1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Resolved [WIN XP Home Edition BSOD STOP: c0000218]

Discussion in 'Windows XP' started by JAK, 2014/02/13.

  1. 2014/02/13
    JAK

    JAK Well-Known Member Thread Starter

    Joined:
    2002/01/19
    Messages:
    366
    Likes Received:
    0
    Have a BSOD with the following

    STOP: c0000218 (Registry File Failure)
    The registry cannot load the hive (file)
    SystemRoot\system32\Config\SECURITY
    Or its log or alternative.
    It is corrupt, absent, or not writable.

    I don't have disks. It is a Dell Lattitude D505 laptop. It will not boot to safe mode or load the last working configuration. Freezes at mup.sys line. Tried to reboot regularly several times and it would get to the Windows logo and then go to black screen...eventually it went to the BSOD and msg above.
     
    JAK,
    #1
  2. 2014/02/14
    Steve R Jones

    Steve R Jones SuperGeek Staff

    Joined:
    2001/12/30
    Messages:
    12,315
    Likes Received:
    252
    Steve R Jones,
    #2


  3. to hide this advert.

  4. 2014/02/14
    JAK

    JAK Well-Known Member Thread Starter

    Joined:
    2002/01/19
    Messages:
    366
    Likes Received:
    0
    I can't load any of the safe mode option...even command prompt. I can get into F2 and F12 options only.
     
    JAK,
    #3
  5. 2014/02/14
    Steve R Jones

    Steve R Jones SuperGeek Staff

    Joined:
    2001/12/30
    Messages:
    12,315
    Likes Received:
    252
    My guess is that your install of Windows is toast.

    You could slave the drive in another system and copy off important files.
     
    Steve R Jones,
    #4
  6. 2014/02/14
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Using another working computer....
    • Download Farbar Recovery Scan Tool and save it to a flash drive.
    • Download OTLPENet.exe to your Desktop
    • Ensure that you have a blank CD in the drive
    • Double click OTLPENet.exe and this will then open ImgBurn to burn the file to CD
    • Boot your BAD computer using the boot CD you just created.
    Note : If you do not know how to set your computer to boot from CD follow the steps here
    • Your system should now display a Reatogo desktop.
    • Insert the flash drive with FRST on it
    • Open My Computer to locate the flash drive and run FRST
    • The tool will start to run.
    • When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.
     
    broni,
    #5
  7. 2014/02/14
    JAK

    JAK Well-Known Member Thread Starter

    Joined:
    2002/01/19
    Messages:
    366
    Likes Received:
    0
    Thanks. Will get to this asap.
     
    JAK,
    #6
  8. 2014/02/14
    JAK

    JAK Well-Known Member Thread Starter

    Joined:
    2002/01/19
    Messages:
    366
    Likes Received:
    0
    Here's log:

    Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-02-2014 01
    Ran by SYSTEM on REATOGO on 14-02-2014 19:15:02
    Running from D:\
    Microsoft Windows XP (X86) OS Language: English(US)
    Internet Explorer Version 8
    Boot Mode: Recovery

    The current controlset is ControlSet001
    ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.


    The only official download link for FRST:
    Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
    Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
    Download link from any site other than Bleeping Computer is unpermitted or outdated.
    See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Registry (Whitelisted) ==================

    HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
    HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-21] (Avira Operations GmbH & Co. KG)
    HKLM\...\Run: [NeroFilterCheck] - C:\WINDOWS\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
    HKLM\...\Run: [ApnTBMon] - C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1707472 2013-11-07] (APN)
    HKLM\...\Run: [GamingWonderland Search Scope Monitor] - C:\Program Files\GamingWonderland\bar\1.bin\gtSrchMn.exe [42536 2012-12-22] (MindSpark)
    HKLM\...\Run: [GamingWonderland Browser Plugin Loader] - C:\Program Files\GamingWonderland\bar\1.bin\gtbrmon.exe [30096 2012-12-22] (VER_COMPANY_NAME)
    HKLM\...\Run: [MapsGalaxy Search Scope Monitor] - C:\Program Files\MapsGalaxy_39\bar\1.bin\39SrchMn.exe [42536 2013-01-22] (MindSpark)
    HKLM\...\Run: [MapsGalaxy_39 Browser Plugin Loader] - C:\Program Files\MapsGalaxy_39\bar\1.bin\39brmon.exe [30096 2013-01-22] (VER_COMPANY_NAME)
    HKLM\...\Run: [VirusScannerPro] - C:\Program Files\VCOM\SystemSuite\MemCheck.exe [57344 2006-09-07] (Avanquest Publishing USA, Inc.)
    HKLM\...\Run: [VNT] - C:\Program Files\VNT\vntldr.exe [202192 2013-11-07] (APN LLC.)
    Winlogon\Notify\igfxcui: C:\Windows\system32\igfxsrvc.dll (Intel Corporation)
    HKU\Default User\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32
    HKU\LocalService\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32
    HKU\NetworkService\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32
    HKU\Owner\...\Run: [Weather] - C:\Program Files\AWS\WeatherBug\Weather.exe [1652736 2011-10-05] (AWS Convergence Technologies, Inc.)
    HKU\Owner\...\RunOnce: [FlashPlayerUpdate] - C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_11_9_900_170_Plugin.exe [839560 2013-12-14] (Adobe Systems Incorporated)
    Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
    ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (McAfee, Inc.)

    ========================== Services (Whitelisted) =================

    S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-21] (Avira Operations GmbH & Co. KG)
    S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
    S2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-11-07] (APN LLC.)
    S2 GamingWonderlandService; C:\Program Files\GamingWonderland\bar\1.bin\gtbarsvc.exe [42504 2012-12-22] (COMPANYVERS_NAME)
    S2 MapsGalaxy_39Service; C:\Program Files\MapsGalaxy_39\bar\1.bin\39barsvc.exe [42504 2013-01-22] (COMPANYVERS_NAME)
    S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.)
    S2 SystemSuite Task Manager; C:\Program Files\VCOM\SystemSuite\MXTask.exe [126976 2006-09-07] (Avanquest Publishing USA, Inc.)

    ==================== Drivers (Whitelisted) ====================

    S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-21] (Avira Operations GmbH & Co. KG)
    S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-21] (Avira Operations GmbH & Co. KG)
    S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-25] (Avira Operations GmbH & Co. KG)
    S3 BCM43XX; C:\Windows\System32\DRIVERS\bcmwl5.sys [312960 2004-02-20] (Broadcom Corporation)
    S0 ftsata2; C:\Windows\System32\Drivers\ftsata2.sys [185394 2008-12-12] (Promise Technology, Inc.)
    S3 HSFHWICH; C:\Windows\System32\DRIVERS\HSFHWICH.sys [189056 2003-07-03] (Conexant Systems, Inc.)
    S1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
    S3 STAC97; C:\Windows\System32\drivers\stac97.sys [258704 2004-05-12] (SigmaTel, Inc.)
    S2 tmpreflt; C:\Program Files\VCOM\SystemSuite\tmpreflt.sys [31248 2006-09-07] (Trend Micro Inc.)
    S2 tmxpflt; C:\Program Files\VCOM\SystemSuite\tmxpflt.sys [190480 2006-09-07] (Trend Micro Inc.)
    S2 Vsapint; C:\Program Files\VCOM\SystemSuite\Vsapint.sys [1022432 2006-09-07] (Trend Micro Inc.)
    S3 {6080A529-897E-4629-A488-ABA0C29B635E}; C:\Windows\System32\drivers\ialmsbw.sys [120830 2003-10-27] (Intel Corporation)
    S3 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91}; C:\Windows\System32\drivers\ialmkchw.sys [98938 2003-10-27] (Intel Corporation)
    S3 {E2B953A6-195A-44F9-9BA3-3D5F4E32BB55}; C:\Windows\System32\drivers\wA301a.sys [33847 2003-10-27] (Intel Corporation)
    S3 {E2B953A7-195A-44F9-9BA3-3D5F4E32BB55}; C:\Windows\System32\drivers\wA301b.sys [33847 2003-10-27] (Intel Corporation)
    S1 WS2IFSL;

    ==================== NetSvcs (Whitelisted) ===================


    ==================== One Month Created Files and Folders ========

    2014-02-14 19:13 - 2014-02-14 19:13 - 00000000 ____D () C:\FRST
    2014-02-05 21:39 - 2014-02-08 02:47 - 01158818 _____ () C:\Windows\System32\korwbrkr.lex
    2014-02-05 21:39 - 2014-02-08 02:47 - 00083748 _____ () C:\Windows\System32\prcp.nls
    2014-02-05 21:39 - 2014-02-08 02:47 - 00083748 _____ () C:\Windows\System32\prc.nls
    2014-02-05 21:39 - 2014-02-08 02:47 - 00047066 _____ () C:\Windows\System32\ksc.nls
    2014-02-05 21:39 - 2014-02-08 02:47 - 00028288 _____ () C:\Windows\System32\xjis.nls
    2014-02-05 21:39 - 2014-02-05 21:39 - 01875968 _____ (Microsoft Corporation) C:\Windows\System32\msir3jp.lex
    2014-02-05 21:39 - 2014-02-05 21:39 - 00811064 _____ (Microsoft Corporation) C:\Windows\System32\imjp81k.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00571392 _____ (Microsoft Corporation) C:\Windows\System32\TINTLGNT.IME
    2014-02-05 21:39 - 2014-02-05 21:39 - 00562176 _____ (Microsoft Corporation) C:\Windows\System32\fxsst.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00514587 _____ (Microsoft Corporation) C:\Windows\System32\edb500.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00482304 _____ (Microsoft Corporation) C:\Windows\System32\PINTLGNT.IME
    2014-02-05 21:39 - 2014-02-05 21:39 - 00451584 _____ (Microsoft Corporation) C:\Windows\System32\fxsapi.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00400384 _____ (Microsoft Corporation) C:\Windows\System32\fxsxp32.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00397312 _____ (Microsoft Corporation) C:\Windows\System32\fxstiff.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00340023 _____ (Microsoft Corporation) C:\Windows\System32\imjp81.ime
    2014-02-05 21:39 - 2014-02-05 21:39 - 00285184 _____ (Microsoft Corporation) C:\Windows\System32\fxscomex.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00267776 _____ (Microsoft Corporation) C:\Windows\System32\fxssvc.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00246272 _____ (Microsoft Corporation) C:\Windows\System32\fxst30.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00229376 _____ (Microsoft Corporation) C:\Windows\System32\fxscover.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00192512 _____ (Microsoft Corporation) C:\Windows\System32\fxswzrd.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00185344 _____ (Microsoft Corporation) C:\Windows\System32\Thawbrkr.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00156672 _____ (Microsoft Corporation) C:\Windows\System32\WINZM.IME
    2014-02-05 21:39 - 2014-02-05 21:39 - 00156672 _____ (Microsoft Corporation) C:\Windows\System32\WINSP.IME
    2014-02-05 21:39 - 2014-02-05 21:39 - 00156672 _____ (Microsoft Corporation) C:\Windows\System32\WINPY.IME
    2014-02-05 21:39 - 2014-02-05 21:39 - 00154112 _____ (Microsoft Corporation) C:\Windows\System32\fxsui.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00142848 _____ (Microsoft Corporation) C:\Windows\System32\fxsclnt.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00132608 _____ (Microsoft Corporation) C:\Windows\System32\fxsclntR.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\System32\pmxviceo.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00119808 _____ (Microsoft Corporation) C:\Windows\System32\mtstocom.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00111104 _____ (Microsoft Corporation) C:\Windows\System32\fxscfgwz.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00101888 _____ (Microsoft Corporation) C:\Windows\System32\evntagnt.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\System32\srusbusd.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00098304 _____ (Microsoft Corporation) C:\Windows\System32\msir3jp.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00094720 _____ (Microsoft Corporation) C:\Windows\System32\imekr61.ime
    2014-02-05 21:39 - 2014-02-05 21:39 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\evntwin.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00092032 _____ (Microsoft Corporation) C:\Windows\System32\mga.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00081920 _____ (Microsoft Corporation) C:\Windows\System32\ieencode.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00079872 _____ (Ricoh Co., Ltd.) C:\Windows\System32\RWia330.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00079872 _____ (Ricoh Co., Ltd.) C:\Windows\System32\RWia001.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00079360 _____ (Microsoft Corporation) C:\Windows\System32\winar30.ime
    2014-02-05 21:39 - 2014-02-05 21:39 - 00079360 _____ (Microsoft Corporation) C:\Windows\System32\phon.ime
    2014-02-05 21:39 - 2014-02-05 21:39 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\quick.ime
    2014-02-05 21:39 - 2014-02-05 21:39 - 00076288 _____ (Microsoft Corporation) C:\Windows\System32\uniime.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00072704 _____ (Microsoft Corporation) C:\Windows\System32\WINGB.IME
    2014-02-05 21:39 - 2014-02-05 21:39 - 00072192 _____ (Microsoft Corporation) C:\Windows\System32\fxscom.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00070656 _____ (Microsoft Corporation) C:\Windows\System32\korwbrkr.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\System32\winime.ime
    2014-02-05 21:39 - 2014-02-05 21:39 - 00065024 _____ (Microsoft Corporation) C:\Windows\System32\unicdime.ime
    2014-02-05 21:39 - 2014-02-05 21:39 - 00057856 _____ (SEIKO EPSON CORP.) C:\Windows\System32\esuimgd.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00055296 _____ (Microsoft Corporation) C:\Windows\System32\fxsevent.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00048256 _____ (Microsoft Corporation) C:\Windows\System32\w32.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00045056 _____ (SEIKO EPSON CORP.) C:\Windows\System32\esunid.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00043520 _____ (Microsoft Corporation) C:\Windows\System32\fcachdll.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00041600 _____ (Microsoft Corporation) C:\Windows\System32\weitekp9.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00040960 _____ (Microsoft Corporation) C:\Windows\System32\msiregmv.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\hostmib.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00038912 _____ (Microsoft Corporation) C:\Windows\System32\sm9Aw.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00035328 _____ (Microsoft Corporation) C:\Windows\System32\iprip.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\migisol.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\lmmib2.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00033280 _____ (Microsoft Corporation) C:\Windows\System32\snmp.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00031744 _____ (SEIKO EPSON CORP.) C:\Windows\System32\esucmd.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00031744 _____ (Microsoft Corporation) C:\Windows\System32\smB6w.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00031744 _____ (Microsoft Corporation) C:\Windows\System32\sma3w.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00031744 _____ (Microsoft Corporation) C:\Windows\System32\fxsroute.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\SM87w.DLL
    2014-02-05 21:39 - 2014-02-05 21:39 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\SM81w.DLL
    2014-02-05 21:39 - 2014-02-05 21:39 - 00029184 _____ (Ricoh Co., Ltd.) C:\Windows\System32\RW330Ext.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00029184 _____ (Microsoft Corporation) C:\Windows\System32\SM8Cw.DLL
    2014-02-05 21:39 - 2014-02-05 21:39 - 00027648 _____ (Microsoft Corporation) C:\Windows\System32\RW001Ext.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00026624 _____ (Microsoft Corporation) C:\Windows\System32\SM93w.DLL
    2014-02-05 21:39 - 2014-02-05 21:39 - 00026624 _____ (Microsoft Corporation) C:\Windows\System32\SM92w.DLL
    2014-02-05 21:39 - 2014-02-05 21:39 - 00026624 _____ (Microsoft Corporation) C:\Windows\System32\fxsdrv.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\SM90w.DLL
    2014-02-05 21:39 - 2014-02-05 21:39 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\SM8Dw.DLL
    2014-02-05 21:39 - 2014-02-05 21:39 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\SM8Aw.DLL
    2014-02-05 21:39 - 2014-02-05 21:39 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\SM89w.DLL
    2014-02-05 21:39 - 2014-02-05 21:39 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\romanime.ime
    2014-02-05 21:39 - 2014-02-05 21:39 - 00025088 _____ (Microsoft Corporation) C:\Windows\System32\SM59w.DLL
    2014-02-05 21:39 - 2014-02-05 21:39 - 00024064 _____ (Microsoft Corporation) C:\Windows\System32\evntcmd.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00023552 _____ (Microsoft Corporation) C:\Windows\System32\fxsmon.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00023552 _____ (Microsoft Corporation) C:\Windows\System32\fxsext32.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\System32\regtrace.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00022528 _____ (Microsoft Corporation) C:\Windows\System32\lpdsvc.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00018944 _____ (Microsoft Corporation) C:\Windows\System32\simptcp.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00018944 _____ (Microsoft Corporation) C:\Windows\System32\lprmon.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00018432 _____ (Microsoft Corporation) C:\Windows\System32\JUPIw.DLL
    2014-02-05 21:39 - 2014-02-05 21:39 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\quser.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00014848 _____ (Microsoft Corporation) C:\Windows\System32\register.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00014848 _____ (Microsoft Corporation) C:\Windows\System32\flattemp.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\tsprof.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00012288 _____ (Microsoft Corporation) C:\Windows\System32\smtpctrs.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00011264 _____ (Microsoft Corporation) C:\Windows\System32\pmxmcro.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00011264 _____ (Microsoft Corporation) C:\Windows\System32\fxssend.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00009728 _____ (Microsoft Corporation) C:\Windows\System32\query.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00009216 _____ (Microsoft Corporation) C:\Windows\System32\kbdnecat.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00008704 _____ (Microsoft Corporation) C:\Windows\System32\snmptrap.exe
    2014-02-05 21:39 - 2014-02-05 21:39 - 00008704 _____ (Microsoft Corporation) C:\Windows\System32\fxsperf.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00007680 _____ (Microsoft Corporation) C:\Windows\System32\kbdnecnt.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\snprfdll.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\kbdnec95.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\kbdibm02.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\f3ahvoas.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\kbdlk41a.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\fxsres.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\snmpmib.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\pmxgl.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbdth3.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbdth2.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbdlk41j.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbdinpun.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbdax2.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbd106n.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbd101a.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbd101.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\ftlx041e.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdvntc.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdusa.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdurdu.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdth1.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdth0.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdsyr2.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdsyr1.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdintel.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdintam.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdinmar.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdinkan.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdinhin.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdinguj.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdindev.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdheb.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdfa.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbddiv2.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbddiv1.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbda3.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbda2.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbda1.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005120 _____ (Microsoft Corporation) C:\Windows\System32\kbdgeo.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005120 _____ (Microsoft Corporation) C:\Windows\System32\kbdarmw.dll
    2014-02-05 21:39 - 2014-02-05 21:39 - 00005120 _____ (Microsoft Corporation) C:\Windows\System32\kbdarme.dll
    2014-02-05 21:38 - 2014-02-08 02:47 - 00195618 _____ () C:\Windows\System32\c_10002.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00189986 _____ () C:\Windows\System32\c_1361.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00187938 _____ () C:\Windows\System32\c_20005.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00186402 _____ () C:\Windows\System32\c_20001.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00185378 _____ () C:\Windows\System32\c_20003.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00180770 _____ () C:\Windows\System32\c_20932.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00180258 _____ () C:\Windows\System32\c_20004.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00180258 _____ () C:\Windows\System32\c_20000.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00177698 _____ () C:\Windows\System32\c_20949.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00177698 _____ () C:\Windows\System32\c_10003.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00173602 _____ () C:\Windows\System32\c_20936.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00173602 _____ () C:\Windows\System32\c_20002.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00173602 _____ () C:\Windows\System32\c_10008.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00162850 _____ () C:\Windows\System32\c_10001.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00082172 _____ () C:\Windows\System32\bopomofo.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066728 _____ () C:\Windows\System32\big5.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066594 _____ () C:\Windows\System32\c_864.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066594 _____ () C:\Windows\System32\c_862.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066594 _____ () C:\Windows\System32\c_858.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066594 _____ () C:\Windows\System32\c_720.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_870.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_708.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\C_28596.NLS
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_21027.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_21025.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20924.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20880.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20871.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20838.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20833.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20424.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20423.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20420.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20297.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20290.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20285.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20284.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20280.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20278.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20277.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20273.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20269.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20108.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20107.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20106.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_20105.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_1149.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_1148.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_1147.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_1146.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_1145.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_1144.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_1143.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_1142.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_1141.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_1140.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_1047.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_10021.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_10005.nls
    2014-02-05 21:38 - 2014-02-08 02:47 - 00066082 _____ () C:\Windows\System32\c_10004.nls
    2014-02-05 21:38 - 2014-02-05 21:38 - 01677824 _____ (Microsoft Corporation) C:\Windows\System32\chsbrkr.dll
    2014-02-05 21:38 - 2014-02-05 21:38 - 00838144 _____ (Microsoft Corporation) C:\Windows\System32\chtbrkr.dll
    2014-02-05 21:38 - 2014-02-05 21:38 - 00218112 _____ (Microsoft Corporation) C:\Windows\System32\c_g18030.dll
    2014-02-05 21:38 - 2014-02-05 21:38 - 00092416 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mga.sys
    2014-02-05 21:38 - 2014-02-05 21:38 - 00078848 _____ (Microsoft Corporation) C:\Windows\System32\dayi.ime
    2014-02-05 21:38 - 2014-02-05 21:38 - 00078336 _____ (Microsoft Corporation) C:\Windows\System32\chajei.ime
    2014-02-05 21:38 - 2014-02-05 21:38 - 00054528 _____ (Philips Semiconductors GmbH) C:\Windows\System32\Drivers\cap7146.sys
    2014-02-05 21:38 - 2014-02-05 21:38 - 00032384 ____N (Microsoft Corporation) C:\Windows\System32\Drivers\usbccgp.sys
    2014-02-05 21:38 - 2014-02-05 21:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\weitekp9.sys
    2014-02-05 21:38 - 2014-02-05 21:38 - 00025856 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\et4000.sys
    2014-02-05 21:38 - 2014-02-05 21:38 - 00021896 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tdipx.sys
    2014-02-05 21:38 - 2014-02-05 21:38 - 00021504 _____ (Microsoft Corporation) C:\Windows\System32\CINTLGNT.IME
    2014-02-05 21:38 - 2014-02-05 21:38 - 00020736 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ramdisk.sys
    2014-02-05 21:38 - 2014-02-05 21:38 - 00019464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tdspx.sys
    2014-02-05 21:38 - 2014-02-05 21:38 - 00018944 _____ (Microsoft Corporation) C:\Windows\System32\cprofile.exe
    2014-02-05 21:38 - 2014-02-05 21:38 - 00015872 _____ (Microsoft Corporation) C:\Windows\System32\chgport.exe
    2014-02-05 21:38 - 2014-02-05 21:38 - 00014976 ____N (Microsoft Corporation) C:\Windows\System32\Drivers\USBSCAN.SYS
    2014-02-05 21:38 - 2014-02-05 21:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\chgusr.exe
    2014-02-05 21:38 - 2014-02-05 21:38 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\chglogon.exe
    2014-02-05 21:38 - 2014-02-05 21:38 - 00013192 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tdasync.sys
    2014-02-05 21:38 - 2014-02-05 21:38 - 00012928 ____N (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023x.sys
    2014-02-05 21:38 - 2014-02-05 21:38 - 00010752 _____ (Microsoft Corporation) C:\Windows\System32\c_iscii.dll
    2014-02-05 21:38 - 2014-02-05 21:38 - 00009728 _____ (Microsoft Corporation) C:\Windows\System32\change.exe
    2014-02-05 21:38 - 2014-02-05 21:38 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\c_is2022.dll
    2014-02-05 21:38 - 2014-02-05 21:38 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\adsiisex.dll
    2014-01-18 16:11 - 2014-01-18 16:13 - 00000000 ____D () C:\Documents and Settings\Owner\Desktop\MADISON COUNTY
    2014-01-15 16:50 - 2014-01-15 16:51 - 00009900 _____ () C:\Windows\KB2914368.log
    2014-01-15 16:50 - 2014-01-15 16:50 - 00000000 __HDC () C:\Windows\$NtUninstallKB2914368$

    ==================== One Month Modified Files and Folders =======

    2014-02-14 19:13 - 2014-02-14 19:13 - 00000000 ____D () C:\FRST
    2014-02-14 18:35 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf46a.tmp
    2014-02-14 18:32 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf262.tmp
    2014-02-14 18:29 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeeb5.tmp
    2014-02-14 18:27 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf5b4.tmp
    2014-02-14 18:24 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf2c5.tmp
    2014-02-14 18:21 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPecd5.tmp
    2014-02-14 18:18 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf15e.tmp
    2014-02-14 18:16 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee82.tmp
    2014-02-14 18:13 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf17c.tmp
    2014-02-14 18:10 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed9d.tmp
    2014-02-14 18:07 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf423.tmp
    2014-02-14 18:05 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf654.tmp
    2014-02-14 18:02 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf480.tmp
    2014-02-14 17:59 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf135.tmp
    2014-02-14 17:56 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf351.tmp
    2014-02-14 17:53 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf1f4.tmp
    2014-02-14 17:51 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf47f.tmp
    2014-02-14 17:48 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf64a.tmp
    2014-02-14 17:45 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP044b.tmp
    2014-02-14 17:42 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPedeb.tmp
    2014-02-14 17:40 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfc50.tmp
    2014-02-14 17:37 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf28a.tmp
    2014-02-14 17:34 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf211.tmp
    2014-02-14 17:31 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf334.tmp
    2014-02-14 17:29 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf47e.tmp
    2014-02-14 17:26 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf18f.tmp
    2014-02-14 17:23 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf208.tmp
    2014-02-14 17:20 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf35b.tmp
    2014-02-14 17:17 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf3a2.tmp
    2014-02-14 17:15 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf6b9.tmp
    2014-02-14 17:12 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf53c.tmp
    2014-02-14 17:09 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf18e.tmp
    2014-02-14 17:06 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf726.tmp
    2014-02-14 17:04 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf47d.tmp
    2014-02-14 17:01 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef88.tmp
    2014-02-14 16:58 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf140.tmp
    2014-02-14 16:55 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf67c.tmp
    2014-02-14 16:53 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf261.tmp
    2014-02-14 16:50 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf15d.tmp
    2014-02-14 16:47 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee70.tmp
    2014-02-14 16:44 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPff3f.tmp
    2014-02-14 16:41 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPebf6.tmp
    2014-02-14 16:39 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf5aa.tmp
    2014-02-14 16:36 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf5a0.tmp
    2014-02-14 16:33 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf17b.tmp
    2014-02-14 16:30 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf0e6.tmp
    2014-02-14 16:28 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf0b3.tmp
    2014-02-14 16:25 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf03e.tmp
    2014-02-14 16:22 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef61.tmp
    2014-02-14 16:19 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec5e.tmp
    2014-02-14 16:17 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf1df.tmp
    2014-02-14 16:14 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef87.tmp
    2014-02-14 16:11 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee50.tmp
    2014-02-14 16:08 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf3bf.tmp
    2014-02-14 16:06 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPebb0.tmp
    2014-02-14 16:03 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef86.tmp
    2014-02-14 16:00 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeedb.tmp
    2014-02-14 15:57 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf01d.tmp
    2014-02-14 15:55 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee3d.tmp
    2014-02-14 15:52 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed30.tmp
    2014-02-14 15:49 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeee7.tmp
    2014-02-14 15:47 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf1fd.tmp
    2014-02-14 15:44 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP015c.tmp
    2014-02-14 15:41 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf12c.tmp
    2014-02-14 15:38 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf2d9.tmp
    2014-02-14 15:35 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf55a.tmp
    2014-02-14 15:33 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf0ee.tmp
    2014-02-14 15:30 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed9c.tmp
    2014-02-14 15:27 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPea2a.tmp
    2014-02-14 15:24 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeb75.tmp
    2014-02-14 15:22 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf04e.tmp
    2014-02-14 15:19 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf17a.tmp
    2014-02-14 15:16 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeda7.tmp
    2014-02-14 15:13 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec83.tmp
    2014-02-14 15:11 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed60.tmp
    2014-02-14 15:08 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf0da.tmp
    2014-02-14 15:05 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPefeb.tmp
    2014-02-14 15:02 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPebba.tmp
    2014-02-14 15:00 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed42.tmp
    2014-02-14 14:57 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPea35.tmp
    2014-02-14 14:54 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeee6.tmp
    2014-02-14 14:52 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPebd8.tmp
    2014-02-14 14:49 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed93.tmp
    2014-02-14 14:46 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeaac.tmp
    2014-02-14 14:43 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfd4b.tmp
    2014-02-14 14:41 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeeb4.tmp
    2014-02-14 14:38 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf4ba.tmp
    2014-02-14 14:35 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfffe.tmp
    2014-02-14 14:32 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf170.tmp
    2014-02-14 14:29 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf493.tmp
    2014-02-14 14:27 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeee5.tmp
    2014-02-14 14:24 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed92.tmp
    2014-02-14 14:21 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPecde.tmp
    2014-02-14 14:18 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeea0.tmp
    2014-02-14 14:16 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf257.tmp
    2014-02-14 14:13 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed74.tmp
    2014-02-14 14:10 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee98.tmp
    2014-02-14 14:07 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee31.tmp
    2014-02-14 14:05 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf030.tmp
    2014-02-14 14:02 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef07.tmp
    2014-02-14 13:59 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPefc4.tmp
    2014-02-14 13:56 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf045.tmp
    2014-02-14 13:54 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee97.tmp
    2014-02-14 13:51 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef54.tmp
    2014-02-14 13:48 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf15c.tmp
    2014-02-14 13:46 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeaa3.tmp
    2014-02-14 13:43 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP02f7.tmp
    2014-02-14 13:40 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPedce.tmp
    2014-02-14 13:37 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf473.tmp
    2014-02-14 13:34 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf102.tmp
    2014-02-14 13:32 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef68.tmp
    2014-02-14 13:29 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf1b9.tmp
    2014-02-14 13:26 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef26.tmp
    2014-02-14 13:23 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf03d.tmp
    2014-02-14 13:21 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPefa4.tmp
    2014-02-14 13:18 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec3d.tmp
    2014-02-14 13:15 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPebec.tmp
    2014-02-14 13:13 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPedba.tmp
    2014-02-14 13:10 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed56.tmp
    2014-02-14 13:07 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf10e.tmp
    2014-02-14 13:04 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef19.tmp
    2014-02-14 13:02 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf10d.tmp
    2014-02-14 12:59 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee63.tmp
    2014-02-14 12:56 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPea85.tmp
    2014-02-14 12:53 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf231.tmp
    2014-02-14 12:51 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPecbf.tmp
    2014-02-14 12:48 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed5f.tmp
    2014-02-14 12:45 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf315.tmp
    2014-02-14 12:42 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfebd.tmp
    2014-02-14 12:40 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf058.tmp
    2014-02-14 12:37 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf6b8.tmp
    2014-02-14 12:34 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf29d.tmp
    2014-02-14 12:31 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPefff.tmp
    2014-02-14 12:28 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf245.tmp
    2014-02-14 12:26 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPefb8.tmp
    2014-02-14 12:23 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf0a8.tmp
    2014-02-14 12:20 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed41.tmp
    2014-02-14 12:17 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf01c.tmp
    2014-02-14 12:15 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee9f.tmp
    2014-02-14 12:12 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef73.tmp
    2014-02-14 12:09 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee6f.tmp
    2014-02-14 12:07 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec50.tmp
    2014-02-14 12:04 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec99.tmp
    2014-02-14 12:01 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee77.tmp
    2014-02-14 11:58 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPecac.tmp
    2014-02-14 11:56 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec6f.tmp
    2014-02-14 11:53 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee6e.tmp
    2014-02-14 11:50 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf116.tmp
    2014-02-14 11:47 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef06.tmp
    2014-02-14 11:45 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed2f.tmp
    2014-02-14 11:42 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfac0.tmp
    2014-02-14 11:39 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf13f.tmp
    2014-02-14 11:36 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf71c.tmp
    2014-02-14 11:34 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf321.tmp
    2014-02-14 11:31 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf333.tmp
    2014-02-14 11:28 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf347.tmp
    2014-02-14 11:25 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef05.tmp
    2014-02-14 11:22 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf1cb.tmp
    2014-02-14 11:20 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf03c.tmp
    2014-02-14 11:17 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf1d6.tmp
    2014-02-14 11:14 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeef9.tmp
    2014-02-14 11:12 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPecb6.tmp
    2014-02-14 11:09 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPedb9.tmp
    2014-02-14 11:06 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec1e.tmp
    2014-02-14 11:03 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeaf5.tmp
    2014-02-14 11:01 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeaf4.tmp
    2014-02-14 10:58 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPecfb.tmp
    2014-02-14 10:55 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPefea.tmp
    2014-02-14 10:52 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef25.tmp
    2014-02-14 10:50 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf0bc.tmp
    2014-02-14 10:47 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef2c.tmp
    2014-02-14 10:44 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec33.tmp
    2014-02-14 10:41 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP0012.tmp
    2014-02-14 10:39 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef24.tmp
    2014-02-14 10:36 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf0f9.tmp
    2014-02-14 10:33 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf207.tmp
    2014-02-14 10:30 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf198.tmp
    2014-02-14 10:28 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef60.tmp
    2014-02-14 10:25 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf044.tmp
    2014-02-14 10:22 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeab7.tmp
    2014-02-14 10:19 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf230.tmp
    2014-02-14 10:17 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeb25.tmp
    2014-02-14 10:14 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf13e.tmp
    2014-02-14 10:11 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee0a.tmp
    2014-02-14 10:08 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed88.tmp
    2014-02-14 10:06 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf2b1.tmp
    2014-02-14 10:03 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf22f.tmp
    2014-02-14 10:00 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef04.tmp
    2014-02-14 09:57 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf469.tmp
    2014-02-14 09:55 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec14.tmp
    2014-02-14 09:52 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef03.tmp
    2014-02-14 09:49 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed2e.tmp
    2014-02-14 09:46 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf080.tmp
    2014-02-14 09:44 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf03b.tmp
    2014-02-14 09:41 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPff9a.tmp
    2014-02-14 09:38 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf33e.tmp
    2014-02-14 09:35 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf7ef.tmp
    2014-02-14 09:33 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf582.tmp
    2014-02-14 09:30 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee6d.tmp
    2014-02-14 09:27 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef9a.tmp
    2014-02-14 09:24 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf383.tmp
    2014-02-14 09:22 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP3230.tmp
    2014-02-14 09:20 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPefe0.tmp
    2014-02-14 09:17 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef23.tmp
    2014-02-14 09:15 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee46.tmp
    2014-02-14 09:12 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee81.tmp
    2014-02-14 09:09 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf06c.tmp
    2014-02-14 09:06 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPefc3.tmp
    2014-02-14 09:04 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeb24.tmp
    2014-02-14 09:01 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef22.tmp
    2014-02-14 08:58 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf492.tmp
    2014-02-14 08:55 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf0e5.tmp
    2014-02-14 08:53 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf3dd.tmp
    2014-02-14 08:50 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf36f.tmp
    2014-02-14 08:47 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf1b8.tmp
    2014-02-14 08:44 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf244.tmp
    2014-02-14 08:42 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP3208.tmp
    2014-02-14 08:40 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP0210.tmp
    2014-02-14 08:37 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf3a1.tmp
    2014-02-14 08:35 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP1fd7.tmp
    2014-02-14 08:33 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf33d.tmp
    2014-02-14 08:30 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf532.tmp
    2014-02-14 08:28 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP3425.tmp
    2014-02-14 08:26 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf1d5.tmp
    2014-02-14 08:24 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf243.tmp
    2014-02-14 08:21 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf3c9.tmp
    2014-02-14 08:18 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf551.tmp
    2014-02-14 08:15 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf095.tmp
    2014-02-14 08:13 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed4d.tmp
    2014-02-14 08:10 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee3c.tmp
    2014-02-14 08:07 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef7d.tmp
    2014-02-14 08:04 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf1b7.tmp
    2014-02-14 08:02 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf134.tmp
    2014-02-14 07:59 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf0f8.tmp
    2014-02-14 07:56 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef18.tmp
    2014-02-14 07:53 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf094.tmp
    2014-02-14 07:51 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeec7.tmp
    2014-02-14 07:48 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf1b6.tmp
    2014-02-14 07:45 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec3c.tmp
    2014-02-14 07:42 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed38.tmp
    2014-02-14 07:40 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf076.tmp
    2014-02-14 07:37 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfc8c.tmp
    2014-02-14 07:34 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef7c.tmp
    2014-02-14 07:31 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf289.tmp
    2014-02-14 07:29 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf564.tmp
    2014-02-14 07:26 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed4c.tmp
    2014-02-14 07:23 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf500.tmp
    2014-02-14 07:20 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPecb5.tmp
    2014-02-14 07:17 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec5d.tmp
    2014-02-14 07:15 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf10c.tmp
    2014-02-14 07:12 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf0b2.tmp
    2014-02-14 07:09 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf1f3.tmp
    2014-02-14 07:07 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPecd4.tmp
    2014-02-14 07:04 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed91.tmp
    2014-02-14 07:01 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed9b.tmp
    2014-02-14 06:58 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed55.tmp
    2014-02-14 06:56 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf008.tmp
    2014-02-14 06:53 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec66.tmp
    2014-02-14 06:50 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf0e4.tmp
    2014-02-14 06:47 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee45.tmp
    2014-02-14 06:45 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf03a.tmp
    2014-02-14 06:42 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef72.tmp
    2014-02-14 06:39 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf26b.tmp
    2014-02-14 06:36 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfa98.tmp
    2014-02-14 06:34 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee09.tmp
    2014-02-14 06:31 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf320.tmp
    2014-02-14 06:28 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf4ed.tmp
    2014-02-14 06:25 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeeb3.tmp
    2014-02-14 06:23 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef5f.tmp
    2014-02-14 06:20 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeca1.tmp
    2014-02-14 06:17 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf152.tmp
     
    JAK,
    #7
  9. 2014/02/14
    JAK

    JAK Well-Known Member Thread Starter

    Joined:
    2002/01/19
    Messages:
    366
    Likes Received:
    0
    and the rest:


    2014-02-14 06:23 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef5f.tmp
    2014-02-14 06:20 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeca1.tmp
    2014-02-14 06:17 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf152.tmp
    2014-02-14 06:14 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPea52.tmp
    2014-02-14 06:12 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee3b.tmp
    2014-02-14 06:09 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec8d.tmp
    2014-02-14 06:06 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf12b.tmp
    2014-02-14 06:03 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeda6.tmp
    2014-02-14 06:01 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee1d.tmp
    2014-02-14 05:58 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPecd3.tmp
    2014-02-14 05:55 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPecf1.tmp
    2014-02-14 05:52 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeb2e.tmp
    2014-02-14 05:50 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf12a.tmp
    2014-02-14 05:47 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPedd9.tmp
    2014-02-14 05:44 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeac1.tmp
    2014-02-14 05:41 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef5e.tmp
    2014-02-14 05:39 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec5c.tmp
    2014-02-14 05:36 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP00c7.tmp
    2014-02-14 05:33 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee96.tmp
    2014-02-14 05:30 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf437.tmp
    2014-02-14 05:28 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf6c2.tmp
    2014-02-14 05:25 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec79.tmp
    2014-02-14 05:22 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed4b.tmp
    2014-02-14 05:19 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeebd.tmp
    2014-02-14 05:17 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed73.tmp
    2014-02-14 05:14 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPebce.tmp
    2014-02-14 05:11 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeb60.tmp
    2014-02-14 05:08 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPedc3.tmp
    2014-02-14 05:06 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe8cb.tmp
    2014-02-14 05:03 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPea98.tmp
    2014-02-14 05:00 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed19.tmp
    2014-02-14 04:58 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeade.tmp
    2014-02-14 04:55 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec98.tmp
    2014-02-14 04:52 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeafc.tmp
    2014-02-14 04:49 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee4f.tmp
    2014-02-14 04:47 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf1a2.tmp
    2014-02-14 04:44 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeffe.tmp
    2014-02-14 04:41 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPef40.tmp
    2014-02-14 04:38 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPecdd.tmp
    2014-02-14 04:36 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf976.tmp
    2014-02-14 04:33 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed2d.tmp
    2014-02-14 04:30 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPee95.tmp
    2014-02-14 04:27 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf4ec.tmp
    2014-02-14 04:25 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeb4d.tmp
    2014-02-14 04:22 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeaa2.tmp
    2014-02-14 04:19 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec65.tmp
    2014-02-14 04:16 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe978.tmp
    2014-02-14 04:14 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPecab.tmp
    2014-02-14 04:11 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeaf3.tmp
    2014-02-14 04:08 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeb74.tmp
    2014-02-14 04:05 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeac0.tmp
    2014-02-14 04:03 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf578.tmp
    2014-02-14 04:00 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPedd8.tmp
    2014-02-14 03:57 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPedcd.tmp
    2014-02-14 03:54 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe8fd.tmp
    2014-02-14 03:52 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe907.tmp
    2014-02-14 03:49 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe9bd.tmp
    2014-02-14 03:46 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec32.tmp
    2014-02-14 03:44 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed37.tmp
    2014-02-14 03:41 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeb56.tmp
    2014-02-14 03:38 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec5b.tmp
    2014-02-14 03:35 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf975.tmp
    2014-02-14 03:33 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe87b.tmp
    2014-02-14 03:30 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPefc2.tmp
    2014-02-14 03:27 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf419.tmp
    2014-02-14 03:24 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeda5.tmp
    2014-02-14 03:22 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec97.tmp
    2014-02-14 03:19 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe817.tmp
    2014-02-14 03:16 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeaf2.tmp
    2014-02-14 03:13 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe977.tmp
    2014-02-14 03:11 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeab6.tmp
    2014-02-14 03:08 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe939.tmp
    2014-02-14 03:05 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPea8e.tmp
    2014-02-14 03:03 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec01.tmp
    2014-02-14 03:00 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeb9d.tmp
    2014-02-14 02:57 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec46.tmp
    2014-02-14 02:54 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe91b.tmp
    2014-02-14 02:52 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe5dc.tmp
    2014-02-14 02:49 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe654.tmp
    2014-02-14 02:46 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe7b3.tmp
    2014-02-14 02:44 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe976.tmp
    2014-02-14 02:41 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe975.tmp
    2014-02-14 02:38 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe88f.tmp
    2014-02-14 02:35 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf849.tmp
    2014-02-14 02:33 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe6eb.tmp
    2014-02-14 02:30 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe867.tmp
    2014-02-14 02:27 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPed87.tmp
    2014-02-14 02:24 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeb9c.tmp
    2014-02-14 02:22 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe7d1.tmp
    2014-02-14 02:19 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPea34.tmp
    2014-02-14 02:16 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe7c8.tmp
    2014-02-14 02:14 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe885.tmp
    2014-02-14 02:11 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe38d.tmp
    2014-02-14 02:08 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe7c7.tmp
    2014-02-14 02:05 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe51e.tmp
    2014-02-14 02:03 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe9bc.tmp
    2014-02-14 02:00 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe8c1.tmp
    2014-02-14 01:57 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe6d7.tmp
    2014-02-14 01:55 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe7f9.tmp
    2014-02-14 01:52 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe6a4.tmp
    2014-02-14 01:49 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe6c2.tmp
    2014-02-14 01:46 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe8ae.tmp
    2014-02-14 01:44 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe383.tmp
    2014-02-14 01:41 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe82c.tmp
    2014-02-14 01:38 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe604.tmp
    2014-02-14 01:36 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe67c.tmp
    2014-02-14 01:33 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf636.tmp
    2014-02-14 01:30 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe777.tmp
    2014-02-14 01:27 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe5a0.tmp
    2014-02-14 01:25 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPebc4.tmp
    2014-02-14 01:22 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeb4c.tmp
    2014-02-14 01:19 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe76e.tmp
    2014-02-14 01:17 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe872.tmp
    2014-02-14 01:14 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe3f1.tmp
    2014-02-14 01:11 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe8ad.tmp
    2014-02-14 01:08 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe528.tmp
    2014-02-14 01:06 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe731.tmp
    2014-02-14 01:03 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe7db.tmp
    2014-02-14 01:00 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe488.tmp
    2014-02-14 00:58 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe9a8.tmp
    2014-02-14 00:55 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe871.tmp
    2014-02-14 00:52 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe835.tmp
    2014-02-14 00:49 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe673.tmp
    2014-02-14 00:47 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe957.tmp
    2014-02-14 00:44 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe672.tmp
    2014-02-14 00:41 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe636.tmp
    2014-02-14 00:39 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe82b.tmp
    2014-02-14 00:36 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe6d6.tmp
    2014-02-14 00:33 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe438.tmp
    2014-02-14 00:30 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf405.tmp
    2014-02-14 00:28 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe76d.tmp
    2014-02-14 00:25 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPe58c.tmp
    2014-02-14 00:22 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPec00.tmp
    2014-02-14 00:20 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfe31.tmp
    2014-02-14 00:17 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf7a0.tmp
    2014-02-14 00:14 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf3e7.tmp
    2014-02-14 00:11 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf640.tmp
    2014-02-14 00:08 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPff35.tmp
    2014-02-14 00:06 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf550.tmp
    2014-02-14 00:03 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfec7.tmp
    2014-02-14 00:00 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfb24.tmp
    2014-02-13 23:57 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP0116.tmp
    2014-02-13 23:54 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP2faf.tmp
    2014-02-13 23:33 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfb7e.tmp
    2014-02-13 23:31 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPea84.tmp
    2014-02-13 23:28 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfb10.tmp
    2014-02-13 23:26 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf9bb.tmp
    2014-02-13 21:59 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP1622.tmp
    2014-02-13 20:45 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP3140.tmp
    2014-02-13 20:43 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP1fb9.tmp
    2014-02-13 20:42 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP310e.tmp
    2014-02-13 20:37 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP191b.tmp
    2014-02-13 20:34 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP3242.tmp
    2014-02-10 10:21 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP26cc.tmp
    2014-02-10 10:16 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP10b2.tmp
    2014-02-10 10:11 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP336f.tmp
    2014-02-10 10:06 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP6527.tmp
    2014-02-08 02:47 - 2012-04-13 17:27 - 00028288 _____ () C:\Windows\System32\xjis.nls
    2014-02-08 02:47 - 2012-04-13 17:26 - 01158818 _____ () C:\Windows\System32\korwbrkr.lex
    2014-02-08 02:47 - 2012-04-13 17:26 - 00083748 _____ () C:\Windows\System32\prcp.nls
    2014-02-08 02:47 - 2012-04-13 17:26 - 00083748 _____ () C:\Windows\System32\prc.nls
    2014-02-08 02:47 - 2012-04-13 17:26 - 00047066 _____ () C:\Windows\System32\ksc.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00195618 _____ () C:\Windows\System32\c_10002.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00189986 _____ () C:\Windows\System32\c_1361.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00187938 _____ () C:\Windows\System32\c_20005.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00186402 _____ () C:\Windows\System32\c_20001.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00185378 _____ () C:\Windows\System32\c_20003.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00180770 _____ () C:\Windows\System32\c_20932.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00180258 _____ () C:\Windows\System32\c_20004.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00180258 _____ () C:\Windows\System32\c_20000.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00177698 _____ () C:\Windows\System32\c_20949.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00177698 _____ () C:\Windows\System32\c_10003.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00173602 _____ () C:\Windows\System32\c_20936.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00173602 _____ () C:\Windows\System32\c_20002.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00173602 _____ () C:\Windows\System32\c_10008.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00162850 _____ () C:\Windows\System32\c_10001.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00082172 _____ () C:\Windows\System32\bopomofo.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066728 _____ () C:\Windows\System32\big5.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066594 _____ () C:\Windows\System32\c_864.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066594 _____ () C:\Windows\System32\c_862.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066594 _____ () C:\Windows\System32\c_858.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066594 _____ () C:\Windows\System32\c_720.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_870.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_708.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\C_28596.NLS
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_21027.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_21025.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20924.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20880.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20871.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20838.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20833.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20424.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20423.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20420.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20297.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20290.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20285.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20284.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20280.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20278.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20277.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20273.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20269.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20108.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20107.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20106.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_20105.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_1149.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_1148.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_1147.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_1146.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_1145.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_1144.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_1143.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_1142.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_1141.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_1140.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_1047.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_10021.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_10005.nls
    2014-02-08 02:47 - 2012-04-13 17:25 - 00066082 _____ () C:\Windows\System32\c_10004.nls
    2014-02-08 01:34 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf31f.tmp
    2014-02-08 01:31 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf79f.tmp
    2014-02-08 01:29 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf58c.tmp
    2014-02-08 01:26 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfb6a.tmp
    2014-02-08 01:22 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP07e5.tmp
    2014-02-08 01:19 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP4764.tmp
    2014-02-08 01:05 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf9a7.tmp
    2014-02-08 00:59 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfc3c.tmp
    2014-02-08 00:54 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP426c.tmp
    2014-02-08 00:39 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP00c6.tmp
    2014-02-08 00:36 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP0289.tmp
    2014-02-08 00:18 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP2ffd.tmp
    2014-02-08 00:05 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP3604.tmp
    2014-02-05 21:39 - 2013-02-27 00:31 - 02067968 _____ (Microsoft Corporation) C:\Windows\System32\mstscax.dll
    2014-02-05 21:39 - 2012-04-13 17:27 - 00571392 _____ (Microsoft Corporation) C:\Windows\System32\TINTLGNT.IME
    2014-02-05 21:39 - 2012-04-13 17:27 - 00185344 _____ (Microsoft Corporation) C:\Windows\System32\Thawbrkr.dll
    2014-02-05 21:39 - 2012-04-13 17:27 - 00156672 _____ (Microsoft Corporation) C:\Windows\System32\WINZM.IME
    2014-02-05 21:39 - 2012-04-13 17:27 - 00156672 _____ (Microsoft Corporation) C:\Windows\System32\WINSP.IME
    2014-02-05 21:39 - 2012-04-13 17:27 - 00156672 _____ (Microsoft Corporation) C:\Windows\System32\WINPY.IME
    2014-02-05 21:39 - 2012-04-13 17:27 - 00101376 _____ (Microsoft Corporation) C:\Windows\System32\srusbusd.dll
    2014-02-05 21:39 - 2012-04-13 17:27 - 00079360 _____ (Microsoft Corporation) C:\Windows\System32\winar30.ime
    2014-02-05 21:39 - 2012-04-13 17:27 - 00076288 _____ (Microsoft Corporation) C:\Windows\System32\uniime.dll
    2014-02-05 21:39 - 2012-04-13 17:27 - 00072704 _____ (Microsoft Corporation) C:\Windows\System32\WINGB.IME
    2014-02-05 21:39 - 2012-04-13 17:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\System32\winime.ime
    2014-02-05 21:39 - 2012-04-13 17:27 - 00065024 _____ (Microsoft Corporation) C:\Windows\System32\unicdime.ime
    2014-02-05 21:39 - 2012-04-13 17:27 - 00048256 _____ (Microsoft Corporation) C:\Windows\System32\w32.dll
    2014-02-05 21:39 - 2012-04-13 17:27 - 00041600 _____ (Microsoft Corporation) C:\Windows\System32\weitekp9.dll
    2014-02-05 21:39 - 2012-04-13 17:27 - 00038912 _____ (Microsoft Corporation) C:\Windows\System32\sm9Aw.dll
    2014-02-05 21:39 - 2012-04-13 17:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\System32\snmp.exe
    2014-02-05 21:39 - 2012-04-13 17:27 - 00031744 _____ (Microsoft Corporation) C:\Windows\System32\smB6w.dll
    2014-02-05 21:39 - 2012-04-13 17:27 - 00031744 _____ (Microsoft Corporation) C:\Windows\System32\sma3w.dll
    2014-02-05 21:39 - 2012-04-13 17:27 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\SM87w.DLL
    2014-02-05 21:39 - 2012-04-13 17:27 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\SM81w.DLL
    2014-02-05 21:39 - 2012-04-13 17:27 - 00029184 _____ (Microsoft Corporation) C:\Windows\System32\SM8Cw.DLL
    2014-02-05 21:39 - 2012-04-13 17:27 - 00026624 _____ (Microsoft Corporation) C:\Windows\System32\SM93w.DLL
    2014-02-05 21:39 - 2012-04-13 17:27 - 00026624 _____ (Microsoft Corporation) C:\Windows\System32\SM92w.DLL
    2014-02-05 21:39 - 2012-04-13 17:27 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\SM90w.DLL
    2014-02-05 21:39 - 2012-04-13 17:27 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\SM8Dw.DLL
    2014-02-05 21:39 - 2012-04-13 17:27 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\SM8Aw.DLL
    2014-02-05 21:39 - 2012-04-13 17:27 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\SM89w.DLL
    2014-02-05 21:39 - 2012-04-13 17:27 - 00025088 _____ (Microsoft Corporation) C:\Windows\System32\SM59w.DLL
    2014-02-05 21:39 - 2012-04-13 17:27 - 00018944 _____ (Microsoft Corporation) C:\Windows\System32\simptcp.dll
    2014-02-05 21:39 - 2012-04-13 17:27 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\tsprof.exe
    2014-02-05 21:39 - 2012-04-13 17:27 - 00012288 _____ (Microsoft Corporation) C:\Windows\System32\smtpctrs.dll
    2014-02-05 21:39 - 2012-04-13 17:27 - 00008704 _____ (Microsoft Corporation) C:\Windows\System32\snmptrap.exe
    2014-02-05 21:39 - 2012-04-13 17:27 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\snprfdll.dll
    2014-02-05 21:39 - 2012-04-13 17:27 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\snmpmib.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 01875968 _____ (Microsoft Corporation) C:\Windows\System32\msir3jp.lex
    2014-02-05 21:39 - 2012-04-13 17:26 - 00811064 _____ (Microsoft Corporation) C:\Windows\System32\imjp81k.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00482304 _____ (Microsoft Corporation) C:\Windows\System32\PINTLGNT.IME
    2014-02-05 21:39 - 2012-04-13 17:26 - 00340023 _____ (Microsoft Corporation) C:\Windows\System32\imjp81.ime
    2014-02-05 21:39 - 2012-04-13 17:26 - 00131584 _____ (Microsoft Corporation) C:\Windows\System32\pmxviceo.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00119808 _____ (Microsoft Corporation) C:\Windows\System32\mtstocom.exe
    2014-02-05 21:39 - 2012-04-13 17:26 - 00098304 _____ (Microsoft Corporation) C:\Windows\System32\msir3jp.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00094720 _____ (Microsoft Corporation) C:\Windows\System32\imekr61.ime
    2014-02-05 21:39 - 2012-04-13 17:26 - 00092032 _____ (Microsoft Corporation) C:\Windows\System32\mga.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00081920 _____ (Microsoft Corporation) C:\Windows\System32\ieencode.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00079872 _____ (Ricoh Co., Ltd.) C:\Windows\System32\RWia330.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00079872 _____ (Ricoh Co., Ltd.) C:\Windows\System32\RWia001.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00079360 _____ (Microsoft Corporation) C:\Windows\System32\phon.ime
    2014-02-05 21:39 - 2012-04-13 17:26 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\quick.ime
    2014-02-05 21:39 - 2012-04-13 17:26 - 00070656 _____ (Microsoft Corporation) C:\Windows\System32\korwbrkr.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00040960 _____ (Microsoft Corporation) C:\Windows\System32\msiregmv.exe
    2014-02-05 21:39 - 2012-04-13 17:26 - 00035328 _____ (Microsoft Corporation) C:\Windows\System32\iprip.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\lmmib2.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00029184 _____ (Ricoh Co., Ltd.) C:\Windows\System32\RW330Ext.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00027648 _____ (Microsoft Corporation) C:\Windows\System32\RW001Ext.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\romanime.ime
    2014-02-05 21:39 - 2012-04-13 17:26 - 00023040 _____ (Microsoft Corporation) C:\Windows\System32\regtrace.exe
    2014-02-05 21:39 - 2012-04-13 17:26 - 00022528 _____ (Microsoft Corporation) C:\Windows\System32\lpdsvc.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00018944 _____ (Microsoft Corporation) C:\Windows\System32\lprmon.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00018432 _____ (Microsoft Corporation) C:\Windows\System32\JUPIw.DLL
    2014-02-05 21:39 - 2012-04-13 17:26 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\quser.exe
    2014-02-05 21:39 - 2012-04-13 17:26 - 00014848 _____ (Microsoft Corporation) C:\Windows\System32\register.exe
    2014-02-05 21:39 - 2012-04-13 17:26 - 00011264 _____ (Microsoft Corporation) C:\Windows\System32\pmxmcro.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00009728 _____ (Microsoft Corporation) C:\Windows\System32\query.exe
    2014-02-05 21:39 - 2012-04-13 17:26 - 00009216 _____ (Microsoft Corporation) C:\Windows\System32\kbdnecat.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00007680 _____ (Microsoft Corporation) C:\Windows\System32\kbdnecnt.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\kbdnec95.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\kbdibm02.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\kbdlk41a.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\pmxgl.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbdth3.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbdth2.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbdlk41j.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbdinpun.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbdax2.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbd106n.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbd101a.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\kbd101.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdvntc.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdusa.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdurdu.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdth1.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdth0.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdsyr2.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdsyr1.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdintel.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdintam.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdinmar.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdinkan.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdinhin.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdinguj.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdindev.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdheb.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbdfa.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbddiv2.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbddiv1.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbda3.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbda2.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\kbda1.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005120 _____ (Microsoft Corporation) C:\Windows\System32\kbdgeo.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005120 _____ (Microsoft Corporation) C:\Windows\System32\kbdarmw.dll
    2014-02-05 21:39 - 2012-04-13 17:26 - 00005120 _____ (Microsoft Corporation) C:\Windows\System32\kbdarme.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00562176 _____ (Microsoft Corporation) C:\Windows\System32\fxsst.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00514587 _____ (Microsoft Corporation) C:\Windows\System32\edb500.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00451584 _____ (Microsoft Corporation) C:\Windows\System32\fxsapi.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00400384 _____ (Microsoft Corporation) C:\Windows\System32\fxsxp32.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00397312 _____ (Microsoft Corporation) C:\Windows\System32\fxstiff.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00285184 _____ (Microsoft Corporation) C:\Windows\System32\fxscomex.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00267776 _____ (Microsoft Corporation) C:\Windows\System32\fxssvc.exe
    2014-02-05 21:39 - 2012-04-13 17:25 - 00246272 _____ (Microsoft Corporation) C:\Windows\System32\fxst30.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00229376 _____ (Microsoft Corporation) C:\Windows\System32\fxscover.exe
    2014-02-05 21:39 - 2012-04-13 17:25 - 00192512 _____ (Microsoft Corporation) C:\Windows\System32\fxswzrd.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00154112 _____ (Microsoft Corporation) C:\Windows\System32\fxsui.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00142848 _____ (Microsoft Corporation) C:\Windows\System32\fxsclnt.exe
    2014-02-05 21:39 - 2012-04-13 17:25 - 00132608 _____ (Microsoft Corporation) C:\Windows\System32\fxsclntR.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00111104 _____ (Microsoft Corporation) C:\Windows\System32\fxscfgwz.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00101888 _____ (Microsoft Corporation) C:\Windows\System32\evntagnt.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\evntwin.exe
    2014-02-05 21:39 - 2012-04-13 17:25 - 00072192 _____ (Microsoft Corporation) C:\Windows\System32\fxscom.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00057856 _____ (SEIKO EPSON CORP.) C:\Windows\System32\esuimgd.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00055296 _____ (Microsoft Corporation) C:\Windows\System32\fxsevent.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00045056 _____ (SEIKO EPSON CORP.) C:\Windows\System32\esunid.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00043520 _____ (Microsoft Corporation) C:\Windows\System32\fcachdll.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\hostmib.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00031744 _____ (SEIKO EPSON CORP.) C:\Windows\System32\esucmd.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00031744 _____ (Microsoft Corporation) C:\Windows\System32\fxsroute.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00026624 _____ (Microsoft Corporation) C:\Windows\System32\fxsdrv.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00024064 _____ (Microsoft Corporation) C:\Windows\System32\evntcmd.exe
    2014-02-05 21:39 - 2012-04-13 17:25 - 00023552 _____ (Microsoft Corporation) C:\Windows\System32\fxsmon.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00023552 _____ (Microsoft Corporation) C:\Windows\System32\fxsext32.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00014848 _____ (Microsoft Corporation) C:\Windows\System32\flattemp.exe
    2014-02-05 21:39 - 2012-04-13 17:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\System32\fxssend.exe
    2014-02-05 21:39 - 2012-04-13 17:25 - 00008704 _____ (Microsoft Corporation) C:\Windows\System32\fxsperf.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\f3ahvoas.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\fxsres.dll
    2014-02-05 21:39 - 2012-04-13 17:25 - 00006144 _____ (Microsoft Corporation) C:\Windows\System32\ftlx041e.dll
    2014-02-05 21:39 - 2010-12-21 06:26 - 00677888 _____ (Microsoft Corporation) C:\Windows\System32\mstsc.exe
    2014-02-05 21:39 - 2009-03-08 04:33 - 00229376 _____ (Microsoft Corporation) C:\Windows\System32\ieaksie.dll
    2014-02-05 21:39 - 2009-03-08 04:33 - 00152064 _____ (Microsoft Corporation) C:\Windows\System32\ieakeng.dll
    2014-02-05 21:39 - 2009-03-08 04:32 - 00161792 _____ (Microsoft Corporation) C:\Windows\System32\ieakui.dll
    2014-02-05 21:39 - 2009-03-08 04:32 - 00092672 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll
    2014-02-05 21:39 - 2009-03-08 04:32 - 00055296 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
    2014-02-05 21:39 - 2009-03-08 04:32 - 00043008 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
    2014-02-05 21:39 - 2009-03-08 04:31 - 01383424 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
    2014-02-05 21:39 - 2009-03-08 04:31 - 00214528 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
    2014-02-05 21:39 - 2009-03-08 04:31 - 00048128 _____ (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
    2014-02-05 21:39 - 2009-03-08 04:31 - 00045568 _____ (Microsoft Corporation) C:\Windows\System32\mshta.exe
    2014-02-05 21:39 - 2009-03-08 04:31 - 00044544 _____ (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
    2014-02-05 21:39 - 2009-03-08 04:31 - 00036352 _____ (Microsoft Corporation) C:\Windows\System32\imgutil.dll
    2014-02-05 21:39 - 2009-03-08 04:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\System32\tdc.ocx
    2014-02-05 21:39 - 2008-06-04 13:20 - 00231424 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
    2014-02-05 21:39 - 2004-08-04 07:00 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\migisol.exe
    2014-02-05 21:38 - 2013-10-08 16:54 - 00014976 ____N (Microsoft Corporation) C:\Windows\System32\Drivers\USBSCAN.SYS
    2014-02-05 21:38 - 2013-10-08 16:51 - 00032384 ____N (Microsoft Corporation) C:\Windows\System32\Drivers\usbccgp.sys
    2014-02-05 21:38 - 2013-03-21 18:31 - 00012928 ____N (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023x.sys
    2014-02-05 21:38 - 2012-04-13 17:27 - 00031232 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\weitekp9.sys
    2014-02-05 21:38 - 2012-04-13 17:27 - 00021896 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tdipx.sys
    2014-02-05 21:38 - 2012-04-13 17:27 - 00019464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tdspx.sys
    2014-02-05 21:38 - 2012-04-13 17:27 - 00013192 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tdasync.sys
    2014-02-05 21:38 - 2012-04-13 17:26 - 00092416 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mga.sys
    2014-02-05 21:38 - 2012-04-13 17:26 - 00020736 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ramdisk.sys
    2014-02-05 21:38 - 2012-04-13 17:25 - 01677824 _____ (Microsoft Corporation) C:\Windows\System32\chsbrkr.dll
    2014-02-05 21:38 - 2012-04-13 17:25 - 00838144 _____ (Microsoft Corporation) C:\Windows\System32\chtbrkr.dll
    2014-02-05 21:38 - 2012-04-13 17:25 - 00218112 _____ (Microsoft Corporation) C:\Windows\System32\c_g18030.dll
    2014-02-05 21:38 - 2012-04-13 17:25 - 00078848 _____ (Microsoft Corporation) C:\Windows\System32\dayi.ime
    2014-02-05 21:38 - 2012-04-13 17:25 - 00078336 _____ (Microsoft Corporation) C:\Windows\System32\chajei.ime
    2014-02-05 21:38 - 2012-04-13 17:25 - 00054528 _____ (Philips Semiconductors GmbH) C:\Windows\System32\Drivers\cap7146.sys
    2014-02-05 21:38 - 2012-04-13 17:25 - 00025856 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\et4000.sys
    2014-02-05 21:38 - 2012-04-13 17:25 - 00021504 _____ (Microsoft Corporation) C:\Windows\System32\CINTLGNT.IME
    2014-02-05 21:38 - 2012-04-13 17:25 - 00018944 _____ (Microsoft Corporation) C:\Windows\System32\cprofile.exe
    2014-02-05 21:38 - 2012-04-13 17:25 - 00015872 _____ (Microsoft Corporation) C:\Windows\System32\chgport.exe
    2014-02-05 21:38 - 2012-04-13 17:25 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\chgusr.exe
    2014-02-05 21:38 - 2012-04-13 17:25 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\chglogon.exe
    2014-02-05 21:38 - 2012-04-13 17:25 - 00010752 _____ (Microsoft Corporation) C:\Windows\System32\c_iscii.dll
    2014-02-05 21:38 - 2012-04-13 17:25 - 00009728 _____ (Microsoft Corporation) C:\Windows\System32\change.exe
    2014-02-05 21:38 - 2012-04-13 17:25 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\c_is2022.dll
    2014-02-05 21:38 - 2012-04-13 17:25 - 00005632 _____ (Microsoft Corporation) C:\Windows\System32\adsiisex.dll
    2014-02-05 21:38 - 2009-03-08 04:32 - 00123904 _____ (Microsoft Corporation) C:\Windows\System32\advpack.dll
    2014-02-05 21:38 - 2009-03-08 04:32 - 00071680 _____ (Microsoft Corporation) C:\Windows\System32\admparse.dll
    2014-02-05 21:38 - 2009-03-08 04:31 - 00346624 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
    2014-02-05 20:02 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfce7.tmp
    2014-02-05 20:00 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPedd7.tmp
    2014-02-05 19:50 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP4226.tmp
    2014-02-05 19:48 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP42f8.tmp
    2014-02-05 19:45 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf4a6.tmp
    2014-02-05 19:30 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf8cb.tmp
    2014-02-05 19:27 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP1e29.tmp
    2014-02-05 19:25 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf5fa.tmp
    2014-02-05 19:22 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP308b.tmp
    2014-02-05 19:21 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPf6cc.tmp
    2014-02-05 19:18 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPeb88.tmp
    2014-02-05 19:11 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP0a0b.tmp
    2014-02-05 19:02 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPa757.tmp
    2014-02-05 18:58 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP5cf2.tmp
    2014-02-05 18:55 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPd042.tmp
    2014-02-04 16:02 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP065e.tmp
    2014-02-04 15:59 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP45bf.tmp
    2014-02-04 15:57 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP0be2.tmp
    2014-02-04 15:55 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMPfda5.tmp
    2014-02-04 15:52 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP1e13.tmp
    2014-02-04 15:49 - 2012-04-13 11:41 - 00090112 _____ () C:\Windows\DUMP1b42.tmp
    2014-02-04 15:43 - 2012-04-13 17:20 - 01091474 _____ () C:\Windows\WindowsUpdate.log
    2014-02-04 15:32 - 2004-08-04 07:00 - 00013646 _____ () C:\Windows\System32\wpa.dbl
    2014-02-03 16:39 - 2013-11-11 10:27 - 00006902 _____ () C:\Windows\TMFilter.log
    2014-02-03 16:39 - 2012-04-13 17:45 - 00032476 _____ () C:\Windows\SchedLgU.Txt
    2014-02-03 16:39 - 2012-04-13 17:45 - 00000178 ___SH () C:\Documents and Settings\Owner\ntuser.ini
    2014-02-02 11:55 - 2013-01-22 11:08 - 00000000 ____D () C:\Documents and Settings\Owner\Application Data\MapsGalaxy_39
    2014-01-18 17:28 - 2013-11-13 08:09 - 00033670 _____ () C:\Windows\setupapi.log
    2014-01-18 16:13 - 2014-01-18 16:11 - 00000000 ____D () C:\Documents and Settings\Owner\Desktop\MADISON COUNTY
    2014-01-15 16:55 - 2013-07-24 22:07 - 00000000 ____D () C:\Windows\System32\MRT
    2014-01-15 16:51 - 2014-01-15 16:50 - 00009900 _____ () C:\Windows\KB2914368.log
    2014-01-15 16:51 - 2013-11-13 08:09 - 00074195 _____ () C:\Windows\FaxSetup.log
    2014-01-15 16:51 - 2013-11-13 08:09 - 00037752 _____ () C:\Windows\ocgen.log
    2014-01-15 16:51 - 2013-11-13 08:09 - 00028308 _____ () C:\Windows\tsoc.log
    2014-01-15 16:51 - 2013-11-13 08:09 - 00024444 _____ () C:\Windows\comsetup.log
    2014-01-15 16:51 - 2013-11-13 08:09 - 00014840 _____ () C:\Windows\ntdtcsetup.log
    2014-01-15 16:51 - 2013-11-13 08:09 - 00011846 _____ () C:\Windows\iis6.log
    2014-01-15 16:51 - 2013-11-13 08:09 - 00004104 _____ () C:\Windows\ocmsn.log
    2014-01-15 16:51 - 2013-11-13 08:09 - 00003708 _____ () C:\Windows\msgsocm.log
    2014-01-15 16:51 - 2013-11-13 08:09 - 00001374 _____ () C:\Windows\imsins.log
    2014-01-15 16:51 - 2012-04-18 10:07 - 83425928 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
    2014-01-15 16:50 - 2014-01-15 16:50 - 00000000 __HDC () C:\Windows\$NtUninstallKB2914368$
    2014-01-15 15:51 - 2012-04-18 10:49 - 00000000 ____D () C:\Program Files\Common Files\Adobe

    Some content of TEMP:
    ====================
    C:\Documents and Settings\Owner\Local Settings\Temp\avgnt.exe


    ==================== Known DLLs (Whitelisted) ============


    ==================== Bamital & volsnap Check =================

    C:\Windows\explorer.exe => MD5 is legit
    C:\Windows\System32\winlogon.exe => MD5 is legit
    C:\Windows\System32\svchost.exe => MD5 is legit
    C:\Windows\System32\services.exe => MD5 is legit
    C:\Windows\System32\User32.dll => MD5 is legit
    C:\Windows\System32\userinit.exe => MD5 is legit
    C:\Windows\System32\rpcss.dll => MD5 is legit
    C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

    ==================== EXE ASSOCIATION =====================

    HKLM\...\.exe: exefile => OK
    HKLM\...\exefile\DefaultIcon: %1 => OK
    HKLM\...\exefile\open\command: "%1" %* => OK

    ==================== Restore Points (XP) =====================

    RP: -> 2014-01-13 20:13 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP90

    RP: -> 2014-01-12 18:56 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP89

    RP: -> 2013-12-29 19:03 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP88

    RP: -> 2013-12-26 23:02 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP87

    RP: -> 2013-12-24 13:21 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP86

    RP: -> 2013-12-24 13:04 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP85

    RP: -> 2013-12-21 11:49 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP84

    RP: -> 2013-12-08 12:05 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP83

    RP: -> 2013-11-21 09:27 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP82

    RP: -> 2013-11-19 17:15 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP81

    RP: -> 2013-11-13 08:00 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP80

    RP: -> 2013-11-11 18:26 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP79

    RP: -> 2013-11-10 16:54 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP78

    RP: -> 2013-11-05 08:43 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP77

    RP: -> 2013-11-03 18:45 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP76

    RP: -> 2013-10-31 17:55 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP75

    RP: -> 2013-10-30 16:47 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP74

    RP: -> 2013-10-26 20:42 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP73

    RP: -> 2013-10-25 20:35 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP72

    RP: -> 2013-10-17 21:30 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP71

    RP: -> 2013-10-17 20:55 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP70


    ==================== Memory info ===========================

    Percentage of memory in use: 35%
    Total physical RAM: 510.21 MB
    Available physical RAM: 330.29 MB
    Total Pagefile: 461.96 MB
    Available Pagefile: 336.26 MB
    Total Virtual: 2047.88 MB
    Available Virtual: 1999.8 MB

    ==================== Drives ================================

    Drive b: (RAMDisk) (Fixed) (Total:0.06 GB) (Free:0.06 GB) NTFS
    Drive c: () (Fixed) (Total:55.89 GB) (Free:37.06 GB) NTFS ==>[Drive with boot components (Windows XP)]
    Drive d: () (Removable) (Total:0.94 GB) (Free:0.94 GB) FAT
    Drive x: (ReatogoPE) (CDROM) (Total:0.43 GB) (Free:0 GB) CDFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows XP) (Size: 56 GB) (Disk ID: 9DC96E9E)
    Partition 1: (Active) - (Size=56 GB) - (Type=07 NTFS)

    ========================================================
    Disk: 1 (Size: 960 MB) (Disk ID: 293ACF7A)
    Partition 1: (Not Active) - (Size=960 MB) - (Type=06)

    ==================== End Of Log ============================
     
    JAK,
    #8
  10. 2014/02/14
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    I need to know when was the last time the computer booted.
     
    broni,
    #9
  11. 2014/02/14
    JAK

    JAK Well-Known Member Thread Starter

    Joined:
    2002/01/19
    Messages:
    366
    Likes Received:
    0
    You mean when my friend booted it successfully? Don't know. I would guess in the last couple of weeks. I would have to call him later.
     
    JAK,
    #10
  12. 2014/02/14
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Let's try January 13th. That's the last valid restore point.

    Download attached fixlist.txt file and save it to the very same USB flash drive you've been using. Plug the drive back in.

    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

    On Vista or Windows 7/8: Now please enter System Recovery Options.
    On Windows XP: Now please boot into the OTLPE CD.
    Run [color= "#0000FF"]FRST(FRST64)[/color] and press the Fix button just once and wait.
    The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.

    See if you can boot normally.
     

    Attached Files:

    broni,
    #11
  13. 2014/02/14
    JAK

    JAK Well-Known Member Thread Starter

    Joined:
    2002/01/19
    Messages:
    366
    Likes Received:
    0
    Bingo. It's booting normally. Seems to be running aok. Just slow from the 512 mb RAM. Will add to that. Just set a system restore point. Thanks so much. Here's the log:

    Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 12-02-2014 01
    Ran by SYSTEM at 2014-02-14 20:08:13 Run:1
    Running from D:\
    Boot Mode: Recovery

    ==============================================

    Content of fixlist:
    *****************
    RP: -> 2014-01-13 20:13 - 020480 _restore{DA9711D8-EB55-4E79-9A57-96069ED1FA0A}\RP90
    *****************

    SAM hive was successfully restored from Restore Point.
    SECURITY hive was successfully restored from Restore Point.
    Software hive was successfully restored from Restore Point.
    System hive was successfully restored from Restore Point.
    Default hive was successfully restored from Restore Point.

    ==== End of Fixlog ====
     
    JAK,
    #12
  14. 2014/02/14
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Good news :)
     
    broni,
    #13
  15. 2014/02/14
    JAK

    JAK Well-Known Member Thread Starter

    Joined:
    2002/01/19
    Messages:
    366
    Likes Received:
    0
    I set restore point 4 times and it doesn't show it in the system restore folder or in ccleaner. ? The older ones are still there, but it says none have been created for today. When I created each one before it said that the sr point was created successfully.
     
    JAK,
    #14
  16. 2014/02/14
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Just to be on a safe side use these instructions to create your registry backup: http://www.smartestcomputing.us.com/topic/58278-tweakingcom-registry-backup/
    In fact I use the above tool instead of system restore because I think it's better.

    In any case when done with the above turn system restore off.
    Restart computer.
    Turn system restore on.
    That should clear all restore points and create new one.
    Check if it did.
     
    broni,
    #15
  17. 2014/02/14
    JAK

    JAK Well-Known Member Thread Starter

    Joined:
    2002/01/19
    Messages:
    366
    Likes Received:
    0
    Bingo again. So now we have restore points in tweaking and in system restore? And you've had better luck with tweaking? thanks!
     
    JAK,
    #16
  18. 2014/02/14
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    It's more thorough and (read tool manual) it's easy to access its registry back up from Recovery Console\Command Prompt if the computer becomes unbootable.

    Good news though :)
     
    broni,
    #17
  19. 2014/02/14
    JAK

    JAK Well-Known Member Thread Starter

    Joined:
    2002/01/19
    Messages:
    366
    Likes Received:
    0
    thanks so much
     
    JAK,
    #18
  20. 2014/02/14
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    You're very welcome
     
    broni,
    #19
    JAK likes this.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...