jshblncflr Posted July 30, 2019 ID:1326193 Share Posted July 30, 2019 Hi can anyone pls log.txthelp me remove this grenam.a virus. My windows security always detected it even i already remove it using malwarebytes. I attach my first scan log on malwarbytes Link to post Share on other sites More sharing options...
nasdaq Posted July 30, 2019 ID:1326214 Share Posted July 30, 2019 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Before you run this tool please empty your Recycle bin. ==== Download the Farbar Recovery Scan Tool (FRST).Choose the 32 or 64 bit version for your system. and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file: In the Reply section in the bottom of the topic Select Click the Choose a File. Navigate to the location of the File. Click the file. It will appear in section. Click the Saving button. Wait for further instructions ==== Link to post Share on other sites More sharing options...
jshblncflr Posted July 30, 2019 Author ID:1326218 Share Posted July 30, 2019 Hi thankyou! I also see this ground in my taskmanager start up tab. My avast also detected this ground.exe file. Addition.txt FRST.txt Link to post Share on other sites More sharing options...
jshblncflr Posted July 31, 2019 Author ID:1326661 Share Posted July 31, 2019 Any update? Link to post Share on other sites More sharing options...
nasdaq Posted July 31, 2019 ID:1326691 Share Posted July 31, 2019 Hi, Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The Computer will restart when the fix is completed. It will create a log (Fixlog.txt) please post it to your reply. === Please post the Fixlog.txt and let me know what problem persists. p.s. If you still have issues please post the complete FRST.TXT log. The copy you posted was truncated. fixlist.txt Link to post Share on other sites More sharing options...
jshblncflr Posted July 31, 2019 Author ID:1326809 Share Posted July 31, 2019 Hi, Thankyou, this is the fixlog. i think the virus still not fix because its still detected by my antivirus when i open .exe files. base on what i read online this virus hide the true .exe and create its own exe, same as the hidden one. This is the frst.txt log Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-07-2019 Ran by admin (administrator) on JSHBLNCFLR (TriGem Computer, Inc. DREAMSYS) (01-08-2019 04:54:34) Running from C:\Users\admin\Downloads Loaded Profiles: admin (Available Profiles: admin) Platform: Windows 10 Pro Version 1809 17763.316 (X64) Language: English (United States) Default browser: Chrome Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) () [File not signed] C:\Games\Battlefield 4\bf4_x86.exe () [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.50.38.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe () [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19062.451.0_x64__8wekyb3d8bbwe\YourPhone.exe (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atieclxx.exe (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atiesrxx.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Garena Online Pte Ltd -> Garena Online ) C:\Program Files (x86)\Garena\Garena\2.0.1907.0210\gxxsvc.exe (Garena Online Pte Ltd -> Garena Online ) C:\Program Files (x86)\Garena\Garena\Garena.exe (Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler.exe (Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler64.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.50.38.0_x64__kzf8qxf38zg5c\SkypeApp.exe (Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.WindowsStore_11906.1001.18.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [269192 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [645456 2019-04-01] (Oracle America, Inc. -> Oracle Corporation) HKU\S-1-5-21-3234263453-3942209631-4049643636-1001\...\Run: [OneDrive] => "C:\Users\admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\75.0.3770.142\Installer\chrmstp.exe [2019-07-23] (Google LLC -> Google LLC) GroupPolicy: Restriction ? <==== ATTENTION FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {21830E8D-D00D-4ADB-A768-7FA142E2EAB5} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3940232 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) Task: {5203A050-0FF1-4929-B424-056B636CD104} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3234263453-3942209631-4049643636-1001 => C:\Users\admin\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe Task: {710EC547-895C-4B9E-B770-D0789D48222B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-07-23] (Google Inc -> Google LLC) Task: {79829413-DF97-4D5F-B7C1-7666017F96E5} - System32\Tasks\gxx speed launcher => C:\Program Files (x86)\Garena\Garena\Garena.exe [457600 2019-07-02] (Garena Online Pte Ltd -> Garena Online ) Task: {C22C99B2-3EB4-4311-844D-7E4FD6CADCDE} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2047368 2019-07-31] (AVAST Software s.r.o. -> AVAST Software) Task: {E7515E55-A7EA-4039-A144-D21BE1434658} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-07-23] (Google Inc -> Google LLC) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{f730b441-5d9f-43f7-bb84-89402f530fa7}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_212\bin\ssv.dll [2019-07-23] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_212\bin\jp2ssv.dll [2019-07-23] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_212\bin\ssv.dll [2019-07-23] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_212\bin\jp2ssv.dll [2019-07-23] (Oracle America, Inc. -> Oracle Corporation) FireFox: ======== FF Plugin: @java.com/DTPlugin,version=11.212.2 -> C:\Program Files\Java\jre1.8.0_212\bin\dtplugin\npDeployJava1.dll [2019-07-23] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.212.2 -> C:\Program Files\Java\jre1.8.0_212\bin\plugin2\npjp2.dll [2019-07-23] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2019-03-14] (Adobe Systems, Inc.) [File not signed] FF Plugin-x32: @java.com/DTPlugin,version=11.212.2 -> C:\Program Files (x86)\Java\jre1.8.0_212\bin\dtplugin\npDeployJava1.dll [2019-07-23] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.212.2 -> C:\Program Files (x86)\Java\jre1.8.0_212\bin\plugin2\npjp2.dll [2019-07-23] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-07-23] (Google Inc -> Google LLC) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-07-23] (Google Inc -> Google LLC) Chrome: ======= CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default [2019-08-01] CHR Extension: (Slides) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-07-23] CHR Extension: (YouTube) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-07-23] CHR Extension: (Avast SafePrice | Comparison, deals, coupons) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2019-07-31] CHR Extension: (Google Docs Offline) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-07-23] CHR Extension: (AdBlock) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-07-31] CHR Extension: (Avast Online Security) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-07-30] CHR Extension: (Chrome Web Store Payments) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-07-23] CHR Extension: (Chrome Media Router) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-07-23] CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\System Profile [2019-08-01] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [551808 2017-05-16] (Advanced Micro Devices, Inc. -> AMD) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6797008 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [414976 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) S3 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) R2 GarenaPlatform; C:\Program Files (x86)\Garena\Garena\2.0.1907.0210\gxxsvc.exe [320512 2019-07-02] (Garena Online Pte Ltd -> Garena Online ) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6744288 2019-06-26] (Malwarebytes Corporation -> Malwarebytes) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5381128 2019-02-13] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1907.4-0\NisSrv.exe [2552416 2019-07-30] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1907.4-0\MsMpEng.exe [108832 2019-07-30] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 amdkmdag; C:\Windows\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmdag.sys [36558208 2017-05-16] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R3 amdkmdap; C:\Windows\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmpag.sys [528760 2017-05-16] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37320 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [209256 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [263224 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [206056 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [61688 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) R0 aswElam; C:\Windows\System32\drivers\aswElam.sys [15488 2019-07-30] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software) R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [279336 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42504 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [168896 2019-08-01] (AVAST Software s.r.o. -> AVAST Software) R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [112520 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [88160 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1030784 2019-08-01] (AVAST Software s.r.o. -> AVAST Software) R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [477288 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [225816 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [387896 2019-07-30] (AVAST Software s.r.o. -> AVAST Software) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [111112 2017-11-17] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices) R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [153328 2019-01-08] (Malwarebytes Corporation -> Malwarebytes) R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [199768 2019-07-31] (Malwarebytes Corporation -> Malwarebytes) S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [20936 2019-06-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [224408 2019-08-01] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [73584 2019-08-01] (Malwarebytes Corporation -> Malwarebytes) R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [275232 2019-08-01] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [116112 2019-08-01] (Malwarebytes Corporation -> Malwarebytes) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [605696 2018-09-15] (Microsoft Windows -> Realtek ) S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [47496 2019-07-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [344288 2019-07-30] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [54496 2019-07-30] (Microsoft Windows -> Microsoft Corporation) U4 DcpSvc; no ImagePath U4 xbgm; no ImagePath ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-08-01 04:45 - 2019-08-01 04:45 - 000275232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys 2019-08-01 04:45 - 2019-08-01 04:45 - 000224408 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys 2019-08-01 04:45 - 2019-08-01 04:45 - 000116112 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys 2019-08-01 04:45 - 2019-08-01 04:45 - 000073584 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2019-08-01 04:42 - 2019-08-01 04:43 - 000006242 _____ C:\Users\admin\Downloads\Fixlog.txt 2019-08-01 04:41 - 2019-08-01 04:41 - 002096128 _____ (Farbar) C:\Users\admin\Downloads\FRST64.exe 2019-08-01 04:35 - 2019-08-01 04:35 - 136618864 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2019-08-01 04:33 - 2019-08-01 04:50 - 000000000 ____D C:\ProgramData\boost_interprocess 2019-08-01 04:12 - 2019-08-01 04:12 - 000001310 _____ C:\Users\admin\Desktop\1665.txt 2019-07-31 19:36 - 2019-07-31 19:36 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job 2019-07-31 19:35 - 2019-07-31 19:35 - 000000000 ____D C:\Windows\pss 2019-07-31 06:23 - 2019-07-31 06:23 - 000000000 ____D C:\Users\admin\Documents\League of Legends 2019-07-31 06:18 - 2019-08-01 04:53 - 000000000 ____D C:\Program Files\Cheat Engine 6.8.3 2019-07-31 06:18 - 2019-07-31 06:18 - 000000000 ____D C:\Users\admin\Documents\My Cheat Tables 2019-07-30 22:52 - 2019-07-30 22:56 - 000034584 _____ C:\Users\admin\Downloads\Addition.txt 2019-07-30 22:48 - 2019-08-01 04:55 - 000016691 _____ C:\Users\admin\Downloads\FRST.txt 2019-07-30 22:48 - 2019-08-01 04:54 - 000000000 ____D C:\FRST 2019-07-30 22:48 - 2019-07-30 22:56 - 000006807 _____ C:\Users\admin\Downloads\FRST.1.txt 2019-07-30 22:47 - 2019-07-30 22:47 - 002096128 ___SH (Farbar) C:\Users\admin\Downloads\gFRST64.exe 2019-07-30 22:37 - 2019-07-30 22:38 - 000000000 ____D C:\Users\admin\Documents\Battlefield 4 2019-07-30 22:04 - 2019-07-30 22:05 - 003629536 ___SH (AVG Technologies CZ) C:\Users\admin\Downloads\gavg_remover_neshta.exe 2019-07-30 21:55 - 2019-07-30 21:55 - 000000000 ____D C:\ProgramData\AVG 2019-07-30 21:37 - 2019-07-30 21:37 - 000000000 ___HD C:\$SysReset 2019-07-30 20:42 - 2019-07-30 20:42 - 000000000 ____D C:\Users\admin\Documents\Rockstar Games 2019-07-30 20:39 - 2019-07-30 20:39 - 000002164 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk 2019-07-30 20:39 - 2019-07-30 20:39 - 000002152 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2019-07-30 20:39 - 2019-07-30 20:39 - 000000000 ____D C:\Users\admin\AppData\Roaming\AVAST Software 2019-07-30 20:33 - 2019-08-01 04:34 - 000000000 ____D C:\Windows\System32\Tasks\Avast Software 2019-07-30 20:32 - 2019-07-31 05:46 - 000004264 _____ C:\Windows\System32\Tasks\Avast Emergency Update 2019-07-30 20:31 - 2019-08-01 04:30 - 001030784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2019-07-30 20:31 - 2019-08-01 04:30 - 000168896 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2019-07-30 20:31 - 2019-07-30 20:32 - 000387896 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2019-07-30 20:31 - 2019-07-30 20:31 - 000477288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2019-07-30 20:31 - 2019-07-30 20:31 - 000363400 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2019-07-30 20:31 - 2019-07-30 20:31 - 000279336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys 2019-07-30 20:31 - 2019-07-30 20:31 - 000263224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys 2019-07-30 20:31 - 2019-07-30 20:31 - 000225816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2019-07-30 20:31 - 2019-07-30 20:31 - 000209256 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys 2019-07-30 20:31 - 2019-07-30 20:31 - 000206056 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys 2019-07-30 20:31 - 2019-07-30 20:31 - 000112520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2019-07-30 20:31 - 2019-07-30 20:31 - 000088160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2019-07-30 20:31 - 2019-07-30 20:31 - 000061688 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys 2019-07-30 20:31 - 2019-07-30 20:31 - 000042504 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2019-07-30 20:31 - 2019-07-30 20:31 - 000037320 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys 2019-07-30 20:31 - 2019-07-30 20:31 - 000015488 _____ (AVAST Software) C:\Windows\system32\Drivers\aswElam.sys 2019-07-30 20:31 - 2019-07-30 20:31 - 000000000 ____D C:\Program Files\Common Files\AVAST Software 2019-07-30 20:21 - 2019-07-30 20:21 - 000000000 ____D C:\Program Files\AVAST Software 2019-07-30 19:58 - 2019-07-30 19:58 - 000000000 ____D C:\Users\admin\AppData\Local\mbam 2019-07-30 19:57 - 2019-07-31 19:36 - 000199768 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys 2019-07-30 19:57 - 2019-07-30 19:57 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2019-07-30 19:57 - 2019-07-30 19:57 - 000000000 ____D C:\Users\admin\AppData\Local\mbamtray 2019-07-30 19:57 - 2019-07-30 19:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2019-07-30 19:57 - 2019-07-30 19:57 - 000000000 ____D C:\ProgramData\Malwarebytes 2019-07-30 19:57 - 2019-07-30 19:57 - 000000000 ____D C:\Program Files\Malwarebytes 2019-07-30 19:57 - 2019-06-26 13:00 - 000020936 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys 2019-07-30 19:57 - 2019-01-08 16:32 - 000153328 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys 2019-07-30 19:42 - 2019-07-31 19:22 - 000000000 ____D C:\Games 2019-07-30 01:55 - 2019-07-30 01:55 - 000000000 ____D C:\Users\admin\AppData\Local\Steam 2019-07-29 23:28 - 2019-08-01 04:47 - 000000000 ____D C:\Users\admin\AppData\Local\CrashDumps 2019-07-29 18:45 - 2019-07-30 21:22 - 000000000 ____D C:\ProgramData\AVAST Software 2019-07-29 18:44 - 2019-07-29 18:44 - 000228544 ___SH (AVAST Software) C:\Users\admin\Downloads\gavast_free_antivirus_setup_online.exe 2019-07-29 03:09 - 2019-07-29 02:59 - 000741432 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2019-07-29 01:59 - 2019-07-29 01:59 - 000000000 ____D C:\ProgramData\Riot Games 2019-07-28 20:06 - 2019-07-28 20:06 - 000000000 ____D C:\Users\admin\AppData\Local\DBG 2019-07-28 18:53 - 2019-07-28 18:53 - 000000000 ____D C:\Users\admin\AppData\Local\D3DSCache 2019-07-28 16:08 - 2019-07-28 16:08 - 000000000 ____D C:\Users\admin\AppData\Local\ElevatedDiagnostics 2019-07-28 15:43 - 2019-07-28 15:43 - 000000420 _____ C:\Users\admin\Desktop\This PC - Shortcut.lnk 2019-07-28 15:10 - 2019-07-28 15:10 - 000000000 ____D C:\Garena 2019-07-28 15:09 - 2019-08-01 04:34 - 000002572 _____ C:\Windows\System32\Tasks\gxx speed launcher 2019-07-28 15:09 - 2019-07-28 15:09 - 000001171 _____ C:\Users\Public\Desktop\Garena.lnk 2019-07-28 15:09 - 2019-07-28 15:09 - 000000000 ____D C:\Users\admin\AppData\Local\CEF 2019-07-28 15:09 - 2019-07-28 15:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garena 2019-07-28 15:09 - 2019-07-28 15:09 - 000000000 ____D C:\ProgramData\Garena 2019-07-28 15:08 - 2019-07-28 15:08 - 000000000 ____D C:\Program Files (x86)\Garena 2019-07-28 12:27 - 2019-07-28 12:27 - 000000000 ____D C:\Users\admin\AppData\Local\Rockstar Games 2019-07-28 12:26 - 2019-07-28 12:26 - 000000000 ____D C:\ProgramData\Steam 2019-07-28 12:26 - 2019-07-28 12:26 - 000000000 ____D C:\ProgramData\Socialclub 2019-07-28 12:25 - 2019-07-28 12:25 - 000000000 ____D C:\Users\Public\Documents\Steam 2019-07-28 12:25 - 2019-07-28 12:25 - 000000000 ____D C:\Users\admin\AppData\Roaming\2K Sports 2019-07-26 12:04 - 2019-07-26 12:04 - 000000000 ____D C:\Users\admin\AppData\Local\PeerDistRepub 2019-07-23 16:45 - 2019-07-23 16:45 - 000008192 __RSH C:\BOOTSECT.BAK 2019-07-23 16:45 - 2019-07-23 15:52 - 000000000 ____D C:\Windows\Panther 2019-07-23 16:45 - 2019-02-13 06:46 - 000408344 __RSH C:\bootmgr 2019-07-23 16:45 - 2018-09-15 15:28 - 000000001 ___SH C:\BOOTNXT 2019-07-23 16:45 - 2017-03-20 20:39 - 000043254 _____ C:\Windows\system32\OEMLogo.bmp 2019-07-23 15:53 - 2019-07-23 15:53 - 000000000 _SHDL C:\Documents and Settings 2019-07-23 15:49 - 2019-07-23 15:49 - 000000000 ____D C:\ProgramData\USOShared 2019-07-23 15:48 - 2019-07-23 15:48 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2019-07-23 15:47 - 2019-08-01 04:44 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2019-07-23 15:47 - 2019-08-01 04:10 - 000000000 ____D C:\Windows\system32\SleepStudy 2019-07-23 15:47 - 2019-07-30 04:00 - 000000000 ____D C:\Windows\system32\Drivers\wd 2019-07-23 15:47 - 2019-07-23 15:47 - 000257824 _____ C:\Windows\system32\FNTCACHE.DAT 2019-07-23 15:47 - 2019-07-23 15:47 - 000000000 ____D C:\Windows\ServiceProfiles 2019-07-23 11:50 - 2019-08-01 04:34 - 000003346 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2019-07-23 11:50 - 2019-08-01 04:34 - 000003122 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2019-07-23 11:50 - 2019-07-23 11:58 - 000000000 ____D C:\Users\admin\AppData\Local\Google 2019-07-23 11:50 - 2019-07-23 11:50 - 000002377 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-07-23 11:50 - 2019-07-23 11:50 - 000002336 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2019-07-23 11:50 - 2019-07-23 11:50 - 000000000 ____D C:\Users\admin\AppData\LocalLow\AMD 2019-07-23 11:50 - 2019-07-23 11:50 - 000000000 ____D C:\Program Files (x86)\Google 2019-07-23 11:05 - 2019-07-23 11:05 - 000000000 ____D C:\Program Files\UNP 2019-07-23 01:34 - 2019-07-23 01:35 - 000000000 ____D C:\ProgramData\Optimizer 2019-07-23 01:33 - 2019-07-23 01:33 - 001207319 _____ C:\Windows\unins000.exe 2019-07-23 01:33 - 2019-07-23 01:33 - 001199175 _____ C:\Windows\unins001.exe 2019-07-23 01:33 - 2019-07-23 01:33 - 000021739 _____ C:\Windows\unins001.dat 2019-07-23 01:33 - 2019-07-23 01:33 - 000010832 _____ C:\Windows\unins000.dat 2019-07-23 01:33 - 2019-07-23 01:33 - 000002240 _____ C:\AiOLog.txt 2019-07-23 01:33 - 2019-07-23 01:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2019-07-23 01:33 - 2017-04-01 20:44 - 003450616 _____ (Red Hat) C:\Windows\system32\cygwin1.dll 2019-07-23 01:33 - 2017-01-26 07:25 - 001265664 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\system32\libeay32.dll 2019-07-23 01:33 - 2017-01-26 07:25 - 000274944 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\system32\ssleay32.dll 2019-07-23 01:33 - 2017-01-26 07:25 - 000274944 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\system32\libssl32.dll 2019-07-23 01:33 - 2015-07-10 11:51 - 000456008 _____ (AutoIt Team) C:\Windows\system32\autoitx3.dll 2019-07-23 01:33 - 2014-01-31 03:14 - 001055676 _____ (Free Software Foundation) C:\Windows\system32\libiconv2.dll 2019-07-23 01:33 - 2014-01-25 14:30 - 000131072 _____ (Sereby Corporation) C:\Windows\system32\AiORuntimes.dll 2019-07-23 01:33 - 2013-12-23 15:44 - 000163480 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 001070232 _____ (Microsoft Corporation) C:\Windows\system32\mscomctl.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000660120 _____ (Microsoft Corporation) C:\Windows\system32\mscomct2.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000617896 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000444328 _____ (Microsoft Corporation) C:\Windows\system32\mshflxgd.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000416408 _____ (Microsoft Corporation ) C:\Windows\system32\comct332.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000279192 _____ (Microsoft Corporation) C:\Windows\system32\msdatgrd.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000259736 _____ (Microsoft Corporation) C:\Windows\system32\msflxgrd.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000253080 _____ (Microsoft Corporation) C:\Windows\system32\msdatlst.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000222360 _____ (Microsoft Corporation) C:\Windows\system32\tabctl32.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000219288 _____ (Microsoft Corporation) C:\Windows\system32\richtx32.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000218776 _____ (Microsoft Corporation) C:\Windows\system32\dblist32.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000212112 _____ (Microsoft Corporation) C:\Windows\system32\mci32.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000179352 _____ (Microsoft Corporation) C:\Windows\system32\msmask32.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000170920 _____ (Microsoft Corporation) C:\Windows\system32\comct232.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000131728 _____ (Microsoft Corporation) C:\Windows\system32\msinet.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000130712 _____ (Microsoft Corporation) C:\Windows\system32\msstdfmt.dll 2019-07-23 01:33 - 2013-12-20 01:48 - 000127640 _____ (Microsoft Corporation) C:\Windows\system32\mswinsck.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000119960 _____ (Microsoft Corporation) C:\Windows\system32\mscomm32.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000108696 _____ (Microsoft Corporation) C:\Windows\system32\msstkprp.dll 2019-07-23 01:33 - 2013-12-20 01:48 - 000104088 _____ (Microsoft Corporation) C:\Windows\system32\picclp32.ocx 2019-07-23 01:33 - 2013-12-20 01:48 - 000084624 _____ (Microsoft Corporation) C:\Windows\system32\sysinfo.ocx 2019-07-23 01:33 - 2012-06-14 15:36 - 000107520 _____ C:\Windows\system32\zlib1.dll 2019-07-23 01:33 - 2012-04-03 17:11 - 000138752 _____ C:\Windows\system32\libpng15.dll 2019-07-23 01:33 - 2011-10-12 04:09 - 004033440 _____ (Intel Corporation) C:\Windows\system32\libmmd.dll 2019-07-23 01:33 - 2011-10-01 09:16 - 000445016 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll 2019-07-23 01:33 - 2011-10-01 09:16 - 000109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\openal32.dll 2019-07-23 01:33 - 2011-01-12 14:36 - 001054208 _____ (Microsoft Corporation) C:\Windows\system32\mfc71u.dll 2019-07-23 01:33 - 2011-01-12 14:25 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\mfc71DEU.dll 2019-07-23 01:33 - 2011-01-12 14:25 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc71ITA.dll 2019-07-23 01:33 - 2011-01-12 14:25 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc71FRA.dll 2019-07-23 01:33 - 2011-01-12 14:25 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc71ESP.dll 2019-07-23 01:33 - 2011-01-12 14:25 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\mfc71ENU.dll 2019-07-23 01:33 - 2011-01-12 14:25 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc71KOR.dll 2019-07-23 01:33 - 2011-01-12 14:25 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc71JPN.dll 2019-07-23 01:33 - 2011-01-12 14:25 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\mfc71CHT.dll 2019-07-23 01:33 - 2011-01-12 14:25 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\mfc71CHS.dll 2019-07-23 01:33 - 2011-01-12 14:19 - 001060864 _____ (Microsoft Corporation) C:\Windows\system32\mfc71.dll 2019-07-23 01:33 - 2011-01-12 13:53 - 000090112 _____ (Microsoft Corporation) C:\Windows\system32\atl71.dll 2019-07-23 01:33 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2019-07-23 01:33 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2019-07-23 01:33 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2019-07-23 01:33 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2019-07-23 01:33 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2019-07-23 01:33 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2019-07-23 01:33 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2019-07-23 01:33 - 2010-05-26 11:41 - 002401112 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_43.dll 2019-07-23 01:33 - 2010-05-26 11:41 - 002106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2019-07-23 01:33 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_43.dll 2019-07-23 01:33 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2019-07-23 01:33 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2019-07-23 01:33 - 2010-05-26 11:41 - 000511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2019-07-23 01:33 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2019-07-23 01:33 - 2010-05-26 11:41 - 000276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2019-07-23 01:33 - 2010-05-26 11:41 - 000248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2019-07-23 01:33 - 2010-03-18 21:21 - 000799568 _____ (Microsoft Corporation) C:\Windows\system32\msdia100.dll 2019-07-23 01:33 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2019-07-23 01:33 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2019-07-23 01:33 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2019-07-23 01:33 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2019-07-23 01:33 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2019-07-23 01:33 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2019-07-23 01:33 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2019-07-23 01:33 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2019-07-23 01:33 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2019-07-23 01:33 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2019-07-23 01:33 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2019-07-23 01:33 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2019-07-23 01:33 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2019-07-23 01:33 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2019-07-23 01:33 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2019-07-23 01:33 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2019-07-23 01:33 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2019-07-23 01:33 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_42.dll 2019-07-23 01:33 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2019-07-23 01:33 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_42.dll 2019-07-23 01:33 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2019-07-23 01:33 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2019-07-23 01:33 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2019-07-23 01:33 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2019-07-23 01:33 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2019-07-23 01:33 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2019-07-23 01:33 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2019-07-23 01:33 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2019-07-23 01:33 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2019-07-23 01:33 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2019-07-23 01:33 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_41.dll 2019-07-23 01:33 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_41.dll 2019-07-23 01:33 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2019-07-23 01:33 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2019-07-23 01:33 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2019-07-23 01:33 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2019-07-23 01:33 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2019-07-23 01:33 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2019-07-23 01:33 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2019-07-23 01:33 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2019-07-23 01:33 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2019-07-23 01:33 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2019-07-23 01:33 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2019-07-23 01:33 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2019-07-23 01:33 - 2008-10-15 06:22 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_40.dll 2019-07-23 01:33 - 2008-10-15 06:22 - 004379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_40.dll 2019-07-23 01:33 - 2008-10-15 06:22 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2019-07-23 01:33 - 2008-10-15 06:22 - 002036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2019-07-23 01:33 - 2008-10-15 06:22 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2019-07-23 01:33 - 2008-10-15 06:22 - 000452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2019-07-23 01:33 - 2008-08-26 07:40 - 000162304 _____ C:\Windows\system32\libpng13.dll 2019-07-23 01:33 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2019-07-23 01:33 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2019-07-23 01:33 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2019-07-23 01:33 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2019-07-23 01:33 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2019-07-23 01:33 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2019-07-23 01:33 - 2008-07-10 11:01 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2019-07-23 01:33 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_39.dll 2019-07-23 01:33 - 2008-07-10 11:00 - 003851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_39.dll 2019-07-23 01:33 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2019-07-23 01:33 - 2008-07-10 11:00 - 001493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2019-07-23 01:33 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2019-07-23 01:33 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2019-07-23 01:33 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2019-07-23 01:33 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2019-07-23 01:33 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2019-07-23 01:33 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2019-07-23 01:33 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2019-07-23 01:33 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2019-07-23 01:33 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2019-07-23 01:33 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_38.dll 2019-07-23 01:33 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_38.dll 2019-07-23 01:33 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2019-07-23 01:33 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2019-07-23 01:33 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2019-07-23 01:33 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2019-07-23 01:33 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2019-07-23 01:33 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2019-07-23 01:33 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2019-07-23 01:33 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2019-07-23 01:33 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2019-07-23 01:33 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2019-07-23 01:33 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_37.dll 2019-07-23 01:33 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_37.dll 2019-07-23 01:33 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2019-07-23 01:33 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2019-07-23 01:33 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2019-07-23 01:33 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2019-07-23 01:33 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2019-07-23 01:33 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2019-07-23 01:33 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_2.dll 2019-07-23 01:33 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_2.dll 2019-07-23 01:33 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2019-07-23 01:33 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2019-07-23 01:33 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcompiler_36.dll 2019-07-23 01:33 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcompiler_36.dll 2019-07-23 01:33 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2019-07-23 01:33 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2019-07-23 01:33 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2019-07-23 01:33 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2019-07-23 01:33 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2019-07-23 01:33 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2019-07-23 01:33 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\d3dcompiler_35.dll 2019-07-23 01:33 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcompiler_35.dll 2019-07-23 01:33 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2019-07-23 01:33 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2019-07-23 01:33 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2019-07-23 01:33 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2019-07-23 01:33 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2019-07-23 01:33 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2019-07-23 01:33 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\d3dcompiler_34.dll 2019-07-23 01:33 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcompiler_34.dll 2019-07-23 01:33 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2019-07-23 01:33 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2019-07-23 01:33 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2019-07-23 01:33 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2019-07-23 01:33 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2019-07-23 01:33 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2019-07-23 01:33 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2019-07-23 01:33 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2019-07-23 01:33 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2019-07-23 01:33 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2019-07-23 01:33 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\d3dcompiler_33.dll 2019-07-23 01:33 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcompiler_33.dll 2019-07-23 01:33 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2019-07-23 01:33 - 2007-02-01 23:13 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\msvcp71.dll 2019-07-23 01:33 - 2007-02-01 20:11 - 000344064 _____ (Microsoft Corporation) C:\Windows\system32\msvcr71.dll 2019-07-23 01:33 - 2007-01-30 23:04 - 000339968 _____ (Microsoft Corporation) C:\Windows\system32\msvcr70.dll 2019-07-23 01:33 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2019-07-23 01:33 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2019-07-23 01:33 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2019-07-23 01:33 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2019-07-23 01:33 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2019-07-23 01:33 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2019-07-23 01:33 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2019-07-23 01:33 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2019-07-23 01:33 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2019-07-23 01:33 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2019-07-23 01:33 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2019-07-23 01:33 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2019-07-23 01:33 - 2006-09-28 16:03 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2019-07-23 01:33 - 2006-08-26 01:28 - 001017344 _____ (Microsoft Corporation) C:\Windows\system32\mfc70u.dll 2019-07-23 01:33 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70ITA.dll 2019-07-23 01:33 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70FRA.dll 2019-07-23 01:33 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70ESP.dll 2019-07-23 01:33 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70DEU.dll 2019-07-23 01:33 - 2006-08-26 01:15 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\mfc70ENU.dll 2019-07-23 01:33 - 2006-08-26 01:15 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc70KOR.dll 2019-07-23 01:33 - 2006-08-26 01:15 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc70JPN.dll 2019-07-23 01:33 - 2006-08-26 01:15 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\mfc70CHT.dll 2019-07-23 01:33 - 2006-08-26 01:15 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\mfc70CHS.dll 2019-07-23 01:33 - 2006-08-26 01:07 - 001024000 _____ (Microsoft Corporation) C:\Windows\system32\mfc70.dll 2019-07-23 01:33 - 2006-08-26 00:17 - 000086016 _____ (Microsoft Corporation) C:\Windows\system32\atl70.dll 2019-07-23 01:33 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2019-07-23 01:33 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2019-07-23 01:33 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2019-07-23 01:33 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2019-07-23 01:33 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2019-07-23 01:33 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2019-07-23 01:33 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2019-07-23 01:33 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2019-07-23 01:33 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2019-07-23 01:33 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2019-07-23 01:33 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2019-07-23 01:33 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2019-07-23 01:33 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2019-07-23 01:33 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2019-07-23 01:33 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2019-07-23 01:33 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2019-07-23 01:33 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2019-07-23 01:33 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2019-07-23 01:33 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2019-07-23 01:33 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2019-07-23 01:33 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2019-07-23 01:33 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2019-07-23 01:33 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2019-07-23 01:33 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2019-07-23 01:33 - 2005-05-06 14:52 - 000103424 _____ (GNU <www.gnu.org>) C:\Windows\system32\libintl3.dll 2019-07-23 01:33 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2019-07-23 01:33 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2019-07-23 01:33 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2019-07-23 01:33 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2019-07-23 01:33 - 2005-01-20 20:25 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\msvci70.dll 2019-07-23 01:33 - 2002-01-05 06:40 - 000487424 _____ (Microsoft Corporation) C:\Windows\system32\msvcp70.dll 2019-07-23 01:33 - 1996-01-12 04:00 - 000722192 _____ (Microsoft Corporation) C:\Windows\system32\vb40032.dll 2019-07-23 01:32 - 2019-07-30 03:34 - 000000000 ____D C:\Program Files\Microsoft Silverlight 2019-07-23 01:32 - 2019-07-23 01:32 - 000000000 ____D C:\Windows\SysWOW64\Adobe 2019-07-23 01:32 - 2019-07-23 01:32 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2019-07-23 01:29 - 2019-07-23 01:29 - 000110968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2019-07-23 01:29 - 2019-07-23 01:29 - 000000000 ____D C:\Program Files\Java 2019-07-23 01:28 - 2019-07-23 01:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2019-07-23 01:28 - 2019-07-23 01:28 - 000099192 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2019-07-23 01:28 - 2019-07-23 01:28 - 000000000 ____D C:\Users\admin\AppData\Roaming\Sun 2019-07-23 01:28 - 2019-07-23 01:28 - 000000000 ____D C:\Users\admin\AppData\LocalLow\Sun 2019-07-23 01:28 - 2019-07-23 01:28 - 000000000 ____D C:\ProgramData\Oracle 2019-07-23 01:28 - 2019-07-23 01:28 - 000000000 ____D C:\Program Files (x86)\Java 2019-07-23 01:14 - 2019-07-23 01:14 - 000000000 ____D C:\Users\admin\AppData\Local\Comms 2019-07-23 01:13 - 2019-07-31 19:41 - 000000000 ____D C:\ProgramData\Packages 2019-07-23 01:12 - 2019-07-23 01:18 - 000000000 ____D C:\Users\admin\AppData\Local\Publishers 2019-07-23 01:09 - 2019-07-29 02:53 - 000000566 __RSH C:\ProgramData\ntuser.pol 2019-07-23 01:03 - 2019-08-01 04:44 - 000065536 _____ C:\Windows\system32\spu_storage.bin 2019-07-23 01:03 - 2019-07-30 21:25 - 000000000 ____D C:\Users\admin\AppData\Local\AMD 2019-07-23 01:03 - 2019-07-23 01:03 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies 2019-07-23 01:03 - 2019-07-23 01:03 - 000000000 ____D C:\Program Files\AMD 2019-07-23 01:00 - 2019-08-01 04:34 - 000002862 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3234263453-3942209631-4049643636-1001 2019-07-23 01:00 - 2019-07-27 16:04 - 000840848 _____ C:\Windows\system32\PerfStringBackup.INI 2019-07-23 01:00 - 2019-07-23 01:23 - 000000000 ____D C:\Users\admin\AppData\Local\PlaceholderTileLogoFolder 2019-07-23 00:59 - 2019-07-23 01:00 - 000000000 ___RD C:\Users\admin\OneDrive 2019-07-23 00:59 - 2019-07-23 00:59 - 000000000 ____D C:\ProgramData\Microsoft OneDrive 2019-07-23 00:58 - 2019-07-23 00:58 - 000001446 _____ C:\Users\admin\Desktop\Microsoft Edge.lnk 2019-07-23 00:58 - 2019-07-23 00:58 - 000000000 ___HD C:\Users\admin\MicrosoftEdgeBackups 2019-07-23 00:57 - 2019-07-31 19:24 - 000000000 ____D C:\Users\admin 2019-07-23 00:57 - 2019-07-30 20:20 - 000000000 ____D C:\Users\admin\AppData\Local\Packages 2019-07-23 00:57 - 2019-07-23 01:00 - 000002367 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2019-07-23 00:57 - 2019-07-23 00:57 - 000000020 ___SH C:\Users\admin\ntuser.ini 2019-07-23 00:57 - 2019-07-23 00:57 - 000000000 __RHD C:\Users\Public\AccountPictures 2019-07-23 00:57 - 2019-07-23 00:57 - 000000000 ___RD C:\Users\admin\3D Objects 2019-07-23 00:57 - 2019-07-23 00:57 - 000000000 ____D C:\Users\admin\AppData\Roaming\Adobe 2019-07-23 00:57 - 2019-07-23 00:57 - 000000000 ____D C:\Users\admin\AppData\Local\VirtualStore 2019-07-23 00:57 - 2019-07-23 00:57 - 000000000 ____D C:\Users\admin\AppData\Local\MicrosoftEdge 2019-07-23 00:57 - 2019-07-23 00:57 - 000000000 ____D C:\Users\admin\AppData\Local\ConnectedDevicesPlatform 2019-07-23 00:55 - 2019-07-23 00:55 - 000000000 ____D C:\Windows\CSC 2019-07-23 00:55 - 2018-09-15 15:28 - 002864640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll ==================== One month (modified) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-08-01 04:44 - 2018-09-15 14:09 - 000524288 _____ C:\Windows\system32\config\BBI 2019-08-01 04:32 - 2018-09-15 15:23 - 000000000 ____D C:\Windows\CbsTemp 2019-08-01 04:31 - 2018-09-15 14:09 - 000000000 ____D C:\Windows\servicing 2019-07-31 00:08 - 2018-09-16 00:45 - 000000000 ____D C:\Windows\OCR 2019-07-30 22:46 - 2018-09-15 14:09 - 000032768 _____ C:\Windows\system32\config\ELAM 2019-07-30 20:31 - 2018-09-15 15:33 - 000000000 ___HD C:\Windows\ELAMBKUP 2019-07-30 20:22 - 2018-09-15 15:33 - 000000000 ___HD C:\Program Files\WindowsApps 2019-07-30 20:22 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\AppReadiness 2019-07-30 04:00 - 2018-09-15 15:33 - 000000000 ___RD C:\Program Files\Windows Defender 2019-07-28 14:38 - 2018-09-15 15:31 - 000000000 ____D C:\Windows\INF 2019-07-26 12:10 - 2018-09-16 00:43 - 000000000 ____D C:\Windows\SysWOW64\winrm 2019-07-26 12:10 - 2018-09-16 00:43 - 000000000 ____D C:\Windows\SysWOW64\WCN 2019-07-26 12:10 - 2018-09-16 00:43 - 000000000 ____D C:\Windows\SysWOW64\slmgr 2019-07-26 12:10 - 2018-09-16 00:43 - 000000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts 2019-07-26 12:10 - 2018-09-16 00:43 - 000000000 ____D C:\Windows\system32\winrm 2019-07-26 12:10 - 2018-09-16 00:43 - 000000000 ____D C:\Windows\system32\WCN 2019-07-26 12:10 - 2018-09-16 00:43 - 000000000 ____D C:\Windows\system32\slmgr 2019-07-26 12:10 - 2018-09-15 15:33 - 000000000 ___SD C:\Windows\SysWOW64\F12 2019-07-26 12:10 - 2018-09-15 15:33 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs 2019-07-26 12:10 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\SysWOW64\oobe 2019-07-26 12:10 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\SysWOW64\MUI 2019-07-26 12:10 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\SysWOW64\Dism 2019-07-26 12:10 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\SysWOW64\com 2019-07-26 12:10 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\system32\WinBioPlugIns 2019-07-26 12:10 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\system32\SystemResetPlatform 2019-07-26 12:10 - 2018-09-15 14:09 - 000000000 ____D C:\Windows\system32\Sysprep 2019-07-26 12:09 - 2018-09-16 00:43 - 000000000 ____D C:\Windows\system32\Printing_Admin_Scripts 2019-07-26 12:08 - 2018-09-15 15:33 - 000000000 ___SD C:\Windows\system32\F12 2019-07-26 12:08 - 2018-09-15 15:33 - 000000000 ___SD C:\Windows\system32\dsc 2019-07-26 12:08 - 2018-09-15 15:33 - 000000000 ___SD C:\Windows\system32\DiagSvcs 2019-07-26 12:08 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\system32\PerceptionSimulation 2019-07-26 12:08 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\system32\oobe 2019-07-26 12:08 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\system32\MUI 2019-07-26 12:08 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\system32\migwiz 2019-07-26 12:08 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\system32\com 2019-07-26 12:08 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\PolicyDefinitions 2019-07-26 12:08 - 2018-09-15 14:09 - 000000000 ____D C:\Windows\system32\Dism 2019-07-26 12:07 - 2018-09-16 00:46 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2019-07-26 12:07 - 2018-09-16 00:46 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2019-07-26 12:07 - 2018-09-16 00:46 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2019-07-26 12:07 - 2018-09-15 15:33 - 000000000 ___RD C:\Windows\ImmersiveControlPanel 2019-07-26 12:07 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\IME 2019-07-26 12:07 - 2018-09-15 15:33 - 000000000 ____D C:\Program Files\Common Files\system 2019-07-26 12:07 - 2018-09-15 15:33 - 000000000 ____D C:\Program Files (x86)\Windows Defender 2019-07-23 16:45 - 2018-09-15 15:36 - 000000000 ____D C:\Windows\Setup 2019-07-23 16:45 - 2018-09-15 15:31 - 000028672 _____ C:\Windows\system32\config\BCD-Template 2019-07-23 15:49 - 2018-09-15 15:33 - 000000000 ___RD C:\Windows\PrintDialog 2019-07-23 15:49 - 2018-09-15 15:33 - 000000000 ____D C:\ProgramData\USOPrivate 2019-07-23 10:47 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\LiveKernelReports 2019-07-23 03:36 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\system32\WinBioDatabase 2019-07-23 03:35 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\appcompat 2019-07-23 01:33 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\System 2019-07-23 01:32 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\SysWOW64\Macromed 2019-07-23 01:30 - 2018-09-15 15:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2019-07-23 01:12 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\ServiceState 2019-07-23 01:09 - 2018-09-15 15:33 - 000000000 ___HD C:\Windows\system32\GroupPolicy 2019-07-23 00:55 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\system32\spool 2019-07-23 00:55 - 2018-09-15 15:33 - 000000000 ____D C:\Windows\system32\FxsTmp ==================== FLock ================ 2019-08-01 04:53 C:\Program Files\Cheat Engine 6.8.3 2019-07-23 00:55 C:\Windows\CSC ==================== SigCheck =============================== (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ============================ Fixlog.txt FRST.txt Link to post Share on other sites More sharing options...
jshblncflr Posted July 31, 2019 Author ID:1326829 Share Posted July 31, 2019 So i had these virus called ground.exe, my avast constantly detected them when i open .exe applications, I dont know what to do anymore. Can someone pls help me removing these. Link to post Share on other sites More sharing options...
jshblncflr Posted July 31, 2019 Author ID:1326864 Share Posted July 31, 2019 I think this virus hides the original exe files. The hidden exe files have a letter "g" on the file name ex "gBf4.exe" and its hidden. Link to post Share on other sites More sharing options...
nasdaq Posted August 1, 2019 ID:1326997 Share Posted August 1, 2019 Hi, The only file I see with bf4 is this one. C:\Games\Battlefield 4\bf4_x86.exe Could the file be compromised? Navigate to VirusTotal and submit the file for inspection. https://www.virustotal.com/gui/home/upload Let me know if anything is found. Post the link generated by ViruisTotal. p.s. You can also just Disable the process using the TaskManager. Find out if the problem persists. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 9, 2019 Root Admin ID:1328661 Share Posted August 9, 2019 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts