Nachmanowicz
-
Posts
16 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by Nachmanowicz
-
-
Hey! Thanks.
Ive attached the logs. These other hard drives Ive mentioned are all internal.
Anything else you tell me! Cheers!
-
Hello, I've been having real big issues with browsing, and its not recent. My AV is Avast Free right now.
Many websites I am greeted with this ad, it grays out the rest of the screen which is unresponsive until its closed, by clicking on X, which will usually open a new window with russian junk.
They sometimes vary in size and shape, more square, more rectangular, bigger on the Y or X axis.Not that often a russian popups on the top of the screen, bottom right or bottom, containing a counter, when it goes to 0 a "X" for closing appears and I can close it.Now, that gray out middle ad I just showed you is malfunctioning, I can't ever close it, so I gotta click stop on the browser in order to use the page, or else I'm forever stuck in that grayed out screen.I got MalwareBytes, and once it's on, webpages rarely open and I get prompts from it ALL THE TIME saying a Malicious Website was blocked from svchost.exe. Once I saw .ru wbsite blocked too. Anyways, using the internet with Malwarebytes on is impossible, can't be done.I must point out that this started happening as soon as I installed Windows 10, I fixed problems when I had windows 7, then I switched to 10 and as soon as it started, these viruses were in, probably coming in from my other hard drives.Thanks for the attention. -
Oh ballz, I thought I posted it.
Well, so far so good after ZOEK! It kinda reset my chrome, but it worked!!!!!!!
I couldnt enter my moidem/router setup, because I dont have its password. I should call my ISP to get that, I think.
Thanks =3
-
I'm sorry to inform the funky ads persist and I still can't open certain pages if MalwareBytes is on, getting messages like:
This webpage is not availableDNS_PROBE_FINISHED_NXDOMAIN -
2015-05-26 14:43 - 2008-07-02 13:11 - 00013568 _____ () C:\Windows\system32\CNC1737D.TBL2015-05-26 14:42 - 2015-05-26 14:42 - 11017360 _____ () C:\Users\Nach\Downloads\md64-win-mx330-1_02-ej.exe2015-05-26 14:42 - 2015-05-26 14:42 - 00000000 ___HD () C:\Program Files\CanonBJ2015-05-26 14:36 - 2015-05-26 14:36 - 48655952 _____ () C:\Users\Nach\Downloads\mpnx_2_1-win-2_13-ea23_2.exe2015-05-26 14:25 - 2013-07-09 02:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll2015-05-26 14:25 - 2013-07-09 02:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll2015-05-26 14:25 - 2013-07-09 01:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll2015-05-26 14:25 - 2013-07-09 01:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll2015-05-26 14:24 - 2015-01-30 20:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys2015-05-26 14:24 - 2014-03-04 06:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll2015-05-26 14:24 - 2014-03-04 06:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll2015-05-26 14:24 - 2014-03-04 06:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll2015-05-26 14:24 - 2014-03-04 06:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll2015-05-26 14:24 - 2014-03-04 06:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll2015-05-26 14:24 - 2014-03-04 06:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll2015-05-26 14:24 - 2014-03-04 06:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll2015-05-26 14:24 - 2014-03-04 06:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe2015-05-26 14:24 - 2014-03-04 06:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll2015-05-26 14:24 - 2014-03-04 05:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe2015-05-26 14:24 - 2014-03-04 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe2015-05-26 14:24 - 2013-08-01 23:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe2015-05-26 14:24 - 2013-08-01 21:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 21:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 21:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 21:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll2015-05-26 14:24 - 2013-04-10 03:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys2015-05-26 14:24 - 2011-02-03 08:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll2015-05-26 14:23 - 2015-02-18 04:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe2015-05-26 14:23 - 2015-02-18 04:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe2015-05-26 14:23 - 2012-11-23 00:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe2015-05-26 14:04 - 2014-05-14 13:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll2015-05-26 14:04 - 2014-05-14 13:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll2015-05-26 14:04 - 2014-05-14 13:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll2015-05-26 14:04 - 2014-05-14 13:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe2015-05-26 14:04 - 2014-05-14 13:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll2015-05-26 14:04 - 2014-05-14 13:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll2015-05-26 14:04 - 2014-05-14 13:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll2015-05-26 14:04 - 2014-05-14 13:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll2015-05-26 14:04 - 2014-05-14 13:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll2015-05-26 14:04 - 2014-05-14 13:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll2015-05-26 14:04 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll2015-05-26 14:04 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll2015-05-26 14:04 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe2015-05-26 14:04 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe2015-05-26 06:30 - 2015-05-26 06:30 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG2015-05-26 06:30 - 2015-05-26 02:22 - 00000000 ____D () C:\Windows\Panther2015-05-26 05:53 - 2015-05-26 05:56 - 00003328 _____ () C:\Windows\System32\Tasks\EVGAPrecisionX2015-05-26 05:32 - 2015-05-26 05:32 - 00001355 _____ () C:\Windows\TSSysprep.log2015-05-26 05:32 - 2015-05-26 05:32 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk2015-05-26 05:32 - 2015-05-26 05:32 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk2015-05-26 05:30 - 2015-05-26 05:30 - 00002841 _____ () C:\Users\Nach\Unigine_Heaven_Benchmark_4.0_20150526_0530.html2015-05-26 05:17 - 2015-05-27 03:12 - 00000000 ____D () C:\Windows\SysWOW64\directx2015-05-26 05:16 - 2015-05-26 05:16 - 00000000 ____D () C:\Program Files (x86)\EVGA2015-05-26 05:15 - 2015-05-26 05:16 - 18715110 _____ () C:\Users\Nach\Downloads\EVGA_PrecisionX_16_Setup_v5.3.3.zip2015-05-26 04:54 - 2015-05-26 04:54 - 00002922 _____ () C:\Users\Nach\Unigine_Heaven_Benchmark_4.0_20150526_0454.html2015-05-26 04:39 - 2015-05-27 03:09 - 00000000 ____D () C:\temp2015-05-26 04:05 - 2015-06-01 22:29 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Origin2015-05-26 04:05 - 2015-05-26 04:06 - 00000000 ____D () C:\Program Files (x86)\Origin Games2015-05-26 04:05 - 2015-05-26 04:05 - 00000000 ____D () C:\Users\Nach\AppData\Local\Origin2015-05-26 04:03 - 2015-06-04 08:09 - 00000000 ____D () C:\ProgramData\Origin2015-05-26 04:03 - 2015-05-26 20:45 - 00000000 ____D () C:\ProgramData\Electronic Arts2015-05-26 04:03 - 2015-05-26 04:03 - 00000979 _____ () C:\Users\Public\Desktop\Origin.lnk2015-05-26 04:03 - 2015-05-26 04:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin2015-05-26 04:02 - 2015-06-01 22:29 - 00000000 ____D () C:\Program Files (x86)\Origin2015-05-26 04:02 - 2015-05-26 04:02 - 17110336 _____ (Electronic Arts, Inc.) C:\Users\Nach\Downloads\OriginThinSetup.exe2015-05-26 04:01 - 2015-05-26 04:01 - 00000000 ____D () C:\Users\Nach\AppData\Local\Steam2015-05-26 03:59 - 2015-06-04 08:34 - 00000000 ____D () C:\Program Files (x86)\Steam2015-05-26 03:59 - 2015-05-26 03:59 - 01142128 _____ () C:\Users\Nach\Downloads\SteamSetup.exe2015-05-26 03:59 - 2015-05-26 03:59 - 00000963 _____ () C:\Users\Public\Desktop\Steam.lnk2015-05-26 03:59 - 2015-05-26 03:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam2015-05-26 03:41 - 2015-06-04 11:00 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0977f3e5f393.job2015-05-26 03:41 - 2015-06-04 10:46 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0977f4b8115c.job2015-05-26 03:41 - 2015-05-26 03:41 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1d0977f4b8115c2015-05-26 03:41 - 2015-05-26 03:41 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1d0977f3e5f3932015-05-26 03:41 - 2015-05-26 03:41 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\NVIDIA2015-05-26 03:41 - 2015-05-26 03:41 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z2015-05-26 03:41 - 2015-05-26 03:41 - 00000000 ____D () C:\Program Files (x86)\GPU-Z2015-05-26 03:40 - 2015-05-26 03:40 - 01582736 _____ ( ) C:\Users\Nach\Downloads\cpu-z_1.72-en.exe2015-05-26 03:40 - 2015-05-26 03:40 - 00000869 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk2015-05-26 03:40 - 2015-05-26 03:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID2015-05-26 03:40 - 2015-05-26 03:40 - 00000000 ____D () C:\Program Files\CPUID2015-05-26 03:10 - 2015-05-26 03:10 - 00000000 ____D () C:\Users\Nach\AppData\Local\Logitech® Webcam Software2015-05-26 03:08 - 2015-05-26 03:08 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Leadertech2015-05-26 03:07 - 2015-05-26 03:08 - 00010101 _____ () C:\Windows\system32\lvcoinst.log2015-05-26 03:07 - 2015-05-26 03:08 - 00003744 _____ () C:\Windows\LDPINST.LOG2015-05-26 03:07 - 2015-05-26 03:08 - 00000000 ____D () C:\Program Files\Common Files\logishrd2015-05-26 03:07 - 2015-05-26 03:08 - 00000000 ____D () C:\Program Files (x86)\Logitech2015-05-26 03:07 - 2015-05-26 03:07 - 00001624 _____ () C:\Users\Public\Desktop\Logitech Webcam Software .lnk2015-05-26 03:05 - 2015-05-26 03:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech2015-05-26 03:05 - 2015-05-26 03:05 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys2015-05-26 03:05 - 2015-05-26 03:05 - 00000388 _____ () C:\Windows\LkmdfCoInst.log2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\Users\Nach\AppData\Local\Logitech2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\ProgramData\LogiShrd2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\ProgramData\Apple2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\Program Files\Logitech Gaming Software2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\Program Files\Bonjour2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\Program Files (x86)\Bonjour2015-05-26 03:04 - 2015-05-26 03:04 - 74637872 _____ (Logitech, Inc.) C:\Users\Nach\Downloads\lws251.exe2015-05-26 03:04 - 2015-05-26 03:04 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Logitech2015-05-26 03:04 - 2015-05-26 03:04 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Logishrd2015-05-26 03:02 - 2015-05-26 03:03 - 74818632 _____ (Logitech Inc.) C:\Users\Nach\Downloads\LGS_8.58.183_x64_Logitech.exe2015-05-26 02:57 - 2015-05-26 02:58 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\QuickScan2015-05-26 02:57 - 2015-05-26 02:57 - 10447328 _____ () C:\Users\Nach\Downloads\Antivirus_Free_Edition_x64.exe2015-05-26 02:57 - 2015-05-26 02:57 - 00162208 _____ () C:\Users\Nach\Downloads\Antivirus_Free_Edition.exe2015-05-26 02:46 - 2015-05-26 02:54 - 00000000 ____D () C:\Users\Nach\Heaven2015-05-26 02:44 - 2015-05-27 20:25 - 02128896 _____ () C:\Users\Nach\AppData\Local\file__0.localstorage2015-05-26 02:44 - 2015-05-27 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unigine2015-05-26 02:44 - 2015-05-27 20:24 - 00000000 ____D () C:\Program Files (x86)\Unigine2015-05-26 02:44 - 2015-05-26 02:44 - 00002117 _____ () C:\Users\Public\Desktop\Heaven Benchmark 4.0.lnk2015-05-26 02:43 - 2015-05-26 04:58 - 00001377 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk2015-05-26 02:43 - 2015-05-26 04:58 - 00000000 ____D () C:\Users\Nach\AppData\Local\NVIDIA Corporation2015-05-26 02:43 - 2015-05-26 04:58 - 00000000 ____D () C:\Users\Nach\AppData\Local\NVIDIA2015-05-26 02:43 - 2015-05-26 04:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation2015-05-26 02:43 - 2015-05-07 21:35 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll2015-05-26 02:43 - 2015-05-07 21:35 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll2015-05-26 02:43 - 2015-05-07 21:34 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll2015-05-26 02:43 - 2015-05-07 21:34 - 01570672 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll2015-05-26 02:43 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll2015-05-26 02:43 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll2015-05-26 02:43 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll2015-05-26 02:43 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll2015-05-26 02:43 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll2015-05-26 02:43 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll2015-05-26 02:42 - 2015-06-04 11:02 - 00006464 _____ () C:\Windows\SysWOW64\Gms.log2015-05-26 02:42 - 2015-05-26 04:42 - 00000000 ____D () C:\ProgramData\NVIDIA2015-05-26 02:42 - 2015-05-26 04:38 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation2015-05-26 02:42 - 2015-05-26 02:43 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation2015-05-26 02:42 - 2015-05-13 03:52 - 01558848 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll2015-05-26 02:42 - 2015-05-13 03:52 - 00195912 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys2015-05-26 02:42 - 2015-05-13 03:52 - 00031552 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 42718864 _____ () C:\Windows\system32\nvcompiler.dll2015-05-26 02:42 - 2015-05-12 03:27 - 37741712 _____ () C:\Windows\SysWOW64\nvcompiler.dll2015-05-26 02:42 - 2015-05-12 03:27 - 30478992 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 22945424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll2015-05-26 02:42 - 2015-05-12 03:27 - 17540416 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll2015-05-26 02:42 - 2015-05-12 03:27 - 16145176 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll2015-05-26 02:42 - 2015-05-12 03:27 - 15858728 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll2015-05-26 02:42 - 2015-05-12 03:27 - 15048816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll2015-05-26 02:42 - 2015-05-12 03:27 - 14455296 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll2015-05-26 02:42 - 2015-05-12 03:27 - 13263568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll2015-05-26 02:42 - 2015-05-12 03:27 - 12849056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll2015-05-26 02:42 - 2015-05-12 03:27 - 11790144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll2015-05-26 02:42 - 2015-05-12 03:27 - 10972304 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys2015-05-26 02:42 - 2015-05-12 03:27 - 03363224 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 02971776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll2015-05-26 02:42 - 2015-05-12 03:27 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll2015-05-26 02:42 - 2015-05-12 03:27 - 02599056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll2015-05-26 02:42 - 2015-05-12 03:27 - 01898312 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435286.dll2015-05-26 02:42 - 2015-05-12 03:27 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435286.dll2015-05-26 02:42 - 2015-05-12 03:27 - 01099808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll2015-05-26 02:42 - 2015-05-12 03:27 - 01059984 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 01050256 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00982672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00974480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00939080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00502896 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00408208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00407296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00364176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00176064 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00154256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00112784 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00105288 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00031710 _____ () C:\Windows\system32\nvinfo.pb2015-05-26 02:42 - 2015-05-12 00:30 - 06872392 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll2015-05-26 02:42 - 2015-05-12 00:30 - 03490448 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll2015-05-26 02:42 - 2015-05-12 00:30 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll2015-05-26 02:42 - 2015-05-12 00:30 - 00937288 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe2015-05-26 02:42 - 2015-05-12 00:30 - 00385352 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll2015-05-26 02:42 - 2015-05-12 00:30 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll2015-05-26 02:42 - 2015-05-11 14:01 - 04391871 _____ () C:\Windows\system32\nvcoproc.bin2015-05-26 02:42 - 2014-11-22 07:46 - 00038032 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys2015-05-26 02:42 - 2014-11-22 07:46 - 00035472 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll2015-05-26 02:42 - 2014-11-22 07:46 - 00032400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll2015-05-26 02:41 - 2015-05-26 02:43 - 00000000 ____D () C:\Program Files\NVIDIA Corporation2015-05-26 02:41 - 2015-05-26 02:41 - 00000000 ____D () C:\NVIDIA2015-05-26 02:40 - 2015-05-26 02:40 - 00000000 ___HD () C:\Program Files (x86)\Temp2015-05-26 02:40 - 2015-05-26 02:40 - 00000000 ____H () C:\ProgramData\DP45977C.lfl2015-05-26 02:40 - 2015-05-26 02:40 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM2015-05-26 02:40 - 2015-05-26 02:40 - 00000000 ____D () C:\Program Files\Realtek2015-05-26 02:40 - 2015-05-26 02:40 - 00000000 ____D () C:\Program Files (x86)\Realtek2015-05-26 02:40 - 2014-05-28 20:23 - 03977944 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys2015-05-26 02:40 - 2014-05-28 14:35 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll2015-05-26 02:40 - 2014-05-28 11:38 - 01137695 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT2015-05-26 02:40 - 2014-05-26 15:00 - 62006272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat2015-05-26 02:40 - 2014-05-23 13:54 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll2015-05-26 02:40 - 2014-05-22 16:24 - 00096568 _____ () C:\Windows\system32\audioLibVc.dll2015-05-26 02:40 - 2014-05-22 13:21 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll2015-05-26 02:40 - 2014-05-19 17:16 - 02843352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll2015-05-26 02:40 - 2014-05-19 10:47 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll2015-05-26 02:40 - 2014-05-14 15:47 - 02119472 _____ () C:\Windows\system32\SStudio.dll2015-05-26 02:40 - 2014-05-09 11:17 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll2015-05-26 02:40 - 2014-04-17 17:42 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll2015-05-26 02:40 - 2014-04-17 17:42 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll2015-05-26 02:40 - 2014-04-17 17:42 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll2015-05-26 02:40 - 2014-04-10 12:20 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll2015-05-26 02:40 - 2014-04-10 12:20 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll2015-05-26 02:40 - 2014-04-10 12:19 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll2015-05-26 02:40 - 2014-04-09 16:39 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll2015-05-26 02:40 - 2014-04-09 16:38 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll2015-05-26 02:40 - 2014-04-07 16:03 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll2015-05-26 02:40 - 2014-04-07 16:03 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll2015-05-26 02:40 - 2014-04-07 16:03 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll2015-05-26 02:40 - 2014-04-07 16:03 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll2015-05-26 02:40 - 2014-03-21 14:17 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll2015-05-26 02:40 - 2014-03-19 19:19 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll2015-05-26 02:40 - 2014-03-06 16:35 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl2015-05-26 02:40 - 2014-03-05 05:11 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll2015-05-26 02:40 - 2014-03-05 05:11 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll2015-05-26 02:40 - 2014-03-05 05:11 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll2015-05-26 02:40 - 2014-03-05 05:11 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll2015-05-26 02:40 - 2014-02-27 20:02 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll2015-05-26 02:40 - 2014-02-18 17:04 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll2015-05-26 02:40 - 2014-02-06 11:28 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat2015-05-26 02:40 - 2014-01-31 17:27 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll2015-05-26 02:40 - 2014-01-28 11:48 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll2015-05-26 02:40 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll2015-05-26 02:40 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll2015-05-26 02:40 - 2013-10-11 11:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll2015-05-26 02:40 - 2013-10-07 00:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll2015-05-26 02:40 - 2013-10-07 00:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll2015-05-26 02:40 - 2013-10-07 00:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll2015-05-26 02:40 - 2013-08-14 15:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll2015-05-26 02:40 - 2013-08-14 15:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll2015-05-26 02:40 - 2013-06-25 12:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll2015-05-26 02:40 - 2013-06-25 12:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll2015-05-26 02:40 - 2013-06-25 12:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll2015-05-26 02:40 - 2013-06-21 11:01 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll2015-05-26 02:40 - 2013-04-03 14:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll2015-05-26 02:40 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll2015-05-26 02:40 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll2015-05-26 02:40 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll2015-05-26 02:40 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll2015-05-26 02:40 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll2015-05-26 02:40 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll2015-05-26 02:40 - 2012-01-30 11:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll2015-05-26 02:40 - 2012-01-10 10:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll2015-05-26 02:40 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll2015-05-26 02:40 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll2015-05-26 02:40 - 2011-09-02 14:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll2015-05-26 02:40 - 2011-09-02 14:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll2015-05-26 02:40 - 2011-09-02 14:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll2015-05-26 02:40 - 2011-08-23 17:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll2015-05-26 02:40 - 2011-03-17 12:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll2015-05-26 02:40 - 2011-03-07 17:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll2015-05-26 02:40 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll2015-05-26 02:40 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll2015-05-26 02:40 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll2015-05-26 02:40 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll2015-05-26 02:40 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll2015-05-26 02:40 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll2015-05-26 02:40 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll2015-05-26 02:39 - 2015-05-26 02:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf2015-05-26 02:37 - 2015-05-26 02:39 - 00000000 ____D () C:\ProgramData\Intel2015-05-26 02:37 - 2015-05-26 02:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel2015-05-26 02:37 - 2015-05-26 02:37 - 00000000 ____D () C:\Users\Nach\Intel2015-05-26 02:37 - 2015-05-26 02:37 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Intel Corporation2015-05-26 02:36 - 2015-05-26 02:36 - 00002253 _____ () C:\Users\Public\Desktop\Google Chrome.lnk2015-05-26 02:36 - 2015-05-26 02:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome2015-05-26 02:35 - 2015-06-04 11:00 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job2015-05-26 02:35 - 2015-06-04 10:40 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job2015-05-26 02:35 - 2015-05-26 02:36 - 00000000 ____D () C:\Users\Nach\AppData\Local\Google2015-05-26 02:35 - 2015-05-26 02:36 - 00000000 ____D () C:\Program Files (x86)\Google2015-05-26 02:35 - 2015-05-26 02:35 - 00004060 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA2015-05-26 02:35 - 2015-05-26 02:35 - 00003808 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore2015-05-26 02:35 - 2015-05-26 02:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf2015-05-26 02:35 - 2015-05-26 02:35 - 00000000 ____D () C:\Users\Nach\AppData\Local\Deployment2015-05-26 02:35 - 2015-05-26 02:35 - 00000000 ____D () C:\Users\Nach\AppData\Local\Apps\2.02015-05-26 02:34 - 2015-05-26 02:39 - 00000000 ____D () C:\Program Files\Intel2015-05-26 02:34 - 2015-05-26 02:39 - 00000000 ____D () C:\Program Files (x86)\Intel2015-05-26 02:34 - 2015-05-26 02:34 - 00000000 ____D () C:\Intel2015-05-26 02:34 - 2014-02-21 13:56 - 00041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll2015-05-26 02:33 - 2015-05-28 02:55 - 00000000 ____D () C:\ProgramData\Package Cache2015-05-26 02:28 - 2015-05-28 01:37 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information2015-05-26 02:28 - 2015-05-26 02:28 - 00057560 _____ () C:\Users\Nach\AppData\Local\GDIPFONTCACHEV1.DAT2015-05-26 02:27 - 2015-05-26 19:00 - 00775384 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI2015-05-26 02:26 - 2015-05-26 02:26 - 00000000 ____D () C:\ProgramData\Downloaded Installations2015-05-26 02:24 - 2012-07-26 01:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys2015-05-26 02:24 - 2012-07-26 01:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys2015-05-26 02:24 - 2012-07-25 23:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll2015-05-26 02:24 - 2012-06-02 11:35 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf2015-05-26 02:22 - 2015-06-04 11:07 - 01786536 _____ () C:\Windows\WindowsUpdate.log2015-05-26 02:22 - 2015-06-03 11:06 - 00001413 _____ () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk2015-05-26 02:22 - 2015-05-27 20:26 - 00000000 ____D () C:\Users\Nach2015-05-26 02:22 - 2015-05-26 02:22 - 00000020 ___SH () C:\Users\Nach\ntuser.ini2015-05-26 02:22 - 2015-05-26 02:22 - 00000000 __SHD () C:\Recovery2015-05-26 02:22 - 2009-07-14 01:54 - 00000000 ___RD () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories2015-05-26 02:22 - 2009-07-14 01:49 - 00000000 ___RD () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance==================== One Month Modified files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-06-04 11:14 - 2009-07-14 01:51 - 00048830 _____ () C:\Windows\setupact.log2015-06-04 11:12 - 2009-07-14 01:45 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A02015-06-04 11:12 - 2009-07-14 01:45 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A02015-06-04 11:00 - 2009-07-14 02:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT2015-06-03 21:51 - 2009-07-14 02:13 - 00783606 _____ () C:\Windows\system32\PerfStringBackup.INI2015-06-03 15:58 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\rescache2015-06-03 11:06 - 2009-07-14 01:45 - 00265552 _____ () C:\Windows\system32\FNTCACHE.DAT2015-06-03 11:05 - 2011-04-12 05:28 - 00000000 ____D () C:\Program Files\Windows Journal2015-06-03 11:05 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK2015-06-03 11:05 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR2015-06-03 11:05 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\system32\zh-HK2015-06-03 11:05 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\system32\tr-TR2015-06-03 11:05 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\PolicyDefinitions2015-06-02 21:29 - 2010-11-21 00:47 - 00149122 _____ () C:\Windows\PFRO.log2015-06-02 05:11 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\system32\NDF2015-06-01 21:54 - 2009-07-14 02:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games2015-05-27 19:41 - 2009-07-14 02:32 - 00000000 ____D () C:\Windows\Offline Web Pages2015-05-27 02:07 - 2009-07-14 00:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared2015-05-26 20:45 - 2009-07-14 00:20 - 00000000 __RHD () C:\Users\Public\Libraries2015-05-26 14:43 - 2009-07-14 00:20 - 00000000 __RSD () C:\Windows\Media2015-05-26 06:30 - 2009-07-14 02:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template2015-05-26 05:38 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\LiveKernelReports2015-05-26 05:32 - 2009-07-14 01:46 - 00002790 _____ () C:\Windows\DtcInstall.log2015-05-26 05:32 - 2009-07-14 00:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories2015-05-26 05:32 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\system32\sysprep2015-05-26 05:30 - 2011-04-12 05:28 - 00000000 ____D () C:\Windows\CSC2015-05-26 04:38 - 2009-07-14 02:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD2015-05-26 03:11 - 2009-07-14 01:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk2015-05-26 02:42 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\Help2015-05-26 02:24 - 2009-07-14 02:32 - 00000000 ____D () C:\Windows\system32\restore2015-05-26 02:22 - 2009-07-14 01:45 - 00000000 ____D () C:\Windows\Setup==================== Files in the root of some directories =======2015-05-28 01:36 - 2015-05-28 01:36 - 0000000 _____ () C:\Users\Nach\AppData\Local\Driver_LOM_8161Present.flag2015-05-26 02:44 - 2015-05-27 20:25 - 2128896 _____ () C:\Users\Nach\AppData\Local\file__0.localstorage2015-05-26 02:40 - 2015-05-26 02:40 - 0000000 ____H () C:\ProgramData\DP45977C.lflSome files in TEMP:====================C:\Users\Nach\AppData\Local\Temp\dllnt_dump.dllC:\Users\Nach\AppData\Local\Temp\Quarantine.exeC:\Users\Nach\AppData\Local\Temp\sqlite3.dll==================== Bamital & volsnap Check =================(There is no automatic fix for files that do not pass verification.)C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\SysWOW64\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signedLastRegBack: 2015-06-03 15:51==================== End of log ============================Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-05-2015Ran by Nach at 2015-06-04 11:17:27Running from C:\Users\Nach\DesktopBoot Mode: Normal============================================================================== Accounts: =============================Administrator (S-1-5-21-318558523-3823039876-2902504939-500 - Administrator - Disabled)Guest (S-1-5-21-318558523-3823039876-2902504939-501 - Limited - Disabled)Nach (S-1-5-21-318558523-3823039876-2902504939-1000 - Administrator - Enabled) => C:\Users\Nach==================== Security Center ========================(If an entry is included in the fixlist, it will be removed.)AV: Bitdefender Antivirus (Disabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D}AS: Bitdefender Antispyware (Disabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}FW: Bitdefender Firewall (Disabled) {A23392FD-84B9-F933-2C71-81E751F6EF46}==================== Installed Programs ======================(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)"Batman - Arkham City" (HKLM-x32\...\{71AD83D4-6F74-4257-8398-8D1BFEA91EFF}_is1) (Version: 1.1.0.0 - )µTorrent (HKU\S-1-5-21-318558523-3823039876-2902504939-1000\...\uTorrent) (Version: 3.4.3.40298 - BitTorrent Inc.)Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 15.007.20033 - Adobe Systems Incorporated)Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version: - Hidden Path Entertainment, Ensemble Studios)Bitdefender Total Security 2015 (HKLM\...\Bitdefender) (Version: 18.20.0.1429 - Bitdefender)Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) HiddenCanon MP Navigator EX 2.1 (HKLM-x32\...\MP Navigator EX 2.1) (Version: - )Canon MX330 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX330_series) (Version: - Canon Inc.)Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)CPUID CPU-Z 1.72 (HKLM\...\CPUID CPU-Z_is1) (Version: - )Creation Master 15.0 (HKLM-x32\...\Creation Master 15_is1) (Version: - FIFA MASTER)EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.7.0.0 - Electronic Arts)erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) HiddenFraps (remove only) (HKLM-x32\...\Fraps) (Version: - )Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) HiddenGrand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)GRID (HKLM-x32\...\Steam App 12750) (Version: - Codemasters Studios)Heaven Benchmark version 4.0 (HKLM-x32\...\Unigine Heaven Benchmark (Basic Edition)_is1) (Version: 4.0 - Unigine Corp.)Intel® Chipset Device Software (x32 Version: 10.0.20 - Intel® Corporation) HiddenIntel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)Logitech Gaming Software 8.58 (HKLM\...\Logitech Gaming Software) (Version: 8.58.183 - Logitech Inc.)Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)Malwarebytes Anti-Malware version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)Mozilla Firefox 38.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 en-US)) (Version: 38.0.5 - Mozilla)Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.0.5 - Mozilla)MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD)NVIDIA 3D Vision Controller Driver 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)NVIDIA GeForce Experience 2.4.3.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.3.31 - NVIDIA Corporation)NVIDIA Graphics Driver 352.86 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 352.86 - NVIDIA Corporation)NVIDIA HD Audio Driver 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)OpenAL (HKLM-x32\...\OpenAL) (Version: - )Origin (HKLM-x32\...\Origin) (Version: 9.5.12.2862 - Electronic Arts, Inc.)Project CARS (HKLM-x32\...\Project CARS_R.G. Mechanics_is1) (Version: - R.G. Mechanics, ProZorg_tm)Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.0.30.1259 - Qualcomm Atheros) HiddenQualcomm Atheros Killer E220x Drivers (Version: 1.0.30.1259 - Qualcomm Atheros) HiddenQualcomm Atheros Killer Network Manager Suite (HKLM-x32\...\{FE5DFB80-6937-4154-A2C7-EF845C1301F8}) (Version: 1.0.30.1259 - Qualcomm Atheros)Qualcomm Atheros Network Manager (Version: 1.0.30.1259 - Qualcomm Atheros) HiddenRealtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7256 - Realtek Semiconductor Corp.)Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) HiddenSHIELD Wireless Controller Driver (Version: 2.4.3.31 - NVIDIA Corporation) HiddenSkype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.101 - Skype Technologies S.A.)Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.5.4 - Sophos Limited)Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp)The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.0.0 - GOG.com)Unigine Valley Benchmark version 1.0 (HKLM-x32\...\Unigine Valley Benchmark_is1) (Version: 1.0 - Unigine Corp.)VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)==================== Custom CLSID (Whitelisted): ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== Restore Points =========================01-06-2015 21:54:31 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.6103002-06-2015 21:43:16 Installed Sophos Virus Removal Tool.03-06-2015 10:42:56 Windows Update==================== Hosts content: ===============================(If needed Hosts: directive could be included in the fixlist to reset Hosts.)2009-07-13 23:34 - 2009-06-10 18:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts==================== Scheduled Tasks (Whitelisted) =============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)Task: {04896E09-1B7E-470F-B796-319FA3FF54B6} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2014-12-06] ()Task: {332DF19C-15ED-47C2-B41B-FD0966C6D230} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-03-07] (Adobe Systems Incorporated)Task: {4A459083-3C0D-47DF-BBF8-B954C9A7F079} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-26] (Google Inc.)Task: {70553BA1-A890-422D-B3A2-07A9FD4BCDDF} - System32\Tasks\GoogleUpdateTaskMachineUA1d0977f4b8115c => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-26] (Google Inc.)Task: {714D0294-6844-47CB-BBB4-E3355CF88D6B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-26] (Google Inc.)Task: {8FD47602-92B6-4BA3-AB5C-DF206E6E8809} - System32\Tasks\GoogleUpdateTaskMachineCore1d0977f3e5f393 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-26] (Google Inc.)Task: {AD7D643B-DA81-43C4-A6C1-6BC52C59CF93} - System32\Tasks\EVGAPrecisionX => C:\Program Files (x86)\EVGA\PrecisionX 16\PrecisionX_x64.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0977f3e5f393.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0977f4b8115c.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe==================== Loaded Modules (Whitelisted) ==============2015-05-27 19:38 - 2014-08-27 16:31 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\txmlutil.dll2015-05-27 19:38 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdmetrics.dll2015-05-27 19:38 - 2014-12-17 14:34 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\UI\accessl.ui2015-05-27 19:38 - 2012-10-29 14:22 - 00152816 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdfwcore.dll2015-05-27 20:24 - 2015-05-27 20:24 - 00790368 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_002\ashttpbr.mdl2015-05-27 20:24 - 2015-05-27 20:24 - 00711064 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_002\ashttpdsp.mdl2015-05-27 20:24 - 2015-05-27 20:24 - 02683520 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_002\ashttpph.mdl2015-05-27 20:24 - 2015-05-27 20:24 - 01326504 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_002\ashttprbl.mdl2015-05-27 19:38 - 2015-05-27 19:44 - 00471056 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdidntconp.dll2015-05-27 19:38 - 2015-05-27 19:44 - 00187904 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\ui\bdidntconp.ui2014-03-20 11:43 - 2014-03-20 11:43 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\ACE.dll2015-05-26 02:36 - 2015-05-22 17:22 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\libglesv2.dll2015-05-26 02:36 - 2015-05-22 17:22 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\libegl.dll2015-05-26 02:36 - 2015-05-22 17:22 - 14982472 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\PepperFlash\pepflashplayer.dll==================== Alternate Data Streams (Whitelisted) =========(If an entry is included in the fixlist, only the ADS will be removed.)AlternateDataStreams: C:\Users\Nach\Desktop\AdwCleaner.exe:BDUAlternateDataStreams: C:\Users\Nach\Desktop\FRST64.exe:BDUAlternateDataStreams: C:\Users\Nach\Desktop\rkill.exe:BDUAlternateDataStreams: C:\Users\Nach\Desktop\RogueKiller.exe:BDUAlternateDataStreams: C:\Users\Nach\Desktop\SecurityCheck.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\dxwebsetup.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\Firefox Setup Stub 38.0.5.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\md64-win-mx330-1_02-ej.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\mpnx_2_1-win-2_13-ea23_2.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\SkypeSetupFull.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\uTorrent.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\vlc-2.2.1-win32.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\Xbox360_64Eng.exe:BDU==================== Safe Mode (Whitelisted) ===================(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)==================== EXE Association (Whitelisted) ===============(If an entry is included in the fixlist, the registry item will be restored to default or removed.)==================== Internet Explorer trusted/restricted ===============(If an entry is included in the fixlist, it will be removed from the registry.)==================== Other Areas ============================(Currently there is no automatic fix for this section.)HKU\S-1-5-21-318558523-3823039876-2902504939-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpgDNS Servers: 8.8.8.8 - 8.8.4.4==================== MSCONFIG/TASK MANAGER disabled items ==(Currently there is no automatic fix for this section.)==================== FirewallRules (Whitelisted) ===============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)FirewallRules: [sPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exeFirewallRules: [sPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe==================== Faulty Device Manager Devices ================================= Event log errors: =========================Application errors:==================Error: (06/04/2015 11:02:10 AM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003Error: (06/04/2015 08:09:09 AM) (Source: Steam Client Service) (EventID: 1) (User: )Description: Error: Failed to add firewall exception for C:\Program Files (x86)\Steam\steam.exeError: (06/04/2015 02:24:55 AM) (Source: Steam Client Service) (EventID: 1) (User: )Description: Error: Failed to add firewall exception for C:\Program Files (x86)\Steam\steam.exeError: (06/03/2015 09:46:57 PM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003Error: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:54099 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:60490 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:57820 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:54160 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:63332 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:65202 length 0 too shortSystem errors:=============Error: (06/04/2015 11:05:28 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: The Software Protection service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.Error: (06/04/2015 11:05:28 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Intel® Dynamic Application Loader Host Interface Service service terminated unexpectedly. It has done this 1 time(s).Error: (06/04/2015 11:05:28 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Intel® Rapid Storage Technology service terminated unexpectedly. It has done this 1 time(s).Error: (06/04/2015 11:05:28 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.Error: (06/04/2015 11:05:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Qualcomm Atheros Killer Service V2 service terminated unexpectedly. It has done this 1 time(s).Error: (06/04/2015 11:05:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The NVIDIA Streamer Service service terminated unexpectedly. It has done this 1 time(s).Error: (06/04/2015 11:05:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The NVIDIA Network Service service terminated unexpectedly. It has done this 1 time(s).Error: (06/04/2015 11:05:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The NVIDIA GeForce Experience Service service terminated unexpectedly. It has done this 1 time(s).Error: (06/04/2015 11:05:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Bonjour Service service terminated unexpectedly. It has done this 1 time(s).Error: (06/04/2015 11:05:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Adobe Acrobat Update Service service terminated unexpectedly. It has done this 1 time(s).Microsoft Office:=========================Error: (06/04/2015 11:02:10 AM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003Error: (06/04/2015 08:09:09 AM) (Source: Steam Client Service) (EventID: 1) (User: )Description: Failed to add firewall exception for C:\Program Files (x86)\Steam\steam.exeError: (06/04/2015 02:24:55 AM) (Source: Steam Client Service) (EventID: 1) (User: )Description: Failed to add firewall exception for C:\Program Files (x86)\Steam\steam.exeError: (06/03/2015 09:46:57 PM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003Error: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:54099 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:60490 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:57820 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:54160 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:63332 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:65202 length 0 too short==================== Memory info ===========================Processor: Intel® Core i5-4690K CPU @ 3.50GHzPercentage of memory in use: 22%Total physical RAM: 16293.58 MBAvailable physical RAM: 12631.87 MBTotal Pagefile: 32585.35 MBAvailable Pagefile: 28484.76 MBTotal Virtual: 8192 MBAvailable Virtual: 8191.83 MB==================== Drives ================================Drive c: () (Fixed) (Total:238.37 GB) (Free:9.13 GB) NTFSDrive d: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[system with boot components (obtained from reading drive)]Drive e: (Data) (Fixed) (Total:931.51 GB) (Free:376.58 GB) NTFSDrive f: (Móvel) (Fixed) (Total:1863.01 GB) (Free:445.35 GB) NTFSDrive g: (Software) (Fixed) (Total:801.51 GB) (Free:722.62 GB) NTFS==================== MBR & Partition Table ==========================================================================Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 000A788F)Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)========================================================Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 0AE75AEB)Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)========================================================Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 2E2F1945)Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)Partition 2: (Not Active) - (Size=801.5 GB) - (Type=07 NTFS)========================================================Disk: 3 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1D42D274)Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)========================================================Disk: 4 (Size: 111.8 GB) (Disk ID: 00087AEE)Partition 1: (Active) - (Size=243 MB) - (Type=83)Partition 2: (Not Active) - (Size=111.6 GB) - (Type=05)==================== End of log ============================I will now reset the computer and see if the problem persists.
-
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-05-2015Ran by Nach (administrator) on NACH-PC on 04-06-2015 11:17:17Running from C:\Users\Nach\DesktopLoaded Profiles: Nach (Available Profiles: Nach)Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)Internet Explorer Version 10 (Default browser: Chrome)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\seccenter.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe==================== Registry (Whitelisted) ==================(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-05-27] (Realtek Semiconductor)HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2685072 2015-05-07] (NVIDIA Corporation)HKLM\...\Run: [shadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStartHKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [13318424 2015-03-12] (Logitech Inc.)HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)HKLM\...\Run: [bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1691112 2015-05-27] (Bitdefender)HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)HKU\S-1-5-21-318558523-3823039876-2902504939-1000\...\Run: [bitdefender Wallet Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790880 2015-05-27] (Bitdefender)Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2015-05-28]ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{401FADAA-1C16-4721-9F02-19067E1A1CA8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)Startup: C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk [2015-05-28]ShortcutTarget: Logitech . Product Registration.lnk -> C:\Program Files (x86)\Logitech\Ereg\eReg.exe (Leader Technologies/Logitech)ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)==================== Internet (Whitelisted) ====================(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =HKU\S-1-5-21-318558523-3823039876-2902504939-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blankHKU\S-1-5-21-318558523-3823039876-2902504939-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pt-br/?ocid=iehpSearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2015-05-27] (Bitdefender)BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2015-05-27] (Bitdefender)BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2015-05-27] (Bitdefender)Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2015-05-27] (Bitdefender)Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)Tcpip\Parameters: [DhcpNameServer] 89.248.166.149 8.8.8.8Tcpip\..\Interfaces\{2F05DAF2-001F-4356-97BC-279A97204CA9}: [NameServer] 8.8.8.8,8.8.4.4,192.168.0.1FireFox:========FF ProfilePath: C:\Users\Nach\AppData\Roaming\Mozilla\Firefox\Profiles\ceywwvhy.defaultFF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-03-20] (Intel Corporation)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-03-20] (Intel Corporation)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-26] (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-26] (Google Inc.)FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-03-17] (Adobe Systems Inc.)FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbextFF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2015-05-27]FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteffFF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff [2015-05-27]FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbextChrome:=======CHR Profile: C:\Users\Nach\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Drive) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-26]CHR Extension: (YouTube) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-26]CHR Extension: (Google Search) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-26]CHR Extension: (AdBlock) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-05-28]CHR Extension: (Bookmark Manager) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-26]CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-02]CHR Extension: (Skype Click to Call) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-05-27]CHR Extension: (Google Wallet) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-26]CHR Extension: (Gmail) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-26]CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - https://clients2.google.com/service/update2/crxCHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]==================== Services (Whitelisted) =================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)S3 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [78144 2014-12-09] (Bitdefender)R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-07] (NVIDIA Corporation)S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel® Corporation)S2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1884304 2015-05-07] (NVIDIA Corporation)S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22997648 2015-05-07] (NVIDIA Corporation)S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1997168 2015-06-01] (Electronic Arts)S2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [343040 2013-08-08] (Qualcomm Atheros) [File not signed]S4 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [67320 2014-10-27] (Bitdefender)R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1547936 2015-05-27] (Bitdefender)R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)==================== Drivers (Whitelisted) ====================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1306464 2015-05-27] (BitDefender)R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [262544 2015-05-27] (BitDefender)S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [677104 2015-05-27] (BitDefender)R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2015-05-27] (BitDefender LLC)R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107080 2012-10-29] (BitDefender LLC)S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2012-04-17] (BitDefender)R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [67888 2013-02-13] (Qualcomm Atheros, Inc.)R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [160544 2015-05-27] (BitDefender LLC)R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation)R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-07] (NVIDIA Corporation)R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-03-11] ()U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-06-03] ()R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [452040 2014-10-15] (BitDefender S.R.L.)==================== NetSvcs (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== One Month Created files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-06-04 11:08 - 2015-06-04 11:10 - 51789024 _____ (Microsoft Corporation) C:\Users\Nach\Desktop\Windows-KB890830-x64-V5.24.exe2015-06-04 11:06 - 2015-06-04 11:06 - 00001135 _____ () C:\Users\Nach\Desktop\JRT.txt2015-06-04 11:05 - 2015-06-04 11:05 - 02942610 _____ (Thisisu) C:\Users\Nach\Desktop\JRT.exe2015-06-04 10:58 - 2015-06-04 10:58 - 02231296 _____ () C:\Users\Nach\Desktop\AdwCleaner.exe2015-06-03 21:41 - 2015-06-03 21:43 - 00558117 _____ () C:\Users\Nach\Desktop\DnsJumper_v1.0.6.zip2015-06-03 14:57 - 2015-06-03 15:15 - 00000000 ____D () C:\ProgramData\RogueKiller2015-06-03 14:57 - 2015-06-03 14:57 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys2015-06-03 14:49 - 2015-06-03 14:50 - 17637624 _____ () C:\Users\Nach\Desktop\RogueKiller.exe2015-06-03 14:45 - 2015-06-03 21:47 - 00025310 _____ () C:\Users\Nach\Desktop\Addition.txt2015-06-03 14:44 - 2015-06-04 11:17 - 00016046 _____ () C:\Users\Nach\Desktop\FRST.txt2015-06-03 14:43 - 2015-06-04 11:17 - 00000000 ____D () C:\FRST2015-06-03 14:43 - 2015-06-03 14:43 - 02108928 _____ (Farbar) C:\Users\Nach\Desktop\FRST64.exe2015-06-03 11:06 - 2015-06-03 11:06 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Adobe2015-06-03 10:52 - 2015-06-03 10:52 - 19221504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll2015-06-03 10:52 - 2015-06-03 10:52 - 15407616 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll2015-06-03 10:52 - 2015-06-03 10:52 - 14317568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll2015-06-03 10:52 - 2015-06-03 10:52 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll2015-06-03 10:52 - 2015-06-03 10:52 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll2015-06-03 10:52 - 2015-06-03 10:52 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll2015-06-03 10:52 - 2015-06-03 10:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb2015-06-03 10:52 - 2015-06-03 10:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb2015-06-03 10:52 - 2015-06-03 10:52 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll2015-06-03 10:52 - 2015-06-03 10:52 - 02240512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll2015-06-03 10:52 - 2015-06-03 10:52 - 02046464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll2015-06-03 10:52 - 2015-06-03 10:52 - 01766912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll2015-06-03 10:52 - 2015-06-03 10:52 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl2015-06-03 10:52 - 2015-06-03 10:52 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl2015-06-03 10:52 - 2015-06-03 10:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat2015-06-03 10:52 - 2015-06-03 10:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat2015-06-03 10:52 - 2015-06-03 10:52 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll2015-06-03 10:52 - 2015-06-03 10:52 - 01129984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll2015-06-03 10:52 - 2015-06-03 10:52 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec2015-06-03 10:52 - 2015-06-03 10:52 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec2015-06-03 10:52 - 2015-06-03 10:52 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx2015-06-03 10:52 - 2015-06-03 10:52 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx2015-06-03 10:52 - 2015-06-03 10:52 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe2015-06-03 10:50 - 2015-06-03 10:50 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll2015-06-03 10:50 - 2015-06-03 10:50 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll2015-06-03 10:50 - 2015-06-03 10:50 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll2015-06-03 10:50 - 2015-06-03 10:50 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll2015-06-03 10:50 - 2015-06-03 10:50 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01504768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll2015-06-03 10:48 - 2015-06-03 10:53 - 00011231 _____ () C:\Windows\IE10_main.log2015-06-03 10:45 - 2015-06-03 10:47 - 00003318 _____ () C:\Windows\IE9_main.log2015-06-03 10:43 - 2015-06-03 10:45 - 00000000 ____D () C:\Windows\system32\MRT2015-06-03 10:43 - 2015-04-30 10:07 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe2015-06-03 10:40 - 2015-03-06 02:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys2015-06-03 10:40 - 2015-03-06 02:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys2015-06-03 10:40 - 2015-03-06 02:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll2015-06-03 10:40 - 2015-03-06 02:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe2015-06-03 10:40 - 2015-03-06 02:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe2015-06-03 10:40 - 2015-03-06 02:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll2015-06-03 10:40 - 2015-03-06 02:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll2015-06-03 10:40 - 2015-03-06 02:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll2015-06-03 10:40 - 2015-03-06 02:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll2015-06-03 10:40 - 2015-03-06 02:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe2015-06-03 10:40 - 2015-03-06 02:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll2015-06-03 10:40 - 2015-03-06 02:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll2015-06-03 10:40 - 2015-03-06 02:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll2015-06-03 10:40 - 2015-02-26 00:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys2015-06-03 10:40 - 2015-01-29 00:23 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe2015-06-03 10:40 - 2015-01-29 00:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll2015-06-03 10:40 - 2015-01-29 00:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll2015-06-03 10:40 - 2015-01-29 00:19 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll2015-06-03 10:40 - 2015-01-29 00:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe2015-06-03 10:40 - 2015-01-29 00:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe2015-06-03 10:40 - 2015-01-29 00:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll2015-06-03 10:40 - 2015-01-29 00:05 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe2015-06-03 10:40 - 2015-01-29 00:05 - 03917752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe2015-06-03 10:40 - 2015-01-29 00:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll2015-06-03 10:40 - 2015-01-28 23:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll2015-06-03 10:40 - 2014-09-12 22:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll2015-06-03 10:40 - 2014-09-12 22:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll2015-06-03 10:40 - 2014-08-21 03:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll2015-06-03 10:40 - 2014-08-21 03:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll2015-06-03 10:40 - 2014-08-21 03:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll2015-06-03 10:40 - 2014-08-21 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll2015-06-03 10:40 - 2014-03-24 23:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll2015-06-03 10:40 - 2014-03-24 23:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll2015-06-03 10:40 - 2014-02-03 23:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll2015-06-03 10:40 - 2014-02-03 23:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll2015-06-03 10:40 - 2013-10-02 23:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll2015-06-03 10:40 - 2013-10-02 23:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll2015-06-03 10:40 - 2013-09-27 22:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys2015-06-03 10:40 - 2013-08-01 23:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll2015-06-03 10:40 - 2013-08-01 23:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll2015-06-03 10:40 - 2013-08-01 22:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll2015-06-03 10:40 - 2013-08-01 22:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll2015-06-03 10:40 - 2013-08-01 09:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys2015-06-03 10:40 - 2013-07-20 07:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll2015-06-03 10:40 - 2013-07-20 07:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll2015-06-03 10:40 - 2013-07-09 02:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll2015-06-03 10:40 - 2013-07-09 02:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll2015-06-03 10:40 - 2013-07-09 02:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll2015-06-03 10:40 - 2013-07-09 01:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll2015-06-03 10:40 - 2013-07-09 01:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll2015-06-03 10:40 - 2013-07-09 01:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll2015-06-03 10:40 - 2013-07-06 03:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys2015-06-03 10:40 - 2013-06-15 01:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys2015-06-03 10:40 - 2013-06-06 02:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll2015-06-03 10:40 - 2013-06-06 02:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll2015-06-03 10:40 - 2013-06-06 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll2015-06-03 10:40 - 2013-06-06 02:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll2015-06-03 10:40 - 2013-06-06 01:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll2015-06-03 10:40 - 2013-06-06 01:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll2015-06-03 10:40 - 2013-06-06 01:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll2015-06-03 10:40 - 2013-06-06 00:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll2015-06-03 10:40 - 2013-06-06 00:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll2015-06-03 10:40 - 2013-06-06 00:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll2015-06-03 10:40 - 2013-01-03 03:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS2015-06-03 10:40 - 2012-11-09 02:45 - 00750592 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll2015-06-03 10:40 - 2012-11-09 01:43 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll2015-06-03 10:40 - 2012-11-01 02:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll2015-06-03 10:40 - 2012-11-01 01:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll2015-06-03 10:40 - 2012-08-22 15:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys2015-06-03 10:40 - 2011-03-08 03:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll2015-06-03 10:40 - 2011-03-08 02:28 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll2015-06-03 10:40 - 2011-02-25 03:22 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll2015-06-03 10:40 - 2011-02-25 02:34 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll2015-06-03 10:40 - 2011-02-23 01:56 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys2015-06-03 10:40 - 2011-02-23 01:56 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys2015-06-03 10:40 - 2011-02-23 01:55 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys2015-06-03 06:54 - 2015-06-03 06:54 - 00000000 ____D () C:\Users\Nach\AppData\Local\VirtualStore2015-06-02 21:43 - 2015-06-02 21:43 - 00002759 _____ () C:\Users\Public\Desktop\Sophos Virus Removal Tool.lnk2015-06-02 21:43 - 2015-06-02 21:43 - 00000000 ____D () C:\ProgramData\Sophos2015-06-02 21:43 - 2015-06-02 21:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos2015-06-02 21:43 - 2015-06-02 21:43 - 00000000 ____D () C:\Program Files (x86)\Sophos2015-06-02 21:37 - 2015-06-02 21:37 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-NACH-PC-Windows-7-Professional-(64-bit).dat2015-06-02 21:37 - 2015-06-02 21:37 - 00000000 ____D () C:\RegBackup2015-06-02 21:32 - 2015-06-04 10:59 - 00000000 ____D () C:\AdwCleaner2015-06-02 21:00 - 2015-06-02 21:00 - 01943800 _____ (Bleeping Computer, LLC) C:\Users\Nach\Desktop\rkill.exe2015-06-02 20:55 - 2015-06-03 14:44 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)2015-06-02 20:54 - 2015-06-03 14:44 - 00000000 ____D () C:\Users\Nach\Desktop\mbar2015-06-02 20:40 - 2015-06-02 20:39 - 00852639 _____ () C:\Users\Nach\Desktop\SecurityCheck.exe2015-06-02 19:08 - 2015-06-04 11:00 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys2015-06-02 19:07 - 2015-06-03 14:02 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys2015-06-02 19:07 - 2015-06-02 19:07 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2015-06-02 19:07 - 2015-06-02 19:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2015-06-02 19:07 - 2015-06-02 19:07 - 00000000 ____D () C:\ProgramData\Malwarebytes2015-06-02 19:07 - 2015-06-02 19:07 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware2015-06-02 19:07 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys2015-06-02 19:07 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys2015-06-02 18:19 - 2015-06-02 18:19 - 00001610 _____ () C:\Windows\system32\bdsandbox.txt2015-06-02 18:07 - 2015-06-02 21:28 - 00000000 ____D () C:\Users\Nach\AppData\Temp2015-06-02 17:46 - 2015-06-02 17:46 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk2015-06-02 17:46 - 2015-06-02 17:46 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk2015-06-02 17:46 - 2015-06-02 17:46 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Mozilla2015-06-02 17:46 - 2015-06-02 17:46 - 00000000 ____D () C:\Users\Nach\AppData\Local\Mozilla2015-06-02 17:46 - 2015-06-02 17:46 - 00000000 ____D () C:\ProgramData\Mozilla2015-06-02 17:46 - 2015-06-02 17:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service2015-06-02 17:46 - 2015-06-02 17:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox2015-06-02 17:45 - 2015-06-02 17:45 - 00243408 _____ () C:\Users\Nach\Downloads\Firefox Setup Stub 38.0.5.exe2015-06-02 04:49 - 2015-06-02 04:49 - 00000000 ____D () C:\Users\Nach\Documents\FM_temp2015-06-02 04:49 - 2015-06-02 04:49 - 00000000 ____D () C:\Users\Nach\AppData\Local\CreationMaster2015-06-02 04:48 - 2015-06-02 04:48 - 00001269 _____ () C:\Users\Nach\Desktop\CM 15.lnk2015-06-02 04:48 - 2015-06-02 04:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fifa Master2015-06-02 04:48 - 2015-06-02 04:48 - 00000000 ____D () C:\Program Files (x86)\Fifa Master2015-06-02 04:42 - 2015-06-02 04:43 - 19412014 _____ () C:\Users\Nach\Downloads\Setup_CM_15_0.rar2015-06-02 04:39 - 2015-06-02 04:39 - 00000562 _____ () C:\Users\Public\Desktop\Fraps.lnk2015-06-02 04:39 - 2015-06-02 04:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps2015-06-02 04:39 - 2015-06-02 04:39 - 00000000 ____D () C:\Fraps2015-06-02 04:36 - 2015-06-02 04:36 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\WinRAR2015-06-02 04:36 - 2015-06-02 04:36 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR2015-06-02 04:36 - 2015-06-02 04:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR2015-06-02 04:35 - 2015-06-02 04:36 - 00000000 ____D () C:\Program Files\WinRAR2015-06-02 04:32 - 2015-06-02 04:35 - 101738804 _____ () C:\Users\Nach\Downloads\FI-XV-MWMW210.rar2015-06-02 04:31 - 2015-06-02 04:33 - 71594649 _____ () C:\Users\Nach\Downloads\FI-XV-MWMW200.rar2015-06-02 04:31 - 2015-06-02 04:32 - 12104486 _____ () C:\Users\Nach\Downloads\FI-XV-MWMW202.rar2015-06-02 04:31 - 2015-06-02 04:31 - 03326221 _____ () C:\Users\Nach\Downloads\FI-XV-MWMW211 (1).rar2015-06-02 04:30 - 2015-06-02 17:43 - 00000000 ____D () C:\ProgramData\Adobe2015-06-02 04:30 - 2015-06-02 04:30 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task2015-06-02 04:30 - 2015-06-02 04:30 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk2015-06-02 04:30 - 2015-06-02 04:30 - 00002047 _____ () C:\Users\Public\Desktop\Acrobat Reader DC.lnk2015-06-02 04:30 - 2015-06-02 04:30 - 00000000 ____D () C:\Program Files (x86)\Adobe2015-06-02 04:29 - 2015-06-02 04:32 - 00000000 ____D () C:\Users\Nach\AppData\Local\Adobe2015-06-01 22:16 - 2015-06-02 01:50 - 00000000 ____D () C:\Users\Nach\Documents\The Witcher 32015-06-01 21:54 - 2015-06-01 21:54 - 00001955 _____ () C:\Users\Public\Desktop\The Witcher® 3 - Wild Hunt.lnk2015-06-01 21:54 - 2015-06-01 21:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com2015-06-01 21:47 - 2015-06-01 21:47 - 00000000 ____D () C:\GOG Games2015-05-28 20:22 - 2015-06-01 03:02 - 00000080 _____ () C:\Users\Nach\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦2015-05-28 20:22 - 2015-05-28 20:22 - 00000000 ____D () C:\Users\Nach\Documents\Rockstar Games2015-05-28 20:22 - 2015-05-28 20:22 - 00000000 ____D () C:\Users\Nach\AppData\Local\Rockstar Games2015-05-28 20:22 - 2015-05-28 20:22 - 00000000 ____D () C:\Program Files\Rockstar Games2015-05-28 20:22 - 2015-05-28 20:22 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games2015-05-28 02:55 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll2015-05-28 02:55 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll2015-05-28 02:55 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll2015-05-28 02:55 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll2015-05-28 02:55 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll2015-05-28 02:55 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll2015-05-28 01:37 - 2015-05-28 01:37 - 00002783 _____ () C:\Users\Public\Desktop\Killer Network Manager.lnk2015-05-28 01:37 - 2015-05-28 01:37 - 00000000 ____D () C:\ProgramData\Qualcomm2015-05-28 01:37 - 2015-05-28 01:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros2015-05-28 01:37 - 2015-05-28 01:37 - 00000000 ____D () C:\Program Files\Qualcomm Atheros2015-05-28 01:36 - 2015-05-28 01:36 - 00000000 _____ () C:\Users\Nach\AppData\Local\Driver_LOM_8161Present.flag2015-05-27 20:26 - 2015-05-27 20:39 - 00000000 ____D () C:\Users\Nach\Valley2015-05-27 20:24 - 2015-05-27 20:24 - 00002113 _____ () C:\Users\Public\Desktop\Valley Benchmark 1.0.lnk2015-05-27 19:44 - 2015-05-27 19:44 - 00160544 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys2015-05-27 19:44 - 2015-05-27 19:44 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll2015-05-27 19:44 - 2015-05-27 19:44 - 00074000 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll2015-05-27 19:39 - 2015-05-27 19:39 - 00000385 _____ () C:\Users\Nach\AppData\Roaminguser_gensett.xml2015-05-27 19:38 - 2015-05-27 19:44 - 00677104 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys2015-05-27 19:38 - 2015-05-27 19:44 - 00262544 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys2015-05-27 19:38 - 2015-05-27 19:44 - 00033360 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll2015-05-27 19:38 - 2015-05-27 19:44 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Bitdefender2015-05-27 19:38 - 2015-05-27 19:43 - 01306464 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys2015-05-27 19:38 - 2015-05-27 19:40 - 00000000 ____D () C:\ProgramData\BDLogging2015-05-27 19:38 - 2015-05-27 19:38 - 00253404 ____H () C:\bdr-ld012015-05-27 19:38 - 2015-05-27 19:38 - 00009216 ____H () C:\bdr-ld01.mbr2015-05-27 19:38 - 2015-05-27 19:38 - 00002122 _____ () C:\Users\Public\Desktop\Bitdefender Total Security 2015.lnk2015-05-27 19:38 - 2015-05-27 19:38 - 00000684 ____H () C:\bdr-cf012015-05-27 19:38 - 2015-05-27 19:38 - 00000385 _____ () C:\Windows\system32\user_gensett.xml2015-05-27 19:38 - 2015-05-27 19:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf2015-05-27 19:38 - 2015-05-27 19:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 20152015-05-27 19:38 - 2015-05-27 19:38 - 00000000 ____D () C:\ProgramData\Bitdefender2015-05-27 19:38 - 2015-05-27 19:38 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender2015-05-27 19:38 - 2015-05-27 19:38 - 00000000 ____D () C:\Program Files\Bitdefender2015-05-27 19:38 - 2014-12-02 16:37 - 00074000 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll2015-05-27 19:38 - 2014-10-15 17:14 - 00452040 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys2015-05-27 19:38 - 2014-07-04 17:49 - 49563064 ____H () C:\bdr-im01.gz2015-05-27 19:38 - 2013-11-13 15:41 - 00093600 _____ (BitDefender LLC) C:\Windows\system32\Drivers\BdfNdisf6.sys2015-05-27 19:38 - 2013-08-13 13:38 - 03271472 ____H () C:\bdr-bz012015-05-27 19:38 - 2012-04-17 14:34 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys2015-05-27 19:38 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll2015-05-27 16:53 - 2015-05-27 16:53 - 00000000 ____D () C:\Users\Nach\Documents\WB Games2015-05-27 16:53 - 2015-05-27 16:53 - 00000000 ____D () C:\ProgramData\Steam2015-05-27 16:50 - 2015-05-27 16:50 - 00001670 _____ () C:\Users\Public\Desktop\Batman - Arkham City.lnk2015-05-27 16:50 - 2015-05-27 16:50 - 00001043 _____ () C:\Users\Public\Desktop\Batman - Arkham City (Settings).lnk2015-05-27 16:50 - 2015-05-27 16:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Batman - Arkham City2015-05-27 16:37 - 2015-05-27 16:37 - 00000000 ____D () C:\Users\Nach\AppData\Local\Setup Integrity Check2015-05-27 15:24 - 2015-05-27 16:37 - 00000000 ____D () C:\Games2015-05-27 04:05 - 2015-06-03 21:44 - 00003018 _____ () C:\Windows\System32\Tasks\MSIAfterburner2015-05-27 04:04 - 2015-06-02 01:07 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner2015-05-27 04:04 - 2015-05-27 04:04 - 00001086 _____ () C:\Users\Nach\Desktop\MSI Afterburner.lnk2015-05-27 04:04 - 2015-05-27 04:04 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner2015-05-27 04:03 - 2015-05-27 04:03 - 36210245 _____ () C:\Users\Nach\Downloads\[Guru3D.com]-MSIAfterburnerSetup410.zip2015-05-27 04:02 - 2015-05-27 04:02 - 00000000 ____D () C:\Windows\system32\appmgmt2015-05-27 03:13 - 2015-05-27 03:33 - 00000000 ____D () C:\Users\Nach\Documents\wmd_symbol_cache2015-05-27 03:13 - 2015-05-27 03:33 - 00000000 ____D () C:\Users\Nach\Documents\Project CARS2015-05-27 03:12 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll2015-05-27 03:12 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll2015-05-27 03:12 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll2015-05-27 03:12 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll2015-05-27 03:12 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll2015-05-27 03:12 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll2015-05-27 03:12 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll2015-05-27 03:12 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll2015-05-27 03:12 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll2015-05-27 03:12 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll2015-05-27 03:12 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll2015-05-27 03:12 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll2015-05-27 03:12 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll2015-05-27 03:12 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll2015-05-27 03:12 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll2015-05-27 03:12 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll2015-05-27 03:12 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll2015-05-27 03:12 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll2015-05-27 03:12 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll2015-05-27 03:12 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll2015-05-27 03:12 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll2015-05-27 03:12 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll2015-05-27 03:12 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll2015-05-27 03:12 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll2015-05-27 03:12 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll2015-05-27 03:12 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll2015-05-27 03:12 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll2015-05-27 03:12 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll2015-05-27 03:12 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll2015-05-27 03:12 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll2015-05-27 03:12 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll2015-05-27 03:12 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll2015-05-27 03:12 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll2015-05-27 03:12 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll2015-05-27 03:12 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll2015-05-27 03:12 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll2015-05-27 03:12 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll2015-05-27 03:12 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll2015-05-27 03:12 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll2015-05-27 03:12 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll2015-05-27 03:12 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll2015-05-27 03:12 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll2015-05-27 03:12 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll2015-05-27 03:12 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll2015-05-27 03:12 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll2015-05-27 03:12 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll2015-05-27 03:12 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll2015-05-27 03:12 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll2015-05-27 03:12 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll2015-05-27 03:12 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll2015-05-27 03:12 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll2015-05-27 03:12 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll2015-05-27 03:12 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll2015-05-27 03:12 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll2015-05-27 03:12 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll2015-05-27 03:12 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll2015-05-27 03:12 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll2015-05-27 03:12 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll2015-05-27 03:12 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll2015-05-27 03:12 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll2015-05-27 03:12 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll2015-05-27 03:12 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll2015-05-27 03:12 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll2015-05-27 03:12 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll2015-05-27 03:12 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll2015-05-27 03:12 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll2015-05-27 03:12 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll2015-05-27 03:12 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll2015-05-27 03:12 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll2015-05-27 03:12 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll2015-05-27 03:12 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll2015-05-27 03:12 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll2015-05-27 03:12 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll2015-05-27 03:12 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll2015-05-27 03:12 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll2015-05-27 03:12 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll2015-05-27 03:12 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll2015-05-27 03:12 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll2015-05-27 03:12 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll2015-05-27 03:12 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll2015-05-27 03:12 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll2015-05-27 03:09 - 2015-05-27 03:09 - 00292184 _____ (Microsoft Corporation) C:\Users\Nach\Downloads\dxwebsetup.exe2015-05-27 02:07 - 2015-05-27 02:07 - 00002122 _____ () C:\Users\Nach\Desktop\Project CARS.lnk2015-05-27 02:07 - 2015-05-27 02:07 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Project CARS2015-05-27 02:07 - 2015-05-27 02:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics2015-05-27 02:06 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll2015-05-27 01:54 - 2015-05-27 01:54 - 00000000 ____D () C:\Program Files (x86)\R.G. Mechanics2015-05-27 00:03 - 2015-06-02 04:22 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\vlc2015-05-27 00:03 - 2015-05-27 00:03 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk2015-05-27 00:03 - 2015-05-27 00:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN2015-05-27 00:03 - 2015-05-27 00:03 - 00000000 ____D () C:\Program Files (x86)\VideoLAN2015-05-27 00:01 - 2015-05-27 00:02 - 28849904 _____ () C:\Users\Nach\Downloads\vlc-2.2.1-win32.exe2015-05-26 22:40 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll2015-05-26 22:40 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll2015-05-26 22:40 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll2015-05-26 22:40 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll2015-05-26 22:40 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll2015-05-26 22:40 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll2015-05-26 22:40 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll2015-05-26 22:40 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll2015-05-26 22:40 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll2015-05-26 22:40 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll2015-05-26 22:40 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll2015-05-26 22:40 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll2015-05-26 22:40 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll2015-05-26 22:40 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll2015-05-26 22:40 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll2015-05-26 22:40 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll2015-05-26 22:40 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll2015-05-26 22:40 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll2015-05-26 22:40 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll2015-05-26 22:40 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll2015-05-26 22:40 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll2015-05-26 22:40 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll2015-05-26 22:40 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll2015-05-26 22:40 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll2015-05-26 22:40 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll2015-05-26 22:40 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll2015-05-26 22:40 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll2015-05-26 22:40 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll2015-05-26 22:40 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll2015-05-26 22:40 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll2015-05-26 22:40 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll2015-05-26 22:40 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll2015-05-26 22:40 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll2015-05-26 22:40 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll2015-05-26 22:40 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll2015-05-26 22:40 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll2015-05-26 22:40 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll2015-05-26 22:40 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll2015-05-26 22:40 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll2015-05-26 22:40 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll2015-05-26 22:40 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll2015-05-26 22:40 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll2015-05-26 22:40 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll2015-05-26 22:40 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll2015-05-26 22:40 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll2015-05-26 22:40 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll2015-05-26 22:40 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll2015-05-26 22:40 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll2015-05-26 22:40 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll2015-05-26 22:40 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll2015-05-26 22:40 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll2015-05-26 20:45 - 2015-05-31 09:31 - 00000000 ____D () C:\Users\Nach\Documents\FIFA 152015-05-26 20:38 - 2015-05-30 21:12 - 00074969 _____ () C:\Windows\DirectX.log2015-05-26 20:38 - 2015-05-26 20:38 - 07878008 _____ (Microsoft Corporation) C:\Users\Nach\Downloads\Xbox360_64Eng.exe2015-05-26 20:38 - 2015-05-26 20:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf2015-05-26 20:38 - 2015-05-26 20:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories2015-05-26 20:38 - 2015-05-26 20:38 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories2015-05-26 20:36 - 2015-05-26 20:36 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll2015-05-26 20:36 - 2015-05-26 20:36 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll2015-05-26 20:36 - 2015-05-26 20:36 - 00133632 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll2015-05-26 20:36 - 2015-05-26 20:36 - 00110592 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll2015-05-26 20:36 - 2015-05-26 20:36 - 00000000 ____D () C:\Users\Nach\Documents\Codemasters2015-05-26 20:36 - 2015-05-26 20:36 - 00000000 ____D () C:\ProgramData\Codemasters2015-05-26 20:36 - 2015-05-26 20:36 - 00000000 ____D () C:\Program Files (x86)\OpenAL2015-05-26 19:43 - 2015-05-26 19:43 - 00000000 ____D () C:\Users\Nach\Tracing2015-05-26 19:42 - 2015-06-02 20:55 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Skype2015-05-26 19:42 - 2015-05-27 19:48 - 00000000 ___RD () C:\Program Files (x86)\Skype2015-05-26 19:42 - 2015-05-26 19:42 - 43034752 _____ (Skype Technologies S.A.) C:\Users\Nach\Downloads\SkypeSetupFull.exe2015-05-26 19:42 - 2015-05-26 19:42 - 00002697 _____ () C:\Users\Public\Desktop\Skype.lnk2015-05-26 19:42 - 2015-05-26 19:42 - 00000000 ____D () C:\Users\Nach\AppData\Local\Skype2015-05-26 19:42 - 2015-05-26 19:42 - 00000000 ____D () C:\ProgramData\Skype2015-05-26 19:42 - 2015-05-26 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype2015-05-26 18:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE2015-05-26 18:43 - 2015-05-27 02:42 - 00027508 _____ () C:\Windows\IE11_main.log2015-05-26 18:15 - 2014-06-30 19:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll2015-05-26 18:15 - 2014-06-30 19:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll2015-05-26 18:15 - 2014-06-06 03:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe2015-05-26 18:15 - 2014-06-06 03:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe2015-05-26 18:15 - 2014-03-09 18:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe2015-05-26 18:15 - 2014-03-09 18:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll2015-05-26 18:15 - 2014-03-09 18:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe2015-05-26 18:15 - 2014-03-09 18:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll2015-05-26 14:45 - 2015-05-26 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities2015-05-26 14:45 - 2015-05-26 14:45 - 00000000 ____D () C:\Program Files (x86)\Canon2015-05-26 14:44 - 2015-05-26 14:44 - 00001147 _____ () C:\Users\Public\Desktop\FIFA 15.lnk2015-05-26 14:44 - 2015-05-26 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 152015-05-26 14:43 - 2015-05-26 14:43 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information2015-05-26 14:43 - 2015-05-26 14:43 - 00000000 ___HD () C:\ProgramData\CanonBJ2015-05-26 14:43 - 2015-05-26 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX330 series2015-05-26 14:43 - 2009-06-16 11:37 - 01342976 _____ (CANON INC.) C:\Windows\system32\CNC330C.DLL2015-05-26 14:43 - 2009-06-16 11:36 - 00092672 _____ (CANON INC.) C:\Windows\system32\CNC330I.DLL2015-05-26 14:43 - 2009-04-25 05:00 - 00290816 _____ (CANON INC.) C:\Windows\system32\CNMLM9P.DLL2015-05-26 14:43 - 2009-02-19 13:20 - 00299520 _____ (CANON INC.) C:\Windows\system32\CNC330L.DLL2015-05-26 14:43 - 2008-09-11 09:39 - 00244736 _____ (CANON INC.) C:\Windows\system32\CNMIU9P.DLL2015-05-26 14:43 - 2008-09-03 11:15 - 00262656 _____ (Canon Inc.) C:\Windows\system32\CNCF2Li.DLL2015-05-26 14:43 - 2008-09-03 11:10 - 00232448 _____ (Canon Inc.) C:\Windows\system32\CNCFMSi.EXE2015-05-26 14:43 - 2008-09-03 11:10 - 00003072 _____ (Canon Inc.) C:\Windows\system32\CNCFLiUS.DLL2015-05-26 14:43 - 2008-09-03 11:10 - 00002560 _____ (Canon Inc.) C:\Windows\system32\CNCFLiJP.DLL2015-05-26 14:43 - 2008-08-25 18:02 - 00017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.DLL2015-05-26 14:43 - 2008-07-16 09:39 - 00235008 _____ (Canon Inc.) C:\Windows\system32\CNC330O.DLL
-
# AdwCleaner v4.206 - Logfile created 04/06/2015 at 10:59:48# Updated 01/06/2015 by Xplode# Database : 2015-06-01.1 [server]# Operating system : Windows 7 Professional Service Pack 1 (x64)# Username : Nach - NACH-PC# Running from : C:\Users\Nach\Desktop\AdwCleaner.exe# Option : Cleaning***** [ Services ] ********** [ Files / Folders ] ********** [ Scheduled tasks ] ********** [ Shortcuts ] ********** [ Registry ] ********** [ Web browsers ] *****-\\ Internet Explorer v10.0.9200.16521-\\ Mozilla Firefox v38.0.5 (x86 en-US)-\\ Google Chrome v43.0.2357.81*************************AdwCleaner[R0].txt - [1178 bytes] - [02/06/2015 21:32:58]AdwCleaner[R1].txt - [902 bytes] - [03/06/2015 11:15:52]AdwCleaner[R2].txt - [1021 bytes] - [04/06/2015 10:59:18]AdwCleaner[s0].txt - [1248 bytes] - [02/06/2015 21:33:53]AdwCleaner[s1].txt - [965 bytes] - [03/06/2015 11:16:21]AdwCleaner[s2].txt - [948 bytes] - [04/06/2015 10:59:48]########## EOF - C:\AdwCleaner\AdwCleaner[s2].txt - [1006 bytes] ##########~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Junkware Removal Tool (JRT) by ThisisuVersion: 6.8.8 (06.03.2015:1)OS: Windows 7 Professional x64Ran by Nach on Thu 06/04/2015 at 11:05:14.73~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Services~~~ Tasks~~~ Registry Values~~~ Registry Keys~~~ FilesSuccessfully deleted: [File] C:\Windows\system32\drivers\bdsandbox.sys~~~ Folders~~~ Chrome[C:\Users\Nach\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset[C:\Users\Nach\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:[C:\Users\Nach\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset[C:\Users\Nach\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:[]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Scan was completed on Thu 06/04/2015 at 11:06:30.91End of JRT log~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.23, April 2015 (build 5.23.11300.0)Started On Wed Jun 03 10:43:47 2015Engine: 1.1.11502.0Signatures: 1.195.1215.0Results Summary:----------------No infection found.Microsoft Windows Malicious Software Removal Tool Finished On Wed Jun 03 10:45:15 2015Return code: 0 (0x0)---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.24, May 2015 (build 5.24.11401.0)Started On Thu Jun 04 11:13:22 2015Engine: 1.1.11602.0Signatures: 1.197.1100.0Results Summary:----------------No infection found.Microsoft Windows Malicious Software Removal Tool Finished On Thu Jun 04 11:14:21 2015Return code: 0 (0x0)---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.24, May 2015 (build 5.24.11401.0)Started On Thu Jun 04 11:14:24 2015Engine: 1.1.11602.0Signatures: 1.197.1100.0Results Summary:----------------No infection found.
-
2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe2015-05-26 14:24 - 2013-08-01 21:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 21:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 21:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 21:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll2015-05-26 14:24 - 2013-04-10 03:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys2015-05-26 14:24 - 2011-02-03 08:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll2015-05-26 14:23 - 2015-02-18 04:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe2015-05-26 14:23 - 2015-02-18 04:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe2015-05-26 14:23 - 2012-11-23 00:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe2015-05-26 14:04 - 2014-05-14 13:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll2015-05-26 14:04 - 2014-05-14 13:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll2015-05-26 14:04 - 2014-05-14 13:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll2015-05-26 14:04 - 2014-05-14 13:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe2015-05-26 14:04 - 2014-05-14 13:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll2015-05-26 14:04 - 2014-05-14 13:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll2015-05-26 14:04 - 2014-05-14 13:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll2015-05-26 14:04 - 2014-05-14 13:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll2015-05-26 14:04 - 2014-05-14 13:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll2015-05-26 14:04 - 2014-05-14 13:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll2015-05-26 14:04 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll2015-05-26 14:04 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll2015-05-26 14:04 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe2015-05-26 14:04 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe2015-05-26 06:30 - 2015-05-26 06:30 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG2015-05-26 06:30 - 2015-05-26 02:22 - 00000000 ____D () C:\Windows\Panther2015-05-26 05:53 - 2015-05-26 05:56 - 00003328 _____ () C:\Windows\System32\Tasks\EVGAPrecisionX2015-05-26 05:32 - 2015-05-26 05:32 - 00001355 _____ () C:\Windows\TSSysprep.log2015-05-26 05:32 - 2015-05-26 05:32 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk2015-05-26 05:32 - 2015-05-26 05:32 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk2015-05-26 05:30 - 2015-05-26 05:30 - 00002841 _____ () C:\Users\Nach\Unigine_Heaven_Benchmark_4.0_20150526_0530.html2015-05-26 05:17 - 2015-05-27 03:12 - 00000000 ____D () C:\Windows\SysWOW64\directx2015-05-26 05:16 - 2015-05-26 05:16 - 00000000 ____D () C:\Program Files (x86)\EVGA2015-05-26 05:15 - 2015-05-26 05:16 - 18715110 _____ () C:\Users\Nach\Downloads\EVGA_PrecisionX_16_Setup_v5.3.3.zip2015-05-26 04:54 - 2015-05-26 04:54 - 00002922 _____ () C:\Users\Nach\Unigine_Heaven_Benchmark_4.0_20150526_0454.html2015-05-26 04:39 - 2015-05-27 03:09 - 00000000 ____D () C:\temp2015-05-26 04:05 - 2015-06-01 22:29 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Origin2015-05-26 04:05 - 2015-05-26 04:06 - 00000000 ____D () C:\Program Files (x86)\Origin Games2015-05-26 04:05 - 2015-05-26 04:05 - 00000000 ____D () C:\Users\Nach\AppData\Local\Origin2015-05-26 04:03 - 2015-06-03 07:09 - 00000000 ____D () C:\ProgramData\Origin2015-05-26 04:03 - 2015-05-26 20:45 - 00000000 ____D () C:\ProgramData\Electronic Arts2015-05-26 04:03 - 2015-05-26 04:03 - 00000979 _____ () C:\Users\Public\Desktop\Origin.lnk2015-05-26 04:03 - 2015-05-26 04:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin2015-05-26 04:02 - 2015-06-01 22:29 - 00000000 ____D () C:\Program Files (x86)\Origin2015-05-26 04:02 - 2015-05-26 04:02 - 17110336 _____ (Electronic Arts, Inc.) C:\Users\Nach\Downloads\OriginThinSetup.exe2015-05-26 04:01 - 2015-05-26 04:01 - 00000000 ____D () C:\Users\Nach\AppData\Local\Steam2015-05-26 03:59 - 2015-06-03 14:09 - 00000000 ____D () C:\Program Files (x86)\Steam2015-05-26 03:59 - 2015-05-26 03:59 - 01142128 _____ () C:\Users\Nach\Downloads\SteamSetup.exe2015-05-26 03:59 - 2015-05-26 03:59 - 00000963 _____ () C:\Users\Public\Desktop\Steam.lnk2015-05-26 03:59 - 2015-05-26 03:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam2015-05-26 03:41 - 2015-06-03 21:46 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0977f4b8115c.job2015-05-26 03:41 - 2015-06-03 21:45 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0977f3e5f393.job2015-05-26 03:41 - 2015-05-26 03:41 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1d0977f4b8115c2015-05-26 03:41 - 2015-05-26 03:41 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1d0977f3e5f3932015-05-26 03:41 - 2015-05-26 03:41 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\NVIDIA2015-05-26 03:41 - 2015-05-26 03:41 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z2015-05-26 03:41 - 2015-05-26 03:41 - 00000000 ____D () C:\Program Files (x86)\GPU-Z2015-05-26 03:40 - 2015-05-26 03:40 - 01582736 _____ ( ) C:\Users\Nach\Downloads\cpu-z_1.72-en.exe2015-05-26 03:40 - 2015-05-26 03:40 - 00000869 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk2015-05-26 03:40 - 2015-05-26 03:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID2015-05-26 03:40 - 2015-05-26 03:40 - 00000000 ____D () C:\Program Files\CPUID2015-05-26 03:10 - 2015-05-26 03:10 - 00000000 ____D () C:\Users\Nach\AppData\Local\Logitech® Webcam Software2015-05-26 03:08 - 2015-05-26 03:08 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Leadertech2015-05-26 03:07 - 2015-05-26 03:08 - 00010101 _____ () C:\Windows\system32\lvcoinst.log2015-05-26 03:07 - 2015-05-26 03:08 - 00003744 _____ () C:\Windows\LDPINST.LOG2015-05-26 03:07 - 2015-05-26 03:08 - 00000000 ____D () C:\Program Files\Common Files\logishrd2015-05-26 03:07 - 2015-05-26 03:08 - 00000000 ____D () C:\Program Files (x86)\Logitech2015-05-26 03:07 - 2015-05-26 03:07 - 00001624 _____ () C:\Users\Public\Desktop\Logitech Webcam Software .lnk2015-05-26 03:05 - 2015-05-26 03:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech2015-05-26 03:05 - 2015-05-26 03:05 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys2015-05-26 03:05 - 2015-05-26 03:05 - 00000388 _____ () C:\Windows\LkmdfCoInst.log2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\Users\Nach\AppData\Local\Logitech2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\ProgramData\LogiShrd2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\ProgramData\Apple2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\Program Files\Logitech Gaming Software2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\Program Files\Bonjour2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\Program Files (x86)\Bonjour2015-05-26 03:04 - 2015-05-26 03:04 - 74637872 _____ (Logitech, Inc.) C:\Users\Nach\Downloads\lws251.exe2015-05-26 03:04 - 2015-05-26 03:04 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Logitech2015-05-26 03:04 - 2015-05-26 03:04 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Logishrd2015-05-26 03:02 - 2015-05-26 03:03 - 74818632 _____ (Logitech Inc.) C:\Users\Nach\Downloads\LGS_8.58.183_x64_Logitech.exe2015-05-26 02:57 - 2015-05-26 02:58 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\QuickScan2015-05-26 02:57 - 2015-05-26 02:57 - 10447328 _____ () C:\Users\Nach\Downloads\Antivirus_Free_Edition_x64.exe2015-05-26 02:57 - 2015-05-26 02:57 - 00162208 _____ () C:\Users\Nach\Downloads\Antivirus_Free_Edition.exe2015-05-26 02:46 - 2015-05-26 02:54 - 00000000 ____D () C:\Users\Nach\Heaven2015-05-26 02:44 - 2015-05-27 20:25 - 02128896 _____ () C:\Users\Nach\AppData\Local\file__0.localstorage2015-05-26 02:44 - 2015-05-27 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unigine2015-05-26 02:44 - 2015-05-27 20:24 - 00000000 ____D () C:\Program Files (x86)\Unigine2015-05-26 02:44 - 2015-05-26 02:44 - 00002117 _____ () C:\Users\Public\Desktop\Heaven Benchmark 4.0.lnk2015-05-26 02:43 - 2015-05-26 04:58 - 00001377 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk2015-05-26 02:43 - 2015-05-26 04:58 - 00000000 ____D () C:\Users\Nach\AppData\Local\NVIDIA Corporation2015-05-26 02:43 - 2015-05-26 04:58 - 00000000 ____D () C:\Users\Nach\AppData\Local\NVIDIA2015-05-26 02:43 - 2015-05-26 04:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation2015-05-26 02:43 - 2015-05-07 21:35 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll2015-05-26 02:43 - 2015-05-07 21:35 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll2015-05-26 02:43 - 2015-05-07 21:34 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll2015-05-26 02:43 - 2015-05-07 21:34 - 01570672 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll2015-05-26 02:43 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll2015-05-26 02:43 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll2015-05-26 02:43 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll2015-05-26 02:43 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll2015-05-26 02:43 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll2015-05-26 02:43 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll2015-05-26 02:42 - 2015-06-03 21:47 - 00006464 _____ () C:\Windows\SysWOW64\Gms.log2015-05-26 02:42 - 2015-05-26 04:42 - 00000000 ____D () C:\ProgramData\NVIDIA2015-05-26 02:42 - 2015-05-26 04:38 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation2015-05-26 02:42 - 2015-05-26 02:43 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation2015-05-26 02:42 - 2015-05-13 03:52 - 01558848 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll2015-05-26 02:42 - 2015-05-13 03:52 - 00195912 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys2015-05-26 02:42 - 2015-05-13 03:52 - 00031552 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 42718864 _____ () C:\Windows\system32\nvcompiler.dll2015-05-26 02:42 - 2015-05-12 03:27 - 37741712 _____ () C:\Windows\SysWOW64\nvcompiler.dll2015-05-26 02:42 - 2015-05-12 03:27 - 30478992 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 22945424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll2015-05-26 02:42 - 2015-05-12 03:27 - 17540416 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll2015-05-26 02:42 - 2015-05-12 03:27 - 16145176 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll2015-05-26 02:42 - 2015-05-12 03:27 - 15858728 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll2015-05-26 02:42 - 2015-05-12 03:27 - 15048816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll2015-05-26 02:42 - 2015-05-12 03:27 - 14455296 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll2015-05-26 02:42 - 2015-05-12 03:27 - 13263568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll2015-05-26 02:42 - 2015-05-12 03:27 - 12849056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll2015-05-26 02:42 - 2015-05-12 03:27 - 11790144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll2015-05-26 02:42 - 2015-05-12 03:27 - 10972304 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys2015-05-26 02:42 - 2015-05-12 03:27 - 03363224 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 02971776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll2015-05-26 02:42 - 2015-05-12 03:27 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll2015-05-26 02:42 - 2015-05-12 03:27 - 02599056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll2015-05-26 02:42 - 2015-05-12 03:27 - 01898312 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435286.dll2015-05-26 02:42 - 2015-05-12 03:27 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435286.dll2015-05-26 02:42 - 2015-05-12 03:27 - 01099808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll2015-05-26 02:42 - 2015-05-12 03:27 - 01059984 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 01050256 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00982672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00974480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00939080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00502896 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00408208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00407296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00364176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00176064 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00154256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00112784 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00105288 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00031710 _____ () C:\Windows\system32\nvinfo.pb2015-05-26 02:42 - 2015-05-12 00:30 - 06872392 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll2015-05-26 02:42 - 2015-05-12 00:30 - 03490448 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll2015-05-26 02:42 - 2015-05-12 00:30 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll2015-05-26 02:42 - 2015-05-12 00:30 - 00937288 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe2015-05-26 02:42 - 2015-05-12 00:30 - 00385352 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll2015-05-26 02:42 - 2015-05-12 00:30 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll2015-05-26 02:42 - 2015-05-11 14:01 - 04391871 _____ () C:\Windows\system32\nvcoproc.bin2015-05-26 02:42 - 2014-11-22 07:46 - 00038032 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys2015-05-26 02:42 - 2014-11-22 07:46 - 00035472 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll2015-05-26 02:42 - 2014-11-22 07:46 - 00032400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll2015-05-26 02:41 - 2015-05-26 02:43 - 00000000 ____D () C:\Program Files\NVIDIA Corporation2015-05-26 02:41 - 2015-05-26 02:41 - 00000000 ____D () C:\NVIDIA2015-05-26 02:40 - 2015-05-26 02:40 - 00000000 ___HD () C:\Program Files (x86)\Temp2015-05-26 02:40 - 2015-05-26 02:40 - 00000000 ____H () C:\ProgramData\DP45977C.lfl2015-05-26 02:40 - 2015-05-26 02:40 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM2015-05-26 02:40 - 2015-05-26 02:40 - 00000000 ____D () C:\Program Files\Realtek2015-05-26 02:40 - 2015-05-26 02:40 - 00000000 ____D () C:\Program Files (x86)\Realtek2015-05-26 02:40 - 2014-05-28 20:23 - 03977944 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys2015-05-26 02:40 - 2014-05-28 14:35 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll2015-05-26 02:40 - 2014-05-28 11:38 - 01137695 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT2015-05-26 02:40 - 2014-05-26 15:00 - 62006272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat2015-05-26 02:40 - 2014-05-23 13:54 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll2015-05-26 02:40 - 2014-05-22 16:24 - 00096568 _____ () C:\Windows\system32\audioLibVc.dll2015-05-26 02:40 - 2014-05-22 13:21 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll2015-05-26 02:40 - 2014-05-19 17:16 - 02843352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll2015-05-26 02:40 - 2014-05-19 10:47 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll2015-05-26 02:40 - 2014-05-14 15:47 - 02119472 _____ () C:\Windows\system32\SStudio.dll2015-05-26 02:40 - 2014-05-09 11:17 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll2015-05-26 02:40 - 2014-04-17 17:42 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll2015-05-26 02:40 - 2014-04-17 17:42 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll2015-05-26 02:40 - 2014-04-17 17:42 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll2015-05-26 02:40 - 2014-04-10 12:20 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll2015-05-26 02:40 - 2014-04-10 12:20 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll2015-05-26 02:40 - 2014-04-10 12:19 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll2015-05-26 02:40 - 2014-04-09 16:39 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll2015-05-26 02:40 - 2014-04-09 16:38 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll2015-05-26 02:40 - 2014-04-07 16:03 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll2015-05-26 02:40 - 2014-04-07 16:03 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll2015-05-26 02:40 - 2014-04-07 16:03 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll2015-05-26 02:40 - 2014-04-07 16:03 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll2015-05-26 02:40 - 2014-03-21 14:17 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll2015-05-26 02:40 - 2014-03-19 19:19 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll2015-05-26 02:40 - 2014-03-06 16:35 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl2015-05-26 02:40 - 2014-03-05 05:11 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll2015-05-26 02:40 - 2014-03-05 05:11 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll2015-05-26 02:40 - 2014-03-05 05:11 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll2015-05-26 02:40 - 2014-03-05 05:11 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll2015-05-26 02:40 - 2014-02-27 20:02 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll2015-05-26 02:40 - 2014-02-18 17:04 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll2015-05-26 02:40 - 2014-02-06 11:28 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat2015-05-26 02:40 - 2014-01-31 17:27 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll2015-05-26 02:40 - 2014-01-28 11:48 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll2015-05-26 02:40 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll2015-05-26 02:40 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll2015-05-26 02:40 - 2013-10-11 11:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll2015-05-26 02:40 - 2013-10-07 00:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll2015-05-26 02:40 - 2013-10-07 00:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll2015-05-26 02:40 - 2013-10-07 00:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll2015-05-26 02:40 - 2013-08-14 15:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll2015-05-26 02:40 - 2013-08-14 15:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll2015-05-26 02:40 - 2013-06-25 12:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll2015-05-26 02:40 - 2013-06-25 12:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll2015-05-26 02:40 - 2013-06-25 12:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll2015-05-26 02:40 - 2013-06-21 11:01 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll2015-05-26 02:40 - 2013-04-03 14:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll2015-05-26 02:40 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll2015-05-26 02:40 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll2015-05-26 02:40 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll2015-05-26 02:40 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll2015-05-26 02:40 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll2015-05-26 02:40 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll2015-05-26 02:40 - 2012-01-30 11:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll2015-05-26 02:40 - 2012-01-10 10:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll2015-05-26 02:40 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll2015-05-26 02:40 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll2015-05-26 02:40 - 2011-09-02 14:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll2015-05-26 02:40 - 2011-09-02 14:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll2015-05-26 02:40 - 2011-09-02 14:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll2015-05-26 02:40 - 2011-08-23 17:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll2015-05-26 02:40 - 2011-03-17 12:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll2015-05-26 02:40 - 2011-03-07 17:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll2015-05-26 02:40 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll2015-05-26 02:40 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll2015-05-26 02:40 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll2015-05-26 02:40 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll2015-05-26 02:40 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll2015-05-26 02:40 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll2015-05-26 02:40 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll2015-05-26 02:39 - 2015-05-26 02:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf2015-05-26 02:37 - 2015-05-26 02:39 - 00000000 ____D () C:\ProgramData\Intel2015-05-26 02:37 - 2015-05-26 02:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel2015-05-26 02:37 - 2015-05-26 02:37 - 00000000 ____D () C:\Users\Nach\Intel2015-05-26 02:37 - 2015-05-26 02:37 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Intel Corporation2015-05-26 02:36 - 2015-05-26 02:36 - 00002253 _____ () C:\Users\Public\Desktop\Google Chrome.lnk2015-05-26 02:36 - 2015-05-26 02:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome2015-05-26 02:35 - 2015-06-03 21:45 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job2015-05-26 02:35 - 2015-06-03 21:40 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job2015-05-26 02:35 - 2015-05-26 02:36 - 00000000 ____D () C:\Users\Nach\AppData\Local\Google2015-05-26 02:35 - 2015-05-26 02:36 - 00000000 ____D () C:\Program Files (x86)\Google2015-05-26 02:35 - 2015-05-26 02:35 - 00004060 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA2015-05-26 02:35 - 2015-05-26 02:35 - 00003808 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore2015-05-26 02:35 - 2015-05-26 02:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf2015-05-26 02:35 - 2015-05-26 02:35 - 00000000 ____D () C:\Users\Nach\AppData\Local\Deployment2015-05-26 02:35 - 2015-05-26 02:35 - 00000000 ____D () C:\Users\Nach\AppData\Local\Apps\2.02015-05-26 02:34 - 2015-05-26 02:39 - 00000000 ____D () C:\Program Files\Intel2015-05-26 02:34 - 2015-05-26 02:39 - 00000000 ____D () C:\Program Files (x86)\Intel2015-05-26 02:34 - 2015-05-26 02:34 - 00000000 ____D () C:\Intel2015-05-26 02:34 - 2014-02-21 13:56 - 00041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll2015-05-26 02:33 - 2015-05-28 02:55 - 00000000 ____D () C:\ProgramData\Package Cache2015-05-26 02:28 - 2015-05-28 01:37 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information2015-05-26 02:28 - 2015-05-26 02:28 - 00057560 _____ () C:\Users\Nach\AppData\Local\GDIPFONTCACHEV1.DAT2015-05-26 02:27 - 2015-05-26 19:00 - 00775384 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI2015-05-26 02:26 - 2015-05-26 02:26 - 00000000 ____D () C:\ProgramData\Downloaded Installations2015-05-26 02:24 - 2012-07-26 01:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys2015-05-26 02:24 - 2012-07-26 01:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys2015-05-26 02:24 - 2012-07-25 23:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll2015-05-26 02:24 - 2012-06-02 11:35 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf2015-05-26 02:22 - 2015-06-03 21:44 - 01578066 _____ () C:\Windows\WindowsUpdate.log2015-05-26 02:22 - 2015-06-03 11:06 - 00001413 _____ () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk2015-05-26 02:22 - 2015-05-27 20:26 - 00000000 ____D () C:\Users\Nach2015-05-26 02:22 - 2015-05-26 02:22 - 00000020 ___SH () C:\Users\Nach\ntuser.ini2015-05-26 02:22 - 2015-05-26 02:22 - 00000000 __SHD () C:\Recovery2015-05-26 02:22 - 2009-07-14 01:54 - 00000000 ___RD () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories2015-05-26 02:22 - 2009-07-14 01:49 - 00000000 ___RD () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance==================== One Month Modified files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-06-03 21:45 - 2009-07-14 02:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT2015-06-03 21:45 - 2009-07-14 01:51 - 00044294 _____ () C:\Windows\setupact.log2015-06-03 15:58 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\rescache2015-06-03 14:44 - 2009-07-14 01:45 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A02015-06-03 14:44 - 2009-07-14 01:45 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A02015-06-03 11:32 - 2009-07-14 02:13 - 00783606 _____ () C:\Windows\system32\PerfStringBackup.INI2015-06-03 11:06 - 2009-07-14 01:45 - 00265552 _____ () C:\Windows\system32\FNTCACHE.DAT2015-06-03 11:05 - 2011-04-12 05:28 - 00000000 ____D () C:\Program Files\Windows Journal2015-06-03 11:05 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK2015-06-03 11:05 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR2015-06-03 11:05 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\system32\zh-HK2015-06-03 11:05 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\system32\tr-TR2015-06-03 11:05 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\PolicyDefinitions2015-06-02 21:29 - 2010-11-21 00:47 - 00149122 _____ () C:\Windows\PFRO.log2015-06-02 05:11 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\system32\NDF2015-06-01 21:54 - 2009-07-14 02:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games2015-05-27 19:41 - 2009-07-14 02:32 - 00000000 ____D () C:\Windows\Offline Web Pages2015-05-27 02:07 - 2009-07-14 00:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared2015-05-26 20:45 - 2009-07-14 00:20 - 00000000 __RHD () C:\Users\Public\Libraries2015-05-26 14:43 - 2009-07-14 00:20 - 00000000 __RSD () C:\Windows\Media2015-05-26 06:30 - 2009-07-14 02:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template2015-05-26 05:38 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\LiveKernelReports2015-05-26 05:32 - 2009-07-14 01:46 - 00002790 _____ () C:\Windows\DtcInstall.log2015-05-26 05:32 - 2009-07-14 00:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories2015-05-26 05:32 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\system32\sysprep2015-05-26 05:30 - 2011-04-12 05:28 - 00000000 ____D () C:\Windows\CSC2015-05-26 04:38 - 2009-07-14 02:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD2015-05-26 03:11 - 2009-07-14 01:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk2015-05-26 02:42 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\Help2015-05-26 02:24 - 2009-07-14 02:32 - 00000000 ____D () C:\Windows\system32\restore2015-05-26 02:22 - 2009-07-14 01:45 - 00000000 ____D () C:\Windows\Setup==================== Files in the root of some directories =======2015-05-28 01:36 - 2015-05-28 01:36 - 0000000 _____ () C:\Users\Nach\AppData\Local\Driver_LOM_8161Present.flag2015-05-26 02:44 - 2015-05-27 20:25 - 2128896 _____ () C:\Users\Nach\AppData\Local\file__0.localstorage2015-05-26 02:40 - 2015-05-26 02:40 - 0000000 ____H () C:\ProgramData\DP45977C.lflSome files in TEMP:====================C:\Users\Nach\AppData\Local\Temp\dllnt_dump.dllC:\Users\Nach\AppData\Local\Temp\Quarantine.exeC:\Users\Nach\AppData\Local\Temp\sqlite3.dll==================== Bamital & volsnap Check =================(There is no automatic fix for files that do not pass verification.)C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\SysWOW64\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signedLastRegBack: 2015-06-03 15:51==================== End of log ============================Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-05-2015Ran by Nach at 2015-06-03 21:47:47Running from C:\Users\Nach\DesktopBoot Mode: Normal============================================================================== Accounts: =============================Administrator (S-1-5-21-318558523-3823039876-2902504939-500 - Administrator - Disabled)Guest (S-1-5-21-318558523-3823039876-2902504939-501 - Limited - Disabled)Nach (S-1-5-21-318558523-3823039876-2902504939-1000 - Administrator - Enabled) => C:\Users\Nach==================== Security Center ========================(If an entry is included in the fixlist, it will be removed.)AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D}AS: Bitdefender Antispyware (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}FW: Bitdefender Firewall (Enabled) {A23392FD-84B9-F933-2C71-81E751F6EF46}==================== Installed Programs ======================(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)"Batman - Arkham City" (HKLM-x32\...\{71AD83D4-6F74-4257-8398-8D1BFEA91EFF}_is1) (Version: 1.1.0.0 - )Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 15.007.20033 - Adobe Systems Incorporated)Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version: - Hidden Path Entertainment, Ensemble Studios)Bitdefender Total Security 2015 (HKLM\...\Bitdefender) (Version: 18.20.0.1429 - Bitdefender)Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) HiddenCanon MP Navigator EX 2.1 (HKLM-x32\...\MP Navigator EX 2.1) (Version: - )Canon MX330 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX330_series) (Version: - Canon Inc.)Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)CPUID CPU-Z 1.72 (HKLM\...\CPUID CPU-Z_is1) (Version: - )Creation Master 15.0 (HKLM-x32\...\Creation Master 15_is1) (Version: - FIFA MASTER)EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.7.0.0 - Electronic Arts)erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) HiddenFraps (remove only) (HKLM-x32\...\Fraps) (Version: - )Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) HiddenGrand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)GRID (HKLM-x32\...\Steam App 12750) (Version: - Codemasters Studios)Heaven Benchmark version 4.0 (HKLM-x32\...\Unigine Heaven Benchmark (Basic Edition)_is1) (Version: 4.0 - Unigine Corp.)Intel® Chipset Device Software (x32 Version: 10.0.20 - Intel® Corporation) HiddenIntel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)Logitech Gaming Software 8.58 (HKLM\...\Logitech Gaming Software) (Version: 8.58.183 - Logitech Inc.)Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)Malwarebytes Anti-Malware version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)Mozilla Firefox 38.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 en-US)) (Version: 38.0.5 - Mozilla)Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.0.5 - Mozilla)MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD)NVIDIA 3D Vision Controller Driver 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)NVIDIA GeForce Experience 2.4.3.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.3.31 - NVIDIA Corporation)NVIDIA Graphics Driver 352.86 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 352.86 - NVIDIA Corporation)NVIDIA HD Audio Driver 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)OpenAL (HKLM-x32\...\OpenAL) (Version: - )Origin (HKLM-x32\...\Origin) (Version: 9.5.12.2862 - Electronic Arts, Inc.)Project CARS (HKLM-x32\...\Project CARS_R.G. Mechanics_is1) (Version: - R.G. Mechanics, ProZorg_tm)Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.0.30.1259 - Qualcomm Atheros) HiddenQualcomm Atheros Killer E220x Drivers (Version: 1.0.30.1259 - Qualcomm Atheros) HiddenQualcomm Atheros Killer Network Manager Suite (HKLM-x32\...\{FE5DFB80-6937-4154-A2C7-EF845C1301F8}) (Version: 1.0.30.1259 - Qualcomm Atheros)Qualcomm Atheros Network Manager (Version: 1.0.30.1259 - Qualcomm Atheros) HiddenRealtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7256 - Realtek Semiconductor Corp.)Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) HiddenSHIELD Wireless Controller Driver (Version: 2.4.3.31 - NVIDIA Corporation) HiddenSkype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.101 - Skype Technologies S.A.)Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.5.4 - Sophos Limited)Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp)The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.0.0 - GOG.com)Unigine Valley Benchmark version 1.0 (HKLM-x32\...\Unigine Valley Benchmark_is1) (Version: 1.0 - Unigine Corp.)VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)==================== Custom CLSID (Whitelisted): ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== Restore Points =========================30-05-2015 21:11:57 Installed DirectX01-06-2015 21:54:23 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.6103001-06-2015 21:54:31 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.6103002-06-2015 21:43:16 Installed Sophos Virus Removal Tool.03-06-2015 10:42:56 Windows Update==================== Hosts content: ===============================(If needed Hosts: directive could be included in the fixlist to reset Hosts.)2009-07-13 23:34 - 2009-06-10 18:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts==================== Scheduled Tasks (Whitelisted) =============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)Task: {04896E09-1B7E-470F-B796-319FA3FF54B6} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2014-12-06] ()Task: {332DF19C-15ED-47C2-B41B-FD0966C6D230} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-03-07] (Adobe Systems Incorporated)Task: {4A459083-3C0D-47DF-BBF8-B954C9A7F079} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-26] (Google Inc.)Task: {70553BA1-A890-422D-B3A2-07A9FD4BCDDF} - System32\Tasks\GoogleUpdateTaskMachineUA1d0977f4b8115c => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-26] (Google Inc.)Task: {714D0294-6844-47CB-BBB4-E3355CF88D6B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-26] (Google Inc.)Task: {8FD47602-92B6-4BA3-AB5C-DF206E6E8809} - System32\Tasks\GoogleUpdateTaskMachineCore1d0977f3e5f393 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-26] (Google Inc.)Task: {AD7D643B-DA81-43C4-A6C1-6BC52C59CF93} - System32\Tasks\EVGAPrecisionX => C:\Program Files (x86)\EVGA\PrecisionX 16\PrecisionX_x64.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0977f3e5f393.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0977f4b8115c.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe==================== Loaded Modules (Whitelisted) ==============2015-05-27 19:38 - 2014-08-27 16:31 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\txmlutil.dll2015-05-27 19:38 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdmetrics.dll2015-05-27 19:38 - 2014-12-17 14:34 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\UI\accessl.ui2015-05-27 19:38 - 2012-10-29 14:22 - 00152816 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdfwcore.dll2015-05-27 20:24 - 2015-05-27 20:24 - 00790368 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_002\ashttpbr.mdl2015-05-27 20:24 - 2015-05-27 20:24 - 00711064 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_002\ashttpdsp.mdl2015-05-27 20:24 - 2015-05-27 20:24 - 02683520 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_002\ashttpph.mdl2015-05-27 20:24 - 2015-05-27 20:24 - 01326504 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_002\ashttprbl.mdl2015-05-26 02:42 - 2015-05-12 00:30 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll2014-12-06 04:03 - 2014-12-06 04:03 - 00565760 _____ () C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe2014-09-18 04:23 - 2014-09-18 04:23 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll2015-03-12 15:23 - 2015-03-12 15:23 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll2014-09-18 04:23 - 2014-09-18 04:23 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll2015-03-12 15:23 - 2015-03-12 15:23 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll2013-08-08 14:30 - 2013-08-08 14:30 - 00283648 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe2014-12-06 04:01 - 2014-12-06 04:01 - 00071680 _____ () C:\Program Files (x86)\MSI Afterburner\RTMUI.dll2014-12-06 04:01 - 2014-12-06 04:01 - 00056832 _____ () C:\Program Files (x86)\MSI Afterburner\RTFC.dll2014-12-06 04:02 - 2014-12-06 04:02 - 00217600 _____ () C:\Program Files (x86)\MSI Afterburner\RTCore.dll2014-12-06 04:01 - 2014-12-06 04:01 - 00353792 _____ () C:\Program Files (x86)\MSI Afterburner\RTUI.dll2014-12-06 04:02 - 2014-12-06 04:02 - 00649216 _____ () C:\Program Files (x86)\MSI Afterburner\RTHAL.dll2015-05-26 02:43 - 2015-05-07 21:36 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll2012-09-13 00:38 - 2012-09-13 00:38 - 02144104 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll2012-09-13 00:38 - 2012-09-13 00:38 - 07955304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll2012-09-13 00:38 - 2012-09-13 00:38 - 00341352 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll2012-09-13 00:38 - 2012-09-13 00:38 - 00028008 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll2012-09-13 00:38 - 2012-09-13 00:38 - 00127336 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll2015-05-26 02:36 - 2015-05-22 17:22 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\libglesv2.dll2015-05-26 02:36 - 2015-05-22 17:22 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\libegl.dll2014-03-20 11:43 - 2014-03-20 11:43 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\ACE.dll==================== Alternate Data Streams (Whitelisted) =========(If an entry is included in the fixlist, only the ADS will be removed.)AlternateDataStreams: C:\Users\Nach\Desktop\FRST64.exe:BDUAlternateDataStreams: C:\Users\Nach\Desktop\rkill.exe:BDUAlternateDataStreams: C:\Users\Nach\Desktop\RogueKiller.exe:BDUAlternateDataStreams: C:\Users\Nach\Desktop\SecurityCheck.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\dxwebsetup.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\Firefox Setup Stub 38.0.5.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\md64-win-mx330-1_02-ej.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\mpnx_2_1-win-2_13-ea23_2.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\SkypeSetupFull.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\vlc-2.2.1-win32.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\Xbox360_64Eng.exe:BDU==================== Safe Mode (Whitelisted) ===================(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)==================== EXE Association (Whitelisted) ===============(If an entry is included in the fixlist, the registry item will be restored to default or removed.)==================== Internet Explorer trusted/restricted ===============(If an entry is included in the fixlist, it will be removed from the registry.)==================== Other Areas ============================(Currently there is no automatic fix for this section.)HKU\S-1-5-21-318558523-3823039876-2902504939-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpgDNS Servers: 8.8.8.8 - 8.8.4.4==================== MSCONFIG/TASK MANAGER disabled items ==(Currently there is no automatic fix for this section.)==================== FirewallRules (Whitelisted) ===============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)FirewallRules: [sPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exeFirewallRules: [sPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe==================== Faulty Device Manager Devices ================================= Event log errors: =========================Application errors:==================Error: (06/03/2015 09:46:57 PM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003Error: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:54099 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:60490 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:57820 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:54160 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:63332 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:65202 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:51406 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:64689 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:62882 length 0 too shortSystem errors:=============Error: (06/03/2015 09:45:17 PM) (Source: Service Control Manager) (EventID: 7024) (User: )Description: The HomeGroup Listener service terminated with service-specific error %%-2147023143.Error: (06/03/2015 02:57:49 PM) (Source: Application Popup) (EventID: 1060) (User: )Description: \??\C:\Windows\System32\drivers\TrueSight.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.Error: (06/03/2015 11:27:00 AM) (Source: Service Control Manager) (EventID: 7024) (User: )Description: The HomeGroup Listener service terminated with service-specific error %%-2147023143.Error: (06/03/2015 11:17:27 AM) (Source: Service Control Manager) (EventID: 7024) (User: )Description: The HomeGroup Listener service terminated with service-specific error %%-2147023143.Error: (06/03/2015 11:16:21 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: The Print Spooler service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.Error: (06/03/2015 11:16:21 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.Error: (06/03/2015 11:16:20 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.Error: (06/03/2015 11:16:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Skype Click to Call PNR Service service terminated unexpectedly. It has done this 1 time(s).Error: (06/03/2015 11:16:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Skype Click to Call Updater service terminated unexpectedly. It has done this 1 time(s).Error: (06/03/2015 11:14:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Intel® Dynamic Application Loader Host Interface Service service terminated unexpectedly. It has done this 1 time(s).Microsoft Office:=========================Error: (06/03/2015 09:46:57 PM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003Error: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:54099 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:60490 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:57820 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:54160 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:63332 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:65202 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:51406 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:64689 length 0 too shortError: (06/03/2015 09:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:62882 length 0 too short==================== Memory info ===========================Processor: Intel® Core i5-4690K CPU @ 3.50GHzPercentage of memory in use: 19%Total physical RAM: 16293.58 MBAvailable physical RAM: 13045.02 MBTotal Pagefile: 32585.35 MBAvailable Pagefile: 28856.39 MBTotal Virtual: 8192 MBAvailable Virtual: 8191.83 MB==================== Drives ================================Drive c: () (Fixed) (Total:238.37 GB) (Free:8.56 GB) NTFSDrive d: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[system with boot components (obtained from reading drive)]Drive e: (Data) (Fixed) (Total:931.51 GB) (Free:376.58 GB) NTFSDrive f: (Móvel) (Fixed) (Total:1863.01 GB) (Free:445.35 GB) NTFSDrive g: (Software) (Fixed) (Total:801.51 GB) (Free:722.62 GB) NTFS==================== MBR & Partition Table ==========================================================================Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 000A788F)Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)========================================================Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 0AE75AEB)Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)========================================================Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 2E2F1945)Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)Partition 2: (Not Active) - (Size=801.5 GB) - (Type=07 NTFS)========================================================Disk: 3 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1D42D274)Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)========================================================Disk: 4 (Size: 111.8 GB) (Disk ID: 00087AEE)Partition 1: (Active) - (Size=243 MB) - (Type=83)Partition 2: (Not Active) - (Size=111.6 GB) - (Type=05)==================== End of log ============================
-
Done and done :3 oh yeah, not sure if its relevant but I dont live in the US, I live in BRazil.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-05-2015Ran by Nach (administrator) on NACH-PC on 03-06-2015 21:47:30Running from C:\Users\Nach\DesktopLoaded Profiles: Nach (Available Profiles: Nach)Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)Internet Explorer Version 10 (Default browser: Chrome)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe() C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe==================== Registry (Whitelisted) ==================(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-05-27] (Realtek Semiconductor)HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2685072 2015-05-07] (NVIDIA Corporation)HKLM\...\Run: [shadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStartHKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [13318424 2015-03-12] (Logitech Inc.)HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)HKLM\...\Run: [bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1691112 2015-05-27] (Bitdefender)HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)HKU\S-1-5-21-318558523-3823039876-2902504939-1000\...\Run: [bitdefender Wallet Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790880 2015-05-27] (Bitdefender)Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2015-05-28]ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{401FADAA-1C16-4721-9F02-19067E1A1CA8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)Startup: C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk [2015-05-28]ShortcutTarget: Logitech . Product Registration.lnk -> C:\Program Files (x86)\Logitech\Ereg\eReg.exe (Leader Technologies/Logitech)ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)==================== Internet (Whitelisted) ====================(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =HKU\S-1-5-21-318558523-3823039876-2902504939-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blankHKU\S-1-5-21-318558523-3823039876-2902504939-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pt-br/?ocid=iehpSearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2015-05-27] (Bitdefender)BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2015-05-27] (Bitdefender)BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2015-05-27] (Bitdefender)Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2015-05-27] (Bitdefender)Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)Tcpip\Parameters: [DhcpNameServer] 89.248.166.149 8.8.8.8Tcpip\..\Interfaces\{2F05DAF2-001F-4356-97BC-279A97204CA9}: [NameServer] 8.8.8.8,8.8.4.4,192.168.0.1FireFox:========FF ProfilePath: C:\Users\Nach\AppData\Roaming\Mozilla\Firefox\Profiles\ceywwvhy.defaultFF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-03-20] (Intel Corporation)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-03-20] (Intel Corporation)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-26] (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-26] (Google Inc.)FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-03-17] (Adobe Systems Inc.)FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbextFF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2015-05-27]FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteffFF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff [2015-05-27]FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbextChrome:=======CHR Profile: C:\Users\Nach\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Drive) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-26]CHR Extension: (YouTube) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-26]CHR Extension: (Google Search) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-26]CHR Extension: (AdBlock) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-05-28]CHR Extension: (Bookmark Manager) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-26]CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-02]CHR Extension: (Skype Click to Call) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-05-27]CHR Extension: (Google Wallet) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-26]CHR Extension: (Gmail) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-26]CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - https://clients2.google.com/service/update2/crxCHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]==================== Services (Whitelisted) =================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)S3 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [78144 2014-12-09] (Bitdefender)R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-07] (NVIDIA Corporation)R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel® Corporation)R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1884304 2015-05-07] (NVIDIA Corporation)R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22997648 2015-05-07] (NVIDIA Corporation)S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1997168 2015-06-01] (Electronic Arts)R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [343040 2013-08-08] (Qualcomm Atheros) [File not signed]S4 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [67320 2014-10-27] (Bitdefender)R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1547936 2015-05-27] (Bitdefender)R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)==================== Drivers (Whitelisted) ====================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1306464 2015-05-27] (BitDefender)R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [262544 2015-05-27] (BitDefender)R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [677104 2015-05-27] (BitDefender)R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2015-05-27] (BitDefender LLC)R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107080 2012-10-29] (BitDefender LLC)S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2012-04-17] (BitDefender)R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [67888 2013-02-13] (Qualcomm Atheros, Inc.)R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [160544 2015-05-27] (BitDefender LLC)R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation)R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-07] (NVIDIA Corporation)R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-03-11] ()U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-06-03] ()R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [452040 2014-10-15] (BitDefender S.R.L.)==================== NetSvcs (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== One Month Created files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-06-03 21:41 - 2015-06-03 21:43 - 00558117 _____ () C:\Users\Nach\Desktop\DnsJumper_v1.0.6.zip2015-06-03 14:57 - 2015-06-03 15:15 - 00000000 ____D () C:\ProgramData\RogueKiller2015-06-03 14:57 - 2015-06-03 14:57 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys2015-06-03 14:49 - 2015-06-03 14:50 - 17637624 _____ () C:\Users\Nach\Desktop\RogueKiller.exe2015-06-03 14:45 - 2015-06-03 14:45 - 00025474 _____ () C:\Users\Nach\Desktop\Addition.txt2015-06-03 14:44 - 2015-06-03 21:47 - 00017233 _____ () C:\Users\Nach\Desktop\FRST.txt2015-06-03 14:43 - 2015-06-03 21:47 - 00000000 ____D () C:\FRST2015-06-03 14:43 - 2015-06-03 14:43 - 02108928 _____ (Farbar) C:\Users\Nach\Desktop\FRST64.exe2015-06-03 11:56 - 2015-06-03 11:56 - 00082824 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys2015-06-03 11:06 - 2015-06-03 11:06 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Adobe2015-06-03 10:52 - 2015-06-03 10:52 - 19221504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll2015-06-03 10:52 - 2015-06-03 10:52 - 15407616 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll2015-06-03 10:52 - 2015-06-03 10:52 - 14317568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll2015-06-03 10:52 - 2015-06-03 10:52 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll2015-06-03 10:52 - 2015-06-03 10:52 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll2015-06-03 10:52 - 2015-06-03 10:52 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll2015-06-03 10:52 - 2015-06-03 10:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb2015-06-03 10:52 - 2015-06-03 10:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb2015-06-03 10:52 - 2015-06-03 10:52 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll2015-06-03 10:52 - 2015-06-03 10:52 - 02240512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll2015-06-03 10:52 - 2015-06-03 10:52 - 02046464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll2015-06-03 10:52 - 2015-06-03 10:52 - 01766912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll2015-06-03 10:52 - 2015-06-03 10:52 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl2015-06-03 10:52 - 2015-06-03 10:52 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl2015-06-03 10:52 - 2015-06-03 10:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat2015-06-03 10:52 - 2015-06-03 10:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat2015-06-03 10:52 - 2015-06-03 10:52 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll2015-06-03 10:52 - 2015-06-03 10:52 - 01129984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll2015-06-03 10:52 - 2015-06-03 10:52 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec2015-06-03 10:52 - 2015-06-03 10:52 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec2015-06-03 10:52 - 2015-06-03 10:52 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx2015-06-03 10:52 - 2015-06-03 10:52 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx2015-06-03 10:52 - 2015-06-03 10:52 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe2015-06-03 10:50 - 2015-06-03 10:50 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll2015-06-03 10:50 - 2015-06-03 10:50 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll2015-06-03 10:50 - 2015-06-03 10:50 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll2015-06-03 10:50 - 2015-06-03 10:50 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll2015-06-03 10:50 - 2015-06-03 10:50 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01504768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll2015-06-03 10:48 - 2015-06-03 10:53 - 00011231 _____ () C:\Windows\IE10_main.log2015-06-03 10:45 - 2015-06-03 10:47 - 00003318 _____ () C:\Windows\IE9_main.log2015-06-03 10:43 - 2015-06-03 10:45 - 00000000 ____D () C:\Windows\system32\MRT2015-06-03 10:43 - 2015-04-01 11:16 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe2015-06-03 10:40 - 2015-03-06 02:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys2015-06-03 10:40 - 2015-03-06 02:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys2015-06-03 10:40 - 2015-03-06 02:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll2015-06-03 10:40 - 2015-03-06 02:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe2015-06-03 10:40 - 2015-03-06 02:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe2015-06-03 10:40 - 2015-03-06 02:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll2015-06-03 10:40 - 2015-03-06 02:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll2015-06-03 10:40 - 2015-03-06 02:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll2015-06-03 10:40 - 2015-03-06 02:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll2015-06-03 10:40 - 2015-03-06 02:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe2015-06-03 10:40 - 2015-03-06 02:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll2015-06-03 10:40 - 2015-03-06 02:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll2015-06-03 10:40 - 2015-03-06 02:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll2015-06-03 10:40 - 2015-02-26 00:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys2015-06-03 10:40 - 2015-01-29 00:23 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe2015-06-03 10:40 - 2015-01-29 00:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll2015-06-03 10:40 - 2015-01-29 00:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll2015-06-03 10:40 - 2015-01-29 00:19 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll2015-06-03 10:40 - 2015-01-29 00:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe2015-06-03 10:40 - 2015-01-29 00:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe2015-06-03 10:40 - 2015-01-29 00:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll2015-06-03 10:40 - 2015-01-29 00:05 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe2015-06-03 10:40 - 2015-01-29 00:05 - 03917752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe2015-06-03 10:40 - 2015-01-29 00:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll2015-06-03 10:40 - 2015-01-28 23:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll2015-06-03 10:40 - 2014-09-12 22:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll2015-06-03 10:40 - 2014-09-12 22:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll2015-06-03 10:40 - 2014-08-21 03:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll2015-06-03 10:40 - 2014-08-21 03:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll2015-06-03 10:40 - 2014-08-21 03:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll2015-06-03 10:40 - 2014-08-21 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll2015-06-03 10:40 - 2014-03-24 23:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll2015-06-03 10:40 - 2014-03-24 23:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll2015-06-03 10:40 - 2014-02-03 23:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll2015-06-03 10:40 - 2014-02-03 23:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll2015-06-03 10:40 - 2013-10-02 23:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll2015-06-03 10:40 - 2013-10-02 23:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll2015-06-03 10:40 - 2013-09-27 22:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys2015-06-03 10:40 - 2013-08-01 23:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll2015-06-03 10:40 - 2013-08-01 23:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll2015-06-03 10:40 - 2013-08-01 22:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll2015-06-03 10:40 - 2013-08-01 22:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll2015-06-03 10:40 - 2013-08-01 09:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys2015-06-03 10:40 - 2013-07-20 07:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll2015-06-03 10:40 - 2013-07-20 07:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll2015-06-03 10:40 - 2013-07-09 02:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll2015-06-03 10:40 - 2013-07-09 02:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll2015-06-03 10:40 - 2013-07-09 02:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll2015-06-03 10:40 - 2013-07-09 01:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll2015-06-03 10:40 - 2013-07-09 01:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll2015-06-03 10:40 - 2013-07-09 01:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll2015-06-03 10:40 - 2013-07-06 03:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys2015-06-03 10:40 - 2013-06-15 01:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys2015-06-03 10:40 - 2013-06-06 02:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll2015-06-03 10:40 - 2013-06-06 02:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll2015-06-03 10:40 - 2013-06-06 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll2015-06-03 10:40 - 2013-06-06 02:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll2015-06-03 10:40 - 2013-06-06 01:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll2015-06-03 10:40 - 2013-06-06 01:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll2015-06-03 10:40 - 2013-06-06 01:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll2015-06-03 10:40 - 2013-06-06 00:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll2015-06-03 10:40 - 2013-06-06 00:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll2015-06-03 10:40 - 2013-06-06 00:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll2015-06-03 10:40 - 2013-01-03 03:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS2015-06-03 10:40 - 2012-11-09 02:45 - 00750592 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll2015-06-03 10:40 - 2012-11-09 01:43 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll2015-06-03 10:40 - 2012-11-01 02:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll2015-06-03 10:40 - 2012-11-01 01:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll2015-06-03 10:40 - 2012-08-22 15:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys2015-06-03 10:40 - 2011-03-08 03:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll2015-06-03 10:40 - 2011-03-08 02:28 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll2015-06-03 10:40 - 2011-02-25 03:22 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll2015-06-03 10:40 - 2011-02-25 02:34 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll2015-06-03 10:40 - 2011-02-23 01:56 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys2015-06-03 10:40 - 2011-02-23 01:56 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys2015-06-03 10:40 - 2011-02-23 01:55 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys2015-06-03 06:54 - 2015-06-03 06:54 - 00000000 ____D () C:\Users\Nach\AppData\Local\VirtualStore2015-06-02 21:43 - 2015-06-02 21:43 - 00002759 _____ () C:\Users\Public\Desktop\Sophos Virus Removal Tool.lnk2015-06-02 21:43 - 2015-06-02 21:43 - 00000000 ____D () C:\ProgramData\Sophos2015-06-02 21:43 - 2015-06-02 21:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos2015-06-02 21:43 - 2015-06-02 21:43 - 00000000 ____D () C:\Program Files (x86)\Sophos2015-06-02 21:37 - 2015-06-02 21:37 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-NACH-PC-Windows-7-Professional-(64-bit).dat2015-06-02 21:37 - 2015-06-02 21:37 - 00000000 ____D () C:\RegBackup2015-06-02 21:32 - 2015-06-03 11:16 - 00000000 ____D () C:\AdwCleaner2015-06-02 21:00 - 2015-06-02 21:00 - 01943800 _____ (Bleeping Computer, LLC) C:\Users\Nach\Desktop\rkill.exe2015-06-02 20:55 - 2015-06-03 14:44 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)2015-06-02 20:54 - 2015-06-03 14:44 - 00000000 ____D () C:\Users\Nach\Desktop\mbar2015-06-02 20:40 - 2015-06-02 20:39 - 00852639 _____ () C:\Users\Nach\Desktop\SecurityCheck.exe2015-06-02 19:08 - 2015-06-03 21:45 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys2015-06-02 19:07 - 2015-06-03 14:02 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys2015-06-02 19:07 - 2015-06-02 19:07 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2015-06-02 19:07 - 2015-06-02 19:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2015-06-02 19:07 - 2015-06-02 19:07 - 00000000 ____D () C:\ProgramData\Malwarebytes2015-06-02 19:07 - 2015-06-02 19:07 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware2015-06-02 19:07 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys2015-06-02 19:07 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys2015-06-02 18:19 - 2015-06-02 18:19 - 00001610 _____ () C:\Windows\system32\bdsandbox.txt2015-06-02 18:07 - 2015-06-02 21:28 - 00000000 ____D () C:\Users\Nach\AppData\Temp2015-06-02 17:46 - 2015-06-02 17:46 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk2015-06-02 17:46 - 2015-06-02 17:46 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk2015-06-02 17:46 - 2015-06-02 17:46 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Mozilla2015-06-02 17:46 - 2015-06-02 17:46 - 00000000 ____D () C:\Users\Nach\AppData\Local\Mozilla2015-06-02 17:46 - 2015-06-02 17:46 - 00000000 ____D () C:\ProgramData\Mozilla2015-06-02 17:46 - 2015-06-02 17:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service2015-06-02 17:46 - 2015-06-02 17:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox2015-06-02 17:45 - 2015-06-02 17:45 - 00243408 _____ () C:\Users\Nach\Downloads\Firefox Setup Stub 38.0.5.exe2015-06-02 04:49 - 2015-06-02 04:49 - 00000000 ____D () C:\Users\Nach\Documents\FM_temp2015-06-02 04:49 - 2015-06-02 04:49 - 00000000 ____D () C:\Users\Nach\AppData\Local\CreationMaster2015-06-02 04:48 - 2015-06-02 04:48 - 00001269 _____ () C:\Users\Nach\Desktop\CM 15.lnk2015-06-02 04:48 - 2015-06-02 04:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fifa Master2015-06-02 04:48 - 2015-06-02 04:48 - 00000000 ____D () C:\Program Files (x86)\Fifa Master2015-06-02 04:42 - 2015-06-02 04:43 - 19412014 _____ () C:\Users\Nach\Downloads\Setup_CM_15_0.rar2015-06-02 04:39 - 2015-06-02 04:39 - 00000562 _____ () C:\Users\Public\Desktop\Fraps.lnk2015-06-02 04:39 - 2015-06-02 04:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps2015-06-02 04:39 - 2015-06-02 04:39 - 00000000 ____D () C:\Fraps2015-06-02 04:36 - 2015-06-02 04:36 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\WinRAR2015-06-02 04:36 - 2015-06-02 04:36 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR2015-06-02 04:36 - 2015-06-02 04:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR2015-06-02 04:35 - 2015-06-02 04:36 - 00000000 ____D () C:\Program Files\WinRAR2015-06-02 04:32 - 2015-06-02 04:35 - 101738804 _____ () C:\Users\Nach\Downloads\FI-XV-MWMW210.rar2015-06-02 04:31 - 2015-06-02 04:33 - 71594649 _____ () C:\Users\Nach\Downloads\FI-XV-MWMW200.rar2015-06-02 04:31 - 2015-06-02 04:32 - 12104486 _____ () C:\Users\Nach\Downloads\FI-XV-MWMW202.rar2015-06-02 04:31 - 2015-06-02 04:31 - 03326221 _____ () C:\Users\Nach\Downloads\FI-XV-MWMW211 (1).rar2015-06-02 04:30 - 2015-06-02 17:43 - 00000000 ____D () C:\ProgramData\Adobe2015-06-02 04:30 - 2015-06-02 04:30 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task2015-06-02 04:30 - 2015-06-02 04:30 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk2015-06-02 04:30 - 2015-06-02 04:30 - 00002047 _____ () C:\Users\Public\Desktop\Acrobat Reader DC.lnk2015-06-02 04:30 - 2015-06-02 04:30 - 00000000 ____D () C:\Program Files (x86)\Adobe2015-06-02 04:29 - 2015-06-02 04:32 - 00000000 ____D () C:\Users\Nach\AppData\Local\Adobe2015-06-01 22:16 - 2015-06-02 01:50 - 00000000 ____D () C:\Users\Nach\Documents\The Witcher 32015-06-01 21:54 - 2015-06-01 21:54 - 00001955 _____ () C:\Users\Public\Desktop\The Witcher® 3 - Wild Hunt.lnk2015-06-01 21:54 - 2015-06-01 21:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com2015-06-01 21:47 - 2015-06-01 21:47 - 00000000 ____D () C:\GOG Games2015-05-28 20:22 - 2015-06-01 03:02 - 00000080 _____ () C:\Users\Nach\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦2015-05-28 20:22 - 2015-05-28 20:22 - 00000000 ____D () C:\Users\Nach\Documents\Rockstar Games2015-05-28 20:22 - 2015-05-28 20:22 - 00000000 ____D () C:\Users\Nach\AppData\Local\Rockstar Games2015-05-28 20:22 - 2015-05-28 20:22 - 00000000 ____D () C:\Program Files\Rockstar Games2015-05-28 20:22 - 2015-05-28 20:22 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games2015-05-28 02:55 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll2015-05-28 02:55 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll2015-05-28 02:55 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll2015-05-28 02:55 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll2015-05-28 02:55 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll2015-05-28 02:55 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll2015-05-28 01:37 - 2015-05-28 01:37 - 00002783 _____ () C:\Users\Public\Desktop\Killer Network Manager.lnk2015-05-28 01:37 - 2015-05-28 01:37 - 00000000 ____D () C:\ProgramData\Qualcomm2015-05-28 01:37 - 2015-05-28 01:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros2015-05-28 01:37 - 2015-05-28 01:37 - 00000000 ____D () C:\Program Files\Qualcomm Atheros2015-05-28 01:36 - 2015-05-28 01:36 - 00000000 _____ () C:\Users\Nach\AppData\Local\Driver_LOM_8161Present.flag2015-05-27 20:26 - 2015-05-27 20:39 - 00000000 ____D () C:\Users\Nach\Valley2015-05-27 20:24 - 2015-05-27 20:24 - 00002113 _____ () C:\Users\Public\Desktop\Valley Benchmark 1.0.lnk2015-05-27 19:44 - 2015-05-27 19:44 - 00160544 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys2015-05-27 19:44 - 2015-05-27 19:44 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll2015-05-27 19:44 - 2015-05-27 19:44 - 00074000 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll2015-05-27 19:39 - 2015-05-27 19:39 - 00000385 _____ () C:\Users\Nach\AppData\Roaminguser_gensett.xml2015-05-27 19:38 - 2015-05-27 19:44 - 00677104 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys2015-05-27 19:38 - 2015-05-27 19:44 - 00262544 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys2015-05-27 19:38 - 2015-05-27 19:44 - 00033360 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll2015-05-27 19:38 - 2015-05-27 19:44 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Bitdefender2015-05-27 19:38 - 2015-05-27 19:43 - 01306464 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys2015-05-27 19:38 - 2015-05-27 19:40 - 00000000 ____D () C:\ProgramData\BDLogging2015-05-27 19:38 - 2015-05-27 19:38 - 00253404 ____H () C:\bdr-ld012015-05-27 19:38 - 2015-05-27 19:38 - 00009216 ____H () C:\bdr-ld01.mbr2015-05-27 19:38 - 2015-05-27 19:38 - 00002122 _____ () C:\Users\Public\Desktop\Bitdefender Total Security 2015.lnk2015-05-27 19:38 - 2015-05-27 19:38 - 00000684 ____H () C:\bdr-cf012015-05-27 19:38 - 2015-05-27 19:38 - 00000385 _____ () C:\Windows\system32\user_gensett.xml2015-05-27 19:38 - 2015-05-27 19:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf2015-05-27 19:38 - 2015-05-27 19:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 20152015-05-27 19:38 - 2015-05-27 19:38 - 00000000 ____D () C:\ProgramData\Bitdefender2015-05-27 19:38 - 2015-05-27 19:38 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender2015-05-27 19:38 - 2015-05-27 19:38 - 00000000 ____D () C:\Program Files\Bitdefender2015-05-27 19:38 - 2014-12-02 16:37 - 00074000 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll2015-05-27 19:38 - 2014-10-15 17:14 - 00452040 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys2015-05-27 19:38 - 2014-07-04 17:49 - 49563064 ____H () C:\bdr-im01.gz2015-05-27 19:38 - 2013-11-13 15:41 - 00093600 _____ (BitDefender LLC) C:\Windows\system32\Drivers\BdfNdisf6.sys2015-05-27 19:38 - 2013-08-13 13:38 - 03271472 ____H () C:\bdr-bz012015-05-27 19:38 - 2012-04-17 14:34 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys2015-05-27 19:38 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll2015-05-27 16:53 - 2015-05-27 16:53 - 00000000 ____D () C:\Users\Nach\Documents\WB Games2015-05-27 16:53 - 2015-05-27 16:53 - 00000000 ____D () C:\ProgramData\Steam2015-05-27 16:50 - 2015-05-27 16:50 - 00001670 _____ () C:\Users\Public\Desktop\Batman - Arkham City.lnk2015-05-27 16:50 - 2015-05-27 16:50 - 00001043 _____ () C:\Users\Public\Desktop\Batman - Arkham City (Settings).lnk2015-05-27 16:50 - 2015-05-27 16:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Batman - Arkham City2015-05-27 16:37 - 2015-05-27 16:37 - 00000000 ____D () C:\Users\Nach\AppData\Local\Setup Integrity Check2015-05-27 15:24 - 2015-05-27 16:37 - 00000000 ____D () C:\Games2015-05-27 04:05 - 2015-06-03 21:44 - 00003018 _____ () C:\Windows\System32\Tasks\MSIAfterburner2015-05-27 04:04 - 2015-06-02 01:07 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner2015-05-27 04:04 - 2015-05-27 04:04 - 00001086 _____ () C:\Users\Nach\Desktop\MSI Afterburner.lnk2015-05-27 04:04 - 2015-05-27 04:04 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner2015-05-27 04:03 - 2015-05-27 04:03 - 36210245 _____ () C:\Users\Nach\Downloads\[Guru3D.com]-MSIAfterburnerSetup410.zip2015-05-27 04:02 - 2015-05-27 04:02 - 00000000 ____D () C:\Windows\system32\appmgmt2015-05-27 03:13 - 2015-05-27 03:33 - 00000000 ____D () C:\Users\Nach\Documents\wmd_symbol_cache2015-05-27 03:13 - 2015-05-27 03:33 - 00000000 ____D () C:\Users\Nach\Documents\Project CARS2015-05-27 03:12 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll2015-05-27 03:12 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll2015-05-27 03:12 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll2015-05-27 03:12 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll2015-05-27 03:12 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll2015-05-27 03:12 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll2015-05-27 03:12 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll2015-05-27 03:12 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll2015-05-27 03:12 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll2015-05-27 03:12 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll2015-05-27 03:12 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll2015-05-27 03:12 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll2015-05-27 03:12 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll2015-05-27 03:12 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll2015-05-27 03:12 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll2015-05-27 03:12 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll2015-05-27 03:12 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll2015-05-27 03:12 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll2015-05-27 03:12 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll2015-05-27 03:12 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll2015-05-27 03:12 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll2015-05-27 03:12 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll2015-05-27 03:12 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll2015-05-27 03:12 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll2015-05-27 03:12 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll2015-05-27 03:12 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll2015-05-27 03:12 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll2015-05-27 03:12 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll2015-05-27 03:12 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll2015-05-27 03:12 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll2015-05-27 03:12 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll2015-05-27 03:12 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll2015-05-27 03:12 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll2015-05-27 03:12 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll2015-05-27 03:12 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll2015-05-27 03:12 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll2015-05-27 03:12 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll2015-05-27 03:12 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll2015-05-27 03:12 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll2015-05-27 03:12 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll2015-05-27 03:12 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll2015-05-27 03:12 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll2015-05-27 03:12 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll2015-05-27 03:12 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll2015-05-27 03:12 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll2015-05-27 03:12 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll2015-05-27 03:12 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll2015-05-27 03:12 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll2015-05-27 03:12 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll2015-05-27 03:12 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll2015-05-27 03:12 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll2015-05-27 03:12 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll2015-05-27 03:12 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll2015-05-27 03:12 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll2015-05-27 03:12 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll2015-05-27 03:12 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll2015-05-27 03:12 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll2015-05-27 03:12 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll2015-05-27 03:12 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll2015-05-27 03:12 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll2015-05-27 03:12 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll2015-05-27 03:12 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll2015-05-27 03:12 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll2015-05-27 03:12 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll2015-05-27 03:12 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll2015-05-27 03:12 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll2015-05-27 03:12 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll2015-05-27 03:12 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll2015-05-27 03:12 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll2015-05-27 03:12 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll2015-05-27 03:12 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll2015-05-27 03:12 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll2015-05-27 03:12 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll2015-05-27 03:12 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll2015-05-27 03:12 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll2015-05-27 03:12 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll2015-05-27 03:12 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll2015-05-27 03:12 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll2015-05-27 03:12 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll2015-05-27 03:12 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll2015-05-27 03:12 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll2015-05-27 03:09 - 2015-05-27 03:09 - 00292184 _____ (Microsoft Corporation) C:\Users\Nach\Downloads\dxwebsetup.exe2015-05-27 02:07 - 2015-05-27 02:07 - 00002122 _____ () C:\Users\Nach\Desktop\Project CARS.lnk2015-05-27 02:07 - 2015-05-27 02:07 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Project CARS2015-05-27 02:07 - 2015-05-27 02:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics2015-05-27 02:06 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll2015-05-27 01:54 - 2015-05-27 01:54 - 00000000 ____D () C:\Program Files (x86)\R.G. Mechanics2015-05-27 00:03 - 2015-06-02 04:22 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\vlc2015-05-27 00:03 - 2015-05-27 00:03 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk2015-05-27 00:03 - 2015-05-27 00:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN2015-05-27 00:03 - 2015-05-27 00:03 - 00000000 ____D () C:\Program Files (x86)\VideoLAN2015-05-27 00:01 - 2015-05-27 00:02 - 28849904 _____ () C:\Users\Nach\Downloads\vlc-2.2.1-win32.exe2015-05-26 22:40 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll2015-05-26 22:40 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll2015-05-26 22:40 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll2015-05-26 22:40 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll2015-05-26 22:40 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll2015-05-26 22:40 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll2015-05-26 22:40 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll2015-05-26 22:40 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll2015-05-26 22:40 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll2015-05-26 22:40 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll2015-05-26 22:40 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll2015-05-26 22:40 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll2015-05-26 22:40 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll2015-05-26 22:40 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll2015-05-26 22:40 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll2015-05-26 22:40 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll2015-05-26 22:40 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll2015-05-26 22:40 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll2015-05-26 22:40 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll2015-05-26 22:40 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll2015-05-26 22:40 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll2015-05-26 22:40 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll2015-05-26 22:40 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll2015-05-26 22:40 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll2015-05-26 22:40 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll2015-05-26 22:40 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll2015-05-26 22:40 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll2015-05-26 22:40 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll2015-05-26 22:40 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll2015-05-26 22:40 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll2015-05-26 22:40 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll2015-05-26 22:40 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll2015-05-26 22:40 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll2015-05-26 22:40 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll2015-05-26 22:40 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll2015-05-26 22:40 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll2015-05-26 22:40 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll2015-05-26 22:40 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll2015-05-26 22:40 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll2015-05-26 22:40 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll2015-05-26 22:40 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll2015-05-26 22:40 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll2015-05-26 22:40 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll2015-05-26 22:40 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll2015-05-26 22:40 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll2015-05-26 22:40 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll2015-05-26 22:40 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll2015-05-26 22:40 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll2015-05-26 22:40 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll2015-05-26 22:40 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll2015-05-26 22:40 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll2015-05-26 20:45 - 2015-05-31 09:31 - 00000000 ____D () C:\Users\Nach\Documents\FIFA 152015-05-26 20:38 - 2015-05-30 21:12 - 00074969 _____ () C:\Windows\DirectX.log2015-05-26 20:38 - 2015-05-26 20:38 - 07878008 _____ (Microsoft Corporation) C:\Users\Nach\Downloads\Xbox360_64Eng.exe2015-05-26 20:38 - 2015-05-26 20:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf2015-05-26 20:38 - 2015-05-26 20:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories2015-05-26 20:38 - 2015-05-26 20:38 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories2015-05-26 20:36 - 2015-05-26 20:36 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll2015-05-26 20:36 - 2015-05-26 20:36 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll2015-05-26 20:36 - 2015-05-26 20:36 - 00133632 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll2015-05-26 20:36 - 2015-05-26 20:36 - 00110592 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll2015-05-26 20:36 - 2015-05-26 20:36 - 00000000 ____D () C:\Users\Nach\Documents\Codemasters2015-05-26 20:36 - 2015-05-26 20:36 - 00000000 ____D () C:\ProgramData\Codemasters2015-05-26 20:36 - 2015-05-26 20:36 - 00000000 ____D () C:\Program Files (x86)\OpenAL2015-05-26 19:43 - 2015-05-26 19:43 - 00000000 ____D () C:\Users\Nach\Tracing2015-05-26 19:42 - 2015-06-02 20:55 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Skype2015-05-26 19:42 - 2015-05-27 19:48 - 00000000 ___RD () C:\Program Files (x86)\Skype2015-05-26 19:42 - 2015-05-26 19:42 - 43034752 _____ (Skype Technologies S.A.) C:\Users\Nach\Downloads\SkypeSetupFull.exe2015-05-26 19:42 - 2015-05-26 19:42 - 00002697 _____ () C:\Users\Public\Desktop\Skype.lnk2015-05-26 19:42 - 2015-05-26 19:42 - 00000000 ____D () C:\Users\Nach\AppData\Local\Skype2015-05-26 19:42 - 2015-05-26 19:42 - 00000000 ____D () C:\ProgramData\Skype2015-05-26 19:42 - 2015-05-26 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype2015-05-26 18:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE2015-05-26 18:43 - 2015-05-27 02:42 - 00027508 _____ () C:\Windows\IE11_main.log2015-05-26 18:15 - 2014-06-30 19:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll2015-05-26 18:15 - 2014-06-30 19:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll2015-05-26 18:15 - 2014-06-06 03:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe2015-05-26 18:15 - 2014-06-06 03:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe2015-05-26 18:15 - 2014-03-09 18:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe2015-05-26 18:15 - 2014-03-09 18:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll2015-05-26 18:15 - 2014-03-09 18:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe2015-05-26 18:15 - 2014-03-09 18:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll2015-05-26 14:45 - 2015-05-26 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities2015-05-26 14:45 - 2015-05-26 14:45 - 00000000 ____D () C:\Program Files (x86)\Canon2015-05-26 14:44 - 2015-05-26 14:44 - 00001147 _____ () C:\Users\Public\Desktop\FIFA 15.lnk2015-05-26 14:44 - 2015-05-26 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 152015-05-26 14:43 - 2015-05-26 14:43 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information2015-05-26 14:43 - 2015-05-26 14:43 - 00000000 ___HD () C:\ProgramData\CanonBJ2015-05-26 14:43 - 2015-05-26 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX330 series2015-05-26 14:43 - 2009-06-16 11:37 - 01342976 _____ (CANON INC.) C:\Windows\system32\CNC330C.DLL2015-05-26 14:43 - 2009-06-16 11:36 - 00092672 _____ (CANON INC.) C:\Windows\system32\CNC330I.DLL2015-05-26 14:43 - 2009-04-25 05:00 - 00290816 _____ (CANON INC.) C:\Windows\system32\CNMLM9P.DLL2015-05-26 14:43 - 2009-02-19 13:20 - 00299520 _____ (CANON INC.) C:\Windows\system32\CNC330L.DLL2015-05-26 14:43 - 2008-09-11 09:39 - 00244736 _____ (CANON INC.) C:\Windows\system32\CNMIU9P.DLL2015-05-26 14:43 - 2008-09-03 11:15 - 00262656 _____ (Canon Inc.) C:\Windows\system32\CNCF2Li.DLL2015-05-26 14:43 - 2008-09-03 11:10 - 00232448 _____ (Canon Inc.) C:\Windows\system32\CNCFMSi.EXE2015-05-26 14:43 - 2008-09-03 11:10 - 00003072 _____ (Canon Inc.) C:\Windows\system32\CNCFLiUS.DLL2015-05-26 14:43 - 2008-09-03 11:10 - 00002560 _____ (Canon Inc.) C:\Windows\system32\CNCFLiJP.DLL2015-05-26 14:43 - 2008-08-25 18:02 - 00017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.DLL2015-05-26 14:43 - 2008-07-16 09:39 - 00235008 _____ (Canon Inc.) C:\Windows\system32\CNC330O.DLL2015-05-26 14:43 - 2008-07-02 13:11 - 00013568 _____ () C:\Windows\system32\CNC1737D.TBL2015-05-26 14:42 - 2015-05-26 14:42 - 11017360 _____ () C:\Users\Nach\Downloads\md64-win-mx330-1_02-ej.exe2015-05-26 14:42 - 2015-05-26 14:42 - 00000000 ___HD () C:\Program Files\CanonBJ2015-05-26 14:36 - 2015-05-26 14:36 - 48655952 _____ () C:\Users\Nach\Downloads\mpnx_2_1-win-2_13-ea23_2.exe2015-05-26 14:25 - 2013-07-09 02:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll2015-05-26 14:25 - 2013-07-09 02:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll2015-05-26 14:25 - 2013-07-09 01:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll2015-05-26 14:25 - 2013-07-09 01:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll2015-05-26 14:24 - 2015-01-30 20:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys2015-05-26 14:24 - 2014-03-04 06:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll2015-05-26 14:24 - 2014-03-04 06:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll2015-05-26 14:24 - 2014-03-04 06:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll2015-05-26 14:24 - 2014-03-04 06:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll2015-05-26 14:24 - 2014-03-04 06:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll2015-05-26 14:24 - 2014-03-04 06:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll2015-05-26 14:24 - 2014-03-04 06:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll2015-05-26 14:24 - 2014-03-04 06:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe2015-05-26 14:24 - 2014-03-04 06:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll2015-05-26 14:24 - 2014-03-04 05:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe2015-05-26 14:24 - 2014-03-04 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe2015-05-26 14:24 - 2013-08-01 23:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll -
ROGUEKILLER opened this link:
http://www.adlice.com/userland-rootkits-part-1-iat-hooks/
the log:
RogueKiller V10.8.1.0 [Jun 3 2015] by Adlice SoftwareFeedback : http://forum.adlice.comBlog : http://www.adlice.comOperating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits versionStarted in : Normal modeUser : Nach [Administrator]Started from : C:\Users\Nach\Desktop\RogueKiller.exeMode : Scan -- Date : 06/03/2015 15:02:42¤¤¤ Processes : 0 ¤¤¤¤¤¤ Registry : 8 ¤¤¤[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 89.248.166.149 8.8.8.8 [POLAND (PL)][-] -> Found[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 89.248.166.149 8.8.8.8 [POLAND (PL)][-] -> Found[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 89.248.166.149 8.8.8.8 [POLAND (PL)][-] -> Found[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{2F05DAF2-001F-4356-97BC-279A97204CA9} | DhcpNameServer : 89.248.166.149 8.8.8.8 [POLAND (PL)][-] -> Found[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{2F05DAF2-001F-4356-97BC-279A97204CA9} | DhcpNameServer : 89.248.166.149 8.8.8.8 [POLAND (PL)][-] -> Found[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{2F05DAF2-001F-4356-97BC-279A97204CA9} | DhcpNameServer : 89.248.166.149 8.8.8.8 [X][-] -> Found[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-318558523-3823039876-2902504939-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Found[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-318558523-3823039876-2902504939-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Found¤¤¤ Tasks : 0 ¤¤¤¤¤¤ Files : 0 ¤¤¤¤¤¤ Hosts File : 0 ¤¤¤¤¤¤ Antirootkit : 515 (Driver: Not loaded [0xc000036b]) ¤¤¤[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x73901ed9 (jmp 0xfc442095|jmp 0xffffe6b2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x73902ab9 (jmp 0xfc442e09|jmp 0xffffdad2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtMapViewOfSection : Unknown @ 0x739015f1 (jmp 0xfc4419a1|jmp 0xffffef9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtUnmapViewOfSection : Unknown @ 0x73901689 (jmp 0xfc441a09|jmp 0xffffef02|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x739020a1 (jmp 0xfc440331|jmp 0xffffe4ea|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x73901d11 (jmp 0xfc4403f1|jmp 0xffffe87a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtProtectVirtualMemory : Unknown @ 0x73904441 (jmp 0xfc444409|jmp 0xffffc14a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryInformationToken : Unknown @ 0x73903bf1 (jmp 0xfc444049|jmp 0xffffc99a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlEqualSid : Unknown @ 0x73903c89 (jmp 0xfc42a768|jmp 0xffffc902|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcessToken : Unknown @ 0x73903b59 (jmp 0xfc442a99|jmp 0xffffca32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetInformationProcess : Unknown @ 0x73902b51 (jmp 0xfc443029|jmp 0xffffda3a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x73901da9 (jmp 0xfc442189|jmp 0xffffe7e2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x73902c81 (jmp 0xfc44109d|jmp 0xffffd90a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateFile : Unknown @ 0x73903309 (jmp 0xfc443255|jmp 0xffffd282|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x73901c79 (jmp 0xfc441e65|jmp 0xffffe912|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlCreateProcessParametersEx : Unknown @ 0x739028f1 (jmp 0xfc401bb6|jmp 0xffffdc9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThread : Unknown @ 0x73901e41 (jmp 0xfc441f1d|jmp 0xffffe74a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x739018e9 (jmp 0xfc441045|jmp 0xffffeca2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAdjustPrivilegesToken : Unknown @ 0x73903271 (jmp 0xfc4433b1|jmp 0xffffd31a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - CreateToolhelp32Snapshot : Unknown @ 0x73902009 (jmp 0xfe75ace2|jmp 0xffffe582|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageA : Unknown @ 0x73903ee9 (jmp 0xfdc3c316|jmp 0xffffc6a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageA : Unknown @ 0x73904019 (jmp 0xfdc3046f|jmp 0xffffc572|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageW : Unknown @ 0x739040b1 (jmp 0xfdc32e0c|jmp 0xffffc4da|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtVdmControl : Unknown @ 0x73903e51 (jmp 0xfc441f69|jmp 0xffffc73a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - MoveFileExW : Unknown @ 0x73902f79 (jmp 0xfe769474|jmp 0xffffd612|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageW : Unknown @ 0x73903f81 (jmp 0xfdc3c69f|jmp 0xffffc60a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWinEventHook : Unknown @ 0x739021d1 (jmp 0xfdc333c8|jmp 0xffffe3ba|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExW : Unknown @ 0x739017b9 (jmp 0xfdc2a1b6|jmp 0xffffedd2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextW : Unknown @ 0x73903601 (jmp 0xfe4756ed|jmp 0xffffcf8a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptCreateHash : Unknown @ 0x739037c9 (jmp 0xfe47587b|jmp 0xffffcdc2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGetHashParam : Unknown @ 0x739038f9 (jmp 0xfe47597b|jmp 0xffffcc92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGenKey : Unknown @ 0x73903699 (jmp 0xfe47a7b0|jmp 0xffffcef2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) WS2_32.dll - WSASend : Unknown @ 0x739041e1 (jmp 0xfc89fddb|jmp 0xffffc3aa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x73902be9 (jmp 0xfc441df5|jmp 0xffffd9a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - OpenServiceW : Unknown @ 0x73902431 (jmp 0xfe4759e5|jmp 0xffffe15a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CloseServiceHandle : Unknown @ 0x73902859 (jmp 0xfe46f1bd|jmp 0xffffdd32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExA : Unknown @ 0x73901721 (jmp 0xfdc293c5|jmp 0xffffee6a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x73901ed9 (jmp 0xfc442095|jmp 0xffffe6b2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x73902ab9 (jmp 0xfc442e09|jmp 0xffffdad2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtMapViewOfSection : Unknown @ 0x739015f1 (jmp 0xfc4419a1|jmp 0xffffef9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtUnmapViewOfSection : Unknown @ 0x73901689 (jmp 0xfc441a09|jmp 0xffffef02|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x739020a1 (jmp 0xfc440331|jmp 0xffffe4ea|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x73901d11 (jmp 0xfc4403f1|jmp 0xffffe87a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtProtectVirtualMemory : Unknown @ 0x73904441 (jmp 0xfc444409|jmp 0xffffc14a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryInformationToken : Unknown @ 0x73903bf1 (jmp 0xfc444049|jmp 0xffffc99a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlEqualSid : Unknown @ 0x73903c89 (jmp 0xfc42a768|jmp 0xffffc902|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcessToken : Unknown @ 0x73903b59 (jmp 0xfc442a99|jmp 0xffffca32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetInformationProcess : Unknown @ 0x73902b51 (jmp 0xfc443029|jmp 0xffffda3a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x73901da9 (jmp 0xfc442189|jmp 0xffffe7e2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x73902c81 (jmp 0xfc44109d|jmp 0xffffd90a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateFile : Unknown @ 0x73903309 (jmp 0xfc443255|jmp 0xffffd282|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x73901c79 (jmp 0xfc441e65|jmp 0xffffe912|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlCreateProcessParametersEx : Unknown @ 0x739028f1 (jmp 0xfc401bb6|jmp 0xffffdc9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThread : Unknown @ 0x73901e41 (jmp 0xfc441f1d|jmp 0xffffe74a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x739018e9 (jmp 0xfc441045|jmp 0xffffeca2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAdjustPrivilegesToken : Unknown @ 0x73903271 (jmp 0xfc4433b1|jmp 0xffffd31a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - CreateToolhelp32Snapshot : Unknown @ 0x73902009 (jmp 0xfe75ace2|jmp 0xffffe582|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageA : Unknown @ 0x73903ee9 (jmp 0xfdc3c316|jmp 0xffffc6a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageA : Unknown @ 0x73904019 (jmp 0xfdc3046f|jmp 0xffffc572|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageW : Unknown @ 0x739040b1 (jmp 0xfdc32e0c|jmp 0xffffc4da|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtVdmControl : Unknown @ 0x73903e51 (jmp 0xfc441f69|jmp 0xffffc73a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - MoveFileExW : Unknown @ 0x73902f79 (jmp 0xfe769474|jmp 0xffffd612|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageW : Unknown @ 0x73903f81 (jmp 0xfdc3c69f|jmp 0xffffc60a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWinEventHook : Unknown @ 0x739021d1 (jmp 0xfdc333c8|jmp 0xffffe3ba|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExW : Unknown @ 0x739017b9 (jmp 0xfdc2a1b6|jmp 0xffffedd2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGetHashParam : Unknown @ 0x739038f9 (jmp 0xfe47597b|jmp 0xffffcc92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptCreateHash : Unknown @ 0x739037c9 (jmp 0xfe47587b|jmp 0xffffcdc2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) WS2_32.dll - WSASend : Unknown @ 0x739041e1 (jmp 0xfc89fddb|jmp 0xffffc3aa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x73902be9 (jmp 0xfc441df5|jmp 0xffffd9a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptHashData : Unknown @ 0x73903991 (jmp 0xfe475a5b|jmp 0xffffcbfa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextW : Unknown @ 0x73903601 (jmp 0xfe4756ed|jmp 0xffffcf8a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExA : Unknown @ 0x73901721 (jmp 0xfdc293c5|jmp 0xffffee6a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - GetStartupInfoA : Unknown @ 0x73903db9 (jmp 0xfe782fb9|jmp 0xffffc7d2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - OpenServiceA : Unknown @ 0x73902399 (jmp 0xfe46f7a9|jmp 0xffffe1f2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - ControlService : Unknown @ 0x739025f9 (jmp 0xfe45b4b5|jmp 0xffffdf92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CloseServiceHandle : Unknown @ 0x73902859 (jmp 0xfe46f1bd|jmp 0xffffdd32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - OpenServiceW : Unknown @ 0x73902431 (jmp 0xfe4759e5|jmp 0xffffe15a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextA : Unknown @ 0x73903569 (jmp 0xfe47a38c|jmp 0xffffd022|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptEncrypt : Unknown @ 0x73903731 (jmp 0xfe45bf96|jmp 0xffffce5a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptExportKey : Unknown @ 0x73903861 (jmp 0xfe47a677|jmp 0xffffcd2a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptImportKey : Unknown @ 0x73903a29 (jmp 0xfe4774f7|jmp 0xffffcb62|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGenKey : Unknown @ 0x73903699 (jmp 0xfe47a7b0|jmp 0xffffcef2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x73901ed9 (jmp 0xfc442095|jmp 0xffffe6b2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x73902ab9 (jmp 0xfc442e09|jmp 0xffffdad2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtMapViewOfSection : Unknown @ 0x739015f1 (jmp 0xfc4419a1|jmp 0xffffef9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtUnmapViewOfSection : Unknown @ 0x73901689 (jmp 0xfc441a09|jmp 0xffffef02|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x739020a1 (jmp 0xfc440331|jmp 0xffffe4ea|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x73901d11 (jmp 0xfc4403f1|jmp 0xffffe87a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtProtectVirtualMemory : Unknown @ 0x73904441 (jmp 0xfc444409|jmp 0xffffc14a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryInformationToken : Unknown @ 0x73903bf1 (jmp 0xfc444049|jmp 0xffffc99a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlEqualSid : Unknown @ 0x73903c89 (jmp 0xfc42a768|jmp 0xffffc902|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcessToken : Unknown @ 0x73903b59 (jmp 0xfc442a99|jmp 0xffffca32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetInformationProcess : Unknown @ 0x73902b51 (jmp 0xfc443029|jmp 0xffffda3a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x73901da9 (jmp 0xfc442189|jmp 0xffffe7e2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x73902c81 (jmp 0xfc44109d|jmp 0xffffd90a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateFile : Unknown @ 0x73903309 (jmp 0xfc443255|jmp 0xffffd282|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x73901c79 (jmp 0xfc441e65|jmp 0xffffe912|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlCreateProcessParametersEx : Unknown @ 0x739028f1 (jmp 0xfc401bb6|jmp 0xffffdc9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThread : Unknown @ 0x73901e41 (jmp 0xfc441f1d|jmp 0xffffe74a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x739018e9 (jmp 0xfc441045|jmp 0xffffeca2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAdjustPrivilegesToken : Unknown @ 0x73903271 (jmp 0xfc4433b1|jmp 0xffffd31a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - CreateToolhelp32Snapshot : Unknown @ 0x73902009 (jmp 0xfe75ace2|jmp 0xffffe582|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageA : Unknown @ 0x73903ee9 (jmp 0xfdc3c316|jmp 0xffffc6a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageA : Unknown @ 0x73904019 (jmp 0xfdc3046f|jmp 0xffffc572|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageW : Unknown @ 0x739040b1 (jmp 0xfdc32e0c|jmp 0xffffc4da|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtVdmControl : Unknown @ 0x73903e51 (jmp 0xfc441f69|jmp 0xffffc73a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - MoveFileExW : Unknown @ 0x73902f79 (jmp 0xfe769474|jmp 0xffffd612|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageW : Unknown @ 0x73903f81 (jmp 0xfdc3c69f|jmp 0xffffc60a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWinEventHook : Unknown @ 0x739021d1 (jmp 0xfdc333c8|jmp 0xffffe3ba|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExW : Unknown @ 0x739017b9 (jmp 0xfdc2a1b6|jmp 0xffffedd2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGetHashParam : Unknown @ 0x739038f9 (jmp 0xfe47597b|jmp 0xffffcc92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptCreateHash : Unknown @ 0x739037c9 (jmp 0xfe47587b|jmp 0xffffcdc2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) WS2_32.dll - WSASend : Unknown @ 0x739041e1 (jmp 0xfc89fddb|jmp 0xffffc3aa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x73902be9 (jmp 0xfc441df5|jmp 0xffffd9a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextW : Unknown @ 0x73903601 (jmp 0xfe4756ed|jmp 0xffffcf8a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x73901ed9 (jmp 0xfc442095|jmp 0xffffe6b2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x73902ab9 (jmp 0xfc442e09|jmp 0xffffdad2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtMapViewOfSection : Unknown @ 0x739015f1 (jmp 0xfc4419a1|jmp 0xffffef9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtUnmapViewOfSection : Unknown @ 0x73901689 (jmp 0xfc441a09|jmp 0xffffef02|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x739020a1 (jmp 0xfc440331|jmp 0xffffe4ea|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x73901d11 (jmp 0xfc4403f1|jmp 0xffffe87a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtProtectVirtualMemory : Unknown @ 0x73904441 (jmp 0xfc444409|jmp 0xffffc14a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryInformationToken : Unknown @ 0x73903bf1 (jmp 0xfc444049|jmp 0xffffc99a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlEqualSid : Unknown @ 0x73903c89 (jmp 0xfc42a768|jmp 0xffffc902|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcessToken : Unknown @ 0x73903b59 (jmp 0xfc442a99|jmp 0xffffca32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetInformationProcess : Unknown @ 0x73902b51 (jmp 0xfc443029|jmp 0xffffda3a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x73901da9 (jmp 0xfc442189|jmp 0xffffe7e2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x73902c81 (jmp 0xfc44109d|jmp 0xffffd90a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateFile : Unknown @ 0x73903309 (jmp 0xfc443255|jmp 0xffffd282|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x73901c79 (jmp 0xfc441e65|jmp 0xffffe912|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlCreateProcessParametersEx : Unknown @ 0x739028f1 (jmp 0xfc401bb6|jmp 0xffffdc9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThread : Unknown @ 0x73901e41 (jmp 0xfc441f1d|jmp 0xffffe74a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x739018e9 (jmp 0xfc441045|jmp 0xffffeca2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAdjustPrivilegesToken : Unknown @ 0x73903271 (jmp 0xfc4433b1|jmp 0xffffd31a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - CreateToolhelp32Snapshot : Unknown @ 0x73902009 (jmp 0xfe75ace2|jmp 0xffffe582|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageA : Unknown @ 0x73903ee9 (jmp 0xfdc3c316|jmp 0xffffc6a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageA : Unknown @ 0x73904019 (jmp 0xfdc3046f|jmp 0xffffc572|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageW : Unknown @ 0x739040b1 (jmp 0xfdc32e0c|jmp 0xffffc4da|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtVdmControl : Unknown @ 0x73903e51 (jmp 0xfc441f69|jmp 0xffffc73a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - MoveFileExW : Unknown @ 0x73902f79 (jmp 0xfe769474|jmp 0xffffd612|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageW : Unknown @ 0x73903f81 (jmp 0xfdc3c69f|jmp 0xffffc60a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWinEventHook : Unknown @ 0x739021d1 (jmp 0xfdc333c8|jmp 0xffffe3ba|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExW : Unknown @ 0x739017b9 (jmp 0xfdc2a1b6|jmp 0xffffedd2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGetHashParam : Unknown @ 0x739038f9 (jmp 0xfe47597b|jmp 0xffffcc92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptCreateHash : Unknown @ 0x739037c9 (jmp 0xfe47587b|jmp 0xffffcdc2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) WS2_32.dll - WSASend : Unknown @ 0x739041e1 (jmp 0xfc89fddb|jmp 0xffffc3aa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x73902be9 (jmp 0xfc441df5|jmp 0xffffd9a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextW : Unknown @ 0x73903601 (jmp 0xfe4756ed|jmp 0xffffcf8a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x73901ed9 (jmp 0xfc442095|jmp 0xffffe6b2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x73902ab9 (jmp 0xfc442e09|jmp 0xffffdad2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtMapViewOfSection : Unknown @ 0x739015f1 (jmp 0xfc4419a1|jmp 0xffffef9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtUnmapViewOfSection : Unknown @ 0x73901689 (jmp 0xfc441a09|jmp 0xffffef02|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x739020a1 (jmp 0xfc440331|jmp 0xffffe4ea|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x73901d11 (jmp 0xfc4403f1|jmp 0xffffe87a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtProtectVirtualMemory : Unknown @ 0x73904441 (jmp 0xfc444409|jmp 0xffffc14a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryInformationToken : Unknown @ 0x73903bf1 (jmp 0xfc444049|jmp 0xffffc99a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlEqualSid : Unknown @ 0x73903c89 (jmp 0xfc42a768|jmp 0xffffc902|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcessToken : Unknown @ 0x73903b59 (jmp 0xfc442a99|jmp 0xffffca32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetInformationProcess : Unknown @ 0x73902b51 (jmp 0xfc443029|jmp 0xffffda3a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x73901da9 (jmp 0xfc442189|jmp 0xffffe7e2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x73902c81 (jmp 0xfc44109d|jmp 0xffffd90a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateFile : Unknown @ 0x73903309 (jmp 0xfc443255|jmp 0xffffd282|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x73901c79 (jmp 0xfc441e65|jmp 0xffffe912|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlCreateProcessParametersEx : Unknown @ 0x739028f1 (jmp 0xfc401bb6|jmp 0xffffdc9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThread : Unknown @ 0x73901e41 (jmp 0xfc441f1d|jmp 0xffffe74a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x739018e9 (jmp 0xfc441045|jmp 0xffffeca2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAdjustPrivilegesToken : Unknown @ 0x73903271 (jmp 0xfc4433b1|jmp 0xffffd31a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - CreateToolhelp32Snapshot : Unknown @ 0x73902009 (jmp 0xfe75ace2|jmp 0xffffe582|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageA : Unknown @ 0x73903ee9 (jmp 0xfdc3c316|jmp 0xffffc6a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageA : Unknown @ 0x73904019 (jmp 0xfdc3046f|jmp 0xffffc572|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageW : Unknown @ 0x739040b1 (jmp 0xfdc32e0c|jmp 0xffffc4da|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtVdmControl : Unknown @ 0x73903e51 (jmp 0xfc441f69|jmp 0xffffc73a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - MoveFileExW : Unknown @ 0x73902f79 (jmp 0xfe769474|jmp 0xffffd612|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageW : Unknown @ 0x73903f81 (jmp 0xfdc3c69f|jmp 0xffffc60a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWinEventHook : Unknown @ 0x739021d1 (jmp 0xfdc333c8|jmp 0xffffe3ba|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExW : Unknown @ 0x739017b9 (jmp 0xfdc2a1b6|jmp 0xffffedd2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGetHashParam : Unknown @ 0x739038f9 (jmp 0xfe47597b|jmp 0xffffcc92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptCreateHash : Unknown @ 0x739037c9 (jmp 0xfe47587b|jmp 0xffffcdc2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) WS2_32.dll - WSASend : Unknown @ 0x739041e1 (jmp 0xfc89fddb|jmp 0xffffc3aa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x73902be9 (jmp 0xfc441df5|jmp 0xffffd9a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextW : Unknown @ 0x73903601 (jmp 0xfe4756ed|jmp 0xffffcf8a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x73901ed9 (jmp 0xfc442095|jmp 0xffffe6b2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x73902ab9 (jmp 0xfc442e09|jmp 0xffffdad2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtMapViewOfSection : Unknown @ 0x739015f1 (jmp 0xfc4419a1|jmp 0xffffef9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtUnmapViewOfSection : Unknown @ 0x73901689 (jmp 0xfc441a09|jmp 0xffffef02|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x739020a1 (jmp 0xfc440331|jmp 0xffffe4ea|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x73901d11 (jmp 0xfc4403f1|jmp 0xffffe87a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtProtectVirtualMemory : Unknown @ 0x73904441 (jmp 0xfc444409|jmp 0xffffc14a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryInformationToken : Unknown @ 0x73903bf1 (jmp 0xfc444049|jmp 0xffffc99a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlEqualSid : Unknown @ 0x73903c89 (jmp 0xfc42a768|jmp 0xffffc902|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcessToken : Unknown @ 0x73903b59 (jmp 0xfc442a99|jmp 0xffffca32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetInformationProcess : Unknown @ 0x73902b51 (jmp 0xfc443029|jmp 0xffffda3a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x73901da9 (jmp 0xfc442189|jmp 0xffffe7e2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x73902c81 (jmp 0xfc44109d|jmp 0xffffd90a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateFile : Unknown @ 0x73903309 (jmp 0xfc443255|jmp 0xffffd282|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x73901c79 (jmp 0xfc441e65|jmp 0xffffe912|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlCreateProcessParametersEx : Unknown @ 0x739028f1 (jmp 0xfc401bb6|jmp 0xffffdc9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThread : Unknown @ 0x73901e41 (jmp 0xfc441f1d|jmp 0xffffe74a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x739018e9 (jmp 0xfc441045|jmp 0xffffeca2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAdjustPrivilegesToken : Unknown @ 0x73903271 (jmp 0xfc4433b1|jmp 0xffffd31a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - CreateToolhelp32Snapshot : Unknown @ 0x73902009 (jmp 0xfe75ace2|jmp 0xffffe582|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageA : Unknown @ 0x73903ee9 (jmp 0xfdc3c316|jmp 0xffffc6a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageA : Unknown @ 0x73904019 (jmp 0xfdc3046f|jmp 0xffffc572|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageW : Unknown @ 0x739040b1 (jmp 0xfdc32e0c|jmp 0xffffc4da|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtVdmControl : Unknown @ 0x73903e51 (jmp 0xfc441f69|jmp 0xffffc73a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - MoveFileExW : Unknown @ 0x73902f79 (jmp 0xfe769474|jmp 0xffffd612|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageW : Unknown @ 0x73903f81 (jmp 0xfdc3c69f|jmp 0xffffc60a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWinEventHook : Unknown @ 0x739021d1 (jmp 0xfdc333c8|jmp 0xffffe3ba|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExW : Unknown @ 0x739017b9 (jmp 0xfdc2a1b6|jmp 0xffffedd2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGetHashParam : Unknown @ 0x739038f9 (jmp 0xfe47597b|jmp 0xffffcc92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptCreateHash : Unknown @ 0x739037c9 (jmp 0xfe47587b|jmp 0xffffcdc2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) WS2_32.dll - WSASend : Unknown @ 0x739041e1 (jmp 0xfc89fddb|jmp 0xffffc3aa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x73902be9 (jmp 0xfc441df5|jmp 0xffffd9a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextW : Unknown @ 0x73903601 (jmp 0xfe4756ed|jmp 0xffffcf8a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x73901ed9 (jmp 0xfc442095|jmp 0xffffe6b2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x73902ab9 (jmp 0xfc442e09|jmp 0xffffdad2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtMapViewOfSection : Unknown @ 0x739015f1 (jmp 0xfc4419a1|jmp 0xffffef9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtUnmapViewOfSection : Unknown @ 0x73901689 (jmp 0xfc441a09|jmp 0xffffef02|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x739020a1 (jmp 0xfc440331|jmp 0xffffe4ea|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x73901d11 (jmp 0xfc4403f1|jmp 0xffffe87a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtProtectVirtualMemory : Unknown @ 0x73904441 (jmp 0xfc444409|jmp 0xffffc14a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryInformationToken : Unknown @ 0x73903bf1 (jmp 0xfc444049|jmp 0xffffc99a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlEqualSid : Unknown @ 0x73903c89 (jmp 0xfc42a768|jmp 0xffffc902|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcessToken : Unknown @ 0x73903b59 (jmp 0xfc442a99|jmp 0xffffca32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetInformationProcess : Unknown @ 0x73902b51 (jmp 0xfc443029|jmp 0xffffda3a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x73901da9 (jmp 0xfc442189|jmp 0xffffe7e2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x73902c81 (jmp 0xfc44109d|jmp 0xffffd90a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateFile : Unknown @ 0x73903309 (jmp 0xfc443255|jmp 0xffffd282|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x73901c79 (jmp 0xfc441e65|jmp 0xffffe912|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlCreateProcessParametersEx : Unknown @ 0x739028f1 (jmp 0xfc401bb6|jmp 0xffffdc9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThread : Unknown @ 0x73901e41 (jmp 0xfc441f1d|jmp 0xffffe74a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x739018e9 (jmp 0xfc441045|jmp 0xffffeca2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAdjustPrivilegesToken : Unknown @ 0x73903271 (jmp 0xfc4433b1|jmp 0xffffd31a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - CreateToolhelp32Snapshot : Unknown @ 0x73902009 (jmp 0xfe75ace2|jmp 0xffffe582|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageA : Unknown @ 0x73903ee9 (jmp 0xfdc3c316|jmp 0xffffc6a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageA : Unknown @ 0x73904019 (jmp 0xfdc3046f|jmp 0xffffc572|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageW : Unknown @ 0x739040b1 (jmp 0xfdc32e0c|jmp 0xffffc4da|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtVdmControl : Unknown @ 0x73903e51 (jmp 0xfc441f69|jmp 0xffffc73a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - MoveFileExW : Unknown @ 0x73902f79 (jmp 0xfe769474|jmp 0xffffd612|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageW : Unknown @ 0x73903f81 (jmp 0xfdc3c69f|jmp 0xffffc60a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWinEventHook : Unknown @ 0x739021d1 (jmp 0xfdc333c8|jmp 0xffffe3ba|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExW : Unknown @ 0x739017b9 (jmp 0xfdc2a1b6|jmp 0xffffedd2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGetHashParam : Unknown @ 0x739038f9 (jmp 0xfe47597b|jmp 0xffffcc92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptCreateHash : Unknown @ 0x739037c9 (jmp 0xfe47587b|jmp 0xffffcdc2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) WS2_32.dll - WSASend : Unknown @ 0x739041e1 (jmp 0xfc89fddb|jmp 0xffffc3aa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x73902be9 (jmp 0xfc441df5|jmp 0xffffd9a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextW : Unknown @ 0x73903601 (jmp 0xfe4756ed|jmp 0xffffcf8a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x73901ed9 (jmp 0xfc442095|jmp 0xffffe6b2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x73902ab9 (jmp 0xfc442e09|jmp 0xffffdad2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtMapViewOfSection : Unknown @ 0x739015f1 (jmp 0xfc4419a1|jmp 0xffffef9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtUnmapViewOfSection : Unknown @ 0x73901689 (jmp 0xfc441a09|jmp 0xffffef02|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x739020a1 (jmp 0xfc440331|jmp 0xffffe4ea|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x73901d11 (jmp 0xfc4403f1|jmp 0xffffe87a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtProtectVirtualMemory : Unknown @ 0x73904441 (jmp 0xfc444409|jmp 0xffffc14a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryInformationToken : Unknown @ 0x73903bf1 (jmp 0xfc444049|jmp 0xffffc99a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlEqualSid : Unknown @ 0x73903c89 (jmp 0xfc42a768|jmp 0xffffc902|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcessToken : Unknown @ 0x73903b59 (jmp 0xfc442a99|jmp 0xffffca32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetInformationProcess : Unknown @ 0x73902b51 (jmp 0xfc443029|jmp 0xffffda3a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x73901da9 (jmp 0xfc442189|jmp 0xffffe7e2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x73902c81 (jmp 0xfc44109d|jmp 0xffffd90a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateFile : Unknown @ 0x73903309 (jmp 0xfc443255|jmp 0xffffd282|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x73901c79 (jmp 0xfc441e65|jmp 0xffffe912|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlCreateProcessParametersEx : Unknown @ 0x739028f1 (jmp 0xfc401bb6|jmp 0xffffdc9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThread : Unknown @ 0x73901e41 (jmp 0xfc441f1d|jmp 0xffffe74a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x739018e9 (jmp 0xfc441045|jmp 0xffffeca2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAdjustPrivilegesToken : Unknown @ 0x73903271 (jmp 0xfc4433b1|jmp 0xffffd31a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - CreateToolhelp32Snapshot : Unknown @ 0x73902009 (jmp 0xfe75ace2|jmp 0xffffe582|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageA : Unknown @ 0x73903ee9 (jmp 0xfdc3c316|jmp 0xffffc6a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageA : Unknown @ 0x73904019 (jmp 0xfdc3046f|jmp 0xffffc572|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageW : Unknown @ 0x739040b1 (jmp 0xfdc32e0c|jmp 0xffffc4da|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtVdmControl : Unknown @ 0x73903e51 (jmp 0xfc441f69|jmp 0xffffc73a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - MoveFileExW : Unknown @ 0x73902f79 (jmp 0xfe769474|jmp 0xffffd612|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageW : Unknown @ 0x73903f81 (jmp 0xfdc3c69f|jmp 0xffffc60a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWinEventHook : Unknown @ 0x739021d1 (jmp 0xfdc333c8|jmp 0xffffe3ba|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExW : Unknown @ 0x739017b9 (jmp 0xfdc2a1b6|jmp 0xffffedd2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGetHashParam : Unknown @ 0x739038f9 (jmp 0xfe47597b|jmp 0xffffcc92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptCreateHash : Unknown @ 0x739037c9 (jmp 0xfe47587b|jmp 0xffffcdc2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) WS2_32.dll - WSASend : Unknown @ 0x739041e1 (jmp 0xfc89fddb|jmp 0xffffc3aa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x73902be9 (jmp 0xfc441df5|jmp 0xffffd9a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextW : Unknown @ 0x73903601 (jmp 0xfe4756ed|jmp 0xffffcf8a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x73901ed9 (jmp 0xfc442095|jmp 0xffffe6b2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x73902ab9 (jmp 0xfc442e09|jmp 0xffffdad2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtMapViewOfSection : Unknown @ 0x739015f1 (jmp 0xfc4419a1|jmp 0xffffef9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtUnmapViewOfSection : Unknown @ 0x73901689 (jmp 0xfc441a09|jmp 0xffffef02|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x739020a1 (jmp 0xfc440331|jmp 0xffffe4ea|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x73901d11 (jmp 0xfc4403f1|jmp 0xffffe87a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtProtectVirtualMemory : Unknown @ 0x73904441 (jmp 0xfc444409|jmp 0xffffc14a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryInformationToken : Unknown @ 0x73903bf1 (jmp 0xfc444049|jmp 0xffffc99a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlEqualSid : Unknown @ 0x73903c89 (jmp 0xfc42a768|jmp 0xffffc902|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcessToken : Unknown @ 0x73903b59 (jmp 0xfc442a99|jmp 0xffffca32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetInformationProcess : Unknown @ 0x73902b51 (jmp 0xfc443029|jmp 0xffffda3a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x73901da9 (jmp 0xfc442189|jmp 0xffffe7e2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x73902c81 (jmp 0xfc44109d|jmp 0xffffd90a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateFile : Unknown @ 0x73903309 (jmp 0xfc443255|jmp 0xffffd282|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x73901c79 (jmp 0xfc441e65|jmp 0xffffe912|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlCreateProcessParametersEx : Unknown @ 0x739028f1 (jmp 0xfc401bb6|jmp 0xffffdc9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThread : Unknown @ 0x73901e41 (jmp 0xfc441f1d|jmp 0xffffe74a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x739018e9 (jmp 0xfc441045|jmp 0xffffeca2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAdjustPrivilegesToken : Unknown @ 0x73903271 (jmp 0xfc4433b1|jmp 0xffffd31a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - CreateToolhelp32Snapshot : Unknown @ 0x73902009 (jmp 0xfe75ace2|jmp 0xffffe582|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageA : Unknown @ 0x73903ee9 (jmp 0xfdc3c316|jmp 0xffffc6a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageA : Unknown @ 0x73904019 (jmp 0xfdc3046f|jmp 0xffffc572|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageW : Unknown @ 0x739040b1 (jmp 0xfdc32e0c|jmp 0xffffc4da|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtVdmControl : Unknown @ 0x73903e51 (jmp 0xfc441f69|jmp 0xffffc73a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - MoveFileExW : Unknown @ 0x73902f79 (jmp 0xfe769474|jmp 0xffffd612|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageW : Unknown @ 0x73903f81 (jmp 0xfdc3c69f|jmp 0xffffc60a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWinEventHook : Unknown @ 0x739021d1 (jmp 0xfdc333c8|jmp 0xffffe3ba|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExW : Unknown @ 0x739017b9 (jmp 0xfdc2a1b6|jmp 0xffffedd2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGetHashParam : Unknown @ 0x739038f9 (jmp 0xfe47597b|jmp 0xffffcc92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptCreateHash : Unknown @ 0x739037c9 (jmp 0xfe47587b|jmp 0xffffcdc2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) WS2_32.dll - WSASend : Unknown @ 0x739041e1 (jmp 0xfc89fddb|jmp 0xffffc3aa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x73902be9 (jmp 0xfc441df5|jmp 0xffffd9a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextW : Unknown @ 0x73903601 (jmp 0xfe4756ed|jmp 0xffffcf8a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptImportKey : Unknown @ 0x73903a29 (jmp 0xfe4774f7|jmp 0xffffcb62|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGenKey : Unknown @ 0x73903699 (jmp 0xfe47a7b0|jmp 0xffffcef2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptExportKey : Unknown @ 0x73903861 (jmp 0xfe47a677|jmp 0xffffcd2a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptEncrypt : Unknown @ 0x73903731 (jmp 0xfe45bf96|jmp 0xffffce5a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x73901ed9 (jmp 0xfc442095|jmp 0xffffe6b2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x73902ab9 (jmp 0xfc442e09|jmp 0xffffdad2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtMapViewOfSection : Unknown @ 0x739015f1 (jmp 0xfc4419a1|jmp 0xffffef9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtUnmapViewOfSection : Unknown @ 0x73901689 (jmp 0xfc441a09|jmp 0xffffef02|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x739020a1 (jmp 0xfc440331|jmp 0xffffe4ea|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x73901d11 (jmp 0xfc4403f1|jmp 0xffffe87a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtProtectVirtualMemory : Unknown @ 0x73904441 (jmp 0xfc444409|jmp 0xffffc14a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryInformationToken : Unknown @ 0x73903bf1 (jmp 0xfc444049|jmp 0xffffc99a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlEqualSid : Unknown @ 0x73903c89 (jmp 0xfc42a768|jmp 0xffffc902|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcessToken : Unknown @ 0x73903b59 (jmp 0xfc442a99|jmp 0xffffca32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetInformationProcess : Unknown @ 0x73902b51 (jmp 0xfc443029|jmp 0xffffda3a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x73901da9 (jmp 0xfc442189|jmp 0xffffe7e2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x73902c81 (jmp 0xfc44109d|jmp 0xffffd90a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateFile : Unknown @ 0x73903309 (jmp 0xfc443255|jmp 0xffffd282|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x73901c79 (jmp 0xfc441e65|jmp 0xffffe912|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlCreateProcessParametersEx : Unknown @ 0x739028f1 (jmp 0xfc401bb6|jmp 0xffffdc9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThread : Unknown @ 0x73901e41 (jmp 0xfc441f1d|jmp 0xffffe74a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x739018e9 (jmp 0xfc441045|jmp 0xffffeca2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAdjustPrivilegesToken : Unknown @ 0x73903271 (jmp 0xfc4433b1|jmp 0xffffd31a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - CreateToolhelp32Snapshot : Unknown @ 0x73902009 (jmp 0xfe75ace2|jmp 0xffffe582|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageA : Unknown @ 0x73903ee9 (jmp 0xfdc3c316|jmp 0xffffc6a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageA : Unknown @ 0x73904019 (jmp 0xfdc3046f|jmp 0xffffc572|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageW : Unknown @ 0x739040b1 (jmp 0xfdc32e0c|jmp 0xffffc4da|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtVdmControl : Unknown @ 0x73903e51 (jmp 0xfc441f69|jmp 0xffffc73a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - MoveFileExW : Unknown @ 0x73902f79 (jmp 0xfe769474|jmp 0xffffd612|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageW : Unknown @ 0x73903f81 (jmp 0xfdc3c69f|jmp 0xffffc60a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWinEventHook : Unknown @ 0x739021d1 (jmp 0xfdc333c8|jmp 0xffffe3ba|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExW : Unknown @ 0x739017b9 (jmp 0xfdc2a1b6|jmp 0xffffedd2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGetHashParam : Unknown @ 0x739038f9 (jmp 0xfe47597b|jmp 0xffffcc92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptCreateHash : Unknown @ 0x739037c9 (jmp 0xfe47587b|jmp 0xffffcdc2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) WS2_32.dll - WSASend : Unknown @ 0x739041e1 (jmp 0xfc89fddb|jmp 0xffffc3aa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x73902be9 (jmp 0xfc441df5|jmp 0xffffd9a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextW : Unknown @ 0x73903601 (jmp 0xfe4756ed|jmp 0xffffcf8a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x73901ed9 (jmp 0xfc442095|jmp 0xffffe6b2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x73902ab9 (jmp 0xfc442e09|jmp 0xffffdad2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtMapViewOfSection : Unknown @ 0x739015f1 (jmp 0xfc4419a1|jmp 0xffffef9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtUnmapViewOfSection : Unknown @ 0x73901689 (jmp 0xfc441a09|jmp 0xffffef02|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x739020a1 (jmp 0xfc440331|jmp 0xffffe4ea|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x73901d11 (jmp 0xfc4403f1|jmp 0xffffe87a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtProtectVirtualMemory : Unknown @ 0x73904441 (jmp 0xfc444409|jmp 0xffffc14a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryInformationToken : Unknown @ 0x73903bf1 (jmp 0xfc444049|jmp 0xffffc99a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlEqualSid : Unknown @ 0x73903c89 (jmp 0xfc42a768|jmp 0xffffc902|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcessToken : Unknown @ 0x73903b59 (jmp 0xfc442a99|jmp 0xffffca32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetInformationProcess : Unknown @ 0x73902b51 (jmp 0xfc443029|jmp 0xffffda3a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x73901da9 (jmp 0xfc442189|jmp 0xffffe7e2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x73902c81 (jmp 0xfc44109d|jmp 0xffffd90a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateFile : Unknown @ 0x73903309 (jmp 0xfc443255|jmp 0xffffd282|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x73901c79 (jmp 0xfc441e65|jmp 0xffffe912|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlCreateProcessParametersEx : Unknown @ 0x739028f1 (jmp 0xfc401bb6|jmp 0xffffdc9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThread : Unknown @ 0x73901e41 (jmp 0xfc441f1d|jmp 0xffffe74a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x739018e9 (jmp 0xfc441045|jmp 0xffffeca2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAdjustPrivilegesToken : Unknown @ 0x73903271 (jmp 0xfc4433b1|jmp 0xffffd31a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - CreateToolhelp32Snapshot : Unknown @ 0x73902009 (jmp 0xfe75ace2|jmp 0xffffe582|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageA : Unknown @ 0x73903ee9 (jmp 0xfdc3c316|jmp 0xffffc6a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageA : Unknown @ 0x73904019 (jmp 0xfdc3046f|jmp 0xffffc572|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageW : Unknown @ 0x739040b1 (jmp 0xfdc32e0c|jmp 0xffffc4da|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtVdmControl : Unknown @ 0x73903e51 (jmp 0xfc441f69|jmp 0xffffc73a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - MoveFileExW : Unknown @ 0x73902f79 (jmp 0xfe769474|jmp 0xffffd612|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageW : Unknown @ 0x73903f81 (jmp 0xfdc3c69f|jmp 0xffffc60a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWinEventHook : Unknown @ 0x739021d1 (jmp 0xfdc333c8|jmp 0xffffe3ba|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExW : Unknown @ 0x739017b9 (jmp 0xfdc2a1b6|jmp 0xffffedd2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGetHashParam : Unknown @ 0x739038f9 (jmp 0xfe47597b|jmp 0xffffcc92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptCreateHash : Unknown @ 0x739037c9 (jmp 0xfe47587b|jmp 0xffffcdc2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) WS2_32.dll - WSASend : Unknown @ 0x739041e1 (jmp 0xfc89fddb|jmp 0xffffc3aa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x73902be9 (jmp 0xfc441df5|jmp 0xffffd9a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextW : Unknown @ 0x73903601 (jmp 0xfe4756ed|jmp 0xffffcf8a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x73901ed9 (jmp 0xfc442095|jmp 0xffffe6b2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x73902ab9 (jmp 0xfc442e09|jmp 0xffffdad2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtMapViewOfSection : Unknown @ 0x739015f1 (jmp 0xfc4419a1|jmp 0xffffef9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtUnmapViewOfSection : Unknown @ 0x73901689 (jmp 0xfc441a09|jmp 0xffffef02|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x739020a1 (jmp 0xfc440331|jmp 0xffffe4ea|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x73901d11 (jmp 0xfc4403f1|jmp 0xffffe87a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtProtectVirtualMemory : Unknown @ 0x73904441 (jmp 0xfc444409|jmp 0xffffc14a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryInformationToken : Unknown @ 0x73903bf1 (jmp 0xfc444049|jmp 0xffffc99a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlEqualSid : Unknown @ 0x73903c89 (jmp 0xfc42a768|jmp 0xffffc902|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcessToken : Unknown @ 0x73903b59 (jmp 0xfc442a99|jmp 0xffffca32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetInformationProcess : Unknown @ 0x73902b51 (jmp 0xfc443029|jmp 0xffffda3a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x73901da9 (jmp 0xfc442189|jmp 0xffffe7e2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x73902c81 (jmp 0xfc44109d|jmp 0xffffd90a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateFile : Unknown @ 0x73903309 (jmp 0xfc443255|jmp 0xffffd282|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x73901c79 (jmp 0xfc441e65|jmp 0xffffe912|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlCreateProcessParametersEx : Unknown @ 0x739028f1 (jmp 0xfc401bb6|jmp 0xffffdc9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThread : Unknown @ 0x73901e41 (jmp 0xfc441f1d|jmp 0xffffe74a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x739018e9 (jmp 0xfc441045|jmp 0xffffeca2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAdjustPrivilegesToken : Unknown @ 0x73903271 (jmp 0xfc4433b1|jmp 0xffffd31a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - CreateToolhelp32Snapshot : Unknown @ 0x73902009 (jmp 0xfe75ace2|jmp 0xffffe582|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageA : Unknown @ 0x73903ee9 (jmp 0xfdc3c316|jmp 0xffffc6a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageA : Unknown @ 0x73904019 (jmp 0xfdc3046f|jmp 0xffffc572|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageW : Unknown @ 0x739040b1 (jmp 0xfdc32e0c|jmp 0xffffc4da|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtVdmControl : Unknown @ 0x73903e51 (jmp 0xfc441f69|jmp 0xffffc73a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - MoveFileExW : Unknown @ 0x73902f79 (jmp 0xfe769474|jmp 0xffffd612|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageW : Unknown @ 0x73903f81 (jmp 0xfdc3c69f|jmp 0xffffc60a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWinEventHook : Unknown @ 0x739021d1 (jmp 0xfdc333c8|jmp 0xffffe3ba|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExW : Unknown @ 0x739017b9 (jmp 0xfdc2a1b6|jmp 0xffffedd2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGetHashParam : Unknown @ 0x739038f9 (jmp 0xfe47597b|jmp 0xffffcc92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptCreateHash : Unknown @ 0x739037c9 (jmp 0xfe47587b|jmp 0xffffcdc2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) WS2_32.dll - WSASend : Unknown @ 0x739041e1 (jmp 0xfc89fddb|jmp 0xffffc3aa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x73902be9 (jmp 0xfc441df5|jmp 0xffffd9a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextW : Unknown @ 0x73903601 (jmp 0xfe4756ed|jmp 0xffffcf8a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x73901ed9 (jmp 0xfc442095|jmp 0xffffe6b2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x73902ab9 (jmp 0xfc442e09|jmp 0xffffdad2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtMapViewOfSection : Unknown @ 0x739015f1 (jmp 0xfc4419a1|jmp 0xffffef9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtUnmapViewOfSection : Unknown @ 0x73901689 (jmp 0xfc441a09|jmp 0xffffef02|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x739020a1 (jmp 0xfc440331|jmp 0xffffe4ea|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x73901d11 (jmp 0xfc4403f1|jmp 0xffffe87a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtProtectVirtualMemory : Unknown @ 0x73904441 (jmp 0xfc444409|jmp 0xffffc14a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryInformationToken : Unknown @ 0x73903bf1 (jmp 0xfc444049|jmp 0xffffc99a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlEqualSid : Unknown @ 0x73903c89 (jmp 0xfc42a768|jmp 0xffffc902|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcessToken : Unknown @ 0x73903b59 (jmp 0xfc442a99|jmp 0xffffca32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetInformationProcess : Unknown @ 0x73902b51 (jmp 0xfc443029|jmp 0xffffda3a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x73901da9 (jmp 0xfc442189|jmp 0xffffe7e2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x73902c81 (jmp 0xfc44109d|jmp 0xffffd90a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateFile : Unknown @ 0x73903309 (jmp 0xfc443255|jmp 0xffffd282|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x73901c79 (jmp 0xfc441e65|jmp 0xffffe912|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlCreateProcessParametersEx : Unknown @ 0x739028f1 (jmp 0xfc401bb6|jmp 0xffffdc9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThread : Unknown @ 0x73901e41 (jmp 0xfc441f1d|jmp 0xffffe74a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x739018e9 (jmp 0xfc441045|jmp 0xffffeca2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAdjustPrivilegesToken : Unknown @ 0x73903271 (jmp 0xfc4433b1|jmp 0xffffd31a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - CreateToolhelp32Snapshot : Unknown @ 0x73902009 (jmp 0xfe75ace2|jmp 0xffffe582|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageA : Unknown @ 0x73903ee9 (jmp 0xfdc3c316|jmp 0xffffc6a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageA : Unknown @ 0x73904019 (jmp 0xfdc3046f|jmp 0xffffc572|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageW : Unknown @ 0x739040b1 (jmp 0xfdc32e0c|jmp 0xffffc4da|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtVdmControl : Unknown @ 0x73903e51 (jmp 0xfc441f69|jmp 0xffffc73a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - MoveFileExW : Unknown @ 0x73902f79 (jmp 0xfe769474|jmp 0xffffd612|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageW : Unknown @ 0x73903f81 (jmp 0xfdc3c69f|jmp 0xffffc60a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWinEventHook : Unknown @ 0x739021d1 (jmp 0xfdc333c8|jmp 0xffffe3ba|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExW : Unknown @ 0x739017b9 (jmp 0xfdc2a1b6|jmp 0xffffedd2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGetHashParam : Unknown @ 0x739038f9 (jmp 0xfe47597b|jmp 0xffffcc92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptCreateHash : Unknown @ 0x739037c9 (jmp 0xfe47587b|jmp 0xffffcdc2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) WS2_32.dll - WSASend : Unknown @ 0x739041e1 (jmp 0xfc89fddb|jmp 0xffffc3aa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x73902be9 (jmp 0xfc441df5|jmp 0xffffd9a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextW : Unknown @ 0x73903601 (jmp 0xfe4756ed|jmp 0xffffcf8a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x73901ed9 (jmp 0xfc442095|jmp 0xffffe6b2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x73902ab9 (jmp 0xfc442e09|jmp 0xffffdad2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtMapViewOfSection : Unknown @ 0x739015f1 (jmp 0xfc4419a1|jmp 0xffffef9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtUnmapViewOfSection : Unknown @ 0x73901689 (jmp 0xfc441a09|jmp 0xffffef02|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x739020a1 (jmp 0xfc440331|jmp 0xffffe4ea|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x73901d11 (jmp 0xfc4403f1|jmp 0xffffe87a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtProtectVirtualMemory : Unknown @ 0x73904441 (jmp 0xfc444409|jmp 0xffffc14a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryInformationToken : Unknown @ 0x73903bf1 (jmp 0xfc444049|jmp 0xffffc99a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlEqualSid : Unknown @ 0x73903c89 (jmp 0xfc42a768|jmp 0xffffc902|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcessToken : Unknown @ 0x73903b59 (jmp 0xfc442a99|jmp 0xffffca32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetInformationProcess : Unknown @ 0x73902b51 (jmp 0xfc443029|jmp 0xffffda3a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x73901da9 (jmp 0xfc442189|jmp 0xffffe7e2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x73902c81 (jmp 0xfc44109d|jmp 0xffffd90a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateFile : Unknown @ 0x73903309 (jmp 0xfc443255|jmp 0xffffd282|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x73901c79 (jmp 0xfc441e65|jmp 0xffffe912|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlCreateProcessParametersEx : Unknown @ 0x739028f1 (jmp 0xfc401bb6|jmp 0xffffdc9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThread : Unknown @ 0x73901e41 (jmp 0xfc441f1d|jmp 0xffffe74a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x739018e9 (jmp 0xfc441045|jmp 0xffffeca2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAdjustPrivilegesToken : Unknown @ 0x73903271 (jmp 0xfc4433b1|jmp 0xffffd31a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - CreateToolhelp32Snapshot : Unknown @ 0x73902009 (jmp 0xfe75ace2|jmp 0xffffe582|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageA : Unknown @ 0x73903ee9 (jmp 0xfdc3c316|jmp 0xffffc6a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageA : Unknown @ 0x73904019 (jmp 0xfdc3046f|jmp 0xffffc572|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageW : Unknown @ 0x739040b1 (jmp 0xfdc32e0c|jmp 0xffffc4da|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtVdmControl : Unknown @ 0x73903e51 (jmp 0xfc441f69|jmp 0xffffc73a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - MoveFileExW : Unknown @ 0x73902f79 (jmp 0xfe769474|jmp 0xffffd612|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageW : Unknown @ 0x73903f81 (jmp 0xfdc3c69f|jmp 0xffffc60a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWinEventHook : Unknown @ 0x739021d1 (jmp 0xfdc333c8|jmp 0xffffe3ba|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExW : Unknown @ 0x739017b9 (jmp 0xfdc2a1b6|jmp 0xffffedd2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGetHashParam : Unknown @ 0x739038f9 (jmp 0xfe47597b|jmp 0xffffcc92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptCreateHash : Unknown @ 0x739037c9 (jmp 0xfe47587b|jmp 0xffffcdc2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) WS2_32.dll - WSASend : Unknown @ 0x739041e1 (jmp 0xfc89fddb|jmp 0xffffc3aa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x73902be9 (jmp 0xfc441df5|jmp 0xffffd9a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextW : Unknown @ 0x73903601 (jmp 0xfe4756ed|jmp 0xffffcf8a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x73901ed9 (jmp 0xfc442095|jmp 0xffffe6b2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x73902ab9 (jmp 0xfc442e09|jmp 0xffffdad2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtMapViewOfSection : Unknown @ 0x739015f1 (jmp 0xfc4419a1|jmp 0xffffef9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtUnmapViewOfSection : Unknown @ 0x73901689 (jmp 0xfc441a09|jmp 0xffffef02|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x739020a1 (jmp 0xfc440331|jmp 0xffffe4ea|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x73901d11 (jmp 0xfc4403f1|jmp 0xffffe87a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtProtectVirtualMemory : Unknown @ 0x73904441 (jmp 0xfc444409|jmp 0xffffc14a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryInformationToken : Unknown @ 0x73903bf1 (jmp 0xfc444049|jmp 0xffffc99a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlEqualSid : Unknown @ 0x73903c89 (jmp 0xfc42a768|jmp 0xffffc902|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcessToken : Unknown @ 0x73903b59 (jmp 0xfc442a99|jmp 0xffffca32|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetInformationProcess : Unknown @ 0x73902b51 (jmp 0xfc443029|jmp 0xffffda3a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x73901da9 (jmp 0xfc442189|jmp 0xffffe7e2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x73902c81 (jmp 0xfc44109d|jmp 0xffffd90a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateFile : Unknown @ 0x73903309 (jmp 0xfc443255|jmp 0xffffd282|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x73901c79 (jmp 0xfc441e65|jmp 0xffffe912|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - RtlCreateProcessParametersEx : Unknown @ 0x739028f1 (jmp 0xfc401bb6|jmp 0xffffdc9a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThread : Unknown @ 0x73901e41 (jmp 0xfc441f1d|jmp 0xffffe74a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x739018e9 (jmp 0xfc441045|jmp 0xffffeca2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAdjustPrivilegesToken : Unknown @ 0x73903271 (jmp 0xfc4433b1|jmp 0xffffd31a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - CreateToolhelp32Snapshot : Unknown @ 0x73902009 (jmp 0xfe75ace2|jmp 0xffffe582|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageA : Unknown @ 0x73903ee9 (jmp 0xfdc3c316|jmp 0xffffc6a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageA : Unknown @ 0x73904019 (jmp 0xfdc3046f|jmp 0xffffc572|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - PostMessageW : Unknown @ 0x739040b1 (jmp 0xfdc32e0c|jmp 0xffffc4da|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtVdmControl : Unknown @ 0x73903e51 (jmp 0xfc441f69|jmp 0xffffc73a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) kernel32.dll - MoveFileExW : Unknown @ 0x73902f79 (jmp 0xfe769474|jmp 0xffffd612|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - GetMessageW : Unknown @ 0x73903f81 (jmp 0xfdc3c69f|jmp 0xffffc60a|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWinEventHook : Unknown @ 0x739021d1 (jmp 0xfdc333c8|jmp 0xffffe3ba|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) USER32.dll - SetWindowsHookExW : Unknown @ 0x739017b9 (jmp 0xfdc2a1b6|jmp 0xffffedd2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptGetHashParam : Unknown @ 0x739038f9 (jmp 0xfe47597b|jmp 0xffffcc92|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptCreateHash : Unknown @ 0x739037c9 (jmp 0xfe47587b|jmp 0xffffcdc2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) WS2_32.dll - WSASend : Unknown @ 0x739041e1 (jmp 0xfc89fddb|jmp 0xffffc3aa|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x73902be9 (jmp 0xfc441df5|jmp 0xffffd9a2|call 0x1fe)[iAT:Inl(Hook.IEAT)] (chrome.exe) ADVAPI32.dll - CryptAcquireContextW : Unknown @ 0x73903601 (jmp 0xfe4756ed|jmp 0xffffcf8a|call 0x1fe)¤¤¤ Web browsers : 0 ¤¤¤¤¤¤ MBR Check : ¤¤¤+++++ PhysicalDrive0: M4-CT256 M4SSD2 SCSI Disk Device +++++--- User ---[MBR] ad42f6f45525e6559f1d68720e265c80[bSP] 97bcaec80441bf037f0fecd94da18ea9 : Windows Vista/7/8|VT.Unknown MBR CodePartition table:0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 244096 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]User = LL1 ... OKUser = LL2 ... OK+++++ PhysicalDrive1: WDC WD20EARX-00PASB0 SCSI Disk Device +++++--- User ---[MBR] 8193f38f68a7a8dad34888b833391271[bSP] 0f8a514b9bb12ef0f15dcb139a5705dd : Windows Vista/7/8|VT.Unknown MBR CodePartition table:0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]User = LL1 ... OKUser = LL2 ... OK+++++ PhysicalDrive2: SAMSUNG HD103SJ SCSI Disk Device +++++--- User ---[MBR] 3bc5d6aea299170db270d71a40897738[bSP] 4f5fb797e501a0b61f1c9ff3b49a9bb2 : Windows Vista/7/8|VT.Unknown MBR CodePartition table:0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 272629760 | Size: 820747 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]User = LL1 ... OKUser = LL2 ... OK+++++ PhysicalDrive3: SAMSUNG HD103SJ SCSI Disk Device +++++--- User ---[MBR] 63a052d9e1c7a7db1c76706be4ce7b36[bSP] 458a107c4bd1211e746dc93c592991b1 : Windows Vista/7/8|VT.Unknown MBR CodePartition table:0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 953867 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]User = LL1 ... OKUser = LL2 ... OK+++++ PhysicalDrive4: SanDisk SDSSDX120GG25 SCSI Disk Device +++++--- User ---[MBR] 22a363563ee10fbee001e4c3599e6e1e[bSP] 18938ddb3852d20d2484709959caab1b : Linux|Legit.Unknown|VT.Unknown MBR CodePartition table:0 - [ACTIVE] LINUX (0x83) [VISIBLE] Offset (sectors): 2048 | Size: 243 MB1 - [XXXXXX] EXTEN (0x5) [VISIBLE] Offset (sectors): 501758 | Size: 114228 MBUser = LL1 ... OKUser = LL2 ... OK -
2015-05-26 18:15 - 2014-06-30 19:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll2015-05-26 18:15 - 2014-06-30 19:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll2015-05-26 18:15 - 2014-06-06 03:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe2015-05-26 18:15 - 2014-06-06 03:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe2015-05-26 18:15 - 2014-03-09 18:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe2015-05-26 18:15 - 2014-03-09 18:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll2015-05-26 18:15 - 2014-03-09 18:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe2015-05-26 18:15 - 2014-03-09 18:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll2015-05-26 14:45 - 2015-05-26 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities2015-05-26 14:45 - 2015-05-26 14:45 - 00000000 ____D () C:\Program Files (x86)\Canon2015-05-26 14:44 - 2015-05-26 14:44 - 00001147 _____ () C:\Users\Public\Desktop\FIFA 15.lnk2015-05-26 14:44 - 2015-05-26 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 152015-05-26 14:43 - 2015-05-26 14:43 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information2015-05-26 14:43 - 2015-05-26 14:43 - 00000000 ___HD () C:\ProgramData\CanonBJ2015-05-26 14:43 - 2015-05-26 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX330 series2015-05-26 14:43 - 2009-06-16 11:37 - 01342976 _____ (CANON INC.) C:\Windows\system32\CNC330C.DLL2015-05-26 14:43 - 2009-06-16 11:36 - 00092672 _____ (CANON INC.) C:\Windows\system32\CNC330I.DLL2015-05-26 14:43 - 2009-04-25 05:00 - 00290816 _____ (CANON INC.) C:\Windows\system32\CNMLM9P.DLL2015-05-26 14:43 - 2009-02-19 13:20 - 00299520 _____ (CANON INC.) C:\Windows\system32\CNC330L.DLL2015-05-26 14:43 - 2008-09-11 09:39 - 00244736 _____ (CANON INC.) C:\Windows\system32\CNMIU9P.DLL2015-05-26 14:43 - 2008-09-03 11:15 - 00262656 _____ (Canon Inc.) C:\Windows\system32\CNCF2Li.DLL2015-05-26 14:43 - 2008-09-03 11:10 - 00232448 _____ (Canon Inc.) C:\Windows\system32\CNCFMSi.EXE2015-05-26 14:43 - 2008-09-03 11:10 - 00003072 _____ (Canon Inc.) C:\Windows\system32\CNCFLiUS.DLL2015-05-26 14:43 - 2008-09-03 11:10 - 00002560 _____ (Canon Inc.) C:\Windows\system32\CNCFLiJP.DLL2015-05-26 14:43 - 2008-08-25 18:02 - 00017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.DLL2015-05-26 14:43 - 2008-07-16 09:39 - 00235008 _____ (Canon Inc.) C:\Windows\system32\CNC330O.DLL2015-05-26 14:43 - 2008-07-02 13:11 - 00013568 _____ () C:\Windows\system32\CNC1737D.TBL2015-05-26 14:42 - 2015-05-26 14:42 - 11017360 _____ () C:\Users\Nach\Downloads\md64-win-mx330-1_02-ej.exe2015-05-26 14:42 - 2015-05-26 14:42 - 00000000 ___HD () C:\Program Files\CanonBJ2015-05-26 14:36 - 2015-05-26 14:36 - 48655952 _____ () C:\Users\Nach\Downloads\mpnx_2_1-win-2_13-ea23_2.exe2015-05-26 14:25 - 2013-07-09 02:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll2015-05-26 14:25 - 2013-07-09 02:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll2015-05-26 14:25 - 2013-07-09 01:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll2015-05-26 14:25 - 2013-07-09 01:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll2015-05-26 14:24 - 2015-01-30 20:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys2015-05-26 14:24 - 2014-03-04 06:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll2015-05-26 14:24 - 2014-03-04 06:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll2015-05-26 14:24 - 2014-03-04 06:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll2015-05-26 14:24 - 2014-03-04 06:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll2015-05-26 14:24 - 2014-03-04 06:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll2015-05-26 14:24 - 2014-03-04 06:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll2015-05-26 14:24 - 2014-03-04 06:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll2015-05-26 14:24 - 2014-03-04 06:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe2015-05-26 14:24 - 2014-03-04 06:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll2015-05-26 14:24 - 2014-03-04 05:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe2015-05-26 14:24 - 2014-03-04 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe2015-05-26 14:24 - 2013-08-01 23:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 22:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe2015-05-26 14:24 - 2013-08-01 21:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 21:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 21:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll2015-05-26 14:24 - 2013-08-01 21:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll2015-05-26 14:24 - 2013-04-10 03:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys2015-05-26 14:24 - 2011-02-03 08:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll2015-05-26 14:23 - 2015-02-18 04:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe2015-05-26 14:23 - 2015-02-18 04:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe2015-05-26 14:23 - 2012-11-23 00:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe2015-05-26 14:04 - 2014-05-14 13:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll2015-05-26 14:04 - 2014-05-14 13:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll2015-05-26 14:04 - 2014-05-14 13:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll2015-05-26 14:04 - 2014-05-14 13:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe2015-05-26 14:04 - 2014-05-14 13:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll2015-05-26 14:04 - 2014-05-14 13:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll2015-05-26 14:04 - 2014-05-14 13:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll2015-05-26 14:04 - 2014-05-14 13:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll2015-05-26 14:04 - 2014-05-14 13:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll2015-05-26 14:04 - 2014-05-14 13:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll2015-05-26 14:04 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll2015-05-26 14:04 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll2015-05-26 14:04 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe2015-05-26 14:04 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe2015-05-26 06:30 - 2015-05-26 06:30 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG2015-05-26 06:30 - 2015-05-26 02:22 - 00000000 ____D () C:\Windows\Panther2015-05-26 05:53 - 2015-05-26 05:56 - 00003328 _____ () C:\Windows\System32\Tasks\EVGAPrecisionX2015-05-26 05:32 - 2015-05-26 05:32 - 00001355 _____ () C:\Windows\TSSysprep.log2015-05-26 05:32 - 2015-05-26 05:32 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk2015-05-26 05:32 - 2015-05-26 05:32 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk2015-05-26 05:30 - 2015-05-26 05:30 - 00002841 _____ () C:\Users\Nach\Unigine_Heaven_Benchmark_4.0_20150526_0530.html2015-05-26 05:17 - 2015-05-27 03:12 - 00000000 ____D () C:\Windows\SysWOW64\directx2015-05-26 05:16 - 2015-05-26 05:16 - 00000000 ____D () C:\Program Files (x86)\EVGA2015-05-26 05:15 - 2015-05-26 05:16 - 18715110 _____ () C:\Users\Nach\Downloads\EVGA_PrecisionX_16_Setup_v5.3.3.zip2015-05-26 04:54 - 2015-05-26 04:54 - 00002922 _____ () C:\Users\Nach\Unigine_Heaven_Benchmark_4.0_20150526_0454.html2015-05-26 04:39 - 2015-05-27 03:09 - 00000000 ____D () C:\temp2015-05-26 04:05 - 2015-06-01 22:29 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Origin2015-05-26 04:05 - 2015-05-26 04:06 - 00000000 ____D () C:\Program Files (x86)\Origin Games2015-05-26 04:05 - 2015-05-26 04:05 - 00000000 ____D () C:\Users\Nach\AppData\Local\Origin2015-05-26 04:03 - 2015-06-03 07:09 - 00000000 ____D () C:\ProgramData\Origin2015-05-26 04:03 - 2015-05-26 20:45 - 00000000 ____D () C:\ProgramData\Electronic Arts2015-05-26 04:03 - 2015-05-26 04:03 - 00000979 _____ () C:\Users\Public\Desktop\Origin.lnk2015-05-26 04:03 - 2015-05-26 04:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin2015-05-26 04:02 - 2015-06-01 22:29 - 00000000 ____D () C:\Program Files (x86)\Origin2015-05-26 04:02 - 2015-05-26 04:02 - 17110336 _____ (Electronic Arts, Inc.) C:\Users\Nach\Downloads\OriginThinSetup.exe2015-05-26 04:01 - 2015-05-26 04:01 - 00000000 ____D () C:\Users\Nach\AppData\Local\Steam2015-05-26 03:59 - 2015-06-03 14:09 - 00000000 ____D () C:\Program Files (x86)\Steam2015-05-26 03:59 - 2015-05-26 03:59 - 01142128 _____ () C:\Users\Nach\Downloads\SteamSetup.exe2015-05-26 03:59 - 2015-05-26 03:59 - 00000963 _____ () C:\Users\Public\Desktop\Steam.lnk2015-05-26 03:59 - 2015-05-26 03:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam2015-05-26 03:41 - 2015-06-03 13:46 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0977f4b8115c.job2015-05-26 03:41 - 2015-06-03 11:26 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0977f3e5f393.job2015-05-26 03:41 - 2015-05-26 03:41 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1d0977f4b8115c2015-05-26 03:41 - 2015-05-26 03:41 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1d0977f3e5f3932015-05-26 03:41 - 2015-05-26 03:41 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\NVIDIA2015-05-26 03:41 - 2015-05-26 03:41 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z2015-05-26 03:41 - 2015-05-26 03:41 - 00000000 ____D () C:\Program Files (x86)\GPU-Z2015-05-26 03:40 - 2015-05-26 03:40 - 01582736 _____ ( ) C:\Users\Nach\Downloads\cpu-z_1.72-en.exe2015-05-26 03:40 - 2015-05-26 03:40 - 00000869 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk2015-05-26 03:40 - 2015-05-26 03:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID2015-05-26 03:40 - 2015-05-26 03:40 - 00000000 ____D () C:\Program Files\CPUID2015-05-26 03:10 - 2015-05-26 03:10 - 00000000 ____D () C:\Users\Nach\AppData\Local\Logitech® Webcam Software2015-05-26 03:08 - 2015-05-26 03:08 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Leadertech2015-05-26 03:07 - 2015-05-26 03:08 - 00010101 _____ () C:\Windows\system32\lvcoinst.log2015-05-26 03:07 - 2015-05-26 03:08 - 00003744 _____ () C:\Windows\LDPINST.LOG2015-05-26 03:07 - 2015-05-26 03:08 - 00000000 ____D () C:\Program Files\Common Files\logishrd2015-05-26 03:07 - 2015-05-26 03:08 - 00000000 ____D () C:\Program Files (x86)\Logitech2015-05-26 03:07 - 2015-05-26 03:07 - 00001624 _____ () C:\Users\Public\Desktop\Logitech Webcam Software .lnk2015-05-26 03:05 - 2015-05-26 03:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech2015-05-26 03:05 - 2015-05-26 03:05 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys2015-05-26 03:05 - 2015-05-26 03:05 - 00000388 _____ () C:\Windows\LkmdfCoInst.log2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\Users\Nach\AppData\Local\Logitech2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\ProgramData\LogiShrd2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\ProgramData\Apple2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\Program Files\Logitech Gaming Software2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\Program Files\Bonjour2015-05-26 03:05 - 2015-05-26 03:05 - 00000000 ____D () C:\Program Files (x86)\Bonjour2015-05-26 03:04 - 2015-05-26 03:04 - 74637872 _____ (Logitech, Inc.) C:\Users\Nach\Downloads\lws251.exe2015-05-26 03:04 - 2015-05-26 03:04 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Logitech2015-05-26 03:04 - 2015-05-26 03:04 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Logishrd2015-05-26 03:02 - 2015-05-26 03:03 - 74818632 _____ (Logitech Inc.) C:\Users\Nach\Downloads\LGS_8.58.183_x64_Logitech.exe2015-05-26 02:57 - 2015-05-26 02:58 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\QuickScan2015-05-26 02:57 - 2015-05-26 02:57 - 10447328 _____ () C:\Users\Nach\Downloads\Antivirus_Free_Edition_x64.exe2015-05-26 02:57 - 2015-05-26 02:57 - 00162208 _____ () C:\Users\Nach\Downloads\Antivirus_Free_Edition.exe2015-05-26 02:46 - 2015-05-26 02:54 - 00000000 ____D () C:\Users\Nach\Heaven2015-05-26 02:44 - 2015-05-27 20:25 - 02128896 _____ () C:\Users\Nach\AppData\Local\file__0.localstorage2015-05-26 02:44 - 2015-05-27 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unigine2015-05-26 02:44 - 2015-05-27 20:24 - 00000000 ____D () C:\Program Files (x86)\Unigine2015-05-26 02:44 - 2015-05-26 02:44 - 00002117 _____ () C:\Users\Public\Desktop\Heaven Benchmark 4.0.lnk2015-05-26 02:43 - 2015-05-26 04:58 - 00001377 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk2015-05-26 02:43 - 2015-05-26 04:58 - 00000000 ____D () C:\Users\Nach\AppData\Local\NVIDIA Corporation2015-05-26 02:43 - 2015-05-26 04:58 - 00000000 ____D () C:\Users\Nach\AppData\Local\NVIDIA2015-05-26 02:43 - 2015-05-26 04:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation2015-05-26 02:43 - 2015-05-07 21:35 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll2015-05-26 02:43 - 2015-05-07 21:35 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll2015-05-26 02:43 - 2015-05-07 21:34 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll2015-05-26 02:43 - 2015-05-07 21:34 - 01570672 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll2015-05-26 02:43 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll2015-05-26 02:43 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll2015-05-26 02:43 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll2015-05-26 02:43 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll2015-05-26 02:43 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll2015-05-26 02:43 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll2015-05-26 02:42 - 2015-06-03 11:29 - 00006462 _____ () C:\Windows\SysWOW64\Gms.log2015-05-26 02:42 - 2015-05-26 04:42 - 00000000 ____D () C:\ProgramData\NVIDIA2015-05-26 02:42 - 2015-05-26 04:38 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation2015-05-26 02:42 - 2015-05-26 02:43 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation2015-05-26 02:42 - 2015-05-13 03:52 - 01558848 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll2015-05-26 02:42 - 2015-05-13 03:52 - 00195912 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys2015-05-26 02:42 - 2015-05-13 03:52 - 00031552 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 42718864 _____ () C:\Windows\system32\nvcompiler.dll2015-05-26 02:42 - 2015-05-12 03:27 - 37741712 _____ () C:\Windows\SysWOW64\nvcompiler.dll2015-05-26 02:42 - 2015-05-12 03:27 - 30478992 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 22945424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll2015-05-26 02:42 - 2015-05-12 03:27 - 17540416 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll2015-05-26 02:42 - 2015-05-12 03:27 - 16145176 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll2015-05-26 02:42 - 2015-05-12 03:27 - 15858728 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll2015-05-26 02:42 - 2015-05-12 03:27 - 15048816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll2015-05-26 02:42 - 2015-05-12 03:27 - 14455296 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll2015-05-26 02:42 - 2015-05-12 03:27 - 13263568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll2015-05-26 02:42 - 2015-05-12 03:27 - 12849056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll2015-05-26 02:42 - 2015-05-12 03:27 - 11790144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll2015-05-26 02:42 - 2015-05-12 03:27 - 10972304 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys2015-05-26 02:42 - 2015-05-12 03:27 - 03363224 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 02971776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll2015-05-26 02:42 - 2015-05-12 03:27 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll2015-05-26 02:42 - 2015-05-12 03:27 - 02599056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll2015-05-26 02:42 - 2015-05-12 03:27 - 01898312 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435286.dll2015-05-26 02:42 - 2015-05-12 03:27 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435286.dll2015-05-26 02:42 - 2015-05-12 03:27 - 01099808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll2015-05-26 02:42 - 2015-05-12 03:27 - 01059984 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 01050256 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00982672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00974480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00939080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00502896 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00408208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00407296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00364176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00176064 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00154256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00112784 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00105288 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll2015-05-26 02:42 - 2015-05-12 03:27 - 00031710 _____ () C:\Windows\system32\nvinfo.pb2015-05-26 02:42 - 2015-05-12 00:30 - 06872392 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll2015-05-26 02:42 - 2015-05-12 00:30 - 03490448 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll2015-05-26 02:42 - 2015-05-12 00:30 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll2015-05-26 02:42 - 2015-05-12 00:30 - 00937288 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe2015-05-26 02:42 - 2015-05-12 00:30 - 00385352 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll2015-05-26 02:42 - 2015-05-12 00:30 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll2015-05-26 02:42 - 2015-05-11 14:01 - 04391871 _____ () C:\Windows\system32\nvcoproc.bin2015-05-26 02:42 - 2014-11-22 07:46 - 00038032 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys2015-05-26 02:42 - 2014-11-22 07:46 - 00035472 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll2015-05-26 02:42 - 2014-11-22 07:46 - 00032400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll2015-05-26 02:41 - 2015-05-26 02:43 - 00000000 ____D () C:\Program Files\NVIDIA Corporation2015-05-26 02:41 - 2015-05-26 02:41 - 00000000 ____D () C:\NVIDIA2015-05-26 02:40 - 2015-05-26 02:40 - 00000000 ___HD () C:\Program Files (x86)\Temp2015-05-26 02:40 - 2015-05-26 02:40 - 00000000 ____H () C:\ProgramData\DP45977C.lfl2015-05-26 02:40 - 2015-05-26 02:40 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM2015-05-26 02:40 - 2015-05-26 02:40 - 00000000 ____D () C:\Program Files\Realtek2015-05-26 02:40 - 2015-05-26 02:40 - 00000000 ____D () C:\Program Files (x86)\Realtek2015-05-26 02:40 - 2014-05-28 20:23 - 03977944 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys2015-05-26 02:40 - 2014-05-28 14:35 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll2015-05-26 02:40 - 2014-05-28 11:38 - 01137695 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT2015-05-26 02:40 - 2014-05-26 15:00 - 62006272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat2015-05-26 02:40 - 2014-05-23 13:54 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll2015-05-26 02:40 - 2014-05-22 16:24 - 00096568 _____ () C:\Windows\system32\audioLibVc.dll2015-05-26 02:40 - 2014-05-22 13:21 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll2015-05-26 02:40 - 2014-05-19 17:16 - 02843352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll2015-05-26 02:40 - 2014-05-19 10:47 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll2015-05-26 02:40 - 2014-05-14 15:47 - 02119472 _____ () C:\Windows\system32\SStudio.dll2015-05-26 02:40 - 2014-05-09 11:17 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll2015-05-26 02:40 - 2014-04-17 17:42 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll2015-05-26 02:40 - 2014-04-17 17:42 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll2015-05-26 02:40 - 2014-04-17 17:42 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll2015-05-26 02:40 - 2014-04-10 12:20 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll2015-05-26 02:40 - 2014-04-10 12:20 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll2015-05-26 02:40 - 2014-04-10 12:19 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll2015-05-26 02:40 - 2014-04-10 12:19 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll2015-05-26 02:40 - 2014-04-09 16:39 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll2015-05-26 02:40 - 2014-04-09 16:38 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll2015-05-26 02:40 - 2014-04-07 16:03 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll2015-05-26 02:40 - 2014-04-07 16:03 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll2015-05-26 02:40 - 2014-04-07 16:03 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll2015-05-26 02:40 - 2014-04-07 16:03 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll2015-05-26 02:40 - 2014-03-21 14:17 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll2015-05-26 02:40 - 2014-03-19 19:19 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll2015-05-26 02:40 - 2014-03-06 16:35 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl2015-05-26 02:40 - 2014-03-05 05:11 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll2015-05-26 02:40 - 2014-03-05 05:11 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll2015-05-26 02:40 - 2014-03-05 05:11 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll2015-05-26 02:40 - 2014-03-05 05:11 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll2015-05-26 02:40 - 2014-02-27 20:02 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll2015-05-26 02:40 - 2014-02-18 17:04 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll2015-05-26 02:40 - 2014-02-06 11:28 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat2015-05-26 02:40 - 2014-01-31 17:27 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll2015-05-26 02:40 - 2014-01-28 11:48 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll2015-05-26 02:40 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll2015-05-26 02:40 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll2015-05-26 02:40 - 2013-10-11 11:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll2015-05-26 02:40 - 2013-10-07 00:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll2015-05-26 02:40 - 2013-10-07 00:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll2015-05-26 02:40 - 2013-10-07 00:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll2015-05-26 02:40 - 2013-08-14 15:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll2015-05-26 02:40 - 2013-08-14 15:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll2015-05-26 02:40 - 2013-06-25 12:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll2015-05-26 02:40 - 2013-06-25 12:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll2015-05-26 02:40 - 2013-06-25 12:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll2015-05-26 02:40 - 2013-06-21 11:01 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll2015-05-26 02:40 - 2013-04-03 14:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll2015-05-26 02:40 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll2015-05-26 02:40 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll2015-05-26 02:40 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll2015-05-26 02:40 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll2015-05-26 02:40 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll2015-05-26 02:40 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll2015-05-26 02:40 - 2012-01-30 11:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll2015-05-26 02:40 - 2012-01-10 10:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll2015-05-26 02:40 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll2015-05-26 02:40 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll2015-05-26 02:40 - 2011-09-02 14:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll2015-05-26 02:40 - 2011-09-02 14:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll2015-05-26 02:40 - 2011-09-02 14:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll2015-05-26 02:40 - 2011-08-23 17:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll2015-05-26 02:40 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll2015-05-26 02:40 - 2011-03-17 12:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll2015-05-26 02:40 - 2011-03-07 17:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll2015-05-26 02:40 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll2015-05-26 02:40 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll2015-05-26 02:40 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll2015-05-26 02:40 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll2015-05-26 02:40 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll2015-05-26 02:40 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll2015-05-26 02:40 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll2015-05-26 02:40 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll2015-05-26 02:39 - 2015-05-26 02:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf2015-05-26 02:37 - 2015-05-26 02:39 - 00000000 ____D () C:\ProgramData\Intel2015-05-26 02:37 - 2015-05-26 02:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel2015-05-26 02:37 - 2015-05-26 02:37 - 00000000 ____D () C:\Users\Nach\Intel2015-05-26 02:37 - 2015-05-26 02:37 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Intel Corporation2015-05-26 02:36 - 2015-05-26 02:36 - 00002253 _____ () C:\Users\Public\Desktop\Google Chrome.lnk2015-05-26 02:36 - 2015-05-26 02:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome2015-05-26 02:35 - 2015-06-03 14:40 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job2015-05-26 02:35 - 2015-06-03 11:26 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job2015-05-26 02:35 - 2015-05-26 02:36 - 00000000 ____D () C:\Users\Nach\AppData\Local\Google2015-05-26 02:35 - 2015-05-26 02:36 - 00000000 ____D () C:\Program Files (x86)\Google2015-05-26 02:35 - 2015-05-26 02:35 - 00004060 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA2015-05-26 02:35 - 2015-05-26 02:35 - 00003808 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore2015-05-26 02:35 - 2015-05-26 02:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf2015-05-26 02:35 - 2015-05-26 02:35 - 00000000 ____D () C:\Users\Nach\AppData\Local\Deployment2015-05-26 02:35 - 2015-05-26 02:35 - 00000000 ____D () C:\Users\Nach\AppData\Local\Apps\2.02015-05-26 02:34 - 2015-05-26 02:39 - 00000000 ____D () C:\Program Files\Intel2015-05-26 02:34 - 2015-05-26 02:39 - 00000000 ____D () C:\Program Files (x86)\Intel2015-05-26 02:34 - 2015-05-26 02:34 - 00000000 ____D () C:\Intel2015-05-26 02:34 - 2014-02-21 13:56 - 00041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll2015-05-26 02:33 - 2015-05-28 02:55 - 00000000 ____D () C:\ProgramData\Package Cache2015-05-26 02:28 - 2015-05-28 01:37 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information2015-05-26 02:28 - 2015-05-26 02:28 - 00057560 _____ () C:\Users\Nach\AppData\Local\GDIPFONTCACHEV1.DAT2015-05-26 02:27 - 2015-05-26 19:00 - 00775384 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI2015-05-26 02:26 - 2015-05-26 02:26 - 00000000 ____D () C:\ProgramData\Downloaded Installations2015-05-26 02:24 - 2012-07-26 01:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys2015-05-26 02:24 - 2012-07-26 01:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys2015-05-26 02:24 - 2012-07-25 23:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll2015-05-26 02:24 - 2012-06-02 11:35 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf2015-05-26 02:22 - 2015-06-03 14:10 - 01576246 _____ () C:\Windows\WindowsUpdate.log2015-05-26 02:22 - 2015-06-03 11:06 - 00001413 _____ () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk2015-05-26 02:22 - 2015-05-27 20:26 - 00000000 ____D () C:\Users\Nach2015-05-26 02:22 - 2015-05-26 02:22 - 00000020 ___SH () C:\Users\Nach\ntuser.ini2015-05-26 02:22 - 2015-05-26 02:22 - 00000000 __SHD () C:\Recovery2015-05-26 02:22 - 2009-07-14 01:54 - 00000000 ___RD () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories2015-05-26 02:22 - 2009-07-14 01:49 - 00000000 ___RD () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance==================== One Month Modified files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-06-03 14:44 - 2009-07-14 01:45 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A02015-06-03 14:44 - 2009-07-14 01:45 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A02015-06-03 14:43 - 2009-07-14 01:51 - 00043846 _____ () C:\Windows\setupact.log2015-06-03 11:32 - 2009-07-14 02:13 - 00783606 _____ () C:\Windows\system32\PerfStringBackup.INI2015-06-03 11:26 - 2009-07-14 02:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT2015-06-03 11:06 - 2009-07-14 01:45 - 00265552 _____ () C:\Windows\system32\FNTCACHE.DAT2015-06-03 11:05 - 2011-04-12 05:28 - 00000000 ____D () C:\Program Files\Windows Journal2015-06-03 11:05 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK2015-06-03 11:05 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR2015-06-03 11:05 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\system32\zh-HK2015-06-03 11:05 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\system32\tr-TR2015-06-03 11:05 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\PolicyDefinitions2015-06-02 21:29 - 2010-11-21 00:47 - 00149122 _____ () C:\Windows\PFRO.log2015-06-02 05:11 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\system32\NDF2015-06-01 21:54 - 2009-07-14 02:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games2015-05-28 00:44 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\rescache2015-05-27 19:41 - 2009-07-14 02:32 - 00000000 ____D () C:\Windows\Offline Web Pages2015-05-27 02:07 - 2009-07-14 00:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared2015-05-26 20:45 - 2009-07-14 00:20 - 00000000 __RHD () C:\Users\Public\Libraries2015-05-26 14:43 - 2009-07-14 00:20 - 00000000 __RSD () C:\Windows\Media2015-05-26 06:30 - 2009-07-14 02:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template2015-05-26 05:38 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\LiveKernelReports2015-05-26 05:32 - 2009-07-14 01:46 - 00002790 _____ () C:\Windows\DtcInstall.log2015-05-26 05:32 - 2009-07-14 00:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories2015-05-26 05:32 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\system32\sysprep2015-05-26 05:30 - 2011-04-12 05:28 - 00000000 ____D () C:\Windows\CSC2015-05-26 04:38 - 2009-07-14 02:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD2015-05-26 03:11 - 2009-07-14 01:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk2015-05-26 02:42 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\Help2015-05-26 02:24 - 2009-07-14 02:32 - 00000000 ____D () C:\Windows\system32\restore2015-05-26 02:22 - 2009-07-14 01:45 - 00000000 ____D () C:\Windows\Setup==================== Files in the root of some directories =======2015-05-28 01:36 - 2015-05-28 01:36 - 0000000 _____ () C:\Users\Nach\AppData\Local\Driver_LOM_8161Present.flag2015-05-26 02:44 - 2015-05-27 20:25 - 2128896 _____ () C:\Users\Nach\AppData\Local\file__0.localstorage2015-05-26 02:40 - 2015-05-26 02:40 - 0000000 ____H () C:\ProgramData\DP45977C.lflSome files in TEMP:====================C:\Users\Nach\AppData\Local\Temp\Quarantine.exeC:\Users\Nach\AppData\Local\Temp\sqlite3.dll==================== Bamital & volsnap Check =================(There is no automatic fix for files that do not pass verification.)C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\SysWOW64\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signedLastRegBack: 2015-05-27 04:41==================== End of log ============================ADDITIONAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 29-05-2015Ran by Nach at 2015-06-03 14:45:05Running from C:\Users\Nach\DesktopBoot Mode: Normal============================================================================== Accounts: =============================Administrator (S-1-5-21-318558523-3823039876-2902504939-500 - Administrator - Disabled)Guest (S-1-5-21-318558523-3823039876-2902504939-501 - Limited - Disabled)Nach (S-1-5-21-318558523-3823039876-2902504939-1000 - Administrator - Enabled) => C:\Users\Nach==================== Security Center ========================(If an entry is included in the fixlist, it will be removed.)AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D}AS: Bitdefender Antispyware (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}FW: Bitdefender Firewall (Enabled) {A23392FD-84B9-F933-2C71-81E751F6EF46}==================== Installed Programs ======================(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 15.007.20033 - Adobe Systems Incorporated)Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version: - Hidden Path Entertainment, Ensemble Studios)Bitdefender Total Security 2015 (HKLM\...\Bitdefender) (Version: 18.20.0.1429 - Bitdefender)Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) HiddenCanon MP Navigator EX 2.1 (HKLM-x32\...\MP Navigator EX 2.1) (Version: - )Canon MX330 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX330_series) (Version: - Canon Inc.)Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)CPUID CPU-Z 1.72 (HKLM\...\CPUID CPU-Z_is1) (Version: - )Creation Master 15.0 (HKLM-x32\...\Creation Master 15_is1) (Version: - FIFA MASTER)EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.7.0.0 - Electronic Arts)erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) HiddenFraps (remove only) (HKLM-x32\...\Fraps) (Version: - )Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) HiddenGrand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)GRID (HKLM-x32\...\Steam App 12750) (Version: - Codemasters Studios)Heaven Benchmark version 4.0 (HKLM-x32\...\Unigine Heaven Benchmark (Basic Edition)_is1) (Version: 4.0 - Unigine Corp.)Intel® Chipset Device Software (x32 Version: 10.0.20 - Intel® Corporation) HiddenIntel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)Logitech Gaming Software 8.58 (HKLM\...\Logitech Gaming Software) (Version: 8.58.183 - Logitech Inc.)Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)Malwarebytes Anti-Malware version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)Mozilla Firefox 38.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 en-US)) (Version: 38.0.5 - Mozilla)Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.0.5 - Mozilla)MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD)NVIDIA 3D Vision Controller Driver 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)NVIDIA GeForce Experience 2.4.3.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.3.31 - NVIDIA Corporation)NVIDIA Graphics Driver 352.86 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 352.86 - NVIDIA Corporation)NVIDIA HD Audio Driver 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)OpenAL (HKLM-x32\...\OpenAL) (Version: - )Origin (HKLM-x32\...\Origin) (Version: 9.5.12.2862 - Electronic Arts, Inc.)Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.0.30.1259 - Qualcomm Atheros) HiddenQualcomm Atheros Killer E220x Drivers (Version: 1.0.30.1259 - Qualcomm Atheros) HiddenQualcomm Atheros Killer Network Manager Suite (HKLM-x32\...\{FE5DFB80-6937-4154-A2C7-EF845C1301F8}) (Version: 1.0.30.1259 - Qualcomm Atheros)Qualcomm Atheros Network Manager (Version: 1.0.30.1259 - Qualcomm Atheros) HiddenRealtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7256 - Realtek Semiconductor Corp.)Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) HiddenSHIELD Wireless Controller Driver (Version: 2.4.3.31 - NVIDIA Corporation) HiddenSkype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.101 - Skype Technologies S.A.)Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.5.4 - Sophos Limited)Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp)The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.0.0 - GOG.com)Unigine Valley Benchmark version 1.0 (HKLM-x32\...\Unigine Valley Benchmark_is1) (Version: 1.0 - Unigine Corp.)VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)==================== Custom CLSID (Whitelisted): ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== Restore Points =========================30-05-2015 21:11:57 Installed DirectX01-06-2015 21:54:23 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.6103001-06-2015 21:54:31 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.6103002-06-2015 21:43:16 Installed Sophos Virus Removal Tool.03-06-2015 10:42:56 Windows Update==================== Hosts content: ===============================(If needed Hosts: directive could be included in the fixlist to reset Hosts.)2009-07-13 23:34 - 2009-06-10 18:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts==================== Scheduled Tasks (Whitelisted) =============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)Task: {332DF19C-15ED-47C2-B41B-FD0966C6D230} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-03-07] (Adobe Systems Incorporated)Task: {4A459083-3C0D-47DF-BBF8-B954C9A7F079} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-26] (Google Inc.)Task: {606810AD-FC6E-406F-95B8-97AD30DF8C6C} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2014-12-06] ()Task: {70553BA1-A890-422D-B3A2-07A9FD4BCDDF} - System32\Tasks\GoogleUpdateTaskMachineUA1d0977f4b8115c => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-26] (Google Inc.)Task: {714D0294-6844-47CB-BBB4-E3355CF88D6B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-26] (Google Inc.)Task: {8FD47602-92B6-4BA3-AB5C-DF206E6E8809} - System32\Tasks\GoogleUpdateTaskMachineCore1d0977f3e5f393 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-26] (Google Inc.)Task: {AD7D643B-DA81-43C4-A6C1-6BC52C59CF93} - System32\Tasks\EVGAPrecisionX => C:\Program Files (x86)\EVGA\PrecisionX 16\PrecisionX_x64.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0977f3e5f393.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0977f4b8115c.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe==================== Loaded Modules (Whitelisted) ==============2015-05-27 19:38 - 2014-08-27 16:31 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\txmlutil.dll2015-05-27 19:38 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdmetrics.dll2015-05-27 19:38 - 2014-12-17 14:34 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\UI\accessl.ui2015-05-27 19:38 - 2012-10-29 14:22 - 00152816 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdfwcore.dll2015-05-27 20:24 - 2015-05-27 20:24 - 00790368 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_002\ashttpbr.mdl2015-05-27 20:24 - 2015-05-27 20:24 - 00711064 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_002\ashttpdsp.mdl2015-05-27 20:24 - 2015-05-27 20:24 - 02683520 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_002\ashttpph.mdl2015-05-27 20:24 - 2015-05-27 20:24 - 01326504 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00350_002\ashttprbl.mdl2015-05-26 02:42 - 2015-05-12 00:30 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll2014-12-06 04:03 - 2014-12-06 04:03 - 00565760 _____ () C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe2014-09-18 04:23 - 2014-09-18 04:23 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll2015-03-12 15:23 - 2015-03-12 15:23 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll2014-09-18 04:23 - 2014-09-18 04:23 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll2015-03-12 15:23 - 2015-03-12 15:23 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll2013-08-08 14:30 - 2013-08-08 14:30 - 00283648 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe2014-12-06 04:01 - 2014-12-06 04:01 - 00071680 _____ () C:\Program Files (x86)\MSI Afterburner\RTMUI.dll2014-12-06 04:01 - 2014-12-06 04:01 - 00056832 _____ () C:\Program Files (x86)\MSI Afterburner\RTFC.dll2014-12-06 04:02 - 2014-12-06 04:02 - 00217600 _____ () C:\Program Files (x86)\MSI Afterburner\RTCore.dll2014-12-06 04:01 - 2014-12-06 04:01 - 00353792 _____ () C:\Program Files (x86)\MSI Afterburner\RTUI.dll2014-12-06 04:02 - 2014-12-06 04:02 - 00649216 _____ () C:\Program Files (x86)\MSI Afterburner\RTHAL.dll2015-05-26 02:43 - 2015-05-07 21:36 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll2012-09-13 00:38 - 2012-09-13 00:38 - 02144104 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll2012-09-13 00:38 - 2012-09-13 00:38 - 07955304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll2012-09-13 00:38 - 2012-09-13 00:38 - 00341352 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll2012-09-13 00:38 - 2012-09-13 00:38 - 00028008 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll2012-09-13 00:38 - 2012-09-13 00:38 - 00127336 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll2015-05-26 02:36 - 2015-05-22 17:22 - 14982472 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\PepperFlash\pepflashplayer.dll2014-03-20 11:43 - 2014-03-20 11:43 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\ACE.dll2015-05-26 02:36 - 2015-05-22 17:22 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\libglesv2.dll2015-05-26 02:36 - 2015-05-22 17:22 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\libegl.dll==================== Alternate Data Streams (Whitelisted) =========(If an entry is included in the fixlist, only the ADS will be removed.)AlternateDataStreams: C:\Users\Nach\Desktop\FRST64.exe:BDUAlternateDataStreams: C:\Users\Nach\Desktop\rkill.exe:BDUAlternateDataStreams: C:\Users\Nach\Desktop\SecurityCheck.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\dxwebsetup.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\Firefox Setup Stub 38.0.5.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\md64-win-mx330-1_02-ej.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\mpnx_2_1-win-2_13-ea23_2.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\SkypeSetupFull.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\vlc-2.2.1-win32.exe:BDUAlternateDataStreams: C:\Users\Nach\Downloads\Xbox360_64Eng.exe:BDU==================== Safe Mode (Whitelisted) ===================(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SophosVirusRemovalTool => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SophosVirusRemovalTool => ""="Service"==================== EXE Association (Whitelisted) ===============(If an entry is included in the fixlist, the registry item will be restored to default or removed.)==================== Internet Explorer trusted/restricted ===============(If an entry is included in the fixlist, it will be removed from the registry.)==================== Other Areas ============================(Currently there is no automatic fix for this section.)HKU\S-1-5-21-318558523-3823039876-2902504939-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpgDNS Servers: 89.248.166.149 - 8.8.8.8==================== MSCONFIG/TASK MANAGER disabled items ==(Currently there is no automatic fix for this section.)==================== FirewallRules (Whitelisted) ===============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)FirewallRules: [sPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exeFirewallRules: [sPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe==================== Faulty Device Manager Devices ================================= Event log errors: =========================Application errors:==================Error: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:61990 length 0 too shortError: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:53692 length 0 too shortError: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:52704 length 0 too shortError: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:60476 length 0 too shortError: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:60530 length 0 too shortError: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:64689 length 0 too shortError: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:62882 length 0 too shortError: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:57344 length 0 too shortError: (06/03/2015 02:43:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:61990 length 0 too shortError: (06/03/2015 02:43:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:53692 length 0 too shortSystem errors:=============Error: (06/03/2015 11:27:00 AM) (Source: Service Control Manager) (EventID: 7024) (User: )Description: The HomeGroup Listener service terminated with service-specific error %%-2147023143.Error: (06/03/2015 11:17:27 AM) (Source: Service Control Manager) (EventID: 7024) (User: )Description: The HomeGroup Listener service terminated with service-specific error %%-2147023143.Error: (06/03/2015 11:16:21 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: The Print Spooler service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.Error: (06/03/2015 11:16:21 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.Error: (06/03/2015 11:16:20 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.Error: (06/03/2015 11:16:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Skype Click to Call PNR Service service terminated unexpectedly. It has done this 1 time(s).Error: (06/03/2015 11:16:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Skype Click to Call Updater service terminated unexpectedly. It has done this 1 time(s).Error: (06/03/2015 11:14:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Intel® Dynamic Application Loader Host Interface Service service terminated unexpectedly. It has done this 1 time(s).Error: (06/03/2015 11:14:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Intel® Rapid Storage Technology service terminated unexpectedly. It has done this 1 time(s).Error: (06/03/2015 11:14:27 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.Microsoft Office:=========================Error: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:61990 length 0 too shortError: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:53692 length 0 too shortError: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:52704 length 0 too shortError: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:60476 length 0 too shortError: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:60530 length 0 too shortError: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:64689 length 0 too shortError: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:62882 length 0 too shortError: (06/03/2015 02:43:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:57344 length 0 too shortError: (06/03/2015 02:43:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:61990 length 0 too shortError: (06/03/2015 02:43:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: DNS Message from 89.248.166.149:53 to 192.168.0.2:53692 length 0 too short==================== Memory info ===========================Processor: Intel® Core i5-4690K CPU @ 3.50GHzPercentage of memory in use: 35%Total physical RAM: 16293.58 MBAvailable physical RAM: 10583.64 MBTotal Pagefile: 32585.35 MBAvailable Pagefile: 26262.07 MBTotal Virtual: 8192 MBAvailable Virtual: 8191.82 MB==================== Drives ================================Drive c: () (Fixed) (Total:238.37 GB) (Free:9.36 GB) NTFSDrive d: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[system with boot components (obtained from reading drive)]Drive e: (Data) (Fixed) (Total:931.51 GB) (Free:376.58 GB) NTFSDrive f: (Móvel) (Fixed) (Total:1863.01 GB) (Free:445.35 GB) NTFSDrive g: (Software) (Fixed) (Total:801.51 GB) (Free:722.62 GB) NTFS==================== MBR & Partition Table ==========================================================================Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 000A788F)Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)========================================================Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 0AE75AEB)Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)========================================================Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 2E2F1945)Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)Partition 2: (Not Active) - (Size=801.5 GB) - (Type=07 NTFS)========================================================Disk: 3 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1D42D274)Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)========================================================Disk: 4 (Size: 111.8 GB) (Disk ID: 00087AEE)Partition 1: (Active) - (Size=243 MB) - (Type=83)Partition 2: (Not Active) - (Size=111.6 GB) - (Type=05)==================== End of log ============================_________________________________________________________________________________________________________________________________________________I will now close Chrome to run RogueKiller
-
Thanks. So here's the Malware Bytes Scan:
Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 6/3/2015Scan Time: 2:33:34 PMLogfile:Administrator: YesVersion: 2.01.6.1022Malware Database: v2015.06.03.04Rootkit Database: v2015.06.02.01License: TrialMalware Protection: EnabledMalicious Website Protection: EnabledSelf-protection: EnabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: NachScan Type: Threat ScanResult: CompletedObjects Scanned: 339567Time Elapsed: 3 min, 46 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 0(No malicious items detected)Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 0(No malicious items detected)Files: 0(No malicious items detected)Physical Sectors: 0(No malicious items detected)(end)_________________________________________________________________________________________________________________________________Farbar:Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-05-2015Ran by Nach (administrator) on NACH-PC on 03-06-2015 14:44:53Running from C:\Users\Nach\DesktopLoaded Profiles: Nach (Available Profiles: Nach)Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)Internet Explorer Version 10 (Default browser: Chrome)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe() C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Virus Removal Tool\SVRTgui.exe(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Virus Removal Tool\SVRTservice.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Malwarebytes Corp.) E:\Downloads\mbar-1.09.1.1004.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe==================== Registry (Whitelisted) ==================(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-05-27] (Realtek Semiconductor)HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2685072 2015-05-07] (NVIDIA Corporation)HKLM\...\Run: [shadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStartHKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [13318424 2015-03-12] (Logitech Inc.)HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)HKLM\...\Run: [bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1691112 2015-05-27] (Bitdefender)HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)HKU\S-1-5-21-318558523-3823039876-2902504939-1000\...\Run: [bitdefender Wallet Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790880 2015-05-27] (Bitdefender)Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2015-05-28]ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{401FADAA-1C16-4721-9F02-19067E1A1CA8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)Startup: C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk [2015-05-28]ShortcutTarget: Logitech . Product Registration.lnk -> C:\Program Files (x86)\Logitech\Ereg\eReg.exe (Leader Technologies/Logitech)ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)==================== Internet (Whitelisted) ====================(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =HKU\S-1-5-21-318558523-3823039876-2902504939-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blankHKU\S-1-5-21-318558523-3823039876-2902504939-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pt-br/?ocid=iehpSearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2015-05-27] (Bitdefender)BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2015-05-27] (Bitdefender)BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2015-05-27] (Bitdefender)Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2015-05-27] (Bitdefender)Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)Tcpip\Parameters: [DhcpNameServer] 89.248.166.149 8.8.8.8FireFox:========FF ProfilePath: C:\Users\Nach\AppData\Roaming\Mozilla\Firefox\Profiles\ceywwvhy.defaultFF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-03-20] (Intel Corporation)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-03-20] (Intel Corporation)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-26] (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-26] (Google Inc.)FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-03-17] (Adobe Systems Inc.)FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbextFF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2015-05-27]FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteffFF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff [2015-05-27]FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbextChrome:=======CHR Profile: C:\Users\Nach\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Drive) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-26]CHR Extension: (YouTube) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-26]CHR Extension: (Google Search) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-26]CHR Extension: (AdBlock) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-05-28]CHR Extension: (Bookmark Manager) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-26]CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-02]CHR Extension: (Skype Click to Call) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-05-27]CHR Extension: (Google Wallet) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-26]CHR Extension: (Gmail) - C:\Users\Nach\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-26]CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - https://clients2.google.com/service/update2/crxCHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]==================== Services (Whitelisted) =================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)S3 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [78144 2014-12-09] (Bitdefender)R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-07] (NVIDIA Corporation)R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel® Corporation)R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1884304 2015-05-07] (NVIDIA Corporation)R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22997648 2015-05-07] (NVIDIA Corporation)S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1997168 2015-06-01] (Electronic Arts)R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [343040 2013-08-08] (Qualcomm Atheros) [File not signed]S4 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)R3 SophosVirusRemovalTool; C:\Program Files (x86)\Sophos\Sophos Virus Removal Tool\SVRTservice.exe [153384 2014-11-26] (Sophos Limited)R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [67320 2014-10-27] (Bitdefender)R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1547936 2015-05-27] (Bitdefender)R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)==================== Drivers (Whitelisted) ====================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1306464 2015-05-27] (BitDefender)R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [262544 2015-05-27] (BitDefender)R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [677104 2015-05-27] (BitDefender)R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2015-05-27] (BitDefender LLC)R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107080 2012-10-29] (BitDefender LLC)S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2012-04-17] (BitDefender)R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [67888 2013-02-13] (Qualcomm Atheros, Inc.)R3 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [160544 2015-05-27] (BitDefender LLC)R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation)R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-07] (NVIDIA Corporation)R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-03-11] ()R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [452040 2014-10-15] (BitDefender S.R.L.)==================== NetSvcs (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== One Month Created files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-06-03 14:44 - 2015-06-03 14:44 - 00017666 _____ () C:\Users\Nach\Desktop\FRST.txt2015-06-03 14:43 - 2015-06-03 14:44 - 00000000 ____D () C:\FRST2015-06-03 14:43 - 2015-06-03 14:43 - 02108928 _____ (Farbar) C:\Users\Nach\Desktop\FRST64.exe2015-06-03 11:56 - 2015-06-03 11:56 - 00082824 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys2015-06-03 11:06 - 2015-06-03 11:06 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Adobe2015-06-03 10:52 - 2015-06-03 10:52 - 19221504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll2015-06-03 10:52 - 2015-06-03 10:52 - 15407616 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll2015-06-03 10:52 - 2015-06-03 10:52 - 14317568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll2015-06-03 10:52 - 2015-06-03 10:52 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll2015-06-03 10:52 - 2015-06-03 10:52 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll2015-06-03 10:52 - 2015-06-03 10:52 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll2015-06-03 10:52 - 2015-06-03 10:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb2015-06-03 10:52 - 2015-06-03 10:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb2015-06-03 10:52 - 2015-06-03 10:52 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll2015-06-03 10:52 - 2015-06-03 10:52 - 02240512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll2015-06-03 10:52 - 2015-06-03 10:52 - 02046464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll2015-06-03 10:52 - 2015-06-03 10:52 - 01766912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll2015-06-03 10:52 - 2015-06-03 10:52 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl2015-06-03 10:52 - 2015-06-03 10:52 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl2015-06-03 10:52 - 2015-06-03 10:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat2015-06-03 10:52 - 2015-06-03 10:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat2015-06-03 10:52 - 2015-06-03 10:52 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll2015-06-03 10:52 - 2015-06-03 10:52 - 01129984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll2015-06-03 10:52 - 2015-06-03 10:52 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec2015-06-03 10:52 - 2015-06-03 10:52 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec2015-06-03 10:52 - 2015-06-03 10:52 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx2015-06-03 10:52 - 2015-06-03 10:52 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx2015-06-03 10:52 - 2015-06-03 10:52 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll2015-06-03 10:52 - 2015-06-03 10:52 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe2015-06-03 10:52 - 2015-06-03 10:52 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe2015-06-03 10:50 - 2015-06-03 10:50 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll2015-06-03 10:50 - 2015-06-03 10:50 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll2015-06-03 10:50 - 2015-06-03 10:50 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll2015-06-03 10:50 - 2015-06-03 10:50 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll2015-06-03 10:50 - 2015-06-03 10:50 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01504768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll2015-06-03 10:50 - 2015-06-03 10:50 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll2015-06-03 10:50 - 2015-06-03 10:50 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll2015-06-03 10:48 - 2015-06-03 10:53 - 00011231 _____ () C:\Windows\IE10_main.log2015-06-03 10:45 - 2015-06-03 10:47 - 00003318 _____ () C:\Windows\IE9_main.log2015-06-03 10:43 - 2015-06-03 10:45 - 00000000 ____D () C:\Windows\system32\MRT2015-06-03 10:43 - 2015-04-01 11:16 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe2015-06-03 10:40 - 2015-03-06 02:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys2015-06-03 10:40 - 2015-03-06 02:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys2015-06-03 10:40 - 2015-03-06 02:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll2015-06-03 10:40 - 2015-03-06 02:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll2015-06-03 10:40 - 2015-03-06 02:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe2015-06-03 10:40 - 2015-03-06 02:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe2015-06-03 10:40 - 2015-03-06 02:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll2015-06-03 10:40 - 2015-03-06 02:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll2015-06-03 10:40 - 2015-03-06 02:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll2015-06-03 10:40 - 2015-03-06 02:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll2015-06-03 10:40 - 2015-03-06 02:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll2015-06-03 10:40 - 2015-03-06 02:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe2015-06-03 10:40 - 2015-03-06 02:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll2015-06-03 10:40 - 2015-03-06 02:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll2015-06-03 10:40 - 2015-03-06 02:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll2015-06-03 10:40 - 2015-02-26 00:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys2015-06-03 10:40 - 2015-01-29 00:23 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe2015-06-03 10:40 - 2015-01-29 00:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll2015-06-03 10:40 - 2015-01-29 00:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll2015-06-03 10:40 - 2015-01-29 00:19 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll2015-06-03 10:40 - 2015-01-29 00:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe2015-06-03 10:40 - 2015-01-29 00:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe2015-06-03 10:40 - 2015-01-29 00:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll2015-06-03 10:40 - 2015-01-29 00:05 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe2015-06-03 10:40 - 2015-01-29 00:05 - 03917752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe2015-06-03 10:40 - 2015-01-29 00:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll2015-06-03 10:40 - 2015-01-28 23:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll2015-06-03 10:40 - 2014-09-12 22:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll2015-06-03 10:40 - 2014-09-12 22:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll2015-06-03 10:40 - 2014-08-21 03:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll2015-06-03 10:40 - 2014-08-21 03:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll2015-06-03 10:40 - 2014-08-21 03:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll2015-06-03 10:40 - 2014-08-21 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll2015-06-03 10:40 - 2014-03-24 23:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll2015-06-03 10:40 - 2014-03-24 23:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll2015-06-03 10:40 - 2014-02-03 23:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll2015-06-03 10:40 - 2014-02-03 23:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll2015-06-03 10:40 - 2013-10-02 23:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll2015-06-03 10:40 - 2013-10-02 23:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll2015-06-03 10:40 - 2013-09-27 22:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys2015-06-03 10:40 - 2013-08-01 23:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll2015-06-03 10:40 - 2013-08-01 23:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll2015-06-03 10:40 - 2013-08-01 22:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll2015-06-03 10:40 - 2013-08-01 22:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll2015-06-03 10:40 - 2013-08-01 09:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys2015-06-03 10:40 - 2013-07-20 07:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll2015-06-03 10:40 - 2013-07-20 07:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll2015-06-03 10:40 - 2013-07-09 02:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll2015-06-03 10:40 - 2013-07-09 02:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll2015-06-03 10:40 - 2013-07-09 02:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll2015-06-03 10:40 - 2013-07-09 01:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll2015-06-03 10:40 - 2013-07-09 01:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll2015-06-03 10:40 - 2013-07-09 01:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll2015-06-03 10:40 - 2013-07-06 03:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys2015-06-03 10:40 - 2013-06-15 01:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys2015-06-03 10:40 - 2013-06-06 02:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll2015-06-03 10:40 - 2013-06-06 02:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll2015-06-03 10:40 - 2013-06-06 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll2015-06-03 10:40 - 2013-06-06 02:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll2015-06-03 10:40 - 2013-06-06 01:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll2015-06-03 10:40 - 2013-06-06 01:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll2015-06-03 10:40 - 2013-06-06 01:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll2015-06-03 10:40 - 2013-06-06 00:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll2015-06-03 10:40 - 2013-06-06 00:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll2015-06-03 10:40 - 2013-06-06 00:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll2015-06-03 10:40 - 2013-01-03 03:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS2015-06-03 10:40 - 2012-11-09 02:45 - 00750592 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll2015-06-03 10:40 - 2012-11-09 01:43 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll2015-06-03 10:40 - 2012-11-01 02:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll2015-06-03 10:40 - 2012-11-01 01:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll2015-06-03 10:40 - 2012-08-22 15:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys2015-06-03 10:40 - 2011-03-08 03:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll2015-06-03 10:40 - 2011-03-08 02:28 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll2015-06-03 10:40 - 2011-02-25 03:22 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll2015-06-03 10:40 - 2011-02-25 02:34 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll2015-06-03 10:40 - 2011-02-23 01:56 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys2015-06-03 10:40 - 2011-02-23 01:56 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys2015-06-03 10:40 - 2011-02-23 01:55 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys2015-06-03 06:54 - 2015-06-03 06:54 - 00000000 ____D () C:\Users\Nach\AppData\Local\VirtualStore2015-06-02 21:43 - 2015-06-02 21:43 - 00002759 _____ () C:\Users\Public\Desktop\Sophos Virus Removal Tool.lnk2015-06-02 21:43 - 2015-06-02 21:43 - 00000000 ____D () C:\ProgramData\Sophos2015-06-02 21:43 - 2015-06-02 21:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos2015-06-02 21:43 - 2015-06-02 21:43 - 00000000 ____D () C:\Program Files (x86)\Sophos2015-06-02 21:37 - 2015-06-02 21:37 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-NACH-PC-Windows-7-Professional-(64-bit).dat2015-06-02 21:37 - 2015-06-02 21:37 - 00000000 ____D () C:\RegBackup2015-06-02 21:32 - 2015-06-03 11:16 - 00000000 ____D () C:\AdwCleaner2015-06-02 21:00 - 2015-06-02 21:00 - 01943800 _____ (Bleeping Computer, LLC) C:\Users\Nach\Desktop\rkill.exe2015-06-02 20:55 - 2015-06-03 14:44 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)2015-06-02 20:54 - 2015-06-03 14:44 - 00000000 ____D () C:\Users\Nach\Desktop\mbar2015-06-02 20:40 - 2015-06-02 20:39 - 00852639 _____ () C:\Users\Nach\Desktop\SecurityCheck.exe2015-06-02 19:08 - 2015-06-03 14:08 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys2015-06-02 19:07 - 2015-06-03 14:02 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys2015-06-02 19:07 - 2015-06-02 19:07 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2015-06-02 19:07 - 2015-06-02 19:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2015-06-02 19:07 - 2015-06-02 19:07 - 00000000 ____D () C:\ProgramData\Malwarebytes2015-06-02 19:07 - 2015-06-02 19:07 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware2015-06-02 19:07 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys2015-06-02 19:07 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys2015-06-02 18:19 - 2015-06-02 18:19 - 00001610 _____ () C:\Windows\system32\bdsandbox.txt2015-06-02 18:07 - 2015-06-02 21:28 - 00000000 ____D () C:\Users\Nach\AppData\Temp2015-06-02 17:46 - 2015-06-02 17:46 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk2015-06-02 17:46 - 2015-06-02 17:46 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk2015-06-02 17:46 - 2015-06-02 17:46 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Mozilla2015-06-02 17:46 - 2015-06-02 17:46 - 00000000 ____D () C:\Users\Nach\AppData\Local\Mozilla2015-06-02 17:46 - 2015-06-02 17:46 - 00000000 ____D () C:\ProgramData\Mozilla2015-06-02 17:46 - 2015-06-02 17:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service2015-06-02 17:46 - 2015-06-02 17:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox2015-06-02 17:45 - 2015-06-02 17:45 - 00243408 _____ () C:\Users\Nach\Downloads\Firefox Setup Stub 38.0.5.exe2015-06-02 04:49 - 2015-06-02 04:49 - 00000000 ____D () C:\Users\Nach\Documents\FM_temp2015-06-02 04:49 - 2015-06-02 04:49 - 00000000 ____D () C:\Users\Nach\AppData\Local\CreationMaster2015-06-02 04:48 - 2015-06-02 04:48 - 00001269 _____ () C:\Users\Nach\Desktop\CM 15.lnk2015-06-02 04:48 - 2015-06-02 04:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fifa Master2015-06-02 04:48 - 2015-06-02 04:48 - 00000000 ____D () C:\Program Files (x86)\Fifa Master2015-06-02 04:42 - 2015-06-02 04:43 - 19412014 _____ () C:\Users\Nach\Downloads\Setup_CM_15_0.rar2015-06-02 04:39 - 2015-06-02 04:39 - 00000562 _____ () C:\Users\Public\Desktop\Fraps.lnk2015-06-02 04:39 - 2015-06-02 04:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps2015-06-02 04:39 - 2015-06-02 04:39 - 00000000 ____D () C:\Fraps2015-06-02 04:36 - 2015-06-02 04:36 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\WinRAR2015-06-02 04:36 - 2015-06-02 04:36 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR2015-06-02 04:36 - 2015-06-02 04:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR2015-06-02 04:35 - 2015-06-02 04:36 - 00000000 ____D () C:\Program Files\WinRAR2015-06-02 04:32 - 2015-06-02 04:35 - 101738804 _____ () C:\Users\Nach\Downloads\FI-XV-MWMW210.rar2015-06-02 04:31 - 2015-06-02 04:33 - 71594649 _____ () C:\Users\Nach\Downloads\FI-XV-MWMW200.rar2015-06-02 04:31 - 2015-06-02 04:32 - 12104486 _____ () C:\Users\Nach\Downloads\FI-XV-MWMW202.rar2015-06-02 04:31 - 2015-06-02 04:31 - 03326221 _____ () C:\Users\Nach\Downloads\FI-XV-MWMW211 (1).rar2015-06-02 04:30 - 2015-06-02 17:43 - 00000000 ____D () C:\ProgramData\Adobe2015-06-02 04:30 - 2015-06-02 04:30 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task2015-06-02 04:30 - 2015-06-02 04:30 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk2015-06-02 04:30 - 2015-06-02 04:30 - 00002047 _____ () C:\Users\Public\Desktop\Acrobat Reader DC.lnk2015-06-02 04:30 - 2015-06-02 04:30 - 00000000 ____D () C:\Program Files (x86)\Adobe2015-06-02 04:29 - 2015-06-02 04:32 - 00000000 ____D () C:\Users\Nach\AppData\Local\Adobe2015-06-01 22:16 - 2015-06-02 01:50 - 00000000 ____D () C:\Users\Nach\Documents\The Witcher 32015-06-01 21:54 - 2015-06-01 21:54 - 00001955 _____ () C:\Users\Public\Desktop\The Witcher® 3 - Wild Hunt.lnk2015-06-01 21:54 - 2015-06-01 21:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com2015-06-01 21:47 - 2015-06-01 21:47 - 00000000 ____D () C:\GOG Games2015-05-28 20:22 - 2015-06-01 03:02 - 00000080 _____ () C:\Users\Nach\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦2015-05-28 20:22 - 2015-05-28 20:22 - 00000000 ____D () C:\Users\Nach\Documents\Rockstar Games2015-05-28 20:22 - 2015-05-28 20:22 - 00000000 ____D () C:\Users\Nach\AppData\Local\Rockstar Games2015-05-28 20:22 - 2015-05-28 20:22 - 00000000 ____D () C:\Program Files\Rockstar Games2015-05-28 20:22 - 2015-05-28 20:22 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games2015-05-28 02:55 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll2015-05-28 02:55 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll2015-05-28 02:55 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll2015-05-28 02:55 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll2015-05-28 02:55 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll2015-05-28 02:55 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll2015-05-28 01:37 - 2015-05-28 01:37 - 00002783 _____ () C:\Users\Public\Desktop\Killer Network Manager.lnk2015-05-28 01:37 - 2015-05-28 01:37 - 00000000 ____D () C:\ProgramData\Qualcomm2015-05-28 01:37 - 2015-05-28 01:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros2015-05-28 01:37 - 2015-05-28 01:37 - 00000000 ____D () C:\Program Files\Qualcomm Atheros2015-05-28 01:36 - 2015-05-28 01:36 - 00000000 _____ () C:\Users\Nach\AppData\Local\Driver_LOM_8161Present.flag2015-05-27 20:26 - 2015-05-27 20:39 - 00000000 ____D () C:\Users\Nach\Valley2015-05-27 20:24 - 2015-05-27 20:24 - 00002113 _____ () C:\Users\Public\Desktop\Valley Benchmark 1.0.lnk2015-05-27 19:44 - 2015-05-27 19:44 - 00160544 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys2015-05-27 19:44 - 2015-05-27 19:44 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll2015-05-27 19:44 - 2015-05-27 19:44 - 00074000 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll2015-05-27 19:39 - 2015-05-27 19:39 - 00000385 _____ () C:\Users\Nach\AppData\Roaminguser_gensett.xml2015-05-27 19:38 - 2015-05-27 19:44 - 00677104 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys2015-05-27 19:38 - 2015-05-27 19:44 - 00262544 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys2015-05-27 19:38 - 2015-05-27 19:44 - 00033360 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll2015-05-27 19:38 - 2015-05-27 19:44 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Bitdefender2015-05-27 19:38 - 2015-05-27 19:43 - 01306464 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys2015-05-27 19:38 - 2015-05-27 19:40 - 00000000 ____D () C:\ProgramData\BDLogging2015-05-27 19:38 - 2015-05-27 19:38 - 00253404 ____H () C:\bdr-ld012015-05-27 19:38 - 2015-05-27 19:38 - 00009216 ____H () C:\bdr-ld01.mbr2015-05-27 19:38 - 2015-05-27 19:38 - 00002122 _____ () C:\Users\Public\Desktop\Bitdefender Total Security 2015.lnk2015-05-27 19:38 - 2015-05-27 19:38 - 00000684 ____H () C:\bdr-cf012015-05-27 19:38 - 2015-05-27 19:38 - 00000385 _____ () C:\Windows\system32\user_gensett.xml2015-05-27 19:38 - 2015-05-27 19:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf2015-05-27 19:38 - 2015-05-27 19:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 20152015-05-27 19:38 - 2015-05-27 19:38 - 00000000 ____D () C:\ProgramData\Bitdefender2015-05-27 19:38 - 2015-05-27 19:38 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender2015-05-27 19:38 - 2015-05-27 19:38 - 00000000 ____D () C:\Program Files\Bitdefender2015-05-27 19:38 - 2014-12-02 16:37 - 00074000 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll2015-05-27 19:38 - 2014-10-15 17:14 - 00452040 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys2015-05-27 19:38 - 2014-07-04 17:49 - 49563064 ____H () C:\bdr-im01.gz2015-05-27 19:38 - 2013-11-13 15:41 - 00093600 _____ (BitDefender LLC) C:\Windows\system32\Drivers\BdfNdisf6.sys2015-05-27 19:38 - 2013-08-13 13:38 - 03271472 ____H () C:\bdr-bz012015-05-27 19:38 - 2012-04-17 14:34 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys2015-05-27 19:38 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll2015-05-27 16:53 - 2015-05-27 16:53 - 00000000 ____D () C:\Users\Nach\Documents\WB Games2015-05-27 16:53 - 2015-05-27 16:53 - 00000000 ____D () C:\ProgramData\Steam2015-05-27 16:50 - 2015-05-27 16:50 - 00001670 _____ () C:\Users\Public\Desktop\Batman - Arkham City.lnk2015-05-27 16:50 - 2015-05-27 16:50 - 00001043 _____ () C:\Users\Public\Desktop\Batman - Arkham City (Settings).lnk2015-05-27 16:50 - 2015-05-27 16:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Batman - Arkham City2015-05-27 16:37 - 2015-05-27 16:37 - 00000000 ____D () C:\Users\Nach\AppData\Local\Setup Integrity Check2015-05-27 15:24 - 2015-05-27 16:37 - 00000000 ____D () C:\Games2015-05-27 04:05 - 2015-06-03 11:26 - 00003018 _____ () C:\Windows\System32\Tasks\MSIAfterburner2015-05-27 04:04 - 2015-06-02 01:07 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner2015-05-27 04:04 - 2015-05-27 04:04 - 00001086 _____ () C:\Users\Nach\Desktop\MSI Afterburner.lnk2015-05-27 04:04 - 2015-05-27 04:04 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner2015-05-27 04:03 - 2015-05-27 04:03 - 36210245 _____ () C:\Users\Nach\Downloads\[Guru3D.com]-MSIAfterburnerSetup410.zip2015-05-27 04:02 - 2015-05-27 04:02 - 00000000 ____D () C:\Windows\system32\appmgmt2015-05-27 03:13 - 2015-05-27 03:33 - 00000000 ____D () C:\Users\Nach\Documents\wmd_symbol_cache2015-05-27 03:13 - 2015-05-27 03:33 - 00000000 ____D () C:\Users\Nach\Documents\Project CARS2015-05-27 03:12 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll2015-05-27 03:12 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll2015-05-27 03:12 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll2015-05-27 03:12 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll2015-05-27 03:12 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll2015-05-27 03:12 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll2015-05-27 03:12 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll2015-05-27 03:12 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll2015-05-27 03:12 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll2015-05-27 03:12 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll2015-05-27 03:12 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll2015-05-27 03:12 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll2015-05-27 03:12 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll2015-05-27 03:12 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll2015-05-27 03:12 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll2015-05-27 03:12 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll2015-05-27 03:12 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll2015-05-27 03:12 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll2015-05-27 03:12 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll2015-05-27 03:12 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll2015-05-27 03:12 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll2015-05-27 03:12 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll2015-05-27 03:12 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll2015-05-27 03:12 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll2015-05-27 03:12 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll2015-05-27 03:12 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll2015-05-27 03:12 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll2015-05-27 03:12 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll2015-05-27 03:12 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll2015-05-27 03:12 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll2015-05-27 03:12 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll2015-05-27 03:12 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll2015-05-27 03:12 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll2015-05-27 03:12 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll2015-05-27 03:12 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll2015-05-27 03:12 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll2015-05-27 03:12 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll2015-05-27 03:12 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll2015-05-27 03:12 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll2015-05-27 03:12 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll2015-05-27 03:12 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll2015-05-27 03:12 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll2015-05-27 03:12 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll2015-05-27 03:12 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll2015-05-27 03:12 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll2015-05-27 03:12 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll2015-05-27 03:12 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll2015-05-27 03:12 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll2015-05-27 03:12 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll2015-05-27 03:12 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll2015-05-27 03:12 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll2015-05-27 03:12 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll2015-05-27 03:12 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll2015-05-27 03:12 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll2015-05-27 03:12 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll2015-05-27 03:12 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll2015-05-27 03:12 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll2015-05-27 03:12 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll2015-05-27 03:12 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll2015-05-27 03:12 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll2015-05-27 03:12 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll2015-05-27 03:12 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll2015-05-27 03:12 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll2015-05-27 03:12 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll2015-05-27 03:12 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll2015-05-27 03:12 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll2015-05-27 03:12 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll2015-05-27 03:12 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll2015-05-27 03:12 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll2015-05-27 03:12 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll2015-05-27 03:12 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll2015-05-27 03:12 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll2015-05-27 03:12 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll2015-05-27 03:12 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll2015-05-27 03:12 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll2015-05-27 03:12 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll2015-05-27 03:12 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll2015-05-27 03:12 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll2015-05-27 03:12 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll2015-05-27 03:12 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll2015-05-27 03:12 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll2015-05-27 03:12 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll2015-05-27 03:12 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll2015-05-27 03:12 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll2015-05-27 03:12 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll2015-05-27 03:12 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll2015-05-27 03:09 - 2015-05-27 03:09 - 00292184 _____ (Microsoft Corporation) C:\Users\Nach\Downloads\dxwebsetup.exe2015-05-27 02:07 - 2015-05-27 02:07 - 00002122 _____ () C:\Users\Nach\Desktop\Project CARS.lnk2015-05-27 02:07 - 2015-05-27 02:07 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Project CARS2015-05-27 02:07 - 2015-05-27 02:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics2015-05-27 02:06 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll2015-05-27 01:54 - 2015-05-27 01:54 - 00000000 ____D () C:\Program Files (x86)\R.G. Mechanics2015-05-27 00:03 - 2015-06-02 04:22 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\vlc2015-05-27 00:03 - 2015-05-27 00:03 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk2015-05-27 00:03 - 2015-05-27 00:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN2015-05-27 00:03 - 2015-05-27 00:03 - 00000000 ____D () C:\Program Files (x86)\VideoLAN2015-05-27 00:01 - 2015-05-27 00:02 - 28849904 _____ () C:\Users\Nach\Downloads\vlc-2.2.1-win32.exe2015-05-26 22:40 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll2015-05-26 22:40 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll2015-05-26 22:40 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll2015-05-26 22:40 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll2015-05-26 22:40 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll2015-05-26 22:40 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll2015-05-26 22:40 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll2015-05-26 22:40 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll2015-05-26 22:40 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll2015-05-26 22:40 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll2015-05-26 22:40 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll2015-05-26 22:40 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll2015-05-26 22:40 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll2015-05-26 22:40 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll2015-05-26 22:40 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll2015-05-26 22:40 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll2015-05-26 22:40 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll2015-05-26 22:40 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll2015-05-26 22:40 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll2015-05-26 22:40 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll2015-05-26 22:40 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll2015-05-26 22:40 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll2015-05-26 22:40 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll2015-05-26 22:40 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll2015-05-26 22:40 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll2015-05-26 22:40 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll2015-05-26 22:40 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll2015-05-26 22:40 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll2015-05-26 22:40 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll2015-05-26 22:40 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll2015-05-26 22:40 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll2015-05-26 22:40 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll2015-05-26 22:40 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll2015-05-26 22:40 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll2015-05-26 22:40 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll2015-05-26 22:40 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll2015-05-26 22:40 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll2015-05-26 22:40 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll2015-05-26 22:40 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll2015-05-26 22:40 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll2015-05-26 22:40 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll2015-05-26 22:40 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll2015-05-26 22:40 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll2015-05-26 22:40 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll2015-05-26 22:40 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll2015-05-26 22:40 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll2015-05-26 22:40 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll2015-05-26 22:40 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll2015-05-26 22:40 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll2015-05-26 22:40 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll2015-05-26 22:40 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll2015-05-26 20:45 - 2015-05-31 09:31 - 00000000 ____D () C:\Users\Nach\Documents\FIFA 152015-05-26 20:38 - 2015-05-30 21:12 - 00074969 _____ () C:\Windows\DirectX.log2015-05-26 20:38 - 2015-05-26 20:38 - 07878008 _____ (Microsoft Corporation) C:\Users\Nach\Downloads\Xbox360_64Eng.exe2015-05-26 20:38 - 2015-05-26 20:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf2015-05-26 20:38 - 2015-05-26 20:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories2015-05-26 20:38 - 2015-05-26 20:38 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories2015-05-26 20:36 - 2015-05-26 20:36 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll2015-05-26 20:36 - 2015-05-26 20:36 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll2015-05-26 20:36 - 2015-05-26 20:36 - 00133632 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll2015-05-26 20:36 - 2015-05-26 20:36 - 00110592 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll2015-05-26 20:36 - 2015-05-26 20:36 - 00000000 ____D () C:\Users\Nach\Documents\Codemasters2015-05-26 20:36 - 2015-05-26 20:36 - 00000000 ____D () C:\ProgramData\Codemasters2015-05-26 20:36 - 2015-05-26 20:36 - 00000000 ____D () C:\Program Files (x86)\OpenAL2015-05-26 19:43 - 2015-05-26 19:43 - 00000000 ____D () C:\Users\Nach\Tracing2015-05-26 19:42 - 2015-06-02 20:55 - 00000000 ____D () C:\Users\Nach\AppData\Roaming\Skype2015-05-26 19:42 - 2015-05-27 19:48 - 00000000 ___RD () C:\Program Files (x86)\Skype2015-05-26 19:42 - 2015-05-26 19:42 - 43034752 _____ (Skype Technologies S.A.) C:\Users\Nach\Downloads\SkypeSetupFull.exe2015-05-26 19:42 - 2015-05-26 19:42 - 00002697 _____ () C:\Users\Public\Desktop\Skype.lnk2015-05-26 19:42 - 2015-05-26 19:42 - 00000000 ____D () C:\Users\Nach\AppData\Local\Skype2015-05-26 19:42 - 2015-05-26 19:42 - 00000000 ____D () C:\ProgramData\Skype2015-05-26 19:42 - 2015-05-26 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype2015-05-26 18:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE2015-05-26 18:43 - 2015-05-27 02:42 - 00027508 _____ () C:\Windows\IE11_main.logCONTINUE -
Hi. I've recently acquired this malware I dont know how. I had it in my previous install but as I was going to format it, I left it. So I formated and sure enough after a week there it was again.
It's some pop ups that appear as blank on chrome. I installed Firefox and the same problem occurs, but this time it wasn't blank (probably due to the fact that there was no adblock there).
Here's an example of the problem:
I sought help on bleepcomputers, it seemed like it worked but it didn't! Still the same problem.
I was using BitDefender when I contracted this malware. After it I downloaded many softwares as per instruction on beepcomputer. Including MalwareBytes. Something very peculiar happened when I dealt with malwarebytes tho: it blocked a page or something like that. And now when I browse with malware bytes on pages wont load properly or wont load at all.
For instance, when I try to open youtube.com I get the following message:
ERR_NAME_NOT_RESOLVED
It looks like something like a proxy is rerouting me.
He asked me to run the following programs:
Security Check
Farbar Service Scanner
Mini ToolBox
MalwareBytes Anti-Malware
Malwarebytes AntiRoot Kit
RKill
Tempfile Cleaner
AdwCleaner
Junkware Removal Tool (I couldnt entirely close Bitdefender to run it, but I did shut off its active Antivirus)
Sophos Virus Removal Tool
I ran all of 'em. If you want the logs for that I'd be happy to oblige.
PS: I've had yesterday and today a total of 3 video driver losses and recoveries during normal web browsing. Weird, not sure if it's related.
Thanks! Sorry for the long text, I tried to be thorough.
-
Oh yeah and something that really struck me: now if I have Malwarebytes open pages don't load properly. Some open with just the text and most wont open at all, with the message:
ERR_NAME_NOT_RESOLVED
-
They open every time I open certain pages. They are blank, apparently because of AdBlock. I installed Firefox (I use Chrome) to see if they show up there too and they showed up with actual images in the blank boxes, there's no adblock there since it was a fresh install. They don't load at the same time the page is loaded, they load a few seconds after. Here's a picture. I'm using BitDefender.Here's the picture of it happening in Toms Hardware page, as an example.
Now I installed malware bytes, currently running the gree trial of pro version. I had a hyperscan done and it didnt alleviate the problem.Plz how do I get rid of it? How come it passed through bitdefender?Thanks in advance.
Russian pop ups with counters and middle of the screen ads that are no longer clickable
in Resolved Malware Removal Logs
Posted
Ive just uninstalled utorrent! =S