\~0218
    2016-02-21 09:47 - 2016-02-21 09:47 - 209715200 ____H C:\~0217
    2016-02-21 09:47 - 2016-02-21 09:47 - 209715200 ____H C:\~0216
    2016-02-21 09:47 - 2016-02-21 09:47 - 209715200 ____H C:\~0215
    2016-02-21 09:47 - 2016-02-21 09:47 - 209715200 ____H C:\~0214
    2016-02-21 09:47 - 2016-02-21 09:47 - 209715200 ____H C:\~0213
    2016-02-21 09:47 - 2016-02-21 09:47 - 209715200 ____H C:\~0212
    2016-02-21 09:47 - 2016-02-21 09:47 - 209715200 ____H C:\~0211
    2016-02-21 09:46 - 2016-02-21 09:47 - 209715200 ____H C:\~0210
    2016-02-21 09:46 - 2016-02-21 09:46 - 209715200 ____H C:\~020f
    2016-02-21 09:46 - 2016-02-21 09:46 - 209715200 ____H C:\~020e
    2016-02-21 09:46 - 2016-02-21 09:46 - 209715200 ____H C:\~020d
    2016-02-21 09:46 - 2016-02-21 09:46 - 209715200 ____H C:\~020c
    2016-02-21 09:46 - 2016-02-21 09:46 - 209715200 ____H C:\~020b
    2016-02-21 09:46 - 2016-02-21 09:46 - 209715200 ____H C:\~020a
    2016-02-21 09:46 - 2016-02-21 09:46 - 209715200 ____H C:\~0209
    2016-02-21 09:46 - 2016-02-21 09:46 - 209715200 ____H C:\~0208
    2016-02-21 09:46 - 2016-02-21 09:46 - 209715200 ____H C:\~0207
    2016-02-21 09:46 - 2016-02-21 09:46 - 209715200 ____H C:\~0206
    2016-02-21 09:46 - 2016-02-21 09:46 - 209715200 ____H C:\~0205
    2016-02-21 09:46 - 2016-02-21 09:46 - 209715200 ____H C:\~0204
    2016-02-21 09:46 - 2016-02-21 09:46 - 209715200 ____H C:\~0203
    2016-02-21 09:46 - 2016-02-21 09:46 - 209715200 ____H C:\~0202
    2016-02-21 09:45 - 2016-02-21 09:46 - 209715200 ____H C:\~0201
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~0200
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~01ff
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~01fe
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~01fd
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~01fc
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~01fb
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~01fa
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~01f9
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~01f8
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~01f7
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~01f6
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~01f5
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~01f4
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~01f3
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~01f2
    2016-02-21 09:45 - 2016-02-21 09:45 - 209715200 ____H C:\~01f1
    2016-02-21 09:44 - 2016-02-21 09:45 - 209715200 ____H C:\~01f0
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01ef
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01ee
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01ed
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01ec
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01eb
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01ea
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01e9
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01e8
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01e7
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01e6
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01e5
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01e4
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01e3
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01e2
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01e1
    2016-02-21 09:44 - 2016-02-21 09:44 - 209715200 ____H C:\~01e0
    2016-02-21 09:43 - 2016-02-21 09:44 - 209715200 ____H C:\~01df
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01de
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01dd
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01dc
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01db
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01da
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01d9
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01d8
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01d7
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01d6
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01d5
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01d4
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01d3
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01d2
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01d1
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01d0
    2016-02-21 09:43 - 2016-02-21 09:43 - 209715200 ____H C:\~01cf
    2016-02-21 09:42 - 2016-02-21 09:43 - 209715200 ____H C:\~01ce
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01cd
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01cc
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01cb
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01ca
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01c9
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01c8
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01c7
     
  17. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01c6
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01c5
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01c4
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01c3
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01c2
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01c1
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01c0
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01bf
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01be
    2016-02-21 09:42 - 2016-02-21 09:42 - 209715200 ____H C:\~01bd
    2016-02-21 09:41 - 2016-02-21 09:42 - 209715200 ____H C:\~01bc
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01bb
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01ba
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01b9
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01b8
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01b7
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01b6
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01b5
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01b4
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01b3
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01b2
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01b1
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01b0
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01af
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01ae
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01ad
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01ac
    2016-02-21 09:41 - 2016-02-21 09:41 - 209715200 ____H C:\~01ab
    2016-02-21 09:40 - 2016-02-21 09:41 - 209715200 ____H C:\~01aa
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~01a9
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~01a8
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~01a7
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~01a6
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~01a5
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~01a4
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~01a3
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~01a2
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~01a1
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~01a0
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~019f
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~019e
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~019d
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~019c
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~019b
    2016-02-21 09:40 - 2016-02-21 09:40 - 209715200 ____H C:\~019a
    2016-02-21 09:39 - 2016-02-21 09:40 - 209715200 ____H C:\~0199
    2016-02-21 09:39 - 2016-02-21 09:39 - 209715200 ____H C:\~0198
    2016-02-21 09:39 - 2016-02-21 09:39 - 209715200 ____H C:\~0197
    2016-02-21 09:39 - 2016-02-21 09:39 - 209715200 ____H C:\~0196
    2016-02-21 09:39 - 2016-02-21 09:39 - 209715200 ____H C:\~0195
    2016-02-21 09:39 - 2016-02-21 09:39 - 209715200 ____H C:\~0194
    2016-02-21 09:39 - 2016-02-21 09:39 - 209715200 ____H C:\~0193
    2016-02-21 09:39 - 2016-02-21 09:39 - 209715200 ____H C:\~0192
    2016-02-21 09:39 - 2016-02-21 09:39 - 209715200 ____H C:\~0191
    2016-02-21 09:39 - 2016-02-21 09:39 - 209715200 ____H C:\~0190
    2016-02-21 09:39 - 2016-02-21 09:39 - 209715200 ____H C:\~018f
    2016-02-21 09:39 - 2016-02-21 09:39 - 209715200 ____H C:\~018e
    2016-02-21 09:39 - 2016-02-21 09:39 - 209715200 ____H C:\~018d
    2016-02-21 09:39 - 2016-02-21 09:39 - 209715200 ____H C:\~018c
    2016-02-21 09:39 - 2016-02-21 09:39 - 209715200 ____H C:\~018b
    2016-02-21 09:39 - 2016-02-21 09:39 - 209715200 ____H C:\~018a
    2016-02-21 09:38 - 2016-02-21 09:39 - 209715200 ____H C:\~0189
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~0188
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~0187
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~0186
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~0185
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~0184
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~0183
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~0182
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~0181
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~0180
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~017f
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~017e
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~017d
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~017c
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~017b
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~017a
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~0179
    2016-02-21 09:38 - 2016-02-21 09:38 - 209715200 ____H C:\~0178
    2016-02-21 09:37 - 2016-02-21 09:38 - 209715200 ____H C:\~0177
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~0176
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~0175
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~0174
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~0173
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~0172
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~0171
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~0170
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~016f
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~016e
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~016d
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~016c
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~016b
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~016a
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~0169
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~0168
    2016-02-21 09:37 - 2016-02-21 09:37 - 209715200 ____H C:\~0167
    2016-02-21 09:36 - 2016-02-21 09:37 - 209715200 ____H C:\~0166
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~0165
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~0164
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~0163
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~0162
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~0161
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~0160
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~015f
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~015e
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~015d
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~015c
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~015b
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~015a
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~0159
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~0158
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~0157
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~0156
    2016-02-21 09:36 - 2016-02-21 09:36 - 209715200 ____H C:\~0155
    2016-02-21 09:35 - 2016-02-21 09:36 - 209715200 ____H C:\~0154
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~0153
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~0152
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~0151
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~0150
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~014f
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~014e
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~014d
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~014c
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~014b
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~014a
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~0149
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~0148
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~0147
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~0146
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~0145
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~0144
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~0143
    2016-02-21 09:35 - 2016-02-21 09:35 - 209715200 ____H C:\~0142
    2016-02-21 09:34 - 2016-02-21 09:35 - 209715200 ____H C:\~0141
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~0140
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~013f
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~013e
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~013d
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~013c
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~013b
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~013a
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~0139
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~0138
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~0137
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~0136
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~0135
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~0134
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~0133
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~0132
    2016-02-21 09:34 - 2016-02-21 09:34 - 209715200 ____H C:\~0131
    2016-02-21 09:33 - 2016-02-21 09:34 - 209715200 ____H C:\~0130
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~012f
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~012e
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~012d
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~012c
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~012b
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~012a
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~0129
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~0128
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~0127
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~0126
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~0125
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~0124
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~0123
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~0122
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~0121
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~0120
    2016-02-21 09:33 - 2016-02-21 09:33 - 209715200 ____H C:\~011f
    2016-02-21 09:32 - 2016-02-21 09:33 - 209715200 ____H C:\~011e
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~011d
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~011c
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~011b
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~011a
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~0119
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~0118
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~0117
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~0116
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~0115
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~0114
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~0113
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~0112
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~0111
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~0110
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~010f
    2016-02-21 09:32 - 2016-02-21 09:32 - 209715200 ____H C:\~010e
    2016-02-21 09:31 - 2016-02-21 09:32 - 209715200 ____H C:\~010d
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~010c
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~010b
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~010a
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~0109
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~0108
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~0107
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~0106
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~0105
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~0104
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~0103
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~0102
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~0101
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~0100
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~00ff
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~00fe
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~00fd
    2016-02-21 09:31 - 2016-02-21 09:31 - 209715200 ____H C:\~00fc
    2016-02-21 09:30 - 2016-02-21 09:31 - 209715200 ____H C:\~00fb
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00fa
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00f9
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00f8
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00f7
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00f6
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00f5
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00f4
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00f3
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00f2
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00f1
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00f0
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00ef
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00ee
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00ed
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00ec
    2016-02-21 09:30 - 2016-02-21 09:30 - 209715200 ____H C:\~00eb
    2016-02-21 09:29 - 2016-02-21 09:30 - 209715200 ____H C:\~00ea
    2016-02-21 09:29 - 2016-02-21 09:29 - 209715200 ____H C:\~00e9
    2016-02-21 09:29 - 2016-02-21 09:29 - 209715200 ____H C:\~00e8
    2016-02-21 09:29 - 2016-02-21 09:29 - 209715200 ____H C:\~00e7
    2016-02-21 09:29 - 2016-02-21 09:29 - 209715200 ____H C:\~00e6
    2016-02-21 09:29 - 2016-02-21 09:29 - 209715200 ____H C:\~00e5
    2016-02-21 09:29 - 2016-02-21 09:29 - 209715200 ____H C:\~00e4
    2016-02-21 09:29 - 2016-02-21 09:29 - 209715200 ____H C:\~00e3
    2016-02-21 09:29 - 2016-02-21 09:29 - 209715200 ____H C:\~00e2
    2016-02-21 09:29 - 2016-02-21 09:29 - 209715200 ____H C:\~00e1
    2016-02-21 09:29 - 2016-02-21 09:29 - 209715200 ____H C:\~00e0
    2016-02-21 09:29 - 2016-02-21 09:29 - 209715200 ____H C:\~00df
    2016-02-21 09:29 - 2016-02-21 09:29 - 209715200 ____H C:\~00de
    2016-02-21 09:29 - 2016-02-21 09:29 - 209715200 ____H C:\~00dd
    2016-02-21 09:28 - 2016-02-21 09:29 - 209715200 ____H C:\~00dc
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00db
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00da
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00d9
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00d8
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00d7
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00d6
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00d5
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00d4
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00d3
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00d2
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00d1
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00d0
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00cf
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00ce
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00cd
    2016-02-21 09:28 - 2016-02-21 09:28 - 209715200 ____H C:\~00cc
    2016-02-21 09:27 - 2016-02-21 09:28 - 209715200 ____H C:\~00cb
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00ca
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00c9
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00c8
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00c7
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00c6
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00c5
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00c4
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00c3
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00c2
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00c1
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00c0
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00bf
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00be
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00bd
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00bc
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00bb
    2016-02-21 09:27 - 2016-02-21 09:27 - 209715200 ____H C:\~00ba
    2016-02-21 09:26 - 2016-02-21 09:27 - 209715200 ____H C:\~00b9
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00b8
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00b7
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00b6
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00b5
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00b4
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00b3
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00b2
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00b1
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00b0
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00af
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00ae
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00ad
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00ac
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00ab
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00aa
    2016-02-21 09:26 - 2016-02-21 09:26 - 209715200 ____H C:\~00a9
    2016-02-21 09:25 - 2016-02-21 09:26 - 209715200 ____H C:\~00a8
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~00a7
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~00a6
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~00a5
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~00a4
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~00a3
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~00a2
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~00a1
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~00a0
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~009f
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~009e
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~009d
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~009c
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~009b
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~009a
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~0099
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~0098
    2016-02-21 09:25 - 2016-02-21 09:25 - 209715200 ____H C:\~0097
    2016-02-21 09:24 - 2016-02-21 09:25 - 209715200 ____H C:\~0096
    2016-02-21 09:24 - 2016-02-21 09:24 - 209715200 ____H C:\~0095
    2016-02-21 09:24 - 2016-02-21 09:24 - 209715200 ____H C:\~0094
    2016-02-21 09:24 - 2016-02-21 09:24 - 209715200 ____H C:\~0093
    2016-02-21 09:24 - 2016-02-21 09:24 - 209715200 ____H C:\~0092
    2016-02-21 09:24 - 2016-02-21 09:24 - 209715200 ____H C:\~0091
    2016-02-21 09:24 - 2016-02-21 09:24 - 209715200 ____H C:\~0090
    2016-02-21 09:24 - 2016-02-21 09:24 - 209715200 ____H C:\~008f
    2016-02-21 09:24 - 2016-02-21 09:24 - 209715200 ____H C:\~008e
    2016-02-21 09:24 - 2016-02-21 09:24 - 209715200 ____H C:\~008d
    2016-02-21 09:24 - 2016-02-21 09:24 - 209715200 ____H C:\~008c
    2016-02-21 09:24 - 2016-02-21 09:24 - 209715200 ____H C:\~008b
    2016-02-21 09:24 - 2016-02-21 09:24 - 209715200 ____H C:\~008a
    2016-02-21 09:24 - 2016-02-21 09:24 - 209715200 ____H C:\~0089
    2016-02-21 09:24 - 2016-02-21 09:24 - 209715200 ____H C:\~0088
    2016-02-21 09:24 - 2016-02-21 09:24 - 209715200 ____H C:\~0087
    2016-02-21 09:23 - 2016-02-21 09:24 - 209715200 ____H C:\~0086
    2016-02-21 09:23 - 2016-02-21 09:23 - 209715200 ____H C:\~0085
    2016-02-21 09:23 - 2016-02-21 09:23 - 209715200 ____H C:\~0084
    2016-02-21 09:23 - 2016-02-21 09:23 - 209715200 ____H C:\~0083
    2016-02-21 09:23 - 2016-02-21 09:23 - 209715200 ____H C:\~0082
    2016-02-21 09:23 - 2016-02-21 09:23 - 209715200 ____H C:\~0081
    2016-02-21 09:23 - 2016-02-21 09:23 - 209715200 ____H C:\~0080
    2016-02-21 09:23 - 2016-02-21 09:23 - 209715200 ____H C:\~007f
    2016-02-21 09:22 - 2016-02-21 09:23 - 209715200 ____H C:\~007e
    2016-02-21 09:22 - 2016-02-21 09:22 - 209715200 ____H C:\~007d
    2016-02-21 09:22 - 2016-02-21 09:22 - 209715200 ____H C:\~007c
    2016-02-21 09:22 - 2016-02-21 09:22 - 209715200 ____H C:\~007b
    2016-02-21 09:22 - 2016-02-21 09:22 - 209715200 ____H C:\~007a
    2016-02-21 09:22 - 2016-02-21 09:22 - 209715200 ____H C:\~0079
    2016-02-21 09:21 - 2016-02-21 09:22 - 209715200 ____H C:\~0078
    2016-02-21 09:21 - 2016-02-21 09:21 - 209715200 ____H C:\~0077
    2016-02-21 09:21 - 2016-02-21 09:21 - 209715200 ____H C:\~0076
    2016-02-21 09:21 - 2016-02-21 09:21 - 209715200 ____H C:\~0075
    2016-02-21 09:21 - 2016-02-21 09:21 - 209715200 ____H C:\~0074
    2016-02-21 09:21 - 2016-02-21 09:21 - 209715200 ____H C:\~0073
    2016-02-21 09:20 - 2016-02-21 09:21 - 209715200 ____H C:\~0072
    2016-02-21 09:20 - 2016-02-21 09:20 - 209715200 ____H C:\~0071
    2016-02-21 09:20 - 2016-02-21 09:20 - 209715200 ____H C:\~0070
    2016-02-21 09:20 - 2016-02-21 09:20 - 209715200 ____H C:\~006f
    2016-02-21 09:19 - 2016-02-21 09:20 - 209715200 ____H C:\~006e
    2016-02-21 09:19 - 2016-02-21 09:19 - 209715200 ____H C:\~006d
    2016-02-21 09:18 - 2016-02-21 09:19 - 209715200 ____H C:\~006c
    2016-02-21 09:18 - 2016-02-21 09:18 - 209715200 ____H C:\~006b
    2016-02-21 09:18 - 2016-02-21 09:18 - 209715200 ____H C:\~006a
    2016-02-21 09:17 - 2016-02-21 09:18 - 209715200 ____H C:\~0069
    2016-02-21 09:16 - 2016-02-21 09:17 - 209715200 ____H C:\~0068
    2016-02-21 09:15 - 2016-02-21 09:16 - 209715200 ____H C:\~0067
    2016-02-21 09:14 - 2016-02-21 09:15 - 209715200 ____H C:\~0066
    2016-02-21 09:12 - 2016-02-21 09:14 - 209715200 ____H C:\~0065
    2016-02-21 09:12 - 2016-02-21 09:12 - 209715200 ____H C:\~0064
    2016-02-21 09:12 - 2016-02-21 09:12 - 209715200 ____H C:\~0063
    2016-02-21 09:12 - 2016-02-21 09:12 - 209715200 ____H C:\~0062
    2016-02-21 09:12 - 2016-02-21 09:12 - 209715200 ____H C:\~0061
    2016-02-21 09:11 - 2016-02-21 09:12 - 209715200 ____H C:\~0060
    2016-02-21 09:11 - 2016-02-21 09:11 - 209715200 ____H C:\~005f
    2016-02-21 09:11 - 2016-02-21 09:11 - 209715200 ____H C:\~005e
    2016-02-21 09:11 - 2016-02-21 09:11 - 209715200 ____H C:\~005d
    2016-02-21 09:11 - 2016-02-21 09:11 - 209715200 ____H C:\~005c
    2016-02-21 09:11 - 2016-02-21 09:11 - 209715200 ____H C:\~005b
    2016-02-21 09:11 - 2016-02-21 09:11 - 209715200 ____H C:\~005a
    2016-02-21 09:11 - 2016-02-21 09:11 - 209715200 ____H C:\~0059
    2016-02-21 09:11 - 2016-02-21 09:11 - 209715200 ____H C:\~0058
    2016-02-21 09:11 - 2016-02-21 09:11 - 209715200 ____H C:\~0057
    2016-02-21 09:11 - 2016-02-21 09:11 - 209715200 ____H C:\~0056
    2016-02-21 09:10 - 2016-02-21 09:11 - 209715200 ____H C:\~0055
    2016-02-21 09:10 - 2016-02-21 09:10 - 209715200 ____H C:\~0054
    2016-02-21 09:10 - 2016-02-21 09:10 - 209715200 ____H C:\~0053
    2016-02-21 09:10 - 2016-02-21 09:10 - 209715200 ____H C:\~0052
    2016-02-21 09:10 - 2016-02-21 09:10 - 209715200 ____H C:\~0051
    2016-02-21 09:10 - 2016-02-21 09:10 - 209715200 ____H C:\~0050
    2016-02-21 09:10 - 2016-02-21 09:10 - 209715200 ____H C:\~004f
    2016-02-21 09:10 - 2016-02-21 09:10 - 209715200 ____H C:\~004e
    2016-02-21 09:10 - 2016-02-21 09:10 - 209715200 ____H C:\~004d
    2016-02-21 09:10 - 2016-02-21 09:10 - 209715200 ____H C:\~004c
    2016-02-21 09:10 - 2016-02-21 09:10 - 209715200 ____H C:\~004b
    2016-02-21 09:10 - 2016-02-21 09:10 - 209715200 ____H C:\~004a
    2016-02-21 09:10 - 2016-02-21 09:10 - 209715200 ____H C:\~0049
    2016-02-21 09:10 - 2016-02-21 09:10 - 209715200 ____H C:\~0048
    2016-02-21 09:09 - 2016-02-21 09:10 - 209715200 ____H C:\~0047
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~0046
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~0045
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~0044
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~0043
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~0042
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~0041
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~0040
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~003f
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~003e
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~003d
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~003c
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~003b
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~003a
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~0039
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~0038
    2016-02-21 09:09 - 2016-02-21 09:09 - 209715200 ____H C:\~0037
    2016-02-21 09:08 - 2016-02-21 09:09 - 209715200 ____H C:\~0036
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~0035
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~0034
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~0033
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~0032
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~0031
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~0030
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~002f
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~002e
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~002d
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~002c
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~002b
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~002a
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~0029
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~0028
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~0027
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~0026
    2016-02-21 09:08 - 2016-02-21 09:08 - 209715200 ____H C:\~0025
    2016-02-21 09:07 - 2016-02-21 09:08 - 209715200 ____H C:\~0024
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~0023
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~0022
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~0021
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~0020
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~001f
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~001e
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~001d
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~001c
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~001b
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~001a
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~0019
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~0018
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~0017
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~0016
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~0015
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~0014
    2016-02-21 09:07 - 2016-02-21 09:07 - 209715200 ____H C:\~0013
    2016-02-21 09:06 - 2016-02-21 09:07 - 209715200 ____H C:\~0012
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~0011
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~0010
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~000f
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~000e
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~000d
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~000c
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~000b
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~000a
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~0009
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~0008
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~0007
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~0006
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~0005
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~0004
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~0003
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~0002
    2016-02-21 09:06 - 2016-02-21 09:06 - 209715200 ____H C:\~0001
    2016-02-21 09:05 - 2016-02-21 11:40 - 00000000 ____D C:\~CLEAN.MFT
    2016-02-21 09:05 - 2016-02-21 09:06 - 209715200 ____H C:\~0000

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-03-13 06:43 - 2009-07-14 04:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2016-03-13 06:43 - 2009-07-14 04:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2016-03-13 06:36 - 2009-07-14 05:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
    2016-03-12 10:07 - 2012-10-15 05:02 - 00000000 ____D C:\05592960dfb32d20d379da435681
    2016-03-12 10:06 - 2012-10-16 04:18 - 00000000 ____D C:\0449f9ab9cdff1353affaf9739
    2016-03-12 10:06 - 2012-03-13 05:00 - 00000000 ___DC C:\608fb177380080c4b4
    2016-03-12 10:06 - 2012-01-11 21:39 - 00000000 ___DC C:\64c0bb8734382473337080479f
    2016-03-09 18:13 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\inf
    2016-03-06 07:48 - 2009-07-14 05:13 - 00727660 _____ C:\Windows\system32\PerfStringBackup.INI
    2016-03-05 07:21 - 2009-07-14 04:45 - 00274320 _____ C:\Windows\system32\FNTCACHE.DAT
    2016-03-03 20:36 - 2009-07-14 05:32 - 00000000 ____D C:\Windows\Downloaded Program Files
    2016-03-03 12:27 - 2009-07-14 07:45 - 00000000 ____D C:\Windows\ShellNew
    2016-03-02 07:10 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\rescache
    2016-03-02 05:12 - 2009-07-14 04:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
    2016-03-01 14:56 - 2009-07-14 07:45 - 00000000 ____D C:\Program Files\Windows Journal
    2016-03-01 14:56 - 2009-07-14 05:32 - 00000000 ____D C:\Program Files\Windows Sidebar
    2016-03-01 14:56 - 2009-07-14 05:32 - 00000000 ____D C:\Program Files\Windows Portable Devices
    2016-03-01 14:56 - 2009-07-14 05:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
    2016-03-01 14:56 - 2009-07-14 05:32 - 00000000 ____D C:\Program Files\Windows Defender
    2016-03-01 14:56 - 2009-07-14 05:32 - 00000000 ____D C:\Program Files\DVD Maker
    2016-03-01 14:56 - 2009-07-14 05:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
    2016-03-01 14:56 - 2009-07-14 05:32 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
    2016-03-01 14:56 - 2009-07-14 05:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
    2016-03-01 14:56 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\servicing
    2016-03-01 14:55 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\SysWOW64\Setup
    2016-03-01 14:55 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
    2016-03-01 14:55 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
    2016-03-01 14:55 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\SysWOW64\manifeststore
    2016-03-01 14:55 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
    2016-03-01 14:55 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\SysWOW64\AdvancedInstallers
    2016-03-01 14:55 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\system32\Setup
    2016-03-01 14:55 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\system32\oobe
    2016-03-01 14:55 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\system32\migwiz
    2016-03-01 14:55 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\system32\manifeststore
    2016-03-01 14:55 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\system32\Dism
    2016-03-01 14:55 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
    2016-03-01 14:55 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\PolicyDefinitions
    2016-03-01 14:30 - 2009-07-14 02:36 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
    2016-03-01 14:30 - 2009-07-14 02:36 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll
    2016-02-29 23:42 - 2009-07-14 07:44 - 00000000 ___RD C:\Users\Public\Recorded TV
    2016-02-29 23:42 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\registration
    2016-02-29 22:35 - 2009-07-14 05:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
    2016-02-29 22:34 - 2009-07-14 04:45 - 00000000 ____D C:\Windows\Setup
    2016-02-29 15:02 - 2009-07-14 03:20 - 00000000 __RHD C:\Users\Public\Libraries
    2016-02-29 14:39 - 2009-07-14 05:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
    2016-02-29 14:38 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\system32\sysprep
    2016-02-29 09:17 - 2009-07-14 02:34 - 00000505 _____ C:\Windows\win.ini

    ==================== Files in the root of some directories =======

    2016-03-12 17:32 - 2016-03-12 17:47 - 0000115 _____ () C:\Users\Tingler\AppData\Roaming\LogFile.txt
    2016-03-12 21:22 - 2016-03-12 21:22 - 0000017 _____ () C:\Users\Tingler\AppData\Local\resmon.resmoncfg

    Some files in TEMP:
    ====================
    C:\Users\Tingler\AppData\Local\Temp\sqlite3.dll


    ==================== Bamital & volsnap =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2016-03-01 08:32

    ==================== End of FRST.txt ============================
     
  18. Broni

    Broni Malware Annihilator Posts: 52,898   +344

    [​IMG] Download RogueKiller from one of the following links and save it to your Desktop:

    Link 1
    Link 2
    • Close all the running programs
    • Windows Vista/7/8 users: right click on RogueKiller.exe, click Run as Administrator
    • Otherwise just double-click on RogueKiller.exe
    • Pre-scan will start. Let it finish.
    • Click on SCAN button.
    • Wait until the Status box shows Scan Finished
    • Click on Delete.
    • Wait until the Status box shows Deleting Finished.
    • Click on Report and copy/paste the content of the Notepad into your next reply.
    • RKreport.txt could also be found on your desktop.
    • If more than one log is produced post all logs.
    • If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again
    [​IMG] Please download Malwarebytes Anti-Malware (MBAM) to your desktop.
    NOTE. If you already have MBAM 2.0 installed scroll down.
    • Double-click mbam-setup-2.0.0.1000.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to the following:
    • Launch Malwarebytes Anti-Malware
    • A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.
    • Click Finish.
    • On the Dashboard, click the 'Update Now >>' link
    • After the update completes, click the 'Scan Now >>' button.
    • Or, on the Dashboard, click the Scan Now >> button.
    • If an update is available, click the Update Now button.
    • A Threat Scan will begin.
    • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
    • In most cases, a restart will be required.
    • Wait for the prompt to restart the computer to appear, then click on Yes.
    If you already have MBAM 2.0 installed:
    • On the Dashboard, click the 'Update Now >>' link
    • After the update completes, click the 'Scan Now >>' button.
    • Or, on the Dashboard, click the Scan Now >> button.
    • If an update is available, click the Update Now button.
    • A Threat Scan will begin.
    • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
    • In most cases, a restart will be required.
    • Wait for the prompt to restart the computer to appear, then click on Yes.
    How to get logs:
    (Export log to save as txt)
    • After the restart once you are back at your desktop, open MBAM once more.
    • Click on the History tab > Application Logs.
    • Double click on the Scan Log which shows the Date and time of the scan just performed.
    • Click 'Export'.
    • Click 'Text file (*.txt)'
    • In the Save File dialog box which appears, click on Desktop.
    • In the File name: box type a name for your scan log.
    • A message box named 'File Saved' should appear stating "Your file has been successfully exported".
    • Click Ok
    • Attach that saved log to your next reply.
    (Copy to clipboard for pasting into forum replies or tickets)
    • After the restart once you are back at your desktop, open MBAM once more.
    • Click on the History tab > Application Logs.
    • Double click on the Scan Log which shows the Date and time of the scan just performed.
    • Click 'Copy to Clipboard'
    • Paste the contents of the clipboard into your reply.
    [​IMG] Please download AdwCleaner by Xplode onto your desktop.
    • Close all open programs and internet browsers.
    • Double click on adwcleaner.exe to run the tool.
    • Click on Scan button.
    • When the scan has finished click on Clean button.
    • Your computer will be rebooted automatically. A text file will open after the restart.
    • Please post the contents of that logfile with your next reply.
    • You can find the logfile at C:\AdwCleaner[S1].txt as well.
    [​IMG] Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next message.
     
  19. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    Logs files
    RK Log
    RogueKiller V12.0.2.0 [Mar 14 2016] (Free) by Adlice Software
    mail : http://www.adlice.com/contact/
    Feedback : http://forum.adlice.com
    Website : http://www.adlice.com/software/roguekiller/
    Blog : http://www.adlice.com

    Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
    Started in : Normal mode
    User : Tingler [Administrator]
    Started from : C:\Users\Tingler\Desktop\RogueKiller.exe
    Mode : Delete -- Date : 03/16/2016 06:35:52

    ¤¤¤ Processes : 0 ¤¤¤

    ¤¤¤ Registry : 6 ¤¤¤
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{29E1561A-ACB0-49F3-B8DF-AD2EF0522867} | NameServer : 10.0.0.1 ([]) -> Replaced ()
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963} | NameServer : 10.0.0.1 ([]) -> Replaced ()
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{29E1561A-ACB0-49F3-B8DF-AD2EF0522867} | NameServer : 10.0.0.1 ([]) -> Replaced ()
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963} | NameServer : 10.0.0.1 ([]) -> Replaced ()
    [PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Replaced (2)
    [PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Replaced (2)

    ¤¤¤ Tasks : 0 ¤¤¤

    ¤¤¤ Files : 0 ¤¤¤

    ¤¤¤ Hosts File : 0 ¤¤¤

    ¤¤¤ Antirootkit : 0 (Driver: Not loaded [0xc000036b]) ¤¤¤

    ¤¤¤ Web browsers : 0 ¤¤¤

    ¤¤¤ MBR Check : ¤¤¤
    +++++ PhysicalDrive0: WDC WD5000BEVT-75ZAT0 +++++
    --- User ---
    [MBR] 323fbe194c530136be046f0ca0187956
    [BSP] c4f9f3edbfa7e7bc5ca3961a65513fff : Windows Vista/7/8 MBR Code
    Partition table:
    0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 39 MB
    1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 81920 | Size: 15000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 30801920 | Size: 461899 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    User = LL1 ... OK
    User = LL2 ... OK

    +++++ PhysicalDrive1: Generic- Multi-Card USB Device +++++
    Error reading User MBR! ([15] The device is not ready. )
    Error reading LL1 MBR! NOT VALID!
    Error reading LL2 MBR! ([32] The request is not supported. )
     
  20. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    MBAM Log
    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Scan Date: 16/03/2016
    Scan Time: 06:38
    Logfile: MBAM LOG.txt
    Administrator: Yes

    Version: 2.2.0.1024
    Malware Database: v2016.03.16.01
    Rootkit Database: v2016.03.12.01
    License: Premium
    Malware Protection: Enabled
    Malicious Website Protection: Enabled
    Self-protection: Disabled

    OS: Windows 7 Service Pack 1
    CPU: x64
    File System: NTFS
    User: Tingler

    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 329422
    Time Elapsed: 24 min, 10 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Heuristics: Enabled
    PUP: Warn
    PUM: Enabled

    Processes: 0
    (No malicious items detected)

    Modules: 0
    (No malicious items detected)

    Registry Keys: 0
    (No malicious items detected)

    Registry Values: 0
    (No malicious items detected)

    Registry Data: 0
    (No malicious items detected)

    Folders: 0
    (No malicious items detected)

    Files: 0
    (No malicious items detected)

    Physical Sectors: 0
    (No malicious items detected)


    (end)
     
  21. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    ADW Log
    # AdwCleaner v5.102 - Logfile created 16/03/2016 at 07:09:08
    # Updated 13/03/2016 by Xplode
    # Database : 2016-03-14.1 [Server]
    # Operating system : Windows 7 Home Premium Service Pack 1 (x64)
    # Username : Tingler - TINGLER-PC
    # Running from : C:\Users\Tingler\Desktop\adwcleaner_5.102.exe
    # Option : Clean
    # Support : http://toolslib.net/forum

    ***** [ Services ] *****


    ***** [ Folders ] *****


    ***** [ Files ] *****


    ***** [ DLLs ] *****


    ***** [ Shortcuts ] *****


    ***** [ Scheduled tasks ] *****


    ***** [ Registry ] *****


    ***** [ Web browsers ] *****

    [-] [C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : recuva.en.softonic.com
    [-] [C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : xplayer.en.softonic.com
    [-] [C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : photoscape.en.softonic.com
    [-] [C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : uk.ask.com
    [-] [C:\Users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mysearch.avg.com

    *************************

    :: "Tracing" keys removed
    :: Winsock settings cleared

    *************************

    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C10].txt - [4164 bytes] - [13/03/2016 19:35:45]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C11].txt - [1445 bytes] - [16/03/2016 07:09:08]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [1730 bytes] - [11/03/2016 18:17:49]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C2].txt - [2009 bytes] - [12/03/2016 11:09:10]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C3].txt - [2195 bytes] - [12/03/2016 11:28:06]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C4].txt - [2474 bytes] - [12/03/2016 14:26:58]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C5].txt - [2660 bytes] - [12/03/2016 17:08:01]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C6].txt - [3240 bytes] - [12/03/2016 20:35:57]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C7].txt - [3315 bytes] - [12/03/2016 21:37:58]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C8].txt - [3502 bytes] - [13/03/2016 06:34:09]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[C9].txt - [3877 bytes] - [13/03/2016 07:55:36]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S10].txt - [2911 bytes] - [12/03/2016 18:01:40]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S11].txt - [3005 bytes] - [12/03/2016 20:33:54]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S12].txt - [3010 bytes] - [12/03/2016 20:55:55]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S13].txt - [3104 bytes] - [12/03/2016 21:36:11]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S14].txt - [3291 bytes] - [13/03/2016 06:31:57]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S15].txt - [2871 bytes] - [13/03/2016 07:08:34]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S16].txt - [2965 bytes] - [13/03/2016 07:19:44]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S17].txt - [3666 bytes] - [13/03/2016 07:53:44]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S18].txt - [3853 bytes] - [13/03/2016 10:00:09]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S19].txt - [3951 bytes] - [13/03/2016 19:33:35]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S1].txt - [817 bytes] - [10/03/2016 17:20:18]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S20].txt - [3532 bytes] - [14/03/2016 05:06:00]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S21].txt - [4233 bytes] - [14/03/2016 17:25:51]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S22].txt - [4321 bytes] - [16/03/2016 07:07:17]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S2].txt - [1518 bytes] - [11/03/2016 18:15:19]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S3].txt - [1095 bytes] - [11/03/2016 18:22:21]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S4].txt - [1797 bytes] - [12/03/2016 11:05:48]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S5].txt - [1983 bytes] - [12/03/2016 11:25:40]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S6].txt - [1562 bytes] - [12/03/2016 12:06:20]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S7].txt - [2262 bytes] - [12/03/2016 14:23:17]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S8].txt - [2448 bytes] - [12/03/2016 17:05:51]
    C:\Program Files (x86)\AdwCleaner\AdwCleaner[S9].txt - [2027 bytes] - [12/03/2016 17:19:49]

    ########## EOF - C:\Program Files (x86)\AdwCleaner\AdwCleaner[C11].txt - [4434 bytes] ##########
     
  22. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    JRT Log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Malwarebytes
    Version: 8.0.4 (03.14.2016)
    Operating System: Windows 7 Home Premium x64
    Ran by Tingler (Administrator) on 16/03/2016 at 7:15:20.25
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    File System: 9

    Successfully deleted: C:\Users\Tingler\AppData\Roaming\cleanmypc software (Folder)
    Successfully deleted: C:\Users\Tingler\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3R52SH54 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Tingler\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8MZ19QS9 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Tingler\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G29TJDQ3 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Tingler\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T5XVJM0E (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3R52SH54 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8MZ19QS9 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G29TJDQ3 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T5XVJM0E (Temporary Internet Files Folder)



    Registry: 0





    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on 16/03/2016 at 7:20:53.05
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     
  23. Broni

    Broni Malware Annihilator Posts: 52,898   +344

    Please download ComboFix from Here, Here or Here to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    • Never rename Combofix unless instructed.
    • Close any open browsers.
    • Very Important! Temporarily disable your anti-virus and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
    • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
    • Close any open browsers.
    • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
    • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
    • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
      If the connection is not there use restore point you created prior to running Combofix.
    • Double click on combofix.exe & follow the prompts.

    • NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
    • When finished, it will produce a report for you.
    • Please post the "C:\ComboFix.txt"
    **Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
    **Note 2 for AVG and CA Internet Security (Total Defense Internet Security) users: ComboFix will not run until AVG/CA Internet Security is uninstalled as a protective measure against the anti-virus. This is because AVG/CA Internet Security "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG/CA Internet Security cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG/CA Internet Security first.
    Use AppRemover to uninstall it: http://www.appremover.com/
    We can reinstall it when we're done with CF.
    **Note 3: If you receive an error Illegal operation attempted on a registery key that has been marked for deletion, restart computer to fix the issue.
    **Note 4: Some infections may take some significant time to be cured. As long as your computer clock is running Combofix is still working. Be patient.


    Make sure, you re-enable your security programs, when you're done with Combofix.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    NOTE.
    If, for some reason, Combofix refuses to run, try the following...

    Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
    Do NOT run it yet.
    Download Rkill (courtesy of BleepingComputer.com) to your desktop.
    There are 2 different versions. If one of them won't run then download and try to run the other one.
    You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/
    iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/

    Restart computer in safe mode

    • Double-click on the Rkill desktop icon to run the tool.
    • If using Windows Vista, 7 or 8 right-click on it and choose Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • Do not reboot until instructed.
    • If the tool does not run from any of the links provided, please let me know.

    When the scan is done Notepad will open with rKill.txt log.
    NOTE. rKill.txt log will also be present on your desktop.

    Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

    IF you had to run rKill post BOTH logs, rKill.txt and Combofix.txt.
     
  24. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    ComboFix 16-03-14.01 - Tingler 17/03/2016 16:26:17.1.2 - x64
    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.3032.864 [GMT 0:00]
    Running from: c:\users\Tingler\Downloads\ComboFix.exe
    AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
    FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
    SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\ar\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\bg\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\ca\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\cs\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\da\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\de\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\el\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\en\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\es\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\fi\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\fr\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\gu\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\he\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\hr\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\hu\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\id\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\it\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\ja\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\ko\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\nb\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\nl\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\pl\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\pt_BR\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\pt_PT\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\ro\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\ru\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\sk\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\sl\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\sr\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\sv\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\tr\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\uk\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\vi\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\zh_CN\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_locales\zh_TW\messages.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_metadata\computed_hashes.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\_metadata\verified_contents.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\adblock_safari_beforeload.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\adblock_safari_contentblocking.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\adblock_start_chrome.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\adblock_start_common.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\background.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\bandaids.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\button\popup.css
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\button\popup.html
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\button\popup.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\CHANGELOG.txt
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\checkupdates.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\datacollection.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\filtering\declarativewebrequest.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\filtering\domainset.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\filtering\filternormalizer.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\filtering\filteroptions.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\filtering\filterset.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\filtering\filtertypes.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\filtering\myfilters.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\functions.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\gab_question.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\idlehandler.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\close_icon.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\delete.gif
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\dropbox1.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\dropbox2.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\dropbox3.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\facebook-sprite.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\gplus-sprite.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\icon128.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\icon16.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\icon16_grayscale.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\icon16_grayscale@2x.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\icon19-grayscale.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\icon19-whitelisted.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\icon19.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\icon24.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\icon32.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\icon38-grayscale.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\icon38-whitelisted.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\icon38.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\icon48.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\loader.gif
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\logo.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\search\check.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\search\magnifying_glass.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\search\search-engine-card_no-shadow.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\search\search-engine-icons.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\search\search-omnibox-card_no-shadow.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\search\search_engine_select_arrow.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\img\twitter-sprite.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\jquery\css\images\ui-bg_flat_55_999999_40x100.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\jquery\css\images\ui-bg_flat_75_aaaaaa_40x100.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\jquery\css\images\ui-bg_glass_45_0078ae_1x400.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\jquery\css\images\ui-bg_glass_55_f8da4e_1x400.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\jquery\css\images\ui-bg_glass_75_79c9ec_1x400.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\jquery\css\images\ui-bg_gloss-wave_50_38cfff_500x100.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\jquery\css\images\ui-bg_gloss-wave_75_2191c0_500x100.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\jquery\css\images\ui-bg_inset-hard_100_fcfdfd_1x100.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\jquery\css\images\ui-icons_056b93_256x240.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\jquery\css\images\ui-icons_d8e7f3_256x240.png
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\jquery\css\jquery-ui.custom.css
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\jquery\css\override-page.css
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\jquery\jquery-ui.custom.min.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\jquery\jquery.cookie.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\jquery\jquery.min.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\LICENSE
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\manifest.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\notificationoverlay.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\options\bug-report.html
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\options\bug-report.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\options\customize.html
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\options\customize.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\options\filters.html
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\options\filters.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\options\general.html
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\options\general.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\options\index.html
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\options\index.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\options\options.css
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\options\support.html
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\options\support.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\pages\adreport.html
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\pages\adreport.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\pages\resourceblock.css
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\pages\resourceblock.html
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\pages\resourceblock.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\pages\subscribe.css
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\pages\subscribe.html
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\pages\subscribe.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\picreplacement\picreplacement.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\picreplacement\picreplacement_checker.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\port.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\punycode.min.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\README.markdown
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\stats.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\survey.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\translators.json
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\uiscripts\blacklisting\blacklistui.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\uiscripts\blacklisting\clickwatcher.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\uiscripts\blacklisting\elementchain.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\uiscripts\blacklisting\overlay.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\uiscripts\blacklisting\rightclick_hook.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\uiscripts\load_jquery_ui.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\uiscripts\send_content_to_back.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\uiscripts\top_open_blacklist_ui.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\uiscripts\top_open_whitelist_ui.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.52_0\ytchannel.js
    c:\users\Tingler\AppData\Local\Google\Chrome\User Data\Default\Preferences
    .
    .
    ((((((((((((((((((((((((( Files Created from 2016-02-17 to 2016-03-17 )))))))))))))))))))))))))))))))
    .
    .
    2016-03-17 16:33 . 2016-03-17 16:33 -------- d-----w- c:\users\Default\AppData\Local\temp
    2016-03-16 12:14 . 2016-03-16 12:14 -------- d-----w- C:\@RestoreQuarantine
    2016-03-16 12:09 . 2016-03-16 12:09 -------- d-----w- c:\programdata\RegRun
    2016-03-16 12:07 . 2016-03-16 12:07 2 --shatr- c:\windows\winstart.bat
    2016-03-16 12:07 . 2016-03-16 12:52 -------- d-----w- c:\program files (x86)\UnHackMe
    2016-03-16 11:56 . 2016-03-16 11:56 -------- d-----w- c:\program files\Vuze
    2016-03-16 06:10 . 2016-03-16 06:18 24688 ----a-w- c:\windows\system32\drivers\TrueSight.sys
    2016-03-16 05:52 . 2016-03-16 05:53 -------- d-----w- c:\programdata\RogueKiller
    2016-03-13 07:02 . 2016-03-13 07:06 -------- d-----w- C:\FRST
    2016-03-10 17:20 . 2016-03-16 16:02 -------- d-----w- c:\program files (x86)\AdwCleaner
    2016-03-09 17:55 . 2016-03-09 17:56 -------- d-----w- c:\program files\AVAST Software
    2016-03-09 17:54 . 2016-03-09 17:54 450504 ----a-w- c:\windows\system32\drivers\uofqjsfl.sys
    2016-03-09 17:45 . 2016-03-09 17:45 -------- d-----w- c:\programdata\Kaspersky Lab Setup Files
    2016-03-09 17:35 . 2016-03-09 17:35 -------- d-----w- c:\programdata\Kaspersky Lab
    2016-03-09 05:40 . 2016-03-09 17:35 -------- d-----w- c:\program files (x86)\Kaspersky Lab
    2016-03-08 09:42 . 2016-03-08 09:43 -------- d-----w- c:\program files\IDT
    2016-03-06 06:36 . 2016-03-06 06:36 450504 ----a-w- c:\windows\system32\drivers\pcineovz.sys
    2016-03-06 06:31 . 2016-03-06 06:31 -------- d-s---w- c:\windows\SysWow64\Microsoft
    2016-03-03 20:35 . 2016-03-10 20:45 797376 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
    2016-03-03 20:35 . 2016-03-10 20:45 142528 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
    2016-03-03 20:35 . 2016-03-03 20:35 -------- d-----w- c:\windows\SysWow64\Macromed
    2016-03-03 20:35 . 2016-03-03 20:35 -------- d-----w- c:\windows\system32\Macromed
    2016-03-03 19:19 . 2013-12-30 10:53 4659712 ----a-w- c:\windows\SysWow64\Redemption.dll
    2016-03-03 18:57 . 2016-01-08 08:51 213088 ----a-w- c:\windows\system32\drivers\ssudmdm.sys
    2016-03-03 18:57 . 2016-01-08 08:51 120416 ----a-w- c:\windows\system32\drivers\ssudbus.sys
    2016-03-03 18:56 . 2016-03-04 11:37 -------- d-----w- c:\programdata\Samsung
    2016-03-03 18:56 . 2016-02-03 09:29 144664 ----a-w- c:\windows\SysWow64\secman.dll
    2016-03-03 18:55 . 2016-03-04 11:26 -------- d-----w- c:\program files (x86)\Samsung
    2016-03-03 12:17 . 2016-03-03 12:17 -------- d-----w- c:\programdata\Kingsoft
    2016-03-02 09:56 . 2014-05-14 16:23 44512 ----a-w- c:\windows\system32\wups2.dll
    2016-03-02 09:56 . 2014-05-14 16:23 58336 ----a-w- c:\windows\system32\wuauclt.exe
    2016-03-02 09:56 . 2014-05-14 16:23 2477536 ----a-w- c:\windows\system32\wuaueng.dll
    2016-03-02 09:56 . 2014-05-14 16:21 2620928 ----a-w- c:\windows\system32\wucltux.dll
    2016-03-02 09:55 . 2014-05-14 16:23 38880 ----a-w- c:\windows\system32\wups.dll
    2016-03-02 09:55 . 2014-05-14 16:20 97792 ----a-w- c:\windows\system32\wudriver.dll
    2016-03-02 09:55 . 2014-05-14 16:23 36320 ----a-w- c:\windows\SysWow64\wups.dll
    2016-03-02 09:55 . 2014-05-14 16:23 700384 ----a-w- c:\windows\system32\wuapi.dll
    2016-03-02 09:55 . 2014-05-14 16:23 581600 ----a-w- c:\windows\SysWow64\wuapi.dll
    2016-03-02 09:55 . 2014-05-14 16:17 92672 ----a-w- c:\windows\SysWow64\wudriver.dll
    2016-03-02 09:55 . 2014-05-14 09:23 179656 ----a-w- c:\windows\SysWow64\wuwebv.dll
    2016-03-02 09:55 . 2014-05-14 09:17 33792 ----a-w- c:\windows\SysWow64\wuapp.exe
    2016-03-02 09:55 . 2014-05-14 09:23 198600 ----a-w- c:\windows\system32\wuwebv.dll
    2016-03-02 09:55 . 2014-05-14 09:20 36864 ----a-w- c:\windows\system32\wuapp.exe
    2016-03-01 14:19 . 2016-03-01 14:20 -------- d-----w- c:\windows\system32\SPReview
    2016-03-01 14:19 . 2016-03-01 14:19 -------- d-----w- c:\windows\system32\EventProviders
    2016-03-01 13:05 . 2010-11-20 13:27 1219584 ----a-w- c:\windows\system32\rpcrt4.dll
    2016-03-01 13:04 . 2010-11-20 13:27 473600 ----a-w- c:\windows\system32\taskcomp.dll
    2016-03-01 13:03 . 2010-11-20 13:27 624128 ----a-w- c:\windows\system32\qedit.dll
    2016-03-01 13:02 . 2010-11-20 13:27 249856 ----a-w- c:\program files\Common Files\System\msadc\msdarem.dll
    2016-03-01 13:01 . 2010-11-20 12:57 3072 ----a-w- c:\windows\system32\drivers\en-US\tsusbflt.sys.mui
    2016-03-01 13:01 . 2010-11-20 13:01 2560 ----a-w- c:\windows\system32\drivers\en-US\rdpwd.sys.mui
    2016-03-01 13:01 . 2010-11-20 13:10 4608 ----a-w- c:\windows\system32\drivers\en-US\kbdclass.sys.mui
    2016-03-01 13:01 . 2010-11-20 13:11 6144 ----a-w- c:\windows\system32\drivers\en-US\IPMIDrv.sys.mui
    2016-03-01 13:01 . 2010-11-20 13:26 399872 ----a-w- c:\windows\system32\dpx.dll
    2016-03-01 13:01 . 2010-11-20 12:21 189952 ----a-w- c:\windows\SysWow64\wdscore.dll
    2016-03-01 13:00 . 2010-11-20 12:21 363008 ----a-w- c:\windows\SysWow64\wbemcomn.dll
    2016-03-01 13:00 . 2010-11-20 12:19 606208 ----a-w- c:\windows\SysWow64\wbem\fastprox.dll
    2016-03-01 12:53 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
    2016-03-01 12:33 . 2016-03-01 12:34 -------- d-----w- c:\program files (x86)\iTunes
    2016-03-01 12:33 . 2016-03-01 12:33 -------- d-----w- c:\program files\iPod
    2016-03-01 12:33 . 2016-03-01 12:34 -------- d-----w- c:\program files\iTunes
    2016-03-01 06:28 . 2016-03-12 09:49 -------- d-----w- c:\programdata\Malwarebytes Anti-Exploit
    2016-02-29 22:34 . 2016-02-29 22:34 -------- d-----w- c:\windows\system32\oem
    2016-02-29 20:06 . 2016-02-29 20:06 -------- d-----w- c:\program files (x86)\Microsoft.NET
    2016-02-29 16:20 . 2016-02-29 16:24 -------- d-----w- c:\windows\system32\MRT
    2016-02-29 16:18 . 2011-04-09 06:58 142336 ----a-w- c:\windows\system32\poqexec.exe
    2016-02-29 16:18 . 2011-04-09 05:56 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
    2016-02-29 16:18 . 2011-04-09 07:02 5562240 ----a-w- c:\windows\system32\ntoskrnl.exe
    2016-02-29 16:18 . 2011-04-09 06:02 3967872 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
    2016-02-29 16:18 . 2011-04-09 06:02 3912576 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
    2016-02-29 15:36 . 2016-02-23 18:28 463744 ----a-w- c:\windows\system32\drivers\aswCD70.tmp
    2016-02-29 15:36 . 2016-02-23 18:28 552880 ----a-w- c:\windows\system32\drivers\aswCCED.tmp
    2016-02-29 15:36 . 2016-02-21 14:22 37144 ----a-w- c:\windows\system32\drivers\aswCCFD.tmp
    2016-02-29 15:36 . 2016-02-21 14:20 287016 ----a-w- c:\windows\system32\drivers\aswCD91.tmp
    2016-02-29 15:36 . 2016-02-21 14:20 74544 ----a-w- c:\windows\system32\drivers\aswCD60.tmp
    2016-02-29 15:36 . 2016-02-21 14:20 37656 ----a-w- c:\windows\system32\drivers\aswCD3F.tmp
    2016-02-29 15:36 . 2016-02-21 14:20 165344 ----a-w- c:\windows\system32\drivers\aswCDA1.tmp
    2016-02-29 15:36 . 2016-02-21 14:20 107792 ----a-w- c:\windows\system32\drivers\aswCD4F.tmp
    2016-02-29 15:36 . 2016-02-21 14:20 103064 ----a-w- c:\windows\system32\drivers\aswCD2E.tmp
    2016-02-29 15:36 . 2016-02-21 14:19 1065720 ----a-w- c:\windows\system32\drivers\aswCD0E.tmp
    2016-02-29 15:05 . 2016-02-29 15:05 -------- d-----w- c:\users\Default\AppData\Roaming\AVAST Software
    2016-02-29 14:39 . 2016-03-16 11:57 -------- d-----w- c:\users\Tingler
    2016-02-29 14:37 . 2009-05-12 14:27 652288 ----a-w- c:\windows\system32\ctapo64.dll
    2016-02-29 14:37 . 2009-05-12 14:25 511488 ----a-w- c:\windows\system32\ctapo32.dll
    2016-02-29 14:37 . 2009-06-29 12:44 564224 ----a-w- c:\windows\system32\idt64mp1.exe
    2016-02-29 14:37 . 2009-06-29 12:44 3593216 ----a-w- c:\windows\system32\stlang64.dll
    2016-02-29 14:37 . 2009-05-12 14:28 57856 ----a-w- c:\windows\system32\ctppld64.dll
    2016-02-29 14:37 . 2009-03-02 12:59 165888 ----a-w- c:\windows\system32\AESTAC64.dll
    2016-02-29 14:37 . 2009-03-02 12:58 68608 ----a-w- c:\windows\system32\AESTAR64.dll
    2016-02-29 14:37 . 2009-03-02 12:47 90624 ----a-w- c:\windows\system32\AESTCo64.dll
    2016-02-29 14:37 . 2009-03-02 12:08 431104 ----a-w- c:\windows\system32\AESTEC64.dll
    2016-02-29 14:37 . 2009-06-29 12:44 12151808 ----a-w- c:\windows\system32\idtcpl64.cpl
    2016-02-29 14:37 . 2016-02-29 14:37 -------- d-----w- c:\windows\system32\SRSLabs
    2016-02-29 13:17 . 2016-02-29 13:17 -------- d-----w- C:\NPE
    2016-02-29 13:15 . 2016-02-29 14:43 -------- d-----w- c:\programdata\Norton
    2016-02-29 05:23 . 2016-02-29 14:42 -------- d-----w- c:\program files\WinRAR
    2016-02-28 21:25 . 2009-06-04 18:54 408600 ----a-w- c:\windows\system32\drivers\iaStor.sys
    2016-02-28 21:25 . 2016-02-29 14:42 -------- d-----w- c:\program files (x86)\Intel
    2016-02-28 19:02 . 2009-06-29 12:44 487424 ----a-w- c:\windows\system32\drivers\stwrt64.sys
    2016-02-28 19:02 . 2009-06-29 12:44 431616 ----a-w- c:\windows\system32\stcplx64.dll
    2016-02-28 19:02 . 2009-06-29 12:44 1431040 ----a-w- c:\windows\system32\stapo64.dll
    2016-02-28 19:02 . 2009-06-29 12:44 598016 ------w- c:\windows\system32\stapi64.dll
    2016-02-28 19:02 . 2009-06-29 12:44 209920 ----a-w- c:\windows\system32\st646217.dll
    2016-02-28 19:02 . 2016-03-04 11:37 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
    2016-02-28 19:02 . 2009-05-12 14:25 511488 ----a-w- c:\windows\SysWow64\ctapo32.dll
    2016-02-28 18:59 . 2016-02-29 14:44 -------- d-----w- c:\windows\SysWow64\vmm32
    2016-02-28 18:59 . 2016-02-29 14:42 -------- d-----w- c:\program files (x86)\Dell
    2016-02-28 12:18 . 2016-02-29 14:42 -------- d-----w- c:\program files (x86)\Anvsoft
    2016-02-26 14:50 . 2016-02-29 14:43 -------- d-----w- c:\programdata\Apple Computer
    2016-02-26 14:49 . 2016-02-29 14:42 -------- d-----w- c:\program files (x86)\Apple Software Update
    2016-02-26 14:49 . 2016-02-29 14:42 -------- d-----w- c:\program files (x86)\Bonjour
    2016-02-26 14:49 . 2016-02-29 14:41 -------- d-----w- c:\program files\Bonjour
    2016-02-26 14:49 . 2016-03-01 12:33 -------- d-----w- c:\program files\Common Files\Apple
    2016-02-26 14:48 . 2016-02-29 14:43 -------- d-----w- c:\programdata\Apple
    2016-02-26 14:48 . 2016-02-29 14:42 -------- d-----w- c:\program files (x86)\Common Files\Apple
    2016-02-26 09:59 . 2016-03-16 08:34 192216 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
    2016-02-26 09:58 . 2016-03-08 07:32 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
    2016-02-26 09:58 . 2015-10-05 09:50 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
    2016-02-26 09:58 . 2015-10-05 09:50 109272 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
    2016-02-26 09:58 . 2015-10-05 09:50 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
    2016-02-26 07:46 . 2016-02-29 14:44 -------- d-----w- c:\windows\system32\system32
    2016-02-25 12:39 . 2016-02-29 14:43 -------- d-----w- c:\programdata\Malwarebytes
    2016-02-25 12:34 . 2016-02-29 14:43 -------- d-----w- c:\programdata\WinZip
    2016-02-25 12:33 . 2016-02-29 14:43 -------- d-----w- c:\programdata\UniqueId
    2016-02-22 05:38 . 2016-02-22 05:38 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{0718E44D-7298-41AB-9D0E-9EAB932EAD05}\offreg.2764.dll
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2016-03-01 14:30 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
    2016-03-01 14:30 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
    2016-01-04 14:15 . 2016-01-04 14:15 44544 ----a-w- c:\users\Tingler\AppData\Roaming\Microsoft\MSXML2\msxml4a.dll
    .
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2016-03-09 7137664]
    .
    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    Kaspersky Software Updater Beta.lnk - c:\program files (x86)\Kaspersky Lab\Kaspersky Software Updater Beta\ksu.exe -hide [2015-12-14 3529600]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    "EnableLUA"= 0 (0x0)
    "PromptOnSecureDesktop"= 0 (0x0)
    "SoftwareSASGeneration"= 1 (0x1)
    .
    R1 aswNetSec;aswNetSec;c:\windows\system32\drivers\aswNetSec.sys;c:\windows\SYSNATIVE\drivers\aswNetSec.sys [x]
    R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
    R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
    R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
    R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
    R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
    R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
    R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
    R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
    R4 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [x]
    S0 aswNdisFlt;Avast! Firewall Driver;c:\windows\system32\DRIVERS\aswNdisFlt.sys;c:\windows\SYSNATIVE\DRIVERS\aswNdisFlt.sys [x]
    S0 aswRvrt;avast! Revert; [x]
    S0 aswVmm;avast! VM Monitor; [x]
    S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys;c:\windows\SYSNATIVE\drivers\aswKbd.sys [x]
    S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
    S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
    S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\AESTSr64.exe;c:\windows\SYSNATIVE\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\AESTSr64.exe [x]
    S2 Apple Mobile Device Service;Apple Mobile Device Service;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x]
    S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
    S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
    S2 avast! Firewall;Avast Firewall;c:\program files\AVAST Software\Avast\afwServ.exe;c:\program files\AVAST Software\Avast\afwServ.exe [x]
    S2 ss_conn_service;SAMSUNG Mobile Connectivity Service;c:\program files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe;c:\program files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [x]
    S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
    .
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
    2016-03-12 17:55 1106072 ----a-w- c:\program files (x86)\Google\Chrome\Application\49.0.2623.87\Installer\chrmstp.exe
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2016-03-16 c:\windows\Tasks\Adobe Flash Player Updater.job
    - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-03 20:45]
    .
    2016-03-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2016-03-12 17:54]
    .
    2016-03-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2016-03-12 17:54]
    .
    .
    --------- X64 Entries -----------
    .
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
    @="{472083B0-C522-11CF-8763-00608CC02F24}"
    [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
    2016-03-09 18:08 905248 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-04 186904]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2015-12-17 170256]
    "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2009-06-29 444416]
    .
    ------- Supplementary Scan -------
    .
    uLocal Page = c:\windows\system32\blank.htm
    uStart Page = www.google.com
    mLocal Page = c:\windows\SysWOW64\blank.htm
    uInternet Settings,ProxyOverride = *.local
    IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
    TCP: DhcpNameServer = 192.168.1.254
    .
    - - - - ORPHANS REMOVED - - - -
    .
    Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
    .
    .
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_21_0_0_182_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
    @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_21_0_0_182_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker6"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_21_0_0_182_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_21_0_0_182_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_21_0_0_182.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.21"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_21_0_0_182.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_21_0_0_182.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_21_0_0_182.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker6"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    Completion time: 2016-03-17 16:36:44
    ComboFix-quarantined-files.txt 2016-03-17 16:36
    .
    Pre-Run: 105,578,774,528 bytes free
    Post-Run: 110,198,521,856 bytes free
    .
    - - End Of File - - 5B72990C7F77B84FC430A93E9C7D1A34
    A36C5E4F47E84449FF07ED3517B43A31
     
  25. Tingler

    Tingler TS Rookie Topic Starter Posts: 40

    Upon restarting my browser I noticed ADblock had been disabled-should I leave this disabled?
    Also ran Adwear cleaner and this time no results were found. If the above log means the fix has been successful then I thank you very much for your time assistance and trouble for helping me out with this issue
    Jim
     

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...