SystemLook 30.07.11 by jpshortstuff
Log created at 20:21 on 02/07/2012 by Marcin
Administrator - Elevation successful

========== filefind ==========

Searching for "userinit.exe "
C:\Tmp\userinit.exe	------- 26624 bytes	[09:54 02/07/2012]	[12:17 20/11/2010] 61AC3EFDFACFDD3F0F11DD4FD4044223
C:\Windows\erdnt\cache\userinit.exe	--a---- 26624 bytes	[19:50 01/07/2012]	[12:17 20/11/2010] 61AC3EFDFACFDD3F0F11DD4FD4044223
C:\Windows\System32\userinit.exe	--a---- 26624 bytes	[17:55 29/06/2012]	[12:17 20/11/2010] 61AC3EFDFACFDD3F0F11DD4FD4044223
C:\_OTL\MovedFiles\07012012_200451\C_Windows\erdnt\cache\userinit.exe	--a---- 2616320 bytes	[19:20 29/06/2012]	[05:30 25/02/2011] 8B88EBBB05A0E56B7DCC708498C02B3E

Searching for "explorer.exe"
C:\Windows\explorer.exe	--a---- 2616320 bytes	[20:42 26/04/2011]	[05:30 25/02/2011] 8B88EBBB05A0E56B7DCC708498C02B3E
C:\Windows\erdnt\cache\explorer.exe	--a---- 2616320 bytes	[19:50 01/07/2012]	[05:30 25/02/2011] 8B88EBBB05A0E56B7DCC708498C02B3E
C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe	--a---- 2616320 bytes	[19:18 21/06/2011]	[12:17 20/11/2010] 40D777B7A95E00593EB1568C68514493
C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe	--a---- 2616320 bytes	[20:42 26/04/2011]	[05:30 25/02/2011] 8B88EBBB05A0E56B7DCC708498C02B3E
C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe	--a---- 2616320 bytes	[20:42 26/04/2011]	[05:19 26/02/2011] 0FB9C74046656D1579A64660AD67B746
C:\_OTL\MovedFiles\07012012_200451\C_Windows\erdnt\cache\explorer.exe	--a---- 2616320 bytes	[19:20 29/06/2012]	[05:30 25/02/2011] 8B88EBBB05A0E56B7DCC708498C02B3E

-= EOF =-