Jump to content

Something really wrong and silent going on? FUD malware?

FoXTeR

By FoXTeR
in Resolved Malware Removal Logs

 Share

Recommended Posts

FoXTeR

FoXTeR

Posted
Posted

HI,

 

Thanks in advance for any help. Something really strange is going on on my laptop, well has been for a while now. I thought I was being paranoid and have clean installed windows 10 to reassure myself but now things have occurred to make me think otherwise again and that whatever is on my pc has survived numerous fresh operating system installs. What's got me worried is what seems like an excessive amount of svchost.exe processes that are running (about 10). The security software I have is ESET smart security 9, Malwarebytes anti-malware premium and Malwarebytes anti-exploit premium. Neither of which on the deepest level scan is picking anything up. Changing some settings on ESET I found a way to notify about allowed startup modifications to programs, upon resetting i got about six notices all of which affecting Malwarebytes anti-malware processes... from services.exe, which made me almost convince that something was wrong. I've also tried GMER to look for rootkits as well which upon launch, alerts that system32 is in use and then upon attempting a scan, my laptop blue screen's after about 10-15 seconds. I'm really worried what is on my laptop, appreciate any help anyone can give me.   :(     

 

Link to post
Share on other sites
TwinHeadedEagle

TwinHeadedEagle

Posted
Posted

Hello,

They call me TwinHeadedEagle around here, and I'll try to help your with your issue.

Before we start please read and note the following:

  • We're primarily oriented on malware removal here, so you must know that some issues just cannot be solved and you must be prepared for this. Some tools we use here will remove your browser search history, so backup your important links and all the files whose loss is unacceptable.
  • Limit your internet access to posting here, some infections just wait to steal typed-in passwords.
  • Please be patient. I know it is frustrating when your PC isn't working properly, but malware removal takes time. Keep in mind that private life gets in the way too. Note that we may live in totally different time zones, what may cause some delays between answers.
  • Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.
  • Do not paste the logs in your posts, attachments make my work easier. There is a More reply options button, that gives you Upload Files option below which you can use to attach your reports. Always attach reports from all tools.
  • Always execute my instructions in given order. If for some reason you cannot completely follow one instruction, inform me about that.
  • I volunteer to help you, so please, do not ask for help for your company/business PC. Companies are making revenue via computers, so it is good thing to pay someone to repair it.
  • If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
:excl: I can't foresee everything, so if anything not covered in my instructions happens, please stop and inform me!

:excl: There are no silly questions. Never be afraid to ask if in doubt!

warning.gif Rules and policies

We won't support any piracy.

That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!

The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!

Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.

FRST.gif Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.

    (XP users click run after receipt of Windows Security Warning - Open File).

  • Make sure that Addition option is checked.
  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please upload them into your next reply.
Link to post
Share on other sites
FoXTeR

FoXTeR

Posted
  • Author
Posted
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:04-11-2015

Ran by Alex (administrator) on DESKTOP-BLPCOLT (05-11-2015 15:55:11)

Running from C:\Users\Alex\Downloads

Loaded Profiles: Alex (Available Profiles: Alex & Administrator)

Platform: Windows 10 Home (X64) Language: English (United Kingdom)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal


 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE

(VideoLAN) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

 

 

==================== Registry (Whitelisted) ===========================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16161536 2015-10-18] (Realtek Semiconductor)

HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2620728 2015-07-22] (Malwarebytes Corporation)

HKU\S-1-5-21-1261255005-3633135201-1909299041-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8551848 2015-10-19] (Piriform Ltd)

HKU\S-1-5-21-1261255005-3633135201-1909299041-1001\...\MountPoints2: {6967b6a9-756b-11e5-8d6f-5c93a2f576a2} - "D:\HTC_Sync_Manager_PC.exe" 

ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  No File

ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  No File

ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  No File

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 208.67.222.222 208.67.220.220

Tcpip\..\Interfaces\{43a5e718-dc6a-4e44-81d5-568f30a818c8}: [NameServer] 8.8.8.8,8.8.4.4

Tcpip\..\Interfaces\{43a5e718-dc6a-4e44-81d5-568f30a818c8}: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{6c7250b0-2cb7-405f-aa19-aeb38d51177d}: [DhcpNameServer] 208.67.222.222 208.67.220.220

Tcpip\..\Interfaces\{ebc5daf5-db1e-4b54-97c8-b7a32f35cc89}: [NameServer] 8.8.8.8,8.8.4.4

Tcpip\..\Interfaces\{ebc5daf5-db1e-4b54-97c8-b7a32f35cc89}: [DhcpNameServer] 192.168.0.1

 

Internet Explorer:

==================

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2015-10-27] (Microsoft Corporation)

BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2015-10-27] (Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-27] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-27] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-27] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-27] (Microsoft Corporation)

 

FireFox:

========

FF ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\bzcxeywt.default

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2015-10-27] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-04] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-04] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

 

Chrome: 

=======

CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-04]

CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-04]

CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-04]

CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-04]

CHR Extension: (Google Search) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-04]

CHR Extension: (Google Sheets) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-04]

CHR Extension: (Google Docs Offline) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-05]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-04]

CHR Extension: (Gmail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-04]

 

==================== Services (Whitelisted) ========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2856632 2015-10-15] (Microsoft Corporation)

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2505472 2015-10-09] (ESET)

R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [713016 2015-07-22] (Malwarebytes Corporation)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

 

===================== Drivers (Whitelisted) ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-10-18] (Advanced Micro Devices)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264040 2015-07-30] (ESET)

S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [14976 2015-07-30] (ESET)

R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [186784 2015-07-30] (ESET)

R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [142976 2015-10-07] (ESET)

R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [206312 2015-07-30] (ESET)

R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [52872 2015-07-30] (ESET)

R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [69840 2015-07-30] (ESET)

S3 ESETCleanersDriver; C:\WINDOWS\system32\Drivers\ESETCleanersDriver.sys [170280 2015-11-01] (ESET)

R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [63064 2015-07-22] ()

R1 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [109272 2015-10-05] (Malwarebytes)

R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-11-05] (Malwarebytes)

R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)

R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-06-18] (Realtek                                            )

R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [751632 2015-10-18] (Realsil Semiconductor Corporation)

S3 torguardtap0901; C:\Windows\System32\drivers\torguardtap0901.sys [39840 2015-03-13] (The OpenVPN Project)

S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)

U0 Partizan; system32\drivers\Partizan.sys [X]

S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One Month Created files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2015-11-05 15:55 - 2015-11-05 15:55 - 00011204 _____ C:\Users\Alex\Downloads\FRST.txt

2015-11-05 15:54 - 2015-11-05 15:55 - 00000000 ____D C:\FRST

2015-11-05 15:53 - 2015-11-05 15:54 - 02198016 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe

2015-11-05 15:11 - 2015-11-05 15:11 - 00002340 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2015-11-05 15:06 - 2015-11-05 15:06 - 00000000 ___HD C:\OneDriveTemp

2015-11-05 15:04 - 2015-11-05 15:04 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-BLPCOLT_Alex_HistoryPrediction.bin

2015-11-04 04:11 - 2015-11-04 04:11 - 00018160 _____ C:\Users\Alex\Downloads\ESETPoweliksCleaner.exe_20151104.041138.208.log

2015-11-04 04:11 - 2015-11-04 04:11 - 00000022 _____ C:\Users\Alex\Downloads\ESETPoweliksCleaner.exe_20151104.041138.208.zip

2015-11-04 01:43 - 2015-11-04 01:43 - 00000000 _____ C:\Users\Alex\Downloads\un25547.cfg

2015-11-04 01:40 - 2015-11-04 03:09 - 00000000 ____D C:\Users\Alex\AppData\Local\Mozilla

2015-11-04 01:40 - 2015-11-04 01:42 - 639631360 _____ C:\Users\Alex\Downloads\drweb-livedisk-900-cd.iso

2015-11-04 01:40 - 2015-11-04 01:41 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Mozilla

2015-11-04 01:39 - 2015-11-04 01:39 - 00001224 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-11-04 01:39 - 2015-11-04 01:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2015-11-04 01:24 - 2015-11-05 15:06 - 00000000 ___RD C:\Users\Alex\Google Drive

2015-11-04 01:21 - 2015-11-05 15:27 - 00000926 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2015-11-04 01:21 - 2015-11-05 15:09 - 00000000 ____D C:\Users\Alex\AppData\Local\Google

2015-11-04 01:21 - 2015-11-05 15:05 - 00000922 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2015-11-04 01:21 - 2015-11-04 01:21 - 00003984 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2015-11-04 01:21 - 2015-11-04 01:21 - 00003752 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2015-11-04 00:56 - 2015-11-04 00:57 - 340670464 _____ C:\Users\Alex\Downloads\eset-sysrescue.1.0.9.0.enu.iso

2015-11-04 00:48 - 2015-11-04 00:48 - 04831744 _____ (Geza Kovacs) C:\Users\Alex\Downloads\unetbootin-windows-613.exe

2015-11-04 00:38 - 2015-11-04 01:31 - 00000096 _____ C:\Users\Alex\Downloads\rufus.ini

2015-11-04 00:38 - 2015-11-04 00:38 - 00863144 _____ (Akeo Consulting (http://akeo.ie)) C:\Users\Alex\Downloads\rufus-2.5p.exe

2015-11-04 00:31 - 2015-11-04 00:16 - 470530048 ____N C:\Users\Alex\Desktop\systemrescuecd-x86-4.6.1.iso

2015-11-03 21:32 - 2015-11-03 21:32 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job

2015-11-03 21:10 - 2015-11-03 21:15 - 09317168 _____ (ESET, spol. s r.o.) C:\Users\Alex\Downloads\eset_sysrescue_live_creator_enu.exe

2015-11-01 18:39 - 2015-11-01 18:28 - 01510960 ____N (Disc Soft Ltd.) C:\Users\Alex\Downloads\DTUltraInstaller1.0.exe

2015-11-01 18:11 - 2015-11-01 18:11 - 00170280 _____ (ESET) C:\WINDOWS\system32\Drivers\ESETCleanersDriver.sys

2015-10-30 14:38 - 2015-10-30 14:39 - 00000000 ____D C:\Users\Alex\AppData\Local\Thunderbird

2015-10-30 14:38 - 2015-10-30 14:38 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Thunderbird

2015-10-30 14:38 - 2015-10-30 14:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2015-10-30 14:36 - 2015-10-30 14:36 - 33851960 _____ (Mozilla) C:\Users\Alex\Downloads\Thunderbird Setup 38.3.0.exe

2015-10-30 14:28 - 2015-10-30 14:28 - 09826585 _____ C:\Users\Alex\Downloads\AbstractsDark.themepack

2015-10-30 13:26 - 2015-11-04 01:16 - 00000000 ____D C:\Program Files\Waterfox

2015-10-30 13:24 - 2015-10-30 13:25 - 72173960 _____ C:\Users\Alex\Downloads\Waterfox 40.0.3 Setup.exe

2015-10-30 13:16 - 2015-11-04 02:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2015-10-30 09:59 - 2015-10-27 23:38 - 21871616 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2015-10-30 09:59 - 2015-10-27 23:16 - 18801664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2015-10-30 09:59 - 2015-10-21 12:43 - 01392480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll

2015-10-30 09:59 - 2015-10-21 12:00 - 24595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2015-10-30 09:59 - 2015-10-21 11:57 - 02418688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2015-10-30 09:59 - 2015-10-21 05:13 - 19326464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2015-10-30 09:58 - 2015-10-21 12:45 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll

2015-10-30 09:58 - 2015-10-21 12:44 - 00459104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys

2015-10-30 09:58 - 2015-10-21 12:39 - 03621248 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2015-10-30 09:58 - 2015-10-21 12:00 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2015-10-30 09:58 - 2015-10-21 11:59 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2015-10-30 09:58 - 2015-10-21 11:52 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll

2015-10-30 09:58 - 2015-10-21 11:50 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll

2015-10-30 09:58 - 2015-10-21 11:48 - 01068032 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2015-10-30 09:58 - 2015-10-21 11:47 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll

2015-10-30 09:58 - 2015-10-21 11:46 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2015-10-30 09:58 - 2015-10-21 11:46 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2015-10-30 09:58 - 2015-10-21 11:44 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll

2015-10-30 09:58 - 2015-10-21 11:44 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2015-10-30 09:58 - 2015-10-21 11:43 - 02675200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll

2015-10-30 09:58 - 2015-10-21 11:42 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll

2015-10-30 09:58 - 2015-10-21 11:41 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll

2015-10-30 09:58 - 2015-10-21 11:40 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll

2015-10-30 09:58 - 2015-10-21 11:38 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll

2015-10-30 09:58 - 2015-10-21 05:53 - 00961376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll

2015-10-30 09:58 - 2015-10-21 05:49 - 02878512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2015-10-30 09:58 - 2015-10-21 05:11 - 02647040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll

2015-10-30 09:58 - 2015-10-21 05:08 - 01918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2015-10-30 09:58 - 2015-10-21 05:05 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll

2015-10-30 09:58 - 2015-10-21 05:03 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2015-10-30 09:58 - 2015-10-21 05:03 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll

2015-10-30 09:58 - 2015-10-21 04:58 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll

2015-10-30 09:58 - 2015-10-21 04:58 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll

2015-10-30 09:58 - 2015-10-21 04:55 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll

2015-10-30 09:44 - 2015-11-05 15:02 - 00000000 ____D C:\WINDOWS\Minidump

2015-10-29 19:28 - 2015-10-29 19:28 - 00003217 _____ C:\Users\Alex\Downloads\my-ublock-backup_10-29-2015,_7-28-30_PM.txt

2015-10-29 19:08 - 2015-10-29 19:08 - 06764904 _____ (Piriform Ltd) C:\Users\Alex\Downloads\ccsetup511pro.exe

2015-10-29 18:53 - 2015-10-29 18:53 - 01694208 _____ C:\Users\Alex\Downloads\adwcleaner_5.015.exe

2015-10-29 18:48 - 2015-11-04 01:38 - 00243632 _____ C:\Users\Alex\Downloads\Firefox Setup Stub 41.0.2.exe

2015-10-29 18:45 - 2015-10-29 18:45 - 00929872 _____ (Google Inc.) C:\Users\Alex\Downloads\ChromeSetup.exe

2015-10-29 14:08 - 2015-11-05 15:09 - 00000000 ____D C:\Program Files (x86)\Google

2015-10-28 23:27 - 2015-10-28 23:27 - 00000218 _____ C:\Users\Alex\AppData\Local\recently-used.xbel

2015-10-28 00:37 - 2015-10-28 00:37 - 00000000 ____D C:\$WINDOWS.~BT

2015-10-28 00:07 - 2015-10-28 00:07 - 00000000 ___HD C:\$Windows.~WS

2015-10-27 13:32 - 2015-10-27 13:32 - 00000000 ___RD C:\Users\Alex\Documents\MEGAsync

2015-10-27 12:59 - 2015-10-29 12:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2015-10-27 12:59 - 2015-10-27 12:59 - 00000000 ____D C:\Program Files\Microsoft Office 15

2015-10-26 10:19 - 2015-10-26 10:19 - 00000002 RSHOT C:\WINDOWS\winstart.bat

2015-10-26 10:19 - 2015-10-26 10:19 - 00000002 RSHOT C:\WINDOWS\SysWOW64\CONFIG.NT

2015-10-26 10:19 - 2015-10-26 10:19 - 00000002 RSHOT C:\WINDOWS\SysWOW64\AUTOEXEC.NT

2015-10-25 20:53 - 2015-11-05 15:02 - 00000000 ____D C:\Users\Alex\AppData\Roaming\vlc

2015-10-25 20:52 - 2015-10-25 20:52 - 00000000 ____D C:\Program Files (x86)\VideoLAN

2015-10-25 16:51 - 2015-10-25 16:51 - 00000000 ____D C:\WINDOWS\system32\SleepStudy

2015-10-25 15:50 - 2015-10-25 15:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

2015-10-24 21:34 - 2015-10-24 21:40 - 00000000 ____D C:\WINDOWS\system32\MRT

2015-10-24 21:34 - 2015-10-02 11:09 - 143481208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2015-10-24 14:27 - 2015-10-29 18:55 - 00000000 ____D C:\AdwCleaner

2015-10-24 13:32 - 2015-10-29 19:09 - 00000000 ____D C:\Program Files\CCleaner

2015-10-24 13:32 - 2015-10-29 19:08 - 00000867 _____ C:\Users\Public\Desktop\CCleaner.lnk

2015-10-24 13:32 - 2015-10-24 13:32 - 00002868 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC

2015-10-24 13:27 - 2015-11-05 11:19 - 00000000 ____D C:\Users\Alex\AppData\Local\Comms

2015-10-24 13:24 - 2015-10-24 13:24 - 00000000 ____D C:\Program Files\7-Zip

2015-10-24 13:17 - 2015-11-05 15:21 - 00000000 ____D C:\Program Files (x86)\VPNetwork LLC

2015-10-24 13:14 - 2015-11-05 15:05 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2015-10-24 13:14 - 2015-10-24 13:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit

2015-10-24 13:13 - 2015-10-24 13:13 - 00001179 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-10-24 13:13 - 2015-10-24 13:13 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-10-24 13:13 - 2015-10-05 08:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2015-10-24 13:13 - 2015-10-05 08:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys

2015-10-24 13:13 - 2015-10-05 08:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2015-10-24 13:09 - 2015-10-24 13:09 - 00000000 ____D C:\Users\Alex\AppData\Local\ESET

2015-10-24 13:08 - 2015-10-24 13:08 - 00002104 _____ C:\Users\Public\Desktop\ESET Banking & Payment protection.lnk

2015-10-24 13:08 - 2015-10-24 13:08 - 00000000 ____D C:\Program Files\ESET

2015-10-24 13:06 - 2015-10-24 13:06 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2015-10-24 13:06 - 2015-10-24 13:06 - 00000000 ____D C:\Program Files (x86)\Spybot Anti-Beacon

2015-10-24 13:01 - 2015-10-27 19:57 - 00000000 ____D C:\Users\Alex\AppData\Local\MicrosoftEdge

2015-10-24 13:00 - 2015-11-03 18:42 - 00002339 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2015-10-24 13:00 - 2015-10-24 13:00 - 00001337 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio Manager.lnk

2015-10-24 12:59 - 2015-10-24 12:59 - 00000000 ____D C:\Users\Alex\AppData\Local\Publishers

2015-10-24 12:58 - 2015-10-29 23:15 - 00000000 ____D C:\Users\Alex\AppData\Local\Packages

2015-10-24 12:58 - 2015-10-24 12:58 - 00000000 ____D C:\Users\Alex\AppData\Local\VirtualStore

2015-10-24 12:58 - 2015-10-24 12:58 - 00000000 ____D C:\Users\Alex\AppData\Local\TileDataLayer

2015-10-24 12:57 - 2015-10-24 12:57 - 00000020 ___SH C:\Users\Alex\ntuser.ini

2015-10-24 12:51 - 2015-10-25 16:28 - 00000000 ____D C:\Windows.old

2015-10-24 12:51 - 2015-10-24 12:51 - 00028672 ___SH C:\WINDOWS\system32\config\BCD-Template.LOG

2015-10-24 12:50 - 2015-10-24 12:50 - 00008192 _____ C:\WINDOWS\system32\config\userdiff

2015-10-24 12:49 - 2015-10-24 12:49 - 00000000 ____D C:\WINDOWS\Setup

2015-10-24 12:45 - 2015-10-24 12:45 - 00000000 ____D C:\WINDOWS\OCR

2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm

2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN

2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep

2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr

2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts

2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\Drivers\en-GB

2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\0409

2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\winrm

2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\WCN

2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\slmgr

2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts

2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\Drivers\en-GB

2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\0409

2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\en-GB

2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\DigitalLocker

2015-10-24 12:40 - 2015-10-16 03:10 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2015-10-24 12:40 - 2015-10-16 03:10 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2015-10-24 12:38 - 2015-11-05 15:17 - 00000000 ____D C:\WINDOWS\AppReadiness

