Malwarebytes 3.0.6 keeps blocking chrome.exe

Uchiha-Mikey · February 12, 2017

Hi

Whenever I'm using chrome, it says that it has blocked a url, but when i scan, no malware is found.

garioch7 · February 12, 2017

:welcome: If Malwarebytes Premium (MBP) blocks a URL, it has stopped you from visiting a webpage, for a number of possible reasons, one of which might be that the webpage is infected. If MBP blocked such an infected webpage, then no malware would have been able to be downloaded to your computer, so, of course, the MBP threat scan of your computer would come back clean. Nothing to be concerned about. In fact, that means that MBP is doing what it is supposed to be doing.

If you have further questions and concerns, please let me know.

Thank you and have a great day.

Regards,
-Phil

Uchiha-Mikey · February 13, 2017

The thing is, I'm not trying to access the url(outbound) that malwarebytes is blocking, I'll be on youtube or something and then get this pop-up a few times.

garioch7 · February 13, 2017

@Uchiha-Mikey

Thank you for your post. Sounds like you are victim of browser redirections. Let's do a few scans and see what turns up.

.

1. ESET Online Scanner using Internet Explorer:

Note 1: These instructions are for Internet Explorer only! If you're using Chrome or Firefox, you will need to download and install the ESET Smart Installer tool before it can scan. See instructions here.
Note 2: You will need to disable your currently installed Anti-Virus, how to do so can be found here.

Download esetsmartinstaller_enu.exe and save it to your Desktop.
Double click the icon.
Check YES, I accept the Terms of Use.
Click the Start button.
Accept any security warnings from your browser.
Click Advanced settings.
Check the following items.

Enable detection of potentially unwanted applications

Remove found threats

Scan archives

Scan for potentially unsafe applications

Enable Anti-Stealth technology

Click Change next to Current scan targets:
Place a check mark in any additional drive you wish to scan then click OK.
Click Start.
ESET will then download updates and begin scanning your computer.
If no threats are found simply click Uninstall application on close and hit Finish.
If threats are found click List of found threats.
Click Export to text file.
Save the file on your Desktop as ESET.txt.
Click Back.
Check Uninstall application on close and Delete quarantined files.
Click Finish.
Close the ESET Online Scanner window.
Copy and paste the contents of ESET.txt into your reply, if any threats were detected.

Don't forget to re-enable your antivirus when finished!

.

2. Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

Double click on AdwCleaner.exe to run the tool.
Vista/Windows 7/8/10 users right-click and selectRun As Administrator
The tool will start to update the database, please wait for it to complete the update.
Click on I Agree button.
Click on the Scan button.
AdwCleaner will begin...be patient as the scan may take some time to complete.
After the scan has finished, click on the Logfile button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
Copy and paste the contents of that logfile in your next reply.
A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

3. Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Please copy and paste the contents of JRT.txt into your next message.

Thank you and have a great day.

Regards,
-Phil

Uchiha-Mikey · February 15, 2017

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 7 Ultimate x64
Ran by Mikey (Administrator) on Wed 02/15/2017 at 13:28:55.20
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 9

Successfully deleted: C:\ProgramData\productdata (Folder)
Successfully deleted: C:\Users\Mikey\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Y8HCME0 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mikey\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\12OBXVBZ (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mikey\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5C8OEQU2 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mikey\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XENGELIH (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Y8HCME0 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\12OBXVBZ (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5C8OEQU2 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XENGELIH (Temporary Internet Files Folder)

Registry: 0

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 02/15/2017 at 13:33:14.49
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

ESET log:

C:\AdwCleaner\quarantine\files\ckbjeofsmgdhmgubijmdjbqhkgecezuv.back   a variant of Win32/Adware.Agent.NPN application   cleaned by deleting
C:\AdwCleaner\quarantine\files\hmznvlfqesslozouhfspkcqbtptqvafg\CloudPrinter.exe   a variant of Win32/Kryptik.FNEK trojan   cleaned by deleting
C:\AdwCleaner\quarantine\files\vgizoxokmzljuoeoysbjsabevbjzsmvv\fupdate.exe   a variant of Win32/Adware.RuKoma.B application   cleaned by deleting
C:\AdwCleaner\quarantine\files\zhgvbviecbtnivzetlicfwxgztpuuzec\ktpop3.exe   a variant of Win32/KuaiZip.D potentially unwanted application   cleaned by deleting
C:\Users\Mikey\AppData\Local\Microsoft\Start Menu\Вoйти в Интeрнeт.lnk   LNK/Agent.CJ trojan   cleaned by deleting
C:\Users\Mikey\AppData\Roaming\excdir\gh3.1.0.exe   a variant of Win32/Adware.Agent.NQW application   cleaned by deleting
C:\Users\Mikey\Downloads\Programs for after formatting\ccsetup526.exe   Win32/Bundled.Toolbar.Google.D potentially unsafe application   cleaned by deleting
C:\Users\Mikey\Downloads\Programs for after formatting\PowerISO6-x64.exe   a variant of Win32/FusionCore.K potentially unwanted application   cleaned by deleting

# AdwCleaner v6.043 - Logfile created 15/02/2017 at 13:24:51
# Updated on 27/01/2017 by Malwarebytes
# Database : 2017-02-13.1 [Local]
# Operating System : Windows 7 Ultimate Service Pack 1 (X64)
# Username : Mikey - MIKEY-PC
# Running from : C:\Users\Mikey\Downloads\Programs for after formatting\adwcleaner_6.043.exe
# Mode: Scan
# Support : https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious keys found.

***** [ Shortcuts ] *****

No infected shortcut found.

***** [ Scheduled Tasks ] *****

No malicious task found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Web browsers ] *****

No malicious Firefox based browser items found.
No malicious Chromium based browser items found.

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [31263 Bytes] - [10/02/2017 20:44:13]
C:\AdwCleaner\AdwCleaner[C2].txt - [1855 Bytes] - [14/02/2017 17:29:11]
C:\AdwCleaner\AdwCleaner[S0].txt - [27577 Bytes] - [10/02/2017 20:42:23]
C:\AdwCleaner\AdwCleaner[S1].txt - [1911 Bytes] - [14/02/2017 17:28:37]
C:\AdwCleaner\AdwCleaner[S2].txt - [1484 Bytes] - [15/02/2017 13:22:03]
C:\AdwCleaner\AdwCleaner[S3].txt - [1405 Bytes] - [15/02/2017 13:24:51]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [1478 Bytes] ##########

garioch7 · February 15, 2017

@Uchiha-Mikey

How is your computer working now? Are you still experiencing Malwarebytes blocks of outbound communications?

Thank you and have a great day.

Regards,
-Phil

Uchiha-Mikey · February 15, 2017

Hi garioch7, unfortunately Avast and Malwarebytes still periodically block an outbound url. I tried tds killer, hitman pro, zenma, Rkill but it hasn't seemed to stop the problem. It only happens now and then though, not constantly. It could be once an hour or even longer. Still concerning..

garioch7 · February 15, 2017

@Uchiha-Mikey

Thank you for your post. I think that it is time to run a Farbar Recover and Scan Tool (FRST) scan so that I can see if there is anything identified in the FRST logs that might be causing your issue.

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system, download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Right-click FRST then click "Run as administrator" (XP users: click run after receipt of Windows Security Warning - Open File).
When the tool opens, click Yes to disclaimer.
Press the Scan button.
When finished, it will produce a log called FRST.txt in the same directory the tool was run from.
Please copy and paste the log in your next reply.

Note 2: When FRST is run, it also generates another log (Addition.txt - also located in the same directory the tool was run from). Please also copy and paste that, along with the FRST.txt, into your next reply.

Thank you and have a great day.

Regards,
-Phil

Uchiha-Mikey · February 15, 2017

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-02-2017 01
Ran by Mikey (administrator) on MIKEY-PC (15-02-2017 20:10:39)
Running from C:\Users\Mikey\Downloads
Loaded Profiles: Mikey & UpdatusUser (Available Profiles: Mikey & UpdatusUser)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper\ABService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\Rockstar Games\GTA San Andreas\GTA_SA.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [764544 2012-09-01] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [127616 2012-09-01] (Qualcomm Atheros Commnucations)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6839952 2012-09-13] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [976672 2013-03-24] (NVIDIA Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM-x32\...\Run: [RUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\rusb3mon.exe [115048 2011-09-20] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Super-Charger] => C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [502328 2012-10-23] (MSI)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [205512 2017-02-10] (AVAST Software)
HKLM-x32\...\Run: [ABNotify] => C:\Program Files (x86)\AOMEI Backupper\ABNotify.exe [89968 2016-12-30] ()
HKU\S-1-5-21-1807781507-1846622349-4265815653-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2017-02-10] (Google Inc.)
HKU\S-1-5-21-1807781507-1846622349-4265815653-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9292504 2016-12-21] (Piriform Ltd)
HKU\S-1-5-21-1807781507-1846622349-4265815653-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-02-10] (AVAST Software)
ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} => -> No File
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk [2017-02-10]
ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\iSCTsysTray.lnk [2017-02-10]
ShortcutTarget: iSCTsysTray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray.exe (Intel Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{48FDE1E2-8B70-4DFA-9EB5-5D8FB49A85D7}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{A493A4FD-9B26-4B17-BE92-ACF238A96AB2}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1807781507-1846622349-4265815653-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1807781507-1846622349-4265815653-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1807781507-1846622349-4265815653-1000\Software\Microsoft\Internet Explorer\Main,Start Page =
SearchScopes: HKU\S-1-5-21-1807781507-1846622349-4265815653-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.co.za/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MSIM_enZA731
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2016-05-23] (IObit)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-02-10] (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-02-10] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-02-10] (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-02-10] (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-02-10] (Google Inc.)
Toolbar: HKU\S-1-5-21-1807781507-1846622349-4265815653-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-02-10] (Google Inc.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-05-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-05-13] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-11] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.co.za/
CHR StartupUrls: Default -> "hxxp://www.google.co.za/"
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\pdf.dll => No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\gcswf32.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll => No File
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Profile: C:\Users\Mikey\AppData\Local\Google\Chrome\User Data\Default [2017-02-15]
CHR Extension: (YouTube) - C:\Users\Mikey\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-10]
CHR Extension: (Adblock Plus) - C:\Users\Mikey\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-02-15]
CHR Extension: (Adobe Acrobat) - C:\Users\Mikey\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-02-10]
CHR Extension: (Blur) - C:\Users\Mikey\AppData\Local\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd [2017-02-10]
CHR Extension: (AdBlock) - C:\Users\Mikey\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-02-15]
CHR Extension: (Popup Blocker Pro) - C:\Users\Mikey\AppData\Local\Google\Chrome\User Data\Default\Extensions\kiodaajmphnkcajieajajinghpejdjai [2017-02-10]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Mikey\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-02-10]
CHR Extension: (Gmail) - C:\Users\Mikey\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-10]
CHR Extension: (Chrome Media Router) - C:\Users\Mikey\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-10]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7142136 2017-02-14] (AVAST Software s.r.o.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [216192 2012-09-01] (Qualcomm Atheros Commnucations) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [262736 2017-02-10] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [278784 2017-02-10] (AVAST Software)
R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [122728 2016-12-30] (AOMEI Tech Co., Ltd.)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [135496 2017-02-15] (SurfRight B.V.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
S2 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [360736 2016-10-28] (IObit)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [149032 2012-08-17] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [164736 2012-11-07] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [143416 2012-10-26] (MSI)
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [995800 2017-01-05] (McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16248 2017-01-05] (McAfee, Inc.)
R2 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [86864 2017-01-05] (McAfee, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
S2 MSI_OTPService; C:\Program Files (x86)\MSI\OTPService\OTPService.exe [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [51120 2016-12-22] ()
R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [171952 2016-12-22] ()
R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [38320 2016-12-22] ()
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [309784 2017-02-10] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [189768 2017-02-10] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [334600 2017-02-10] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [48528 2017-02-10] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [38296 2017-02-10] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [32088 2017-02-10] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [126088 2017-02-10] (AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [29432 2017-02-10] (AVAST Software)
R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [456456 2017-02-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [100640 2017-02-10] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [74680 2017-02-10] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [991496 2017-02-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [547904 2017-02-10] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [162528 2017-02-10] (AVAST Software)
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [53904 2017-02-10] (The OpenVPN Project)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [337080 2017-02-10] (AVAST Software)
R3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2012-09-01] (Qualcomm Atheros)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77416 2017-01-20] ()
S3 GPCIDrv; C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [14376 2010-02-04] ()
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [20968 2012-08-17] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [19944 2012-08-17] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46016 2012-08-17] ()
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [176584 2017-02-10] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [110536 2017-02-14] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-02-14] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251848 2017-02-14] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [81696 2017-02-15] (Malwarebytes)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [13368 2012-10-26] (MSI)
R3 rusb3hub; C:\Windows\System32\DRIVERS\rusb3hub.sys [101376 2011-11-22] (Renesas Electronics Corporation)
R3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [217088 2011-11-22] (Renesas Electronics Corporation)
R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2017-02-14] ()
R1 ZAM; C:\Windows\System32\drivers\zam64.sys [203680 2017-02-15] (Zemana Ltd.)
R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard64.sys [203680 2017-02-15] (Zemana Ltd.)
S3 catchme; \??\C:\combofix_17.1.29.1\catchme.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
R3 NTIOLib_1_0_T; \??\C:\Program Files (x86)\MSI\OTPService\NTIOLib_X64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-02-02 11:31 - 2018-02-02 11:31 - 00524288 ___SH C:\Users\UpdatusUser\NTUSER.DAT{191aee9b-efca-11e6-8b55-002683356232}.TMContainer00000000000000000002.regtrans-ms
2018-02-02 11:31 - 2018-02-02 11:31 - 00524288 ___SH C:\Users\UpdatusUser\NTUSER.DAT{191aee9b-efca-11e6-8b55-002683356232}.TMContainer00000000000000000001.regtrans-ms
2018-02-02 11:31 - 2018-02-02 11:31 - 00065536 ___SH C:\Users\UpdatusUser\NTUSER.DAT{191aee9b-efca-11e6-8b55-002683356232}.TM.blf
2018-02-02 11:28 - 2018-02-02 11:28 - 00000000 ___SD C:\Windows\SysWOW64\Microsoft
2018-02-02 11:27 - 2017-02-11 14:50 - 00524288 ___SH C:\Users\Mikey\NTUSER.DAT{191aee87-efca-11e6-8b55-002683356232}.TMContainer00000000000000000002.regtrans-ms
2018-02-02 11:27 - 2017-02-11 14:50 - 00524288 ___SH C:\Users\Mikey\NTUSER.DAT{191aee87-efca-11e6-8b55-002683356232}.TMContainer00000000000000000001.regtrans-ms
2018-02-02 11:27 - 2017-02-11 14:50 - 00065536 ___SH C:\Users\Mikey\NTUSER.DAT{191aee87-efca-11e6-8b55-002683356232}.TM.blf
2017-02-15 20:10 - 2017-02-15 20:10 - 02422272 _____ (Farbar) C:\Users\Mikey\Downloads\FRST64.exe
2017-02-15 20:10 - 2017-02-15 20:10 - 00020574 _____ C:\Users\Mikey\Downloads\FRST.txt
2017-02-15 20:10 - 2017-02-15 20:10 - 00000000 ____D C:\FRST
2017-02-15 17:54 - 2017-02-15 20:10 - 00045038 _____ C:\Windows\ZAM.krnl.trace
2017-02-15 17:54 - 2017-02-15 20:10 - 00030353 _____ C:\Windows\ZAM_Guard.krnl.trace
2017-02-15 17:54 - 2017-02-15 17:54 - 00203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zamguard64.sys
2017-02-15 17:54 - 2017-02-15 17:54 - 00203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zam64.sys
2017-02-15 17:54 - 2017-02-15 17:54 - 00000000 ____D C:\Users\Mikey\AppData\Local\Zemana
2017-02-15 17:51 - 2017-02-15 17:53 - 14449600 _____ (Copyright 2017.) C:\Users\Mikey\Downloads\Zemana.AntiMalware.Portable.exe
2017-02-15 17:42 - 2017-02-15 17:50 - 00000000 ____D C:\ProgramData\HitmanPro
2017-02-15 17:42 - 2017-02-15 17:42 - 00001897 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2017-02-15 17:42 - 2017-02-15 17:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2017-02-15 17:42 - 2017-02-15 17:42 - 00000000 ____D C:\Program Files\HitmanPro
2017-02-15 17:35 - 2017-02-15 17:36 - 00003108 _____ C:\Users\Mikey\Desktop\Rkill.txt
2017-02-15 17:33 - 2017-02-15 17:35 - 00442300 _____ C:\TDSSKiller.3.1.0.12_15.02.2017_17.33.01_log.txt
2017-02-15 13:33 - 2017-02-15 13:33 - 00001930 _____ C:\Users\Mikey\Desktop\JRT.txt
2017-02-15 13:18 - 2017-02-15 13:22 - 00002250 _____ C:\Users\Mikey\Desktop\ESET.txt
2017-02-15 12:17 - 2017-02-15 12:17 - 00000000 ____D C:\Program Files (x86)\ESET
2017-02-15 11:00 - 2017-02-15 11:00 - 00000000 ____D C:\Users\Mikey\Documents\Custom Office Templates
2017-02-15 10:11 - 2017-02-15 10:11 - 00000000 ___RD C:\Users\Mikey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2017-02-15 10:02 - 2017-02-15 10:02 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-02-14 17:30 - 2017-02-14 17:30 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2017-02-14 17:26 - 2017-02-14 17:26 - 00066448 _____ C:\Users\Mikey\AppData\Local\GDIPFONTCACHEV1.DAT
2017-02-13 09:19 - 2017-02-13 09:19 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w95inf32.dll
2017-02-13 09:19 - 2017-02-13 09:19 - 00002272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w95inf16.dll
2017-02-13 09:19 - 2017-02-13 09:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thief Gold
2017-02-13 09:19 - 1998-09-02 10:28 - 01088272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\danim.dll
2017-02-13 09:19 - 1998-09-02 10:28 - 00155408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LMRT.dll
2017-02-13 09:19 - 1998-09-02 10:28 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unam4ie.exe
2017-02-13 09:19 - 1998-09-02 10:28 - 00038160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LMRTREND.dll
2017-02-13 09:19 - 1998-09-02 10:02 - 00194320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qcut.dll
2017-02-13 09:19 - 1998-08-27 06:51 - 00182032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft3.dll
2017-02-13 09:19 - 1998-08-20 13:02 - 00140800 _____ (The Duck Corporation) C:\Windows\SysWOW64\tm20dec.ax
2017-02-13 09:19 - 1998-08-20 12:38 - 00217984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\strmdll.dll
2017-02-13 09:19 - 1998-08-17 11:21 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciqtz.drv
2017-02-13 09:19 - 1998-08-17 11:21 - 00010240 _____ C:\Windows\SysWOW64\vidx16.dll
2017-02-13 09:19 - 1998-08-17 11:21 - 00005672 _____ C:\Windows\SysWOW64\quartz.vxd
2017-02-13 09:09 - 2017-02-15 11:53 - 00000000 ____D C:\Program Files (x86)\thief
2017-02-13 09:08 - 1998-10-02 19:00 - 00327168 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2017-02-13 08:31 - 2017-02-13 08:31 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2017-02-13 08:30 - 2017-02-13 08:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2017-02-13 08:30 - 2017-02-13 08:30 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2017-02-13 08:29 - 2017-02-13 08:29 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-02-13 08:29 - 2017-02-13 08:29 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2017-02-13 08:28 - 2017-02-13 08:29 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2017-02-13 08:28 - 2017-02-13 08:28 - 00000000 ____D C:\Windows\PCHEALTH
2017-02-13 08:25 - 2017-02-13 08:25 - 00000000 ____D C:\Windows\SHELLNEW
2017-02-13 08:24 - 2017-02-13 08:24 - 00000000 ____D C:\Users\Mikey\AppData\Local\Microsoft Help
2017-02-13 08:24 - 2017-02-13 08:24 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2017-02-13 08:24 - 2017-02-13 08:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-02-13 08:24 - 2017-02-13 08:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2017-02-13 08:23 - 2017-02-13 08:28 - 00000000 ____D C:\Program Files\Microsoft Office
2017-02-13 08:22 - 2017-02-13 08:22 - 00000000 __RHD C:\MSOCache
2017-02-13 08:17 - 2017-02-13 08:17 - 00000000 ____D C:\Users\Mikey\AppData\Roaming\PowerISO
2017-02-12 20:48 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2017-02-12 19:59 - 2017-02-14 16:18 - 00311024 _____ C:\Windows\system32\FNTCACHE.DAT
2017-02-12 19:53 - 2015-01-09 01:44 - 00419936 _____ C:\Windows\SysWOW64\locale.nls
2017-02-12 19:53 - 2015-01-09 01:43 - 00419936 _____ C:\Windows\system32\locale.nls
2017-02-12 19:46 - 2015-07-30 15:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2017-02-12 19:46 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-02-12 19:22 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2017-02-12 19:22 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2017-02-12 19:22 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2017-02-12 19:22 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2017-02-12 19:01 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2017-02-12 19:01 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2017-02-12 19:01 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2017-02-12 19:01 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2017-02-12 19:01 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2017-02-12 19:01 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2017-02-12 19:01 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2017-02-12 19:01 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2017-02-12 18:48 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2017-02-12 18:48 - 2012-03-01 08:38 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2017-02-12 18:48 - 2012-03-01 08:33 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2017-02-12 18:48 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2017-02-12 18:48 - 2012-03-01 07:37 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2017-02-12 18:48 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2017-02-12 18:48 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2017-02-12 18:37 - 2016-08-29 17:31 - 14183424 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-02-12 18:37 - 2016-08-29 17:31 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2017-02-12 18:37 - 2016-08-29 17:31 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-02-12 18:37 - 2016-08-29 17:12 - 12880384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-02-12 18:37 - 2016-08-29 17:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2017-02-12 18:37 - 2016-08-29 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-02-12 18:37 - 2016-08-29 17:04 - 03229696 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2017-02-12 18:37 - 2016-08-29 16:55 - 02972672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2017-02-12 18:37 - 2016-05-12 19:15 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll
2017-02-12 18:37 - 2016-05-12 19:14 - 00794624 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2017-02-12 18:37 - 2016-05-12 19:14 - 00793088 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2017-02-12 18:37 - 2016-05-12 19:14 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2017-02-12 18:37 - 2016-05-12 19:14 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2017-02-12 18:37 - 2016-05-12 19:14 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2017-02-12 18:37 - 2016-05-12 19:14 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2017-02-12 18:37 - 2016-05-12 19:14 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll
2017-02-12 18:37 - 2016-05-12 17:18 - 00591872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2017-02-12 18:37 - 2016-05-12 17:18 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
2017-02-12 18:37 - 2016-05-12 17:18 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2017-02-12 18:37 - 2016-05-12 17:18 - 00070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipsec.dll
2017-02-12 18:37 - 2016-05-12 17:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll
2017-02-12 18:37 - 2016-05-12 17:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.exe
2017-02-12 18:37 - 2016-05-12 16:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.dll
2017-02-12 18:37 - 2016-05-12 16:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.exe
2017-02-12 18:37 - 2016-05-11 19:02 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2017-02-12 18:37 - 2016-05-11 19:02 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2017-02-12 18:37 - 2016-05-11 19:02 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2017-02-12 18:37 - 2016-05-11 17:19 - 00351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2017-02-12 18:37 - 2016-05-11 17:19 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2017-02-12 18:37 - 2016-05-11 17:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2017-02-12 18:37 - 2016-05-11 17:11 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2017-02-12 18:37 - 2016-05-11 17:01 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2017-02-12 18:37 - 2016-05-11 16:58 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2017-02-12 18:37 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-02-12 18:37 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2017-02-12 18:37 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2017-02-12 18:32 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2017-02-12 18:32 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2017-02-12 18:28 - 2015-10-13 06:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2017-02-12 18:25 - 2016-03-09 21:00 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2017-02-12 18:25 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2017-02-12 18:25 - 2016-03-09 20:40 - 00316416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2017-02-12 18:25 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2017-02-12 18:25 - 2014-10-25 03:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2017-02-12 18:25 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2017-02-12 18:25 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2017-02-12 18:25 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2017-02-12 18:25 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2017-02-12 18:25 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2017-02-12 18:25 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2017-02-12 18:22 - 2014-12-08 05:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2017-02-12 18:22 - 2014-12-08 04:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2017-02-12 18:22 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2017-02-12 18:13 - 2016-02-05 20:56 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
2017-02-12 18:13 - 2016-02-05 20:54 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2017-02-12 18:13 - 2016-02-05 19:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll
2017-02-12 18:13 - 2016-02-05 03:19 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2017-02-12 18:13 - 2016-02-04 20:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2017-02-12 18:13 - 2015-11-14 01:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2017-02-12 18:13 - 2015-11-14 01:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2017-02-12 18:13 - 2015-11-14 01:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2017-02-12 18:13 - 2015-11-14 00:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll
2017-02-12 18:13 - 2015-11-14 00:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll
2017-02-12 18:13 - 2015-11-14 00:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe
2017-02-12 18:13 - 2015-06-03 22:21 - 00451080 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2017-02-12 18:13 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2017-02-12 18:13 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2017-02-12 18:13 - 2013-10-04 04:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2017-02-12 18:13 - 2013-10-04 04:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2017-02-12 18:13 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2017-02-12 18:13 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2017-02-12 18:12 - 2016-08-12 18:26 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-02-12 18:12 - 2016-08-12 18:26 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-02-12 18:12 - 2016-08-12 18:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-02-12 18:12 - 2016-02-12 20:52 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-02-12 18:12 - 2016-02-12 20:52 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-02-12 18:12 - 2016-02-12 20:52 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-02-12 18:12 - 2016-02-12 20:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-02-12 18:12 - 2016-02-12 20:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2017-02-12 18:12 - 2016-02-12 20:22 - 02610688 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-02-12 18:12 - 2016-02-12 20:19 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-02-12 18:12 - 2016-02-12 20:18 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-02-12 18:12 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-02-12 18:12 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-02-12 18:12 - 2016-02-12 20:18 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-02-12 18:12 - 2016-02-12 20:18 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2017-02-12 18:12 - 2016-02-12 20:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-02-12 18:12 - 2016-02-12 20:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-02-12 18:12 - 2016-02-12 20:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2017-02-12 18:12 - 2016-02-12 20:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2017-02-12 18:12 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2017-02-12 18:12 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2017-02-12 18:12 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2017-02-12 18:12 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2017-02-12 18:12 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2017-02-12 18:12 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2017-02-12 18:12 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2017-02-12 18:12 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2017-02-12 18:12 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2017-02-12 18:12 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2017-02-12 18:12 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2017-02-12 18:12 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2017-02-12 18:12 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2017-02-12 18:12 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2017-02-12 18:12 - 2014-12-11 19:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2017-02-12 18:12 - 2013-10-30 04:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2017-02-12 18:12 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2017-02-12 18:12 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2017-02-12 18:12 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2017-02-12 18:12 - 2011-06-15 12:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2017-02-12 18:12 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2017-02-12 18:12 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2017-02-12 18:11 - 2015-11-11 20:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2017-02-12 18:11 - 2015-11-11 20:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2017-02-12 18:11 - 2015-11-11 20:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2017-02-12 18:11 - 2015-11-11 20:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2017-02-12 18:11 - 2015-11-03 21:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2017-02-12 18:11 - 2015-11-03 20:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2017-02-12 18:11 - 2015-07-15 20:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2017-02-12 18:11 - 2015-07-15 20:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2017-02-12 18:11 - 2015-07-15 20:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2017-02-12 18:11 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2017-02-12 18:11 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2017-02-12 18:11 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2017-02-12 18:11 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2017-02-12 18:11 - 2013-10-12 04:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2017-02-12 18:11 - 2013-10-12 04:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2017-02-12 18:11 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2017-02-12 18:11 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2017-02-12 18:11 - 2013-10-12 03:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2017-02-12 18:11 - 2013-10-12 03:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2017-02-12 18:11 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2017-02-12 18:11 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2017-02-12 18:11 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2017-02-12 18:11 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2017-02-12 18:11 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2017-02-12 18:11 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2017-02-12 18:11 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2017-02-12 18:11 - 2011-06-15 12:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2017-02-12 18:11 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2017-02-12 18:11 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2017-02-12 18:11 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2017-02-12 18:11 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2017-02-12 18:11 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2017-02-12 18:11 - 2010-12-23 12:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2017-02-12 18:11 - 2010-12-23 12:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2017-02-12 18:11 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2017-02-12 18:11 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2017-02-12 18:09 - 2015-12-08 23:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2017-02-12 18:09 - 2015-12-08 23:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2017-02-12 18:09 - 2015-12-08 23:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2017-02-12 18:09 - 2015-12-08 23:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2017-02-12 18:09 - 2015-12-08 23:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2017-02-12 18:09 - 2015-12-08 23:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2017-02-12 18:09 - 2015-12-08 23:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2017-02-12 18:09 - 2015-12-08 23:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2017-02-12 18:09 - 2015-12-08 23:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2017-02-12 18:09 - 2015-12-08 23:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2017-02-12 18:09 - 2015-12-08 23:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2017-02-12 18:09 - 2015-12-08 23:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2017-02-12 18:09 - 2015-12-08 23:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-02-12 18:09 - 2015-12-08 23:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2017-02-12 18:09 - 2015-12-08 23:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2017-02-12 18:09 - 2015-12-08 23:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2017-02-12 18:09 - 2015-12-08 23:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2017-02-12 18:09 - 2015-12-08 23:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2017-02-12 18:09 - 2015-12-08 23:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2017-02-12 18:09 - 2015-12-08 23:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2017-02-12 18:09 - 2015-12-08 23:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2017-02-12 18:09 - 2015-12-08 23:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2017-02-12 18:09 - 2015-12-08 23:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2017-02-12 18:09 - 2015-12-08 23:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
2017-02-12 18:09 - 2015-12-08 23:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2017-02-12 18:09 - 2015-12-08 23:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2017-02-12 18:09 - 2015-12-08 23:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2017-02-12 18:09 - 2015-12-08 23:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2017-02-12 18:09 - 2015-12-08 23:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2017-02-12 18:09 - 2015-12-08 23:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2017-02-12 18:09 - 2015-12-08 23:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2017-02-12 18:09 - 2015-12-08 23:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2017-02-12 18:09 - 2015-12-08 23:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll
2017-02-12 18:09 - 2015-12-08 23:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2017-02-12 18:09 - 2015-12-08 21:07 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2017-02-12 18:09 - 2015-12-08 21:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-02-12 18:09 - 2015-12-08 21:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2017-02-12 18:09 - 2015-12-08 21:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2017-02-12 18:09 - 2015-12-08 21:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2017-02-12 18:09 - 2015-12-08 21:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2017-02-12 18:09 - 2015-12-08 21:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2017-02-12 18:09 - 2015-12-08 21:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2017-02-12 18:09 - 2015-12-08 21:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2017-02-12 18:09 - 2015-12-08 21:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2017-02-12 18:09 - 2015-12-08 21:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-02-12 18:09 - 2015-12-08 21:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2017-02-12 18:09 - 2015-12-08 21:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2017-02-12 18:09 - 2015-12-08 21:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2017-02-12 18:09 - 2015-12-08 21:07 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2017-02-12 18:09 - 2015-12-08 21:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2017-02-12 18:09 - 2015-12-08 21:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2017-02-12 18:09 - 2015-12-08 21:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2017-02-12 18:09 - 2015-12-08 21:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2017-02-12 18:09 - 2015-12-08 20:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2017-02-12 18:09 - 2015-12-08 20:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2017-02-12 18:09 - 2015-12-08 20:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2017-02-12 18:09 - 2015-10-13 18:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2017-02-12 18:09 - 2015-10-13 18:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-02-12 18:09 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-02-12 18:09 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2017-02-12 18:09 - 2013-11-26 13:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2017-02-12 18:09 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-02-12 18:08 - 2016-06-26 02:27 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-02-12 18:08 - 2016-06-26 02:27 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-02-12 18:08 - 2016-06-26 02:27 - 00344576 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2017-02-12 18:08 - 2016-06-26 02:27 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2017-02-12 18:08 - 2016-06-26 02:27 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2017-02-12 18:08 - 2016-06-25 21:54 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-02-12 18:08 - 2016-06-25 21:53 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
2017-02-12 18:08 - 2016-06-25 21:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2017-02-12 18:08 - 2016-06-25 21:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2017-02-12 18:08 - 2016-06-25 21:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
2017-02-12 18:08 - 2015-12-08 23:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2017-02-12 18:08 - 2015-12-08 21:07 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2017-02-12 18:08 - 2015-07-09 19:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2017-02-12 18:08 - 2015-07-09 19:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2017-02-12 18:08 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2017-02-12 18:08 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2017-02-12 18:08 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2017-02-12 18:08 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2017-02-12 18:08 - 2014-06-19 00:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2017-02-12 18:08 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2017-02-12 18:08 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2017-02-12 18:08 - 2014-06-19 00:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2017-02-12 18:08 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2017-02-12 18:08 - 2014-06-19 00:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2017-02-12 18:08 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-02-12 18:08 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-02-12 18:08 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-02-12 18:08 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-02-12 18:08 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-02-12 18:08 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-02-12 18:08 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-02-12 18:08 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-02-12 18:08 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-02-12 18:08 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-02-12 18:08 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-02-12 18:08 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-02-12 18:08 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-02-12 18:08 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-02-12 18:08 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-02-12 18:08 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-02-12 18:08 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-02-12 18:08 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-02-12 18:07 - 2016-02-09 11:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2017-02-12 18:07 - 2015-08-27 20:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2017-02-12 18:07 - 2015-08-27 20:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-02-12 18:07 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2017-02-12 18:07 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2017-02-12 18:07 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2017-02-12 18:07 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-02-12 18:07 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2017-02-12 18:07 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2017-02-12 18:07 - 2015-06-11 19:56 - 01112576 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2017-02-12 18:07 - 2015-06-11 19:16 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-02-12 18:07 - 2015-06-11 19:15 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2017-02-12 18:07 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2017-02-12 18:07 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2017-02-12 18:07 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-02-12 18:07 - 2012-10-03 19:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2017-02-12 18:07 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2017-02-12 18:07 - 2012-10-03 19:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2017-02-12 18:07 - 2012-10-03 19:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2017-02-12 18:07 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2017-02-12 18:07 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2017-02-12 18:07 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2017-02-12 18:07 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2017-02-12 18:07 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2017-02-12 18:07 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2017-02-12 18:07 - 2012-01-13 09:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2017-02-12 18:06 - 2016-01-22 08:27 - 05573056 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-02-12 18:06 - 2016-01-22 08:27 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-02-12 18:06 - 2016-01-22 08:27 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-02-12 18:06 - 2016-01-22 08:24 - 01733592 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-02-12 18:06 - 2016-01-22 08:20 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-02-12 18:06 - 2016-01-22 08:20 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-02-12 18:06 - 2016-01-22 08:20 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-02-12 18:06 - 2016-01-22 08:20 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-02-12 18:06 - 2016-01-22 08:20 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-02-12 18:06 - 2016-01-22 08:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-02-12 18:06 - 2016-01-22 08:20 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-02-12 18:06 - 2016-01-22 08:20 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-02-12 18:06 - 2016-01-22 08:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-02-12 18:06 - 2016-01-22 08:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-02-12 18:06 - 2016-01-22 08:19 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-02-12 18:06 - 2016-01-22 08:19 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-02-12 18:06 - 2016-01-22 08:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-02-12 18:06 - 2016-01-22 08:18 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2017-02-12 18:06 - 2016-01-22 08:18 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2017-02-12 18:06 - 2016-01-22 08:18 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-02-12 18:06 - 2016-01-22 08:17 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-02-12 18:06 - 2016-01-22 08:17 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-02-12 18:06 - 2016-01-22 08:17 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2017-02-12 18:06 - 2016-01-22 08:16 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-02-12 18:06 - 2016-01-22 08:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-02-12 18:06 - 2016-01-22 08:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-02-12 18:06 - 2016-01-22 08:15 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-02-12 18:06 - 2016-01-22 08:15 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-02-12 18:06 - 2016-01-22 08:15 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-02-12 18:06 - 2016-01-22 08:13 - 03993536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-02-12 18:06 - 2016-01-22 08:13 - 03938752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-02-12 18:06 - 2016-01-22 08:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-02-12 18:06 - 2016-01-22 08:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-02-12 18:06 - 2016-01-22 08:13 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 08:09 - 01314328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-02-12 18:06 - 2016-01-22 08:06 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-02-12 18:06 - 2016-01-22 08:06 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-02-12 18:06 - 2016-01-22 08:06 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-02-12 18:06 - 2016-01-22 08:06 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-02-12 18:06 - 2016-01-22 08:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-02-12 18:06 - 2016-01-22 08:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-02-12 18:06 - 2016-01-22 08:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-02-12 18:06 - 2016-01-22 08:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-02-12 18:06 - 2016-01-22 08:05 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-02-12 18:06 - 2016-01-22 08:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-02-12 18:06 - 2016-01-22 08:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2017-02-12 18:06 - 2016-01-22 08:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2017-02-12 18:06 - 2016-01-22 08:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-02-12 18:06 - 2016-01-22 08:02 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-02-12 18:06 - 2016-01-22 08:02 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-02-12 18:06 - 2016-01-22 08:02 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2017-02-12 18:06 - 2016-01-22 08:02 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-02-12 18:06 - 2016-01-22 08:02 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2017-02-12 18:06 - 2016-01-22 08:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 07:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-02-12 18:06 - 2016-01-22 07:07 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-02-12 18:06 - 2016-01-22 07:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-02-12 18:06 - 2016-01-22 07:05 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-02-12 18:06 - 2016-01-22 06:59 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-02-12 18:06 - 2016-01-22 06:58 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-02-12 18:06 - 2016-01-22 06:58 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-02-12 18:06 - 2016-01-22 06:57 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-02-12 18:06 - 2016-01-22 06:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-02-12 18:06 - 2016-01-22 06:53 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-02-12 18:06 - 2016-01-22 06:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-02-12 18:06 - 2016-01-22 06:53 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-02-12 18:06 - 2016-01-22 06:53 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-02-12 18:06 - 2016-01-22 06:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-02-12 18:06 - 2016-01-22 06:51 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 06:51 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 06:51 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-02-12 18:06 - 2016-01-22 06:51 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-02-12 18:06 - 2015-09-23 15:15 - 00460776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2017-02-12 18:06 - 2015-09-23 15:15 - 00299632 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2017-02-12 18:06 - 2015-09-23 15:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2017-02-12 18:06 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2017-02-12 18:06 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2017-02-12 18:06 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2017-02-12 18:06 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2017-02-12 18:06 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2017-02-12 18:06 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2017-02-12 18:06 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2017-02-12 18:06 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2017-02-12 18:06 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2017-02-12 18:06 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2017-02-12 18:06 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2017-02-12 18:06 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2017-02-12 18:06 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2017-02-12 18:06 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2017-02-12 18:06 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2017-02-12 18:06 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2017-02-12 18:06 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2017-02-12 18:06 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2017-02-12 18:06 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2017-02-12 18:06 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2017-02-12 18:05 - 2015-10-29 19:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2017-02-12 18:05 - 2015-10-29 19:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2017-02-12 18:05 - 2015-10-29 19:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2017-02-12 18:05 - 2015-10-29 19:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2017-02-12 18:05 - 2015-10-29 19:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2017-02-12 18:05 - 2015-10-29 19:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2017-02-12 18:05 - 2015-10-29 19:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2017-02-12 18:05 - 2014-10-30 04:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2017-02-12 18:05 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2017-02-12 18:05 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2017-02-12 18:05 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2017-02-12 18:05 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2017-02-12 18:05 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2017-02-12 18:04 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2017-02-12 18:04 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2017-02-12 18:04 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2017-02-12 18:04 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2017-02-12 18:04 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2017-02-12 18:04 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2017-02-12 18:04 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2017-02-12 18:04 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2017-02-12 18:04 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2017-02-12 18:04 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2017-02-12 18:04 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2017-02-12 18:04 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2017-02-12 18:04 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2017-02-12 18:04 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2017-02-12 18:03 - 2014-09-04 07:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2017-02-12 18:03 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2017-02-12 18:03 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2017-02-12 18:03 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2017-02-12 18:02 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2017-02-12 18:02 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2017-02-12 18:02 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2017-02-12 18:02 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2017-02-12 18:02 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2017-02-12 18:02 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2017-02-12 18:02 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2017-02-12 18:02 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2017-02-12 18:01 - 2012-06-16 07:16 - 00609792 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-02-12 18:01 - 2012-06-16 07:15 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-02-12 18:01 - 2012-06-16 06:26 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-02-12 18:01 - 2012-06-16 06:26 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-02-12 18:01 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2017-02-12 18:01 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2017-02-12 18:01 - 2012-04-26 07:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2017-02-12 18:01 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2017-02-12 18:01 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2017-02-12 18:01 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2017-02-12 17:59 - 2013-10-12 04:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2017-02-12 17:59 - 2013-10-12 04:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2017-02-12 17:59 - 2013-10-12 04:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2017-02-12 17:59 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2017-02-12 17:59 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2017-02-12 17:59 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2017-02-12 17:59 - 2012-04-28 05:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2017-02-12 17:59 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2017-02-12 17:59 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2017-02-12 17:59 - 2011-08-27 07:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-02-12 17:59 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2017-02-12 17:59 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2017-02-12 17:59 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2017-02-12 17:59 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2017-02-12 17:59 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2017-02-12 17:59 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2017-02-12 17:59 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2017-02-12 17:59 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2017-02-12 17:59 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2017-02-12 17:59 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2017-02-12 17:59 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2017-02-12 17:59 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2017-02-12 17:59 - 2011-03-11 08:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2017-02-12 17:59 - 2011-03-11 08:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2017-02-12 17:59 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2017-02-12 17:59 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2017-02-12 17:59 - 2011-03-03 08:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2017-02-12 17:59 - 2011-03-03 08:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2017-02-12 17:59 - 2011-03-03 08:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2017-02-12 17:59 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2017-02-12 17:59 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2017-02-12 17:59 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2017-02-12 17:59 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2017-02-12 17:59 - 2011-02-12 13:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2017-02-12 17:59 - 2011-02-05 19:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-02-12 17:59 - 2011-02-05 19:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2017-02-12 17:59 - 2011-02-05 19:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2017-02-12 17:59 - 2011-02-05 19:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2017-02-12 17:59 - 2011-02-05 19:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2017-02-12 17:59 - 2011-02-05 19:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-02-12 17:59 - 2011-02-05 19:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2017-02-12 17:31 - 2017-02-12 17:31 - 00000000 ____D C:\Users\Mikey\AppData\Local\AVAST Software
2017-02-12 17:31 - 2015-02-04 05:16 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2017-02-12 17:31 - 2015-02-04 04:54 - 00318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2017-02-12 17:30 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2017-02-12 17:30 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2017-02-12 17:30 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2017-02-12 17:10 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2017-02-12 17:10 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2017-02-12 17:10 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2017-02-12 17:10 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2017-02-12 17:09 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2017-02-12 17:09 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2017-02-12 17:05 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2017-02-12 17:05 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2017-02-11 17:44 - 2017-02-11 17:44 - 00001209 _____ C:\Users\Mikey\Desktop\samp - Shortcut.lnk
2017-02-11 16:49 - 2017-02-12 17:52 - 00000427 _____ C:\Users\Mikey\Desktop\New Text Document.txt
2017-02-11 15:52 - 2017-01-12 18:40 - 12492740 _____ C:\Users\Mikey\Downloads\AncientEgypt.themepack
2017-02-11 15:52 - 2017-01-12 18:40 - 07035835 _____ C:\Users\Mikey\Downloads\AutumnColorJapan.themepack
2017-02-11 15:44 - 2017-02-11 15:45 - 11025449 _____ C:\Users\Mikey\Downloads\Clouds.themepack
2017-02-11 15:32 - 2016-04-09 08:58 - 01190912 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2017-02-11 15:32 - 2016-04-09 08:54 - 01011712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2017-02-11 15:12 - 2017-02-11 15:17 - 00000000 ____D C:\Program Files\CCleaner
2017-02-11 15:12 - 2017-02-11 15:12 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2017-02-11 15:12 - 2017-02-11 15:12 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-02-11 15:12 - 2017-02-11 15:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-02-11 15:05 - 2017-02-11 15:05 - 00025788 _____ C:\ComboFix.txt
2017-02-11 15:03 - 2013-05-13 07:51 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2017-02-11 15:03 - 2013-05-13 07:51 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2017-02-11 15:03 - 2013-05-13 07:51 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2017-02-11 15:03 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2017-02-11 15:03 - 2013-05-13 06:45 - 01160192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2017-02-11 15:03 - 2013-05-13 06:45 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2017-02-11 15:03 - 2013-05-13 06:45 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2017-02-11 15:03 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2017-02-11 15:03 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2017-02-11 15:03 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2017-02-11 14:46 - 2017-02-11 14:46 - 00000000 ____D C:\Users\Mikey\AppData\LocalLow\IObit
2017-02-11 14:45 - 2017-02-11 14:46 - 00000000 ____D C:\Users\Mikey\AppData\Roaming\IObit
2017-02-11 14:45 - 2017-02-11 14:46 - 00000000 ____D C:\ProgramData\IObit
2017-02-11 14:45 - 2017-02-11 14:45 - 00001370 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2017-02-11 14:45 - 2017-02-11 14:45 - 00001358 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2017-02-11 14:45 - 2017-02-11 14:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2017-02-11 14:45 - 2017-02-11 14:45 - 00000000 ____D C:\Program Files (x86)\IObit
2017-02-11 14:39 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2017-02-11 14:39 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2017-02-11 14:39 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2017-02-11 14:39 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2017-02-11 14:39 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2017-02-11 14:39 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2017-02-11 14:39 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2017-02-11 14:39 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2017-02-11 14:38 - 2017-02-11 15:05 - 00000000 ____D C:\Qoobox
2017-02-11 14:38 - 2017-02-11 15:05 - 00000000 ____D C:\combofix_17.1.29.1
2017-02-11 14:37 - 2017-02-11 15:01 - 00000000 ____D C:\Windows\erdnt
2017-02-11 14:07 - 2017-02-11 14:07 - 00000000 ____D C:\Users\Mikey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2017-02-11 14:07 - 2017-02-11 14:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2017-02-11 03:42 - 2017-02-10 20:54 - 00000000 ____D C:\Users\Mikey\AppData\Roaming\Google
2017-02-10 22:26 - 2017-02-10 22:26 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2017-02-10 22:19 - 2017-02-13 09:24 - 00000000 ____D C:\Users\Mikey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-02-10 22:19 - 2017-02-11 13:59 - 00000000 ____D C:\Users\Mikey\Documents\GTA San Andreas User Files
2017-02-10 21:41 - 2017-02-10 21:41 - 00000812 _____ C:\Users\Public\Desktop\PowerISO.lnk
2017-02-10 21:41 - 2017-02-10 21:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
2017-02-10 21:41 - 2017-02-10 21:41 - 00000000 ____D C:\Program Files\PowerISO
2017-02-10 21:41 - 2017-02-02 15:27 - 00137792 _____ (Power Software Ltd) C:\Windows\system32\Drivers\scdemu.sys
2017-02-10 21:40 - 2017-02-15 17:50 - 00000000 ____D C:\Users\Mikey\Downloads\Programs for after formatting
2017-02-10 21:29 - 2012-08-22 20:19 - 00011832 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\acpimof.dll
2017-02-10 21:26 - 2017-02-10 21:26 - 00003892 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1486754744
2017-02-10 21:26 - 2017-02-10 21:26 - 00001043 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2017-02-10 21:26 - 2017-02-10 21:26 - 00001043 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-02-10 21:24 - 2017-02-10 21:24 - 00000948 _____ C:\Users\Mikey\Desktop\Core Temp.lnk
2017-02-10 21:24 - 2017-02-10 21:24 - 00000000 ____D C:\Users\Mikey\AppData\Local\NVIDIA
2017-02-10 21:24 - 2017-02-10 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Core Temp
2017-02-10 21:24 - 2017-02-10 21:24 - 00000000 ____D C:\$AV_ASW
2017-02-10 21:23 - 2017-02-10 21:24 - 00000000 ____D C:\Program Files\Core Temp
2017-02-10 21:23 - 2017-02-10 21:23 - 00032088 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-02-10 21:23 - 2017-02-10 21:23 - 00001011 _____ C:\Users\Mikey\Desktop\SpeedFan.lnk
2017-02-10 21:23 - 2017-02-10 21:23 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2017-02-10 21:23 - 2017-02-10 21:23 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2017-02-10 21:22 - 2017-02-10 21:22 - 00001351 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-02-10 21:22 - 2017-02-10 21:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-02-10 21:22 - 2017-02-10 17:58 - 00000000 ____D C:\Users\Mikey\Documents\temp
2017-02-10 21:21 - 2017-02-10 21:21 - 00002751 _____ C:\Users\Public\Desktop\GIGABYTE OC_GURU.lnk
2017-02-10 21:21 - 2017-02-10 21:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2017-02-10 21:21 - 2017-02-10 21:21 - 00000000 ____D C:\Program Files (x86)\GIGABYTE
2017-02-10 21:19 - 2017-02-10 21:19 - 00001922 _____ C:\Users\Public\Desktop\Avast Premier.lnk
2017-02-10 21:19 - 2017-02-10 21:19 - 00000000 ____D C:\Users\Mikey\AppData\Roaming\AVAST Software
2017-02-10 21:19 - 2017-02-10 21:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2017-02-10 21:17 - 2017-02-10 21:17 - 00003914 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-02-10 21:17 - 2017-02-10 21:17 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2017-02-10 21:16 - 2017-02-10 21:17 - 00337080 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2017-02-10 21:16 - 2017-02-10 21:13 - 00547904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-02-10 21:16 - 2017-02-10 21:13 - 00162528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-02-10 21:16 - 2017-02-10 21:13 - 00126088 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-02-10 21:16 - 2017-02-10 21:13 - 00100640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-02-10 21:16 - 2017-02-10 21:13 - 00074680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-02-10 21:16 - 2017-02-10 21:13 - 00038296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-02-10 21:16 - 2017-02-10 21:12 - 00991496 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-02-10 21:16 - 2017-02-10 21:11 - 00456456 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetSec.sys
2017-02-10 21:16 - 2017-02-10 21:11 - 00334600 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-02-10 21:16 - 2017-02-10 21:11 - 00309784 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-02-10 21:16 - 2017-02-10 21:11 - 00189768 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-02-10 21:16 - 2017-02-10 21:11 - 00048528 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-02-10 21:15 - 2017-02-14 17:30 - 00000000 ____D C:\ProgramData\NVIDIA
2017-02-10 21:15 - 2017-02-12 20:01 - 00000000 ____D C:\Users\UpdatusUser
2017-02-10 21:15 - 2017-02-10 21:15 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2017-02-10 21:15 - 2017-02-10 21:15 - 00000000 _SHDL C:\Users\UpdatusUser\My Documents
2017-02-10 21:15 - 2017-02-10 21:15 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\My Videos
2017-02-10 21:15 - 2017-02-10 21:15 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\My Pictures
2017-02-10 21:15 - 2017-02-10 21:15 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\My Music
2017-02-10 21:15 - 2017-02-10 21:15 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2017-02-10 21:15 - 2013-02-25 07:27 - 00194848 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-02-10 21:15 - 2013-02-25 07:27 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-02-10 21:15 - 2013-01-29 10:35 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2017-02-10 21:15 - 2009-07-14 09:45 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Media Center Programs
2017-02-10 21:14 - 2017-02-10 21:23 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-02-10 21:14 - 2017-02-10 21:22 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-02-10 21:14 - 2013-05-12 23:42 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2017-02-10 21:14 - 2013-05-12 23:42 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2017-02-10 21:14 - 2013-05-12 22:34 - 06491936 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-02-10 21:14 - 2013-05-12 22:34 - 03514656 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-02-10 21:14 - 2013-05-12 22:34 - 02555680 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-02-10 21:14 - 2013-05-12 22:34 - 00884512 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2017-02-10 21:14 - 2013-05-12 22:34 - 00237856 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-02-10 21:14 - 2013-05-12 22:34 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-02-10 21:14 - 2013-05-08 16:13 - 03165737 _____ C:\Windows\system32\nvcoproc.bin
2017-02-10 21:13 - 2017-02-15 17:37 - 00081696 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-02-10 21:13 - 2017-02-14 17:31 - 00110536 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-02-10 21:13 - 2017-02-10 21:13 - 00992960 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-02-10 21:13 - 2017-02-10 21:13 - 00921280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-02-10 21:13 - 2017-02-10 21:13 - 00398408 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-02-10 21:13 - 2017-02-10 21:13 - 00176584 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-02-10 21:13 - 2013-05-12 23:42 - 27775776 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 15143904 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 13403168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 09233688 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 07682960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 07641832 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 02754336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 02597344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 02363680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 01832224 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432018.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432018.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 01059560 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 00518944 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 00421152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 00370976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 00218592 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 00214448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 00181488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2017-02-10 21:13 - 2013-05-12 23:42 - 00020536 _____ C:\Windows\system32\nvinfo.pb
2017-02-10 21:12 - 2017-02-14 17:31 - 00251848 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-02-10 21:12 - 2017-02-14 17:31 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-02-10 21:12 - 2017-02-10 21:15 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-02-10 21:12 - 2017-02-10 21:12 - 00053904 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\aswTap.sys
2017-02-10 21:12 - 2017-02-10 21:12 - 00001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-02-10 21:12 - 2017-02-10 21:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-02-10 21:12 - 2017-02-10 21:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-02-10 21:12 - 2017-02-10 21:12 - 00000000 ____D C:\Program Files\Malwarebytes
2017-02-10 21:12 - 2017-01-20 07:47 - 00077416 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-02-10 21:12 - 2013-05-12 23:42 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2017-02-10 21:12 - 2013-05-12 23:42 - 21096736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-02-10 21:12 - 2013-05-12 23:42 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2017-02-10 21:12 - 2013-05-12 23:42 - 15910736 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2017-02-10 21:12 - 2013-05-12 23:42 - 12426216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2017-02-10 21:12 - 2013-05-12 23:42 - 11216160 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2017-02-10 21:12 - 2013-05-12 23:42 - 06324360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-02-10 21:12 - 2013-05-12 23:42 - 02942240 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-02-10 21:12 - 2013-05-12 23:42 - 02935696 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-02-10 21:12 - 2013-05-12 23:42 - 02002720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2017-02-10 21:12 - 2013-05-12 23:42 - 00925648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2017-02-10 21:12 - 2013-05-12 23:42 - 00550176 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-02-10 21:12 - 2013-05-12 23:42 - 00443168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-02-10 21:12 - 2013-05-12 23:42 - 00432416 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-02-10 21:12 - 2013-05-12 23:42 - 00266448 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2017-02-10 21:11 - 2017-02-10 21:11 - 00029432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetNd6.sys
2017-02-10 21:10 - 2017-02-10 21:10 - 00000000 ____D C:\Users\Mikey\AppData\Local\BMExplorer
2017-02-10 21:09 - 2017-02-10 21:09 - 00000000 ____D C:\Users\Mikey\AppData\Roaming\Atheros
2017-02-10 21:09 - 2017-02-10 17:56 - 00000000 ____D C:\ProgramData\Atheros
2017-02-10 21:07 - 2017-02-10 21:23 - 00000000 ____D C:\Program Files\AVAST Software
2017-02-10 21:04 - 2017-02-10 21:04 - 00002067 _____ C:\Users\Public\Desktop\Super-Charger.lnk
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\2C0A
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0C0A
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0C04
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0816
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0804
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0424
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\041F
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\041E
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\041D
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\041B
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0419
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0416
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0415
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0414
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0413
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0412
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0411
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0410
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\040E
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\040D
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\040C
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\040B
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\040A
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0408
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0407
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0406
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0405
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0404
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Windows\system32\0401
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\SuperChargerProfile
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\ProgramData\Downloaded Installations
2017-02-10 21:04 - 2017-02-10 21:04 - 00000000 ____D C:\Program Files (x86)\Renesas Electronics
2017-02-10 21:04 - 2017-02-10 13:31 - 00000000 ____D C:\winki
2017-02-10 21:03 - 2017-02-14 17:30 - 00034752 _____ C:\Windows\system32\Drivers\WPRO_41_2001.sys
2017-02-10 21:03 - 2017-02-10 21:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-02-10 21:02 - 2017-02-10 21:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2017-02-10 21:02 - 2012-10-19 04:42 - 00008192 ____R (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll
2017-02-10 21:02 - 2012-05-20 18:25 - 00789824 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys
2017-02-10 21:02 - 2012-05-20 18:25 - 00357184 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys
2017-02-10 21:02 - 2012-05-20 18:25 - 00019264 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys
2017-02-10 21:01 - 2017-02-15 18:14 - 00000000 ____D C:\Program Files (x86)\MSI
2017-02-10 21:01 - 2017-02-11 14:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2017-02-10 21:01 - 2017-02-10 21:03 - 00000000 ____D C:\Program Files\Intel
2017-02-10 21:01 - 2017-02-10 21:01 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2017-02-10 21:01 - 2017-02-10 21:01 - 00000000 ____D C:\Program Files\Realtek
2017-02-10 21:01 - 2017-02-10 21:01 - 00000000 ____D C:\Program Files\Google
2017-02-10 21:01 - 2017-02-10 19:40 - 00000000 ____D C:\ProgramData\Intel
2017-02-10 21:00 - 2017-02-15 18:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2017-02-10 21:00 - 2017-02-11 03:46 - 00003330 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-02-10 21:00 - 2017-02-11 03:46 - 00003202 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-02-10 21:00 - 2017-02-10 21:49 - 00001306 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-10 21:00 - 2017-02-10 21:48 - 00001294 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-02-10 21:00 - 2017-02-10 21:01 - 00000000 ____D C:\ProgramData\Google
2017-02-10 21:00 - 2017-02-10 21:01 - 00000000 ____D C:\Program Files (x86)\Google
2017-02-10 21:00 - 2017-02-10 19:42 - 00000000 ____D C:\Users\Mikey\AppData\Local\Google
2017-02-10 21:00 - 2012-09-25 14:09 - 04155536 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2017-02-10 21:00 - 2012-09-25 13:47 - 00115344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2017-02-10 21:00 - 2012-09-25 09:12 - 00352341 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2017-02-10 21:00 - 2012-09-24 13:28 - 03643024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2017-02-10 21:00 - 2012-09-24 10:32 - 02080120 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2017-02-10 21:00 - 2012-09-12 07:39 - 00628064 _____ (Creative Technology Ltd.) C:\Windows\system32\MBTHX64.dll
2017-02-10 21:00 - 2012-09-12 07:39 - 00563552 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBTHX32.dll
2017-02-10 21:00 - 2012-09-12 03:51 - 02743440 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2017-02-10 21:00 - 2012-08-28 11:25 - 01267856 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2017-02-10 21:00 - 2012-08-21 08:51 - 00881808 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2017-02-10 21:00 - 2012-08-13 12:06 - 01561744 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2017-02-10 21:00 - 2012-07-19 10:52 - 02028920 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2017-02-10 21:00 - 2012-07-19 10:51 - 00834936 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2017-02-10 21:00 - 2012-06-08 10:23 - 00083072 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2017-02-10 21:00 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2017-02-10 21:00 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2017-02-10 21:00 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2017-02-10 21:00 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2017-02-10 21:00 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2017-02-10 21:00 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2017-02-10 21:00 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2017-02-10 21:00 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2017-02-10 21:00 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2017-02-10 21:00 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2017-02-10 21:00 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2017-02-10 21:00 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2017-02-10 21:00 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2017-02-10 21:00 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2017-02-10 21:00 - 2009-11-18 01:12 - 00032344 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\MBfilt64.sys
2017-02-10 20:59 - 2017-02-10 21:01 - 00000000 ___HD C:\Program Files (x86)\Temp
2017-02-10 20:59 - 2012-08-28 11:25 - 02535008 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2017-02-10 20:59 - 2012-08-03 12:18 - 01706640 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2017-02-10 20:59 - 2012-06-20 11:26 - 00110592 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2017-02-10 20:59 - 2012-03-08 05:47 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2017-02-10 20:59 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2017-02-10 20:58 - 2017-02-11 15:35 - 00001024 ____H C:\SYSTAG.BIN
2017-02-10 20:58 - 2017-02-10 20:58 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_btath_hcrp_01009.Wdf
2017-02-10 20:58 - 2012-09-01 02:23 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01009.dll
2017-02-10 20:58 - 2012-09-01 02:23 - 00575128 _____ (Qualcomm Atheros) C:\Windows\system32\Drivers\btfilter.sys
2017-02-10 20:58 - 2012-09-01 02:23 - 00344216 _____ (Qualcomm Atheros) C:\Windows\system32\Drivers\btath_a2dp.sys
2017-02-10 20:58 - 2012-09-01 02:23 - 00178840 _____ (Qualcomm Atheros) C:\Windows\system32\Drivers\btath_hcrp.sys
2017-02-10 20:58 - 2012-09-01 02:23 - 00135832 _____ (Qualcomm Atheros) C:\Windows\system32\Drivers\btath_rcp.sys
2017-02-10 20:58 - 2012-09-01 02:23 - 00114840 _____ (Qualcomm Atheros) C:\Windows\system32\Drivers\btath_avdt.sys
2017-02-10 20:58 - 2012-09-01 02:23 - 00088728 _____ (Qualcomm Atheros) C:\Windows\system32\Drivers\btath_flt.sys
2017-02-10 20:58 - 2012-09-01 02:23 - 00077464 _____ (Qualcomm Atheros) C:\Windows\system32\Drivers\btath_lwflt.sys
2017-02-10 20:58 - 2012-09-01 02:23 - 00033944 _____ (Qualcomm Atheros) C:\Windows\system32\Drivers\btath_bus.sys
2017-02-10 20:57 - 2017-02-14 17:30 - 00000082 _____ C:\Windows\SysWOW64\winsevr.dat
2017-02-10 20:57 - 2017-02-14 17:30 - 00000000 ____D C:\Program Files (x86)\AOMEI Backupper
2017-02-10 20:57 - 2017-02-13 20:16 - 00000000 ____D C:\Users\Mikey\Documents\Bluetooth Folder
2017-02-10 20:57 - 2017-02-10 22:08 - 00000000 ____D C:\ProgramData\AomeiBR
2017-02-10 20:57 - 2017-02-10 20:57 - 00001065 _____ C:\Users\Public\Desktop\AOMEI Backupper Standard.lnk
2017-02-10 20:57 - 2017-02-10 20:57 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program
2017-02-10 20:57 - 2017-02-10 20:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Backupper
2017-02-10 20:57 - 2017-02-10 20:57 - 00000000 ____D C:\Program Files (x86)\Bluetooth Suite
2017-02-10 20:57 - 2016-12-22 16:24 - 00171952 _____ C:\Windows\system32\ammntdrv.sys
2017-02-10 20:57 - 2016-12-22 16:24 - 00051120 _____ C:\Windows\system32\ambakdrv.sys
2017-02-10 20:57 - 2016-12-22 16:24 - 00038320 _____ C:\Windows\system32\amwrtdrv.sys
2017-02-10 20:56 - 2017-02-11 03:37 - 00000000 ____D C:\Program Files (x86)\Realtek
2017-02-10 20:56 - 2017-02-10 17:56 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-02-10 20:56 - 2012-02-16 07:42 - 00676968 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2017-02-10 20:56 - 2012-02-16 07:42 - 00107624 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2017-02-10 20:56 - 2012-02-16 07:42 - 00074344 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2017-02-10 20:55 - 2017-02-12 20:33 - 00774592 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-02-10 20:55 - 2017-02-10 21:02 - 00000000 ____D C:\Program Files (x86)\Intel
2017-02-10 20:55 - 2017-02-10 20:55 - 00000000 ____D C:\Intel
2017-02-10 20:55 - 2012-07-04 20:55 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2017-02-10 20:53 - 2017-02-11 14:40 - 00000000 ____D C:\ProgramData\AVAST Software
2017-02-10 20:52 - 2017-02-10 20:52 - 00000000 ____D C:\MSI
2017-02-10 20:41 - 2017-02-15 13:24 - 00000000 ____D C:\AdwCleaner
2017-02-10 20:38 - 2017-02-10 20:38 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2017-02-10 20:14 - 2017-02-10 21:49 - 00001176 _____ C:\Users\Mikey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-02-10 20:14 - 2017-02-10 21:49 - 00001176 _____ C:\Users\Mikey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2017-02-10 20:13 - 2017-02-15 17:54 - 00000000 ____D C:\Users\Mikey
2017-02-10 20:13 - 2017-02-13 09:24 - 00000000 ____D C:\Users\Mikey\AppData\Local\VirtualStore
2017-02-10 20:13 - 2017-02-10 20:13 - 00000020 ___SH C:\Users\Mikey\ntuser.ini
2017-02-10 20:13 - 2017-02-10 20:13 - 00000000 _SHDL C:\Users\Mikey\My Documents
2017-02-10 20:13 - 2017-02-10 20:13 - 00000000 _SHDL C:\Users\Mikey\Documents\My Videos
2017-02-10 20:13 - 2017-02-10 20:13 - 00000000 _SHDL C:\Users\Mikey\Documents\My Pictures
2017-02-10 20:13 - 2017-02-10 20:13 - 00000000 _SHDL C:\Users\Mikey\Documents\My Music
2017-02-10 20:13 - 2009-07-14 09:45 - 00000000 ____D C:\Users\Mikey\AppData\Roaming\Media Center Programs
2017-02-10 20:10 - 2017-02-10 20:10 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2017-02-10 20:10 - 2017-02-10 20:10 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2017-02-10 20:07 - 2017-02-11 15:18 - 00000000 ____D C:\Windows\Panther
2017-02-10 20:01 - 2017-02-10 21:28 - 00000000 ____D C:\Users\Mikey\AppData\Local\Eqtion
2017-02-10 20:00 - 2017-02-15 13:07 - 00000000 ____D C:\Users\Mikey\AppData\Roaming\excdir
2017-02-10 19:52 - 2017-02-10 19:52 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\CrashDumps
2017-02-10 19:48 - 2017-02-10 19:48 - 00000000 ____D C:\ProgramData\TrueKey
2017-02-10 19:44 - 2017-02-10 19:44 - 00001190 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\True Key.lnk
2017-02-10 19:43 - 2017-02-10 19:43 - 00000000 ____D C:\ProgramData\Package Cache
2017-02-10 19:43 - 2017-02-10 19:43 - 00000000 ____D C:\Program Files\Intel Security
2017-02-10 19:42 - 2017-02-10 21:35 - 00000000 ____D C:\Users\Mikey\AppData\Local\Edtion
2017-02-10 19:40 - 2017-02-13 08:57 - 00000000 ____D C:\Users\Mikey\AppData\Local\CrashDumps
2017-02-10 19:40 - 2017-02-10 20:41 - 00000034 _____ C:\Users\Public\Documents\{DE764086-1C0A-4DD3-90BA-0B93BDD794BE}
2017-02-10 19:38 - 2017-02-13 09:22 - 00000000 ____D C:\Users\Mikey\AppData\Roaming\vlc
2017-02-10 19:38 - 2017-02-10 19:42 - 00001070 _____ C:\Users\Public\Desktop\VLC media player.lnk
2017-02-10 19:38 - 2017-02-10 19:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-02-10 19:37 - 2017-02-10 22:20 - 00003346 _____ C:\Windows\System32\Tasks\McAfee Remediation (Prepare)
2017-02-10 19:37 - 2017-02-10 21:17 - 00000000 ____D C:\Program Files\Common Files\AV
2017-02-10 19:37 - 2017-02-10 19:47 - 00000000 ____D C:\Program Files (x86)\McAfee
2017-02-10 19:37 - 2017-02-10 19:37 - 00000000 ____D C:\Program Files\Common Files\McAfee
2017-02-10 19:37 - 2017-02-10 19:37 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2017-02-10 19:31 - 2017-02-10 21:15 - 00000000 ____D C:\Users\Mikey\AppData\Local\syslog
2017-02-10 19:31 - 2017-02-10 19:31 - 00003584 _____ C:\Windows\System32\Tasks\syslog
2017-02-10 19:24 - 2017-02-15 13:07 - 00000000 ____D C:\Program Files (x86)\Removewat 2.2.7
2017-02-10 19:22 - 2017-02-10 19:19 - 00000030 _____ C:\AVScanner.ini
2017-02-10 19:20 - 2017-02-10 19:20 - 00000000 ____D C:\Users\Mikey\AppData\Roaming\Adobe
2017-02-10 19:20 - 2017-02-10 19:20 - 00000000 ____D C:\Users\Mikey\AppData\LocalLow\Adobe
2017-02-10 19:20 - 2017-02-10 19:20 - 00000000 ____D C:\Users\Mikey\AppData\Local\CEF
2017-02-10 19:19 - 2017-02-11 14:52 - 00000000 ____D C:\ProgramData\McAfee
2017-02-10 19:19 - 2017-02-10 20:11 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-10 19:19 - 2017-02-10 20:10 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-02-10 19:19 - 2017-02-10 19:53 - 00000000 ____D C:\Program Files\TrueKey
2017-02-10 19:19 - 2017-02-10 19:19 - 00002047 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2017-02-10 19:19 - 2017-02-10 19:19 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-02-10 19:18 - 2017-02-10 20:09 - 00000000 ____D C:\ProgramData\Adobe
2017-02-10 19:15 - 2017-02-10 19:20 - 00000000 ____D C:\Users\Mikey\AppData\Local\Adobe
2017-02-10 19:15 - 2017-02-10 19:15 - 00000000 ____D C:\Users\Mikey\AppData\Roaming\WinRAR
2017-02-10 19:14 - 2017-02-10 19:22 - 00000000 ____D C:\Program Files\WinRAR
2017-02-10 19:14 - 2017-02-10 19:14 - 00000000 ____D C:\Users\Mikey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-10 19:14 - 2017-02-10 19:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-10 18:40 - 2017-02-10 18:40 - 00000000 ____D C:\Windows\system32\SPReview
2017-02-10 18:40 - 2017-02-10 18:40 - 00000000 ____D C:\Windows\system32\EventProviders
2017-02-10 18:39 - 2017-02-10 18:40 - 00000000 ____D C:\Windows\system32\MRT
2017-02-10 18:38 - 2017-02-10 18:38 - 135657872 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-02-10 18:30 - 2010-11-20 15:27 - 08988160 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-02-10 18:30 - 2010-11-20 15:27 - 03715584 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2017-02-10 18:30 - 2010-11-20 15:27 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2017-02-10 18:30 - 2010-11-20 15:26 - 12260864 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-02-10 18:30 - 2010-11-20 15:26 - 01838080 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2017-02-10 18:30 - 2010-11-20 14:19 - 05977600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-02-10 18:30 - 2010-11-20 14:19 - 03215872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2017-02-10 18:30 - 2010-11-20 13:07 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2017-02-10 18:30 - 2010-11-05 03:57 - 00048976 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2017-02-10 18:29 - 2010-11-20 15:44 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe
2017-02-10 18:29 - 2010-11-20 15:44 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL
2017-02-10 18:29 - 2010-11-20 15:39 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll
2017-02-10 18:29 - 2010-11-20 15:34 - 00363392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
2017-02-10 18:29 - 2010-11-20 15:34 - 00295808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2017-02-10 18:29 - 2010-11-20 15:34 - 00215936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2017-02-10 18:29 - 2010-11-20 15:34 - 00199552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbus.sys
2017-02-10 18:29 - 2010-11-20 15:34 - 00071552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
2017-02-10 18:29 - 2010-11-20 15:34 - 00046464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmstorfl.sys
2017-02-10 18:29 - 2010-11-20 15:34 - 00034688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storvsc.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00982912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00366976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00299392 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2017-02-10 18:29 - 2010-11-20 15:33 - 00289664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00263040 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2017-02-10 18:29 - 2010-11-20 15:33 - 00213888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00184704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00171392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00155008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00140672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00103808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00078720 _____ (Hewlett-Packard Company) C:\Windows\system32\Drivers\HpSAMD.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00063360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00052096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhv.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00031104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys
2017-02-10 18:29 - 2010-11-20 15:33 - 00014720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys
2017-02-10 18:29 - 2010-11-20 15:32 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll
2017-02-10 18:29 - 2010-11-20 15:32 - 00334208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2017-02-10 18:29 - 2010-11-20 15:32 - 00179072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2017-02-10 18:29 - 2010-11-20 15:32 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2017-02-10 18:29 - 2010-11-20 15:32 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2017-02-10 18:29 - 2010-11-20 15:28 - 00780008 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2017-02-10 18:29 - 2010-11-20 15:28 - 00166784 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 14633472 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 03860992 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 03650560 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 03027968 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
2017-02-10 18:29 - 2010-11-20 15:27 - 03008000 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 02652160 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 02543616 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 02262528 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 02250752 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 02193920 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 02146816 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 02086912 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 02072576 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 02018304 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01911808 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01900544 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01808384 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01753088 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01689600 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01672704 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01646080 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01556992 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01509888 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01490944 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01465344 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01363968 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01326080 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01281024 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01243136 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01212416 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01197056 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01158656 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01098240 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01082880 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01050624 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01026560 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 01008128 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00933888 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00898560 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00867840 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00849920 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00812032 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00800256 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00799744 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00781312 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00695808 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00691200 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00636416 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00633344 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00605696 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00594432 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00582656 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00577536 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00568832 _____ (Microsoft Corporation) C:\Windows\system32\scrptadm.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00481280 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL
2017-02-10 18:29 - 2010-11-20 15:27 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00451072 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00418816 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00403968 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00300032 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00290304 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
2017-02-10 18:29 - 2010-11-20 15:27 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL
2017-02-10 18:29 - 2010-11-20 15:27 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00253440 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
2017-02-10 18:29 - 2010-11-20 15:27 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00221696 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00214528 _____ (Microsoft Corporation) C:\Windows\system32\umrdp.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\tscfgwmi.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\tspubwmi.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\tssrvlic.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL
2017-02-10 18:29 - 2010-11-20 15:27 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2017-02-10 18:29 - 2010-11-20 15:27 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 03391488 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 03205120 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 02746880 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 02444288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 02067456 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 01544192 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 01457664 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 01340416 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 01244160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00934912 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00861184 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00787968 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00551936 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00403968 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00321024 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00317952 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00281600 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00240640 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
2017-02-10 18:29 - 2010-11-20 15:26 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00116224 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\fms.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\LSCSHostPolicy.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll
2017-02-10 18:29 - 2010-11-20 15:26 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 03957760 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 03745792 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 03524608 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 01600512 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 01504256 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 01264640 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 01116672 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 01065984 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00974336 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00958464 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00897536 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00840192 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00749568 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00705024 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2017-02-10 18:29 - 2010-11-20 15:25 - 00692224 _____ (Microsoft Corporation) C:\Windows\system32\cscsvc.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00594432 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00577024 _____ (Microsoft Corporation) C:\Windows\system32\AdmTmpl.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00549888 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\appmgr.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00472064 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00240640 _____ (Microsoft Corporation) C:\Windows\system32\cscobj.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\PresentationSettings.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00128000 _____ (Microsoft) C:\Windows\system32\Robocopy.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00095744 _____ C:\Windows\system32\RDVGHelper.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\rdpsign.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\PushPrinterConnections.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll
2017-02-10 18:29 - 2010-11-20 15:25 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2017-02-10 18:29 - 2010-11-20 15:25 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 01538560 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-02-10 18:29 - 2010-11-20 15:24 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00899584 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr
2017-02-10 18:29 - 2010-11-20 15:24 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
2017-02-10 18:29 - 2010-11-20 15:24 - 00793088 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00763904 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2017-02-10 18:29 - 2010-11-20 15:24 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl
2017-02-10 18:29 - 2010-11-20 15:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl
2017-02-10 18:29 - 2010-11-20 15:24 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl
2017-02-10 18:29 - 2010-11-20 15:24 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
2017-02-10 18:29 - 2010-11-20 15:24 - 00474112 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2017-02-10 18:29 - 2010-11-20 15:24 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2017-02-10 18:29 - 2010-11-20 15:24 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00373248 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl
2017-02-10 18:29 - 2010-11-20 15:24 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl
2017-02-10 18:29 - 2010-11-20 15:24 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr
2017-02-10 18:29 - 2010-11-20 15:24 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2017-02-10 18:29 - 2010-11-20 15:24 - 00300032 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax
2017-02-10 18:29 - 2010-11-20 15:24 - 00272896 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr
2017-02-10 18:29 - 2010-11-20 15:24 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr
2017-02-10 18:29 - 2010-11-20 15:24 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\fsquirt.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv
2017-02-10 18:29 - 2010-11-20 15:24 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax
2017-02-10 18:29 - 2010-11-20 15:24 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2017-02-10 18:29 - 2010-11-20 15:24 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax
2017-02-10 18:29 - 2010-11-20 15:24 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax
2017-02-10 18:29 - 2010-11-20 15:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax
2017-02-10 18:29 - 2010-11-20 15:24 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe
2017-02-10 18:29 - 2010-11-20 15:24 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax
2017-02-10 18:29 - 2010-11-20 15:24 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2017-02-10 18:29 - 2010-11-20 14:55 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-02-10 18:29 - 2010-11-20 14:51 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-02-10 18:29 - 2010-11-20 14:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NAPHLPR.DLL
2017-02-10 18:29 - 2010-11-20 14:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthFWSnapin.dll
2017-02-10 18:29 - 2010-11-20 14:30 - 00079232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvgumd32.dll
2017-02-10 18:29 - 2010-11-20 14:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\basecsp.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsCpl.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncCenter.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsservices.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPEncEn.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanpref.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 01229824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 01175040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RacEngn.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMNetMgr.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00980992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Vault.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00870912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webservices.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqlsrv32.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00626176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\riched20.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00464896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrptadm.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shwebsvc.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiadefui.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlangpui.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00410624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanui.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxs.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\termmgr.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizeng.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpeffects.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shlwapi.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSATAPI.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsvcs.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskcomp.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srchadmin.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00283648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scansetting.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tapisrv.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00229376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wavemsp.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcomapi.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpsrcwp.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpipcfg.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasppp.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scecli.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spp.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\syncui.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twext.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00140800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxlib.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\regapi.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samcli.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RpcRtRemote.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wtsapi32.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtutils.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sisbkup.dll
2017-02-10 18:29 - 2010-11-20 14:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVCORE.DLL
2017-02-10 18:29 - 2010-11-20 14:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\networkmap.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pnidui.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcenter.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pla.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 01414144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OobeFldr.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NaturalLanguage6.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PerfCenterCPL.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbc32.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceApi.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercpl.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnfldr.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshipsec.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\photowiz.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netdiagfx.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OnLineIDCpl.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\onex.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qcap.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QAGENT.DLL
2017-02-10 18:29 - 2010-11-20 14:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL
2017-02-10 18:29 - 2010-11-20 14:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\provsvc.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netjoin.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00153088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prntvpt.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netid.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prncache.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nci.dll
2017-02-10 18:29 - 2010-11-20 14:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntlanman.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 10990080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 02291712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 02064384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 01698816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40u.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00856576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallControlPanel.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontext.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2fs.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00606208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00599552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00592384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00429056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\localsec.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ipsmsnap.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00389120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxclu.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hgcpl.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtrmgr.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprddm.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MediaMetadataHandler.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAC3ENC.DLL
2017-02-10 18:29 - 2010-11-20 14:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstask.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedynos.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedyn.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasrad.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msutb.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00148992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ifsutil.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logoncli.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fde.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvfw32.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IPHLPAPI.DLL
2017-02-10 18:29 - 2010-11-20 14:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00093696 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\SysWOW64\fms.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciavi32.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasacct.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hbaapi.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdeploy.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mimefilt.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\httpapi.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msasn1.dll
2017-02-10 18:29 - 2010-11-20 14:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 03727872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\accessibilitycpl.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certmgr.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 01400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DxpTaskSync.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 01171456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 01076736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 01040384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 01003520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroles.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00744448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00743424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00740864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\batmeter.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00739840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00685056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsuiext.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuxiliaryDisplayCpl.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXPTaskRingtone.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00537600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenterCPL.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00522752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00508416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00484864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceCenter.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00438272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AdmTmpl.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appmgr.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00333824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3ui.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroleui.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00257024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpx.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00252928 _____ (Microsoft) C:\Windows\SysWOW64\DShowRdpFilter.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\audiodev.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00222208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\defaultlocationcpl.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00205312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efscore.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\activeds.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dskquoui.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsldp.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoplay.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscobj.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabview.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscmmc.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3api.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3cfg.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2017-02-10 18:29 - 2010-11-20 14:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-02-10 18:29 - 2010-11-20 14:17 - 01049600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00586752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfrgui.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eudcedit.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sethc.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskmgr.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PkgMgr.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetup.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\net1.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00098816 _____ (Microsoft) C:\Windows\SysWOW64\Robocopy.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nslookup.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\isoburn.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w32tm.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PushPrinterConnections.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzutil.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ftp.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\proquota.exe
2017-02-10 18:29 - 2010-11-20 14:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userinit.exe
2017-02-10 18:29 - 2010-11-20 14:16 - 01466368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-02-10 18:29 - 2010-11-20 14:16 - 00905216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmsys.cpl
2017-02-10 18:29 - 2010-11-20 14:16 - 00776192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe
2017-02-10 18:29 - 2010-11-20 14:16 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl
2017-02-10 18:29 - 2010-11-20 14:16 - 00679424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe
2017-02-10 18:29 - 2010-11-20 14:16 - 00668160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2017-02-10 18:29 - 2010-11-20 14:16 - 00658944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe
2017-02-10 18:29 - 2010-11-20 14:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appwiz.cpl
2017-02-10 18:29 - 2010-11-20 14:16 - 00516096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\main.cpl
2017-02-10 18:29 - 2010-11-20 14:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoScreensaver.scr
2017-02-10 18:29 - 2010-11-20 14:16 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2017-02-10 18:29 - 2010-11-20 14:16 - 00345088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl
2017-02-10 18:29 - 2010-11-20 14:16 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysdm.cpl
2017-02-10 18:29 - 2010-11-20 14:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2017-02-10 18:29 - 2010-11-20 14:16 - 00293888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ssText3d.scr
2017-02-10 18:29 - 2010-11-20 14:16 - 00281088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdm.tsp
2017-02-10 18:29 - 2010-11-20 14:16 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSNP.ax
2017-02-10 18:29 - 2010-11-20 14:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdmaud.drv
2017-02-10 18:29 - 2010-11-20 14:16 - 00068608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSTPager.ax
2017-02-10 18:29 - 2010-11-20 14:08 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2017-02-10 18:29 - 2010-11-20 14:08 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-02-10 18:29 - 2010-11-20 13:06 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpdr.sys
2017-02-10 18:29 - 2010-11-20 13:05 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll
2017-02-10 18:29 - 2010-11-20 13:04 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2017-02-10 18:29 - 2010-11-20 13:04 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2017-02-10 18:29 - 2010-11-20 12:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys
2017-02-10 18:29 - 2010-11-20 12:52 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys
2017-02-10 18:29 - 2010-11-20 12:52 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\raspptp.sys
2017-02-10 18:29 - 2010-11-20 12:52 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2017-02-10 18:29 - 2010-11-20 12:52 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipfltdrv.sys
2017-02-10 18:29 - 2010-11-20 12:52 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2017-02-10 18:29 - 2010-11-20 12:44 - 00552448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2017-02-10 18:29 - 2010-11-20 12:44 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2017-02-10 18:29 - 2010-11-20 12:44 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2017-02-10 18:29 - 2010-11-20 12:44 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys
2017-02-10 18:29 - 2010-11-20 12:44 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2017-02-10 18:29 - 2010-11-20 12:44 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2017-02-10 18:29 - 2010-11-20 12:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umbus.sys
2017-02-10 18:29 - 2010-11-20 12:43 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2017-02-10 18:29 - 2010-11-20 12:43 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2017-02-10 18:29 - 2010-11-20 12:33 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2017-02-10 18:29 - 2010-11-20 11:58 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\vmicsvc.exe
2017-02-10 18:29 - 2010-11-20 11:49 - 00367104 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-02-10 18:29 - 2010-11-20 11:49 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-02-10 18:29 - 2010-11-20 11:27 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\csc.sys
2017-02-10 18:29 - 2010-11-20 11:27 - 00309248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2017-02-10 18:29 - 2010-11-20 11:26 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2017-02-10 18:29 - 2010-11-20 11:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2017-02-10 18:29 - 2010-11-20 11:06 - 00294400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-02-10 18:29 - 2010-11-05 04:20 - 00347904 _____ C:\Windows\system32\systemsf.ebd
2017-02-10 18:29 - 2010-11-05 04:11 - 00433512 _____ (Microsoft Corporation) C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2017-02-10 18:29 - 2010-11-05 04:11 - 00312168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCEWMDRMNDBootstrap.dll
2017-02-10 18:29 - 2010-11-05 03:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2017-02-10 18:29 - 2010-11-05 03:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2017-02-10 18:29 - 2010-11-05 03:57 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2017-02-10 18:29 - 2010-11-05 03:53 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2017-02-10 18:29 - 2010-11-05 03:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2017-02-10 18:29 - 2010-11-05 03:53 - 00109928 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2017-02-10 18:29 - 2010-11-05 03:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2017-02-10 18:29 - 2009-07-14 03:16 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pmcsnap.dll
2017-02-10 18:29 - 2009-07-14 03:16 - 00238080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ppcsnap.dll
2017-02-10 18:29 - 2009-07-14 03:16 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpmonui.dll
2017-02-10 18:28 - 2010-11-20 15:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL
2017-02-10 18:28 - 2010-11-20 15:27 - 01080320 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00529408 _____ (Microsoft Corporation) C:\Windows\system32\wbemcomn.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00527872 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00435712 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00431104 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
2017-02-10 18:28 - 2010-11-20 15:27 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\QCLIPROV.DLL
2017-02-10 18:28 - 2010-11-20 15:27 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\napdsnap.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\msdmo.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\shgina.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\TRAPI.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\wshirda.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\riched32.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\rdpcfgex.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2017-02-10 18:28 - 2010-11-20 15:27 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2017-02-10 18:28 - 2010-11-20 15:27 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 01087488 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00623104 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00573952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\KMSVC.DLL
2017-02-10 18:28 - 2010-11-20 15:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\luainstall.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\FXSMON.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz32.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dsauth.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\HotStartUserAgent.dll
2017-02-10 18:28 - 2010-11-20 15:26 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll
2017-02-10 18:28 - 2010-11-20 15:25 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll
2017-02-10 18:28 - 2010-11-20 15:25 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\CscMig.dll
2017-02-10 18:28 - 2010-11-20 15:25 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\amstream.dll
2017-02-10 18:28 - 2010-11-20 15:25 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\CertPolEng.dll
2017-02-10 18:28 - 2010-11-20 15:25 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\takeown.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\repair-bde.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll
2017-02-10 18:28 - 2010-11-20 15:25 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-02-10 18:28 - 2010-11-20 15:25 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll
2017-02-10 18:28 - 2010-11-20 15:25 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll
2017-02-10 18:28 - 2010-11-20 15:25 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\qprocess.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll
2017-02-10 18:28 - 2010-11-20 15:25 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\tskill.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\qappsrv.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\tscon.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\tsdiscon.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\shadow.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\rwinsta.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\reset.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\query.exe
2017-02-10 18:28 - 2010-11-20 15:25 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\BWUnpairElevated.dll
2017-02-10 18:28 - 2010-11-20 15:25 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll
2017-02-10 18:28 - 2010-11-20 15:25 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL
2017-02-10 18:28 - 2010-11-20 15:24 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\iscsicli.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax
2017-02-10 18:28 - 2010-11-20 15:24 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfg.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\desk.cpl
2017-02-10 18:28 - 2010-11-20 15:24 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\mobsync.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\cmstp.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax
2017-02-10 18:28 - 2010-11-20 15:24 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00071168 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\djoin.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\g711codc.ax
2017-02-10 18:28 - 2010-11-20 15:24 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\vbisurf.ax
2017-02-10 18:28 - 2010-11-20 15:24 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\choice.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\LogonUI.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\chgport.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\chglogon.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\logoff.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\chgusr.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\FXSUNATD.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\change.exe
2017-02-10 18:28 - 2010-11-20 15:24 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2017-02-10 18:28 - 2010-11-20 15:16 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2017-02-10 18:28 - 2010-11-20 15:15 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2017-02-10 18:28 - 2010-11-20 15:15 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-02-10 18:28 - 2010-11-20 15:14 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll
2017-02-10 18:28 - 2010-11-20 15:13 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\RDPENCDD.dll
2017-02-10 18:28 - 2010-11-20 15:13 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2017-02-10 18:28 - 2010-11-20 15:12 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\pifmgr.dll
2017-02-10 18:28 - 2010-11-20 15:09 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\vmicres.dll
2017-02-10 18:28 - 2010-11-20 15:09 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\vmbusres.dll
2017-02-10 18:28 - 2010-11-20 15:09 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\vmstorfltres.dll
2017-02-10 18:28 - 2010-11-20 15:02 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
2017-02-10 18:28 - 2010-11-20 15:02 - 00457216 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
2017-02-10 18:28 - 2010-11-20 15:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUQ.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUF.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDSG.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\kbdlk41a.dll
2017-02-10 18:28 - 2010-11-20 15:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDGKL.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ1.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDSF.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDPO.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDNEPR.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR1.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDUS.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR1.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTURME.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAJIK.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDMON.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAORI.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT1.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBULG.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBLR.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2017-02-10 18:28 - 2010-11-20 15:02 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGEO.DLL
2017-02-10 18:28 - 2010-11-20 14:58 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll
2017-02-10 18:28 - 2010-11-20 14:54 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\BlbEvents.dll
2017-02-10 18:28 - 2010-11-20 14:51 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2017-02-10 18:28 - 2010-11-20 14:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NAPCRYPT.DLL
2017-02-10 18:28 - 2010-11-20 14:21 - 00616960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmdev.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00436736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmnet.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00363008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wbemcomn.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDSp.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\raschap.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqlcese30.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpdxm.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdwcn.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdscore.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vdsbas.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remotepg.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpps.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiavideo.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShServiceObj.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpshell.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppinst.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srvcli.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QUTIL.DLL
2017-02-10 18:28 - 2010-11-20 14:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserAccountControlSettings.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdmat.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vfwwdm32.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpd3d.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsnmp32.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wkscli.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimgvw.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\utildll.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vpnikeapi.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsdchngr.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TRAPI.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdprefdrvapi.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shgina.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spopk.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schedcli.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\syssetup.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsbyuv.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshirda.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shunimpl.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\riched32.dll
2017-02-10 18:28 - 2010-11-20 14:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2017-02-10 18:28 - 2010-11-20 14:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\networkexplorer.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpcServices.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\onexui.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceStatus.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00283136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdv.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceSyncProvider.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetapi.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mydocs.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00121344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL
2017-02-10 18:28 - 2010-11-20 14:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olethk32.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QCLIPROV.DLL
2017-02-10 18:28 - 2010-11-20 14:20 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\napdsnap.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptui.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdhui.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netutils.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfts.dll
2017-02-10 18:28 - 2010-11-20 14:20 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00219648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iTVData.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprapi.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasrecst.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fphc.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00096256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00082944 _____ (Radius Inc.) C:\Windows\SysWOW64\iccvid.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetmib1.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iyuv_32.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\luainstall.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciqtz32.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvidc32.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdmo.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsium.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msyuv.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lsmproxy.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\muifontsetup.dll
2017-02-10 18:28 - 2010-11-20 14:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrle32.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00402944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00242176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00211456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairingFolder.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxdiagn.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EhStorAPI.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00115200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3msm.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\avifil32.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabinet.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\amstream.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cca.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertPolEng.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\acppage.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscapi.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsauth.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzSqlExt.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscdll.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elsTrans.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bitsperf.dll
2017-02-10 18:28 - 2010-11-20 14:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_ISCII.DLL
2017-02-10 18:28 - 2010-11-20 14:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browseui.dll
2017-02-10 18:28 - 2010-11-20 14:17 - 00327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimserv.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00276480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskraid.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfmon.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00144896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsicli.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskpart.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mobsync.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logagent.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmstp.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MuiUnattend.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findstr.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\takeown.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\runonce.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unlodctr.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiougc.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2017-02-10 18:28 - 2010-11-20 14:17 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2017-02-10 18:28 - 2010-11-20 14:16 - 00878592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Bubbles.scr
2017-02-10 18:28 - 2010-11-20 14:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mystify.scr
2017-02-10 18:28 - 2010-11-20 14:16 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Ribbons.scr
2017-02-10 18:28 - 2010-11-20 14:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bitsadmin.exe
2017-02-10 18:28 - 2010-11-20 14:16 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VBICodec.ax
2017-02-10 18:28 - 2010-11-20 14:16 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl
2017-02-10 18:28 - 2010-11-20 14:16 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\desk.cpl
2017-02-10 18:28 - 2010-11-20 14:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Kswdmcap.ax
2017-02-10 18:28 - 2010-11-20 14:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kstvtune.ax
2017-02-10 18:28 - 2010-11-20 14:16 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mpeg2Data.ax
2017-02-10 18:28 - 2010-11-20 14:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSDvbNP.ax
2017-02-10 18:28 - 2010-11-20 14:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksxbar.ax
2017-02-10 18:28 - 2010-11-20 14:16 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\g711codc.ax
2017-02-10 18:28 - 2010-11-20 14:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbisurf.ax
2017-02-10 18:28 - 2010-11-20 14:08 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00119808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imm32.dll
2017-02-10 18:28 - 2010-11-20 14:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTUQ.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTUF.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDSG.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdlk41a.dll
2017-02-10 18:28 - 2010-11-20 14:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDGR1.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDGKL.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDCZ1.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDSF.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDPO.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDNEPR.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINTAM.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINORI.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINMAR.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINKAN.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINHIN.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINBEN.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDUS.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDUGHR1.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTURME.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAJIK.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDMON.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDMAORI.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDLT1.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINTEL.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDGEO.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBULG.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBLR.DLL
2017-02-10 18:28 - 2010-11-20 14:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2017-02-10 18:28 - 2010-11-20 14:07 - 01164800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2017-02-10 18:28 - 2010-11-20 14:07 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizres.dll
2017-02-10 18:28 - 2010-11-20 14:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-02-10 18:28 - 2010-11-20 14:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2017-02-10 18:28 - 2010-11-20 14:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pifmgr.dll
2017-02-10 18:28 - 2010-11-20 14:00 - 01027584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10.IME
2017-02-10 18:28 - 2010-11-20 14:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imkr80.ime
2017-02-10 18:28 - 2010-11-20 13:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnaddr.dll
2017-02-10 18:28 - 2010-11-20 13:37 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbrpm.sys
2017-02-10 18:28 - 2010-11-20 13:34 - 00482816 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-02-10 18:28 - 2010-11-20 12:52 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
2017-02-10 18:28 - 2010-11-20 12:51 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2017-02-10 18:28 - 2010-11-20 12:50 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndisuio.sys
2017-02-10 18:28 - 2010-11-20 12:49 - 00386048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-02-10 18:28 - 2010-11-20 12:49 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2017-02-10 18:28 - 2010-11-20 12:44 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys
2017-02-10 18:28 - 2010-11-20 12:44 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2017-02-10 18:28 - 2010-11-20 12:44 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys
2017-02-10 18:28 - 2010-11-20 12:43 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2017-02-10 18:28 - 2010-11-20 12:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2017-02-10 18:28 - 2010-11-20 12:34 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
2017-02-10 18:28 - 2010-11-20 12:33 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CompositeBus.sys
2017-02-10 18:28 - 2010-11-20 12:33 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2017-02-10 18:28 - 2010-11-20 12:14 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-02-10 18:28 - 2010-11-20 12:09 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys
2017-02-10 18:28 - 2010-11-20 12:04 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2017-02-10 18:28 - 2010-11-20 11:57 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\VmbusCoinstaller.dll
2017-02-10 18:28 - 2010-11-20 11:57 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\VmdCoinstall.dll
2017-02-10 18:28 - 2010-11-20 11:57 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\IcCoinstall.dll
2017-02-10 18:28 - 2010-11-20 11:57 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\vmictimeprovider.dll
2017-02-10 18:28 - 2010-11-20 11:57 - 00021760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VMBusHID.sys
2017-02-10 18:28 - 2010-11-20 11:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\vmbuspipe.dll
2017-02-10 18:28 - 2010-11-20 11:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vms3cap.sys
2017-02-10 18:28 - 2010-11-20 11:30 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpipmi.sys
2017-02-10 18:28 - 2010-11-20 11:26 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2017-02-10 18:28 - 2010-11-20 11:22 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdi.sys
2017-02-10 18:28 - 2010-11-20 11:19 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys
2017-02-10 18:28 - 2010-11-10 03:48 - 00010429 _____ C:\Windows\system32\ScavengeSpace.xml
2017-02-10 18:28 - 2010-11-05 04:20 - 00105559 _____ C:\Windows\SysWOW64\RacRules.xml
2017-02-10 18:28 - 2010-11-05 04:20 - 00105559 _____ C:\Windows\system32\RacRules.xml
2017-02-10 18:28 - 2009-06-10 23:40 - 00146389 _____ C:\Windows\SysWOW64\printmanagement.msc
2017-02-10 18:28 - 2009-06-10 23:39 - 00001041 _____ C:\Windows\SysWOW64\tcpbidi.xml
2017-02-10 17:56 - 2017-02-10 17:56 - 00000000 ____D C:\Program Files (x86)\Atheros
2017-02-10 17:56 - 2011-11-22 04:41 - 00008904 _____ C:\Windows\system32\athurextx.cat
2017-02-10 17:56 - 2011-10-06 12:10 - 01931264 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athurx.sys
2017-02-10 17:56 - 2011-10-06 12:10 - 01931264 _____ (Atheros Communications, Inc.) C:\Windows\system32\athurx.sys
2017-02-10 17:48 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2017-02-10 17:48 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2017-02-10 17:47 - 2016-06-25 18:03 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\EOSNotify.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-02-02 11:28 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\config\TxR
2017-02-15 15:10 - 2009-07-14 07:13 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
2017-02-15 15:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-02-15 10:56 - 2009-07-14 06:45 - 00032016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-02-15 10:56 - 2009-07-14 06:45 - 00032016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-02-14 17:30 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-02-13 09:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2017-02-13 09:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2017-02-13 08:30 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-02-13 07:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2017-02-13 07:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2017-02-12 19:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2017-02-12 19:55 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2017-02-11 14:55 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2017-02-10 21:04 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\system32\0409
2017-02-10 21:04 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2017-02-10 20:10 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-02-10 20:09 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2017-02-10 20:08 - 2009-07-14 09:46 - 00000000 ____D C:\Windows\CSC
2017-02-10 20:07 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2017-02-10 19:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2017-02-10 19:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2017-02-10 19:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-02-10 19:50 - 2009-07-14 09:46 - 00000000 __SHD C:\Windows\BitLockerDiscoveryVolumeContents
2017-02-10 19:50 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2017-02-10 19:50 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Portable Devices
2017-02-10 19:50 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-02-10 19:50 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2017-02-10 19:50 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker
2017-02-10 19:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Setup
2017-02-10 19:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2017-02-10 19:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2017-02-10 19:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\manifeststore
2017-02-10 19:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\AdvancedInstallers
2017-02-10 19:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Setup
2017-02-10 19:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe
2017-02-10 19:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\migwiz
2017-02-10 19:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\manifeststore
2017-02-10 19:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2017-02-10 19:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\servicing
2017-02-10 19:28 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-02-10 19:28 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2017-02-10 18:43 - 2009-07-14 04:36 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2017-02-10 18:43 - 2009-07-14 04:36 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll

Some files in TEMP:
====================
2012-10-02 02:44 - 2012-10-02 02:44 - 0178824 ____R (Microsoft Corporation) C:\Users\Mikey\AppData\Local\Temp\ose00000.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-02-13 09:45

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-02-2017 01
Ran by Mikey (15-02-2017 20:11:19)
Running from C:\Users\Mikey\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2017-02-10 18:13:14)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-1807781507-1846622349-4265815653-500 - Administrator - Disabled)
Guest (S-1-5-21-1807781507-1846622349-4265815653-501 - Limited - Disabled)
Mikey (S-1-5-21-1807781507-1846622349-4265815653-1000 - Administrator - Enabled) => C:\Users\Mikey
UpdatusUser (S-1-5-21-1807781507-1846622349-4265815653-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.023.20056 - Adobe Systems Incorporated)
AOMEI Backupper Standard (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536CE9D}_is1) (Version: - AOMEI Technology Co., Ltd.)
Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 8.0 - Atheros)
Avast Premier (HKLM-x32\...\Avast Antivirus) (Version: 17.1.2286 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.26 - Piriform)
Core Temp 1.5.1 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.5.1 - ALCPU)
GIGABYTE OC_GURU II (HKLM-x32\...\InstallShield_{5588D686-D23B-4C9D-BDFA-2A7875CD3722}) (Version: 1.46.0000 - GIGABYTE Technology Co.,Ltd.)
GIGABYTE OC_GURU II (x32 Version: 1.46.0000 - GIGABYTE Technology Co.,Ltd.) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.21.99 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.15.281 - SurfRight B.V.)
Intel Security True Key (HKLM\...\TrueKey) (Version: 4.12.108.1 - Intel Security)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.20.1337 - Intel Corporation)
Intel(R) Smart Connect Technology 3.0 x64 (HKLM\...\{DE788AD4-F7CE-4995-ADF8-56174A7B613C}) (Version: 3.0.41.1571 - Intel)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 6.2.0.934 - IObit)
Malwarebytes version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
NVIDIA 3D Vision Controller Driver 320.18 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 320.18 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 320.18 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 320.18 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.1 - NVIDIA Corporation)
NVIDIA Graphics Driver 320.18 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 320.18 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.24.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.24.2 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
OTPService (HKLM-x32\...\{B05F7750-8800-4520-9732-9C841246C8E2}_is1) (Version: 1.0.004 - MSI)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
PowerISO (HKLM-x32\...\PowerISO) (Version: 6.8 - Power Software Ltd)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.208 - Qualcomm Atheros Communications)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.53.216.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6738 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{17528CE4-C333-48FB-A9E4-D841E795CDCE}) (Version: 3.0.12.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 3.0.12.0 - Renesas Electronics Corporation) Hidden
SafeZone Stable 3.55.2393.527 (x32 Version: 3.55.2393.527 - Avast Software) Hidden
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Super-Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.2.014 - MSI)
Thief Gold (HKLM-x32\...\ThiefGoldDeinstallKey) (Version: - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Windows Media Player 5.2 (HKLM-x32\...\MPlayer2) (Version: - )
Winki (HKLM-x32\...\{81CF5153-38CF-41e2-AC3C-3D477C987D96}_is1) (Version: 3.2.126 - MSI)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {15A14268-87C4-48BC-851E-A9C501387478} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-11] (Google Inc.)
Task: {34E25EC2-F0A2-4E8F-8A01-ED0715FF48DB} - System32\Tasks\syslog => C:\Users\Mikey\AppData\Local\syslog\syslog.exe <==== ATTENTION
Task: {3EC9E17F-A5F1-47B1-966C-4DF6BA17009E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {5C8EE85C-5F9C-464C-A3BE-A1F65B822372} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-02-10] (AVAST Software)
Task: {73E36813-D9BC-4307-8C34-9535565D6FF3} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {8C8BE1EF-2E4B-411D-AA6F-C4250C3ADD09} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-12-21] (Piriform Ltd)
Task: {8E6BE11D-5AEC-41E0-A92A-E67488D1AC95} - System32\Tasks\SafeZone scheduled Autoupdate 1486754744 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-02-03] (Avast Software)
Task: {91CAFD2B-D095-42D6-BD9F-A23E79CE8416} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation)
Task: {AFAED6A5-FCCE-4864-8C8A-A156A0C6A039} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {B5369430-E53A-4FB3-95BB-19826616E029} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-11] (Google Inc.)
Task: {C01FBB2B-684F-4ACA-A0BF-494E89B67081} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {C39690B4-1955-4DAB-BC9C-7FC5CD6861B6} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe [2016-03-01] (McAfee, Inc.)
Task: {E7F996A2-6634-4E04-81D9-255B529790B2} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-02-10] (AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Mikey\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->
ShortcutWithArgument: C:\Users\Mikey\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->

==================== Loaded Modules (Whitelisted) ==============

2012-08-17 06:36 - 2012-08-17 06:36 - 00149032 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2012-08-17 06:36 - 2012-08-17 06:36 - 00058920 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2017-02-10 21:12 - 2017-01-20 07:47 - 02264352 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-02-10 21:12 - 2017-01-20 07:47 - 02829776 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll
2017-02-10 21:12 - 2017-01-20 07:47 - 02254800 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-02-10 21:11 - 2017-02-10 21:11 - 00512096 _____ () C:\Program Files\AVAST Software\Avast\x64\gaming_spy.dll
2017-02-11 15:17 - 2017-02-11 15:17 - 00054488 _____ () C:\Program Files\CCleaner\branding.dll
2017-02-10 21:12 - 2017-02-10 21:12 - 00162600 _____ () c:\Program Files\AVAST Software\Avast\x64\vaarclient.dll
2017-02-10 21:13 - 2017-02-10 21:13 - 00792656 _____ () C:\Program Files\AVAST Software\Avast\x64\ffl2.dll
2017-02-10 17:51 - 2017-02-01 11:47 - 02459992 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libglesv2.dll
2017-02-10 17:51 - 2017-02-01 11:47 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libegl.dll
2017-02-10 22:26 - 2005-06-08 12:40 - 14380032 _____ () C:\Program Files (x86)\Rockstar Games\GTA San Andreas\gta_sa.exe
2017-02-10 21:14 - 2013-05-12 22:34 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-02-10 21:13 - 2017-02-10 21:13 - 00170216 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-02-10 21:13 - 2017-02-10 21:13 - 00655056 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2012-10-01 20:37 - 2012-10-01 20:37 - 06522480 _____ () C:\Program Files (x86)\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2017-02-15 12:37 - 2017-02-15 12:37 - 06350848 _____ () C:\Program Files\AVAST Software\Avast\defs\17021500\algo.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00937840 _____ () C:\Program Files (x86)\AOMEI Backupper\UiLogic.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00253800 _____ () C:\Program Files (x86)\AOMEI Backupper\diskmgr.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00327536 _____ () C:\Program Files (x86)\AOMEI Backupper\Comn.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00089960 _____ () C:\Program Files (x86)\AOMEI Backupper\Ldm.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00073576 _____ () C:\Program Files (x86)\AOMEI Backupper\Device.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00298864 _____ () C:\Program Files (x86)\AOMEI Backupper\BrFat.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00978792 _____ () C:\Program Files (x86)\AOMEI Backupper\BrNtfs.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00135024 _____ () C:\Program Files (x86)\AOMEI Backupper\FuncLogic.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00294768 _____ () C:\Program Files (x86)\AOMEI Backupper\Clone.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00360296 _____ () C:\Program Files (x86)\AOMEI Backupper\ImgFile.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00040808 _____ () C:\Program Files (x86)\AOMEI Backupper\Encrypt.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00081768 _____ () C:\Program Files (x86)\AOMEI Backupper\Compress.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00114536 _____ () C:\Program Files (x86)\AOMEI Backupper\BrVol.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00266088 _____ () C:\Program Files (x86)\AOMEI Backupper\GptBcd.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00167792 _____ () C:\Program Files (x86)\AOMEI Backupper\FlBackup.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00495472 _____ () C:\Program Files (x86)\AOMEI Backupper\EnumFolder.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00188272 _____ () C:\Program Files (x86)\AOMEI Backupper\DeviceMgr.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00126832 _____ () C:\Program Files (x86)\AOMEI Backupper\Backup.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00724848 _____ () C:\Program Files (x86)\AOMEI Backupper\Sync.dll
2017-02-10 20:57 - 2016-12-30 15:37 - 00114536 _____ () C:\Program Files (x86)\AOMEI Backupper\BrLog.dll
2017-02-10 20:57 - 2015-05-20 22:32 - 02403504 _____ () C:\Program Files (x86)\AOMEI Backupper\QtCore4.dll
2017-02-10 21:01 - 2012-10-22 07:22 - 01199648 ____R () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2017-02-10 21:13 - 2017-02-10 21:13 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-02-10 21:11 - 2017-02-10 21:11 - 00289328 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-02-10 22:26 - 2003-11-16 10:48 - 00065536 _____ () C:\Program Files (x86)\Rockstar Games\GTA San Andreas\vorbisfile.dll
2017-02-10 22:26 - 2003-11-15 17:54 - 00036864 _____ () C:\Program Files (x86)\Rockstar Games\GTA San Andreas\ogg.dll
2017-02-10 22:26 - 2003-11-16 10:48 - 01060864 _____ () C:\Program Files (x86)\Rockstar Games\GTA San Andreas\vorbis.dll
2017-02-11 15:03 - 2017-02-11 15:03 - 00446624 _____ () C:\Program Files\AVAST Software\Avast\gaming_spy.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2017-02-11 14:55 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1807781507-1846622349-4265815653-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Mikey\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{77F5DED2-10A8-4D9E-A81D-117BDE8AD9FC}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{A1B42FCD-92F8-41F3-905A-5F1E0DBB92F5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{6B7C9457-2730-40F0-83A3-AE1367A51D7C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{3D0669C5-424B-46E7-B50C-1BCB027B493A}] => (Allow) C:\Windows\system32\rundll32.exe
FirewallRules: [{F63FDCE5-D366-49F1-81E5-7D10161EA727}] => (Allow) C:\Windows\System32\rundll32.exe
FirewallRules: [{D0A55D40-6473-4369-B965-D13D2E98124C}] => (Allow) C:\Windows\System32\rundll32.exe
FirewallRules: [{D484B1C5-CB3C-4127-93C4-4E43E53BE197}] => (Allow) C:\Windows\System32\rundll32.exe
FirewallRules: [{FD411B93-DDA7-407B-9A8C-E78E89A57DCD}] => (Allow) C:\Windows\System32\rundll32.exe

==================== Restore Points =========================

15-02-2017 13:28:58 JRT Pre-Junkware Removal

==================== Faulty Device Manager Devices =============

Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

==================== Event log errors: =========================

Application errors:
==================
Error: (02/15/2017 07:34:01 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Users\Mikey\Downloads\Programs for after formatting\esetsmartinstaller_enu.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/15/2017 07:33:54 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Explorer.exe version 6.1.7601.23537 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1900

Start Time: 01d287b1a06cbcdf

Termination Time: 4

Application Path: C:\Windows\Explorer.exe

Report Id: e8f72d85-f3a4-11e6-83d2-002683356232

Error: (02/15/2017 07:33:31 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Explorer.exe version 6.1.7601.23537 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 179c

Start Time: 01d2876e8dbd5d64

Termination Time: 15

Application Path: C:\Windows\Explorer.exe

Report Id: 6f074022-f3a4-11e6-83d2-002683356232

Error: (02/15/2017 01:20:11 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Users\Mikey\Downloads\esetsmartinstaller_enu.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/15/2017 12:17:41 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Users\Mikey\Downloads\esetsmartinstaller_enu.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/15/2017 12:17:38 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Users\Mikey\Downloads\esetsmartinstaller_enu.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/15/2017 11:33:24 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Explorer.EXE version 6.1.7601.23537 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 17fc

Start Time: 01d28763074d786f

Termination Time: 5

Application Path: C:\Windows\Explorer.EXE

Report Id: c803197e-f361-11e6-83d2-002683356232

Error: (02/13/2017 09:06:00 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "G:\Games\3DMGAME-Mortal.Kombat.Komplete.Edition.PC.Cracked-3DM\MortalKombat_KompleteEdition\DiscContentPC\MKKE.exe".
Dependent Assembly Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/13/2017 09:05:55 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "G:\Games\3DMGAME-Mortal.Kombat.Komplete.Edition.PC.Cracked-3DM\MortalKombat_KompleteEdition\DiscContentPC\MKKE.exe".
Dependent Assembly Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/13/2017 08:57:19 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: GTA_SA.EXE, version: 0.0.0.0, time stamp: 0x427101ca
Faulting module name: GTA_SA.EXE, version: 0.0.0.0, time stamp: 0x427101ca
Exception code: 0xc0000005
Fault offset: 0x000dd5a3
Faulting process id: 0x1440
Faulting application start time: 0x01d285c65b169151
Faulting application path: C:\Program Files (x86)\Rockstar Games\GTA San Andreas\GTA_SA.EXE
Faulting module path: C:\Program Files (x86)\Rockstar Games\GTA San Andreas\GTA_SA.EXE
Report Id: a9178e40-f1b9-11e6-b9fc-002683356232

System errors:
=============
Error: (02/15/2017 06:14:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The MSI_OTPService service terminated unexpectedly. It has done this 1 time(s).

Error: (02/15/2017 05:30:40 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.

Error: (02/15/2017 03:07:46 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.

Error: (02/15/2017 01:30:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The NVIDIA Display Driver Service service terminated unexpectedly. It has done this 1 time(s).

Error: (02/15/2017 01:08:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The eapihdrv service failed to start due to the following error:
This driver has been blocked from loading

Error: (02/15/2017 01:08:40 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Mikey\AppData\Local\Temp\ehdrv.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

Error: (02/15/2017 01:08:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The eapihdrv service failed to start due to the following error:
This driver has been blocked from loading

Error: (02/15/2017 01:08:38 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Mikey\AppData\Local\Temp\ehdrv.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

Error: (02/15/2017 01:08:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The eapihdrv service failed to start due to the following error:
This driver has been blocked from loading

Error: (02/15/2017 01:08:38 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Mikey\AppData\Local\Temp\ehdrv.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

CodeIntegrity:
===================================
Date: 2017-02-11 14:48:58.133
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\combofix_17.1.29.1\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-11 14:48:58.113
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\combofix_17.1.29.1\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz
Percentage of memory in use: 44%
Total physical RAM: 8137.79 MB
Available physical RAM: 4520.43 MB
Total Virtual: 16273.79 MB
Available Virtual: 12173.35 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:74.31 GB) (Free:26.9 GB) NTFS
Drive g: (Michael) (Fixed) (Total:931.51 GB) (Free:114.13 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 74.5 GB) (Disk ID: 8222849C)

Partition: GPT.

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 21285A5A)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

garioch7 · February 15, 2017

@Uchiha-Mikey

Thank you for your FRST logs. They are really lengthy, almost 3,000 lines. I have two active cases on the go over at Bleeping Computer. It is going to take me some time to analyze your logs. Also, a snowstorm is forecast tonight for rural Cape Breton, Nova Scotia, Canada, and I have a large rural property to snow clear once the storm ends tomorrow afternoon, so it could be Friday until I can get back to you.

The bad news is that in just quickly perusing your logs, I see evidence of ComboFix having been run. Please review this link to understand why this concerns me. Using ComboFix is like setting off a nuclear weapon inside of your computer. Malware removal specialists do not use it, except as an absolute last resort, because it can wreck a user's computer. Please copy and paste the contents of the ComboFix log into a reply, as soon as possible, so that I can assess what it did to your computer. The file can be found here: C:\ComboFix.txt

Let's hope for the best. Have a great day.

Regards,
-Phil

Uchiha-Mikey · February 16, 2017

ComboFix 17-01-29.01 - Mikey 02/11/2017 14:41:19.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.8138.4682 [GMT 2:00]
Running from: c:\users\Mikey\Downloads\Programs for after formatting\combofix_17.1.29.1.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Mikey\AppData\Roaming\Zonehome.exe
.
.
((((((((((((((((((((((((( Files Created from 2017-01-11 to 2017-02-11 )))))))))))))))))))))))))))))))
.
.
2018-02-02 09:28 . 2018-02-02 09:28   --------   d-s---w-   c:\windows\SysWow64\Microsoft
2017-02-11 12:52 . 2017-02-11 12:52   94656   ----a-w-   c:\windows\system32\WPRO_41_2001woem.tmp
2017-02-11 12:52 . 2017-02-11 12:52   --------   d-----w-   c:\programdata\SWCUTemp
2017-02-11 12:49 . 2017-02-11 12:49   --------   d-----w-   c:\users\Default\AppData\Local\temp
2017-02-11 12:46 . 2017-02-11 12:46   --------   d-----w-   c:\program files (x86)\Common Files\IObit
2017-02-11 12:46 . 2017-02-11 12:46   --------   d-----w-   c:\programdata\ProductData
2017-02-11 12:45 . 2017-02-11 12:45   --------   d-----w-   c:\program files (x86)\IObit
2017-02-11 12:45 . 2017-02-11 12:46   --------   d-----w-   c:\programdata\IObit
2017-02-11 12:37 . 2017-02-11 12:55   --------   d-----w-   C:\32788R22FWJFW
2017-02-11 12:04 . 2014-05-14 16:23   44512   ----a-w-   c:\windows\system32\wups2.dll
2017-02-11 12:04 . 2014-05-14 16:23   58336   ----a-w-   c:\windows\system32\wuauclt.exe
2017-02-11 12:04 . 2014-05-14 16:23   2477536   ----a-w-   c:\windows\system32\wuaueng.dll
2017-02-11 12:04 . 2014-05-14 16:21   2620928   ----a-w-   c:\windows\system32\wucltux.dll
2017-02-11 12:03 . 2014-05-14 16:23   38880   ----a-w-   c:\windows\system32\wups.dll
2017-02-11 12:03 . 2014-05-14 16:23   36320   ----a-w-   c:\windows\SysWow64\wups.dll
2017-02-11 12:03 . 2014-05-14 16:23   700384   ----a-w-   c:\windows\system32\wuapi.dll
2017-02-11 12:03 . 2014-05-14 16:23   581600   ----a-w-   c:\windows\SysWow64\wuapi.dll
2017-02-11 12:03 . 2014-05-14 16:20   97792   ----a-w-   c:\windows\system32\wudriver.dll
2017-02-11 12:03 . 2014-05-14 16:17   92672   ----a-w-   c:\windows\SysWow64\wudriver.dll
2017-02-11 12:03 . 2014-05-14 07:23   179656   ----a-w-   c:\windows\SysWow64\wuwebv.dll
2017-02-11 12:03 . 2014-05-14 07:17   33792   ----a-w-   c:\windows\SysWow64\wuapp.exe
2017-02-11 12:03 . 2014-05-14 07:23   198600   ----a-w-   c:\windows\system32\wuwebv.dll
2017-02-11 12:03 . 2014-05-14 07:20   36864   ----a-w-   c:\windows\system32\wuapp.exe
2017-02-10 20:26 . 2017-02-10 20:26   --------   d-----w-   c:\program files (x86)\Rockstar Games
2017-02-10 19:41 . 2017-02-02 13:27   137792   ----a-w-   c:\windows\system32\drivers\scdemu.sys
2017-02-10 19:41 . 2017-02-10 19:41   --------   d-----w-   c:\program files\PowerISO
2017-02-10 19:29 . 2012-08-22 18:19   11832   ----a-w-   c:\windows\acpimof.dll
2017-02-10 19:24 . 2017-02-10 19:24   --------   d-----w-   C:\$AV_ASW
2017-02-10 19:23 . 2017-02-10 19:24   --------   d-----w-   c:\program files\Core Temp
2017-02-10 19:23 . 2017-02-10 19:23   32088   ----a-w-   c:\windows\system32\drivers\aswKbd.sys
2017-02-10 19:23 . 2017-02-10 19:23   --------   d-----w-   c:\program files (x86)\SpeedFan
2017-02-10 19:17 . 2017-02-10 19:17   --------   d-----w-   c:\program files (x86)\Common Files\AV
2017-02-10 19:15 . 2017-02-11 12:51   --------   d-----w-   c:\programdata\NVIDIA
2017-02-10 19:15 . 2018-02-02 09:31   --------   d-----w-   c:\users\UpdatusUser
2017-02-10 19:15 . 2017-02-10 19:15   --------   d-----w-   c:\program files (x86)\AGEIA Technologies
2017-02-10 19:15 . 2013-02-25 05:27   31520   ----a-w-   c:\windows\system32\nvhdap64.dll
2017-02-10 19:15 . 2013-02-25 05:27   194848   ----a-w-   c:\windows\system32\drivers\nvhda64v.sys
2017-02-10 19:15 . 2013-01-29 08:35   1510176   ----a-w-   c:\windows\system32\nvhdagenco6420103.dll
2017-02-10 19:14 . 2013-05-12 20:34   6491936   ----a-w-   c:\windows\system32\nvcpl.dll
2017-02-10 19:14 . 2013-05-12 20:34   3514656   ----a-w-   c:\windows\system32\nvsvc64.dll
2017-02-10 19:14 . 2013-05-12 20:34   884512   ----a-w-   c:\windows\system32\nvvsvc.exe
2017-02-10 19:14 . 2013-05-12 20:34   63776   ----a-w-   c:\windows\system32\nvshext.dll
2017-02-10 19:14 . 2013-05-12 20:34   2555680   ----a-w-   c:\windows\system32\nvsvcr.dll
2017-02-10 19:14 . 2013-05-12 20:34   237856   ----a-w-   c:\windows\system32\nvmctray.dll
2017-02-10 19:14 . 2013-05-08 14:13   3165737   ----a-w-   c:\windows\system32\nvcoproc.bin
2017-02-10 19:14 . 2013-05-12 21:42   61216   ----a-w-   c:\windows\system32\OpenCL.dll
2017-02-10 19:14 . 2013-05-12 21:42   53024   ----a-w-   c:\windows\SysWow64\OpenCL.dll
2017-02-10 19:14 . 2017-02-10 19:23   --------   d-----w-   c:\programdata\NVIDIA Corporation
2017-02-10 19:14 . 2017-02-10 19:22   --------   d-----w-   c:\program files (x86)\NVIDIA Corporation
2017-02-10 19:12 . 2013-05-12 21:42   6324360   ----a-w-   c:\windows\SysWow64\nvopencl.dll
2017-02-10 19:11 . 2017-02-10 19:11   29432   ----a-w-   c:\windows\system32\drivers\aswNetNd6.sys
2017-02-10 19:09 . 2017-02-10 15:56   --------   d-----w-   c:\programdata\Atheros
2017-02-10 19:07 . 2017-02-10 19:23   --------   d-----w-   c:\program files\AVAST Software
2017-02-10 19:03 . 2017-02-11 12:52   34752   ----a-w-   c:\windows\system32\drivers\WPRO_41_2001.sys
2017-02-10 19:02 . 2012-05-20 16:25   19264   ----a-w-   c:\windows\system32\drivers\iusb3hcs.sys
2017-02-10 19:02 . 2012-05-20 16:25   789824   ----a-w-   c:\windows\system32\drivers\iusb3xhc.sys
2017-02-10 19:02 . 2012-05-20 16:25   357184   ----a-w-   c:\windows\system32\drivers\iusb3hub.sys
2017-02-10 19:02 . 2012-10-19 02:42   8192   ----a-r-   c:\windows\system32\drivers\IntelMEFWVer.dll
2017-02-10 19:01 . 2017-02-10 17:40   --------   d-----w-   c:\programdata\Intel
2017-02-10 19:01 . 2017-02-10 19:03   --------   d-----w-   c:\program files\Intel
2017-02-10 19:01 . 2017-02-10 19:01   --------   d-----w-   c:\program files (x86)\Common Files\postureAgent
2017-02-10 19:01 . 2017-02-11 12:47   --------   d-----w-   c:\program files (x86)\MSI
2017-02-10 19:01 . 2017-02-10 19:01   --------   d-----w-   c:\program files\Google
2017-02-10 19:01 . 2017-02-10 19:01   --------   d-----w-   c:\windows\SysWow64\RTCOM
2017-02-10 19:01 . 2017-02-10 19:01   --------   d-----w-   c:\program files\Realtek
2017-02-10 18:59 . 2012-08-28 09:25   2535008   ----a-w-   c:\windows\system32\FMAPO64.dll
2017-02-10 18:59 . 2012-06-20 09:26   110592   ----a-w-   c:\windows\system32\CONEQMSAPOGUILibrary.dll
2017-02-10 18:59 . 2012-03-08 03:47   108640   ----a-w-   c:\windows\system32\AERTAR64.dll
2017-02-10 18:59 . 2012-03-08 03:47   202336   ----a-w-   c:\windows\system32\AERTAC64.dll
2017-02-10 18:59 . 2017-02-10 19:01   --------   d--h--w-   c:\program files (x86)\Temp
2017-02-10 18:59 . 2012-08-03 10:18   1706640   ------r-   c:\windows\RtlExUpd.dll
2017-02-10 18:59 . 2017-02-10 19:21   --------   d-----w-   c:\program files (x86)\Common Files\InstallShield
2017-02-10 18:57 . 2017-02-10 18:57   --------   d-----w-   c:\program files (x86)\Bluetooth Suite
2017-02-10 18:57 . 2016-12-22 14:24   51120   ----a-w-   c:\windows\system32\ambakdrv.sys
2017-02-10 18:57 . 2016-12-22 14:24   38320   ----a-w-   c:\windows\system32\amwrtdrv.sys
2017-02-10 18:57 . 2016-12-22 14:24   171952   ----a-w-   c:\windows\system32\ammntdrv.sys
2017-02-10 18:57 . 2017-02-11 12:51   --------   d-----w-   c:\program files (x86)\AOMEI Backupper
2017-02-10 18:56 . 2012-02-16 05:42   676968   ----a-w-   c:\windows\system32\drivers\Rt64win7.sys
2017-02-10 18:56 . 2012-02-16 05:42   74344   ----a-w-   c:\windows\system32\RtNicProp64.dll
2017-02-10 18:56 . 2012-02-16 05:42   107624   ----a-w-   c:\windows\system32\RTNUninst64.dll
2017-02-10 18:56 . 2017-02-11 01:37   --------   d-----w-   c:\program files (x86)\Realtek
2017-02-10 18:56 . 2017-02-10 15:56   --------   d--h--w-   c:\program files (x86)\InstallShield Installation Information
2017-02-10 18:55 . 2017-02-10 19:02   --------   d-----w-   c:\program files (x86)\Intel
2017-02-10 18:55 . 2012-07-04 18:55   53248   ----a-w-   c:\windows\SysWow64\CSVer.dll
2017-02-10 18:55 . 2017-02-10 18:55   --------   d-----w-   C:\Intel
2017-02-10 18:54 . 2017-02-10 18:54   --------   d-----w-   c:\program files (x86)\Microsoft.NET
2017-02-10 18:54 . 2017-02-10 18:11   --------   d-sh--w-   c:\windows\Installer
2017-02-10 18:53 . 2017-02-11 12:40   --------   d-----w-   c:\programdata\AVAST Software
2017-02-10 18:52 . 2017-02-10 18:52   --------   d-----w-   C:\MSI
2017-02-10 18:41 . 2017-02-10 18:44   --------   d-----w-   C:\AdwCleaner
2017-02-10 18:13 . 2018-02-02 09:27   --------   d-----w-   c:\users\Mikey
2017-02-10 18:13 . 2017-02-10 18:13   --------   d-----w-   C:\Recovery
2017-02-10 18:07 . 2017-02-10 18:13   --------   d-----w-   c:\windows\Panther
2017-02-10 17:48 . 2017-02-10 17:48   --------   d-----w-   c:\programdata\TrueKey
2017-02-10 17:43 . 2017-02-10 17:43   --------   d-----w-   c:\program files\Intel Security
2017-02-10 17:43 . 2017-02-10 17:43   --------   d-----w-   c:\programdata\Package Cache
2017-02-10 17:42 . 2017-02-10 17:42   --------   d-----w-   c:\program files (x86)\Maoha
2017-02-10 17:42 . 2017-02-10 19:00   --------   d-----w-   c:\program files\¿ìÑ¹
2017-02-10 17:37 . 2017-02-10 17:37   --------   d-----w-   c:\program files (x86)\VideoLAN
2017-02-10 17:37 . 2017-02-10 19:17   --------   d-----w-   c:\program files\Common Files\AV
2017-02-10 17:37 . 2017-02-10 17:47   --------   d-----w-   c:\program files (x86)\McAfee
2017-02-10 17:37 . 2017-02-10 17:37   --------   d-----w-   c:\program files\Common Files\McAfee
2017-02-10 17:37 . 2017-02-10 17:37   --------   d-----w-   c:\program files (x86)\Common Files\McAfee
2017-02-10 17:24 . 2017-02-10 19:48   --------   d-----w-   c:\program files (x86)\Removewat 2.2.7
2017-02-10 17:19 . 2017-02-11 12:52   --------   d-----w-   c:\programdata\McAfee
2017-02-10 17:19 . 2017-02-10 17:53   --------   d-----w-   c:\program files\TrueKey
2017-02-10 17:19 . 2017-02-10 17:19   --------   d-----w-   c:\program files (x86)\Common Files\Adobe
2017-02-10 17:14 . 2017-02-10 17:22   --------   d-----w-   c:\program files\WinRAR
2017-02-10 16:40 . 2017-02-10 16:40   --------   d-----w-   c:\windows\system32\SPReview
2017-02-10 16:40 . 2017-02-10 16:40   --------   d-----w-   c:\windows\system32\EventProviders
2017-02-10 16:39 . 2017-02-10 16:40   --------   d-----w-   c:\windows\system32\MRT
2017-02-10 16:30 . 2010-11-20 13:27   8988160   ----a-w-   c:\windows\system32\mshtml.dll
2017-02-10 16:30 . 2010-11-05 01:57   48976   ----a-w-   c:\windows\system32\netfxperf.dll
2017-02-10 16:30 . 2010-11-05 01:57   1942856   ----a-w-   c:\windows\system32\dfshim.dll
2017-02-10 16:30 . 2010-11-05 01:58   1130824   ----a-w-   c:\windows\SysWow64\dfshim.dll
2017-02-10 16:30 . 2010-11-20 13:27   12288   ----a-w-   c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2017-02-10 16:30 . 2010-11-20 13:27   3715584   ----a-w-   c:\windows\system32\mstscax.dll
2017-02-10 16:30 . 2010-11-20 13:26   1838080   ----a-w-   c:\windows\system32\d3d10warp.dll
2017-02-10 16:30 . 2010-11-20 11:07   59392   ----a-w-   c:\windows\system32\drivers\TsUsbFlt.sys
2017-02-10 16:30 . 2010-11-20 13:27   14967808   ----a-w-   c:\program files\DVD Maker\OmdBase.dll
2017-02-10 16:30 . 2010-11-20 13:26   12260864   ----a-w-   c:\windows\system32\ieframe.dll
2017-02-10 16:30 . 2010-11-20 12:19   3215872   ----a-w-   c:\windows\SysWow64\mstscax.dll
2017-02-10 16:28 . 2010-11-20 13:27   132608   ----a-w-   c:\windows\system32\wmpshell.dll
2017-02-10 15:59 . 2017-01-09 21:45   12229912   ----a-w-   c:\programdata\Microsoft\Windows Defender\Definition Updates\{ACC46AA0-54B7-4CB1-AC13-2BBFF57EF070}\mpengine.dll
2017-02-10 15:56 . 2017-02-10 15:56   --------   d-----w-   c:\program files (x86)\Atheros
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2017-02-10 16:43 . 2009-07-14 02:36   175616   ----a-w-   c:\windows\system32\msclmd.dll
2017-02-10 16:43 . 2009-07-14 02:36   152576   ----a-w-   c:\windows\SysWow64\msclmd.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2017-02-10 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"RUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\rusb3mon.exe" [2011-09-20 115048]
"Super-Charger"="c:\program files (x86)\MSI\Super-Charger\Super-Charger.exe" [2012-10-23 502328]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvLaunch.exe" [2017-02-10 205512]
"ABNotify"="c:\program files (x86)\AOMEI Backupper\ABNotify.exe" [2016-12-30 89968]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
GIGABYTE OC_GURU.lnk - c:\program files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe [2013-5-22 21946368]
iSCTsysTray.lnk - c:\program files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray.exe [2012-8-17 316416]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"DisableCAD"= 1 (0x1)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages   REG_MULTI_SZ    scecli c:\program files\TrueKey\McAfeeTrueKeyPasswordFilter
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 InstallerService;Service Installer TrueKey;c:\program files\TrueKey\Mcafee.TrueKey.InstallerService.exe;c:\program files\TrueKey\Mcafee.TrueKey.InstallerService.exe [x]
R2 IObitUnSvr;IObit Uninstaller Service;c:\program files (x86)\IObit\IObit Uninstaller\IUService.exe;c:\program files (x86)\IObit\IObit Uninstaller\IUService.exe [x]
R3 aswHwid;aswHwid;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
R3 ATHDFU;Qualcomm Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys;c:\windows\SYSNATIVE\Drivers\AthDfu.sys [x]
R3 GPCIDrv;GPCIDrv;c:\program files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys;c:\program files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [x]
R3 MSICDSetup;MSICDSetup;d:\cdriver64.sys;d:\CDriver64.sys [x]
R3 NTIOLib_1_0_C;NTIOLib_1_0_C;d:\ntiolib_x64.sys;d:\NTIOLib_X64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
S0 ambakdrv;ambakdrv;c:\windows\system32\ambakdrv.sys;c:\windows\SYSNATIVE\ambakdrv.sys [x]
S0 aswbidsh;aswbidsh;c:\windows\\SystemRoot\system32\drivers\aswbidsha.sys;c:\windows\\SystemRoot\system32\drivers\aswbidsha.sys [x]
S0 aswblog;aswblog;c:\windows\\SystemRoot\system32\drivers\aswbloga.sys;c:\windows\\SystemRoot\system32\drivers\aswbloga.sys [x]
S0 aswbuniv;aswbuniv;c:\windows\\SystemRoot\system32\drivers\aswbuniva.sys;c:\windows\\SystemRoot\system32\drivers\aswbuniva.sys [x]
S0 aswRvrt;aswRvrt;c:\windows\\SystemRoot\system32\drivers\aswRvrt.sys;c:\windows\\SystemRoot\system32\drivers\aswRvrt.sys [x]
S0 aswVmm;aswVmm;c:\windows\\SystemRoot\system32\drivers\aswVmm.sys;c:\windows\\SystemRoot\system32\drivers\aswVmm.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S1 aswbidsdriver;aswbidsdriver;c:\windows\system32\drivers\aswbidsdrivera.sys;c:\windows\SYSNATIVE\drivers\aswbidsdrivera.sys [x]
S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys;c:\windows\SYSNATIVE\drivers\aswKbd.sys [x]
S1 aswNetSec;aswNetSec;c:\windows\system32\drivers\aswNetSec.sys;c:\windows\SYSNATIVE\drivers\aswNetSec.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 ESProtectionDriver;Malwarebytes Anti-Exploit;c:\windows\system32\drivers\mbae64.sys;c:\windows\SYSNATIVE\drivers\mbae64.sys [x]
S2 ammntdrv;ammntdrv;c:\windows\system32\ammntdrv.sys;c:\windows\SYSNATIVE\ammntdrv.sys [x]
S2 amwrtdrv;amwrtdrv;c:\windows\system32\amwrtdrv.sys;c:\windows\SYSNATIVE\amwrtdrv.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 avast! Firewall;Avast Firewall Service;c:\program files\AVAST Software\Avast\afwServ.exe;c:\program files\AVAST Software\Avast\afwServ.exe [x]
S2 Backupper Service;AOMEI Backupper Scheduler Service;c:\program files (x86)\AOMEI Backupper\ABService.exe;c:\program files (x86)\AOMEI Backupper\ABService.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 ISCTAgent;ISCT Always Updated Agent;c:\program files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe;c:\program files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 MBAMChameleon;MBAMChameleon;c:\windows\system32\drivers\MBAMChameleon.sys;c:\windows\SYSNATIVE\drivers\MBAMChameleon.sys [x]
S2 MBAMService;Malwarebytes Service;c:\program files\Malwarebytes\Anti-Malware\mbamservice.exe;c:\program files\Malwarebytes\Anti-Malware\mbamservice.exe [x]
S2 MSI_OTPService;MSI_OTPService;c:\program files (x86)\MSI\OTPService\OTPService.exe;c:\program files (x86)\MSI\OTPService\OTPService.exe [x]
S2 MSI_SuperCharger;MSI_SuperCharger;c:\program files (x86)\MSI\Super-Charger\ChargeService.exe;c:\program files (x86)\MSI\Super-Charger\ChargeService.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TrueKey;Intel Security True Key;c:\program files\TrueKey\McAfee.TrueKey.Service.exe;c:\program files\TrueKey\McAfee.TrueKey.Service.exe [x]
S2 TrueKeyScheduler;Intel Security True Key Scheduler;c:\program files\TrueKey\McTkSchedulerService.exe;c:\program files\TrueKey\McTkSchedulerService.exe [x]
S2 TrueKeyServiceHelper;TrueKeyServiceHelper;c:\program files\TrueKey\McAfee.TrueKey.ServiceHelper.exe;c:\program files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 aswbIDSAgent;aswbIDSAgent;c:\program files\AVAST Software\Avast\x64\aswidsagenta.exe;c:\program files\AVAST Software\Avast\x64\aswidsagenta.exe [x]
S3 aswNetNd6;Avast Firewall NDIS6 Helper;c:\windows\system32\DRIVERS\aswNetNd6.sys;c:\windows\SYSNATIVE\DRIVERS\aswNetNd6.sys [x]
S3 AthBTPort;Qualcomm Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 athur;Atheros AR9271 Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athurx.sys;c:\windows\SYSNATIVE\DRIVERS\athurx.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 btath_avdt;Qualcomm Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys;c:\windows\SYSNATIVE\drivers\btath_avdt.sys [x]
S3 BTATH_BUS;Qualcomm Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 ikbevent;Intel Upper keyboard Class Filter Driver;c:\windows\system32\DRIVERS\ikbevent.sys;c:\windows\SYSNATIVE\DRIVERS\ikbevent.sys [x]
S3 imsevent;Intel Upper Mouse Class Filter Driver;c:\windows\system32\DRIVERS\imsevent.sys;c:\windows\SYSNATIVE\DRIVERS\imsevent.sys [x]
S3 ISCT;Intel(R) Smart Connect Technology Device Driver;c:\windows\system32\DRIVERS\ISCTD64.sys;c:\windows\SYSNATIVE\DRIVERS\ISCTD64.sys [x]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 MBAMFarflt;MBAMFarflt;c:\windows\system32\drivers\farflt.sys;c:\windows\SYSNATIVE\drivers\farflt.sys [x]
S3 MBAMProtection;MBAMProtection;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MBAMWebProtection;MBAMWebProtection;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys;c:\windows\SYSNATIVE\drivers\MBfilt64.sys [x]
S3 NTIOLib_1_0_3;NTIOLib_1_0_3;c:\program files (x86)\MSI\Super-Charger\NTIOLib_X64.sys;c:\program files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [x]
S3 NTIOLib_1_0_T;NTIOLib_1_0_T;c:\program files (x86)\MSI\OTPService\NTIOLib_X64.sys;c:\program files (x86)\MSI\OTPService\NTIOLib_X64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 rusb3hub;Renesas Electronics USB 3.0 Hub Driver (Version 3.0);c:\windows\system32\DRIVERS\rusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\rusb3hub.sys [x]
S3 rusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver (Version 3.0);c:\windows\system32\DRIVERS\rusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\rusb3xhc.sys [x]
S3 WPRO_41_2001;WinPcap Packet Driver (WPRO_41_2001);c:\windows\system32\drivers\WPRO_41_2001.sys;c:\windows\SYSNATIVE\drivers\WPRO_41_2001.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - MBAMFARFLT
*NewlyCreated* - MBAMWEBPROTECTION
*NewlyCreated* - WS2IFSL
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
2016-05-23 19:49   2478880   ----a-w-   c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00asw]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2017-02-10 19:13   1479992   ----a-w-   c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BtTray"="c:\program files (x86)\Bluetooth Suite\BtTray.exe" [2012-09-01 764544]
"BtvStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2012-09-01 127616]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2012-09-13 6839952]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-03-24 976672]
"Malwarebytes TrayApp"="c:\program files\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe" [2017-01-20 2780112]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
mDefault_Page_URL = www.google.com
mStart Page = www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.0.1
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
ShellIconOverlayIdentifiers-{AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} - (no file)
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Completion time: 2017-02-11 15:05:19 - machine was rebooted
ComboFix-quarantined-files.txt 2017-02-11 13:05
.
Pre-Run: 37,156,823,040 bytes free
Post-Run: 37,107,195,904 bytes free
.
- - End Of File - - 5BB684814A29053E2210F9EFF9047811
5FB38429D5D77768867C76DCBDB35194

there you go, I will be patient lol. thanks for your help. I did not know using combo fix was such a risk. It was kind of a last resort thing - nothing else was helping. But I don't think my PC was harmed though, everything still runs perfectly, but i still have the redirect issue.

garioch7 · February 16, 2017

@Uchiha-Mikey

Thank you for your patience while I analyzed your FRST logs. I did detect some other issues with your computer that are not listed here, but will be dealt with in a future post. They are mostly of a "housekeeping" nature, so no need for you to be concerned.

Before we start dealing with the problems you are experiencing, I would ask that you to take note of the following points:

I am a Malwarebytes Forum volunteer, so I ask you to be patient. I know it is frustrating when your computer is not working properly, but malware removal takes time.
Please also remember that I only dedicate a limited number of hours a day to helping people. We may live in different time zones, which may cause delays in responding.
If I have not responded to you within 48 hours, please send me a personal message. Likewise, I expect you to respond within 48 hours, and sooner is better because we can fix your computer faster.
If I have not heard from you in three days, I will "bump" your post. After five days of no response, I will consider that you no longer need my assistance and this thread will be closed.
Logs can take a while to research, so please be patient.
Some issues just cannot be solved so you must be prepared for this.
Please read and follow the instructions in the exact sequence that they are posted to avoid making a bad situation worse.
Please print or copy and save the instructions.
Back up all your data and important files on another (external) drive before starting to run malware removal tools.
You should try to limit your browsing with this computer until you are given the "All Clear." Some malware applications steal passwords.
Please do not install or uninstall any applications, unless directed. Don't run any scripts or tools on your own because unsupervised usage may cause more harm than good.
Please use only the tools you have been instructed to use.
If you are using CD/DVD emulation software, this should be uninstalled or disabled as it can interfere with the removal of some malware. It can be turned off with Defogger and then turned back on when you get the "All Clear."
Please copy and paste the requested log files inside your post, unless otherwise instructed.
There are no silly questions. Ask for clarification, if you have any questions or concerns.
Malwarebytes does not support any piracy. Evidence of illegal OS, software, cracks/keygens, etc., will be revealed by scan logs, and if found, further assistance may be suspended. Uninstall such software before proceeding!
Any P2P software such as uTorrent, BitTorrent, Kazaa, etc. must be uninstalled or completely disabled. P2P software is a major security risk to your computer and may have been the route the malware used to infect your computer.
Failure to follow these guidelines may result in assistance being withdrawn and your thread being closed.
I am volunteering my time to help you, and I will need you to help me. Together, we can, hopefully, disinfect your computer and get if functioning properly again. That is my only aim.

.

OK, let's get started ...

.

Before providing you with a FRST "fix" for the issues I found on your computer, I would like you to do the following for me, please.

.

Step One

Error: (02/13/2017 09:05:55 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "G:\Games\3DMGAME-Mortal.Kombat.Komplete.Edition.PC.Cracked-3DM\MortalKombat_KompleteEdition\DiscContentPC\MKKE.exe".

Please explain this program error to me. As you know, Malwarebytes does not condone software piracy. There are two such errors in your logs. I am not seeing MortalKombat in your list of installed programs. The errors were generated from the G: drive. There might be a valid reason for these errors. I am not accusing you of anything - I would just like to understand what these errors are, that I am seeing. I am bound to follow the anti-piracy policies here at the Malwarebytes Forums, having been granted "Trusted Advisor" status here: see this link for more information.

.

Step Two
You have one program and one Chrome extensions on your computer. If you do not wish to keep them, please delete or uninstall them.
IMPORTANT:

For Number 3, the listed task, please upload the file:

C:\Users\Mikey\AppData\Local\syslog\syslog.exe

to

VirusTotal

, press "Scan it!", and copy and paste the results URL into your next reply, so that I can check on it myself. This

might be

a keylogger, but it could also be legitimate. If you know anything about this task, please let me know the details.

For Number 4, another listed task, please upload the file:

C:\Windows\system32\EOSNotify.exe

to

VirusTotal

, press "Scan it!", and copy and paste the results URL into your next reply, so that I can check on it as well. It is probably safe, but there are possible infected/untrusted file variants.

IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 6.2.0.934 - IObit)
CHR Extension: (Popup Blocker Pro) - C:\Users\Mikey\AppData\Local\Google\Chrome\User Data\Default\Extensions\kiodaajmphnkcajieajajinghpejdjai [2017-02-10]. See this link for more information on why this Chrome extension might be undesirable.
Task: {34E25EC2-F0A2-4E8F-8A01-ED0715FF48DB} - System32\Tasks\syslog => C:\Users\Mikey\AppData\Local\syslog\syslog.exe
Task: {91CAFD2B-D095-42D6-BD9F-A23E79CE8416} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation)

.

Thank you and have a great day.

Regards,
-Phil

Uchiha-Mikey · February 17, 2017

Thanks for your assistance,

Those errors were from an external HDD which has my backups on it. My previous HDD had a side-by-side configuration error and then stopped working all together, which is why i got a new HDD and restored some files from this external HDD. I'm not sure why that game gave an error, it's an old game i had for years now and just tried to open it again but gave me the same side-by-side configuration error. I've since deleted it.

Uchiha-Mikey · February 17, 2017

For some reason, C:\Users\Mikey\AppData\Local\syslog\syslog.exe is not there anymore. the folder is empty now.

Here is the URL for number 4:

https://www.virustotal.com/en/file/415a23e6b3a446186febd84d86222c4fb654e9fd2bfdd8d877c6ab8c52d60c7b/analysis/1487324573/

I decided to uninstall pop-up blocker, i did not know that it was an undesirable extension since it's on the chrome store.

garioch7 · February 17, 2017

@Uchiha-Mikey

Thank you for your posts. I appreciate you giving me the explanation of that MortalKombat game. Thank you.

Please accept my apologies for the delay in responding. It continues to snow here, so I have been doing a lot of snow clearing, plus today, every Friday in fact, is my updates, backup, and scan day. I have two computers and make full system images of both. I practice what I preach because I have worked with too many people who don't have backups and have lost invaluable data. Also, I had to grab the new Malwarebytes Premium 3.0.6. beta release, since I do use Macrium Reflect as one of my two backup programs, and this release is reported to fix a bug that was affecting programs using the Volume Shadow Copy Service. So let's move on with fixing your issues.

Step 1. Please run a FRST "Fix" for me.

Copy and paste the text in the code box below into Notepad and save the file as fixlist.txt to the folder: C:\Users\Mikey\Downloads, where FRST64.exe is located.

NOTE: It is important that both files, FRST64.exe and fixlist.txt are both in the same folder or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this individual computer. Running this on another computer may cause damage to your operating system.

CreateRestorePoint:
CloseProcesses:
ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} =>  -> No File
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1807781507-1846622349-4265815653-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\pdf.dll => No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\gcswf32.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll => No File
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
S2 MSI_OTPService; C:\Program Files (x86)\MSI\OTPService\OTPService.exe [X]
S3 catchme; \??\C:\combofix_17.1.29.1\catchme.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
R3 NTIOLib_1_0_T; \??\C:\Program Files (x86)\MSI\OTPService\NTIOLib_X64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2017-02-10 19:40 - 2017-02-10 20:41 - 00000034 _____ C:\Users\Public\Documents\{DE764086-1C0A-4DD3-90BA-0B93BDD794BE}
File: C:\Users\Mikey\AppData\Local\syslog\syslog.exe

Right click FRST64.exe, and select "Run as Administrator".
Then press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log in the Downloads (Fixlog.txt) folder. Please copy and paste the contents into your reply.

garioch7 · February 17, 2017

@Uchiha-Mikey

Step 2. The logs are showing some possible issues with your hard drive. I would like to have you run the Windows Check Disk and System File Checker utilities for me, AFTER you reboot your computer, upon completion of the FRST "fix".

We need to check your hard disk for errors. Based on your logs, I am guessing that your C: drive is an SSD or possibly a hybrid drive, in which case be sure to use the "/f" switch, not the "/r" switch with chkdsk.

To determine if your C: drive is an SSD or conventional hard drive for Windows 8/8.1. or 10, please press the Windows logo key and search for "optimize" in the Windows Start menu. Select: Defragment and optimize your drives. See this link for more information.
For Windows 7 and earlier, please the Windows logo key + R together, then type control and press the <Enter> key. Click on "System and Security" and then click on "Device Manager". Next, click on "Disk Drives" to open up a list of disk drives on your computer. If it is an SSD drive, it should say so in the description; but if you are not sure, "Google" the model number of the drive that you want to run chkdsk on.

It is important not to run chkdsk /r on an SSD as it will lead to excessive wear and shorten the life of an SSD. For SSD drives, use the chkdsk /f command.

Please open an Elevated Command Prompt. To do this:
- Press the Windows "Start" button.
- Type "cmd.exe" into the "Search" box.
- At the top of the list that generates, you should see "cmd.exe".
- Right click "cmd.exe" and select "Run as Administrator".
Type the following command exactly: chkdsk /r unless you have an SSD hard drive, in which case, type chkdsk /f.
Please note that there is a space between "chkdsk" and "/r" or "/f".
You will get a message that the volume is locked and do you want to reboot.
Click on "Yes" to permit the computer to reboot.
When the computer reboots, do not press any keys. Let the chkdsk run, which will take several hours.
The computer will reboot automatically when the "chkdsk" has finished.

Please follow the instructions here to find the results of the "chkdsk" scan.

Please copy and paste those results into your next reply.

You should run this command when you will not need your computer. The chkdsk scan can take several hours depending on whether the hard drive is SSD or conventional, and the size and amount of data on the drive.

.

Step 3. Please run an System File Checker (SFC) scan to assess the integrity of the Windows file system.

Click on the "Start" button.
In the "search" box at the bottom, type cmd.
Look for Cmd.exe to appear at the top of the menu.
Right-click on cmd.exe and choose Run As Administrator.
Type sfc /scannow. Ensure that there is a space between "sfc" and "/scannow"
The scan will start and may take from 20 minutes to an hour to run.
Please report the results from the System File Checker in your next post. Does it report "No Resource Integrity Violations Found", "Errors Repaired", or "Unable to Repair", or words to that effect?

If SFC reports uncorrectable errors, please immediately navigate to the folder: C:\Windows\Logs\CBS, locate the file "CBS.log, and copy, not move it, to your Desktop. That file is "volatile", so we need to ensure that it is not overwritten with new results.

.

Thank you and have a great day.

Regards,
-Phil

Uchiha-Mikey · February 18, 2017

Thanks for taking the time to assist me, i appreciate your effort. It seems that since i uninstalled pop-up blocker, i no longer get redirect attempts. It looks like that's what was causing the issue. After running the dskchk, i was logged in to a temporary profile for some reason, but i logged out and back into my profile. Here are the requested logs:

Fix result of Farbar Recovery Scan Tool (x64) Version: 15-02-2017 01
Ran by Mikey (18-02-2017 19:17:43) Run:1
Running from C:\Users\Mikey\Downloads
Loaded Profiles: Mikey & UpdatusUser (Available Profiles: Mikey & UpdatusUser)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CreateRestorePoint:
CloseProcesses:
ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} => -> No File
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1807781507-1846622349-4265815653-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\pdf.dll => No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\gcswf32.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll => No File
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
S2 MSI_OTPService; C:\Program Files (x86)\MSI\OTPService\OTPService.exe [X]
S3 catchme; \??\C:\combofix_17.1.29.1\catchme.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
R3 NTIOLib_1_0_T; \??\C:\Program Files (x86)\MSI\OTPService\NTIOLib_X64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2017-02-10 19:40 - 2017-02-10 20:41 - 00000034 _____ C:\Users\Public\Documents\{DE764086-1C0A-4DD3-90BA-0B93BDD794BE}
File: C:\Users\Mikey\AppData\Local\syslog\syslog.exe
*****************

Restore point was successfully created.
Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\KzShlobj => key removed successfully
HKCR\CLSID\{AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} => key not found.
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully
HKU\S-1-5-21-1807781507-1846622349-4265815653-1000\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully
C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\ppGoogleNaClPluginChrome.dll => not found.
C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\pdf.dll => not found.
C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\gcswf32.dll => not found.
C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll => not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj => key removed successfully
HKLM\System\CurrentControlSet\Services\MSI_OTPService => key removed successfully
MSI_OTPService => service removed successfully
HKLM\System\CurrentControlSet\Services\catchme => key removed successfully
catchme => service removed successfully
HKLM\System\CurrentControlSet\Services\MSICDSetup => key removed successfully
MSICDSetup => service removed successfully
HKLM\System\CurrentControlSet\Services\NTIOLib_1_0_C => key removed successfully
NTIOLib_1_0_C => service removed successfully
HKLM\System\CurrentControlSet\Services\NTIOLib_1_0_T => key removed successfully
NTIOLib_1_0_T => service removed successfully
HKLM\System\CurrentControlSet\Services\Synth3dVsc => key removed successfully
Synth3dVsc => service removed successfully
HKLM\System\CurrentControlSet\Services\tsusbhub => key removed successfully
tsusbhub => service removed successfully
HKLM\System\CurrentControlSet\Services\VGPU => key removed successfully
VGPU => service removed successfully
C:\Users\Public\Documents\{DE764086-1C0A-4DD3-90BA-0B93BDD794BE} => moved successfully

========================= File: C:\Users\Mikey\AppData\Local\syslog\syslog.exe ========================

"C:\Users\Mikey\AppData\Local\syslog\syslog.exe" => not found.
====== End of File: ======

The system needed a reboot.

==== End of Fixlog 19:18:04 ====

TimeCreated : 2/18/2017 9:47:57 PM
Message :

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
209664 file records processed.

File verification completed.
526 large file records processed.

0 bad file records processed.

2 EA records processed.

75 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
The sparse flag in the standard information attribute in file 0x1
b3
is not set.
Correcting sparse file record segment 435.
271058 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
209664 file SDs/SIDs processed.

Cleaning up 455 unused index entries from index $SII of file 0x9.
Cleaning up 455 unused index entries from index $SDH of file 0x9.
Cleaning up 455 unused security descriptors.
Security descriptor verification completed.
30698 data files processed.

CHKDSK is verifying Usn Journal...
36542512 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
209648 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
5491272 free clusters processed.

Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bi
tmap.
Windows has made corrections to the file system.

77916159 KB total disk space.
55514208 KB in 162497 files.
122124 KB in 30699 indexes.
0 KB in bad sectors.
314735 KB in use by the system.
65536 KB occupied by the log file.
21965092 KB available on disk.

4096 bytes in each allocation unit.
19479039 total allocation units on disk.
5491273 allocation units available on disk.

Internal Info:
00 33 03 00 b7 f2 02 00 ab c6 05 00 00 00 00 00 .3..............
04 01 00 00 4b 00 00 00 00 00 00 00 00 00 00 00 ....K...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

The SFC scan reported "No Resource Integrity Violations Found" .

garioch7 · February 19, 2017

@Uchiha-Mikey

Thank you for your post. Glad to hear that the redirect issue has been resolved. I have found in the past that some Chrome extensions can cause such issues.

Chkdsk did find errors that it corrected, so hopefully all is now well with the system drive file system integrity. That is good news that the System File Checker found "No resource integrity violations." We are making forward progress.

So let's move on to some "housekeeping" issues.

.

Step 1. I would like you to uninstall ComboFix, and its associated files. If ComboFix.exe is still on your computer, please use Windows File Explorer to locate it. Then please open an Administrative Command Prompt and navigate to that folder, using the Change Directory (CD) command.

If you deleted Combofix.exe from your computer, please download a new copy. By default, it should download to your downloads folder. Once the Administrative Command prompt is opened, navigate to C:\Users\Mickey\Downloads, by using the command: CD \Users\Mikey\Downloads (please note the space between "CD" and the rest of the command. Press <Enter> after the command

Now type the command: ComboFix /uninstall and press <Enter>. Please note the space between "ComboFix" and "/uninstall".
If the computer does not reboot, then please reboot it when the uninstall is complete.

.

Step 2. I note from your logs that you still have Internet Explorer 8. The current version is IE11. This would suggest that you have not downloaded and installed Windows Updates; or, that you have deliberately declined to upgrade your Internet Explorer (some people do that for compatibility reasons). It is recommended that you keep your Windows 7 Ultimate up-to-date, since many Windows updates patch security vulnerabilities. Please let me know why you are still running IE8 and whether your Windows 7 Ultimate has been kept up-to-date?

.

Thank you and have a great day.

Regards,
-Phil

Uchiha-Mikey · February 19, 2017

Hi Phil,

ComboFix was uninstalled successfully. I never use IE. I only use Chrome. But the reason why it is out of date might be because as i mentioned in an earlier post, I just started using this HDD and did a fresh install of win 7 ultimate 64 bit. So i have done updates (SP1 etc) but every time i log into windows there still seems to be updates remaining. Windows Update never says that I'm to date, but there's always updates remaining even though i always try to update.

On a separate topic i noticed you mentioned that you do system images every Friday. I normally makes disk back-ups...should i be making system images instead? What is the difference?

garioch7 · February 19, 2017

@Uchiha-Mikey

Thank you for your post. I am happy to hear that you are successfully rid of ComboFix. It appears that you might be one of the lucky ones that perhaps no serious damage was done! :rolleyes: ComboFix, though, might have messed with your Windows Update.

Depending upon the backup program that you use, the options are commonly: "System Backup" or "Disk/Partition Backup", plus other file options. I choose the "Image Disk/Partitions" option and image all partitions, including the Recovery and Factory reset partitions. "System Backups" usually only backup the files in a special partition necessary to boot Windows, plus your C: drive contents. You may be, in fact, doing what I am doing - we are just getting tangled in terminology.

That is not good news about Windows not updating as it should. Let's see if the System Update Readiness Tool (SURT) might be able to "un-jam" things for you. Sometimes you have to run it more than once. See this link for more information about SURT. Since you are using Windows 7, you will have to scroll down a bit, and then download and "Run As Administrator" the Windows 7 SP1 x64 SURT file. Reboot after each run of SURT. Please note that SURT can take hours to run and may appear to hang (sometimes it does hang), but give it at least 10 hours for each run.

If that fails to resolve your updating issues, then my advice would be to go to the special Sysnative Forum, dedicated to Windows Update issues. I have used them several times over the years for myself and for others experiencing Windows Update issues and they have never failed to resolve the problem; or, at the very least, identify the cause. They are busy over there, so patience is a virtue! If you wind up going there (I hope not), be sure to link to your thread here at the MB Forums, so that they are aware that malware is not responsible and they will see that we have already run the System File Checker and a chkdsk. Also be sure to tell them that you did run ComboFix without supervision, since ComboFix might be the culprit.

Before you go over there, should it be necessary, I will want to clean up the tools that I used to scan your computer, so please don't head off over there without posting back here first and following my parting instructions!

Let's hope for the best. Good luck and have a great day.

Regards,
-Phil

Uchiha-Mikey · February 21, 2017

Hi Phil

Excuse me for the later reply, I've been quite busy. I have begun using the SURT now and will let you know the result as soon as it finishes.

garioch7 · February 21, 2017

Uchiha-Mikey:

Thank you for the update. Good luck. I am standing by. Have a great day.

Regards,
-Phil

Uchiha-Mikey · February 22, 2017

Hi Phil

So after the first run of SURT it told me it was unable to install some updates, so i rebooted and ran it a second time successfully. It seems now that Windows is installing updates as it should. Really happy about that :).

Malwarebytes 3.0.6 keeps blocking chrome.exe

Recommended Posts

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites