Hi. Yesterday it came to my attention that someone had gain unauthorized access to my Battle.Net account. After many scans of my PC that showed nothing wrong (accept for tracer cookies) I decided to ask for help here. Whilst going through the steps however i found that i couldn't get Gmer to generate a log-file. He seems to do a scan when i start it (tried both with all anti virus programs turned off and in safe mode) but when i press save.. it gives me a blank text file. Here are the other logs:
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 5438
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
1-1-2011 20:13:33
mbam-log-2011-01-01 (20-13-33).txt
Scan type: Quick scan
Objects scanned: 151682
Time elapsed: 1 minute(s), 41 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_10-12-12.02)
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 3-12-2010 1:39:29
System Uptime: 1-1-2011 20:08:48 (0 hours ago)
Motherboard: ASUSTeK Computer INC. | | P7P55D
Processor: Intel(R) Core(TM) i7 CPU 860 @ 2.80GHz | LGA1156 | 1176/133mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 466 GiB total, 423,92 GiB free.
D: is FIXED (NTFS) - 932 GiB total, 232,704 GiB free.
E: is FIXED (NTFS) - 932 GiB total, 616,718 GiB free.
F: is FIXED (NTFS) - 1863 GiB total, 1021,889 GiB free.
G: is CDROM ()
H: is Removable
I: is Removable
==== Disabled Device Manager Items =============
==== System Restore Points ===================
RP73: 25-12-2010 6:17:01 - Installed DirectX
RP74: 28-12-2010 0:09:37 - Installed DirectX
RP75: 28-12-2010 0:24:58 - Installed DirectX
RP76: 28-12-2010 17:45:55 - Windows Update
RP77: 30-12-2010 10:33:33 - Windows Update
RP78: 30-12-2010 18:45:00 - Installed DirectX
RP79: 30-12-2010 19:36:13 - Installed Project64 1.6
RP80: 30-12-2010 19:58:10 - Removed Project64 1.6
RP81: 30-12-2010 20:17:25 - Installed Pcsx2 0.9.6
RP82: 30-12-2010 20:57:49 - Removed Pcsx2 0.9.6
RP83: 30-12-2010 21:45:54 - Installed DirectX
RP84: 31-12-2010 14:42:41 - Windows Update
RP85: 1-1-2011 6:25:23 - Installed COMODO Internet Security
RP86: 1-1-2011 6:57:15 - Windows Update
RP87: 1-1-2011 7:01:05 - Windows Update
==== Installed Programs ======================
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader X - Nederlands
Amnesia: The Dark Descent
Application Profiles
Aquaria
µTorrent
Bob Came in Pieces
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
Catalyst Control Center Profiles Desktop
ccc-core-static
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
Chime
Cogs
Command and Conquer 3: Tiberium Wars
D3DX10
Darwinia
DEFCON
Droplitz
eReg
Eufloria
FAKEFACTORY Cinematic Mod V10
Flight Control HD
Galcon Fusion
Geometry Wars: Retro Evolved
GIMP 2.6.11
Gish
Google Chrome
Grooveshark
Guild Wars
Java Auto Updater
Java(TM) 6 Update 20
Java(TM) 6 Update 23
Junk Mail filter update
Just Cause 2
K-Lite Codec Pack 6.6.1 (Full)
KeyScrambler
Lara Croft and the Guardian of Light
LCDSirReal - a multipurpose plugin for the Logitech G13/G15
LogMeIn Hamachi
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Microsoft XNA Framework Redistributable 3.1
Mozilla Firefox (3.6.13)
MSVCRT
MSVCRT_amd64
NCsoft Launcher
Need for Speed: Hot Pursuit
NVIDIA PhysX
ObjectDock
OpenAL
OpenOffice.org 3.2
Penumbra: Overture
Plain Sight
Platform
Poker Night at the Inventory
PunkBuster Services
R.U.S.E
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Serious Sam HD: The First Encounter
Serious Sam HD: The Second Encounter
Shatter
Sophos Anti-Rootkit 1.5.4
Source SDK
Spore
Spore: Creepy & Cute Parts Pack
Spore: Galactic Adventures
Super Laser Racer
The Lord of the Rings Online™ v03.02.04.8010
The UnderGarden
Tom Clancy's Ghost Recon: Advanced Warfighter
Tom Clancy's Ghost Recon: Advanced Warfighter 2
Twin Sector
UseNeXT
VIA Platform apparaatbeheer
VLC media player 0.9.9
Windows Live Communications Platform
Windows Live Essentials
Windows Live Installer
Windows Live Mail
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Windows Media Player Firefox Plugin
World of Goo
World of Warcraft
Xfire (remove only)
yuPlay client 0.7.17
Zombie Driver
==== Event Viewer Messages From Past Week ========
30-12-2010 19:00:18, Error: bowser [8003] - The master browser has received a server announcement from the computer DEATHSTAR-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{A1CA1B4F-70B1-48DF-ADCC-B4887B913EF2}. The master browser is stopping or an election is being forced.
29-12-2010 19:30:22, Error: bowser [8003] - The master browser has received a server announcement from the computer PC_NIECK that believes that it is the master browser for the domain on transport NetBT_Tcpip_{A1CA1B4F-70B1-48DF-ADCC-B4887B913EF2}. The master browser is stopping or an election is being forced.
1-1-2011 8:54:03, Error: Service Control Manager [7022] - The LogMeIn Hamachi 2.0 Tunneling Engine service hung on starting.
1-1-2011 7:01:33, Error: Microsoft Antimalware [3002] -
1-1-2011 20:09:12, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: SAVRKBootTasks
1-1-2011 19:07:02, Error: NetBT [4321] - The name "WORKGROUP :1d" could not be registered on the interface with IP address 5.218.192.45. The computer with the IP address 5.99.23.141 did not allow the name to be claimed by this computer.
1-1-2011 13:17:19, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
1-1-2011 13:17:19, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
1-1-2011 13:17:19, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
1-1-2011 13:17:19, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
1-1-2011 13:17:19, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
1-1-2011 13:17:18, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
1-1-2011 13:17:12, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
1-1-2011 13:16:59, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD cmdGuard cmdHlp DfsC discache ehdrv inspect NetBIOS NetBT nsiproxy Psched rdbss SAVRKBootTasks spldr tdx Wanarpv6 WfpLwf
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
1-1-2011 13:11:25, Error: Service Control Manager [7000] - The MEMSWEEP2 service failed to start due to the following error: This driver has been blocked from loading
1-1-2011 13:11:25, Error: Application Popup [1060] - \??\C:\Windows\system32\C055.tmp has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
1-1-2011 11:37:25, Error: Application Popup [1060] - \??\C:\Windows\system32\2F6B.tmp has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
==== End Of File ===========================
DDS (Ver_10-12-12.02) - NTFS_AMD64
Run by Xanem at 20:42:19,55 on za 01-01-2011
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_23
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.44.1033.18.8183.5951 [GMT 1:00]
AV: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: COMODO Defense+ *Disabled/Updated* {DC3D0F8D-B138-AAAA-0339-560EB3387C28}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: COMODO Firewall *Enabled* {5F676F4C-DD6D-A47C-12D6-C449366C71EE}
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\lcdmon.exe
C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
E:\Xanem\Downloads\GSDesktopHelper_Win.exe
C:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe
E:\Xanem\Documents\LCDSirReal\LCDSirReal.exe
C:\Program Files (x86)\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\Stardock\ObjectDock\Dock64.exe
C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe
C:\Program Files\Logitech\SetPointG\SetPointII.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\taskhost.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k SDRSVC
E:\Xanem\Desktop\dds.scr
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
============== Pseudo HJT Report ===============
mWinlogon: Userinit=userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
uRun: [GSDesktopHelper] E:\Xanem\Downloads\GSDesktopHelper_Win.exe
uRun: [Steam] "F:\Steam\steam.exe" -silent
uRun: [Google Update] "C:\Users\Xanem\AppData\Local\Google\Update\GoogleUpdate.exe" /c
mRun: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [KeyScrambler] C:\Program Files (x86)\KeyScrambler\keyscrambler.exe /a
mRunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\OBJECT~1.LNK - C:\Program Files (x86)\Stardock\ObjectDock\ObjectDock.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - {B745F984-EF2E-40D6-A9AC-D8CED7230E61} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
TCP: {3ED3F768-945D-4EFF-9E40-84FBD7B5D5C4} = 156.154.70.22,156.154.71.22
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
mRun-x64: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
mRun-x64: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
mRun-x64: [Launch LgDeviceAgent] "C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe"
mRun-x64: [Launch LCDMon] "C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe"
mRun-x64: [Launch LGDCore] "C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE
mRun-x64: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
mRun-x64: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
AppInit_DLLs-X64: C:\Windows\system32\guard64.dll
================= FIREFOX ===================
FF - ProfilePath - C:\Users\Xanem\AppData\Roaming\Mozilla\Firefox\Profiles\c33agloh.default\
FF - prefs.js: browser.startup.homepage - www.google.nl
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Users\Xanem\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: C:\Users\Xanem\AppData\Roaming\Mozilla\Firefox\Profiles\c33agloh.default\extensions\battlefieldplay4free@ea.com\platform\WINNT_x86-msvc\plugins\npBP4FUpdater.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: United States English Spellchecker: en-US@dictionaries.addons.mozilla.org - %profile%\extensions\en-US@dictionaries.addons.mozilla.org
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: Battlefield Play4Free: battlefieldplay4free@ea.com - %profile%\extensions\battlefieldplay4free@ea.com
============= SERVICES / DRIVERS ===============
R1 cmdGuard;COMODO Internet Security Sandbox Driver;C:\Windows\System32\drivers\cmdGuard.sys [2010-12-29 250008]
R1 cmdHlp;COMODO Internet Security Helper Driver;C:\Windows\System32\drivers\cmdhlp.sys [2010-12-29 39376]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2010-11-26 203776]
R2 eamonm;eamonm;C:\Windows\System32\drivers\eamonm.sys [2010-9-3 170104]
R2 ekrn;ESET Service;C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2010-11-4 810144]
R2 epfwwfpr;epfwwfpr;C:\Windows\System32\drivers\epfwwfpr.sys [2010-7-29 126320]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2010-12-6 2101640]
R3 amdkmdag;amdkmdag;C:\Windows\System32\drivers\atikmdag.sys [2010-11-26 8120320]
R3 amdkmdap;amdkmdap;C:\Windows\System32\drivers\atikmpag.sys [2010-11-26 289792]
R3 DKRtWrt;DKRtWrt;C:\Windows\System32\drivers\DKRtWrt.sys [2010-12-3 51120]
R3 KeyScrambler;KeyScrambler;C:\Windows\System32\drivers\keyscrambler.sys [2011-1-1 130696]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;C:\Windows\System32\drivers\LGBusEnum.sys [2009-11-23 22408]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;C:\Windows\System32\drivers\LGVirHid.sys [2009-11-23 16008]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-6-10 187392]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;C:\Windows\System32\drivers\viahduaa.sys [2010-8-4 1342064]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-12-3 1255736]
=============== Created Last 30 ================
2011-01-01 19:11:23 38224 ----a-w- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
2011-01-01 19:11:20 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-01-01 12:12:12 18816 ------w- C:\Windows\SysWow64\SAVRKBootTasks.sys
2011-01-01 11:20:51 -------- d-----w- C:\Users\Xanem\AppData\Local\{31F3EF5A-38AC-4649-89BB-B069398A6D66}
2011-01-01 10:36:35 -------- d-----w- C:\Program Files (x86)\Sophos
2011-01-01 10:05:48 -------- d--h--w- C:\VritualRoot
2011-01-01 10:03:47 -------- d-----w- C:\Users\Xanem\AppData\Local\ESET
2011-01-01 07:34:42 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy
2011-01-01 07:34:42 -------- d-----w- C:\PROGRA~3\Spybot - Search & Destroy
2011-01-01 07:26:44 130696 ----a-w- C:\Windows\System32\drivers\keyscrambler.sys
2011-01-01 07:26:44 -------- d-----w- C:\Program Files (x86)\KeyScrambler
2011-01-01 06:40:02 -------- d-----w- C:\PROGRA~3\SUPERAntiSpyware.com
2011-01-01 06:20:01 -------- d-----w- C:\Users\Xanem\AppData\Roaming\QuickScan
2011-01-01 05:57:31 374664 ----a-w- C:\Windows\System32\drivers\netio.sys
2011-01-01 05:50:05 19528 ----a-w- C:\Windows\System32\drivers\hitmanpro35.sys
2011-01-01 05:49:13 -------- d-----w- C:\PROGRA~3\Hitman Pro
2011-01-01 05:25:38 -------- d-----w- C:\Program Files\COMODO
2011-01-01 05:24:58 -------- d-----w- C:\PROGRA~3\Comodo
2011-01-01 05:21:35 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Malwarebytes
2011-01-01 05:21:30 -------- d-----w- C:\PROGRA~3\Malwarebytes
2011-01-01 05:21:27 24152 ----a-w- C:\Windows\System32\drivers\mbam.sys
2010-12-31 22:21:06 -------- d-----w- C:\Users\Xanem\AppData\Local\{E48C05D2-EE51-4D9A-984F-B550D0A899FD}
2010-12-31 13:42:53 8199504 ----a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{433FCC07-2AEC-4368-AAF3-AA6D8C99D12E}\mpengine.dll
2010-12-30 20:52:32 -------- d-----w- C:\Users\Xanem\AppData\Local\{50A229CF-CB31-4AEB-BB56-EEE1711A1B2C}
2010-12-30 20:47:35 -------- d-----w- C:\Users\Xanem\AppData\Local\Wings of Prey
2010-12-30 20:46:20 -------- d-----w- C:\Users\Xanem\AppData\Local\***
2010-12-30 20:46:20 -------- d-----w- C:\PROGRA~3\***
2010-12-30 19:59:05 -------- d-----w- C:\Users\Xanem\AppData\Local\PCSX2
2010-12-30 00:09:52 -------- d-----w- C:\Users\Xanem\AppData\Local\{36BC3A3C-3732-412B-B3E5-465702A660AF}
2010-12-29 11:16:17 -------- d-----w- C:\Users\Xanem\AppData\Local\{B7ACF7E3-D122-4382-AFAF-C639267F359B}
2010-12-29 00:42:04 285480 ----a-w- C:\Windows\SysWow64\guard32.dll
2010-12-29 00:42:02 362784 ----a-w- C:\Windows\System32\guard64.dll
2010-12-29 00:41:24 39376 ----a-w- C:\Windows\System32\drivers\cmdhlp.sys
2010-12-29 00:41:22 250008 ----a-w- C:\Windows\System32\drivers\cmdGuard.sys
2010-12-29 00:41:22 14184 ----a-w- C:\Windows\System32\drivers\cmderd.sys
2010-12-28 00:56:24 -------- d-----w- C:\Users\Xanem\AppData\Local\{CEE20A4D-4A23-48DA-9FD0-FEE417AFE3FF}
2010-12-27 08:18:14 -------- d-----w- C:\Users\Xanem\AppData\Local\{ADCCCCDD-3C0F-42C2-9F81-D7B29AC69E5E}
2010-12-26 19:29:39 -------- d-----w- C:\Users\Xanem\AppData\Local\{193ADC98-2639-4ECE-A4A2-479094BCB747}
2010-12-25 19:27:06 -------- d-----w- C:\Users\Xanem\AppData\Local\{E27A6915-C570-4F67-940C-590238BBC813}
2010-12-25 04:38:30 -------- d-----w- C:\Users\Xanem\AppData\Local\Bizarre Creations
2010-12-25 02:48:32 -------- d-----w- C:\Users\Xanem\AppData\Local\GRAW2
2010-12-25 02:48:32 -------- d-----w- C:\PROGRA~3\GRAW2
2010-12-24 19:01:54 -------- d-----w- C:\Users\Xanem\AppData\Local\{D8DBEA76-E878-4C3D-B06A-A8C165D54E25}
2010-12-24 00:46:16 -------- d-----w- C:\Users\Xanem\AppData\Local\{D8DADE1E-0146-46AE-8330-18D20D403308}
2010-12-23 04:56:27 -------- d-----w- C:\Users\Xanem\AppData\Local\{50E34F27-1162-4015-B27A-3BE34B9C7386}
2010-12-23 00:17:01 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Spore
2010-12-22 16:56:03 -------- d-----w- C:\Users\Xanem\AppData\Local\{A8286E12-9A79-4A10-BBD8-3B83A60307AC}
2010-12-21 21:44:27 -------- d-----w- C:\Users\Xanem\AppData\Local\{5015BC53-7097-469C-A632-6264B88A8E7C}
2010-12-21 05:35:09 -------- d-----w- C:\Users\Xanem\AppData\Local\{E2046F35-5016-4A11-A25F-2C62E6D61FB7}
2010-12-20 22:14:53 -------- d-----w- C:\Program Files (x86)\Common Files\Blizzard Entertainment
2010-12-20 22:14:23 -------- d-----w- C:\PROGRA~3\Blizzard Entertainment
2010-12-20 13:22:16 -------- d-----w- C:\Users\Xanem\AppData\Local\{7C6D5CD0-1BC6-48C6-B18B-43296BE2B1BB}
2010-12-20 05:26:29 -------- d-----w- C:\Users\Xanem\AppData\Roaming\The Creative Assembly
2010-12-20 05:02:09 -------- d-----w- C:\ATI
2010-12-20 00:10:35 -------- d-----w- C:\Users\Xanem\AppData\Local\Redlynx
2010-12-19 21:15:36 -------- d-----w- C:\Users\Xanem\AppData\Local\{C82BC6C7-0E63-4DB4-943C-5127E56F8F4A}
2010-12-18 20:59:03 -------- d-----w- C:\Users\Xanem\AppData\Local\{26233293-3B8D-4EA7-A4EF-DFD19996A512}
2010-12-18 11:27:39 -------- d-----w- C:\Users\Xanem\AppData\Local\Google
2010-12-18 09:22:31 270904 ----a-w- C:\Windows\SysWow64\PnkBstrB.xtr
2010-12-18 09:22:28 -------- d-----w- C:\Users\Xanem\AppData\Local\PunkBuster
2010-12-18 09:21:22 2434856 ----a-w- C:\Windows\SysWow64\pbsvc_bc2.exe
2010-12-18 07:39:22 -------- d-----w- C:\Users\Xanem\AppData\Local\{12999960-A585-41A5-8B1B-A31A317C5371}
2010-12-18 07:38:21 -------- d-----w- C:\Users\Xanem\AppData\Local\{74C4465D-FF78-41A0-A63D-375F35624E5E}
2010-12-17 18:39:43 270904 ----a-w- C:\Windows\SysWow64\PnkBstrB.exe
2010-12-17 18:39:43 215128 ----a-w- C:\Windows\SysWow64\PnkBstrB.ex0
2010-12-17 18:39:42 75136 ----a-w- C:\Windows\SysWow64\PnkBstrA.exe
2010-12-17 18:27:56 -------- d-----w- C:\Users\Xanem\AppData\Local\{4362C677-2FCC-4E40-A75B-622E870E8243}
2010-12-16 19:28:25 -------- d-----w- C:\Users\Xanem\AppData\Roaming\ZombieDriver
2010-12-16 19:28:08 466456 ----a-w- C:\Windows\System32\wrap_oal.dll
2010-12-16 19:28:08 444952 ----a-w- C:\Windows\SysWow64\wrap_oal.dll
2010-12-16 19:28:08 122904 ----a-w- C:\Windows\System32\OpenAL32.dll
2010-12-16 19:28:08 109080 ----a-w- C:\Windows\SysWow64\OpenAL32.dll
2010-12-16 19:28:08 -------- d-----w- C:\Program Files (x86)\OpenAL
2010-12-16 14:55:38 -------- d-----w- C:\Users\Xanem\AppData\Local\{E4A2EC80-EF10-4144-844C-D9D3D400554D}
2010-12-16 00:29:03 -------- d-----w- C:\Users\Xanem\AppData\Local\Futuremark
2010-12-15 23:08:28 -------- d-----w- C:\Users\Xanem\AppData\Local\{C06D8D5A-8D5B-4A63-86EA-C91D9C8FDF78}
2010-12-15 21:36:48 -------- d-----w- C:\Users\Xanem\AppData\Local\{AAB02631-A752-4AD9-A1A2-730DBA25077C}
2010-12-15 17:04:08 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2010-12-15 17:04:08 2048 ----a-w- C:\Windows\System32\tzres.dll
2010-12-15 03:17:26 -------- d-----w- C:\PROGRA~3\Media Center Programs
2010-12-14 17:39:22 -------- d-----w- C:\Users\Xanem\AppData\Local\{3653F57E-958B-4E84-9185-F3EDBAB052E9}
2010-12-13 23:02:42 -------- d-----w- C:\Users\Xanem\AppData\Roaming\TS3Client
2010-12-13 23:02:34 -------- d-----w- C:\Program Files\TeamSpeak 3 Client
2010-12-13 22:52:22 -------- d-----w- C:\Users\Xanem\AppData\Roaming\OpenOffice.org
2010-12-13 22:50:35 -------- d-----w- C:\Program Files (x86)\JRE
2010-12-13 22:50:32 -------- d-----w- C:\Program Files (x86)\OpenOffice.org 3
2010-12-13 22:48:07 -------- d-----w- C:\Program Files (x86)\OpenOffice
2010-12-13 22:41:25 -------- d-----w- C:\Users\Xanem\AppData\Local\{504FCD7A-C3C6-4E2A-A74F-60ED9AA1C5CB}
2010-12-13 02:39:41 -------- d-----w- C:\Program Files (x86)\DAMN NFO Viewer
2010-12-12 21:12:24 -------- d-----w- C:\Users\Xanem\AppData\Local\{76621429-F595-45F6-BFA1-A316B70DF4F2}
2010-12-12 18:22:09 -------- d-----w- C:\Users\Xanem\AppData\Local\Sidhe
2010-12-12 04:03:06 -------- d-----w- C:\Windows\Uninstall
2010-12-12 02:49:19 -------- d-----w- C:\Program Files (x86)\uTorrent
2010-12-12 02:48:17 -------- d-----w- C:\Users\Xanem\AppData\Roaming\uTorrent
2010-12-11 18:18:33 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Atlus
2010-12-11 16:31:15 -------- d-----w- C:\Users\Xanem\AppData\Local\{7C9BC850-AC70-4FAD-9846-1FCCFA9831E2}
2010-12-10 19:32:14 -------- d-----w- C:\Users\Xanem\AppData\Local\The Lord of the Rings Online
2010-12-10 18:48:04 -------- d-----w- C:\Users\Xanem\AppData\Local\Turbine
2010-12-10 18:44:55 -------- d-----w- C:\Users\Xanem\AppData\Local\ApplicationHistory
2010-12-10 18:43:46 -------- d-----w- C:\Windows\SysWow64\URTTEMP
2010-12-10 15:48:04 -------- d-----w- C:\Users\Xanem\AppData\Local\{7F1C0FEA-9B8B-4E08-8B61-F191A9C02494}
2010-12-09 23:29:58 -------- d-----w- C:\Users\Xanem\AppData\Local\{F4976D1E-2638-4546-8327-50C1D2183CEB}
2010-12-09 04:03:32 -------- d-----w- C:\Users\Xanem\AppData\Local\GHOSTBUSTERS (tm)
2010-12-09 03:39:56 -------- d-----w- C:\Users\Xanem\AppData\Local\{2473C073-1EE7-4B01-AC45-30D3815C187F}
2010-12-09 03:33:24 -------- d-----w- C:\Users\Xanem\AppData\Local\DogFighter
2010-12-09 03:08:17 -------- d-----w- C:\Windows\SysWow64\AGEIA
2010-12-09 02:44:12 -------- d-----w- C:\Users\Xanem\AppData\Local\AaaaaRecklessDisregard
2010-12-08 23:42:02 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Beat Hazard
2010-12-08 18:09:48 33856 ---ha-w- C:\Windows\System32\hamachi.sys
2010-12-08 18:09:45 -------- d-----w- C:\Program Files (x86)\LogMeIn Hamachi
2010-12-08 13:13:12 -------- d-----w- C:\Users\Xanem\AppData\Local\{D67D9EFC-F974-4DD6-9F76-10F364A33FA4}
2010-12-07 22:07:29 -------- d-----w- C:\Program Files (x86)\AlterRcon
2010-12-07 19:56:08 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Chime
2010-12-07 19:55:40 -------- d-----w- C:\Program Files (x86)\Microsoft XNA
2010-12-07 12:48:56 -------- d-----w- C:\Users\Xanem\AppData\Local\{3E0B6ED0-6E9A-4423-A3F2-200594584BE9}
2010-12-06 20:01:56 -------- d-----w- C:\Users\Xanem\AppData\Local\IsolatedStorage
2010-12-06 09:20:04 -------- d-----w- C:\Users\Xanem\AppData\Local\{379C48A9-F1AC-4838-96DA-7A0856351B0D}
2010-12-06 09:20:04 -------- d-----w- C:\Users\Xanem\AppData\Local\{0424619F-4934-4541-9582-1F262EF5EA1C}
2010-12-06 03:06:54 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2010-12-06 03:06:54 472808 ----a-w- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
2010-12-05 17:01:31 -------- d-----w- C:\Users\Xanem\AppData\Local\{F39C05EC-83A3-4C66-B622-948AD2F364BA}
2010-12-05 04:02:59 -------- d-----w- C:\Users\Xanem\AppData\Local\{A386EA91-58C3-4F0C-BEF7-AC21A9462873}
2010-12-05 03:56:48 -------- d-----w- C:\Program Files (x86)\VideoLAN
2010-12-04 14:58:27 -------- d-----w- C:\Users\Xanem\AppData\Local\{481DF78F-BCFA-4189-9153-F189BD42C130}
2010-12-04 04:43:36 -------- d-----w- C:\Users\Xanem\.thumbnails
2010-12-04 04:42:53 -------- d-----w- C:\Users\Xanem\.gimp-2.6
2010-12-04 04:35:51 -------- d-----w- C:\Program Files (x86)\GIMP-2.0
2010-12-03 22:05:19 8199504 ----a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2010-12-03 19:49:57 -------- d-----w- C:\Users\Xanem\AppData\Local\assembly
2010-12-03 19:49:46 -------- d-----w- C:\PROGRA~3\CCP
2010-12-03 19:49:42 -------- d-----w- C:\Users\Xanem\AppData\Local\CCP
2010-12-03 19:49:32 -------- d-----w- C:\Program Files (x86)\NCSoft
2010-12-03 18:03:44 -------- d-----w- C:\Users\Xanem\AppData\Local\Activision
2010-12-03 16:21:16 -------- d-----w- C:\Users\Xanem\AppData\Local\{CEC8ECFA-1343-4140-99CD-10E38C3F508E}
2010-12-03 09:29:59 -------- d-----w- C:\Windows\Panther
2010-12-03 09:29:45 -------- d-sh--w- C:\Boot
2010-12-03 04:47:55 -------- d-----w- C:\Users\Xanem\AppData\Local\Treyarch
2010-12-03 04:22:11 -------- d-----w- C:\Program Files\CCleaner
2010-12-03 04:16:23 78680 ----a-w- C:\Windows\System32\XAPOFX1_4.dll
2010-12-03 04:16:23 74072 ----a-w- C:\Windows\SysWow64\XAPOFX1_4.dll
2010-12-03 04:16:23 530776 ----a-w- C:\Windows\System32\XAudio2_6.dll
2010-12-03 04:16:23 528216 ----a-w- C:\Windows\SysWow64\XAudio2_6.dll
2010-12-03 04:16:22 2582888 ----a-w- C:\Windows\System32\D3DCompiler_42.dll
2010-12-03 04:16:22 1974616 ----a-w- C:\Windows\SysWow64\D3DCompiler_42.dll
2010-12-03 04:16:20 2475352 ----a-w- C:\Windows\System32\D3DX9_42.dll
2010-12-03 04:16:20 1892184 ----a-w- C:\Windows\SysWow64\D3DX9_42.dll
2010-12-03 04:16:18 81768 ----a-w- C:\Windows\SysWow64\xinput1_3.dll
2010-12-03 04:16:18 107368 ----a-w- C:\Windows\System32\xinput1_3.dll
2010-12-03 03:56:38 -------- d-----w- C:\Users\Xanem\AppData\Roaming\UseNeXT
2010-12-03 03:56:35 -------- d-----w- C:\Program Files (x86)\UseNeXT
2010-12-03 03:50:45 -------- d-----w- C:\PROGRA~3\Solidshield
2010-12-03 03:42:57 -------- d-----w- C:\Users\Xanem\AppData\Roaming\GroovesharkDesktop.7F9BF17D6D9CB2159C78A6A6AB076EA0B1E0497C.1
2010-12-03 03:42:16 -------- d-----w- C:\Program Files (x86)\Grooveshark
2010-12-03 03:41:15 -------- d-----w- C:\Users\Xanem\AppData\Local\Adobe
2010-12-03 03:29:57 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Xfire
2010-12-03 03:29:56 -------- d-----w- C:\PROGRA~3\Xfire
2010-12-03 03:29:55 -------- d-----w- C:\Program Files (x86)\Xfire
2010-12-03 03:21:37 165376 ----a-w- C:\Windows\SysWow64\unrar.dll
2010-12-03 03:21:36 839680 ----a-w- C:\Windows\SysWow64\lameACM.acm
2010-12-03 03:21:36 790528 ----a-w- C:\Windows\SysWow64\xvidcore.dll
2010-12-03 03:21:36 630784 ----a-w- C:\Windows\SysWow64\vp7vfw.dll
2010-12-03 03:21:36 237568 ----a-w- C:\Windows\SysWow64\yv12vfw.dll
2010-12-03 03:21:36 151552 ----a-w- C:\Windows\SysWow64\ac3acm.acm
2010-12-03 03:21:36 134144 ----a-w- C:\Windows\SysWow64\xvidvfw.dll
2010-12-03 03:21:36 121344 ----a-w- C:\Windows\SysWow64\lagarith.dll
2010-12-03 03:21:36 108032 ----a-w- C:\Windows\SysWow64\ff_vfw.dll
2010-12-03 03:21:34 -------- d-----w- C:\Program Files (x86)\K-Lite Codec Pack
2010-12-03 03:11:54 -------- d-----w- C:\Users\Xanem\AppData\Roaming\.minecraft
2010-12-03 03:11:45 521448 ----a-w- C:\Windows\System32\deployJava1.dll
2010-12-03 02:55:54 -------- d-----w- C:\Users\Xanem\AppData\Local\LogiShrd
2010-12-03 02:55:49 53248 ----a-r- C:\Users\Xanem\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2010-12-03 02:55:41 18960 ----a-w- C:\Windows\System32\drivers\LNonPnP.sys
2010-12-03 02:54:26 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Logishrd
2010-12-03 02:51:11 -------- d-----w- C:\Program Files (x86)\Common Files\Stardock
2010-12-03 02:45:47 -------- d-----w- C:\Users\Xanem\AppData\Local\Logitech
2010-12-03 02:43:30 -------- d-----w- C:\Program Files\Common Files\Logitech
2010-12-03 02:27:40 -------- d-----w- C:\Program Files\ESET
2010-12-03 02:17:19 -------- d-----w- C:\Users\Xanem\AppData\Local\ATI
2010-12-03 02:16:39 0 ----a-w- C:\Windows\ativpsrm.bin
2010-12-03 02:11:07 -------- d-----w- C:\Program Files\ATI
2010-12-03 02:11:07 -------- d-----w- C:\Program Files (x86)\ATI Technologies
2010-12-03 02:10:53 -------- d-----w- C:\Program Files\ATI Technologies
2010-12-03 02:10:20 -------- d-----w- C:\AMD
2010-12-03 02:07:18 -------- d-----w- C:\Users\Xanem\AppData\Local\LogMeIn Hamachi
2010-12-03 02:06:45 -------- d-----w- C:\Users\Xanem\AppData\Local\{6D756813-0DD6-4B06-BEAC-146A72369C6C}
2010-12-03 02:06:33 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Windows Live Writer
2010-12-03 02:06:33 -------- d-----w- C:\Users\Xanem\AppData\Local\Windows Live Writer
2010-12-03 02:04:11 -------- d-----w- C:\Windows\nl
2010-12-03 02:02:41 -------- d-----w- C:\Windows\en
2010-12-03 02:01:39 -------- d-----w- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2010-12-03 01:58:10 -------- d-----w- C:\Windows\PCHEALTH
2010-12-03 01:56:28 -------- d-----w- C:\Users\Xanem\AppData\Local\Windows Live
2010-12-03 01:56:25 -------- d-----w- C:\Program Files (x86)\Common Files\Windows Live
2010-12-03 01:41:39 -------- d-----w- C:\Users\Xanem\AppData\Local\ODUI
2010-12-03 01:41:32 -------- d-----w- C:\Users\Xanem\AppData\Local\Stardock
2010-12-03 01:41:31 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Stardock
2010-12-03 01:41:28 -------- d-----w- C:\Program Files (x86)\Stardock
2010-12-03 01:41:18 -------- d-----w- C:\Users\Xanem\AppData\Local\PackageAware
2010-12-03 01:31:48 -------- d-----w- C:\Program Files\Ventrilo
2010-12-03 01:31:37 16896 ----a-w- C:\Windows\AsTaskSched.dll
2010-12-03 01:30:25 414632 ------w- C:\Windows\difxapi.dll
2010-12-03 01:30:25 -------- d-----w- C:\Program Files (x86)\VIA
2010-12-03 01:27:31 -------- d-----w- C:\Program Files (x86)\Common Files\Wise Installation Wizard
2010-12-03 01:25:16 14336 ----a-w- C:\Windows\System32\drivers\sffp_sd.sys
2010-12-03 01:18:18 -------- d-----w- C:\Windows\SysWow64\Wat
2010-12-03 01:18:18 -------- d-----w- C:\Windows\System32\Wat
2010-12-03 01:12:55 311808 ----a-w- C:\Windows\System32\msv1_0.dll
2010-12-03 01:12:55 257024 ----a-w- C:\Windows\SysWow64\msv1_0.dll
2010-12-03 01:09:45 99176 ----a-w- C:\Windows\SysWow64\PresentationHostProxy.dll
2010-12-03 01:09:45 49472 ----a-w- C:\Windows\SysWow64\netfxperf.dll
2010-12-03 01:09:45 48960 ----a-w- C:\Windows\System32\netfxperf.dll
2010-12-03 01:09:45 444752 ----a-w- C:\Windows\System32\mscoree.dll
2010-12-03 01:09:45 320352 ----a-w- C:\Windows\System32\PresentationHost.exe
2010-12-03 01:09:45 297808 ----a-w- C:\Windows\SysWow64\mscoree.dll
2010-12-03 01:09:45 295264 ----a-w- C:\Windows\SysWow64\PresentationHost.exe
2010-12-03 01:09:45 1942856 ----a-w- C:\Windows\System32\dfshim.dll
2010-12-03 01:09:45 1130824 ----a-w- C:\Windows\SysWow64\dfshim.dll
2010-12-03 01:09:45 109912 ----a-w- C:\Windows\System32\PresentationHostProxy.dll
2010-12-03 01:09:27 294912 ----a-w- C:\Windows\System32\browserchoice.exe
2010-12-03 01:04:52 4582912 ----a-w- C:\Program Files\Windows NT\Accessories\wordpad.exe
2010-12-03 00:53:45 270720 ------w- C:\Windows\System32\MpSigStub.exe
2010-12-03 00:53:42 51120 ----a-w- C:\Windows\System32\drivers\DKRtWrt.sys
2010-12-03 00:53:39 -------- d-----w- C:\Program Files\Common Files\Diskeeper Corporation
2010-12-03 00:53:38 -------- d-----w- C:\Program Files\Diskeeper Corporation
2010-12-03 00:53:38 -------- d-----w- C:\PROGRA~3\Diskeeper Corporation
2010-12-03 00:49:07 -------- d-sh--w- C:\Windows\Installer
2010-12-03 00:40:37 220672 ----a-w- C:\Windows\System32\wintrust.dll
2010-12-03 00:40:37 172032 ----a-w- C:\Windows\SysWow64\wintrust.dll
2010-12-03 00:40:37 139264 ----a-w- C:\Windows\System32\cabview.dll
2010-12-03 00:40:37 132608 ----a-w- C:\Windows\SysWow64\cabview.dll
==================== Find3M ====================
2010-12-03 01:28:34 992368 ----a-w- C:\Windows\System32\VIAPropPageExt.dll
2010-12-03 01:28:34 83056 ----a-w- C:\Windows\System32\ViaMicArrayPropPageExt.dll
2010-12-03 01:28:34 549488 ----a-w- C:\Windows\System32\VIASysFx.dll
2010-12-03 01:28:34 199280 ----a-w- C:\Windows\System32\ViaMicArrayAPO.dll
2010-12-03 01:28:34 1342064 ----a-w- C:\Windows\System32\drivers\viahduaa.sys
2010-12-03 01:28:33 91760 ----a-w- C:\Windows\System32\Dts2PropPageExt.dll
2010-12-03 01:28:33 86016 ----a-w- C:\Windows\System32\nQPropPageExt.dll
2010-12-03 01:28:33 82432 ----a-w- C:\Windows\System32\nQAPO.dll
2010-12-03 01:28:33 248944 ----a-w- C:\Windows\System32\Dts2APO.dll
2010-11-26 04:20:20 8120320 ----a-w- C:\Windows\System32\drivers\atikmdag.sys
2010-11-26 03:19:32 21610496 ----a-w- C:\Windows\System32\atio6axx.dll
2010-11-26 03:02:08 16702976 ----a-w- C:\Windows\SysWow64\atioglxx.dll
2010-11-26 02:58:22 143360 ----a-w- C:\Windows\System32\atiapfxx.exe
2010-11-26 02:58:12 550400 ----a-w- C:\Windows\SysWow64\aticfx32.dll
2010-11-26 02:57:08 648704 ----a-w- C:\Windows\System32\aticfx64.dll
2010-11-26 02:54:58 462848 ----a-w- C:\Windows\System32\ATIDEMGX.dll
2010-11-26 02:54:48 478720 ----a-w- C:\Windows\System32\atieclxx.exe
2010-11-26 02:54:12 203776 ----a-w- C:\Windows\System32\atiesrxx.exe
2010-11-26 02:53:00 120320 ----a-w- C:\Windows\System32\atitmm64.dll
2010-11-26 02:52:42 423424 ----a-w- C:\Windows\System32\atipdl64.dll
2010-11-26 02:52:36 356352 ----a-w- C:\Windows\SysWow64\atipdlxx.dll
2010-11-26 02:52:26 278528 ----a-w- C:\Windows\SysWow64\Oemdspif.dll
2010-11-26 02:52:20 16384 ----a-w- C:\Windows\System32\atimuixx.dll
2010-11-26 02:52:16 59392 ----a-w- C:\Windows\System32\atiedu64.dll
2010-11-26 02:52:10 43520 ----a-w- C:\Windows\SysWow64\ati2edxx.dll
2010-11-26 02:49:04 4066816 ----a-w- C:\Windows\SysWow64\atidxx32.dll
2010-11-26 02:40:14 4794368 ----a-w- C:\Windows\System32\atidxx64.dll
2010-11-26 02:30:20 51200 ----a-w- C:\Windows\System32\aticalrt64.dll
2010-11-26 02:30:20 4122624 ----a-w- C:\Windows\SysWow64\atiumdag.dll
2010-11-26 02:30:18 46080 ----a-w- C:\Windows\SysWow64\aticalrt.dll
2010-11-26 02:30:10 44544 ----a-w- C:\Windows\System32\aticalcl64.dll
2010-11-26 02:30:08 44032 ----a-w- C:\Windows\SysWow64\aticalcl.dll
2010-11-26 02:29:58 6815232 ----a-w- C:\Windows\System32\aticaldd64.dll
2010-11-26 02:29:52 3217408 ----a-w- C:\Windows\System32\atiumd6a.dll
2010-11-26 02:28:44 5441024 ----a-w- C:\Windows\SysWow64\aticaldd.dll
2010-11-26 02:24:38 58880 ----a-w- C:\Windows\System32\coinst.dll
2010-11-26 02:24:06 5258240 ----a-w- C:\Windows\System32\atiumd64.dll
2010-11-26 02:22:26 3460096 ----a-w- C:\Windows\SysWow64\atiumdva.dll
2010-11-26 02:17:28 351232 ----a-w- C:\Windows\System32\atiadlxx.dll
2010-11-26 02:17:20 249856 ----a-w- C:\Windows\SysWow64\atiadlxy.dll
2010-11-26 02:17:08 14848 ----a-w- C:\Windows\System32\atig6pxx.dll
2010-11-26 02:17:04 12800 ----a-w- C:\Windows\SysWow64\atiglpxx.dll
2010-11-26 02:17:04 12800 ----a-w- C:\Windows\System32\atiglpxx.dll
2010-11-26 02:17:00 31744 ----a-w- C:\Windows\System32\atig6txx.dll
2010-11-26 02:16:54 27136 ----a-w- C:\Windows\SysWow64\atigktxx.dll
2010-11-26 02:16:46 289792 ----a-w- C:\Windows\System32\drivers\atikmpag.sys
2010-11-26 02:16:04 39936 ----a-w- C:\Windows\System32\atiuxp64.dll
2010-11-26 02:15:58 30720 ----a-w- C:\Windows\SysWow64\atiuxpag.dll
2010-11-26 02:15:52 37888 ----a-w- C:\Windows\System32\atiu9p64.dll
2010-11-26 02:15:42 28672 ----a-w- C:\Windows\SysWow64\atiu9pag.dll
2010-11-26 02:15:00 53248 ----a-w- C:\Windows\System32\drivers\ati2erec.dll
2010-11-26 02:09:18 53760 ----a-w- C:\Windows\System32\atimpc64.dll
2010-11-26 02:09:18 53760 ----a-w- C:\Windows\System32\amdpcom64.dll
2010-11-26 02:09:12 52736 ----a-w- C:\Windows\SysWow64\atimpc32.dll
2010-11-26 02:09:12 52736 ----a-w- C:\Windows\SysWow64\amdpcom32.dll
2010-11-10 01:28:46 301936 ----a-w- C:\Windows\WLXPGSS.SCR
2010-11-04 06:35:53 1194496 ----a-w- C:\Windows\System32\wininet.dll
2010-11-04 06:31:34 57856 ----a-w- C:\Windows\System32\licmgr10.dll
2010-11-04 05:52:17 978944 ----a-w- C:\Windows\SysWow64\wininet.dll
2010-11-04 05:48:36 44544 ----a-w- C:\Windows\SysWow64\licmgr10.dll
2010-11-04 05:16:14 482816 ----a-w- C:\Windows\System32\html.iec
2010-11-04 04:41:26 386048 ----a-w- C:\Windows\SysWow64\html.iec
2010-11-04 04:35:37 1638912 ----a-w- C:\Windows\System32\mshtml.tlb
2010-11-04 04:08:54 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2010-11-02 05:18:17 524288 ----a-w- C:\Windows\System32\wmicmiplugin.dll
2010-11-02 05:17:38 473600 ----a-w- C:\Windows\System32\taskcomp.dll
2010-11-02 05:17:38 1169408 ----a-w- C:\Windows\System32\taskschd.dll
2010-11-02 05:16:53 1114624 ----a-w- C:\Windows\System32\schedsvc.dll
2010-11-02 05:10:47 464384 ----a-w- C:\Windows\System32\taskeng.exe
2010-11-02 05:10:32 285696 ----a-w- C:\Windows\System32\schtasks.exe
2010-11-02 04:40:36 496128 ----a-w- C:\Windows\SysWow64\taskschd.dll
2010-11-02 04:40:36 305152 ----a-w- C:\Windows\SysWow64\taskcomp.dll
2010-11-02 04:34:44 192000 ----a-w- C:\Windows\SysWow64\taskeng.exe
2010-11-02 04:34:33 179712 ----a-w- C:\Windows\SysWow64\schtasks.exe
2010-10-20 05:20:01 46080 ----a-w- C:\Windows\System32\atmlib.dll
2010-10-20 04:54:18 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll
2010-10-20 03:09:15 3124224 ----a-w- C:\Windows\System32\win32k.sys
2010-10-20 03:05:46 367104 ----a-w- C:\Windows\System32\atmfd.dll
2010-10-20 02:58:41 294400 ----a-w- C:\Windows\SysWow64\atmfd.dll
2010-10-16 05:23:13 112000 ----a-w- C:\Windows\System32\consent.exe
2010-10-16 05:19:41 395776 ----a-w- C:\Windows\System32\webio.dll
2010-10-16 04:36:10 314368 ----a-w- C:\Windows\SysWow64\webio.dll
============= FINISH: 20:42:46,74 ===============
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 5438
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
1-1-2011 20:13:33
mbam-log-2011-01-01 (20-13-33).txt
Scan type: Quick scan
Objects scanned: 151682
Time elapsed: 1 minute(s), 41 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_10-12-12.02)
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 3-12-2010 1:39:29
System Uptime: 1-1-2011 20:08:48 (0 hours ago)
Motherboard: ASUSTeK Computer INC. | | P7P55D
Processor: Intel(R) Core(TM) i7 CPU 860 @ 2.80GHz | LGA1156 | 1176/133mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 466 GiB total, 423,92 GiB free.
D: is FIXED (NTFS) - 932 GiB total, 232,704 GiB free.
E: is FIXED (NTFS) - 932 GiB total, 616,718 GiB free.
F: is FIXED (NTFS) - 1863 GiB total, 1021,889 GiB free.
G: is CDROM ()
H: is Removable
I: is Removable
==== Disabled Device Manager Items =============
==== System Restore Points ===================
RP73: 25-12-2010 6:17:01 - Installed DirectX
RP74: 28-12-2010 0:09:37 - Installed DirectX
RP75: 28-12-2010 0:24:58 - Installed DirectX
RP76: 28-12-2010 17:45:55 - Windows Update
RP77: 30-12-2010 10:33:33 - Windows Update
RP78: 30-12-2010 18:45:00 - Installed DirectX
RP79: 30-12-2010 19:36:13 - Installed Project64 1.6
RP80: 30-12-2010 19:58:10 - Removed Project64 1.6
RP81: 30-12-2010 20:17:25 - Installed Pcsx2 0.9.6
RP82: 30-12-2010 20:57:49 - Removed Pcsx2 0.9.6
RP83: 30-12-2010 21:45:54 - Installed DirectX
RP84: 31-12-2010 14:42:41 - Windows Update
RP85: 1-1-2011 6:25:23 - Installed COMODO Internet Security
RP86: 1-1-2011 6:57:15 - Windows Update
RP87: 1-1-2011 7:01:05 - Windows Update
==== Installed Programs ======================
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader X - Nederlands
Amnesia: The Dark Descent
Application Profiles
Aquaria
µTorrent
Bob Came in Pieces
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
Catalyst Control Center Profiles Desktop
ccc-core-static
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
Chime
Cogs
Command and Conquer 3: Tiberium Wars
D3DX10
Darwinia
DEFCON
Droplitz
eReg
Eufloria
FAKEFACTORY Cinematic Mod V10
Flight Control HD
Galcon Fusion
Geometry Wars: Retro Evolved
GIMP 2.6.11
Gish
Google Chrome
Grooveshark
Guild Wars
Java Auto Updater
Java(TM) 6 Update 20
Java(TM) 6 Update 23
Junk Mail filter update
Just Cause 2
K-Lite Codec Pack 6.6.1 (Full)
KeyScrambler
Lara Croft and the Guardian of Light
LCDSirReal - a multipurpose plugin for the Logitech G13/G15
LogMeIn Hamachi
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Microsoft XNA Framework Redistributable 3.1
Mozilla Firefox (3.6.13)
MSVCRT
MSVCRT_amd64
NCsoft Launcher
Need for Speed: Hot Pursuit
NVIDIA PhysX
ObjectDock
OpenAL
OpenOffice.org 3.2
Penumbra: Overture
Plain Sight
Platform
Poker Night at the Inventory
PunkBuster Services
R.U.S.E
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Serious Sam HD: The First Encounter
Serious Sam HD: The Second Encounter
Shatter
Sophos Anti-Rootkit 1.5.4
Source SDK
Spore
Spore: Creepy & Cute Parts Pack
Spore: Galactic Adventures
Super Laser Racer
The Lord of the Rings Online™ v03.02.04.8010
The UnderGarden
Tom Clancy's Ghost Recon: Advanced Warfighter
Tom Clancy's Ghost Recon: Advanced Warfighter 2
Twin Sector
UseNeXT
VIA Platform apparaatbeheer
VLC media player 0.9.9
Windows Live Communications Platform
Windows Live Essentials
Windows Live Installer
Windows Live Mail
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Windows Media Player Firefox Plugin
World of Goo
World of Warcraft
Xfire (remove only)
yuPlay client 0.7.17
Zombie Driver
==== Event Viewer Messages From Past Week ========
30-12-2010 19:00:18, Error: bowser [8003] - The master browser has received a server announcement from the computer DEATHSTAR-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{A1CA1B4F-70B1-48DF-ADCC-B4887B913EF2}. The master browser is stopping or an election is being forced.
29-12-2010 19:30:22, Error: bowser [8003] - The master browser has received a server announcement from the computer PC_NIECK that believes that it is the master browser for the domain on transport NetBT_Tcpip_{A1CA1B4F-70B1-48DF-ADCC-B4887B913EF2}. The master browser is stopping or an election is being forced.
1-1-2011 8:54:03, Error: Service Control Manager [7022] - The LogMeIn Hamachi 2.0 Tunneling Engine service hung on starting.
1-1-2011 7:01:33, Error: Microsoft Antimalware [3002] -
1-1-2011 20:09:12, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: SAVRKBootTasks
1-1-2011 19:07:02, Error: NetBT [4321] - The name "WORKGROUP :1d" could not be registered on the interface with IP address 5.218.192.45. The computer with the IP address 5.99.23.141 did not allow the name to be claimed by this computer.
1-1-2011 13:17:19, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
1-1-2011 13:17:19, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
1-1-2011 13:17:19, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
1-1-2011 13:17:19, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
1-1-2011 13:17:19, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
1-1-2011 13:17:18, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
1-1-2011 13:17:12, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
1-1-2011 13:16:59, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD cmdGuard cmdHlp DfsC discache ehdrv inspect NetBIOS NetBT nsiproxy Psched rdbss SAVRKBootTasks spldr tdx Wanarpv6 WfpLwf
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
1-1-2011 13:16:59, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
1-1-2011 13:11:25, Error: Service Control Manager [7000] - The MEMSWEEP2 service failed to start due to the following error: This driver has been blocked from loading
1-1-2011 13:11:25, Error: Application Popup [1060] - \??\C:\Windows\system32\C055.tmp has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
1-1-2011 11:37:25, Error: Application Popup [1060] - \??\C:\Windows\system32\2F6B.tmp has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
==== End Of File ===========================
DDS (Ver_10-12-12.02) - NTFS_AMD64
Run by Xanem at 20:42:19,55 on za 01-01-2011
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_23
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.44.1033.18.8183.5951 [GMT 1:00]
AV: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: COMODO Defense+ *Disabled/Updated* {DC3D0F8D-B138-AAAA-0339-560EB3387C28}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: COMODO Firewall *Enabled* {5F676F4C-DD6D-A47C-12D6-C449366C71EE}
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\lcdmon.exe
C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
E:\Xanem\Downloads\GSDesktopHelper_Win.exe
C:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe
E:\Xanem\Documents\LCDSirReal\LCDSirReal.exe
C:\Program Files (x86)\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\Stardock\ObjectDock\Dock64.exe
C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe
C:\Program Files\Logitech\SetPointG\SetPointII.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\taskhost.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k SDRSVC
E:\Xanem\Desktop\dds.scr
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
============== Pseudo HJT Report ===============
mWinlogon: Userinit=userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
uRun: [GSDesktopHelper] E:\Xanem\Downloads\GSDesktopHelper_Win.exe
uRun: [Steam] "F:\Steam\steam.exe" -silent
uRun: [Google Update] "C:\Users\Xanem\AppData\Local\Google\Update\GoogleUpdate.exe" /c
mRun: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [KeyScrambler] C:\Program Files (x86)\KeyScrambler\keyscrambler.exe /a
mRunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\OBJECT~1.LNK - C:\Program Files (x86)\Stardock\ObjectDock\ObjectDock.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - {B745F984-EF2E-40D6-A9AC-D8CED7230E61} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
TCP: {3ED3F768-945D-4EFF-9E40-84FBD7B5D5C4} = 156.154.70.22,156.154.71.22
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
mRun-x64: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
mRun-x64: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
mRun-x64: [Launch LgDeviceAgent] "C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe"
mRun-x64: [Launch LCDMon] "C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe"
mRun-x64: [Launch LGDCore] "C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE
mRun-x64: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
mRun-x64: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
AppInit_DLLs-X64: C:\Windows\system32\guard64.dll
================= FIREFOX ===================
FF - ProfilePath - C:\Users\Xanem\AppData\Roaming\Mozilla\Firefox\Profiles\c33agloh.default\
FF - prefs.js: browser.startup.homepage - www.google.nl
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Users\Xanem\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: C:\Users\Xanem\AppData\Roaming\Mozilla\Firefox\Profiles\c33agloh.default\extensions\battlefieldplay4free@ea.com\platform\WINNT_x86-msvc\plugins\npBP4FUpdater.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: United States English Spellchecker: en-US@dictionaries.addons.mozilla.org - %profile%\extensions\en-US@dictionaries.addons.mozilla.org
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: Battlefield Play4Free: battlefieldplay4free@ea.com - %profile%\extensions\battlefieldplay4free@ea.com
============= SERVICES / DRIVERS ===============
R1 cmdGuard;COMODO Internet Security Sandbox Driver;C:\Windows\System32\drivers\cmdGuard.sys [2010-12-29 250008]
R1 cmdHlp;COMODO Internet Security Helper Driver;C:\Windows\System32\drivers\cmdhlp.sys [2010-12-29 39376]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2010-11-26 203776]
R2 eamonm;eamonm;C:\Windows\System32\drivers\eamonm.sys [2010-9-3 170104]
R2 ekrn;ESET Service;C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2010-11-4 810144]
R2 epfwwfpr;epfwwfpr;C:\Windows\System32\drivers\epfwwfpr.sys [2010-7-29 126320]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2010-12-6 2101640]
R3 amdkmdag;amdkmdag;C:\Windows\System32\drivers\atikmdag.sys [2010-11-26 8120320]
R3 amdkmdap;amdkmdap;C:\Windows\System32\drivers\atikmpag.sys [2010-11-26 289792]
R3 DKRtWrt;DKRtWrt;C:\Windows\System32\drivers\DKRtWrt.sys [2010-12-3 51120]
R3 KeyScrambler;KeyScrambler;C:\Windows\System32\drivers\keyscrambler.sys [2011-1-1 130696]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;C:\Windows\System32\drivers\LGBusEnum.sys [2009-11-23 22408]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;C:\Windows\System32\drivers\LGVirHid.sys [2009-11-23 16008]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-6-10 187392]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;C:\Windows\System32\drivers\viahduaa.sys [2010-8-4 1342064]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-12-3 1255736]
=============== Created Last 30 ================
2011-01-01 19:11:23 38224 ----a-w- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
2011-01-01 19:11:20 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-01-01 12:12:12 18816 ------w- C:\Windows\SysWow64\SAVRKBootTasks.sys
2011-01-01 11:20:51 -------- d-----w- C:\Users\Xanem\AppData\Local\{31F3EF5A-38AC-4649-89BB-B069398A6D66}
2011-01-01 10:36:35 -------- d-----w- C:\Program Files (x86)\Sophos
2011-01-01 10:05:48 -------- d--h--w- C:\VritualRoot
2011-01-01 10:03:47 -------- d-----w- C:\Users\Xanem\AppData\Local\ESET
2011-01-01 07:34:42 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy
2011-01-01 07:34:42 -------- d-----w- C:\PROGRA~3\Spybot - Search & Destroy
2011-01-01 07:26:44 130696 ----a-w- C:\Windows\System32\drivers\keyscrambler.sys
2011-01-01 07:26:44 -------- d-----w- C:\Program Files (x86)\KeyScrambler
2011-01-01 06:40:02 -------- d-----w- C:\PROGRA~3\SUPERAntiSpyware.com
2011-01-01 06:20:01 -------- d-----w- C:\Users\Xanem\AppData\Roaming\QuickScan
2011-01-01 05:57:31 374664 ----a-w- C:\Windows\System32\drivers\netio.sys
2011-01-01 05:50:05 19528 ----a-w- C:\Windows\System32\drivers\hitmanpro35.sys
2011-01-01 05:49:13 -------- d-----w- C:\PROGRA~3\Hitman Pro
2011-01-01 05:25:38 -------- d-----w- C:\Program Files\COMODO
2011-01-01 05:24:58 -------- d-----w- C:\PROGRA~3\Comodo
2011-01-01 05:21:35 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Malwarebytes
2011-01-01 05:21:30 -------- d-----w- C:\PROGRA~3\Malwarebytes
2011-01-01 05:21:27 24152 ----a-w- C:\Windows\System32\drivers\mbam.sys
2010-12-31 22:21:06 -------- d-----w- C:\Users\Xanem\AppData\Local\{E48C05D2-EE51-4D9A-984F-B550D0A899FD}
2010-12-31 13:42:53 8199504 ----a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{433FCC07-2AEC-4368-AAF3-AA6D8C99D12E}\mpengine.dll
2010-12-30 20:52:32 -------- d-----w- C:\Users\Xanem\AppData\Local\{50A229CF-CB31-4AEB-BB56-EEE1711A1B2C}
2010-12-30 20:47:35 -------- d-----w- C:\Users\Xanem\AppData\Local\Wings of Prey
2010-12-30 20:46:20 -------- d-----w- C:\Users\Xanem\AppData\Local\***
2010-12-30 20:46:20 -------- d-----w- C:\PROGRA~3\***
2010-12-30 19:59:05 -------- d-----w- C:\Users\Xanem\AppData\Local\PCSX2
2010-12-30 00:09:52 -------- d-----w- C:\Users\Xanem\AppData\Local\{36BC3A3C-3732-412B-B3E5-465702A660AF}
2010-12-29 11:16:17 -------- d-----w- C:\Users\Xanem\AppData\Local\{B7ACF7E3-D122-4382-AFAF-C639267F359B}
2010-12-29 00:42:04 285480 ----a-w- C:\Windows\SysWow64\guard32.dll
2010-12-29 00:42:02 362784 ----a-w- C:\Windows\System32\guard64.dll
2010-12-29 00:41:24 39376 ----a-w- C:\Windows\System32\drivers\cmdhlp.sys
2010-12-29 00:41:22 250008 ----a-w- C:\Windows\System32\drivers\cmdGuard.sys
2010-12-29 00:41:22 14184 ----a-w- C:\Windows\System32\drivers\cmderd.sys
2010-12-28 00:56:24 -------- d-----w- C:\Users\Xanem\AppData\Local\{CEE20A4D-4A23-48DA-9FD0-FEE417AFE3FF}
2010-12-27 08:18:14 -------- d-----w- C:\Users\Xanem\AppData\Local\{ADCCCCDD-3C0F-42C2-9F81-D7B29AC69E5E}
2010-12-26 19:29:39 -------- d-----w- C:\Users\Xanem\AppData\Local\{193ADC98-2639-4ECE-A4A2-479094BCB747}
2010-12-25 19:27:06 -------- d-----w- C:\Users\Xanem\AppData\Local\{E27A6915-C570-4F67-940C-590238BBC813}
2010-12-25 04:38:30 -------- d-----w- C:\Users\Xanem\AppData\Local\Bizarre Creations
2010-12-25 02:48:32 -------- d-----w- C:\Users\Xanem\AppData\Local\GRAW2
2010-12-25 02:48:32 -------- d-----w- C:\PROGRA~3\GRAW2
2010-12-24 19:01:54 -------- d-----w- C:\Users\Xanem\AppData\Local\{D8DBEA76-E878-4C3D-B06A-A8C165D54E25}
2010-12-24 00:46:16 -------- d-----w- C:\Users\Xanem\AppData\Local\{D8DADE1E-0146-46AE-8330-18D20D403308}
2010-12-23 04:56:27 -------- d-----w- C:\Users\Xanem\AppData\Local\{50E34F27-1162-4015-B27A-3BE34B9C7386}
2010-12-23 00:17:01 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Spore
2010-12-22 16:56:03 -------- d-----w- C:\Users\Xanem\AppData\Local\{A8286E12-9A79-4A10-BBD8-3B83A60307AC}
2010-12-21 21:44:27 -------- d-----w- C:\Users\Xanem\AppData\Local\{5015BC53-7097-469C-A632-6264B88A8E7C}
2010-12-21 05:35:09 -------- d-----w- C:\Users\Xanem\AppData\Local\{E2046F35-5016-4A11-A25F-2C62E6D61FB7}
2010-12-20 22:14:53 -------- d-----w- C:\Program Files (x86)\Common Files\Blizzard Entertainment
2010-12-20 22:14:23 -------- d-----w- C:\PROGRA~3\Blizzard Entertainment
2010-12-20 13:22:16 -------- d-----w- C:\Users\Xanem\AppData\Local\{7C6D5CD0-1BC6-48C6-B18B-43296BE2B1BB}
2010-12-20 05:26:29 -------- d-----w- C:\Users\Xanem\AppData\Roaming\The Creative Assembly
2010-12-20 05:02:09 -------- d-----w- C:\ATI
2010-12-20 00:10:35 -------- d-----w- C:\Users\Xanem\AppData\Local\Redlynx
2010-12-19 21:15:36 -------- d-----w- C:\Users\Xanem\AppData\Local\{C82BC6C7-0E63-4DB4-943C-5127E56F8F4A}
2010-12-18 20:59:03 -------- d-----w- C:\Users\Xanem\AppData\Local\{26233293-3B8D-4EA7-A4EF-DFD19996A512}
2010-12-18 11:27:39 -------- d-----w- C:\Users\Xanem\AppData\Local\Google
2010-12-18 09:22:31 270904 ----a-w- C:\Windows\SysWow64\PnkBstrB.xtr
2010-12-18 09:22:28 -------- d-----w- C:\Users\Xanem\AppData\Local\PunkBuster
2010-12-18 09:21:22 2434856 ----a-w- C:\Windows\SysWow64\pbsvc_bc2.exe
2010-12-18 07:39:22 -------- d-----w- C:\Users\Xanem\AppData\Local\{12999960-A585-41A5-8B1B-A31A317C5371}
2010-12-18 07:38:21 -------- d-----w- C:\Users\Xanem\AppData\Local\{74C4465D-FF78-41A0-A63D-375F35624E5E}
2010-12-17 18:39:43 270904 ----a-w- C:\Windows\SysWow64\PnkBstrB.exe
2010-12-17 18:39:43 215128 ----a-w- C:\Windows\SysWow64\PnkBstrB.ex0
2010-12-17 18:39:42 75136 ----a-w- C:\Windows\SysWow64\PnkBstrA.exe
2010-12-17 18:27:56 -------- d-----w- C:\Users\Xanem\AppData\Local\{4362C677-2FCC-4E40-A75B-622E870E8243}
2010-12-16 19:28:25 -------- d-----w- C:\Users\Xanem\AppData\Roaming\ZombieDriver
2010-12-16 19:28:08 466456 ----a-w- C:\Windows\System32\wrap_oal.dll
2010-12-16 19:28:08 444952 ----a-w- C:\Windows\SysWow64\wrap_oal.dll
2010-12-16 19:28:08 122904 ----a-w- C:\Windows\System32\OpenAL32.dll
2010-12-16 19:28:08 109080 ----a-w- C:\Windows\SysWow64\OpenAL32.dll
2010-12-16 19:28:08 -------- d-----w- C:\Program Files (x86)\OpenAL
2010-12-16 14:55:38 -------- d-----w- C:\Users\Xanem\AppData\Local\{E4A2EC80-EF10-4144-844C-D9D3D400554D}
2010-12-16 00:29:03 -------- d-----w- C:\Users\Xanem\AppData\Local\Futuremark
2010-12-15 23:08:28 -------- d-----w- C:\Users\Xanem\AppData\Local\{C06D8D5A-8D5B-4A63-86EA-C91D9C8FDF78}
2010-12-15 21:36:48 -------- d-----w- C:\Users\Xanem\AppData\Local\{AAB02631-A752-4AD9-A1A2-730DBA25077C}
2010-12-15 17:04:08 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2010-12-15 17:04:08 2048 ----a-w- C:\Windows\System32\tzres.dll
2010-12-15 03:17:26 -------- d-----w- C:\PROGRA~3\Media Center Programs
2010-12-14 17:39:22 -------- d-----w- C:\Users\Xanem\AppData\Local\{3653F57E-958B-4E84-9185-F3EDBAB052E9}
2010-12-13 23:02:42 -------- d-----w- C:\Users\Xanem\AppData\Roaming\TS3Client
2010-12-13 23:02:34 -------- d-----w- C:\Program Files\TeamSpeak 3 Client
2010-12-13 22:52:22 -------- d-----w- C:\Users\Xanem\AppData\Roaming\OpenOffice.org
2010-12-13 22:50:35 -------- d-----w- C:\Program Files (x86)\JRE
2010-12-13 22:50:32 -------- d-----w- C:\Program Files (x86)\OpenOffice.org 3
2010-12-13 22:48:07 -------- d-----w- C:\Program Files (x86)\OpenOffice
2010-12-13 22:41:25 -------- d-----w- C:\Users\Xanem\AppData\Local\{504FCD7A-C3C6-4E2A-A74F-60ED9AA1C5CB}
2010-12-13 02:39:41 -------- d-----w- C:\Program Files (x86)\DAMN NFO Viewer
2010-12-12 21:12:24 -------- d-----w- C:\Users\Xanem\AppData\Local\{76621429-F595-45F6-BFA1-A316B70DF4F2}
2010-12-12 18:22:09 -------- d-----w- C:\Users\Xanem\AppData\Local\Sidhe
2010-12-12 04:03:06 -------- d-----w- C:\Windows\Uninstall
2010-12-12 02:49:19 -------- d-----w- C:\Program Files (x86)\uTorrent
2010-12-12 02:48:17 -------- d-----w- C:\Users\Xanem\AppData\Roaming\uTorrent
2010-12-11 18:18:33 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Atlus
2010-12-11 16:31:15 -------- d-----w- C:\Users\Xanem\AppData\Local\{7C9BC850-AC70-4FAD-9846-1FCCFA9831E2}
2010-12-10 19:32:14 -------- d-----w- C:\Users\Xanem\AppData\Local\The Lord of the Rings Online
2010-12-10 18:48:04 -------- d-----w- C:\Users\Xanem\AppData\Local\Turbine
2010-12-10 18:44:55 -------- d-----w- C:\Users\Xanem\AppData\Local\ApplicationHistory
2010-12-10 18:43:46 -------- d-----w- C:\Windows\SysWow64\URTTEMP
2010-12-10 15:48:04 -------- d-----w- C:\Users\Xanem\AppData\Local\{7F1C0FEA-9B8B-4E08-8B61-F191A9C02494}
2010-12-09 23:29:58 -------- d-----w- C:\Users\Xanem\AppData\Local\{F4976D1E-2638-4546-8327-50C1D2183CEB}
2010-12-09 04:03:32 -------- d-----w- C:\Users\Xanem\AppData\Local\GHOSTBUSTERS (tm)
2010-12-09 03:39:56 -------- d-----w- C:\Users\Xanem\AppData\Local\{2473C073-1EE7-4B01-AC45-30D3815C187F}
2010-12-09 03:33:24 -------- d-----w- C:\Users\Xanem\AppData\Local\DogFighter
2010-12-09 03:08:17 -------- d-----w- C:\Windows\SysWow64\AGEIA
2010-12-09 02:44:12 -------- d-----w- C:\Users\Xanem\AppData\Local\AaaaaRecklessDisregard
2010-12-08 23:42:02 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Beat Hazard
2010-12-08 18:09:48 33856 ---ha-w- C:\Windows\System32\hamachi.sys
2010-12-08 18:09:45 -------- d-----w- C:\Program Files (x86)\LogMeIn Hamachi
2010-12-08 13:13:12 -------- d-----w- C:\Users\Xanem\AppData\Local\{D67D9EFC-F974-4DD6-9F76-10F364A33FA4}
2010-12-07 22:07:29 -------- d-----w- C:\Program Files (x86)\AlterRcon
2010-12-07 19:56:08 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Chime
2010-12-07 19:55:40 -------- d-----w- C:\Program Files (x86)\Microsoft XNA
2010-12-07 12:48:56 -------- d-----w- C:\Users\Xanem\AppData\Local\{3E0B6ED0-6E9A-4423-A3F2-200594584BE9}
2010-12-06 20:01:56 -------- d-----w- C:\Users\Xanem\AppData\Local\IsolatedStorage
2010-12-06 09:20:04 -------- d-----w- C:\Users\Xanem\AppData\Local\{379C48A9-F1AC-4838-96DA-7A0856351B0D}
2010-12-06 09:20:04 -------- d-----w- C:\Users\Xanem\AppData\Local\{0424619F-4934-4541-9582-1F262EF5EA1C}
2010-12-06 03:06:54 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2010-12-06 03:06:54 472808 ----a-w- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
2010-12-05 17:01:31 -------- d-----w- C:\Users\Xanem\AppData\Local\{F39C05EC-83A3-4C66-B622-948AD2F364BA}
2010-12-05 04:02:59 -------- d-----w- C:\Users\Xanem\AppData\Local\{A386EA91-58C3-4F0C-BEF7-AC21A9462873}
2010-12-05 03:56:48 -------- d-----w- C:\Program Files (x86)\VideoLAN
2010-12-04 14:58:27 -------- d-----w- C:\Users\Xanem\AppData\Local\{481DF78F-BCFA-4189-9153-F189BD42C130}
2010-12-04 04:43:36 -------- d-----w- C:\Users\Xanem\.thumbnails
2010-12-04 04:42:53 -------- d-----w- C:\Users\Xanem\.gimp-2.6
2010-12-04 04:35:51 -------- d-----w- C:\Program Files (x86)\GIMP-2.0
2010-12-03 22:05:19 8199504 ----a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2010-12-03 19:49:57 -------- d-----w- C:\Users\Xanem\AppData\Local\assembly
2010-12-03 19:49:46 -------- d-----w- C:\PROGRA~3\CCP
2010-12-03 19:49:42 -------- d-----w- C:\Users\Xanem\AppData\Local\CCP
2010-12-03 19:49:32 -------- d-----w- C:\Program Files (x86)\NCSoft
2010-12-03 18:03:44 -------- d-----w- C:\Users\Xanem\AppData\Local\Activision
2010-12-03 16:21:16 -------- d-----w- C:\Users\Xanem\AppData\Local\{CEC8ECFA-1343-4140-99CD-10E38C3F508E}
2010-12-03 09:29:59 -------- d-----w- C:\Windows\Panther
2010-12-03 09:29:45 -------- d-sh--w- C:\Boot
2010-12-03 04:47:55 -------- d-----w- C:\Users\Xanem\AppData\Local\Treyarch
2010-12-03 04:22:11 -------- d-----w- C:\Program Files\CCleaner
2010-12-03 04:16:23 78680 ----a-w- C:\Windows\System32\XAPOFX1_4.dll
2010-12-03 04:16:23 74072 ----a-w- C:\Windows\SysWow64\XAPOFX1_4.dll
2010-12-03 04:16:23 530776 ----a-w- C:\Windows\System32\XAudio2_6.dll
2010-12-03 04:16:23 528216 ----a-w- C:\Windows\SysWow64\XAudio2_6.dll
2010-12-03 04:16:22 2582888 ----a-w- C:\Windows\System32\D3DCompiler_42.dll
2010-12-03 04:16:22 1974616 ----a-w- C:\Windows\SysWow64\D3DCompiler_42.dll
2010-12-03 04:16:20 2475352 ----a-w- C:\Windows\System32\D3DX9_42.dll
2010-12-03 04:16:20 1892184 ----a-w- C:\Windows\SysWow64\D3DX9_42.dll
2010-12-03 04:16:18 81768 ----a-w- C:\Windows\SysWow64\xinput1_3.dll
2010-12-03 04:16:18 107368 ----a-w- C:\Windows\System32\xinput1_3.dll
2010-12-03 03:56:38 -------- d-----w- C:\Users\Xanem\AppData\Roaming\UseNeXT
2010-12-03 03:56:35 -------- d-----w- C:\Program Files (x86)\UseNeXT
2010-12-03 03:50:45 -------- d-----w- C:\PROGRA~3\Solidshield
2010-12-03 03:42:57 -------- d-----w- C:\Users\Xanem\AppData\Roaming\GroovesharkDesktop.7F9BF17D6D9CB2159C78A6A6AB076EA0B1E0497C.1
2010-12-03 03:42:16 -------- d-----w- C:\Program Files (x86)\Grooveshark
2010-12-03 03:41:15 -------- d-----w- C:\Users\Xanem\AppData\Local\Adobe
2010-12-03 03:29:57 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Xfire
2010-12-03 03:29:56 -------- d-----w- C:\PROGRA~3\Xfire
2010-12-03 03:29:55 -------- d-----w- C:\Program Files (x86)\Xfire
2010-12-03 03:21:37 165376 ----a-w- C:\Windows\SysWow64\unrar.dll
2010-12-03 03:21:36 839680 ----a-w- C:\Windows\SysWow64\lameACM.acm
2010-12-03 03:21:36 790528 ----a-w- C:\Windows\SysWow64\xvidcore.dll
2010-12-03 03:21:36 630784 ----a-w- C:\Windows\SysWow64\vp7vfw.dll
2010-12-03 03:21:36 237568 ----a-w- C:\Windows\SysWow64\yv12vfw.dll
2010-12-03 03:21:36 151552 ----a-w- C:\Windows\SysWow64\ac3acm.acm
2010-12-03 03:21:36 134144 ----a-w- C:\Windows\SysWow64\xvidvfw.dll
2010-12-03 03:21:36 121344 ----a-w- C:\Windows\SysWow64\lagarith.dll
2010-12-03 03:21:36 108032 ----a-w- C:\Windows\SysWow64\ff_vfw.dll
2010-12-03 03:21:34 -------- d-----w- C:\Program Files (x86)\K-Lite Codec Pack
2010-12-03 03:11:54 -------- d-----w- C:\Users\Xanem\AppData\Roaming\.minecraft
2010-12-03 03:11:45 521448 ----a-w- C:\Windows\System32\deployJava1.dll
2010-12-03 02:55:54 -------- d-----w- C:\Users\Xanem\AppData\Local\LogiShrd
2010-12-03 02:55:49 53248 ----a-r- C:\Users\Xanem\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2010-12-03 02:55:41 18960 ----a-w- C:\Windows\System32\drivers\LNonPnP.sys
2010-12-03 02:54:26 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Logishrd
2010-12-03 02:51:11 -------- d-----w- C:\Program Files (x86)\Common Files\Stardock
2010-12-03 02:45:47 -------- d-----w- C:\Users\Xanem\AppData\Local\Logitech
2010-12-03 02:43:30 -------- d-----w- C:\Program Files\Common Files\Logitech
2010-12-03 02:27:40 -------- d-----w- C:\Program Files\ESET
2010-12-03 02:17:19 -------- d-----w- C:\Users\Xanem\AppData\Local\ATI
2010-12-03 02:16:39 0 ----a-w- C:\Windows\ativpsrm.bin
2010-12-03 02:11:07 -------- d-----w- C:\Program Files\ATI
2010-12-03 02:11:07 -------- d-----w- C:\Program Files (x86)\ATI Technologies
2010-12-03 02:10:53 -------- d-----w- C:\Program Files\ATI Technologies
2010-12-03 02:10:20 -------- d-----w- C:\AMD
2010-12-03 02:07:18 -------- d-----w- C:\Users\Xanem\AppData\Local\LogMeIn Hamachi
2010-12-03 02:06:45 -------- d-----w- C:\Users\Xanem\AppData\Local\{6D756813-0DD6-4B06-BEAC-146A72369C6C}
2010-12-03 02:06:33 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Windows Live Writer
2010-12-03 02:06:33 -------- d-----w- C:\Users\Xanem\AppData\Local\Windows Live Writer
2010-12-03 02:04:11 -------- d-----w- C:\Windows\nl
2010-12-03 02:02:41 -------- d-----w- C:\Windows\en
2010-12-03 02:01:39 -------- d-----w- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2010-12-03 01:58:10 -------- d-----w- C:\Windows\PCHEALTH
2010-12-03 01:56:28 -------- d-----w- C:\Users\Xanem\AppData\Local\Windows Live
2010-12-03 01:56:25 -------- d-----w- C:\Program Files (x86)\Common Files\Windows Live
2010-12-03 01:41:39 -------- d-----w- C:\Users\Xanem\AppData\Local\ODUI
2010-12-03 01:41:32 -------- d-----w- C:\Users\Xanem\AppData\Local\Stardock
2010-12-03 01:41:31 -------- d-----w- C:\Users\Xanem\AppData\Roaming\Stardock
2010-12-03 01:41:28 -------- d-----w- C:\Program Files (x86)\Stardock
2010-12-03 01:41:18 -------- d-----w- C:\Users\Xanem\AppData\Local\PackageAware
2010-12-03 01:31:48 -------- d-----w- C:\Program Files\Ventrilo
2010-12-03 01:31:37 16896 ----a-w- C:\Windows\AsTaskSched.dll
2010-12-03 01:30:25 414632 ------w- C:\Windows\difxapi.dll
2010-12-03 01:30:25 -------- d-----w- C:\Program Files (x86)\VIA
2010-12-03 01:27:31 -------- d-----w- C:\Program Files (x86)\Common Files\Wise Installation Wizard
2010-12-03 01:25:16 14336 ----a-w- C:\Windows\System32\drivers\sffp_sd.sys
2010-12-03 01:18:18 -------- d-----w- C:\Windows\SysWow64\Wat
2010-12-03 01:18:18 -------- d-----w- C:\Windows\System32\Wat
2010-12-03 01:12:55 311808 ----a-w- C:\Windows\System32\msv1_0.dll
2010-12-03 01:12:55 257024 ----a-w- C:\Windows\SysWow64\msv1_0.dll
2010-12-03 01:09:45 99176 ----a-w- C:\Windows\SysWow64\PresentationHostProxy.dll
2010-12-03 01:09:45 49472 ----a-w- C:\Windows\SysWow64\netfxperf.dll
2010-12-03 01:09:45 48960 ----a-w- C:\Windows\System32\netfxperf.dll
2010-12-03 01:09:45 444752 ----a-w- C:\Windows\System32\mscoree.dll
2010-12-03 01:09:45 320352 ----a-w- C:\Windows\System32\PresentationHost.exe
2010-12-03 01:09:45 297808 ----a-w- C:\Windows\SysWow64\mscoree.dll
2010-12-03 01:09:45 295264 ----a-w- C:\Windows\SysWow64\PresentationHost.exe
2010-12-03 01:09:45 1942856 ----a-w- C:\Windows\System32\dfshim.dll
2010-12-03 01:09:45 1130824 ----a-w- C:\Windows\SysWow64\dfshim.dll
2010-12-03 01:09:45 109912 ----a-w- C:\Windows\System32\PresentationHostProxy.dll
2010-12-03 01:09:27 294912 ----a-w- C:\Windows\System32\browserchoice.exe
2010-12-03 01:04:52 4582912 ----a-w- C:\Program Files\Windows NT\Accessories\wordpad.exe
2010-12-03 00:53:45 270720 ------w- C:\Windows\System32\MpSigStub.exe
2010-12-03 00:53:42 51120 ----a-w- C:\Windows\System32\drivers\DKRtWrt.sys
2010-12-03 00:53:39 -------- d-----w- C:\Program Files\Common Files\Diskeeper Corporation
2010-12-03 00:53:38 -------- d-----w- C:\Program Files\Diskeeper Corporation
2010-12-03 00:53:38 -------- d-----w- C:\PROGRA~3\Diskeeper Corporation
2010-12-03 00:49:07 -------- d-sh--w- C:\Windows\Installer
2010-12-03 00:40:37 220672 ----a-w- C:\Windows\System32\wintrust.dll
2010-12-03 00:40:37 172032 ----a-w- C:\Windows\SysWow64\wintrust.dll
2010-12-03 00:40:37 139264 ----a-w- C:\Windows\System32\cabview.dll
2010-12-03 00:40:37 132608 ----a-w- C:\Windows\SysWow64\cabview.dll
==================== Find3M ====================
2010-12-03 01:28:34 992368 ----a-w- C:\Windows\System32\VIAPropPageExt.dll
2010-12-03 01:28:34 83056 ----a-w- C:\Windows\System32\ViaMicArrayPropPageExt.dll
2010-12-03 01:28:34 549488 ----a-w- C:\Windows\System32\VIASysFx.dll
2010-12-03 01:28:34 199280 ----a-w- C:\Windows\System32\ViaMicArrayAPO.dll
2010-12-03 01:28:34 1342064 ----a-w- C:\Windows\System32\drivers\viahduaa.sys
2010-12-03 01:28:33 91760 ----a-w- C:\Windows\System32\Dts2PropPageExt.dll
2010-12-03 01:28:33 86016 ----a-w- C:\Windows\System32\nQPropPageExt.dll
2010-12-03 01:28:33 82432 ----a-w- C:\Windows\System32\nQAPO.dll
2010-12-03 01:28:33 248944 ----a-w- C:\Windows\System32\Dts2APO.dll
2010-11-26 04:20:20 8120320 ----a-w- C:\Windows\System32\drivers\atikmdag.sys
2010-11-26 03:19:32 21610496 ----a-w- C:\Windows\System32\atio6axx.dll
2010-11-26 03:02:08 16702976 ----a-w- C:\Windows\SysWow64\atioglxx.dll
2010-11-26 02:58:22 143360 ----a-w- C:\Windows\System32\atiapfxx.exe
2010-11-26 02:58:12 550400 ----a-w- C:\Windows\SysWow64\aticfx32.dll
2010-11-26 02:57:08 648704 ----a-w- C:\Windows\System32\aticfx64.dll
2010-11-26 02:54:58 462848 ----a-w- C:\Windows\System32\ATIDEMGX.dll
2010-11-26 02:54:48 478720 ----a-w- C:\Windows\System32\atieclxx.exe
2010-11-26 02:54:12 203776 ----a-w- C:\Windows\System32\atiesrxx.exe
2010-11-26 02:53:00 120320 ----a-w- C:\Windows\System32\atitmm64.dll
2010-11-26 02:52:42 423424 ----a-w- C:\Windows\System32\atipdl64.dll
2010-11-26 02:52:36 356352 ----a-w- C:\Windows\SysWow64\atipdlxx.dll
2010-11-26 02:52:26 278528 ----a-w- C:\Windows\SysWow64\Oemdspif.dll
2010-11-26 02:52:20 16384 ----a-w- C:\Windows\System32\atimuixx.dll
2010-11-26 02:52:16 59392 ----a-w- C:\Windows\System32\atiedu64.dll
2010-11-26 02:52:10 43520 ----a-w- C:\Windows\SysWow64\ati2edxx.dll
2010-11-26 02:49:04 4066816 ----a-w- C:\Windows\SysWow64\atidxx32.dll
2010-11-26 02:40:14 4794368 ----a-w- C:\Windows\System32\atidxx64.dll
2010-11-26 02:30:20 51200 ----a-w- C:\Windows\System32\aticalrt64.dll
2010-11-26 02:30:20 4122624 ----a-w- C:\Windows\SysWow64\atiumdag.dll
2010-11-26 02:30:18 46080 ----a-w- C:\Windows\SysWow64\aticalrt.dll
2010-11-26 02:30:10 44544 ----a-w- C:\Windows\System32\aticalcl64.dll
2010-11-26 02:30:08 44032 ----a-w- C:\Windows\SysWow64\aticalcl.dll
2010-11-26 02:29:58 6815232 ----a-w- C:\Windows\System32\aticaldd64.dll
2010-11-26 02:29:52 3217408 ----a-w- C:\Windows\System32\atiumd6a.dll
2010-11-26 02:28:44 5441024 ----a-w- C:\Windows\SysWow64\aticaldd.dll
2010-11-26 02:24:38 58880 ----a-w- C:\Windows\System32\coinst.dll
2010-11-26 02:24:06 5258240 ----a-w- C:\Windows\System32\atiumd64.dll
2010-11-26 02:22:26 3460096 ----a-w- C:\Windows\SysWow64\atiumdva.dll
2010-11-26 02:17:28 351232 ----a-w- C:\Windows\System32\atiadlxx.dll
2010-11-26 02:17:20 249856 ----a-w- C:\Windows\SysWow64\atiadlxy.dll
2010-11-26 02:17:08 14848 ----a-w- C:\Windows\System32\atig6pxx.dll
2010-11-26 02:17:04 12800 ----a-w- C:\Windows\SysWow64\atiglpxx.dll
2010-11-26 02:17:04 12800 ----a-w- C:\Windows\System32\atiglpxx.dll
2010-11-26 02:17:00 31744 ----a-w- C:\Windows\System32\atig6txx.dll
2010-11-26 02:16:54 27136 ----a-w- C:\Windows\SysWow64\atigktxx.dll
2010-11-26 02:16:46 289792 ----a-w- C:\Windows\System32\drivers\atikmpag.sys
2010-11-26 02:16:04 39936 ----a-w- C:\Windows\System32\atiuxp64.dll
2010-11-26 02:15:58 30720 ----a-w- C:\Windows\SysWow64\atiuxpag.dll
2010-11-26 02:15:52 37888 ----a-w- C:\Windows\System32\atiu9p64.dll
2010-11-26 02:15:42 28672 ----a-w- C:\Windows\SysWow64\atiu9pag.dll
2010-11-26 02:15:00 53248 ----a-w- C:\Windows\System32\drivers\ati2erec.dll
2010-11-26 02:09:18 53760 ----a-w- C:\Windows\System32\atimpc64.dll
2010-11-26 02:09:18 53760 ----a-w- C:\Windows\System32\amdpcom64.dll
2010-11-26 02:09:12 52736 ----a-w- C:\Windows\SysWow64\atimpc32.dll
2010-11-26 02:09:12 52736 ----a-w- C:\Windows\SysWow64\amdpcom32.dll
2010-11-10 01:28:46 301936 ----a-w- C:\Windows\WLXPGSS.SCR
2010-11-04 06:35:53 1194496 ----a-w- C:\Windows\System32\wininet.dll
2010-11-04 06:31:34 57856 ----a-w- C:\Windows\System32\licmgr10.dll
2010-11-04 05:52:17 978944 ----a-w- C:\Windows\SysWow64\wininet.dll
2010-11-04 05:48:36 44544 ----a-w- C:\Windows\SysWow64\licmgr10.dll
2010-11-04 05:16:14 482816 ----a-w- C:\Windows\System32\html.iec
2010-11-04 04:41:26 386048 ----a-w- C:\Windows\SysWow64\html.iec
2010-11-04 04:35:37 1638912 ----a-w- C:\Windows\System32\mshtml.tlb
2010-11-04 04:08:54 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2010-11-02 05:18:17 524288 ----a-w- C:\Windows\System32\wmicmiplugin.dll
2010-11-02 05:17:38 473600 ----a-w- C:\Windows\System32\taskcomp.dll
2010-11-02 05:17:38 1169408 ----a-w- C:\Windows\System32\taskschd.dll
2010-11-02 05:16:53 1114624 ----a-w- C:\Windows\System32\schedsvc.dll
2010-11-02 05:10:47 464384 ----a-w- C:\Windows\System32\taskeng.exe
2010-11-02 05:10:32 285696 ----a-w- C:\Windows\System32\schtasks.exe
2010-11-02 04:40:36 496128 ----a-w- C:\Windows\SysWow64\taskschd.dll
2010-11-02 04:40:36 305152 ----a-w- C:\Windows\SysWow64\taskcomp.dll
2010-11-02 04:34:44 192000 ----a-w- C:\Windows\SysWow64\taskeng.exe
2010-11-02 04:34:33 179712 ----a-w- C:\Windows\SysWow64\schtasks.exe
2010-10-20 05:20:01 46080 ----a-w- C:\Windows\System32\atmlib.dll
2010-10-20 04:54:18 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll
2010-10-20 03:09:15 3124224 ----a-w- C:\Windows\System32\win32k.sys
2010-10-20 03:05:46 367104 ----a-w- C:\Windows\System32\atmfd.dll
2010-10-20 02:58:41 294400 ----a-w- C:\Windows\SysWow64\atmfd.dll
2010-10-16 05:23:13 112000 ----a-w- C:\Windows\System32\consent.exe
2010-10-16 05:19:41 395776 ----a-w- C:\Windows\System32\webio.dll
2010-10-16 04:36:10 314368 ----a-w- C:\Windows\SysWow64\webio.dll
============= FINISH: 20:42:46,74 ===============