2015-10-24 12:38 - 2015-11-05 15:03 - 00000000 ____D C:\WINDOWS\system32\sru

2015-10-24 12:38 - 2015-11-05 15:02 - 00000000 ____D C:\WINDOWS\system32\WinMetadata

2015-10-24 12:38 - 2015-11-05 15:02 - 00000000 ____D C:\WINDOWS\system32\en-GB

2015-10-24 12:38 - 2015-11-05 15:00 - 00000000 ____D C:\WINDOWS\registration

2015-10-24 12:38 - 2015-11-05 14:52 - 00000000 ____D C:\WINDOWS\system32\NDF

2015-10-24 12:38 - 2015-11-04 00:38 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy

2015-10-24 12:38 - 2015-11-04 00:38 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy

2015-10-24 12:38 - 2015-11-03 21:20 - 00000000 ____D C:\WINDOWS\LiveKernelReports

2015-10-24 12:38 - 2015-10-31 14:08 - 00000000 ____D C:\WINDOWS\rescache

2015-10-24 12:38 - 2015-10-30 13:03 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB

2015-10-24 12:38 - 2015-10-30 13:03 - 00000000 ____D C:\WINDOWS\system32\appraiser

2015-10-24 12:38 - 2015-10-25 16:34 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12

2015-10-24 12:38 - 2015-10-25 16:34 - 00000000 ___SD C:\WINDOWS\system32\F12

2015-10-24 12:38 - 2015-10-25 16:34 - 00000000 ___RD C:\WINDOWS\PurchaseDialog

2015-10-24 12:38 - 2015-10-25 16:34 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2015-10-24 12:38 - 2015-10-25 16:34 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform

2015-10-24 12:38 - 2015-10-25 16:34 - 00000000 ____D C:\WINDOWS\Provisioning

2015-10-24 12:38 - 2015-10-25 16:34 - 00000000 ____D C:\WINDOWS\L2Schemas

2015-10-24 12:38 - 2015-10-24 13:22 - 00000000 ____D C:\WINDOWS\system32\restore

2015-10-24 12:38 - 2015-10-24 13:09 - 00000000 ___HD C:\WINDOWS\ELAMBKUP

2015-10-24 12:38 - 2015-10-24 12:58 - 00000000 ___RD C:\WINDOWS\PrintDialog

2015-10-24 12:38 - 2015-10-24 12:58 - 00000000 ___RD C:\WINDOWS\MiracastView

2015-10-24 12:38 - 2015-10-24 12:58 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2015-10-24 12:38 - 2015-10-24 12:51 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template

2015-10-24 12:38 - 2015-10-24 12:49 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-10-24 12:38 - 2015-10-24 12:48 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe

2015-10-24 12:38 - 2015-10-24 12:48 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism

2015-10-24 12:38 - 2015-10-24 12:48 - 00000000 ____D C:\WINDOWS\system32\oobe

2015-10-24 12:38 - 2015-10-24 12:48 - 00000000 ____D C:\WINDOWS\system32\Dism

2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs

2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ___SD C:\WINDOWS\system32\dsc

2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs

2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\setup

2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI

2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\Com

2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\setup

2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\MUI

2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\migwiz

2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\Com

2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\IME

2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\Help

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 __RSD C:\WINDOWS\Media

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 __RSD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___SD C:\WINDOWS\system32\Nui

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___SD C:\WINDOWS\system32\Configuration

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___RD C:\WINDOWS\Offline Web Pages

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___RD C:\WINDOWS\DesktopTileResources

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Web

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Vss

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\tracing

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\TAPI

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\WindowsPowerShell

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\sru

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-CS

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\sppui

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\spp

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech_OneCore

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\restore

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Recovery

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\RasToast

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\ras

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\networklist

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\MSDRM

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Licenses

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\InstallShield

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\IME

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\fr-CA

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\es-MX

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SystemResources

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\zh-HK

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\winevt

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\WindowsPowerShell

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\uk-UA

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\tr-TR

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\th-TH

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-CS

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\sppui

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\spp

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\spool

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\Speech_OneCore

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\Speech

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\sl-SI

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\sk-SK

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\ro-RO

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\RasToast

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\ras

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\ProximityToast

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\PointOfService

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\networklist

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\MsDtc

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\MSDRM

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\Macromed

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\lv-LV

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\lt-LT

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\Licenses

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\Ipmi

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\InputMethod

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\inetsrv

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\IME

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\icsxml

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\ias

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\hr-HR

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\he-IL

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\fr-CA

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\et-EE

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\es-MX

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\downlevel

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\config\Journal

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\Bthprops

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\bg-BG

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\ar-SA

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\AppLocker

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system\Speech

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\System

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Speech_OneCore

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Speech

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SKB

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\ShellNew

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\security

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\schemas

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SchCache

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Resources

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\PLA

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Performance

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\InputMethod

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Globalization

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Cursors

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Branding

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\appcompat

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\addins

2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2015-10-24 12:38 - 2015-10-24 12:35 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll

2015-10-24 12:38 - 2015-10-24 12:35 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat

2015-10-24 12:38 - 2015-10-24 12:35 - 00215943 _____ C:\WINDOWS\system32\dssec.dat

2015-10-24 12:38 - 2015-10-24 12:35 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll

2015-10-24 12:38 - 2015-10-24 12:35 - 00017463 _____ C:\WINDOWS\system32\Drivers\etc\services

2015-10-24 12:38 - 2015-10-24 12:35 - 00015462 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml

2015-10-24 12:38 - 2015-10-24 12:35 - 00008798 _____ C:\WINDOWS\SysWOW64\icrav03.rat

2015-10-24 12:38 - 2015-10-24 12:35 - 00008798 _____ C:\WINDOWS\system32\icrav03.rat

2015-10-24 12:38 - 2015-10-24 12:35 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam

2015-10-24 12:38 - 2015-10-24 12:35 - 00001988 _____ C:\WINDOWS\SysWOW64\ticrf.rat

2015-10-24 12:38 - 2015-10-24 12:35 - 00001988 _____ C:\WINDOWS\system32\ticrf.rat

2015-10-24 12:38 - 2015-10-24 12:35 - 00001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol

2015-10-24 12:38 - 2015-10-24 12:35 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json

2015-10-24 12:38 - 2015-10-24 12:35 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT

2015-10-24 12:38 - 2015-10-24 12:35 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT

2015-10-24 12:38 - 2015-10-24 12:35 - 00000407 _____ C:\WINDOWS\system32\Drivers\etc\networks

2015-10-24 12:38 - 2015-10-24 12:34 - 00000219 _____ C:\WINDOWS\system.ini

2015-10-24 12:38 - 2015-10-24 12:34 - 00000092 _____ C:\WINDOWS\win.ini

2015-10-24 12:38 - 2015-10-24 12:06 - 00000000 __RHD C:\Users\Public\Libraries

2015-10-24 12:38 - 2015-10-24 12:06 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase

2015-10-24 12:38 - 2015-10-24 12:06 - 00000000 ____D C:\WINDOWS\system32\Recovery

2015-10-24 12:38 - 2015-10-24 12:02 - 00000000 ____D C:\WINDOWS\system32\FxsTmp

2015-10-24 12:37 - 2015-11-05 14:59 - 00000000 ____D C:\Program Files\Common Files\microsoft shared

2015-10-24 12:37 - 2015-10-24 12:48 - 00000000 ____D C:\Program Files\Windows Journal

2015-10-24 12:37 - 2015-10-24 12:44 - 00000000 ____D C:\Program Files\Windows Photo Viewer

2015-10-24 12:37 - 2015-10-24 12:44 - 00000000 ____D C:\Program Files\Windows Defender

2015-10-24 12:37 - 2015-10-24 12:44 - 00000000 ____D C:\Program Files\Common Files\System

2015-10-24 12:37 - 2015-10-24 12:44 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2015-10-24 12:37 - 2015-10-24 12:44 - 00000000 ____D C:\Program Files (x86)\Windows Defender

2015-10-24 12:37 - 2015-10-24 12:38 - 00000000 ____D C:\Program Files\Windows Portable Devices

2015-10-24 12:37 - 2015-10-24 12:38 - 00000000 ____D C:\Program Files\Windows Multimedia Platform

2015-10-24 12:37 - 2015-10-24 12:38 - 00000000 ____D C:\Program Files\Common Files\Services

2015-10-24 12:37 - 2015-10-24 12:38 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices

2015-10-24 12:37 - 2015-10-24 12:38 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform

2015-10-24 12:37 - 2015-10-24 12:37 - 00000000 __SHD C:\Program Files\Windows Sidebar

2015-10-24 12:37 - 2015-10-24 12:37 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar

2015-10-24 12:37 - 2015-10-24 12:37 - 00000000 ___SD C:\Program Files\WindowsPowerShell

2015-10-24 12:37 - 2015-10-24 12:37 - 00000000 ___SD C:\Program Files (x86)\WindowsPowerShell

2015-10-24 12:37 - 2015-10-24 12:37 - 00000000 ____D C:\Program Files\Windows NT

2015-10-24 12:37 - 2015-10-24 12:37 - 00000000 ____D C:\Program Files (x86)\Windows NT

2015-10-24 12:37 - 2015-10-24 12:01 - 00000000 ____D C:\WINDOWS\system32\Sysprep

2015-10-24 12:24 - 2015-10-31 13:08 - 00000000 ____D C:\WINDOWS\CbsTemp

2015-10-24 12:11 - 2015-11-05 15:10 - 00830266 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2015-10-24 12:11 - 2015-11-04 01:44 - 00262144 ___SH C:\WINDOWS\system32\config\BBI

2015-10-24 12:11 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\servicing

2015-10-24 12:11 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\SMI

2015-10-24 12:11 - 2015-10-24 11:56 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM

2015-10-24 12:11 - 2015-10-24 11:54 - 00000000 __RHD C:\Users\Default

2015-10-24 12:11 - 2015-07-10 09:11 - 00000164 _____ C:\WINDOWS\system32\config\FP

2015-10-24 12:06 - 2015-10-24 12:06 - 00002060 _____ C:\Users\Administrator\AppData\Local\Application.xml

2015-10-24 12:04 - 2015-11-05 15:04 - 00000000 ____D C:\Users\Alex

2015-10-24 12:04 - 2015-11-05 15:02 - 00000000 ____D C:\Users\Administrator

2015-10-24 12:04 - 2015-10-24 12:58 - 00000000 ___RD C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-10-24 12:04 - 2015-10-24 12:49 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 __RSD C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell

2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 __RSD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell

2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 ___RD C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 ___RD C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2015-10-24 11:58 - 2015-10-24 11:58 - 34438088 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip

2015-10-24 11:57 - 2015-11-04 01:44 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin

2015-10-24 11:57 - 2015-10-24 11:57 - 00000000 ____D C:\WINDOWS\SysWOW64\sda

2015-10-24 11:57 - 2015-10-24 11:57 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM

2015-10-24 11:57 - 2015-10-24 11:57 - 00000000 ____D C:\WINDOWS\system32\DAX2

2015-10-24 11:57 - 2015-10-24 11:57 - 00000000 ____D C:\Program Files\Realtek

2015-10-24 11:57 - 2015-10-24 11:57 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies

2015-10-24 11:57 - 2015-10-24 11:57 - 00000000 ____D C:\Program Files\AMD

2015-10-24 11:57 - 2015-10-24 11:57 - 00000000 _____ C:\WINDOWS\ativpsrm.bin

2015-10-24 11:56 - 2015-10-24 11:56 - 00000000 ____D C:\Program Files\Common Files\Atheros

2015-10-24 11:56 - 2015-07-10 05:37 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

2015-10-24 11:53 - 2015-11-05 15:03 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2015-10-24 11:53 - 2015-10-29 18:56 - 00331624 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2015-10-24 11:08 - 2015-10-25 16:26 - 00000000 ___HD C:\$SysReset

2015-10-19 23:49 - 2015-10-19 23:49 - 00000000 ____D C:\Users\Alex\Desktop\com.koushikdutta.backup

2015-10-18 19:01 - 2015-10-18 19:01 - 00000000 ___RD C:\Users\Administrator\OneDrive

2015-10-18 04:16 - 2015-10-18 04:16 - 47795720 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 39721496 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 30774808 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 27544600 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 25320968 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 22327320 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 21643288 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys

2015-10-18 04:16 - 2015-10-18 04:16 - 15727112 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 14312456 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 12063600 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 10191296 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 09340592 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 08982472 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 08866480 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 08009392 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 07670208 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 07482080 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 03471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap

2015-10-18 04:16 - 2015-10-18 04:16 - 03437632 _____ C:\WINDOWS\system32\atiumd6a.cap

2015-10-18 04:16 - 2015-10-18 04:16 - 01472992 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 01256464 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 01218920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 01196072 _____ C:\WINDOWS\system32\amdocl_as64.exe

2015-10-18 04:16 - 2015-10-18 04:16 - 01070632 _____ C:\WINDOWS\system32\amdocl_ld64.exe

2015-10-18 04:16 - 2015-10-18 04:16 - 01004072 _____ C:\WINDOWS\SysWOW64\amdocl_as32.exe

2015-10-18 04:16 - 2015-10-18 04:16 - 00936968 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00936968 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00876040 _____ (AMD) C:\WINDOWS\system32\coinst_15.20.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00833800 _____ C:\WINDOWS\system32\amdicdxx.dat

2015-10-18 04:16 - 2015-10-18 04:16 - 00807464 _____ C:\WINDOWS\SysWOW64\amdocl_ld32.exe

2015-10-18 04:16 - 2015-10-18 04:16 - 00737410 _____ C:\WINDOWS\system32\atiicdxx.dat

2015-10-18 04:16 - 2015-10-18 04:16 - 00683544 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe

2015-10-18 04:16 - 2015-10-18 04:16 - 00675840 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys

2015-10-18 04:16 - 2015-10-18 04:16 - 00662032 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb

2015-10-18 04:16 - 2015-10-18 04:16 - 00662032 _____ C:\WINDOWS\system32\atiapfxx.blb

2015-10-18 04:16 - 2015-10-18 04:16 - 00472872 _____ C:\WINDOWS\system32\amdmiracast.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00451096 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00375832 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe

2015-10-18 04:16 - 2015-10-18 04:16 - 00341528 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe

2015-10-18 04:16 - 2015-10-18 04:16 - 00322868 _____ C:\WINDOWS\system32\ativvaxy_vi.dat

2015-10-18 04:16 - 2015-10-18 04:16 - 00321200 _____ C:\WINDOWS\system32\ativvaxy_vi_nd.dat

2015-10-18 04:16 - 2015-10-18 04:16 - 00307936 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdacpksd.sys

2015-10-18 04:16 - 2015-10-18 04:16 - 00257024 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe

2015-10-18 04:16 - 2015-10-18 04:16 - 00255808 _____ C:\WINDOWS\system32\ativvaxy_cz_nd.dat

2015-10-18 04:16 - 2015-10-18 04:16 - 00250884 _____ C:\WINDOWS\system32\ativvaxy_FJ.dat

2015-10-18 04:16 - 2015-10-18 04:16 - 00249088 _____ C:\WINDOWS\system32\ativvaxy_FJ_nd.dat

2015-10-18 04:16 - 2015-10-18 04:16 - 00243736 _____ C:\WINDOWS\system32\clinfo.exe

2015-10-18 04:16 - 2015-10-18 04:16 - 00234420 _____ C:\WINDOWS\system32\ativvaxy_cik.dat

2015-10-18 04:16 - 2015-10-18 04:16 - 00232752 _____ C:\WINDOWS\system32\ativvaxy_cik_nd.dat

2015-10-18 04:16 - 2015-10-18 04:16 - 00213520 _____ C:\WINDOWS\system32\amdgfxinfo64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00204952 _____ C:\WINDOWS\SysWOW64\ativvsvl.dat

2015-10-18 04:16 - 2015-10-18 04:16 - 00204952 _____ C:\WINDOWS\system32\ativvsvl.dat

2015-10-18 04:16 - 2015-10-18 04:16 - 00200200 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00199704 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00177344 _____ C:\WINDOWS\system32\ativce03.dat

2015-10-18 04:16 - 2015-10-18 04:16 - 00175648 _____ C:\WINDOWS\system32\amde31a.dat

2015-10-18 04:16 - 2015-10-18 04:16 - 00170496 _____ C:\WINDOWS\system32\atieah64.exe

2015-10-18 04:16 - 2015-10-18 04:16 - 00166912 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00163792 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00157144 _____ C:\WINDOWS\SysWOW64\ativvsva.dat

2015-10-18 04:16 - 2015-10-18 04:16 - 00157144 _____ C:\WINDOWS\system32\ativvsva.dat

Link to post
Share on other sites
FoXTeR

FoXTeR

Posted
  • Author
Posted
2015-10-18 04:16 - 2015-10-18 04:16 - 00153496 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00152600 _____ C:\WINDOWS\SysWOW64\atieah32.exe

2015-10-18 04:16 - 2015-10-18 04:16 - 00152072 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00144904 _____ C:\WINDOWS\system32\amdhdl64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00143088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00140240 _____ C:\WINDOWS\system32\samu_krnl_ci.sbin

2015-10-18 04:16 - 2015-10-18 04:16 - 00138832 _____ C:\WINDOWS\system32\samu_krnl_isv_ci.sbin

2015-10-18 04:16 - 2015-10-18 04:16 - 00138416 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00133632 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00130104 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00117640 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00113920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00112648 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00111872 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00111640 _____ C:\WINDOWS\system32\hsa-thunk64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00103424 _____ (Advanced Micro Devices) C:\WINDOWS\system32\DelayAPO.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00102912 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\AtihdWT6.sys

2015-10-18 04:16 - 2015-10-18 04:16 - 00100816 _____ C:\WINDOWS\system32\ativce02.dat

2015-10-18 04:16 - 2015-10-18 04:16 - 00099328 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00091144 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00089560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00088032 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00085512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00081200 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00081200 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00078360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00078360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00073744 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00072712 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00068120 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00066048 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00060952 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00060936 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00059928 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe

2015-10-18 04:16 - 2015-10-18 04:16 - 00057880 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00053760 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00049672 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00047664 _____ C:\WINDOWS\system32\kapp_ci.sbin

2015-10-18 04:16 - 2015-10-18 04:16 - 00043536 _____ C:\WINDOWS\system32\kapp_si.sbin

2015-10-18 04:16 - 2015-10-18 04:16 - 00038424 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00014344 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll

2015-10-18 04:16 - 2015-10-18 04:16 - 00012824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll

2015-10-18 04:15 - 2015-10-18 04:15 - 09890832 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll

2015-10-18 04:15 - 2015-10-18 04:15 - 00751632 _____ (Realsil Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtsPer.sys

2015-10-18 04:15 - 2015-10-18 04:15 - 00599240 _____ (Qualcomm Atheros) C:\WINDOWS\system32\Drivers\btfilter.sys

2015-10-18 04:15 - 2015-10-18 04:15 - 00246804 _____ C:\WINDOWS\system32\Drivers\AtherosBT.bin

2015-10-18 04:15 - 2015-10-18 04:15 - 00182784 _____ (Qualcomm®Atheros®) C:\WINDOWS\system32\BtContextMenu.dll

2015-10-18 04:15 - 2015-10-18 04:15 - 00181760 _____ (Qualcomm Atheros Communications Inc.) C:\WINDOWS\system32\btcoinst.dll

2015-10-18 04:15 - 2015-10-18 04:15 - 00083984 _____ (Realtek Semiconductor.) C:\WINDOWS\system32\RtCRX64.dll

2015-10-18 04:15 - 2015-10-18 04:15 - 00048092 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x01020200.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00046748 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x31010000.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00046268 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x11020100.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00046212 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x11020000.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00040684 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x31010000_ss01.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00038140 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x31010100.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00023532 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x01020201.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00014464 _____ (Western Digital Technologies) C:\WINDOWS\system32\Drivers\wdcsam64.sys

2015-10-18 04:15 - 2015-10-18 04:15 - 00001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0xf0.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x21.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x11.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001922 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010100_40.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001802 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020100_40_SS01.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001802 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020100_40_nf01.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001802 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020100_40.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001796 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020000_40.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_SS01.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_LV01.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0xf1.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x22.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x12.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x01.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001512 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010100_40_0x01.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001242 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x01.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001228 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x04.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001214 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x03.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001204 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x02.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001204 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001198 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_26.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00001192 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_26_0x01.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00000296 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x01.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00000278 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x04.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x03.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x02.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_26_0x01.dfu

2015-10-18 04:15 - 2015-10-18 04:15 - 00000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_26.dfu

2015-10-18 04:14 - 2015-10-18 04:14 - 72121872 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat

2015-10-18 04:14 - 2015-10-18 04:14 - 36778882 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT

2015-10-18 04:14 - 2015-10-18 04:14 - 14057256 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 13120760 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO3064.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 12986528 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO4064.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 07172920 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 07096192 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 06370480 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTAPO.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 06264640 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 05804772 _____ C:\WINDOWS\system32\Drivers\rtvienna.dat

2015-10-18 04:14 - 2015-10-18 04:14 - 05777200 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV2apo.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 05289952 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 04598528 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys

2015-10-18 04:14 - 2015-10-18 04:14 - 03299832 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 03271912 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 03232448 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 03091915 _____ C:\WINDOWS\system32\Drivers\rtkSSTsetting.dat

2015-10-18 04:14 - 2015-10-18 04:14 - 02965632 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 02927872 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 02823280 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO7064.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 02711296 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl

2015-10-18 04:14 - 2015-10-18 04:14 - 02617488 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 02492152 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 02423480 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 02190992 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 02110600 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 02050184 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01965816 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01959608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01780624 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01758976 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01601952 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01591064 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01508936 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01435152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01395768 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO6064.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01382240 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01334384 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01331336 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01211840 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01164336 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01122648 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 01003864 _____ (Nahimic Inc) C:\WINDOWS\system32\NahimicAPONSControl.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00998032 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00965032 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00961024 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00953728 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00931624 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00923752 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00888480 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00874736 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00873472 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00812408 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSstCApoPropPage.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00749776 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00743968 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00727440 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00708320 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00699072 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00678192 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00677680 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00645464 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00618192 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00596120 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00574248 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00569440 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.DLL

2015-10-18 04:14 - 2015-10-18 04:14 - 00532384 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00514528 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00504312 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00500560 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00467168 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00448592 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00447728 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00445408 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00441272 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00428232 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00387320 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00381416 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00362064 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00358272 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00343712 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00341152 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00341152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00340648 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00330568 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00327464 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00310432 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00272720 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00259288 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00253904 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00253872 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00252880 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00231920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00224264 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaemaxapo64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00221976 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00214840 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00209544 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00195192 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00172584 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00166208 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00158704 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00151792 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00134208 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00122328 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00118600 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00118600 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00110992 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00105312 _____ C:\WINDOWS\system32\audioLibVc.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00090920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00088352 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00088328 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00084624 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00083632 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00075544 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00023704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll

2015-10-18 04:13 - 2015-10-06 03:03 - 16708608 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2015-10-18 04:13 - 2015-10-06 02:46 - 13027840 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2015-10-18 04:13 - 2015-10-01 04:01 - 01294352 ____N (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2015-10-18 04:13 - 2015-10-01 04:00 - 08020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2015-10-18 04:13 - 2015-09-25 04:01 - 02573768 ____N (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll

2015-10-18 04:13 - 2015-09-25 03:56 - 22322624 ____N (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2015-10-18 04:13 - 2015-09-25 03:33 - 01997336 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll

2015-10-18 04:13 - 2015-09-25 03:26 - 20858360 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2015-10-18 04:13 - 2015-09-25 03:09 - 12504064 ____N (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2015-10-18 04:13 - 2015-09-25 03:07 - 01276416 ____N (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll

2015-10-18 04:13 - 2015-09-25 03:04 - 00826880 ____N (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2015-10-18 04:13 - 2015-09-25 03:03 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll

2015-10-18 04:13 - 2015-09-25 03:02 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2015-10-18 04:13 - 2015-09-25 03:02 - 00949248 ____N (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2015-10-18 04:13 - 2015-09-25 03:01 - 04792320 ____N (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2015-10-18 04:13 - 2015-09-25 03:01 - 03586560 ____N (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2015-10-18 04:13 - 2015-09-25 03:00 - 01423872 ____N (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll

2015-10-18 04:13 - 2015-09-25 03:00 - 00856576 ____N (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll

2015-10-18 04:13 - 2015-09-25 02:59 - 01205248 ____N (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll

2015-10-18 04:13 - 2015-09-25 02:58 - 01871360 ____N (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2015-10-18 04:13 - 2015-09-25 02:38 - 03580416 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2015-10-18 04:13 - 2015-09-25 02:37 - 00613376 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll

2015-10-18 04:13 - 2015-09-25 02:36 - 11262976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2015-10-18 04:13 - 2015-09-25 02:36 - 05454848 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2015-10-18 04:13 - 2015-09-25 02:34 - 00928256 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll

2015-10-18 04:13 - 2015-09-25 02:32 - 01594368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2015-10-18 04:13 - 2015-09-17 06:50 - 02464216 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2015-10-18 04:13 - 2015-09-17 06:50 - 01563392 ____N (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll

2015-10-18 04:13 - 2015-09-17 06:49 - 06487248 ____N (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2015-10-18 04:13 - 2015-09-17 06:48 - 02824248 ____N (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2015-10-18 04:13 - 2015-09-17 06:48 - 02494712 ____N C:\WINDOWS\system32\CoreUIComponents.dll

2015-10-18 04:13 - 2015-09-17 06:48 - 02432336 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2015-10-18 04:13 - 2015-09-17 06:48 - 01983824 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2015-10-18 04:13 - 2015-09-17 06:48 - 00809352 ____N (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2015-10-18 04:13 - 2015-09-17 06:48 - 00784136 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll

2015-10-18 04:13 - 2015-09-17 06:43 - 00966416 ____N (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll

2015-10-18 04:13 - 2015-09-17 06:37 - 01295712 ____N (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll

2015-10-18 04:13 - 2015-09-17 06:28 - 05120056 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2015-10-18 04:13 - 2015-09-17 06:28 - 02154808 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2015-10-18 04:13 - 2015-09-17 06:27 - 01766952 ____N C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2015-10-18 04:13 - 2015-09-17 06:26 - 02446648 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll

2015-10-18 04:13 - 2015-09-17 06:26 - 00646672 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll

2015-10-18 04:13 - 2015-09-17 06:20 - 00764416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll

2015-10-18 04:13 - 2015-09-17 06:06 - 00467968 ____N (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll

2015-10-18 04:13 - 2015-09-17 06:05 - 02226688 ____N (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2015-10-18 04:13 - 2015-09-17 06:04 - 07569408 ____N (Microsoft Corporation) C:\WINDOWS\system32\mos.dll

2015-10-18 04:13 - 2015-09-17 05:57 - 02228736 ____N (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll

2015-10-18 04:13 - 2015-09-17 05:56 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2015-10-18 04:13 - 2015-09-17 05:55 - 02236416 ____N (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2015-10-18 04:13 - 2015-09-17 05:55 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll

2015-10-18 04:13 - 2015-09-17 05:54 - 03781120 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2015-10-18 04:13 - 2015-09-17 05:53 - 07055872 ____N (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll

2015-10-18 04:13 - 2015-09-17 05:52 - 01181696 ____N (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll

2015-10-18 04:13 - 2015-09-17 05:51 - 02660864 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2015-10-18 04:13 - 2015-09-17 05:51 - 01203712 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll

2015-10-18 04:13 - 2015-09-17 05:49 - 02740224 ____N (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2015-10-18 04:13 - 2015-09-17 05:49 - 01290240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll

2015-10-18 04:13 - 2015-09-17 05:49 - 01010176 ____N (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2015-10-18 04:13 - 2015-09-17 05:48 - 02093056 ____N (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll

2015-10-18 04:13 - 2015-09-17 05:45 - 01331200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll

2015-10-18 04:13 - 2015-09-17 05:43 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll

2015-10-18 04:13 - 2015-09-17 05:40 - 06101504 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll

2015-10-18 04:13 - 2015-09-17 05:40 - 01162240 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll

2015-10-18 04:13 - 2015-09-17 05:38 - 00058368 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll

2015-10-18 04:13 - 2015-09-17 05:35 - 05079552 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll

2015-10-18 04:13 - 2015-09-17 05:35 - 02207232 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2015-10-18 04:13 - 2015-09-17 05:35 - 01820160 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll

2015-10-18 04:13 - 2015-09-17 05:35 - 00828928 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll

2015-10-18 04:13 - 2015-09-17 05:29 - 01104384 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll

2015-10-18 04:13 - 2015-09-17 05:26 - 00899584 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll

2015-10-18 04:12 - 2015-10-10 07:12 - 00078528 ____N (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2015-10-18 04:12 - 2015-10-01 04:01 - 01123400 ____N (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2015-10-18 04:12 - 2015-10-01 04:01 - 01018568 ____N (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2015-10-18 04:12 - 2015-10-01 04:01 - 00858408 ____N (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2015-10-18 04:12 - 2015-10-01 03:03 - 00757760 ____N (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll

2015-10-18 04:12 - 2015-09-25 04:01 - 00498016 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys

2015-10-18 04:12 - 2015-09-25 03:52 - 00980832 ____N (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi

2015-10-18 04:12 - 2015-09-25 03:11 - 00257024 ____N (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll

2015-10-18 04:12 - 2015-09-25 03:11 - 00223232 ____N (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll

2015-10-18 04:12 - 2015-09-25 03:04 - 00771072 ____N (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2015-10-18 04:12 - 2015-09-25 03:03 - 00576000 ____N (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2015-10-18 04:12 - 2015-09-25 03:02 - 00689152 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll

2015-10-18 04:12 - 2015-09-25 03:00 - 01382400 ____N (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2015-10-18 04:12 - 2015-09-25 03:00 - 00752640 ____N (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll

2015-10-18 04:12 - 2015-09-25 02:59 - 00720896 ____N (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll

2015-10-18 04:12 - 2015-09-25 02:59 - 00685568 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll

2015-10-18 04:12 - 2015-09-25 02:59 - 00590336 ____N (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll

2015-10-18 04:12 - 2015-09-25 02:59 - 00288256 ____N (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll

2015-10-18 04:12 - 2015-09-25 02:59 - 00163840 ____N (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll

2015-10-18 04:12 - 2015-09-25 02:47 - 00195584 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll

2015-10-18 04:12 - 2015-09-25 02:47 - 00172032 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll

2015-10-18 04:12 - 2015-09-25 02:38 - 00650240 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2015-10-18 04:12 - 2015-09-25 02:38 - 00574464 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll

2015-10-18 04:12 - 2015-09-25 02:38 - 00504320 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2015-10-18 04:12 - 2015-09-25 02:37 - 00766976 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2015-10-18 04:12 - 2015-09-25 02:37 - 00480256 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll

2015-10-18 04:12 - 2015-09-25 02:34 - 00625152 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll

2015-10-18 04:12 - 2015-09-25 02:34 - 00579584 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll

2015-10-18 04:12 - 2015-09-25 02:34 - 00557568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll

2015-10-18 04:12 - 2015-09-25 02:34 - 00525312 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll

2015-10-18 04:12 - 2015-09-25 02:33 - 00131072 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll

2015-10-18 04:12 - 2015-09-25 02:32 - 00466432 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll

2015-10-18 04:12 - 2015-09-19 05:14 - 00102304 ____N (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll

2015-10-18 04:12 - 2015-09-17 06:50 - 00099664 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys

2015-10-18 04:12 - 2015-09-17 06:50 - 00088384 ____N (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll

2015-10-18 04:12 - 2015-09-17 06:49 - 01563472 ____N (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll

2015-10-18 04:12 - 2015-09-17 06:49 - 00894256 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys

2015-10-18 04:12 - 2015-09-17 06:49 - 00553808 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2015-10-18 04:12 - 2015-09-17 06:49 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2015-10-18 04:12 - 2015-09-17 06:48 - 02156400 ____N (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll

2015-10-18 04:12 - 2015-09-17 06:48 - 00584656 ____N (Microsoft Corporation) C:\WINDOWS\system32\mf.dll

2015-10-18 04:12 - 2015-09-17 06:48 - 00555768 ____N (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll

2015-10-18 04:12 - 2015-09-17 06:48 - 00537080 ____N (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll

2015-10-18 04:12 - 2015-09-17 06:48 - 00516448 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS

2015-10-18 04:12 - 2015-09-17 06:48 - 00505696 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2015-10-18 04:12 - 2015-09-17 06:48 - 00476760 ____N (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll

2015-10-18 04:12 - 2015-09-17 06:48 - 00406864 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS

2015-10-18 04:12 - 2015-09-17 06:48 - 00395088 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2015-10-18 04:12 - 2015-09-17 06:48 - 00332624 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys

2015-10-18 04:12 - 2015-09-17 06:48 - 00278352 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys

2015-10-18 04:12 - 2015-09-17 06:48 - 00243760 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2015-10-18 04:12 - 2015-09-17 06:44 - 00781976 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll

2015-10-18 04:12 - 2015-09-17 06:37 - 01168736 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2015-10-18 04:12 - 2015-09-17 06:28 - 01357888 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll

2015-10-18 04:12 - 2015-09-17 06:28 - 00441168 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2015-10-18 04:12 - 2015-09-17 06:28 - 00407608 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2015-10-18 04:12 - 2015-09-17 06:28 - 00074880 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll

2015-10-18 04:12 - 2015-09-17 06:27 - 00454512 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll

2015-10-18 04:12 - 2015-09-17 06:26 - 01895568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll

2015-10-18 04:12 - 2015-09-17 06:26 - 00508248 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll

2015-10-18 04:12 - 2015-09-17 06:26 - 00434376 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll

2015-10-18 04:12 - 2015-09-17 06:26 - 00428128 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll

2015-10-18 04:12 - 2015-09-17 06:21 - 00658528 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll

2015-10-18 04:12 - 2015-09-17 06:11 - 00160256 ____N (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll

2015-10-18 04:12 - 2015-09-17 06:10 - 00169984 ____N (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll

2015-10-18 04:12 - 2015-09-17 06:09 - 00269312 ____N (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll

2015-10-18 04:12 - 2015-09-17 06:09 - 00143360 ____N (Microsoft Corporation) C:\WINDOWS\system32\provops.dll

2015-10-18 04:12 - 2015-09-17 06:08 - 00494592 ____N (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll

2015-10-18 04:12 - 2015-09-17 06:08 - 00053760 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Speech.Pal.dll

2015-10-18 04:12 - 2015-09-17 06:08 - 00026624 ____N (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe

2015-10-18 04:12 - 2015-09-17 06:06 - 00690688 ____N (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll

2015-10-18 04:12 - 2015-09-17 06:06 - 00149504 ____N (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll

2015-10-18 04:12 - 2015-09-17 06:05 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll

2015-10-18 04:12 - 2015-09-17 06:04 - 00910848 ____N (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll

2015-10-18 04:12 - 2015-09-17 06:04 - 00504320 ____N (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll

2015-10-18 04:12 - 2015-09-17 06:03 - 00267776 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll

2015-10-18 04:12 - 2015-09-17 06:03 - 00187904 ____N (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll

2015-10-18 04:12 - 2015-09-17 06:03 - 00154624 ____N (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe

2015-10-18 04:12 - 2015-09-17 06:03 - 00088064 ____N (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll

2015-10-18 04:12 - 2015-09-17 06:03 - 00083968 ____N (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe

2015-10-18 04:12 - 2015-09-17 06:02 - 00168960 ____N (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll

2015-10-18 04:12 - 2015-09-17 06:02 - 00068096 ____N (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll

2015-10-18 04:12 - 2015-09-17 06:00 - 00446976 ____N (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll

2015-10-18 04:12 - 2015-09-17 06:00 - 00106496 ____N (Microsoft Corporation) C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll

2015-10-18 04:12 - 2015-09-17 05:58 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll

2015-10-18 04:12 - 2015-09-17 05:57 - 00403456 ____N (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll

2015-10-18 04:12 - 2015-09-17 05:57 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll

2015-10-18 04:12 - 2015-09-17 05:57 - 00137728 ____N (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll

2015-10-18 04:12 - 2015-09-17 05:56 - 00521728 ____N (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll

2015-10-18 04:12 - 2015-09-17 05:56 - 00317440 ____N (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll

2015-10-18 04:12 - 2015-09-17 05:55 - 00671232 ____N (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll

2015-10-18 04:12 - 2015-09-17 05:55 - 00366592 ____N (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2015-10-18 04:12 - 2015-09-17 05:55 - 00346112 ____N (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll

2015-10-18 04:12 - 2015-09-17 05:55 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll

2015-10-18 04:12 - 2015-09-17 05:55 - 00121856 ____N (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll

2015-10-18 04:12 - 2015-09-17 05:55 - 00120832 ____N (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe

2015-10-18 04:12 - 2015-09-17 05:55 - 00073728 ____N (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll

2015-10-18 04:12 - 2015-09-17 05:54 - 00780288 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll

2015-10-18 04:12 - 2015-09-17 05:54 - 00324096 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2015-10-18 04:12 - 2015-09-17 05:52 - 06572032 ____N (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll

2015-10-18 04:12 - 2015-09-17 05:52 - 01216512 ____N (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll

2015-10-18 04:12 - 2015-09-17 05:52 - 00856576 ____N (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll

2015-10-18 04:12 - 2015-09-17 05:52 - 00591360 ____N (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll

2015-10-18 04:12 - 2015-09-17 05:52 - 00570880 ____N (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll

2015-10-18 04:12 - 2015-09-17 05:52 - 00465920 ____N (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll

2015-10-18 04:12 - 2015-09-17 05:52 - 00371712 ____N (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll

2015-10-18 04:12 - 2015-09-17 05:52 - 00204800 ____N (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll

2015-10-18 04:12 - 2015-09-17 05:52 - 00162304 ____N (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll

2015-10-18 04:12 - 2015-09-17 05:51 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll

2015-10-18 04:12 - 2015-09-17 05:51 - 00359936 ____N (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll

2015-10-18 04:12 - 2015-09-17 05:51 - 00145920 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll

2015-10-18 04:12 - 2015-09-17 05:50 - 00929280 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2015-10-18 04:12 - 2015-09-17 05:50 - 00421888 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll

2015-10-18 04:12 - 2015-09-17 05:50 - 00320000 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys

2015-10-18 04:12 - 2015-09-17 05:50 - 00312832 ____N (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll

2015-10-18 04:12 - 2015-09-17 05:50 - 00221184 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationPeWiFi.dll

2015-10-18 04:12 - 2015-09-17 05:50 - 00204288 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationPeCell.dll

2015-10-18 04:12 - 2015-09-17 05:50 - 00036352 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys

2015-10-18 04:12 - 2015-09-17 05:49 - 00439296 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationWebproxy.dll

2015-10-18 04:12 - 2015-09-17 05:49 - 00342016 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationGeofences.dll

2015-10-18 04:12 - 2015-09-17 05:49 - 00268800 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll

2015-10-18 04:12 - 2015-09-17 05:49 - 00215552 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationCrowdsource.dll

2015-10-18 04:12 - 2015-09-17 05:49 - 00176640 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationPeIP.dll

2015-10-18 04:12 - 2015-09-17 05:49 - 00095744 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationWiFiAdapter.dll

2015-10-18 04:12 - 2015-09-17 05:49 - 00041472 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll

2015-10-18 04:12 - 2015-09-17 05:48 - 00517632 ____N (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2015-10-18 04:12 - 2015-09-17 05:48 - 00408064 ____N (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll

2015-10-18 04:12 - 2015-09-17 05:48 - 00387584 ____N (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll

2015-10-18 04:12 - 2015-09-17 05:48 - 00347136 ____N (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll

2015-10-18 04:12 - 2015-09-17 05:48 - 00273920 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll

2015-10-18 04:12 - 2015-09-17 05:47 - 00513536 ____N (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll

2015-10-18 04:12 - 2015-09-17 05:47 - 00371712 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll

2015-10-18 04:12 - 2015-09-17 05:47 - 00186880 ____N (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll

2015-10-18 04:12 - 2015-09-17 05:46 - 00928256 ____N (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll

2015-10-18 04:12 - 2015-09-17 05:46 - 00621056 ____N (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2015-10-18 04:12 - 2015-09-17 05:46 - 00414208 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2015-10-18 04:12 - 2015-09-17 05:46 - 00224256 ____N (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll

2015-10-18 04:12 - 2015-09-17 05:46 - 00118272 ____N (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll

2015-10-18 04:12 - 2015-09-17 05:46 - 00084480 ____N (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe

2015-10-18 04:12 - 2015-09-17 05:46 - 00079872 ____N (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll

2015-10-18 04:12 - 2015-09-17 05:46 - 00030208 ____N (Microsoft Corporation) C:\WINDOWS\system32\syncmlhook.dll

2015-10-18 04:12 - 2015-09-17 05:45 - 00869376 ____N (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll

2015-10-18 04:12 - 2015-09-17 05:45 - 00832512 ____N (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll

2015-10-18 04:12 - 2015-09-17 05:45 - 00193024 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll

2015-10-18 04:12 - 2015-09-17 05:44 - 01844736 ____N (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll

2015-10-18 04:12 - 2015-09-17 05:44 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll

2015-10-18 04:12 - 2015-09-17 05:44 - 00526336 ____N (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2015-10-18 04:12 - 2015-09-17 05:44 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll

2015-10-18 04:12 - 2015-09-17 05:43 - 00378368 ____N (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll

2015-10-18 04:12 - 2015-09-17 05:43 - 00328704 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll

2015-10-18 04:12 - 2015-09-17 05:43 - 00185344 ____N (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll

2015-10-18 04:12 - 2015-09-17 05:41 - 00217088 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll

2015-10-18 04:12 - 2015-09-17 05:39 - 00587264 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll

2015-10-18 04:12 - 2015-09-17 05:39 - 00247808 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2015-10-18 04:12 - 2015-09-17 05:37 - 00454656 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll

2015-10-18 04:12 - 2015-09-17 05:36 - 01171456 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll

2015-10-18 04:12 - 2015-09-17 05:34 - 00253440 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll

2015-10-18 04:12 - 2015-09-17 05:32 - 00336384 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll

2015-10-18 04:12 - 2015-09-17 05:32 - 00313856 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll

2015-10-18 04:12 - 2015-09-17 05:32 - 00195072 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll

2015-10-18 04:12 - 2015-09-17 05:31 - 00268800 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll

2015-10-18 04:12 - 2015-09-17 05:30 - 00311808 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2015-10-18 04:12 - 2015-09-17 05:29 - 00701952 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll

2015-10-18 04:12 - 2015-09-17 05:29 - 00677888 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll

2015-10-18 04:12 - 2015-09-17 05:28 - 00473088 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll

2015-10-18 04:12 - 2015-09-17 05:16 - 00512000 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2015-10-18 01:04 - 2015-10-18 04:17 - 00000000 ____D C:\AMD

2015-10-18 00:49 - 2015-11-05 15:06 - 00000000 ___RD C:\Users\Alex\OneDrive

2015-10-16 00:08 - 2015-10-16 00:08 - 00625848 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp140.dll

2015-10-16 00:08 - 2015-10-16 00:08 - 00381128 _____ (Microsoft Corporation) C:\WINDOWS\system32\vccorlib140.dll

2015-10-16 00:08 - 2015-10-16 00:08 - 00323792 _____ (Microsoft Corporation) C:\WINDOWS\system32\concrt140.dll

2015-10-16 00:08 - 2015-10-16 00:08 - 00079544 _____ (Microsoft Corporation) C:\WINDOWS\system32\vcruntime140.dll

2015-10-15 22:17 - 2015-10-15 22:17 - 00430264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp140.dll

2015-10-15 22:17 - 2015-10-15 22:17 - 00257736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vccorlib140.dll

2015-10-15 22:17 - 2015-10-15 22:17 - 00234192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\concrt140.dll

2015-10-15 22:17 - 2015-10-15 22:17 - 00075960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vcruntime140.dll

2015-10-07 05:16 - 2015-10-07 05:16 - 00142976 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys

 

==================== One Month Modified files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2015-10-24 12:51 - 2015-09-08 03:40 - 00000000 __SHD C:\Recovery

2015-10-24 12:32 - 2015-07-10 03:21 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthmodem.sys

 

==================== Files in the root of some directories =======

 

2015-10-28 23:27 - 2015-10-28 23:27 - 0000218 _____ () C:\Users\Alex\AppData\Local\recently-used.xbel

2015-10-24 11:58 - 2015-10-24 11:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

 

==================== Bamital & volsnap =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\wininit.exe => File is digitally signed

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\dnsapi.dll => File is digitally signed

C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

 

 

LastRegBack: 2015-11-05 11:13
Link to post
Share on other sites
FoXTeR

FoXTeR

Posted
  • Author
Posted
Additional scan result of Farbar Recovery Scan Tool (x64) Version:04-11-2015

Ran by Alex (2015-11-05 15:56:31)

Running from C:\Users\Alex\Downloads

Windows 10 Home (X64) (2015-10-24 12:07:21)

Boot Mode: Normal

==========================================================

 

 

==================== Accounts: =============================

 

Administrator (S-1-5-21-1261255005-3633135201-1909299041-500 - Administrator - Disabled) => C:\Users\Administrator

Alex (S-1-5-21-1261255005-3633135201-1909299041-1001 - Administrator - Enabled) => C:\Users\Alex

DefaultAccount (S-1-5-21-1261255005-3633135201-1909299041-503 - Limited - Disabled)

Guest (S-1-5-21-1261255005-3633135201-1909299041-501 - Limited - Disabled)

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: ESET Smart Security 9.0.318.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: ESET Smart Security 9.0.318.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

FW: ESET Personal firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

 

==================== Installed Programs ======================

 

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

CCleaner (HKLM\...\CCleaner) (Version: 5.11 - Piriform)

ESET Smart Security (HKLM\...\{11994064-51F2-45DF-A83E-539B4BFE3F5A}) (Version: 9.0.318.0 - ESET, spol. s r.o.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)

Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden

Malwarebytes Anti-Exploit version 1.07.1.1015 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.07.1.1015 - Malwarebytes)

Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)

Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.6001.1034 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 42.0 (x86 en-GB) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 en-GB)) (Version: 42.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0 - Mozilla)

Mozilla Thunderbird 38.3.0 (x86 en-GB) (HKLM-x32\...\Mozilla Thunderbird 38.3.0 (x86 en-GB)) (Version: 38.3.0 - Mozilla)

Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6001.1034 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (Version: 16.0.6001.1034 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6001.1034 - Microsoft Corporation) Hidden

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7564 - Realtek Semiconductor Corp.)

Spybot Anti-Beacon (HKLM-x32\...\{419A7FCF-93E1-474D-BFE9-987CF3F90C88}_is1) (Version: 1.4 - Safer-Networking Ltd.)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)

 

==================== Custom CLSID (Whitelisted): ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

CustomCLSID: HKU\S-1-5-21-1261255005-3633135201-1909299041-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileCoAuth.exe (Microsoft Corporation)

 

==================== Restore Points =========================

 

04-11-2015 03:29:37 Removed TorGuard Proxy

05-11-2015 15:07:52 Removed Google Drive

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2015-10-24 12:38 - 2015-10-24 13:07 - 00002214 ____R C:\WINDOWS\system32\Drivers\etc\hosts

 

127.0.0.1 choice.microsoft.com

127.0.0.1 choice.microsoft.com.nstac.net

127.0.0.1 df.telemetry.microsoft.com

127.0.0.1 oca.telemetry.microsoft.com

127.0.0.1 oca.telemetry.microsoft.com.nsatc.net

127.0.0.1 redir.metaservices.microsoft.com

127.0.0.1 reports.wes.df.telemetry.microsoft.com

127.0.0.1 services.wes.df.telemetry.microsoft.com

127.0.0.1 settings-sandbox.data.microsoft.com

127.0.0.1 settings-win.data.microsoft.com

127.0.0.1 sqm.df.telemetry.microsoft.com

127.0.0.1 sqm.telemetry.microsoft.com

127.0.0.1 sqm.telemetry.microsoft.com.nsatc.net

127.0.0.1 telecommand.telemetry.microsoft.com

127.0.0.1 telecommand.telemetry.microsoft.com.nsatc.net

127.0.0.1 telemetry.appex.bing.net

127.0.0.1 telemetry.microsoft.com

127.0.0.1 telemetry.urs.microsoft.com

127.0.0.1 vortex-sandbox.data.microsoft.com

127.0.0.1 vortex-win.data.microsoft.com

127.0.0.1 vortex.data.microsoft.com

127.0.0.1 watson.telemetry.microsoft.com

127.0.0.1 watson.telemetry.microsoft.com.nsatc.net

127.0.0.1 watson.ppe.telemetry.microsoft.com

127.0.0.1 wes.df.telemetry.microsoft.com

 

==================== Scheduled Tasks (Whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

Task: {10513C3F-9129-46A9-87A1-D84173E298E4} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-10-02] (Microsoft Corporation)

Task: {17C452B3-F796-4C94-9194-8EDB0D7992F2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-04] (Google Inc.)

Task: {1F8CDCA8-EC24-40C1-B192-F35EC33609F0} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-10-15] (Microsoft Corporation)

Task: {478303D5-5306-4D16-ADF1-0DF344736C42} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-10-19] (Piriform Ltd)

Task: {CFFB6C60-837F-40FA-8B47-09113739C107} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-10-15] (Microsoft Corporation)

Task: {D600AF9F-D51C-4C51-8AD4-30EFCBCFA1E7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-04] (Google Inc.)

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

 

==================== Loaded Modules (Whitelisted) ==============

 

2015-07-10 03:33 - 2015-07-10 03:33 - 00028160 ____N () C:\WINDOWS\SYSTEM32\efsext.dll

2015-09-10 05:12 - 2015-09-10 05:12 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll

2015-10-27 12:59 - 2015-10-15 20:45 - 00161448 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll

2015-10-18 04:13 - 2015-09-17 06:48 - 02494712 ____N () C:\WINDOWS\system32\CoreUIComponents.dll

2015-10-18 04:13 - 2015-09-17 06:48 - 02494712 ____N () C:\WINDOWS\System32\CoreUIComponents.dll

2015-10-27 13:04 - 2015-10-27 13:04 - 08901800 _____ () C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\1033\GrooveIntlResource.dll

2015-10-18 04:12 - 2015-09-17 05:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

2015-07-10 03:13 - 2015-07-10 03:13 - 00143360 ____N () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll

2015-10-18 04:13 - 2015-09-17 05:44 - 06569472 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2015-10-18 04:12 - 2015-09-17 05:42 - 00471040 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2015-10-18 04:12 - 2015-09-17 05:42 - 01808384 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2015-10-18 04:13 - 2015-09-17 05:43 - 02274816 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2015-10-18 04:14 - 2015-10-18 04:14 - 00133184 _____ () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe

2015-11-05 15:11 - 2015-10-20 14:55 - 01908040 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libglesv2.dll

2015-11-05 15:11 - 2015-10-20 14:55 - 00093512 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libegl.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 00143296 _____ () C:\Program Files (x86)\VideoLAN\VLC\libvlc.dll

2015-04-13 14:00 - 2015-04-13 14:00 - 02631616 _____ () C:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 00554944 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll

2015-04-13 14:00 - 2015-04-13 14:00 - 00041920 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libdirectsound_plugin.dll

2015-04-13 14:00 - 2015-04-13 14:00 - 00039872 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00086464 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll

2015-04-13 13:56 - 2015-04-13 13:56 - 00070675 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirectdraw_plugin.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 02158528 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 00114112 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 00245184 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 00089536 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libvdr_plugin.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 00055744 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 00072128 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libsmooth_plugin.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 00593344 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libhttplive_plugin.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 00771520 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libdash_plugin.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 00131520 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 00052672 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\librar_plugin.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 00023488 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\librecord_plugin.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 00145856 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 01566656 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00332736 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 01264064 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00024512 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\control\libwin_msg_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00069568 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00048576 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\control\libwin_hotkeys_plugin.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 00242112 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll

2015-04-13 14:00 - 2015-04-13 14:00 - 12001728 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll

2015-04-13 13:57 - 2015-04-13 13:57 - 00108992 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00046528 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll

2015-04-13 14:00 - 2015-04-13 14:00 - 00261056 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libjpeg_plugin.dll

2015-04-13 14:00 - 2015-04-13 14:00 - 00027072 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll

2015-04-13 14:00 - 2015-04-13 14:00 - 00304576 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 01291200 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00754624 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll

2015-04-13 14:00 - 2015-04-13 14:00 - 00344512 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll

2015-04-13 14:00 - 2015-04-13 14:00 - 00028608 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00036800 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00052160 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsubstx3g_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00456128 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll

2015-04-13 14:00 - 2015-04-13 14:00 - 00035776 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libg711_plugin.dll

2015-04-13 14:00 - 2015-04-13 14:00 - 00024512 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00157632 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll

2015-04-13 14:00 - 2015-04-13 14:00 - 01549248 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00356288 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll

2015-04-13 14:00 - 2015-04-13 14:00 - 00028096 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll

2015-04-13 14:00 - 2015-04-13 14:00 - 00028096 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00031680 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00363456 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libopus_plugin.dll

2015-04-13 14:00 - 2015-04-13 14:00 - 00121792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00028608 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 13522368 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00772544 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00038848 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_sse2_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00030144 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_mmx_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00022464 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat_mixer_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00702400 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libswscale_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00027072 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00036800 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_sse2_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00140224 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00125376 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_sse2_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00176576 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00064448 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_mmx_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00067520 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00028608 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_mmx_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 01504704 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00027584 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00028096 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00024512 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00022464 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00030656 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00022976 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00027584 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00029632 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00029120 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00022464 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00037312 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00024512 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll

2015-04-13 13:58 - 2015-04-13 13:58 - 00024000 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00034240 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00023488 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll

2015-04-13 13:59 - 2015-04-13 13:59 - 00022976 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll

 

==================== Alternate Data Streams (Whitelisted) =========

 

(If an entry is included in the fixlist, only the ADS will be removed.)

 

 

==================== Safe Mode (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

 

==================== EXE Association (Whitelisted) ===============

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

 

 

==================== Internet Explorer trusted/restricted ===============

 

(If an entry is included in the fixlist, it will be removed from the registry.)

 

 

==================== Other Areas ============================

 

(Currently there is no automatic fix for this section.)

 

HKU\S-1-5-21-1261255005-3633135201-1909299041-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

DNS Servers: 8.8.8.8 - 8.8.4.4

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

(Currently there is no automatic fix for this section.)

 

HKU\S-1-5-21-1261255005-3633135201-1909299041-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk"

 

==================== FirewallRules (Whitelisted) ===============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{DACC57F9-E7B1-4038-90FF-EE381CE66398}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe

FirewallRules: [{BF2490B2-D861-4C63-8691-C2403EBC7150}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{AC3B77D5-2814-47D7-8D47-75C9FD528847}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{A301FE8C-F6AC-4323-9E81-521854182141}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

 

==================== Faulty Device Manager Devices =============

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (11/05/2015 03:09:25 PM) (Source: ESENT) (EventID: 413) (User: )

Description: SettingSyncHost (6900) Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032.

 

Error: (11/05/2015 03:09:25 PM) (Source: ESENT) (EventID: 488) (User: )

Description: SettingSyncHost (6900) An attempt to create the file "C:\WINDOWS\system32\edbtmp.log" failed with system error 5 (0x00000005): "Access is denied. ".  The create file operation will fail with error -1032 (0xfffffbf8).

 

Error: (11/05/2015 03:09:14 PM) (Source: ESENT) (EventID: 413) (User: )

Description: SettingSyncHost (6900) Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032.

 

Error: (11/05/2015 03:09:14 PM) (Source: ESENT) (EventID: 488) (User: )

Description: SettingSyncHost (6900) An attempt to create the file "C:\WINDOWS\system32\edbtmp.log" failed with system error 5 (0x00000005): "Access is denied. ".  The create file operation will fail with error -1032 (0xfffffbf8).

 

Error: (11/05/2015 03:09:04 PM) (Source: ESENT) (EventID: 413) (User: )

Description: SettingSyncHost (6900) Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032.

 

Error: (11/05/2015 03:09:04 PM) (Source: ESENT) (EventID: 488) (User: )

Description: SettingSyncHost (6900) An attempt to create the file "C:\WINDOWS\system32\edbtmp.log" failed with system error 5 (0x00000005): "Access is denied. ".  The create file operation will fail with error -1032 (0xfffffbf8).

 

Error: (11/05/2015 03:08:54 PM) (Source: ESENT) (EventID: 413) (User: )

Description: SettingSyncHost (6900) Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032.

 

Error: (11/05/2015 03:08:54 PM) (Source: ESENT) (EventID: 488) (User: )

Description: SettingSyncHost (6900) An attempt to create the file "C:\WINDOWS\system32\edbtmp.log" failed with system error 5 (0x00000005): "Access is denied. ".  The create file operation will fail with error -1032 (0xfffffbf8).

 

Error: (11/05/2015 03:08:43 PM) (Source: ESENT) (EventID: 413) (User: )

Description: SettingSyncHost (6900) Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032.

 

Error: (11/05/2015 03:08:43 PM) (Source: ESENT) (EventID: 488) (User: )

Description: SettingSyncHost (6900) An attempt to create the file "C:\WINDOWS\system32\edbtmp.log" failed with system error 5 (0x00000005): "Access is denied. ".  The create file operation will fail with error -1032 (0xfffffbf8).

 

 

System errors:

=============

Error: (11/05/2015 02:53:44 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-BLPCOLT)

Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

 

Error: (11/05/2015 02:53:44 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-BLPCOLT)

Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

 

Error: (11/05/2015 02:53:44 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-BLPCOLT)

Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

 

Error: (11/05/2015 02:53:43 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)

Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

 

Error: (11/05/2015 02:53:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The User Data Access_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

 

Error: (11/05/2015 02:53:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The User Data Storage_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

 

Error: (11/05/2015 02:53:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Contact Data_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

 

Error: (11/05/2015 02:53:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Sync Host_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

 

Error: (11/05/2015 02:28:00 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)

Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

 

Error: (11/05/2015 02:28:00 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)

Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

 

 

==================== Memory info =========================== 

 

Processor: AMD A10-7300 Radeon R6, 10 Compute Cores 4C+6G 

Percentage of memory in use: 28%

Total physical RAM: 7114.26 MB

Available physical RAM: 5120.79 MB

Total Virtual: 8266.26 MB

Available Virtual: 6029.05 MB

 

==================== Drives ================================

 

Drive c: (Acer) (Fixed) (Total:914.9 GB) (Free:7.82 GB) NTFS

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: CD1873CD)

 

Partition: GPT.

 

==================== End of Addition.txt ============================

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.

  I accept