1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Solved: Stop c0000135 %hs error

Discussion in 'Windows 7' started by SpringOnion, Jun 1, 2014.

Thread Status:
Not open for further replies.
  1. SpringOnion

    SpringOnion Thread Starter

    Joined:
    Jun 1, 2014
    Messages:
    2
    Keep having problems with booting up windows 7 with the error

    Stop C0000135 The program can't start because %hs is missing from your computer. Try reinstalling the program to fix this problem.

    Following the suggestions of the other posts with the same problem i performed a FRST scan and search:

    FRST.txt:

    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-06-2014
    Ran by SYSTEM on MININT-0MSCAH8 on 02-06-2014 02:20:56
    Running from F:\
    Platform: Windows 7 Home Premium (X64) OS Language: English(US)
    Internet Explorer Version 9
    Boot Mode: Recovery

    The current controlset is ControlSet001
    ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.


    The only official download link for FRST:
    Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
    Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
    Download link from any site other than Bleeping Computer is unpermitted or outdated.
    See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Registry (Whitelisted) ==================

    HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-06-18] (IDT, Inc.)
    HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2010-03-17] (Synaptics Incorporated)
    HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [5712896 2010-02-02] (Dell Inc.)
    HKLM\...\Run: [IntelliPoint] => c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-07-31] (Microsoft Corporation)
    HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-06-08] (Intel Corporation)
    HKLM-x32\...\Run: [TRUUpdater] => C:\Program Files (x86)\Sierra Wireless Inc\WebUpdater\TRUUpdater.exe [570736 2010-08-04] (Sierra Wireless, Inc.)
    HKLM-x32\...\Run: [WatcherHelper] => C:\Program Files (x86)\Telstra\Telstra Connection Manager\WaHelper.exe [103792 2010-06-22] (Sierra Wireless Inc.)
    HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-18] (Advanced Micro Devices, Inc.)
    HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3888648 2014-05-26] (AVAST Software)
    HKLM\...\RunOnce: [*Restore] - C:\Windows\system32\rstrui.exe /RUNONCE [296960 2010-11-20] (Microsoft Corporation)
    HKU\Andrew\...\Run: [F.lux] => C:\Users\Andrew\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-15] (Flux Software LLC)
    HKU\Andrew\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-05] (Google)
    HKU\Andrew\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
    HKU\Andrew\...\Policies\Explorer: [NoDriveTypeAutoRun] 0xDD000000
    HKU\Andrew\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
    HKU\Default\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
    HKU\Default User\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
    HKU\DefaultAppPool\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
    Startup: C:\Users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
    ShortcutTarget: Dropbox.lnk -> (No File)

    ==================== Services (Whitelisted) =================

    S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-05-05] (Perfect World Entertainment Inc)
    S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-04] (AVAST Software)
    S2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
    S2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
    S2 iprip; C:\Windows\System32\iprip.dll [35328 2009-07-13] (Microsoft Corporation)
    S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2012-07-08] ()
    S2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [189248 2012-07-08] ()
    S2 SNMP; C:\Windows\System32\snmp.exe [49664 2010-11-20] (Microsoft Corporation)
    S2 SNMP; C:\Windows\SysWOW64\snmp.exe [47616 2010-11-20] (Microsoft Corporation)
    S2 SwiCardDetectSvc; C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe [288112 2010-08-30] (Sierra Wireless, Inc.)
    S2 UCManSvc; C:\Program Files (x86)\SoftDenchi\UCManSvc.exe [186512 2012-10-31] (Paltiosoft Inc.)
    S2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
    S2 wltrysvc; C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe [5088256 2010-02-02] (Dell Inc.)
    S2 ZhuDongFangYu; C:\Program Files (x86)\360\360safe\deepscan\zhudongfangyu.exe [224192 2013-09-22] (360.cn)

    ==================== Drivers (Whitelisted) ====================

    S2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-05-04] ()
    S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-05-04] (AVAST Software)
    S1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-05-04] (AVAST Software)
    S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-05-04] ()
    S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-15] (AVAST Software)
    S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-15] (AVAST Software)
    S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-15] (AVAST Software)
    S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-05-04] ()
    S1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-12-26] (Disc Soft Ltd)
    S3 SaiK1705; C:\Windows\System32\DRIVERS\SaiK1705.sys [180584 2012-09-19] (Saitek)
    S3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-29] (Saitek)
    S3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-29] (Saitek)
    S3 SaiU1705; C:\Windows\System32\DRIVERS\SaiU1705.sys [47208 2012-09-19] (Saitek)
    S2 STEC3; C:\Windows\SysWOW64\STEC3.sys [2368 2014-04-11] (AntiCracking)
    S3 swiwdmbus; C:\Windows\System32\DRIVERS\swiwdmbusx64.sys [102656 2010-06-21] (Sierra Wireless Inc.)
    S3 SWNC8UA3; C:\Windows\System32\DRIVERS\swnc8ua3.sys [286720 2010-06-20] (Sierra Wireless Inc.)
    S3 SWUMXA3; C:\Windows\System32\DRIVERS\swumxa3.sys [210944 2010-06-20] (Sierra Wireless Inc.)
    S3 tapoas; C:\Windows\System32\DRIVERS\tapoas.sys [30720 2012-07-14] (The OpenVPN Project)
    S2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
    S3 CtClsFlt; system32\DRIVERS\CtClsFlt.sys [X]
    S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
    S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
    S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
    S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
    S3 SWUMX20; system32\DRIVERS\swumx20.sys [X]

    ========================== Drivers MD5 =======================

    C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
    C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
    C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\adp94xx.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\adpahci.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\adpu320.sys ==> MD5 is legit
    C:\Windows\system32\drivers\afd.sys 1C7857B62DE5994A75B054A9FD4C3825
    C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
    C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
    C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\amdk8.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\atikmdag.sys FBB35875FEFE53D4280259842069ED72
    C:\Windows\System32\DRIVERS\atikmpag.sys A32BCAD9377E3B75D034CAFBA463A0AE
    C:\Windows\system32\DRIVERS\amdppm.sys ==> MD5 is legit
    C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49
    C:\Windows\system32\DRIVERS\amdsbs.sys ==> MD5 is legit
    C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048
    C:\Windows\system32\drivers\appid.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\arc.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\arcsas.sys ==> MD5 is legit
    C:\Windows\system32\drivers\aswHwid.sys 340B0467E98A8C92697D73034DB4BCB7
    C:\Windows\system32\drivers\aswMonFlt.sys ED5B09937D559FFA53FC988D20031E98
    C:\Windows\system32\drivers\aswRdr2.sys 33C77DCB0AEC76E26BD6352A1A5281BB
    C:\Windows\System32\Drivers\aswRvrt.sys BF5B9E9E97CED45208E498D9FA73688F
    C:\Windows\system32\drivers\aswSnx.sys F88CE00A7736C349ED1414D7ECDC9BED
    C:\Windows\system32\drivers\aswSP.sys 3AE912B08E2A1ABB2B63F3C56BED95C2
    C:\Windows\system32\drivers\aswStm.sys A7115ED31675BB823CFA9FE571C25676
    C:\Windows\System32\Drivers\aswVmm.sys 47CBD3F64E412FFAFD93404580A3C7B9
    C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
    C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
    C:\Windows\System32\drivers\AtihdW76.sys 437F55435623D4D54D36197F5AD8B435
    C:\Windows\System32\drivers\AtiHdmi.sys 2D648572BA9A610952FCAFBA1E119C2D
    C:\Windows\system32\DRIVERS\bxvbda.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit
    C:\Windows\System32\drivers\BCM42RLY.sys AC4E2D84DE54CD3A013AEFF0CC56095C
    C:\Windows\System32\DRIVERS\bcmwl664.sys 8B5D16D20774FC3727F44E161BE2C0AC
    C:\Windows\System32\DRIVERS\bcmvwl64.sys D224B2E6BB543F1D8F1177D57FEC2950
    C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\BrFiltLo.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\BrFiltUp.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
    C:\Windows\system32\drivers\BthEnum.sys CF98190A94F62E405C8CB255018B2315
    C:\Windows\system32\DRIVERS\bthmodem.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\bthpan.sys 02DD601B708DD0667E1331FA8518E9FF
    C:\Windows\System32\Drivers\BTHport.sys 738D0E9272F59EB7A1449C3EC118E6C4
    C:\Windows\System32\Drivers\BTHUSB.sys F188B7394D81010767B6DF3178519A37
    C:\Windows\System32\drivers\btusbflt.sys D3466F77C2C49C6E393BA5FBA963A33E
    C:\Windows\System32\drivers\btwaudio.sys AF838D8029AE7C27470862D63FA54D24
    C:\Windows\System32\DRIVERS\btwavdt.sys 5C849BD7C78791C5CEE9F4651D7FE38D
    C:\Windows\System32\DRIVERS\btwl2cap.sys 6149301DC3F81D6F9667A3FBAC410975
    C:\Windows\System32\DRIVERS\btwrchid.sys 3E1991AFA851A36DC978B0A1B0535C8B
    C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\circlass.sys ==> MD5 is legit
    C:\Windows\System32\CLFS.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\CmBatt.sys ==> MD5 is legit
    C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\cng.sys AAFCB52FE0037207FB6FBEA070D25EFE
    C:\Windows\System32\DRIVERS\compbatt.sys ==> MD5 is legit
    C:\Windows\system32\drivers\CompositeBus.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\crcdisk.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\dc3d.sys 7AF9DAC504FBD047CBC3E64AE52C92BF
    C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
    C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\disk.sys ==> MD5 is legit
    C:\Windows\System32\drivers\drmkaud.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\dtsoftbus01.sys 6A0E850DDCB136AA3D2FB7234382DF12
    C:\Windows\System32\drivers\dxgkrnl.sys AF2E16242AA723F68F461B6EAE2EAD3D
    C:\Windows\system32\DRIVERS\evbda.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\elxstor.sys ==> MD5 is legit
    C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\facap.sys 2C1D443E14F376E8331F52F135DCA9EF
    C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\fdc.sys ==> MD5 is legit
    C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
    C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\flpydisk.sys ==> MD5 is legit
    C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
    C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B
    C:\Windows\System32\DRIVERS\fvevol.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\gagp30kx.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\hamachi.sys 1E6438D4EA6E1174A3B3B1EDC4DE660B
    C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
    C:\Windows\system32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A
    C:\Windows\system32\drivers\HDAudBus.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\HECIx64.sys B6AC71AAA2B10848F57FC49D55A651AF
    C:\Windows\system32\DRIVERS\HidBatt.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\hidbth.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\hidir.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit
    C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
    C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit
    C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
    C:\Windows\system32\drivers\i8042prt.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\iaStor.sys 2064090C9FAAD92C090D77E50E735B2E
    C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366
    C:\Windows\System32\DRIVERS\igdkmd64.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\iirsp.sys ==> MD5 is legit
    C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
    C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
    C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
    C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
    C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
    C:\Windows\system32\drivers\msiscsi.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\ksecdd.sys 97A7070AEA4C058B6418519E869A63B4
    C:\Windows\System32\Drivers\ksecpkg.sys 7EFB9333E4ECCE6AE4AE9D777D9E553E
    C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 is legit
    C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 is legit
    C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
    C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit
    C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
    C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
    C:\Windows\system32\drivers\mrxdav.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\mrxsmb.sys A5D9106A73DC88564C825D317CAC68AC
    C:\Windows\System32\DRIVERS\mrxsmb10.sys D711B3C1D5F42C0C2415687BE09FC163
    C:\Windows\System32\DRIVERS\mrxsmb20.sys 9423E9D355C8D303E76B8CFBD8A5C30C
    C:\Windows\System32\drivers\msahci.sys ==> MD5 is legit
    C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
    C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
    C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
    C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
    C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
    C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
    C:\Windows\system32\drivers\mssmbios.sys ==> MD5 is legit
    C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
    C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88
    C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit
    C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\Ntfs.sys B98F8C6E31CD07B2E6F71F7F648E38C0
    C:\Windows\System32\DRIVERS\NuidFltr.sys 317020D31F1696334679B9D0416EB62E
    C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
    C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
    C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
    C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
    C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\parport.sys ==> MD5 is legit
    C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
    C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
    C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit
    C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
    C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\pneteth.sys A010F13D27C1033A8BE09D5FA9BF348B
    C:\Windows\System32\DRIVERS\point64.sys 4F0878FD62D5F7444C5F1C4C66D9D293
    C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\PxHlpa64.sys 87B04878A6D59D6C79251DC960C674C1
    C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit
    C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\rdpbus.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
    C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
    C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
    C:\Windows\System32\drivers\rdpvideominiport.sys 313F68E1A3E6345A4F47A36B07062F34
    C:\Windows\System32\Drivers\RDPWD.sys E61608AA35E98999AF9AAEEEA6114B0A
    C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\rfcomm.sys 3DD798846E2C28102B922C56E71B7932
    C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\RtsUStor.sys 135A64530D7699AD48F29D73A658DD11
    C:\Windows\System32\DRIVERS\Rt64win7.sys EE082E06A82FF630351D1E0EBBD3D8D0
    C:\Windows\System32\DRIVERS\SaiK1705.sys B3A62D2AEED3DE93239252A2DFFA9728
    C:\Windows\System32\DRIVERS\SaiMini.sys B08581EDF3290210D3366CD2D992F6C2
    C:\Windows\System32\drivers\SaiBus.sys D086C2F45D328C2F63FC6B4CD79FCB66
    C:\Windows\System32\DRIVERS\SaiU1705.sys 338F85CC164C90F46B5580D94F1E740E
    C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\serenum.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\serial.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit
    C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
    C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
    C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\Sftfslh.sys 2046AA7491DE7EFA4D70E615D9BC9D09
    C:\Windows\System32\DRIVERS\Sftplaylh.sys 0E0446BC4D51BE4263ACB7E33491191C
    C:\Windows\System32\DRIVERS\Sftredirlh.sys C5FB982CD266E604ED3142102C26D62C
    C:\Windows\System32\DRIVERS\Sftvollh.sys 2575511AF67AA1FA068CCC4918E2C2A3
    C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
    C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B
    C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28
    C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3
    C:\Windows\SysWOW64\STEC3.sys E4EBF293D1F612BDA19B646C36715B20
    C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\stwrt64.sys 4304B75094E106FB5423A290C95841E5
    C:\Windows\system32\drivers\swenum.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\swiwdmbusx64.sys C89FFA6A0B7723F2FB72A734934A4425
    C:\Windows\System32\DRIVERS\swnc8ua3.sys 20D0580136847D1A1898085943F3C4C7
    C:\Windows\System32\DRIVERS\swumxa3.sys F6CEB2FF475265197D4407E87FF68701
    C:\Windows\System32\DRIVERS\SynTP.sys 8A3FBCB3D6D4710730D27DA4392A4863
    C:\Windows\System32\DRIVERS\tapoas.sys 927D0CDB3F96EFC1E98FB1A2C9FB67AD
    C:\Windows\System32\drivers\tcpip.sys DB74544B75566C974815E79A62433F29
    C:\Windows\System32\DRIVERS\tcpip.sys DB74544B75566C974815E79A62433F29
    C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC
    C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
    C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
    C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit
    C:\Windows\system32\drivers\termdd.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\tssecsrv.sys 4CE278FC9671BA81A138D70823FCAA09
    C:\Windows\System32\drivers\tsusbflt.sys E9981ECE8D894CEF7038FD1D040EB426
    C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\TurboB.sys 825E7A1F48FB8BCFBA27C178AAB4E275
    C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
    C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
    C:\Windows\system32\drivers\umbus.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\umpass.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\usbccgp.sys 6F1A3157A1C89435352CEB543CDB359C
    C:\Windows\system32\drivers\usbcir.sys ==> MD5 is legit
    C:\Windows\system32\drivers\usbehci.sys C025055FE7B87701EB042095DF1A2D7B
    C:\Windows\System32\DRIVERS\usbhub.sys 287C6C9410B111B68B52CA298F7B8C24
    C:\Windows\system32\drivers\usbohci.sys 9840FC418B4CBD632D3D0A667A725C31
    C:\Windows\system32\DRIVERS\usbprint.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6
    C:\Windows\system32\drivers\usbuhci.sys 62069A34518BCF9C1FD9E74B3F6DB7CD
    C:\Windows\System32\Drivers\usbvideo.sys 454800C2BC7F3927CE030141EE4F4C50
    C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
    C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
    C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
    C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
    C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
    C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
    C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\vwifibus.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\vwififlt.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
    C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit
    C:\Windows\System32\drivers\Wdf01000.sys 442783E2CB0DA19873B7A63833FF4CB4
    C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\wimfltr.sys ==> MD5 is legit
    C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
    C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 is legit
    C:\Windows\System32\DRIVERS\WinUsb.sys FE88B288356E7B47B74B13372ADD906D
    C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
    C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
    C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
    C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659
    C:\Windows\System32\DRIVERS\yk62x64.sys B3EEACF62445E24FBB2CD4B0FB4DB026

    ==================== NetSvcs (Whitelisted) ===================


    ==================== One Month Created Files and Folders ========

    2014-06-02 02:20 - 2014-06-02 02:20 - 00000000 ____D () C:\FRST
    2014-05-31 12:56 - 2014-05-31 12:56 - 00000000 ____D () C:\ProgramData\Stardock
    2014-05-31 12:56 - 2014-05-31 12:56 - 00000000 ____D () C:\ProgramData\Ironclad Games
    2014-05-31 11:53 - 2014-05-31 11:54 - 02194587 _____ () C:\Users\Andrew\Downloads\Lecture 13 - Exam Prep.ppt.pptx
    2014-05-31 11:49 - 2014-05-31 11:49 - 00000227 _____ () C:\Users\Andrew\Desktop\Sins of a Solar Empire Rebellion.url
    2014-05-31 00:40 - 2014-05-31 00:40 - 00000326 _____ () C:\Windows\PFRO.log
    2014-05-30 11:50 - 2014-05-30 11:50 - 00003440 _____ () C:\Windows\System32\Tasks\{D9B99651-6F1A-4BCE-AEE9-6719909AABC6}
    2014-05-30 11:37 - 2014-05-30 11:37 - 00000227 _____ () C:\Users\Andrew\Desktop\Distant Worlds Universe.url
    2014-05-30 11:14 - 2014-05-30 11:14 - 00000000 ____D () C:\Users\Andrew\AppData\Roaming\Code Force Limited
    2014-05-29 04:18 - 2014-05-29 04:19 - 13843002 _____ () C:\Users\Andrew\Downloads\cockatrice_win32_20140517_git-05172004a.exe
    2014-05-29 04:17 - 2014-05-29 04:18 - 13858582 _____ () C:\Users\Andrew\Downloads\cockatrice_win32_20140517_git-05172014_DEV.exe
    2014-05-29 04:11 - 2014-05-29 04:11 - 08828533 _____ () C:\Users\Andrew\Downloads\cards (JOU).xml
    2014-05-27 02:22 - 2014-05-27 02:41 - 03277460 _____ () C:\Users\Andrew\Downloads\LunarisFilia.part05.rar.part
    2014-05-27 02:19 - 2014-05-27 02:41 - 04522334 _____ () C:\Users\Andrew\Downloads\Pr3dt0r87_share2uvn.mkv.part
    2014-05-27 02:14 - 2014-05-27 02:41 - 07450983 _____ () C:\Users\Andrew\Downloads\FortuneArterial.part12.rar.part
    2014-05-27 02:14 - 2014-05-27 02:14 - 00018451 _____ () C:\Users\Andrew\Downloads\FA-x64patch.rar
    2014-05-27 02:14 - 2010-08-31 06:48 - 00017902 _____ () C:\Users\Andrew\Downloads\FA-x64patch.exe
    2014-05-26 05:47 - 2014-05-26 05:47 - 00041993 _____ () C:\Users\Andrew\Downloads\BlackopsSupportv50.zip
    2014-05-26 02:56 - 2014-05-29 10:48 - 45676130 _____ () C:\Users\Andrew\Downloads\Best-Movies.info_Terminator.1984.720p.BluRayx264.YIFY.mp4.part
    2014-05-25 16:49 - 2014-05-26 10:20 - 131206030 _____ () C:\Users\Andrew\Downloads\Seitenkan.part4.rar.part
    2014-05-25 16:41 - 2014-05-26 10:20 - 119678905 _____ () C:\Users\Andrew\Downloads\Seitenkan.part1.rar.part
    2014-05-25 06:22 - 2014-05-29 10:49 - 121748233 _____ () C:\Users\Andrew\Downloads\YIFY.info_-_Waynes.World.2.1993.720p.BRrip.rar.part
    2014-05-25 05:43 - 2014-05-29 10:48 - 63191242 _____ () C:\Users\Andrew\Downloads\YIFY.info_-_Waynes.World.1992.720p.BRrip.rar.part
    2014-05-25 05:30 - 2014-05-29 10:48 - 133368793 _____ () C:\Users\Andrew\Downloads\D13H01rd8872p.rar.part
    2014-05-23 06:37 - 2014-05-23 13:20 - 00000000 ____D () C:\Users\Andrew\Downloads\ChoDengekiStryker
    2014-05-23 06:28 - 2014-05-23 06:37 - 136130262 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part21.rar
    2014-05-23 06:18 - 2014-05-23 06:32 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part20.rar
    2014-05-23 06:10 - 2014-05-23 06:24 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part19.rar
    2014-05-23 06:02 - 2014-05-23 06:16 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part17.rar
    2014-05-23 05:54 - 2014-05-23 06:08 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part18.rar
    2014-05-23 05:46 - 2014-05-23 06:01 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part16.rar
    2014-05-23 05:37 - 2014-05-23 05:52 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part15.rar
    2014-05-23 05:29 - 2014-05-23 05:43 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part14.rar
    2014-05-23 05:21 - 2014-05-23 05:35 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part13.rar
    2014-05-23 05:07 - 2014-05-23 05:21 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part12.rar
    2014-05-23 04:59 - 2014-05-23 05:12 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part11.rar
    2014-05-23 04:49 - 2014-05-23 05:02 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part10.rar
    2014-05-23 04:41 - 2014-05-23 04:54 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part09.rar
    2014-05-23 04:33 - 2014-05-23 04:46 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part08.rar
    2014-05-23 04:24 - 2014-05-23 04:38 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part07.rar
    2014-05-23 04:16 - 2014-05-23 04:31 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part06.rar
    2014-05-23 04:08 - 2014-05-23 04:22 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part05.rar
    2014-05-23 04:00 - 2014-05-23 04:14 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part04.rar
    2014-05-23 03:52 - 2014-05-23 04:07 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part03.rar
    2014-05-23 03:44 - 2014-05-23 03:58 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part02.rar
    2014-05-23 03:44 - 2014-05-23 03:47 - 00000000 ____D () C:\Users\Andrew\Downloads\DaCapo2
    2014-05-23 03:36 - 2014-05-23 03:50 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part01.rar
    2014-05-23 03:34 - 2014-05-23 03:44 - 147830183 _____ () C:\Users\Andrew\Downloads\DaCapo2.part11.rar
    2014-05-23 03:20 - 2014-05-23 03:34 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part10.rar
    2014-05-23 03:16 - 2014-05-23 03:29 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part09.rar
    2014-05-23 03:02 - 2014-05-23 03:16 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part08.rar
    2014-05-23 03:00 - 2014-05-23 03:14 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part07.rar
    2014-05-23 02:46 - 2014-05-23 03:00 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part06.rar
    2014-05-23 02:44 - 2014-05-23 02:58 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part05.rar
    2014-05-23 02:30 - 2014-05-23 02:44 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part04.rar
    2014-05-23 02:25 - 2014-05-23 02:39 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part03.rar
    2014-05-23 02:12 - 2014-05-23 02:25 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part02.rar
    2014-05-23 02:10 - 2014-05-23 02:23 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part01.rar
    2014-05-23 02:10 - 2014-05-23 02:10 - 00000000 ____D () C:\Users\Andrew\Downloads\D.C.I.F
    2014-05-22 23:14 - 2014-05-23 02:08 - 185933681 _____ () C:\Users\Andrew\Downloads\DCIF.part3.rar
    2014-05-22 17:59 - 2014-05-23 02:10 - 209000000 _____ () C:\Users\Andrew\Downloads\DCIF.part2.rar
    2014-05-22 17:55 - 2014-05-22 23:12 - 209000000 _____ () C:\Users\Andrew\Downloads\DCIF.part1.rar
    2014-05-22 17:53 - 2014-06-02 00:27 - 00000000 ____D () C:\Users\Andrew\Downloads\DaCapo
    2014-05-22 17:39 - 2014-05-22 17:53 - 184458334 _____ () C:\Users\Andrew\Downloads\DaCapo.part4.rar
    2014-05-22 17:36 - 2014-05-22 17:52 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo.part2.rar
    2014-05-22 17:20 - 2014-05-22 17:36 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo.part3.rar
    2014-05-22 17:16 - 2014-05-22 19:05 - 00000000 ____D () C:\Users\Andrew\Downloads\Magical Teacher
    2014-05-22 17:16 - 2014-05-22 17:32 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo.part1.rar
    2014-05-22 17:02 - 2014-05-22 17:08 - 85813121 _____ () C:\Users\Andrew\Downloads\MagicalTeacher.part6.rar
    2014-05-22 17:00 - 2014-05-22 17:16 - 209715200 _____ () C:\Users\Andrew\Downloads\MagicalTeacher.part4.rar
    2014-05-22 16:44 - 2014-05-22 16:59 - 209715200 _____ () C:\Users\Andrew\Downloads\MagicalTeacher.part5.rar
    2014-05-22 16:41 - 2014-05-22 16:56 - 209715200 _____ () C:\Users\Andrew\Downloads\MagicalTeacher.part3.rar
    2014-05-22 16:23 - 2014-05-22 16:41 - 209715200 _____ () C:\Users\Andrew\Downloads\MagicalTeacher.part2.rar
    2014-05-22 16:21 - 2014-05-22 16:40 - 209715200 _____ () C:\Users\Andrew\Downloads\MagicalTeacher.part1.rar
    2014-05-22 16:21 - 2014-05-22 16:29 - 00000000 ____D () C:\Users\Andrew\Downloads\PickMeHoney
    2014-05-22 16:06 - 2014-05-22 16:14 - 103423714 _____ () C:\Users\Andrew\Downloads\PickMeHoney.part6.rar
    2014-05-22 16:04 - 2014-05-22 16:21 - 209000000 _____ () C:\Users\Andrew\Downloads\PickMeHoney.part5.rar
    2014-05-22 15:49 - 2014-05-22 15:49 - 00222950 _____ () C:\Users\Andrew\Downloads\AIFix.zip
    2014-05-22 15:48 - 2014-05-22 15:48 - 00000000 ____D () C:\Program Files (x86)\Sorian AI Mod
    2014-05-22 15:47 - 2014-05-22 16:04 - 209000000 _____ () C:\Users\Andrew\Downloads\PickMeHoney.part3.rar
    2014-05-22 15:40 - 2014-05-22 15:57 - 209000000 _____ () C:\Users\Andrew\Downloads\PickMeHoney.part4.rar
    2014-05-22 15:22 - 2014-05-22 15:40 - 209000000 _____ () C:\Users\Andrew\Downloads\PickMeHoney.part2.rar
    2014-05-22 15:13 - 2014-05-22 15:32 - 209000000 _____ () C:\Users\Andrew\Downloads\PickMeHoney.part1.rar
    2014-05-22 14:58 - 2014-05-22 14:58 - 00000000 ____D () C:\age
    2014-05-22 12:57 - 2014-05-22 12:57 - 00000000 ____D () C:\Users\Andrew\Downloads\BrewLAN_043
    2014-05-22 12:57 - 2014-05-22 12:57 - 00000000 ____D () C:\Users\Andrew\Downloads\Battlefeel34
    2014-05-21 10:12 - 2014-05-21 10:12 - 00000227 _____ () C:\Users\Andrew\Desktop\StarDrive.url
    2014-05-21 04:24 - 2014-05-21 05:01 - 1105306942 _____ () C:\Users\Andrew\Downloads\Battlefeel34.rar
    2014-05-20 11:55 - 2014-05-20 11:55 - 00000227 _____ () C:\Users\Andrew\Desktop\Transistor.url
    2014-05-20 03:59 - 2014-05-20 03:59 - 00329165 _____ () C:\Users\Andrew\Downloads\GAZ_UI_6.1.zip
    2014-05-19 20:04 - 2014-05-20 15:16 - 00000000 ____D () C:\ProgramData\FAForever
    2014-05-19 20:04 - 2014-05-20 14:59 - 00000000 ____D () C:\Users\Andrew\.matplotlib
    2014-05-19 18:11 - 2014-05-19 18:11 - 00000227 _____ () C:\Users\Andrew\Desktop\Blood of the Werewolf.url
    2014-05-19 04:50 - 2014-05-19 04:50 - 00001055 _____ () C:\Users\Public\Desktop\FA Forever Lobby.lnk
    2014-05-19 04:50 - 2014-05-19 04:50 - 00001055 _____ () C:\ProgramData\Desktop\FA Forever Lobby.lnk
    2014-05-19 04:49 - 2014-05-19 04:50 - 00000000 ____D () C:\Program Files (x86)\Forged Alliance Forever
    2014-05-19 04:46 - 2014-05-19 04:47 - 33489408 _____ () C:\Users\Andrew\Downloads\FAForeverLobby-0.10.116.msi
    2014-05-17 23:52 - 2014-05-17 23:52 - 00000226 _____ () C:\Users\Andrew\Desktop\Supreme Commander 2.url
    2014-05-17 20:58 - 2014-05-18 01:41 - 00000000 ____D () C:\Users\Andrew\AppData\Local\Gas Powered Games
    2014-05-17 20:57 - 2014-05-31 12:54 - 00105481 _____ () C:\Windows\DirectX.log
    2014-05-17 16:21 - 2014-05-17 16:21 - 00000000 _____ () C:\Windows\SysWOW64\shoC5DE.tmp
    2014-05-17 16:02 - 2014-05-17 16:03 - 00653725 _____ ( ) C:\Users\Andrew\Downloads\Sorian_AI_Mod_2.1.2.exe
    2014-05-17 15:59 - 2014-05-17 16:01 - 21858637 _____ () C:\Users\Andrew\Downloads\BrewLAN_043.7z
    2014-05-17 15:55 - 2014-05-17 15:55 - 00000225 _____ () C:\Users\Andrew\Desktop\Supreme Commander.url
    2014-05-17 15:55 - 2014-05-17 15:55 - 00000225 _____ () C:\Users\Andrew\Desktop\Supreme Commander Forged Alliance.url
    2014-05-16 14:35 - 2014-05-16 14:35 - 00000000 _____ () C:\Windows\SysWOW64\sho7A60.tmp
    2014-05-16 12:01 - 2014-05-16 12:01 - 00000000 ___SD () C:\Windows\System32\CompatTel
    2014-05-16 12:00 - 2014-05-09 01:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll
    2014-05-16 11:59 - 2014-05-09 01:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll
    2014-05-15 23:15 - 2014-05-31 10:19 - 00001288 _____ () C:\Windows\setupact.log
    2014-05-15 23:15 - 2014-05-15 23:15 - 00000000 _____ () C:\Windows\setuperr.log
    2014-05-10 13:03 - 2014-05-10 13:03 - 00354886 _____ () C:\Users\Andrew\Documents\CCLEANERBACKUP.reg
    2014-05-10 12:58 - 2014-05-10 12:59 - 04745984 _____ (Piriform Ltd) C:\Users\Andrew\Downloads\ccsetup413.exe
    2014-05-10 12:50 - 2014-05-10 12:50 - 00000730 _____ () C:\Users\Andrew\Desktop\Darksiders - Shortcut.lnk
    2014-05-10 10:59 - 2014-05-10 11:50 - 00000000 ____D () C:\Users\Andrew\AppData\Local\Darksiders
    2014-05-10 10:53 - 2014-05-10 10:53 - 00000000 ____D () C:\Program Files (x86)\THQ
    2014-05-10 09:12 - 2014-05-10 09:12 - 00000224 _____ () C:\Users\Andrew\Desktop\Team Fortress 2.url
    2014-05-10 06:32 - 2014-05-10 06:32 - 00000000 ____D () C:\Users\Andrew\AppData\Local\FOMM
    2014-05-10 06:32 - 2014-05-10 06:32 - 00000000 ____D () C:\Program Files (x86)\GeMM
    2014-05-10 06:22 - 2014-05-10 06:22 - 00000000 ____D () C:\Program Files (x86)\Fallout.3.New.Vegas.Ultimate.Edition-KaOs
    2014-05-10 06:20 - 2014-05-10 06:20 - 00000892 _____ () C:\Users\Public\Desktop\Nexus Mod Manager.lnk
    2014-05-10 06:20 - 2014-05-10 06:20 - 00000892 _____ () C:\ProgramData\Desktop\Nexus Mod Manager.lnk
    2014-05-10 06:20 - 2014-05-10 06:20 - 00000000 ____D () C:\Program Files\Nexus Mod Manager
    2014-05-10 06:19 - 2014-05-10 06:19 - 00000000 ____D () C:\Users\Andrew\Downloads\nvse_4_2_beta4
    2014-05-09 10:33 - 2014-05-09 10:39 - 00000000 ___HD () C:\ArcTemp
    2014-05-09 10:02 - 2014-05-09 10:33 - 00000000 ____D () C:\Users\Andrew\AppData\Roaming\Arc
    2014-05-09 10:02 - 2014-05-09 10:02 - 00001842 _____ () C:\Users\Public\Desktop\Arc.lnk
    2014-05-09 10:02 - 2014-05-09 10:02 - 00001842 _____ () C:\ProgramData\Desktop\Arc.lnk
    2014-05-09 10:01 - 2014-05-09 10:33 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
    2014-05-04 06:52 - 2014-05-31 17:38 - 00000000 ___RD () C:\Users\Andrew\Dropbox
    2014-05-04 06:52 - 2014-05-25 00:59 - 00001025 _____ () C:\Users\Andrew\Desktop\Dropbox.lnk
    2014-05-04 02:16 - 2014-05-31 10:23 - 00000000 ____D () C:\Users\Andrew\AppData\Roaming\DropboxMaster
    2014-05-04 02:15 - 2014-05-31 10:23 - 00000000 ____D () C:\Users\Andrew\AppData\Roaming\Dropbox
    2014-05-04 01:33 - 2014-05-04 01:33 - 00029208 _____ () C:\Windows\System32\Drivers\aswHwid.sys
    2014-05-04 01:32 - 2014-05-04 01:32 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
    2014-05-03 08:04 - 2014-05-03 08:04 - 00001031 _____ () C:\Users\Andrew\Desktop\cs2 - Shortcut.lnk

    ==================== One Month Modified Files and Folders =======

    2014-06-02 02:20 - 2014-06-02 02:20 - 00000000 ____D () C:\FRST
    2014-06-02 00:29 - 2011-10-25 22:22 - 00000000 ____D () C:\Users\Andrew\AppData\Local\Temp
    2014-06-02 00:28 - 2013-07-31 05:48 - 00000000 ____D () C:\users\DefaultAppPool
    2014-06-02 00:28 - 2011-10-25 22:22 - 00000000 ____D () C:\users\Andrew
    2014-06-02 00:28 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
    2014-06-02 00:27 - 2014-05-22 17:53 - 00000000 ____D () C:\Users\Andrew\Downloads\DaCapo
    2014-06-02 00:27 - 2014-04-08 11:33 - 00000000 ____D () C:\ProgramData\Paltiosoft
    2014-06-02 00:27 - 2014-01-05 04:04 - 00000000 ____D () C:\Users\Andrew\AppData\Roaming\Winamp
    2014-06-02 00:27 - 2013-11-19 21:09 - 00000000 ____D () C:\Users\Andrew\AppData\Roaming\Battle.net
    2014-06-02 00:27 - 2013-06-09 04:23 - 00000000 ___RD () C:\Users\Andrew\Google Drive
    2014-06-02 00:27 - 2013-06-09 02:30 - 00000000 ____D () C:\Users\Andrew\AppData\Roaming\Launchy
    2014-06-02 00:27 - 2012-08-03 22:35 - 00000000 ____D () C:\Program Files (x86)\Steamworks
    2014-06-02 00:27 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\servicing
    2014-06-02 00:27 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\AppCompat
    2014-06-02 00:26 - 2013-11-19 21:13 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
    2014-06-02 00:26 - 2013-11-19 21:09 - 00000000 ____D () C:\Program Files (x86)\Battle.net
    2014-06-02 00:26 - 2012-07-05 01:40 - 00000000 ____D () C:\Program Files (x86)\Cockatrice
    2014-06-02 00:26 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\registration
    2014-06-02 00:23 - 2011-12-06 04:31 - 00000000 ____D () C:\Users\Andrew\AppData\Roaming\Skype
    2014-06-02 00:23 - 2011-11-04 16:52 - 00000000 ____D () C:\Users\Andrew\Documents\My Games
    2014-06-02 00:22 - 2014-04-14 00:55 - 00000000 ____D () C:\Users\Andrew\AppData\Local\JDownloader v2.0
    2014-06-02 00:22 - 2009-07-13 22:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
    2014-05-31 17:39 - 2014-03-16 22:06 - 01131552 _____ () C:\Windows\WindowsUpdate.log
    2014-05-31 17:38 - 2014-05-04 06:52 - 00000000 ___RD () C:\Users\Andrew\Dropbox
    2014-05-31 12:56 - 2014-05-31 12:56 - 00000000 ____D () C:\ProgramData\Stardock
    2014-05-31 12:56 - 2014-05-31 12:56 - 00000000 ____D () C:\ProgramData\Ironclad Games
    2014-05-31 12:54 - 2014-05-17 20:57 - 00105481 _____ () C:\Windows\DirectX.log
    2014-05-31 11:54 - 2014-05-31 11:53 - 02194587 _____ () C:\Users\Andrew\Downloads\Lecture 13 - Exam Prep.ppt.pptx
    2014-05-31 11:49 - 2014-05-31 11:49 - 00000227 _____ () C:\Users\Andrew\Desktop\Sins of a Solar Empire Rebellion.url
    2014-05-31 10:29 - 2009-07-13 23:45 - 00013872 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2014-05-31 10:29 - 2009-07-13 23:45 - 00013872 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2014-05-31 10:23 - 2014-05-04 02:16 - 00000000 ____D () C:\Users\Andrew\AppData\Roaming\DropboxMaster
    2014-05-31 10:23 - 2014-05-04 02:15 - 00000000 ____D () C:\Users\Andrew\AppData\Roaming\Dropbox
    2014-05-31 10:21 - 2013-02-20 23:53 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
    2014-05-31 10:19 - 2014-05-15 23:15 - 00001288 _____ () C:\Windows\setupact.log
    2014-05-31 10:19 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2014-05-31 08:46 - 2013-11-19 21:09 - 00000000 ____D () C:\Users\Andrew\AppData\Local\Battle.net
    2014-05-31 00:42 - 2009-04-28 11:27 - 00000000 ____D () C:\Windows\Panther
    2014-05-31 00:40 - 2014-05-31 00:40 - 00000326 _____ () C:\Windows\PFRO.log
    2014-05-30 11:50 - 2014-05-30 11:50 - 00003440 _____ () C:\Windows\System32\Tasks\{D9B99651-6F1A-4BCE-AEE9-6719909AABC6}
    2014-05-30 11:37 - 2014-05-30 11:37 - 00000227 _____ () C:\Users\Andrew\Desktop\Distant Worlds Universe.url
    2014-05-30 11:14 - 2014-05-30 11:14 - 00000000 ____D () C:\Users\Andrew\AppData\Roaming\Code Force Limited
    2014-05-29 13:26 - 2011-10-29 23:20 - 00000000 ___SD () C:\TDDOWNLOAD
    2014-05-29 10:49 - 2014-05-25 06:22 - 121748233 _____ () C:\Users\Andrew\Downloads\YIFY.info_-_Waynes.World.2.1993.720p.BRrip.rar.part
    2014-05-29 10:48 - 2014-05-26 02:56 - 45676130 _____ () C:\Users\Andrew\Downloads\Best-Movies.info_Terminator.1984.720p.BluRayx264.YIFY.mp4.part
    2014-05-29 10:48 - 2014-05-25 05:43 - 63191242 _____ () C:\Users\Andrew\Downloads\YIFY.info_-_Waynes.World.1992.720p.BRrip.rar.part
    2014-05-29 10:48 - 2014-05-25 05:30 - 133368793 _____ () C:\Users\Andrew\Downloads\D13H01rd8872p.rar.part
    2014-05-29 04:19 - 2014-05-29 04:18 - 13843002 _____ () C:\Users\Andrew\Downloads\cockatrice_win32_20140517_git-05172004a.exe
    2014-05-29 04:18 - 2014-05-29 04:17 - 13858582 _____ () C:\Users\Andrew\Downloads\cockatrice_win32_20140517_git-05172014_DEV.exe
    2014-05-29 04:11 - 2014-05-29 04:11 - 08828533 _____ () C:\Users\Andrew\Downloads\cards (JOU).xml
    2014-05-27 02:41 - 2014-05-27 02:22 - 03277460 _____ () C:\Users\Andrew\Downloads\LunarisFilia.part05.rar.part
    2014-05-27 02:41 - 2014-05-27 02:19 - 04522334 _____ () C:\Users\Andrew\Downloads\Pr3dt0r87_share2uvn.mkv.part
    2014-05-27 02:41 - 2014-05-27 02:14 - 07450983 _____ () C:\Users\Andrew\Downloads\FortuneArterial.part12.rar.part
    2014-05-27 02:14 - 2014-05-27 02:14 - 00018451 _____ () C:\Users\Andrew\Downloads\FA-x64patch.rar
    2014-05-26 20:07 - 2013-03-18 03:29 - 00000000 ____D () C:\Users\Andrew\Documents\Osu
    2014-05-26 10:20 - 2014-05-25 16:49 - 131206030 _____ () C:\Users\Andrew\Downloads\Seitenkan.part4.rar.part
    2014-05-26 10:20 - 2014-05-25 16:41 - 119678905 _____ () C:\Users\Andrew\Downloads\Seitenkan.part1.rar.part
    2014-05-26 05:47 - 2014-05-26 05:47 - 00041993 _____ () C:\Users\Andrew\Downloads\BlackopsSupportv50.zip
    2014-05-25 00:59 - 2014-05-04 06:52 - 00001025 _____ () C:\Users\Andrew\Desktop\Dropbox.lnk
    2014-05-24 02:51 - 2011-02-22 06:04 - 00000000 ___RD () C:\Program Files (x86)\Skype
    2014-05-24 02:51 - 2011-02-22 06:04 - 00000000 ____D () C:\ProgramData\Skype
    2014-05-23 13:20 - 2014-05-23 06:37 - 00000000 ____D () C:\Users\Andrew\Downloads\ChoDengekiStryker
    2014-05-23 10:49 - 2014-01-07 16:58 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
    2014-05-23 10:42 - 2013-01-31 00:39 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
    2014-05-23 06:37 - 2014-05-23 06:28 - 136130262 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part21.rar
    2014-05-23 06:32 - 2014-05-23 06:18 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part20.rar
    2014-05-23 06:24 - 2014-05-23 06:10 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part19.rar
    2014-05-23 06:16 - 2014-05-23 06:02 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part17.rar
    2014-05-23 06:08 - 2014-05-23 05:54 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part18.rar
    2014-05-23 06:01 - 2014-05-23 05:46 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part16.rar
    2014-05-23 05:52 - 2014-05-23 05:37 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part15.rar
    2014-05-23 05:43 - 2014-05-23 05:29 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part14.rar
    2014-05-23 05:35 - 2014-05-23 05:21 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part13.rar
    2014-05-23 05:21 - 2014-05-23 05:07 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part12.rar
    2014-05-23 05:12 - 2014-05-23 04:59 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part11.rar
    2014-05-23 05:02 - 2014-05-23 04:49 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part10.rar
    2014-05-23 04:54 - 2014-05-23 04:41 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part09.rar
    2014-05-23 04:46 - 2014-05-23 04:33 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part08.rar
    2014-05-23 04:38 - 2014-05-23 04:24 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part07.rar
    2014-05-23 04:31 - 2014-05-23 04:16 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part06.rar
    2014-05-23 04:22 - 2014-05-23 04:08 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part05.rar
    2014-05-23 04:14 - 2014-05-23 04:00 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part04.rar
    2014-05-23 04:07 - 2014-05-23 03:52 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part03.rar
    2014-05-23 03:58 - 2014-05-23 03:44 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part02.rar
    2014-05-23 03:50 - 2014-05-23 03:36 - 209715200 _____ () C:\Users\Andrew\Downloads\ChoDengekiStryker.part01.rar
    2014-05-23 03:47 - 2014-05-23 03:44 - 00000000 ____D () C:\Users\Andrew\Downloads\DaCapo2
    2014-05-23 03:44 - 2014-05-23 03:34 - 147830183 _____ () C:\Users\Andrew\Downloads\DaCapo2.part11.rar
    2014-05-23 03:34 - 2014-05-23 03:20 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part10.rar
    2014-05-23 03:29 - 2014-05-23 03:16 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part09.rar
    2014-05-23 03:16 - 2014-05-23 03:02 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part08.rar
    2014-05-23 03:14 - 2014-05-23 03:00 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part07.rar
    2014-05-23 03:00 - 2014-05-23 02:46 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part06.rar
    2014-05-23 02:58 - 2014-05-23 02:44 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part05.rar
    2014-05-23 02:44 - 2014-05-23 02:30 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part04.rar
    2014-05-23 02:39 - 2014-05-23 02:25 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part03.rar
    2014-05-23 02:25 - 2014-05-23 02:12 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part02.rar
    2014-05-23 02:23 - 2014-05-23 02:10 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo2.part01.rar
    2014-05-23 02:10 - 2014-05-23 02:10 - 00000000 ____D () C:\Users\Andrew\Downloads\D.C.I.F
    2014-05-23 02:10 - 2014-05-22 17:59 - 209000000 _____ () C:\Users\Andrew\Downloads\DCIF.part2.rar
    2014-05-23 02:08 - 2014-05-22 23:14 - 185933681 _____ () C:\Users\Andrew\Downloads\DCIF.part3.rar
    2014-05-22 23:12 - 2014-05-22 17:55 - 209000000 _____ () C:\Users\Andrew\Downloads\DCIF.part1.rar
    2014-05-22 19:05 - 2014-05-22 17:16 - 00000000 ____D () C:\Users\Andrew\Downloads\Magical Teacher
    2014-05-22 17:53 - 2014-05-22 17:39 - 184458334 _____ () C:\Users\Andrew\Downloads\DaCapo.part4.rar
    2014-05-22 17:52 - 2014-05-22 17:36 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo.part2.rar
    2014-05-22 17:36 - 2014-05-22 17:20 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo.part3.rar
    2014-05-22 17:32 - 2014-05-22 17:16 - 209000000 _____ () C:\Users\Andrew\Downloads\DaCapo.part1.rar
    2014-05-22 17:16 - 2014-05-22 17:00 - 209715200 _____ () C:\Users\Andrew\Downloads\MagicalTeacher.part4.rar
    2014-05-22 17:08 - 2014-05-22 17:02 - 85813121 _____ () C:\Users\Andrew\Downloads\MagicalTeacher.part6.rar
    2014-05-22 16:59 - 2014-05-22 16:44 - 209715200 _____ () C:\Users\Andrew\Downloads\MagicalTeacher.part5.rar
    2014-05-22 16:56 - 2014-05-22 16:41 - 209715200 _____ () C:\Users\Andrew\Downloads\MagicalTeacher.part3.rar
    2014-05-22 16:50 - 2014-04-15 09:52 - 00000000 ____D () C:\Program Files\TRABULANCE
    2014-05-22 16:41 - 2014-05-22 16:23 - 209715200 _____ () C:\Users\Andrew\Downloads\MagicalTeacher.part2.rar
    2014-05-22 16:40 - 2014-05-22 16:21 - 209715200 _____ () C:\Users\Andrew\Downloads\MagicalTeacher.part1.rar
    2014-05-22 16:29 - 2014-05-22 16:21 - 00000000 ____D () C:\Users\Andrew\Downloads\PickMeHoney
    2014-05-22 16:21 - 2014-05-22 16:04 - 209000000 _____ () C:\Users\Andrew\Downloads\PickMeHoney.part5.rar
    2014-05-22 16:14 - 2014-05-22 16:06 - 103423714 _____ () C:\Users\Andrew\Downloads\PickMeHoney.part6.rar
    2014-05-22 16:04 - 2014-05-22 15:47 - 209000000 _____ () C:\Users\Andrew\Downloads\PickMeHoney.part3.rar
    2014-05-22 15:57 - 2014-05-22 15:40 - 209000000 _____ () C:\Users\Andrew\Downloads\PickMeHoney.part4.rar
    2014-05-22 15:49 - 2014-05-22 15:49 - 00222950 _____ () C:\Users\Andrew\Downloads\AIFix.zip
    2014-05-22 15:48 - 2014-05-22 15:48 - 00000000 ____D () C:\Program Files (x86)\Sorian AI Mod
    2014-05-22 15:40 - 2014-05-22 15:22 - 209000000 _____ () C:\Users\Andrew\Downloads\PickMeHoney.part2.rar
    2014-05-22 15:32 - 2014-05-22 15:13 - 209000000 _____ () C:\Users\Andrew\Downloads\PickMeHoney.part1.rar
    2014-05-22 14:58 - 2014-05-22 14:58 - 00000000 ____D () C:\age
    2014-05-22 14:57 - 2011-10-29 21:22 - 00000000 ____D () C:\Users\Andrew\AppData\Roaming\DAEMON Tools Lite
    2014-05-22 12:57 - 2014-05-22 12:57 - 00000000 ____D () C:\Users\Andrew\Downloads\BrewLAN_043
    2014-05-22 12:57 - 2014-05-22 12:57 - 00000000 ____D () C:\Users\Andrew\Downloads\Battlefeel34
    2014-05-21 10:12 - 2014-05-21 10:12 - 00000227 _____ () C:\Users\Andrew\Desktop\StarDrive.url
    2014-05-21 05:01 - 2014-05-21 04:24 - 1105306942 _____ () C:\Users\Andrew\Downloads\Battlefeel34.rar
    2014-05-21 03:40 - 2013-06-17 05:12 - 00000000 ____D () C:\GOG Games
    2014-05-21 03:39 - 2014-01-02 18:07 - 00000000 ____D () C:\Users\Andrew\Downloads\VN
    2014-05-20 15:16 - 2014-05-19 20:04 - 00000000 ____D () C:\ProgramData\FAForever
    2014-05-20 14:59 - 2014-05-19 20:04 - 00000000 ____D () C:\Users\Andrew\.matplotlib
    2014-05-20 12:22 - 2013-02-16 22:44 - 00000000 ____D () C:\ProgramData\Package Cache
    2014-05-20 11:55 - 2014-05-20 11:55 - 00000227 _____ () C:\Users\Andrew\Desktop\Transistor.url
    2014-05-20 03:59 - 2014-05-20 03:59 - 00329165 _____ () C:\Users\Andrew\Downloads\GAZ_UI_6.1.zip
    2014-05-19 18:11 - 2014-05-19 18:11 - 00000227 _____ () C:\Users\Andrew\Desktop\Blood of the Werewolf.url
    2014-05-19 04:50 - 2014-05-19 04:50 - 00001055 _____ () C:\Users\Public\Desktop\FA Forever Lobby.lnk
    2014-05-19 04:50 - 2014-05-19 04:50 - 00001055 _____ () C:\ProgramData\Desktop\FA Forever Lobby.lnk
    2014-05-19 04:50 - 2014-05-19 04:49 - 00000000 ____D () C:\Program Files (x86)\Forged Alliance Forever
    2014-05-19 04:47 - 2014-05-19 04:46 - 33489408 _____ () C:\Users\Andrew\Downloads\FAForeverLobby-0.10.116.msi
    2014-05-18 01:41 - 2014-05-17 20:58 - 00000000 ____D () C:\Users\Andrew\AppData\Local\Gas Powered Games
    2014-05-17 23:52 - 2014-05-17 23:52 - 00000226 _____ () C:\Users\Andrew\Desktop\Supreme Commander 2.url
    2014-05-17 20:28 - 2009-07-14 00:08 - 00032654 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
    2014-05-17 16:21 - 2014-05-17 16:21 - 00000000 _____ () C:\Windows\SysWOW64\shoC5DE.tmp
    2014-05-17 16:03 - 2014-05-17 16:02 - 00653725 _____ ( ) C:\Users\Andrew\Downloads\Sorian_AI_Mod_2.1.2.exe
    2014-05-17 16:01 - 2014-05-17 15:59 - 21858637 _____ () C:\Users\Andrew\Downloads\BrewLAN_043.7z
    2014-05-17 15:55 - 2014-05-17 15:55 - 00000225 _____ () C:\Users\Andrew\Desktop\Supreme Commander.url
    2014-05-17 15:55 - 2014-05-17 15:55 - 00000225 _____ () C:\Users\Andrew\Desktop\Supreme Commander Forged Alliance.url
    2014-05-17 01:05 - 2012-08-18 03:41 - 00000000 ____D () C:\Users\Andrew\AppData\Local\Deployment
    2014-05-16 14:35 - 2014-05-16 14:35 - 00000000 _____ () C:\Windows\SysWOW64\sho7A60.tmp
    2014-05-16 12:01 - 2014-05-16 12:01 - 00000000 ___SD () C:\Windows\System32\CompatTel
    2014-05-16 11:48 - 2014-01-16 16:55 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
    2014-05-16 10:08 - 2012-06-16 23:00 - 00000000 ____D () C:\Users\Andrew\Documents\Nexus Mod Manager
    2014-05-15 23:32 - 2013-12-26 22:47 - 00085328 _____ (AVAST Software) C:\Windows\System32\Drivers\aswstm.sys
    2014-05-15 23:32 - 2011-11-24 21:35 - 01039096 _____ (AVAST Software) C:\Windows\System32\Drivers\aswsnx.sys
    2014-05-15 23:32 - 2011-11-24 21:35 - 00423240 _____ (AVAST Software) C:\Windows\System32\Drivers\aswsp.sys
    2014-05-15 23:31 - 2012-08-18 03:26 - 00003770 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2014-05-15 23:31 - 2012-04-08 03:16 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2014-05-15 23:31 - 2011-11-02 21:47 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2014-05-15 23:15 - 2014-05-15 23:15 - 00000000 _____ () C:\Windows\setuperr.log
    2014-05-15 11:54 - 2013-07-30 04:18 - 00000000 ____D () C:\Windows\System32\MRT
    2014-05-15 11:50 - 2011-11-15 22:16 - 93223848 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
    2014-05-12 21:55 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\System32\NDF
    2014-05-10 13:03 - 2014-05-10 13:03 - 00354886 _____ () C:\Users\Andrew\Documents\CCLEANERBACKUP.reg
    2014-05-10 12:59 - 2014-05-10 12:58 - 04745984 _____ (Piriform Ltd) C:\Users\Andrew\Downloads\ccsetup413.exe
    2014-05-10 12:59 - 2014-01-17 05:52 - 00000000 ____D () C:\Program Files\CCleaner
    2014-05-10 12:56 - 2012-12-15 23:05 - 00000000 ____D () C:\Users\Andrew\Downloads\Musics
    2014-05-10 12:50 - 2014-05-10 12:50 - 00000730 _____ () C:\Users\Andrew\Desktop\Darksiders - Shortcut.lnk
    2014-05-10 11:50 - 2014-05-10 10:59 - 00000000 ____D () C:\Users\Andrew\AppData\Local\Darksiders
    2014-05-10 10:58 - 2011-11-12 20:52 - 00000000 ____D () C:\Windows\SysWOW64\directx
    2014-05-10 10:54 - 2011-11-12 20:52 - 00000000 ___HD () C:\Windows\msdownld.tmp
    2014-05-10 10:53 - 2014-05-10 10:53 - 00000000 ____D () C:\Program Files (x86)\THQ
    2014-05-10 09:12 - 2014-05-10 09:12 - 00000224 _____ () C:\Users\Andrew\Desktop\Team Fortress 2.url
    2014-05-10 06:32 - 2014-05-10 06:32 - 00000000 ____D () C:\Users\Andrew\AppData\Local\FOMM
    2014-05-10 06:32 - 2014-05-10 06:32 - 00000000 ____D () C:\Program Files (x86)\GeMM
    2014-05-10 06:22 - 2014-05-10 06:22 - 00000000 ____D () C:\Program Files (x86)\Fallout.3.New.Vegas.Ultimate.Edition-KaOs
    2014-05-10 06:20 - 2014-05-10 06:20 - 00000892 _____ () C:\Users\Public\Desktop\Nexus Mod Manager.lnk
    2014-05-10 06:20 - 2014-05-10 06:20 - 00000892 _____ () C:\ProgramData\Desktop\Nexus Mod Manager.lnk
    2014-05-10 06:20 - 2014-05-10 06:20 - 00000000 ____D () C:\Program Files\Nexus Mod Manager
    2014-05-10 06:19 - 2014-05-10 06:19 - 00000000 ____D () C:\Users\Andrew\Downloads\nvse_4_2_beta4
    2014-05-10 03:12 - 2012-06-16 23:09 - 00000000 ____D () C:\Games
    2014-05-09 10:39 - 2014-05-09 10:33 - 00000000 ___HD () C:\ArcTemp
    2014-05-09 10:33 - 2014-05-09 10:02 - 00000000 ____D () C:\Users\Andrew\AppData\Roaming\Arc
    2014-05-09 10:33 - 2014-05-09 10:01 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
    2014-05-09 10:02 - 2014-05-09 10:02 - 00001842 _____ () C:\Users\Public\Desktop\Arc.lnk
    2014-05-09 10:02 - 2014-05-09 10:02 - 00001842 _____ () C:\ProgramData\Desktop\Arc.lnk
    2014-05-09 10:02 - 2011-02-22 05:35 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
    2014-05-09 01:14 - 2014-05-16 12:00 - 00477184 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll
    2014-05-09 01:11 - 2014-05-16 11:59 - 00424448 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll
    2014-05-04 02:06 - 2013-03-10 20:09 - 00000000 ____D () C:\Users\Andrew\AppData\Roaming\vlc
    2014-05-04 01:34 - 2013-12-26 22:47 - 00001968 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
    2014-05-04 01:34 - 2013-12-26 22:47 - 00001968 _____ () C:\ProgramData\Desktop\avast! Free Antivirus.lnk
    2014-05-04 01:33 - 2014-05-04 01:33 - 00029208 _____ () C:\Windows\System32\Drivers\aswHwid.sys
    2014-05-04 01:33 - 2013-05-19 06:22 - 00208416 _____ () C:\Windows\System32\Drivers\aswVmm.sys
    2014-05-04 01:33 - 2013-05-19 06:22 - 00065776 _____ () C:\Windows\System32\Drivers\aswRvrt.sys
    2014-05-04 01:33 - 2011-11-24 21:35 - 01039096 _____ (AVAST Software) C:\Windows\System32\Drivers\aswsnx.sys.1400214768114
    2014-05-04 01:33 - 2011-11-24 21:35 - 00423240 _____ (AVAST Software) C:\Windows\System32\Drivers\aswsp.sys.1400214768114
    2014-05-04 01:33 - 2011-11-24 21:35 - 00334648 _____ (AVAST Software) C:\Windows\System32\aswBoot.exe
    2014-05-04 01:33 - 2011-11-24 21:35 - 00079184 _____ (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys
    2014-05-04 01:32 - 2014-05-04 01:32 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
    2014-05-04 01:32 - 2012-10-25 00:54 - 00093568 _____ (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys
    2014-05-03 08:04 - 2014-05-03 08:04 - 00001031 _____ () C:\Users\Andrew\Desktop\cs2 - Shortcut.lnk
    2014-05-03 05:52 - 2013-10-21 03:18 - 00000000 ____D () C:\Users\Andrew\Documents\Mount&Blade Warband Savegames

    Files to move or delete:
    ====================
    C:\ProgramData\hash.dat


    Some content of TEMP:
    ====================
    C:\Users\Andrew\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpph7spo.dll
    C:\Users\Andrew\AppData\Local\Temp\proxy_vole1416607855342550978.dll


    ==================== Known DLLs (Whitelisted) ================

    C:\Windows\System32\LPK.dll IS MISSING <==== ATTENTION!
    C:\Windows\SysWOW64\LPK.dll IS MISSING <==== ATTENTION!

    ==================== Bamital & volsnap Check =================

    C:\Windows\System32\winlogon.exe => MD5 is legit
    C:\Windows\System32\wininit.exe => MD5 is legit
    C:\Windows\SysWOW64\wininit.exe => MD5 is legit
    C:\Windows\explorer.exe => MD5 is legit
    C:\Windows\SysWOW64\explorer.exe => MD5 is legit
    C:\Windows\System32\svchost.exe => MD5 is legit
    C:\Windows\SysWOW64\svchost.exe => MD5 is legit
    C:\Windows\System32\services.exe => MD5 is legit
    C:\Windows\System32\User32.dll => MD5 is legit
    C:\Windows\SysWOW64\User32.dll => MD5 is legit
    C:\Windows\System32\userinit.exe => MD5 is legit
    C:\Windows\SysWOW64\userinit.exe => MD5 is legit
    C:\Windows\System32\rpcss.dll => MD5 is legit
    C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

    ==================== Restore Points =========================

    Restore point made on: 2014-05-28 15:48:48
    Restore point made on: 2014-05-29 11:46:11
    Restore point made on: 2014-05-30 11:45:23
    Restore point made on: 2014-05-30 11:53:15
    Restore point made on: 2014-05-30 11:57:35
    Restore point made on: 2014-05-30 14:03:47
    Restore point made on: 2014-05-31 12:51:26
    Restore point made on: 2014-05-31 17:39:43

    ==================== Memory info ===========================

    Percentage of memory in use: 17%
    Total physical RAM: 4030.66 MB
    Available physical RAM: 3334.32 MB
    Total Pagefile: 4028.81 MB
    Available Pagefile: 3324.63 MB
    Total Virtual: 8192 MB
    Available Virtual: 8191.88 MB

    ==================== Drives ================================

    Drive c: (OS) (Fixed) (Total:581.42 GB) (Free:83.64 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
    Drive e: (Recovery) (Fixed) (Total:14.65 GB) (Free:7.69 GB) NTFS ==>[System with boot components (obtained from reading drive)]
    Drive f: (KINGSTON) (Removable) (Total:3.64 GB) (Free:3.36 GB) FAT32
    Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (Size: 596 GB) (Disk ID: 99829E77)
    Partition 1: (Not Active) - (Size=100 MB) - (Type=DE)
    Partition 2: (Active) - (Size=15 GB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=581 GB) - (Type=07 NTFS)

    ========================================================
    Disk: 1 (Size: 4 GB) (Disk ID: 00000000)

    Partition: GPT Partition Type.


    LastRegBack: 2014-05-29 17:43

    ==================== End Of Log ============================

    Search.txt:

    Farbar Recovery Scan Tool (x64) Version: 01-06-2014
    Ran by SYSTEM at 2014-06-02 04:07:06
    Running from F:\
    Boot Mode: Recovery

    ================== Search Files: "services.exe; winsrv.*" =============

    C:\WINDOWS\winsxs\wow64_microsoft-windows-winsrv.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a412dbba527dc14e\winsrv.dll.mui
    [2009-07-14 00:35] - [2009-07-13 21:08] - 0008192 ____A (Microsoft Corporation) 9848765E88322400BDC710A76ADEA841

    C:\WINDOWS\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.22411_none_152b1d6acc153304\winsrv.dll
    [2013-09-12 21:57] - [2013-08-02 01:23] - 0215040 ____A (Microsoft Corporation) 99AACC82C6B8A8E976CA59CFD3C322EF

    C:\WINDOWS\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.22379_none_14f23e4ccc3ea83b\winsrv.dll
    [2013-08-15 01:18] - [2013-07-08 00:18] - 0215040 ____A (Microsoft Corporation) 1F1DA89B6582F8728ECEB1C35438C1E7

    C:\WINDOWS\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.22209_none_153debdacc05e77d\winsrv.dll
    [2013-02-14 00:38] - [2013-01-04 00:43] - 0215040 ____A (Microsoft Corporation) 5F38CFC96BCA5DD462E2B243B6E31849

    C:\WINDOWS\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.22125_none_152448f4cc19bcdc\winsrv.dll
    [2012-12-12 01:37] - [2012-10-04 12:43] - 0215040 ____A (Microsoft Corporation) CC44EBC3E04E76AABE19EB4A16663E4A

    C:\WINDOWS\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.22091_none_14d49672cc561df0\winsrv.dll
    [2012-10-11 01:06] - [2012-08-20 13:27] - 0215040 ____A (Microsoft Corporation) 111AFE35DD2D423EE8E176CA7B2BBDC7

    C:\WINDOWS\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.21756_none_1504fba6cc30ff4f\winsrv.dll
    [2011-10-26 18:58] - [2011-06-24 00:27] - 0214528 ____A (Microsoft Corporation) C13D05A015346DED3D722BE285814495

    C:\WINDOWS\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.18229_none_149eb11db2f87cbc\winsrv.dll
    [2013-09-12 21:57] - [2013-08-01 21:14] - 0215040 ____A (Microsoft Corporation) 88EDD0B34EED542745931E581AD21A32

    C:\WINDOWS\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.18043_none_14830bbdb30e2246\winsrv.dll
    [2013-02-14 00:38] - [2013-01-04 00:46] - 0215040 ____A (Microsoft Corporation) 0C27239FEA4DB8A2AAC9E502186B7264

    C:\WINDOWS\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.17965_none_146f9457b31c5994\winsrv.dll
    [2012-12-12 01:37] - [2012-10-04 12:45] - 0215040 ____A (Microsoft Corporation) 72CC564BBC70DE268784BCE91EB8A28F

    C:\WINDOWS\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.17932_none_148d033db306b9bc\winsrv.dll
    [2012-10-11 01:06] - [2012-08-20 13:48] - 0215040 ____A (Microsoft Corporation) F46BBAAC1C4980F4D0DD463F190A42D3

    C:\WINDOWS\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.17641_none_14812d55b30fc4e1\winsrv.dll
    [2011-10-26 18:58] - [2011-06-24 00:34] - 0214528 ____A (Microsoft Corporation) EB6A48CC998E1090E44E8E7F1009A640

    C:\WINDOWS\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.17514_none_14a49c11b2f4bfec\winsrv.dll
    [2011-10-27 23:40] - [2010-11-20 08:27] - 0214016 ____A (Microsoft Corporation) E0406AEF04B088D1C49FC78D0546F689

    C:\WINDOWS\winsxs\amd64_microsoft-windows-winsrv.resources_31bf3856ad364e35_6.1.7600.16385_en-us_99be31681e1cff53\winsrv.dll.mui
    [2009-07-14 00:35] - [2009-07-13 21:25] - 0008192 ____A (Microsoft Corporation) 0E4E26AF593AC5023E55333096DDD9EA

    C:\WINDOWS\winsxs\amd64_microsoft-windows-winsrv-adm_31bf3856ad364e35_6.1.7600.16385_none_74fe9f3a6d505307\Winsrv.admx
    [2009-06-10 15:42] - [2009-06-10 15:42] - 0001342 ____A () B28573159BDEA736F3BDFF16604A4AD3

    C:\WINDOWS\winsxs\amd64_microsoft-windows-winsrv-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c01e7ca36d3191ee\Winsrv.adml
    [2009-07-14 00:35] - [2009-07-13 21:29] - 0001453 ____A () 76D4B8899387BCD0C081D4301E1B18DE

    C:\WINDOWS\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
    [2009-07-13 18:19] - [2009-07-13 20:39] - 0328704 ____A (Microsoft Corporation) 24ACB7E5BE595468E3B9AA488B9B4FCB

    C:\WINDOWS\SysWOW64\en-US\winsrv.dll.mui
    [2009-07-14 00:35] - [2009-07-13 21:08] - 0008192 ____A (Microsoft Corporation) 9848765E88322400BDC710A76ADEA841

    C:\WINDOWS\System32\services.exe
    [2009-07-13 18:19] - [2009-07-13 20:39] - 0328704 ____A (Microsoft Corporation) 24ACB7E5BE595468E3B9AA488B9B4FCB

    C:\WINDOWS\System32\winsrv.dll
    [2013-09-12 21:57] - [2013-08-01 21:14] - 0215040 ____A (Microsoft Corporation) 88EDD0B34EED542745931E581AD21A32

    C:\WINDOWS\System32\en-US\winsrv.dll.mui
    [2009-07-14 00:35] - [2009-07-13 21:25] - 0008192 ____A (Microsoft Corporation) 0E4E26AF593AC5023E55333096DDD9EA

    X:\Windows\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7600.16385_none_12738849b6063c52\winsrv.dll
    [2009-07-13 18:38] - [2009-07-13 20:41] - 0214016 ____A (Microsoft Corporation) 457B44AB6D502E55F64A867D4F35C76C

    X:\Windows\winsxs\amd64_microsoft-windows-winsrv.resources_31bf3856ad364e35_6.1.7600.16385_en-us_99be31681e1cff53\winsrv.dll.mui
    [2009-07-13 22:03] - [2009-07-13 22:03] - 0008192 ____A (Microsoft Corporation) 0E4E26AF593AC5023E55333096DDD9EA

    X:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
    [2009-07-13 18:19] - [2009-07-13 20:39] - 0328704 ____A (Microsoft Corporation) 24ACB7E5BE595468E3B9AA488B9B4FCB

    X:\Windows\System32\services.exe
    [2009-07-13 18:19] - [2009-07-13 20:39] - 0328704 ____A (Microsoft Corporation) 24ACB7E5BE595468E3B9AA488B9B4FCB

    X:\Windows\System32\winsrv.dll
    [2009-07-13 18:38] - [2009-07-13 20:41] - 0214016 ____A (Microsoft Corporation) 457B44AB6D502E55F64A867D4F35C76C

    X:\Windows\System32\en-US\winsrv.dll.mui
    [2009-07-13 22:03] - [2009-07-13 22:03] - 0008192 ____A (Microsoft Corporation) 0E4E26AF593AC5023E55333096DDD9EA

    ====== End Of Search ======

    Also, the FRST scan noted LPK.dll - following the other posts I also did a search for LPK.dll:

    search.txt:

    Farbar Recovery Scan Tool (x64) Version: 01-06-2014
    Ran by SYSTEM at 2014-06-02 03:44:17
    Running from F:\
    Boot Mode: Recovery

    ================== Search Files: "LPK.dll" =============

    C:\WINDOWS\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.22195_none_1281c5a8bee46a0f\lpk.dll
    [2009-07-13 18:25] - [2009-07-13 20:11] - 0025600 ____A (Microsoft Corporation) 384721EF4024890092625E20CADFAF85

    C:\WINDOWS\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.22153_none_12ab04c4bec5c79d\lpk.dll
    [2009-07-13 18:25] - [2009-07-13 20:11] - 0025600 ____A (Microsoft Corporation) 384721EF4024890092625E20CADFAF85

    C:\WINDOWS\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.21664_none_12a15568beccd507\lpk.dll
    [2009-07-13 18:25] - [2009-07-13 20:11] - 0025600 ____A (Microsoft Corporation) 384721EF4024890092625E20CADFAF85

    C:\WINDOWS\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18032_none_12360787a598d69a\lpk.dll
    [2009-07-13 18:25] - [2009-07-13 20:11] - 0025600 ____A (Microsoft Corporation) 384721EF4024890092625E20CADFAF85

    C:\WINDOWS\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.17991_none_11f44f93a5ca31a7\lpk.dll
    [2009-07-13 18:25] - [2009-07-13 20:11] - 0025600 ____A (Microsoft Corporation) 384721EF4024890092625E20CADFAF85

    C:\WINDOWS\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.17563_none_1216b853a5b01be6\lpk.dll
    [2009-07-13 18:25] - [2009-07-13 20:11] - 0025600 ____A (Microsoft Corporation) 384721EF4024890092625E20CADFAF85

    C:\WINDOWS\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.17514_none_124dc839a586a988\lpk.dll
    [2009-07-13 18:25] - [2009-07-13 20:11] - 0025600 ____A (Microsoft Corporation) 384721EF4024890092625E20CADFAF85

    C:\WINDOWS\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.22195_none_082d1b568a83a814\lpk.dll
    [2009-07-13 18:38] - [2009-07-13 20:41] - 0041984 ____A (Microsoft Corporation) D202223587518B13D72D68937B7E3F70

    C:\WINDOWS\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.22153_none_08565a728a6505a2\lpk.dll
    [2009-07-13 18:38] - [2009-07-13 20:41] - 0041984 ____A (Microsoft Corporation) D202223587518B13D72D68937B7E3F70

    C:\WINDOWS\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.21664_none_084cab168a6c130c\lpk.dll
    [2009-07-13 18:38] - [2009-07-13 20:41] - 0041984 ____A (Microsoft Corporation) D202223587518B13D72D68937B7E3F70

    C:\WINDOWS\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18032_none_07e15d357138149f\lpk.dll
    [2009-07-13 18:38] - [2009-07-13 20:41] - 0041984 ____A (Microsoft Corporation) D202223587518B13D72D68937B7E3F70

    C:\WINDOWS\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.17991_none_079fa54171696fac\lpk.dll
    [2009-07-13 18:38] - [2009-07-13 20:41] - 0041984 ____A (Microsoft Corporation) D202223587518B13D72D68937B7E3F70

    C:\WINDOWS\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.17563_none_07c20e01714f59eb\lpk.dll
    [2009-07-13 18:38] - [2009-07-13 20:41] - 0041984 ____A (Microsoft Corporation) D202223587518B13D72D68937B7E3F70

    C:\WINDOWS\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.17514_none_07f91de77125e78d\lpk.dll
    [2009-07-13 18:38] - [2009-07-13 20:41] - 0041984 ____A (Microsoft Corporation) D202223587518B13D72D68937B7E3F70

    X:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7600.16385_none_05c80a1f743763f3\lpk.dll
    [2009-07-13 18:38] - [2009-07-13 20:41] - 0041984 ____A (Microsoft Corporation) D202223587518B13D72D68937B7E3F70

    X:\Windows\System32\lpk.dll
    [2009-07-13 18:38] - [2009-07-13 20:41] - 0041984 ____A (Microsoft Corporation) D202223587518B13D72D68937B7E3F70

    ====== End Of Search ======

    From here I have no idea what to do. Any help is appreciated.
     
  2. SpringOnion

    SpringOnion Thread Starter

    Joined:
    Jun 1, 2014
    Messages:
    2
    Never mind, problem solved, used the other posts' fixlog and everything is working fine now.
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1127023

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice