Solved Computer Shutting Down, Suspected Virus or Malware

[Daniel Burkus]

2016-01-31 08:35 - 2015-11-11 03:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-01-31 08:35 - 2015-11-11 03:39 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-01-31 08:35 - 2009-07-14 10:16 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-01-31 08:34 - 2015-02-03 12:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-01-31 08:33 - 2015-12-09 06:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-01-31 08:33 - 2015-07-31 02:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-01-31 08:32 - 2015-02-04 11:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2016-01-31 03:17 - 2015-01-09 08:44 - 00419936 _____ C:\Windows\system32\locale.nls
2016-01-31 02:44 - 2016-01-31 02:44 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2016-01-31 02:44 - 2016-01-31 02:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2016-01-31 02:44 - 2016-01-31 02:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2016-01-31 02:44 - 2016-01-31 02:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2016-01-31 02:44 - 2016-01-31 02:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2016-01-31 02:44 - 2016-01-31 02:44 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2016-01-31 02:44 - 2016-01-31 02:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2016-01-31 02:44 - 2016-01-31 02:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-01-31 02:44 - 2016-01-31 02:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2016-01-31 02:44 - 2016-01-31 02:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2016-01-31 02:44 - 2016-01-31 02:44 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2016-01-31 02:44 - 2016-01-31 02:44 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2016-01-31 02:44 - 2016-01-31 02:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2016-01-31 02:44 - 2016-01-31 02:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2016-01-31 02:44 - 2016-01-31 02:44 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2016-01-31 02:44 - 2016-01-31 02:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2016-01-31 02:44 - 2016-01-31 02:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2016-01-31 02:44 - 2016-01-31 02:44 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2016-01-31 02:44 - 2016-01-31 02:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2016-01-31 02:44 - 2016-01-31 02:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2016-01-31 02:44 - 2016-01-31 02:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2016-01-31 02:42 - 2016-01-31 02:42 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-01-31 02:42 - 2016-01-31 02:42 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-01-31 00:46 - 2016-01-31 00:57 - 00000000 ___SD C:\Windows\system32\GWX
2016-01-30 23:23 - 2012-07-26 12:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2016-01-30 23:23 - 2012-07-26 12:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2016-01-30 23:23 - 2012-07-26 12:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2016-01-30 23:23 - 2012-07-26 12:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2016-01-30 23:23 - 2012-07-26 12:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2016-01-30 23:23 - 2012-07-26 11:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2016-01-30 23:23 - 2012-07-26 11:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2016-01-30 23:23 - 2012-06-02 23:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2016-01-30 23:20 - 2014-07-01 07:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2016-01-30 23:20 - 2014-06-06 15:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-01-30 23:20 - 2014-03-10 06:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2016-01-30 23:20 - 2014-03-10 06:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2016-01-30 23:19 - 2012-03-01 14:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2016-01-30 23:19 - 2012-03-01 14:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2016-01-30 21:51 - 2009-06-11 06:39 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20160130-215144.backup
2016-01-30 20:04 - 2015-01-09 11:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2016-01-30 20:04 - 2015-01-09 11:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2016-01-30 20:04 - 2015-01-09 11:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2016-01-30 19:55 - 2015-01-29 12:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2016-01-30 19:55 - 2013-09-08 11:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-01-30 19:55 - 2013-07-03 12:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-01-30 19:55 - 2013-07-03 12:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-01-30 19:54 - 2015-07-18 22:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-01-30 19:54 - 2015-07-18 22:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-01-30 19:54 - 2015-07-11 02:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-01-30 19:54 - 2015-07-11 02:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-01-30 19:54 - 2015-07-11 02:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2016-01-30 19:54 - 2013-10-04 10:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2016-01-30 19:54 - 2013-10-04 10:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2016-01-30 19:54 - 2012-07-05 04:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2016-01-30 19:53 - 2013-02-12 12:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2016-01-30 19:53 - 2011-04-29 11:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-01-30 19:53 - 2011-04-29 11:46 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-01-30 19:53 - 2011-04-29 11:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-01-30 19:52 - 2015-11-12 03:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-01-30 19:52 - 2015-11-12 03:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-01-30 19:52 - 2015-09-23 22:09 - 00371920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-01-30 19:52 - 2015-09-23 22:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-01-30 19:52 - 2015-07-10 02:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-01-30 19:52 - 2015-07-10 02:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-01-30 19:52 - 2015-07-02 05:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-01-30 19:52 - 2015-07-02 05:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-01-30 19:52 - 2013-10-30 11:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2016-01-30 19:52 - 2012-11-02 14:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2016-01-30 19:52 - 2011-06-16 13:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2016-01-30 19:52 - 2011-02-18 14:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2016-01-30 19:51 - 2015-08-28 02:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-01-30 19:51 - 2015-08-28 02:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-01-30 19:51 - 2015-08-28 02:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-01-30 19:51 - 2015-08-28 02:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-01-30 19:51 - 2015-08-06 02:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-01-30 19:51 - 2013-01-24 13:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-01-30 19:50 - 2015-06-16 06:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-01-30 19:50 - 2015-06-16 06:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-01-30 19:50 - 2015-06-16 06:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-01-30 19:50 - 2015-06-16 06:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-01-30 19:50 - 2014-11-11 11:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2016-01-30 19:50 - 2014-06-16 10:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-01-30 19:50 - 2014-06-16 10:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-01-30 19:50 - 2014-06-16 10:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-01-30 19:50 - 2013-10-19 10:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2016-01-30 19:50 - 2011-03-03 14:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-01-30 19:50 - 2011-03-03 14:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-01-30 19:50 - 2011-03-03 14:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2016-01-30 19:49 - 2015-10-30 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-01-30 19:49 - 2015-10-30 02:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-01-30 19:49 - 2015-10-30 02:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-01-30 19:49 - 2015-10-30 02:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-01-30 19:49 - 2015-07-16 02:59 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-01-30 19:49 - 2015-07-16 02:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-01-30 19:49 - 2015-07-16 02:54 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-01-30 19:49 - 2015-06-12 02:57 - 00919552 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-01-30 19:49 - 2015-06-12 02:15 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-01-30 19:49 - 2015-06-12 02:15 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2016-01-30 19:49 - 2014-08-12 10:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2016-01-30 19:49 - 2014-03-04 18:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2016-01-30 19:49 - 2014-03-04 18:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2016-01-30 19:49 - 2014-03-04 18:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2016-01-30 19:49 - 2014-03-04 18:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2016-01-30 19:49 - 2014-03-04 18:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2016-01-30 19:49 - 2014-03-04 18:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2016-01-30 19:49 - 2014-03-04 18:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2016-01-30 19:49 - 2013-10-12 11:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-01-30 19:49 - 2013-10-12 11:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-01-30 19:49 - 2013-10-12 10:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2016-01-30 19:49 - 2013-10-12 10:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2016-01-30 19:49 - 2012-08-22 05:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2016-01-30 19:48 - 2015-11-06 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-01-30 19:48 - 2015-10-14 01:31 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-01-30 19:48 - 2015-10-14 01:31 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-01-30 19:48 - 2013-05-10 12:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2016-01-30 19:48 - 2011-12-30 14:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2016-01-30 19:48 - 2011-08-17 13:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2016-01-30 19:48 - 2011-08-17 13:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2016-01-30 19:48 - 2011-05-24 19:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2016-01-30 19:47 - 2015-10-13 13:50 - 00712640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-01-30 19:47 - 2015-09-02 11:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-01-30 19:47 - 2015-09-02 11:48 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-01-30 19:47 - 2015-09-02 11:48 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-01-30 19:47 - 2015-09-02 11:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-01-30 19:47 - 2015-09-02 10:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-01-30 19:47 - 2014-09-04 14:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-01-30 19:47 - 2014-01-28 11:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-01-30 19:47 - 2013-03-19 12:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-01-30 19:47 - 2011-08-27 13:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-01-30 19:46 - 2015-11-04 03:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2016-01-30 19:46 - 2015-04-11 12:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2016-01-30 19:46 - 2015-03-04 13:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2016-01-30 19:46 - 2015-03-04 13:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2016-01-30 19:46 - 2015-01-17 11:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-01-30 19:46 - 2013-08-28 09:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-01-30 19:46 - 2013-05-13 12:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2016-01-30 19:46 - 2013-05-13 12:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2016-01-30 19:46 - 2013-04-26 13:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-01-30 19:46 - 2011-05-03 13:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-01-30 19:45 - 2015-07-23 02:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-01-30 19:45 - 2015-07-23 02:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-01-30 19:45 - 2015-07-23 01:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-01-30 19:45 - 2014-02-04 11:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2016-01-30 19:45 - 2014-02-04 11:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-01-30 19:45 - 2014-02-04 11:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2016-01-30 19:45 - 2014-02-04 11:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2016-01-30 19:45 - 2012-10-04 01:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2016-01-30 19:45 - 2012-10-04 01:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2016-01-30 19:45 - 2012-10-04 01:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-01-30 19:45 - 2012-10-04 00:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-01-30 19:43 - 2015-07-10 02:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-01-30 19:43 - 2015-07-10 02:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-01-30 19:43 - 2014-06-18 10:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2016-01-30 19:43 - 2012-07-05 06:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-01-30 19:43 - 2012-07-05 06:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-01-30 19:43 - 2012-07-05 06:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-01-30 19:43 - 2012-06-06 14:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2016-01-30 19:43 - 2011-05-04 13:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-01-30 19:43 - 2011-05-04 13:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-01-30 19:43 - 2011-05-04 13:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2016-01-30 19:43 - 2011-05-04 13:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2016-01-30 19:43 - 2011-05-04 13:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2016-01-30 19:43 - 2011-05-04 13:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2016-01-30 19:43 - 2011-05-04 13:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-01-30 19:43 - 2011-05-04 13:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-01-30 19:43 - 2011-05-04 13:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2016-01-30 19:43 - 2011-02-12 14:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2016-01-30 19:42 - 2015-05-26 03:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2016-01-30 19:42 - 2015-05-26 03:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2016-01-30 19:42 - 2015-05-26 03:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2016-01-30 19:42 - 2015-05-26 03:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2016-01-30 19:42 - 2015-05-26 03:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2016-01-30 19:42 - 2015-05-26 03:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2016-01-30 19:42 - 2015-04-18 11:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-01-30 19:42 - 2014-01-24 11:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-01-30 19:42 - 2013-04-26 08:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-01-30 19:42 - 2010-12-23 14:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2016-01-30 19:42 - 2010-12-23 14:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2016-01-30 19:41 - 2015-11-04 03:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-01-30 19:41 - 2015-04-28 04:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-01-30 19:41 - 2015-04-28 04:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-01-30 19:41 - 2015-04-28 04:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-01-30 19:41 - 2015-04-28 04:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-01-30 19:41 - 2015-04-13 12:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-01-30 19:40 - 2015-12-09 06:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-01-30 19:40 - 2015-12-09 06:53 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-01-30 19:40 - 2015-10-02 02:50 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-01-30 19:40 - 2015-10-02 02:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-01-30 19:40 - 2015-10-02 02:50 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-01-30 19:40 - 2015-10-02 02:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-01-30 19:40 - 2015-10-02 02:50 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-01-30 19:40 - 2015-10-02 01:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-01-30 19:40 - 2014-08-01 20:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-01-30 19:40 - 2014-04-05 11:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-01-30 19:40 - 2014-04-05 11:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-01-30 19:40 - 2013-11-26 20:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-01-30 19:39 - 2014-06-19 07:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-01-30 19:39 - 2014-06-19 07:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2016-01-30 19:39 - 2014-06-19 07:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2016-01-30 19:39 - 2012-12-07 21:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2016-01-30 19:39 - 2012-12-07 21:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-01-30 19:39 - 2012-12-07 19:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2016-01-30 19:39 - 2012-12-07 19:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2016-01-30 19:39 - 2012-12-07 19:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2016-01-30 19:39 - 2012-12-07 19:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2016-01-30 19:39 - 2012-12-07 19:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2016-01-30 19:39 - 2012-12-07 19:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2016-01-30 19:39 - 2012-12-07 19:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2016-01-30 19:39 - 2012-12-07 19:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2016-01-30 19:39 - 2012-12-07 19:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2016-01-30 19:39 - 2012-12-07 19:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2016-01-30 19:39 - 2012-12-07 19:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2016-01-30 19:39 - 2012-12-07 19:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2016-01-30 19:39 - 2012-12-07 19:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2016-01-30 19:39 - 2012-12-07 19:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2016-01-30 19:36 - 2015-11-06 04:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-01-30 19:36 - 2015-11-05 18:48 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-01-30 19:36 - 2015-02-03 12:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-01-30 19:36 - 2014-12-19 11:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-01-30 19:36 - 2014-12-12 02:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2016-01-30 19:36 - 2014-11-26 12:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-01-30 19:36 - 2014-10-25 10:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2016-01-30 19:36 - 2013-07-26 10:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2016-01-30 19:36 - 2012-09-26 07:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2016-01-30 19:36 - 2012-03-17 16:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-01-30 19:36 - 2011-12-16 16:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2016-01-30 19:36 - 2011-11-17 14:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-01-30 19:36 - 2011-06-15 17:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll
2016-01-30 19:36 - 2011-06-15 17:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2016-01-30 19:36 - 2011-06-15 17:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2016-01-30 19:36 - 2011-06-15 17:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2016-01-30 19:36 - 2011-06-15 17:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2016-01-30 19:35 - 2015-11-14 07:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2016-01-30 19:35 - 2015-11-14 07:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2016-01-30 19:35 - 2015-11-14 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2016-01-30 19:35 - 2015-02-18 16:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-01-30 19:35 - 2014-10-30 10:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2016-01-30 19:35 - 2014-07-17 10:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2016-01-30 19:35 - 2014-07-17 10:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-01-30 19:35 - 2014-07-17 10:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-01-30 19:35 - 2014-07-17 10:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2016-01-30 19:35 - 2014-07-17 10:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2016-01-30 19:35 - 2014-07-17 10:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2016-01-30 19:35 - 2013-10-12 11:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-01-30 19:35 - 2013-10-12 11:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-01-30 19:35 - 2013-10-12 11:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-01-30 19:35 - 2013-08-05 10:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2016-01-30 19:35 - 2012-05-14 13:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-01-30 19:35 - 2012-04-26 13:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2016-01-30 19:35 - 2012-04-26 13:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2016-01-30 19:35 - 2012-01-04 17:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-01-30 19:34 - 2015-06-25 18:48 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-01-30 19:34 - 2015-06-25 18:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-01-30 19:34 - 2012-11-23 11:48 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2016-01-30 19:34 - 2012-10-10 02:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-01-30 19:34 - 2012-10-10 02:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2016-01-30 19:33 - 2015-07-15 11:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-01-30 19:33 - 2015-04-30 03:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-01-30 19:33 - 2015-04-30 03:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-01-30 19:33 - 2015-04-30 03:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-01-30 19:33 - 2015-04-30 03:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-01-30 19:33 - 2015-04-30 03:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-01-30 19:33 - 2015-02-25 12:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-01-30 19:33 - 2014-12-06 12:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-01-30 19:33 - 2014-01-29 11:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-01-30 19:33 - 2013-07-12 19:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2016-01-30 19:33 - 2012-10-04 01:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-01-30 19:33 - 2012-10-04 01:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2016-01-30 19:33 - 2011-03-11 14:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2016-01-30 19:33 - 2011-03-11 14:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2016-01-30 19:33 - 2011-02-23 13:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-01-30 19:32 - 2015-12-09 06:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-01-30 19:32 - 2015-12-09 06:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-01-30 19:32 - 2015-12-09 06:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-01-30 19:32 - 2015-12-09 06:54 - 01202688 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2016-01-30 19:32 - 2015-12-09 06:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-01-30 19:32 - 2015-12-09 06:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-01-30 19:32 - 2015-12-09 06:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-01-30 19:32 - 2015-12-09 06:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-01-30 19:32 - 2015-12-09 06:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-01-30 19:32 - 2015-12-09 06:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-01-30 19:32 - 2015-12-09 06:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-01-30 19:32 - 2015-12-09 06:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-01-30 19:32 - 2015-12-09 06:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-01-30 19:32 - 2015-12-09 06:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-01-30 19:32 - 2015-12-09 06:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-01-30 19:32 - 2015-12-09 06:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-01-30 19:32 - 2015-12-09 06:53 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2016-01-30 19:32 - 2015-12-09 06:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-01-30 19:32 - 2015-12-09 06:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-01-30 19:32 - 2015-12-09 06:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-01-30 19:32 - 2015-12-09 06:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-01-30 19:32 - 2015-12-09 06:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-01-30 19:32 - 2015-12-09 06:53 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-01-30 19:32 - 2015-12-09 06:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-01-30 19:32 - 2015-12-09 06:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-01-30 19:32 - 2015-12-09 06:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-01-30 19:32 - 2015-12-09 06:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-01-30 19:32 - 2015-12-09 06:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-01-30 19:32 - 2015-12-09 06:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-01-30 19:32 - 2015-12-09 06:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-01-30 19:32 - 2015-12-09 06:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-01-30 19:32 - 2015-12-09 06:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-01-30 19:32 - 2015-12-09 06:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-01-30 19:32 - 2015-12-09 06:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-01-30 19:32 - 2015-12-09 06:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-01-30 19:32 - 2015-12-09 06:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2016-01-30 19:32 - 2015-12-09 06:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-01-30 19:32 - 2015-12-09 06:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-01-30 19:32 - 2015-12-09 06:11 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-01-30 19:32 - 2015-12-09 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2016-01-30 19:32 - 2015-06-02 08:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2016-01-30 19:32 - 2015-02-03 12:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-01-30 19:32 - 2015-02-03 12:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-01-30 19:32 - 2015-02-03 12:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-01-30 19:32 - 2015-02-03 12:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-01-30 19:32 - 2015-02-03 12:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-01-30 19:32 - 2015-02-03 12:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-01-30 19:32 - 2015-02-03 12:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-01-30 19:32 - 2015-02-03 12:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-01-30 19:32 - 2015-02-03 12:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-01-30 19:32 - 2015-02-03 12:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-01-30 19:32 - 2015-02-03 12:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-01-30 19:32 - 2015-02-03 12:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-01-30 19:32 - 2015-02-03 12:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-01-30 19:32 - 2015-02-03 12:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-01-30 19:32 - 2015-02-03 12:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-01-30 19:32 - 2015-02-03 12:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-01-30 19:32 - 2015-02-03 12:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-01-30 19:32 - 2015-02-03 12:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-01-30 19:32 - 2015-02-03 12:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-01-30 19:32 - 2015-02-03 12:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-01-30 19:32 - 2014-11-01 07:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-01-30 19:32 - 2014-06-28 09:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-01-30 19:32 - 2014-06-28 09:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-01-30 19:32 - 2013-11-27 10:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-01-30 19:32 - 2013-11-27 10:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-01-30 19:32 - 2013-11-27 10:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2016-01-30 19:32 - 2013-11-27 10:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-01-30 19:32 - 2013-11-27 10:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2016-01-30 19:32 - 2013-11-27 10:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2016-01-30 19:32 - 2013-11-27 10:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-01-30 19:32 - 2013-06-26 07:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2016-01-30 19:32 - 2012-11-29 07:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2016-01-30 19:32 - 2012-11-29 07:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2016-01-30 19:32 - 2012-11-29 07:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2016-01-30 19:31 - 2015-04-25 02:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-01-30 19:31 - 2014-12-08 11:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2016-01-30 19:31 - 2014-10-14 10:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2016-01-30 19:31 - 2013-12-04 11:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2016-01-30 19:31 - 2013-12-04 11:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2016-01-30 19:31 - 2013-12-04 11:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2016-01-30 19:31 - 2013-12-04 11:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2016-01-30 19:31 - 2013-12-04 11:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2016-01-30 19:31 - 2013-12-04 10:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2016-01-30 19:31 - 2013-12-04 10:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2016-01-30 19:31 - 2013-12-04 10:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2016-01-30 19:31 - 2013-12-04 10:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2016-01-30 18:52 - 2014-10-03 10:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-01-30 18:52 - 2014-10-03 10:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-01-30 18:52 - 2014-10-03 10:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-01-30 18:52 - 2014-10-03 10:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-01-30 18:52 - 2014-10-03 10:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-01-30 18:33 - 2012-02-17 14:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-01-30 18:33 - 2012-02-17 13:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2016-01-30 17:47 - 2016-01-30 17:47 - 00001179 _____ C:\Users\Daniel Burkus\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk
2016-01-30 17:47 - 2016-01-30 17:47 - 00001179 _____ C:\Users\Daniel Burkus\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk
2016-01-30 17:47 - 2016-01-30 17:47 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\GRETECH
2016-01-30 17:47 - 2016-01-30 17:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM Player
2016-01-30 15:37 - 2016-01-30 15:37 - 00000000 ____D C:\ProgramData\Hnc
2016-01-30 15:36 - 2016-01-31 08:50 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\Hnc
2016-01-30 10:13 - 2016-01-30 10:13 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Virtual PC

 

[Daniel Burkus]

2016-01-30 09:32 - 2016-02-07 15:21 - 00000202 _____ C:\Windows\NeroDigital.ini
2016-01-30 09:30 - 2016-01-30 09:30 - 00023694 _____ C:\Windows\system32\win32k2.sys
2016-01-30 09:27 - 2016-01-30 09:27 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo
2016-01-30 09:27 - 2016-01-30 09:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2016-01-30 09:26 - 2016-02-19 15:23 - 00000000 ____D C:\Users\Daniel M. Burkus
2016-01-30 09:26 - 2016-01-30 09:27 - 00000000 ____D C:\Users\Daniel M. Burkus\Virtual Machines
2016-01-30 09:24 - 2016-01-30 09:31 - 00000000 ____D C:\Users\Daniel Burkus\MP3 Splitter-Joiner
2016-01-30 09:21 - 2016-01-30 09:21 - 00000000 ____D C:\Program Files\Common Files\Ahead
2016-01-30 09:21 - 2005-09-01 11:03 - 00127488 ____N (Ahead Software AG) C:\Windows\system32\Drivers\imagesrv.sys
2016-01-30 09:21 - 2005-09-01 11:03 - 00005888 ____N (Ahead Software AG) C:\Windows\system32\Drivers\imagedrv.sys
2016-01-30 09:21 - 2004-07-26 16:16 - 01568768 ____N (Pegasus Imaging Corp.) C:\Windows\system32\ImagX7.dll
2016-01-30 09:21 - 2004-07-26 16:16 - 00476320 ____N (Pegasus Imaging Corp.) C:\Windows\system32\ImagXpr7.dll
2016-01-30 09:21 - 2004-07-26 16:16 - 00471040 ____N (Pegasus Imaging Corp.) C:\Windows\system32\ImagXRA7.dll
2016-01-30 09:21 - 2004-07-26 16:16 - 00262144 ____N (Pegasus Imaging Corp.) C:\Windows\system32\ImagXR7.dll
2016-01-30 09:21 - 2004-07-09 08:43 - 00364544 ____N (Pegasus Imaging Corp.) C:\Windows\system32\TwnLib4.dll
2016-01-30 09:21 - 2001-07-09 10:50 - 00155648 _____ (Ahead Software Gmbh) C:\Windows\system32\NeroCheck.exe
2016-01-30 09:21 - 2000-06-26 10:45 - 00106496 _____ (Pegasus Software) C:\Windows\system32\TwnLib20.dll
2016-01-30 09:08 - 2016-01-30 09:19 - 00000000 ____D C:\Users\Daniel Burkus\NeroBurning .exe file (with license)
2016-01-30 09:04 - 2016-02-15 14:08 - 00000000 ___RD C:\Users\Daniel Burkus\Virtual Machines
2016-01-30 08:56 - 2016-01-30 09:01 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Virtual PC
2016-01-30 08:56 - 2016-01-30 08:56 - 00000000 ____D C:\Program Files\Windows Virtual PC
2016-01-30 08:52 - 2010-11-20 21:30 - 00296064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcvmm.sys
2016-01-30 08:52 - 2010-11-20 21:30 - 00172416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpchbus.sys
2016-01-30 08:52 - 2010-11-20 21:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\vpchbuspipe.dll
2016-01-30 08:52 - 2010-11-20 21:17 - 02171392 _____ (Microsoft Corporation) C:\Windows\system32\VPCWizard.exe
2016-01-30 08:52 - 2010-11-20 19:50 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcusb.sys
2016-01-30 08:52 - 2010-11-20 19:50 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcnfltr.sys
2016-01-30 08:51 - 2010-11-20 21:17 - 03330560 _____ (Microsoft Corporation) C:\Windows\system32\vpc.exe
2016-01-30 08:51 - 2010-11-20 21:17 - 01260032 _____ (Microsoft Corporation) C:\Windows\system32\VPCSettings.exe
2016-01-30 08:51 - 2010-11-20 19:52 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\VMWindow.exe
2016-01-30 08:51 - 2010-11-20 19:52 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\vmsal.exe
2016-01-30 08:51 - 2010-11-20 19:50 - 00559616 _____ (Microsoft Corporation) C:\Windows\system32\VMCPropertyHandler.dll
2016-01-30 08:34 - 2016-01-30 08:34 - 00002477 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Hangul 2002.lnk
2016-01-30 08:34 - 2016-01-30 08:34 - 00000048 _____ C:\Windows\Hjimesv.ini
2016-01-30 08:34 - 2016-01-30 08:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HAANSOFT
2016-01-30 08:30 - 2016-01-30 08:34 - 00000000 ____D C:\HNC
2016-01-30 08:24 - 2016-01-30 08:27 - 00000016 _____ C:\Windows\system32\hwincfg.ini
2016-01-30 08:07 - 2016-01-30 08:07 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2016-01-30 08:06 - 2016-01-30 08:07 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-01-30 08:06 - 2016-01-30 08:06 - 00000000 ____D C:\Program Files\Adobe
2016-01-30 08:05 - 2016-01-30 08:06 - 00000000 ____D C:\ProgramData\Adobe
2016-01-30 08:04 - 2016-01-30 08:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-01-30 08:04 - 2016-01-30 08:04 - 00000000 ____D C:\Program Files\CCleaner
2016-01-30 07:59 - 2016-01-30 07:59 - 00000000 ____D C:\Program Files\HyperCam 2
2016-01-30 07:57 - 2016-01-31 19:22 - 00001188 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paint.NET.lnk
2016-01-30 07:55 - 2016-02-06 10:09 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Local\Paint.NET
2016-01-30 07:54 - 2016-01-31 19:22 - 00000000 ____D C:\Program Files\Paint.NET
2016-01-30 07:50 - 2016-01-30 07:50 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2016-01-30 07:47 - 2016-01-30 07:51 - 00000000 ____D C:\Program Files\Unlocker
2016-01-30 07:44 - 2016-01-30 07:46 - 00000000 ____D C:\Program Files\VirtualDub
2016-01-30 07:44 - 2016-01-30 07:44 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\JAM Software
2016-01-30 07:44 - 2016-01-30 07:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TreeSize Free
2016-01-30 07:44 - 2016-01-30 07:44 - 00000000 ____D C:\Program Files\JAM Software
2016-01-30 07:39 - 2016-01-30 07:40 - 00000000 ____D C:\Program Files\XP Card Games
2016-01-29 22:14 - 2016-01-29 22:14 - 00000000 ____D C:\Windows\system32\SPReview
2016-01-29 22:12 - 2016-01-29 22:12 - 00000000 ____D C:\Windows\system32\EventProviders
2016-01-29 21:33 - 2016-02-08 21:54 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\MPC-HC
2016-01-29 21:31 - 2016-01-29 21:31 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\WinRAR
2016-01-29 21:31 - 2016-01-29 21:31 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-01-29 21:31 - 2016-01-29 21:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-01-29 21:31 - 2016-01-29 21:31 - 00000000 ____D C:\Program Files\WinRAR
2016-01-29 21:30 - 2016-01-29 21:30 - 00000000 ____D C:\Users\Daniel Burkus\WinRAR
2016-01-29 21:26 - 2016-01-29 21:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2016-01-29 21:26 - 2016-01-29 21:26 - 00000000 ____D C:\Program Files\K-Lite Codec Pack
2016-01-29 21:26 - 2014-04-25 03:00 - 00112640 _____ C:\Windows\system32\ff_vfw.dll
2016-01-29 21:26 - 2013-12-01 21:10 - 00218200 _____ C:\Windows\system32\unrar.dll
2016-01-29 21:26 - 2013-03-18 01:21 - 03649536 _____ (x264vfw project) C:\Windows\system32\x264vfw.dll
2016-01-29 21:26 - 2012-07-21 19:54 - 00122880 _____ (fccHandler) C:\Windows\system32\ac3acm.acm
2016-01-29 21:26 - 2011-12-08 02:32 - 00216064 _____ ( ) C:\Windows\system32\lagarith.dll
2016-01-29 21:26 - 2011-06-24 23:44 - 00243200 _____ C:\Windows\system32\xvidvfw.dll
2016-01-29 21:26 - 2011-06-24 23:28 - 00650752 _____ C:\Windows\system32\xvidcore.dll
2016-01-29 21:25 - 2010-11-20 21:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll
2016-01-29 21:25 - 2010-11-20 21:29 - 00520064 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2016-01-29 21:25 - 2010-11-20 21:29 - 00014208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys
2016-01-29 21:25 - 2010-11-20 21:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2016-01-29 21:25 - 2010-11-20 21:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
2016-01-29 21:25 - 2010-11-20 21:21 - 01086976 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2016-01-29 21:25 - 2010-11-20 21:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2016-01-29 21:25 - 2010-11-20 21:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2016-01-29 21:25 - 2010-11-20 21:21 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll
2016-01-29 21:25 - 2010-11-20 21:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\tssrvlic.dll
2016-01-29 21:25 - 2010-11-20 21:21 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2016-01-29 21:25 - 2010-11-20 21:20 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2016-01-29 21:25 - 2010-11-20 21:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll
2016-01-29 21:25 - 2010-11-20 21:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll
2016-01-29 21:25 - 2010-11-20 21:19 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-01-29 21:25 - 2010-11-20 21:19 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\LSCSHostPolicy.dll
2016-01-29 21:25 - 2010-11-20 21:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2016-01-29 21:25 - 2010-11-20 21:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2016-01-29 21:25 - 2010-11-20 21:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe
2016-01-29 21:25 - 2010-11-20 21:17 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe
2016-01-29 21:25 - 2010-11-20 21:17 - 00080896 _____ C:\Windows\system32\RDVGHelper.exe
2016-01-29 21:25 - 2010-11-20 21:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\PushPrinterConnections.exe
2016-01-29 21:25 - 2010-11-20 19:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2016-01-29 21:25 - 2010-11-20 19:22 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll
2016-01-29 21:25 - 2010-11-05 11:20 - 00146852 _____ C:\Windows\system32\systemsf.ebd
2016-01-29 21:25 - 2010-11-05 10:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2016-01-29 21:25 - 2010-11-05 10:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2016-01-29 21:25 - 2010-11-05 10:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2016-01-29 21:24 - 2010-11-20 21:30 - 00245632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2016-01-29 21:24 - 2010-11-20 21:30 - 00116096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys
2016-01-29 21:24 - 2010-11-20 21:24 - 00271664 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-01-29 21:24 - 2010-11-20 21:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 01063936 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00974336 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\umrdp.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\tspubwmi.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2016-01-29 21:24 - 2010-11-20 21:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2016-01-29 21:24 - 2010-11-20 21:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2016-01-29 21:24 - 2010-11-20 21:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2016-01-29 21:24 - 2010-11-20 21:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2016-01-29 21:24 - 2010-11-20 21:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll
2016-01-29 21:24 - 2010-11-20 21:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2016-01-29 21:24 - 2010-11-20 21:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
2016-01-29 21:24 - 2010-11-20 21:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2016-01-29 21:24 - 2010-11-20 21:20 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL
2016-01-29 21:24 - 2010-11-20 21:19 - 02291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2016-01-29 21:24 - 2010-11-20 21:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2016-01-29 21:24 - 2010-11-20 21:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
2016-01-29 21:24 - 2010-11-20 21:19 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2016-01-29 21:24 - 2010-11-20 21:19 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2016-01-29 21:24 - 2010-11-20 21:19 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-01-29 21:24 - 2010-11-20 21:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll
2016-01-29 21:24 - 2010-11-20 21:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2016-01-29 21:24 - 2010-11-20 21:19 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll
2016-01-29 21:24 - 2010-11-20 21:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2016-01-29 21:24 - 2010-11-20 21:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll
2016-01-29 21:24 - 2010-11-20 21:18 - 00863744 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll
2016-01-29 21:24 - 2010-11-20 21:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2016-01-29 21:24 - 2010-11-20 21:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll
2016-01-29 21:24 - 2010-11-20 21:18 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\cscsvc.dll
2016-01-29 21:24 - 2010-11-20 21:18 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2016-01-29 21:24 - 2010-11-20 21:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-01-29 21:24 - 2010-11-20 21:18 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\appmgr.dll
2016-01-29 21:24 - 2010-11-20 21:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2016-01-29 21:24 - 2010-11-20 21:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2016-01-29 21:24 - 2010-11-20 21:18 - 00252928 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll
2016-01-29 21:24 - 2010-11-20 21:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll
2016-01-29 21:24 - 2010-11-20 21:17 - 03367424 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe
2016-01-29 21:24 - 2010-11-20 21:17 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2016-01-29 21:24 - 2010-11-20 21:17 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2016-01-29 21:24 - 2010-11-20 21:17 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe
2016-01-29 21:24 - 2010-11-20 21:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe
2016-01-29 21:24 - 2010-11-20 21:17 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe
2016-01-29 21:24 - 2010-11-20 21:17 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2016-01-29 21:24 - 2010-11-20 21:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
2016-01-29 21:24 - 2010-11-20 21:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2016-01-29 21:24 - 2010-11-20 21:17 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2016-01-29 21:24 - 2010-11-20 21:17 - 00161280 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2016-01-29 21:24 - 2010-11-20 21:16 - 00776192 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe
2016-01-29 21:24 - 2010-11-20 19:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys
2016-01-29 21:24 - 2010-11-20 17:44 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\csc.sys
2016-01-29 21:24 - 2010-11-20 17:44 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-01-29 21:24 - 2010-11-05 10:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2016-01-29 21:23 - 2016-01-29 21:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2016-01-29 21:23 - 2010-11-20 21:36 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe
2016-01-29 21:23 - 2010-11-20 21:30 - 00175360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbus.sys
2016-01-29 21:23 - 2010-11-20 21:30 - 00173440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2016-01-29 21:23 - 2010-11-20 21:30 - 00160128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2016-01-29 21:23 - 2010-11-20 21:30 - 00153984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-01-29 21:23 - 2010-11-20 21:30 - 00140160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys
2016-01-29 21:23 - 2010-11-20 21:30 - 00130432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys
2016-01-29 21:23 - 2010-11-20 21:30 - 00085376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys
2016-01-29 21:23 - 2010-11-20 21:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
2016-01-29 21:23 - 2010-11-20 21:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys
2016-01-29 21:23 - 2010-11-20 21:30 - 00040704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmstorfl.sys
2016-01-29 21:23 - 2010-11-20 21:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storvsc.sys
2016-01-29 21:23 - 2010-11-20 21:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys
2016-01-29 21:23 - 2010-11-20 21:29 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll
2016-01-29 21:23 - 2010-11-20 21:29 - 00274304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2016-01-29 21:23 - 2010-11-20 21:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll
2016-01-29 21:23 - 2010-11-20 21:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2016-01-29 21:23 - 2010-11-20 21:29 - 00043392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhv.sys
2016-01-29 21:23 - 2010-11-20 21:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00907776 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\scrptadm.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00463360 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\tscfgwmi.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll
2016-01-29 21:23 - 2010-11-20 21:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2016-01-29 21:23 - 2010-11-20 21:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
2016-01-29 21:23 - 2010-11-20 21:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2016-01-29 21:23 - 2010-11-20 21:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
2016-01-29 21:23 - 2010-11-20 21:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2016-01-29 21:23 - 2010-11-20 21:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll
2016-01-29 21:23 - 2010-11-20 21:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2016-01-29 21:23 - 2010-11-20 21:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll
2016-01-29 21:23 - 2010-11-20 21:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll
2016-01-29 21:23 - 2010-11-20 21:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL
2016-01-29 21:23 - 2010-11-20 21:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
2016-01-29 21:23 - 2010-11-20 21:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2016-01-29 21:23 - 2010-11-20 21:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll
2016-01-29 21:23 - 2010-11-20 21:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll
2016-01-29 21:23 - 2010-11-20 21:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-01-29 21:23 - 2010-11-20 21:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
2016-01-29 21:23 - 2010-11-20 21:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll
2016-01-29 21:23 - 2010-11-20 21:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll
2016-01-29 21:23 - 2010-11-20 21:18 - 01400320 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll
2016-01-29 21:23 - 2010-11-20 21:18 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll
2016-01-29 21:23 - 2010-11-20 21:18 - 01040384 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2016-01-29 21:23 - 2010-11-20 21:18 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll
2016-01-29 21:23 - 2010-11-20 21:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
2016-01-29 21:23 - 2010-11-20 21:18 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll
2016-01-29 21:23 - 2010-11-20 21:18 - 00418816 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2016-01-29 21:23 - 2010-11-20 21:18 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll
2016-01-29 21:23 - 2010-11-20 21:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-01-29 21:23 - 2010-11-20 21:18 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2016-01-29 21:23 - 2010-11-20 21:18 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll
2016-01-29 21:23 - 2010-11-20 21:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cscobj.dll
2016-01-29 21:23 - 2010-11-20 21:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2016-01-29 21:23 - 2010-11-20 21:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll
2016-01-29 21:23 - 2010-11-20 21:18 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2016-01-29 21:23 - 2010-11-20 21:17 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-01-29 21:23 - 2010-11-20 21:17 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2016-01-29 21:23 - 2010-11-20 21:17 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe
2016-01-29 21:23 - 2010-11-20 21:17 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe
2016-01-29 21:23 - 2010-11-20 21:17 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2016-01-29 21:23 - 2010-11-20 21:17 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2016-01-29 21:23 - 2010-11-20 21:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2016-01-29 21:23 - 2010-11-20 21:17 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe
2016-01-29 21:23 - 2010-11-20 21:17 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe
2016-01-29 21:23 - 2010-11-20 21:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe
2016-01-29 21:23 - 2010-11-20 21:17 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
2016-01-29 21:23 - 2010-11-20 21:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe
2016-01-29 21:23 - 2010-11-20 21:17 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe
2016-01-29 21:23 - 2010-11-20 21:17 - 00098816 _____ (Microsoft) C:\Windows\system32\Robocopy.exe
2016-01-29 21:23 - 2010-11-20 21:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe
2016-01-29 21:23 - 2010-11-20 21:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe
2016-01-29 21:23 - 2010-11-20 21:16 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
2016-01-29 21:23 - 2010-11-20 21:16 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2016-01-29 21:23 - 2010-11-20 21:16 - 00668160 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2016-01-29 21:23 - 2010-11-20 21:16 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2016-01-29 21:23 - 2010-11-20 21:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2016-01-29 21:23 - 2010-11-20 21:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
2016-01-29 21:23 - 2010-11-20 21:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2016-01-29 21:23 - 2010-11-20 21:16 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax
2016-01-29 21:23 - 2010-11-20 21:16 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe
2016-01-29 21:23 - 2010-11-20 19:24 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpdr.sys
2016-01-29 21:23 - 2010-11-20 18:59 - 00035968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winusb.sys
2016-01-29 21:23 - 2010-11-20 18:14 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\vmicsvc.exe
2016-01-29 21:23 - 2010-11-20 17:42 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2016-01-29 21:23 - 2010-11-20 17:39 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-01-29 21:23 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2016-01-29 21:23 - 2009-07-14 10:16 - 00001536 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2016-01-29 21:23 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2016-01-29 21:22 - 2010-11-20 21:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL
2016-01-29 21:22 - 2010-11-20 21:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL
2016-01-29 21:22 - 2010-11-20 21:29 - 00137088 _____ (Microsoft Corporation) C:\Windows\system32\halacpi.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00577024 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\unattend.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\sppinst.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL
2016-01-29 21:22 - 2010-11-20 21:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\sppuinotify.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wtsapi32.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wiarpc.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\utildll.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\TRAPI.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shgina.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2016-01-29 21:22 - 2010-11-20 21:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\riched32.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll

 

[Daniel Burkus]

2016-01-29 21:22 - 2010-11-20 21:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
2016-01-29 21:22 - 2010-11-20 21:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\olethk32.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\QCLIPROV.DLL
2016-01-29 21:22 - 2010-11-20 21:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\napdsnap.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\perfts.dll
2016-01-29 21:22 - 2010-11-20 21:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
2016-01-29 21:22 - 2010-11-20 21:19 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\msvfw32.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00093696 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\fms.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00082944 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\KMSVC.DLL
2016-01-29 21:22 - 2010-11-20 21:19 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\luainstall.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\FXSMON.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz32.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\msdmo.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\HotStartUserAgent.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll
2016-01-29 21:22 - 2010-11-20 21:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 03727872 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00537600 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00438272 _____ (Microsoft Corporation) C:\Windows\system32\AdmTmpl.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\audiodev.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00205312 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\activeds.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\adsldp.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\CscMig.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\amstream.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\CertPolEng.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dsauth.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll
2016-01-29 21:22 - 2010-11-20 21:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll
2016-01-29 21:22 - 2010-11-20 21:17 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\PresentationSettings.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\iscsicli.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\mobsync.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\cmstp.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\MuiUnattend.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00066048 _____ C:\Windows\system32\PrintBrmUi.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\djoin.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\repair-bde.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\rdpsign.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\takeown.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\unlodctr.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\qwinsta.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netcfg.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\qprocess.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msg.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\quser.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\tskill.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\tsdiscon.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\tscon.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\qappsrv.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\logoff.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shadow.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\rwinsta.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\reset.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\query.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\LogonUI.exe
2016-01-29 21:22 - 2010-11-20 21:17 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2016-01-29 21:22 - 2010-11-20 21:16 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr
2016-01-29 21:22 - 2010-11-20 21:16 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl
2016-01-29 21:22 - 2010-11-20 21:16 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl
2016-01-29 21:22 - 2010-11-20 21:16 - 00516096 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl
2016-01-29 21:22 - 2010-11-20 21:16 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2016-01-29 21:22 - 2010-11-20 21:16 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl
2016-01-29 21:22 - 2010-11-20 21:16 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl
2016-01-29 21:22 - 2010-11-20 21:16 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2016-01-29 21:22 - 2010-11-20 21:16 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr
2016-01-29 21:22 - 2010-11-20 21:16 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2016-01-29 21:22 - 2010-11-20 21:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr
2016-01-29 21:22 - 2010-11-20 21:16 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr
2016-01-29 21:22 - 2010-11-20 21:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe
2016-01-29 21:22 - 2010-11-20 21:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv
2016-01-29 21:22 - 2010-11-20 21:16 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax
2016-01-29 21:22 - 2010-11-20 21:16 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2016-01-29 21:22 - 2010-11-20 21:16 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2016-01-29 21:22 - 2010-11-20 21:16 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\desk.cpl
2016-01-29 21:22 - 2010-11-20 21:16 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfg.exe
2016-01-29 21:22 - 2010-11-20 21:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax
2016-01-29 21:22 - 2010-11-20 21:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax
2016-01-29 21:22 - 2010-11-20 21:16 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax
2016-01-29 21:22 - 2010-11-20 21:16 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax
2016-01-29 21:22 - 2010-11-20 21:16 - 00065024 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe
2016-01-29 21:22 - 2010-11-20 21:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax
2016-01-29 21:22 - 2010-11-20 21:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax
2016-01-29 21:22 - 2010-11-20 21:16 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\g711codc.ax
2016-01-29 21:22 - 2010-11-20 21:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\vbisurf.ax
2016-01-29 21:22 - 2010-11-20 21:16 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\chgport.exe
2016-01-29 21:22 - 2010-11-20 21:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\chglogon.exe
2016-01-29 21:22 - 2010-11-20 21:16 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\chgusr.exe
2016-01-29 21:22 - 2010-11-20 21:16 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\change.exe
2016-01-29 21:22 - 2010-11-20 21:07 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2016-01-29 21:22 - 2010-11-20 21:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\RDPENCDD.dll
2016-01-29 21:22 - 2010-11-20 21:03 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\vmicres.dll
2016-01-29 21:22 - 2010-11-20 21:03 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\vmbusres.dll
2016-01-29 21:22 - 2010-11-20 21:03 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\vmstorfltres.dll
2016-01-29 21:22 - 2010-11-20 21:00 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
2016-01-29 21:22 - 2010-11-20 21:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
2016-01-29 21:22 - 2010-11-20 19:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbrpm.sys
2016-01-29 21:22 - 2010-11-20 19:22 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2016-01-29 21:22 - 2010-11-20 19:07 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys
2016-01-29 21:22 - 2010-11-20 19:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2016-01-29 21:22 - 2010-11-20 19:06 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2016-01-29 21:22 - 2010-11-20 19:06 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndisuio.sys
2016-01-29 21:22 - 2010-11-20 18:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2016-01-29 21:22 - 2010-11-20 18:50 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CompositeBus.sys
2016-01-29 21:22 - 2010-11-20 17:47 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpipmi.sys
2016-01-29 21:22 - 2010-11-20 17:42 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-01-29 21:22 - 2010-11-20 17:39 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdi.sys
2016-01-29 21:22 - 2010-11-20 17:38 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys
2016-01-29 21:22 - 2010-11-20 14:23 - 00053600 _____ C:\Windows\system32\dosx.exe
2016-01-29 21:22 - 2010-11-10 10:45 - 00010429 _____ C:\Windows\system32\ScavengeSpace.xml
2016-01-29 21:22 - 2010-11-05 11:11 - 00312168 _____ (Microsoft Corporation) C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2016-01-29 21:22 - 2009-07-14 10:16 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2016-01-29 21:21 - 2016-01-29 21:21 - 00000000 ____D C:\Program Files\Common Files\PX Storage Engine
2016-01-29 21:21 - 2010-11-20 21:21 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wshirda.dll
2016-01-29 21:21 - 2010-11-20 21:21 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll
2016-01-29 21:21 - 2010-11-20 21:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\rdpcfgex.dll
2016-01-29 21:21 - 2010-11-20 21:20 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\lzhfldr2.dll
2016-01-29 21:21 - 2010-11-20 21:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL
2016-01-29 21:21 - 2010-11-20 21:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll
2016-01-29 21:21 - 2010-11-20 21:07 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll
2016-01-29 21:21 - 2010-11-20 21:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2016-01-29 21:21 - 2010-11-20 21:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\pifmgr.dll
2016-01-29 21:21 - 2010-11-20 21:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDSG.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdlk41a.dll
2016-01-29 21:21 - 2010-11-20 21:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ1.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUQ.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUF.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDSF.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDPO.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDNEPR.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR1.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGKL.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUS.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR1.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTURME.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAJIK.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMON.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAORI.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT1.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBULG.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBLR.DLL
2016-01-29 21:21 - 2010-11-20 21:00 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDGEO.DLL
2016-01-29 21:21 - 2010-11-20 20:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll
2016-01-29 21:21 - 2010-11-20 20:56 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\BlbEvents.dll
2016-01-29 21:21 - 2010-11-20 19:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RDPCDD.sys
2016-01-29 21:21 - 2010-11-20 19:21 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\RDPREFDD.dll
2016-01-29 21:21 - 2010-11-20 19:21 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdpipe.sys
2016-01-29 21:21 - 2010-11-20 19:07 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2016-01-29 21:21 - 2010-11-20 19:00 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys
2016-01-29 21:21 - 2010-11-20 19:00 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umbus.sys
2016-01-29 21:21 - 2010-11-20 19:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys
2016-01-29 21:21 - 2010-11-20 19:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys
2016-01-29 21:21 - 2010-11-20 18:59 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2016-01-29 21:21 - 2010-11-20 18:59 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2016-01-29 21:21 - 2010-11-20 18:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2016-01-29 21:21 - 2010-11-20 18:50 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
2016-01-29 21:21 - 2010-11-20 18:24 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys
2016-01-29 21:21 - 2010-11-20 18:19 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2016-01-29 21:21 - 2010-11-20 18:14 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\VmbusCoinstaller.dll
2016-01-29 21:21 - 2010-11-20 18:14 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\VmdCoinstall.dll
2016-01-29 21:21 - 2010-11-20 18:14 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\IcCoinstall.dll
2016-01-29 21:21 - 2010-11-20 18:14 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\vmictimeprovider.dll
2016-01-29 21:21 - 2010-11-20 18:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VMBusHID.sys
2016-01-29 21:21 - 2010-11-20 18:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\vmbuspipe.dll
2016-01-29 21:21 - 2010-11-20 18:14 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vms3cap.sys
2016-01-29 21:21 - 2010-11-05 11:20 - 00105559 _____ C:\Windows\system32\RacRules.xml
2016-01-29 21:20 - 2016-01-30 08:13 - 00000000 ____D C:\Program Files\Winamp
2016-01-29 21:20 - 2016-01-29 21:28 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\Winamp
2016-01-29 21:20 - 2010-11-20 21:21 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\wbemcomn.dll
2016-01-29 21:20 - 2010-11-20 21:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll
2016-01-29 21:18 - 2016-01-29 21:18 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\NVIDIA
2016-01-29 21:04 - 2016-01-29 21:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3 Toolkit
2016-01-29 21:04 - 2016-01-29 21:04 - 00000000 ____D C:\MP3Toolkit
2016-01-29 21:03 - 2016-01-29 21:03 - 00000000 ____D C:\Program Files\Lame For Audacity
2016-01-29 21:03 - 2016-01-29 21:03 - 00000000 ____D C:\Program Files\FFmpeg for Audacity
2016-01-29 21:02 - 2016-01-29 21:02 - 00000977 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2016-01-29 21:02 - 2016-01-29 21:02 - 00000000 ____D C:\Program Files\Audacity
2016-01-29 20:50 - 2016-01-29 20:50 - 00000000 ____D C:\Program Files\GPLGS
2016-01-29 20:46 - 2016-01-29 20:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPER © - by eRightSoft
2016-01-29 20:46 - 2014-03-07 10:03 - 03109520 __RSH (FFmpeg Project) C:\Windows\system32\avcodec-lav-55.dll
2016-01-29 20:46 - 2014-03-07 10:03 - 00550032 __RSH (FFmpeg Project) C:\Windows\system32\avformat-lav-55.dll
2016-01-29 20:46 - 2014-03-07 10:03 - 00313520 __RSH (1f0.de - Hendrik Leppkes) C:\Windows\system32\HLvideo.dll
2016-01-29 20:46 - 2014-03-07 10:03 - 00203408 __RSH (1f0.de - Hendrik Leppkes) C:\Windows\system32\HLsplit.dll
2016-01-29 20:46 - 2014-03-07 10:03 - 00181392 __RSH (FFmpeg Project) C:\Windows\system32\avutil-lav-52.dll
2016-01-29 20:46 - 2014-03-07 10:03 - 00166544 __RSH (Intel Corp.) C:\Windows\system32\IntelQuickSyncDecoder.dll
2016-01-29 20:46 - 2014-03-07 10:03 - 00122512 __RSH (1f0.de - Hendrik Leppkes) C:\Windows\system32\HLaudio.dll
2016-01-29 20:46 - 2014-03-07 10:03 - 00118416 __RSH (FFmpeg Project) C:\Windows\system32\swscale-lav-2.dll
2016-01-29 20:46 - 2014-03-07 10:03 - 00109712 __RSH C:\Windows\system32\libbluray.dll
2016-01-29 20:46 - 2014-03-07 10:03 - 00098960 __RSH (FFmpeg Project) C:\Windows\system32\avfilter-lav-4.dll
2016-01-29 20:46 - 2014-03-07 10:03 - 00059536 __RSH (FFmpeg Project) C:\Windows\system32\avresample-lav-1.dll
2016-01-29 20:46 - 2014-01-31 15:20 - 00000493 __RSH C:\Windows\system32\LAVFilters.Dependencies.manifest
2016-01-29 20:46 - 2013-01-31 21:37 - 00773968 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll
2016-01-29 20:46 - 2013-01-31 21:37 - 00421200 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll
2016-01-29 20:46 - 2012-10-05 18:54 - 00188416 __RSH C:\Windows\system32\winDCE32.dll
2016-01-29 20:46 - 2012-07-11 22:00 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Olepau32.ax
2016-01-29 20:46 - 2011-06-14 19:05 - 00121344 __RSH C:\Windows\system32\TAKDSDecoder.ax
2016-01-29 20:46 - 2011-02-11 09:26 - 00112128 __RSH C:\Windows\system32\OptimFROG.dll
2016-01-29 20:46 - 2010-01-06 23:00 - 00107520 __RSH C:\Windows\system32\TAKDSDecoder.dll
2016-01-29 20:46 - 2009-08-10 22:00 - 00352768 __RSH C:\Windows\system32\ac3DX.ax
2016-01-29 20:46 - 2005-02-22 16:55 - 00081920 __RSH C:\Windows\system32\aac_parser.ax
2016-01-29 20:46 - 2004-10-10 08:50 - 00278528 _____ (Real Networks, Inc) C:\Windows\system32\pncrt.dll
2016-01-29 20:46 - 2004-07-02 16:33 - 00327749 _____ (RealNetworks, Inc.) C:\Windows\system32\drvc.dll
2016-01-29 20:46 - 2004-04-27 15:03 - 00017408 __RSH (RadLight) C:\Windows\system32\RLOFRDec.ax
2016-01-29 20:46 - 2004-04-05 09:31 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\msvcp71.dll
2016-01-29 20:46 - 2004-04-05 09:31 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\msvcr71.dll
2016-01-29 20:17 - 2015-10-26 16:39 - 00001080 _____ C:\Users\Daniel Burkus\Letter to Alan Palmer's student.txt
2016-01-29 20:17 - 2014-07-30 10:14 - 00080241 _____ C:\Users\Daniel Burkus\Prostaglandin E1 - Wikipedia, the free encyclopedia.htm
2016-01-29 20:17 - 2014-07-29 19:40 - 00000009 _____ C:\Users\Daniel Burkus\Jheanelle.txt
2016-01-29 20:17 - 2014-07-27 18:32 - 00001994 _____ C:\Users\Daniel Burkus\Electronic Transfer Bank Information.txt
2016-01-29 20:17 - 2014-07-03 12:06 - 00000562 _____ C:\Users\Daniel Burkus\The Different Languages of Love.txt
2016-01-29 20:17 - 2014-06-15 06:35 - 00008288 _____ C:\Users\Daniel Burkus\Tumblr Letter.txt
2016-01-29 20:17 - 2014-05-27 22:45 - 00030720 _____ C:\Users\Daniel Burkus\Korean Culture and Chanoyu.hwp
2016-01-29 20:17 - 2014-05-27 22:44 - 00051814 _____ C:\Users\Daniel Burkus\Korean Culture and Chanoyu.pdf
2016-01-29 20:17 - 2014-05-26 18:52 - 00022016 _____ C:\Users\Daniel Burkus\Leo and Scorpio.hwp
2016-01-29 20:17 - 2014-05-14 13:46 - 00276462 _____ C:\Users\Daniel Burkus\SeaTools for DOS.EN.pdf
2016-01-29 20:16 - 2016-01-30 10:36 - 00000000 ____D C:\Users\Daniel Burkus\River Sumida Wallpaper and Profile Photo
2016-01-29 20:16 - 2016-01-29 20:16 - 00000000 ____D C:\Users\Daniel Burkus\Personal History
2016-01-29 20:16 - 2016-01-29 20:16 - 00000000 ____D C:\Users\Daniel Burkus\Nikon D5100 Digital Camera - Copy
2016-01-29 20:16 - 2016-01-29 20:16 - 00000000 ____D C:\Users\Daniel Burkus\Letters
2016-01-29 20:16 - 2016-01-29 20:16 - 00000000 ____D C:\Users\Daniel Burkus\How to Clean a Gourd
2016-01-29 20:16 - 2016-01-29 20:16 - 00000000 ____D C:\Users\Daniel Burkus\Help
2016-01-29 20:16 - 2016-01-29 20:16 - 00000000 ____D C:\Users\Daniel Burkus\GomPlayer
2016-01-29 20:16 - 2016-01-29 20:16 - 00000000 ____D C:\Users\Daniel Burkus\Changing to Google.com
2016-01-29 20:16 - 2016-01-29 20:16 - 00000000 ____D C:\Users\Daniel Burkus\BlueScreen Error
2016-01-29 20:16 - 2016-01-29 20:16 - 00000000 ____D C:\Users\Daniel Burkus\BitLock Keys
2016-01-29 20:16 - 2014-06-13 11:22 - 00000244 _____ C:\Users\Daniel Burkus\Blog Template.txt
2016-01-29 20:16 - 2014-05-02 09:37 - 00120474 _____ C:\Users\Daniel Burkus\Your request has been received.htm
2016-01-29 20:15 - 2016-02-18 21:20 - 00358912 ___SH C:\Users\Daniel Burkus\Thumbs.db
2016-01-29 20:15 - 2016-01-29 20:15 - 00000000 ____D C:\Users\Daniel Burkus\Your request has been received_files
2016-01-29 20:15 - 2015-12-26 19:56 - 00009553 _____ C:\Users\Daniel Burkus\5679835f1600000001eb96fe.jpeg
2016-01-29 20:15 - 2014-10-13 18:28 - 00000071 _____ C:\Users\Daniel Burkus\10 Word Story.txt
2016-01-29 20:15 - 2014-05-07 19:08 - 00000042 _____ C:\Users\Daniel Burkus\Avast Offline License Key.txt
2016-01-29 20:10 - 2016-02-18 08:26 - 00000000 ___RD C:\Users\Daniel Burkus\Desktop\WORK
2016-01-29 20:10 - 2016-01-29 20:10 - 00000000 ____D C:\Users\Daniel Burkus\Windows Update Problems
2016-01-29 20:10 - 2016-01-29 20:10 - 00000000 ____D C:\Users\Daniel Burkus\Waterfall Photos
2016-01-29 19:18 - 2016-01-22 08:53 - 00000117 _____ C:\Users\Daniel Burkus\Desktop\Possible DLL.txt
2016-01-29 19:18 - 2015-10-25 09:26 - 00012884 _____ C:\Users\Daniel Burkus\Desktop\Substituting the Small Unryu-gama for the Ro-gama (Notes).txt
2016-01-29 19:18 - 2015-10-25 09:25 - 00000898 _____ C:\Users\Daniel Burkus\Desktop\Substituting the Small Unryu-gama for the Ro-gama (Text).txt
2016-01-29 19:18 - 2015-09-26 12:43 - 00212976 _____ C:\Users\Daniel Burkus\Desktop\Pygmalion (George Bernard Shaw).txt
2016-01-29 19:18 - 2015-09-25 21:38 - 00520016 _____ C:\Users\Daniel Burkus\Desktop\Perks of Being a Wallflower, The (Stephen Chbosky).pdf
2016-01-29 19:17 - 2016-01-25 08:49 - 00000986 _____ C:\Users\Daniel Burkus\Desktop\Address.txt
2016-01-29 19:16 - 2016-02-15 11:14 - 00000000 ____D C:\Users\Daniel Burkus\Desktop\Chanoyu Related Documents and HWP Files
2016-01-29 19:16 - 2016-02-09 14:24 - 00000000 ____D C:\Users\Daniel Burkus\Desktop\Random (9) - Chabana
2016-01-29 19:16 - 2016-01-31 19:42 - 00000000 ____D C:\Users\Daniel Burkus\Desktop\Reference Files
2016-01-29 19:16 - 2016-01-31 14:56 - 00000000 ____D C:\Users\Daniel Burkus\Desktop\Temae Training Course
2016-01-29 19:16 - 2016-01-29 19:16 - 00000000 ____D C:\Users\Daniel Burkus\Desktop\Random (8) - Yo-kai
2016-01-29 19:16 - 2016-01-29 19:16 - 00000000 ____D C:\Users\Daniel Burkus\Desktop\Random (6) - The Relationship Between Chanoyu and the Hyakujō Shin-ki [百丈清規]
2016-01-29 19:16 - 2016-01-28 14:09 - 00000000 ____D C:\Users\Daniel Burkus\Desktop\Random (5) - Resting the Hishaku on the Futaoki
2016-01-29 19:16 - 2015-07-14 13:20 - 00000000 ____D C:\Users\Daniel Burkus\Desktop\Random (7) - Asa-kai
2016-01-29 19:14 - 2016-01-29 19:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CutePDF
2016-01-29 19:14 - 2016-01-29 19:14 - 00000000 ____D C:\Program Files\Acro Software
2016-01-29 19:14 - 2016-01-22 16:56 - 00089008 _____ C:\Windows\system32\cpwmon2k.dll
2016-01-29 19:10 - 2016-01-29 19:10 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\IrfanView
2016-01-29 19:10 - 2016-01-29 19:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2016-01-29 19:10 - 2016-01-29 19:10 - 00000000 ____D C:\Program Files\IrfanView
2016-01-29 19:03 - 2016-01-29 19:03 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Local\Foxit Reader
2016-01-29 19:01 - 2016-01-29 19:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2016-01-29 19:01 - 2016-01-29 19:03 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\Foxit Software
2016-01-29 19:01 - 2016-01-29 19:01 - 00000000 ____D C:\Users\Public\Foxit Software

 

[Daniel Burkus]

2016-01-29 19:01 - 2016-01-29 19:01 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\Foxit AgentInformation
2016-01-29 19:01 - 2016-01-29 19:01 - 00000000 ____D C:\Program Files\Foxit Software
2016-01-29 18:54 - 2016-01-30 17:46 - 00000000 ____D C:\Program Files\GRETECH
2016-01-29 18:19 - 2016-02-17 01:06 - 00000914 _____ C:\Users\Daniel Burkus\Desktop\Blog Post Template.txt
2016-01-29 18:19 - 2016-01-30 20:48 - 00000000 ____D C:\Users\Daniel Burkus\Desktop\AV Media Files
2016-01-29 18:19 - 2016-01-29 18:19 - 00000000 ____D C:\Users\Daniel Burkus\Desktop\4-7 San-tan San-ro (Ro Sumi-temae)
2016-01-29 18:19 - 2016-01-28 20:21 - 01216301 _____ C:\Users\Daniel Burkus\Desktop\Hunger Games, The (Suzanne Collins).pdf
2016-01-29 18:19 - 2016-01-25 10:52 - 00000049 _____ C:\Users\Daniel Burkus\Desktop\filter.txt
2016-01-29 18:19 - 2016-01-25 07:39 - 00000156 _____ C:\Users\Daniel Burkus\Desktop\Movies to Search and Download.txt
2016-01-29 18:19 - 2015-12-29 21:55 - 00000000 _____ C:\Users\Daniel Burkus\Desktop\movie.txt.txt
2016-01-29 18:19 - 2015-10-25 07:33 - 00000000 ____D C:\Users\Daniel Burkus\Desktop\4-7.3 - Substituting the Small Unryu-gama
2016-01-29 18:19 - 2015-06-15 14:10 - 00000048 _____ C:\Users\Daniel Burkus\Desktop\GoComics URL.txt
2016-01-29 18:06 - 2016-01-29 18:06 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-01-29 18:05 - 2016-01-29 18:05 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-01-29 18:04 - 2016-01-29 18:04 - 00000000 _____ C:\Windows\ativpsrm.bin
2016-01-29 18:01 - 2016-01-29 01:14 - 00000000 ____D C:\Windows\Panther
2016-01-29 17:52 - 2016-01-29 20:46 - 00000000 ____D C:\Program Files\eRightSoft
2016-01-29 17:50 - 2016-01-29 17:51 - 00000000 ____D C:\Program Files\XP Paint
2016-01-29 16:48 - 2016-02-19 14:58 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-01-29 16:48 - 2016-01-29 16:59 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2016-01-29 16:48 - 2016-01-29 16:48 - 00002131 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-01-29 16:48 - 2016-01-29 16:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-01-29 16:48 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean.exe
2016-01-29 16:35 - 2016-01-29 16:30 - 00322760 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-01-29 16:32 - 2016-01-29 16:32 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\AVAST Software
2016-01-29 16:32 - 2016-01-29 16:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-01-29 16:31 - 2016-01-29 16:31 - 00812208 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-01-29 16:31 - 2016-01-29 16:31 - 00449384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2016-01-29 16:31 - 2016-01-29 16:31 - 00081168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-01-29 16:31 - 2016-01-29 16:30 - 00209432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-01-29 16:31 - 2016-01-29 16:30 - 00117712 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-01-29 16:31 - 2016-01-29 16:30 - 00081728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-01-29 16:31 - 2016-01-29 16:30 - 00049776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-01-29 16:31 - 2016-01-29 16:30 - 00024016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-01-29 16:30 - 2016-01-29 16:30 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-01-29 16:29 - 2016-01-29 16:29 - 00000000 ____D C:\Program Files\AVAST Software
2016-01-29 16:28 - 2016-01-29 16:28 - 00000000 ____D C:\ProgramData\AVAST Software
2016-01-29 16:22 - 2016-02-19 20:46 - 00000000 ____D C:\Users\Daniel Burkus\A - Software Shortcuts
2016-01-29 16:22 - 2016-02-19 10:54 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2016-01-29 16:22 - 2016-01-29 16:22 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\SUPERAntiSpyware.com
2016-01-29 16:22 - 2016-01-29 16:22 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2016-01-29 16:22 - 2016-01-29 16:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2016-01-29 16:21 - 2016-02-19 10:17 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-01-29 16:21 - 2016-01-29 16:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-01-29 16:20 - 2016-01-29 16:21 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-01-29 16:20 - 2016-01-29 16:20 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-01-29 16:20 - 2015-10-05 09:50 - 00094936 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-01-29 16:20 - 2015-10-05 09:50 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-01-29 16:20 - 2015-10-05 09:50 - 00023256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-01-29 16:01 - 2016-02-12 13:48 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-01-29 16:01 - 2016-01-29 16:08 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Local\Mozilla
2016-01-29 16:01 - 2016-01-29 16:01 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-01-29 16:01 - 2016-01-29 16:01 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\Mozilla
2016-01-29 15:54 - 2016-01-29 15:54 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_bcmwlhigh6_01009.Wdf
2016-01-29 15:53 - 2016-01-29 15:53 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-01-29 15:53 - 2016-01-29 15:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR WNDA3100v2 Smart Wizard
2016-01-29 15:53 - 2016-01-29 15:53 - 00000000 ____D C:\Program Files\NETGEAR
2016-01-29 15:53 - 2010-02-03 11:20 - 00050704 _____ (CACE Technologies, Inc.) C:\Windows\system32\Drivers\npf.sys
2016-01-29 15:53 - 2009-11-06 08:37 - 00699896 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\bcmwlhigh6.sys
2016-01-29 15:53 - 2009-11-06 08:31 - 03862528 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv.dll
2016-01-29 15:53 - 2009-11-06 08:31 - 03551232 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui.dll
2016-01-29 15:53 - 2009-11-06 08:31 - 01176312 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2016-01-29 15:53 - 2009-11-06 08:31 - 00091376 _____ (Broadcom Corporation) C:\Windows\system32\bcmwlcoi.dll
2016-01-29 15:53 - 2007-01-19 18:20 - 00021728 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\Drivers\SCMNdisP.sys
2016-01-29 05:10 - 2016-01-29 15:44 - 00000351 _____ C:\prefs.js
2016-01-29 05:05 - 2016-01-29 05:05 - 00001089 _____ C:\ProgramData\Microsoft\Windows\Start Menu\KakaoTalk.lnk
2016-01-29 05:05 - 2016-01-29 05:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KakaoTalk
2016-01-29 05:02 - 2016-02-19 18:03 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-01-29 05:02 - 2016-02-19 18:03 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-01-29 05:02 - 2016-01-29 05:02 - 00000000 ____D C:\Windows\system32\Macromed
2016-01-29 05:02 - 2016-01-29 05:02 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\Macromedia
2016-01-29 05:02 - 2016-01-29 05:02 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\Adobe
2016-01-29 04:57 - 2016-01-29 04:57 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\AVG
2016-01-29 04:56 - 2016-01-29 16:55 - 00000000 ____D C:\Program Files\Common Files\AV
2016-01-29 04:56 - 2016-01-29 04:56 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\TuneUp Software
2016-01-29 04:54 - 2016-01-29 17:01 - 00000000 ____D C:\ProgramData\MFAData
2016-01-29 04:54 - 2016-01-29 04:54 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Local\MFAData
2016-01-29 04:53 - 2016-01-31 17:22 - 00064568 _____ C:\Users\Daniel Burkus\AppData\Local\GDIPFONTCACHEV1.DAT
2016-01-29 04:53 - 2016-01-29 18:38 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Local\AvgSetupLog
2016-01-29 04:53 - 2016-01-29 18:38 - 00000000 ____D C:\ProgramData\Avg
2016-01-29 04:53 - 2016-01-29 17:01 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Local\Avg
2016-01-29 02:52 - 2016-01-29 02:52 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Local\NVIDIA
2016-01-29 02:52 - 2016-01-29 02:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-01-29 02:19 - 2016-01-29 02:19 - 00000406 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Messenger Center.lnk
2016-01-29 02:19 - 2016-01-29 02:19 - 00000406 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Player Center.lnk
2016-01-29 02:16 - 2016-02-18 15:33 - 00429336 _____ C:\Windows\system32\perfh012.dat
2016-01-29 02:16 - 2016-02-18 15:33 - 00417690 _____ C:\Windows\system32\perfh011.dat
2016-01-29 02:16 - 2016-02-18 15:33 - 00401934 _____ C:\Windows\system32\prfh0404.dat
2016-01-29 02:16 - 2016-02-18 15:33 - 00384862 _____ C:\Windows\system32\prfh0804.dat
2016-01-29 02:16 - 2016-02-18 15:33 - 00122062 _____ C:\Windows\system32\perfc011.dat
2016-01-29 02:16 - 2016-02-18 15:33 - 00120346 _____ C:\Windows\system32\perfc012.dat
2016-01-29 02:16 - 2016-02-18 15:33 - 00119554 _____ C:\Windows\system32\prfc0804.dat
2016-01-29 02:16 - 2016-02-18 15:33 - 00115052 _____ C:\Windows\system32\prfc0404.dat
2016-01-29 02:16 - 2016-01-29 01:56 - 00141988 _____ C:\Windows\system32\perfi011.dat
2016-01-29 02:16 - 2016-01-29 01:56 - 00031548 _____ C:\Windows\system32\perfd011.dat
2016-01-29 02:16 - 2016-01-29 01:34 - 00117840 _____ C:\Windows\system32\prfi0404.dat
2016-01-29 02:16 - 2016-01-29 01:34 - 00031548 _____ C:\Windows\system32\prfd0404.dat
2016-01-29 02:16 - 2016-01-29 01:30 - 00157694 _____ C:\Windows\system32\perfi012.dat
2016-01-29 02:16 - 2016-01-29 01:30 - 00031548 _____ C:\Windows\system32\perfd012.dat
2016-01-29 02:16 - 2016-01-29 01:25 - 00111310 _____ C:\Windows\system32\prfi0804.dat
2016-01-29 02:16 - 2016-01-29 01:25 - 00031548 _____ C:\Windows\system32\prfd0804.dat
2016-01-29 02:11 - 2016-01-30 05:48 - 00000000 ____D C:\Windows\system32\ja
2016-01-29 02:11 - 2016-01-29 02:11 - 00000000 ____D C:\Windows\system32\0411
2016-01-29 02:10 - 2016-01-29 02:10 - 00000000 ____D C:\Windows\system32\zh-CHT
2016-01-29 02:09 - 2016-01-30 05:48 - 00000000 ____D C:\Windows\system32\zh-CHS
2016-01-29 02:09 - 2016-01-30 05:48 - 00000000 ____D C:\Windows\system32\ko
2016-01-29 02:09 - 2016-01-29 02:11 - 00000000 ____D C:\Windows\system32\XPSViewer
2016-01-29 01:50 - 2016-02-20 05:34 - 00000000 ____D C:\ProgramData\NVIDIA
2016-01-29 01:50 - 2015-02-04 11:06 - 04388040 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-01-29 01:50 - 2015-02-04 11:06 - 03060936 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2016-01-29 01:50 - 2015-02-04 11:05 - 02553032 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-01-29 01:50 - 2015-02-04 11:05 - 00670536 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-01-29 01:50 - 2015-02-04 11:05 - 00374928 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-01-29 01:50 - 2015-02-04 11:05 - 00061584 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-01-29 01:50 - 2015-02-04 08:57 - 00606920 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe
2016-01-29 01:50 - 2015-02-04 01:18 - 04229086 _____ C:\Windows\system32\nvcoproc.bin
2016-01-29 01:49 - 2016-01-29 01:50 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-01-29 01:49 - 2016-01-29 01:50 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-01-29 01:49 - 2015-02-20 00:44 - 00060744 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2016-01-29 01:39 - 2016-02-10 22:30 - 00000000 ____D C:\Windows\system32\MRT
2016-01-29 01:39 - 2016-02-10 22:24 - 144254680 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-01-29 01:18 - 2015-12-02 13:25 - 00247976 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-01-29 01:16 - 2016-02-18 15:33 - 02850866 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-29 01:14 - 2016-02-18 21:29 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Local\VirtualStore
2016-01-29 01:14 - 2016-02-18 21:20 - 00000000 ____D C:\Users\Daniel Burkus
2016-01-29 01:14 - 2016-01-29 01:14 - 00001413 _____ C:\Users\Daniel Burkus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-01-29 01:14 - 2016-01-29 01:14 - 00000020 ___SH C:\Users\Daniel Burkus\ntuser.ini
2016-01-29 01:14 - 2016-01-29 01:14 - 00000000 _SHDL C:\Users\Daniel Burkus\My Documents
2016-01-29 01:14 - 2009-07-14 16:48 - 00000000 ____D C:\Users\Daniel Burkus\AppData\Roaming\Media Center Programs

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-20 05:34 - 2009-07-14 13:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-19 22:49 - 2009-07-14 13:34 - 00013904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-19 22:49 - 2009-07-14 13:34 - 00013904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-19 15:16 - 2009-07-14 11:04 - 00000215 _____ C:\Windows\system.ini
2016-02-18 15:33 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\inf
2016-02-15 14:19 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\system32\NDF
2016-02-11 17:31 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\rescache
2016-02-11 06:16 - 2009-07-14 13:33 - 00309064 _____ C:\Windows\system32\FNTCACHE.DAT
2016-02-11 06:13 - 2009-07-14 16:50 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-01 15:41 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\AppCompat
2016-01-31 19:55 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-01-31 06:01 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\tracing
2016-01-31 06:01 - 2009-07-14 11:37 - 00000000 ____D C:\Program Files\Common Files\System
2016-01-31 06:00 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2016-01-31 00:56 - 2009-07-14 13:46 - 00001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-01-31 00:47 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\system32\Dism
2016-01-31 00:46 - 2009-07-14 13:52 - 00000000 ____D C:\Program Files\Windows Defender
2016-01-30 21:51 - 2009-07-14 11:04 - 00450902 ____R C:\Windows\system32\Drivers\etc\hosts.20160205-070017.backup
2016-01-30 08:30 - 2009-07-14 16:49 - 00000000 ____D C:\Windows\ShellNew
2016-01-30 05:49 - 2009-07-14 16:49 - 00000000 __SHD C:\Windows\BitLockerDiscoveryVolumeContents
2016-01-30 05:49 - 2009-07-14 13:52 - 00000000 ____D C:\Program Files\Windows Sidebar
2016-01-30 05:49 - 2009-07-14 13:52 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-01-30 05:49 - 2009-07-14 13:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-01-30 05:49 - 2009-07-14 13:52 - 00000000 ____D C:\Program Files\DVD Maker
2016-01-30 05:49 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\servicing
2016-01-30 05:48 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\system32\sysprep
2016-01-30 05:48 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\system32\Setup
2016-01-30 05:48 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\system32\oobe
2016-01-30 05:48 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\system32\migwiz
2016-01-30 05:48 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\system32\manifeststore
2016-01-29 22:28 - 2009-07-14 11:05 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2016-01-29 18:05 - 2009-07-14 13:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-01-29 18:03 - 2009-07-14 16:49 - 00000000 ____D C:\Windows\CSC
2016-01-29 18:01 - 2009-07-14 13:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-01-29 15:54 - 2009-07-14 11:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-01-29 05:02 - 2009-07-14 13:52 - 00000000 ____D C:\Windows\Downloaded Program Files
2016-01-29 02:11 - 2009-07-14 13:56 - 00000000 ____D C:\Windows\system32\winrm
2016-01-29 02:11 - 2009-07-14 13:56 - 00000000 ____D C:\Windows\system32\WCN
2016-01-29 02:11 - 2009-07-14 13:56 - 00000000 ____D C:\Windows\system32\slmgr
2016-01-29 02:11 - 2009-07-14 13:56 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2016-01-29 02:11 - 2009-07-14 13:56 - 00000000 ____D C:\Windows\DigitalLocker
2016-01-29 02:11 - 2009-07-14 13:52 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-01-29 02:11 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\system32\MUI
2016-01-29 02:11 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\system32\com
2016-01-29 02:11 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\IME
2016-01-29 01:50 - 2009-07-14 11:37 - 00000000 ____D C:\Windows\Help
2016-01-29 01:14 - 2009-07-14 11:37 - 00000000 __RHD C:\Users\Public\Libraries

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll
[2016-01-31 08:35] - [2009-07-14 10:16] - 0811520 ____A (Microsoft Corporation) 8626F0C30D4E3564FFDD25C90F4426F1

C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-02-18 13:06

==================== End of FRST.txt ============================

 

[Daniel Burkus]

Additional scan result of Farbar Recovery Scan Tool (x86) Version:17-02-2016
Ran by Daniel Burkus (2016-02-20 06:47:48)
Running from C:\Users\Daniel Burkus\A - Software Shortcuts\Malware Scanning Tools
Microsoft Windows 7 Ultimate Service Pack 1 (X86) (2016-01-28 16:14:06)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1259038908-1583320175-680065255-500 - Administrator - Disabled)
Daniel Burkus (S-1-5-21-1259038908-1583320175-680065255-1001 - Administrator - Enabled) => C:\Users\Daniel Burkus
Guest (S-1-5-21-1259038908-1583320175-680065255-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1259038908-1583320175-680065255-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 20 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Reader X (10.1.4) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.4 - Adobe Systems Incorporated)
ADS Scanner 2 (HKLM\...\ADS Scanner 2) (Version: 2 - Pointstone Software, LLC)
Ashampoo Movie Shrink & Burn 2 (HKLM\...\Ashampoo Movie Shrink & Burn 2) (Version: - ashampoo Technology GmbH & Co. KG)
Audacity 2.0.6 (HKLM\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Avast Free Antivirus (HKLM\...\Avast) (Version: 11.1.2245 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.14 - Piriform)
CutePDF Writer 3.1 (HKLM\...\CutePDF Writer Installation) (Version: 3.1 - Acro Software Inc.)
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version: - )
FFmpeg (Windows) for Audacity version 2.2.2 (HKLM\...\{9C7E31E3-017F-434C-AC40-24431A354A1E}_is1) (Version: 2.2.2 - )
Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 7.3.0.118 - Foxit Software Inc.)
GOM Player (HKLM\...\GOM Player) (Version: 2.1.47.5133 - Gretech Corporation)
Hangul 2002 SE (HKLM\...\{CECBC29F-6D3A-4ED6-A686-7220EF9B69CC}) (Version: 5.7.5.3007 - Haansoft)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.41 - Irfan Skiljan)
K-Lite Mega Codec Pack 10.4.5 (HKLM\...\KLiteCodecPack_is1) (Version: 10.4.5 - )
LADSPA_plugins-win-0.4.15 (HKLM\...\LADSPA_plugins-win_is1) (Version: - Audacity Team)
LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version: - )
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Mozilla Firefox 44.0.2 (x86 en-US) (HKLM\...\Mozilla Firefox 44.0.2 (x86 en-US)) (Version: 44.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 44.0.2.5884 - Mozilla)
MP3 Toolkit 1.0.5 (HKLM\...\MP3 Toolkit_is1) (Version: - MP3Toolkit.com)
NETGEAR WNDA3100v2 wireless USB 2.0 adapter (HKLM\...\{3C7839E7-21F4-49E0-B4D5-AC8ED818CCB0}) (Version: 1.03.000 - NETGEAR)
NVIDIA 3D Vision Driver 341.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.44 - NVIDIA Corporation)
NVIDIA Graphics Driver 341.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.44 - NVIDIA Corporation)
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
paint.net (HKLM\...\{DADC2AF6-DC9F-4BCF-BFCE-DCEC16EF507B}) (Version: 4.0.9 - dotPDN LLC)
RogueKiller version 11 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 11 - Adlice Software)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
SUPER © v2015.build.66+Recorder (2015/10/30) version v2015.buil (HKLM\...\{8E2A29F2-96BF-8259-4CA7-4C16C91728A3}_is1) (Version: v2015.build.66+Recorder - eRightSoft)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1212 - SUPERAntiSpyware.com)
TreeSize Free V3.0.1 (HKLM\...\TreeSize Free_is1) (Version: 3.0.1 - JAM Software)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Winamp (HKLM\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16423 - Microsoft Corporation)
WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {56FDB460-B837-44D0-BF48-B27FB59F8914} - System32\Tasks\{8BDA641D-7880-4690-8B38-75DCC0CDA57D} => pcalua.exe -a "C:\Users\Daniel Burkus\Virtual Machines\Install Files\EASY Video Editor (v 2.0)\EASY.exe plus Keygen\Easy Video Editor v2.0.exe" -d "C:\Users\Daniel Burkus\Virtual Machines\Install Files\EASY Video Editor (v 2.0)\EASY.exe plus Keygen"
Task: {7609A09A-65AD-4EA1-9094-339D2D39D483} - System32\Tasks\{8703A1E3-955E-4714-B632-178F571D3F03} => pcalua.exe -a "C:\Users\Daniel Burkus\Virtual Machines\Install Files\NeroBurning .exe file (with Keygen)\Nero-6[1].6.0.18.exe" -d "C:\Users\Daniel Burkus\Virtual Machines\Install Files\NeroBurning .exe file (with Keygen)"
Task: {8F56A2C2-DF1F-439B-BE9F-BBC72A825BE8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-01-29] (AVAST Software)
Task: {B9B5EEE0-7447-4EC2-A8EB-FC19790E5369} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-01-29] (AVAST Software)
Task: {D6C559EA-22F9-4CEF-8675-46685F8EFAE6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-19] (Adobe Systems Incorporated)
Task: {FF55AC69-9AD3-4DC5-8418-69E159A58B32} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-01-16] (Piriform Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2016-01-29 01:50 - 2015-02-04 11:05 - 00106640 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2016-01-29 16:30 - 2016-01-29 16:30 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-01-29 16:30 - 2016-01-29 16:30 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-02-19 19:24 - 2016-02-19 19:24 - 02835968 _____ () C:\Program Files\AVAST Software\Avast\defs\16021900\algo.dll
2016-01-29 16:30 - 2016-01-29 16:30 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-02-20 05:52 - 2016-02-20 05:52 - 02835968 _____ () C:\Program Files\AVAST Software\Avast\defs\16021901\algo.dll
2016-01-30 07:47 - 2010-07-05 06:32 - 00004608 _____ () C:\Program Files\Unlocker\UnlockerHook.dll
2010-07-05 06:32 - 2010-07-05 06:32 - 00010752 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2016-01-29 16:48 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2016-01-29 16:48 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2016-01-29 19:14 - 2016-01-22 16:56 - 00089008 _____ () C:\Windows\System32\cpwmon2k.dll
2016-01-29 16:48 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2016-01-29 16:48 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2016-01-29 16:48 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2016-01-29 16:30 - 2016-01-29 16:30 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-01-30 07:47 - 2010-07-05 04:51 - 00017408 _____ () C:\Program Files\Unlocker\UnlockerAssistant.exe
2016-01-29 15:53 - 2010-08-27 09:32 - 04577760 _____ () C:\Program Files\NETGEAR\WNDA3100v2\WNDA3100v2.exe
2016-01-29 15:53 - 2010-07-08 11:24 - 00258048 _____ () C:\Program Files\NETGEAR\WNDA3100v2\WifiSvcLib.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

There are 7871 more sites.

IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-1259038908-1583320175-680065255-1001\...\123simsen.com -> www.123simsen.com

There are 7869 more sites.


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 11:04 - 2016-02-19 15:16 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1259038908-1583320175-680065255-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Daniel Burkus\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{763C9D5E-ECFE-4D3A-AF81-CC4EBB84CF83}] => (Allow) C:\Program Files\AVG\Av\avgmfapx.exe
FirewallRules: [{B8C3A556-31F9-4237-BA72-805C9C7E79A6}] => (Allow) C:\Program Files\AVG\Av\avgmfapx.exe
FirewallRules: [{E7E15744-6AA7-40EA-87BE-E5FD2DC12D96}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{CCBC611D-95BA-48BA-AC62-BC052843BA17}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{AB035A13-5F60-4C15-AD6D-F3740287AB2A}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [{46A04708-A71C-47A9-B967-D1C29970E410}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [VirtualPC-In-UDP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-UDP-2] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-TCP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [{B36792AD-C22F-4AD5-A86A-58D4966FB2AF}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Restore Points =========================

17-02-2016 20:53:23 Windows Update
19-02-2016 10:56:30 JRT Pre-Junkware Removal
19-02-2016 14:54:07 Before Combofix

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/19/2016 08:30:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Explorer.EXE, version: 6.1.7601.19135, time stamp: 0x56a1ba55
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x02430fef
Faulting process id: 0x7fc
Faulting application start time: 0xExplorer.EXE0
Faulting application path: Explorer.EXE1
Faulting module path: Explorer.EXE2
Report Id: Explorer.EXE3

Error: (02/19/2016 08:30:16 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Explorer.EXE
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 02430FEF

Error: (02/19/2016 08:22:11 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 1112. Message ID: [0x2509].

Error: (02/19/2016 08:12:02 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 4556. Message ID: [0x2509].

Error: (02/19/2016 07:47:32 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 5988. Message ID: [0x2509].

Error: (02/19/2016 06:43:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: )
Description: Failed auto update retrieval of third-party root certificate from: <http://ctldl.windowsupdate.com/msdo...503006091D97D4F5AE39F7CBE7927D7D652D3431.crt> with error: This operation returned because the timeout period expired.
.

Error: (02/19/2016 06:43:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: )
Description: Failed auto update retrieval of third-party root certificate from: <http://ctldl.windowsupdate.com/msdo...503006091D97D4F5AE39F7CBE7927D7D652D3431.crt> with error: This operation returned because the timeout period expired.
.

Error: (02/19/2016 06:40:14 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: )
Description: Failed auto update retrieval of third-party root certificate from: <http://ctldl.windowsupdate.com/msdo...503006091D97D4F5AE39F7CBE7927D7D652D3431.crt> with error: This operation returned because the timeout period expired.
.

Error: (02/19/2016 06:40:14 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: )
Description: Failed auto update retrieval of third-party root certificate from: <http://ctldl.windowsupdate.com/msdo...503006091D97D4F5AE39F7CBE7927D7D652D3431.crt> with error: This operation returned because the timeout period expired.
.

Error: (02/19/2016 03:04:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: PEV.exe, version: 0.0.0.0, time stamp: 0x4e06cfe8
Faulting module name: PEV.exe, version: 0.0.0.0, time stamp: 0x4e06cfe8
Exception code: 0x40000015
Fault offset: 0x0008d1c0
Faulting process id: 0x17e8
Faulting application start time: 0xPEV.exe0
Faulting application path: PEV.exe1
Faulting module path: PEV.exe2
Report Id: PEV.exe3


System errors:
=============
Error: (02/20/2016 05:51:10 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Peer Name Resolution Protocol service terminated with the following error:
%%-2140993535

Error: (02/20/2016 05:51:10 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Peer Networking Grouping service depends on the Peer Name Resolution Protocol service which failed to start because of the following error:
%%-2140993535

Error: (02/20/2016 05:51:10 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Peer Name Resolution Protocol service terminated with the following error:
%%-2140993535

Error: (02/20/2016 05:51:10 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Peer Networking Grouping service depends on the Peer Name Resolution Protocol service which failed to start because of the following error:
%%-2140993535

Error: (02/20/2016 05:51:10 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801

Error: (02/20/2016 05:51:10 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801

Error: (02/20/2016 05:50:59 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Peer Name Resolution Protocol service terminated with the following error:
%%-2140993535

Error: (02/20/2016 05:50:59 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Peer Networking Grouping service depends on the Peer Name Resolution Protocol service which failed to start because of the following error:
%%-2140993535

Error: (02/20/2016 05:50:59 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801

Error: (02/20/2016 05:34:56 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
epp32


==================== Memory info ===========================

Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 3600+
Percentage of memory in use: 44%
Total physical RAM: 3071.3 MB
Available physical RAM: 1718.3 MB
Total Virtual: 6140.93 MB
Available Virtual: 4700.58 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:232.79 GB) (Free:46.06 GB) NTFS
Drive e: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive f: (Data Storage) (Fixed) (Total:232.88 GB) (Free:69.35 GB) NTFS
Drive g: (Data Storage) (Fixed) (Total:232.79 GB) (Free:224.26 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 697FBEB8)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: BCE48856)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: B31CAE79)
Partition 1: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

 

[Broni]

Download attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST(FRST64) and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

 

[Daniel Burkus]

Wait, this is the FRST.txt that was just generated, is that correct? Both it, and the addition, and the just-downloaded fixlist.txt are on the desktop. Is this correct?

 

[Broni]

Yes.

 

[Daniel Burkus]

Fix result of Farbar Recovery Scan Tool (x86) Version:17-02-2016
Ran by Daniel Burkus (2016-02-20 07:20:02) Run:1
Running from C:\Users\Daniel Burkus\A - Software Shortcuts\Malware Scanning Tools
Loaded Profiles: Daniel Burkus (Available Profiles: Daniel Burkus)
Boot Mode: Normal

==============================================

fixlist content:
*****************
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1259038908-1583320175-680065255-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
S3 catchme; \??\C:\Users\DANIEL~1\AppData\Local\Temp\catchme.sys [X]
S3 eapihdrv; \??\C:\Users\DANIEL~1\AppData\Local\Temp\ehdrv.sys [X]
S1 epp32; \??\C:\Users\Daniel Burkus\Desktop\RUN\epp32.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

*****************

"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully.
"HKU\S-1-5-21-1259038908-1583320175-680065255-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully.
catchme => service removed successfully.
eapihdrv => service removed successfully.
epp32 => service removed successfully.
Synth3dVsc => service removed successfully.
tsusbhub => service removed successfully.
VGPU => service removed successfully.

==== End of Fixlog 07:20:02 ====

 

[Broni]

Last scans...

Download Security Check from here or here and save it to your Desktop.

• Double-click SecurityCheck.exe
• Follow the onscreen instructions inside of the black box.
• A Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.
NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.
NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run

Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.
Make sure the following options are checked:

• Internet Services
• Windows Firewall
• System Restore
• Security Center
• Windows Update
• Windows Defender
• Other Services

Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.
Please copy and paste the log to your reply.

Download Temp File Cleaner (TFC)
Alternate download: http://www.itxassociates.com/OT-Tools/TFC.exe

• Double click on TFC.exe to run the program.
• Click on Start button to begin cleaning process.
• TFC will close all running programs, and it may ask you to restart computer.

Download Sophos Free Virus Removal Tool and save it to your desktop.

• Double click the icon and select Run
• Click Next
• Select I accept the terms in this license agreement, then click Next twice
• Click Install
• Click Finish to launch the program
• Once the virus database has been updated click Start Scanning
• If any threats are found click Details, then View log file... (bottom left hand corner)
• Copy and paste the results in your reply
• Close the Notepad document, close the Threat Details screen, then click Start cleanup
• Click Exit to close the program

 

[Daniel Burkus]

Results of screen317's Security Check version 1.014 --- 12/23/15
Windows 7 Service Pack 1 x86 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
avast! Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Spybot - Search & Destroy
SUPERAntiSpyware
CCleaner
Adobe Flash Player 20.0.0.306
Adobe Reader 10.1.4 Adobe Reader out of Date!
Mozilla Firefox (44.0.2)
````````Process Check: objlist.exe by Laurent````````
Spybot Teatimer.exe is disabled!
AVAST Software Avast AvastSvc.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````

 

[Daniel Burkus]

Farbar Service Scanner Version: 27-01-2016
Ran by Daniel Burkus (administrator) on 20-02-2016 at 07:51:34
Running from "C:\Users\Daniel Burkus\Desktop"
Microsoft Windows 7 Ultimate Service Pack 1 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Attempt to access Google IP returned error. Google IP is unreachable
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Policy:
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============

Other Services:
==============


File Check:
========
C:\Windows\system32\nsisvc.dll => File is digitally signed
C:\Windows\system32\Drivers\nsiproxy.sys => File is digitally signed
C:\Windows\system32\dhcpcore.dll => File is digitally signed
C:\Windows\system32\Drivers\afd.sys => File is digitally signed
C:\Windows\system32\Drivers\tdx.sys => File is digitally signed
C:\Windows\system32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\system32\dnsrslvr.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\mpssvc.dll => File is digitally signed
C:\Windows\system32\bfe.dll => File is digitally signed
C:\Windows\system32\Drivers\mpsdrv.sys => File is digitally signed
C:\Windows\system32\SDRSVC.dll => File is digitally signed
C:\Windows\system32\vssvc.exe => File is digitally signed
C:\Windows\system32\wscsvc.dll => File is digitally signed
C:\Windows\system32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\system32\wuaueng.dll => File is digitally signed
C:\Windows\system32\qmgr.dll => File is digitally signed
C:\Windows\system32\es.dll => File is digitally signed
C:\Windows\system32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\system32\ipnathlp.dll => File is digitally signed
C:\Windows\system32\iphlpsvc.dll => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed


**** End of log ****

 

[Daniel Burkus]

Broni, the PC just crashed (shut down abruptly) during the Sophos scan. I am sorry, I was not watching the console (it seemed like it was going to be a very, very, very long scan) so I have no idea where it might have been looking. (Previous crashes with other AV Scans have occurred while it was scanning in the System 32 folder.) What do you suggest I do?

 

[Broni]

Try one more time.
If it happens again it's OK because I doubt the scan will find a lot. Just let me know.
At this point your computer should be clean so the culprit for shutting down must be somewhere else.

 

[Daniel Burkus]

Ok. I am running the scan in Safe Mode (with Networking, obviously). It seems to be working.

 

[Daniel Burkus]

The scan finished faster than expected (since one of the drives is essentially empty, I guess it projected a longer scan time than turned out to be necessary). There were no issues, as you expected. So, thank you for that.

Broni, there remain two residual issues:

1) The PC used to connect to the internet (WiFi) automatically, but now I have to manually do so each time the machine is restarted. Perhaps I should search for the CD and reinstall the driver for Netgear (which is how the PC receives the signal from the Olleh Egg)?

2) The continuing failure of the CPU temperature monitor/special cooling fan (which has a unique auditory signature, hence it is easy to recognize when it is on, and it has not been on since the brief period after I uninstalled the phantom Floppy Disk Drive and Floppy Disk Player for the first time; thereafter uninstalling this non-existent piece of hardware has not resulted in the display lighting up -- it is a video display, actually that shows an animation of fans on or off, together with real-time temperature readings -- and I am supposing that the non-functioning of the CPU's fan is the reason it is overheating and so the PC shutting down, which must be bad for the hard drives). If it is possible, I would like to resolve this issue. (However, I do recognize that it may be impossible to deal with in this way -- communicating via posts.)

And also I have a couple of questions regarding the FRST scans. As I mentioned, I do not surf the web, and I have never visited the porn sites (hey, I told you that I can not see, or I might have been tempted to edit the scans, if that is even possible) that showed up in the scans. Someone else mentioned that something about the first scan (I am assuming this) suggested that my Adobe Flash Video Player was out of date (I thought that I had updated it when the O/S was first installed, but since so much was going on at the time -- hundreds of updates from Microsoft that took half a day to install and so on -- it is possible, given my age, that I "forgot." Anyway, I have since updated this software, but how did this information end up in the scan? And why? (I did not notice any of the news sites or the on line dictionaries that I use in the FRST scan.) Firefox starts playing videos automatically on some Tumblr pages, often with the audio off (and, since I am limited to 20 GB/month by my Olleh Egg contract, I would prefer that it not do so), so I do not know it is happening until it has already happened; while other times all of the videos (which often is all of the content) appear as black and I have no idea what it is until played. Tumblr suggests blogs that I should visit (one of these is where the virus came from, I am inclined to believe) and I have since gone through and removed all of the blogs that did not start by following me. Apparently their algorithm makes suggestions based either on the blogs that follow me, or the blogs that I follow (which is the same thing, since I follow back the blogs that follow my own). I am not running a porn blog (actually I post translations from sixteenth century tea-related writings); but I have no control over who follows me, and so apparently no control over what blogs Tumblr suggests (the obvious solution here being simply to ignore their suggestions entirely). At any rate, my question is how to avoid the cookies or whatever it is that imprints on the FRST scan -- is there some way to prevent this data from being retained for some third party sites (sites that I have not visited)? Annoying, and obviously potentially very dangerous, too.

Thank you very, very much, Broni, for your help in resolving this infection.

-- Daniel M. Burkus

 

[Broni]

You're very welcome

I have never visited the porn sites (...) that showed up in the scans

Those are actually sites automatically blocked by IE. You didn't do anything wrong.

I have since updated this software, but how did this information end up in the scan?

This is on purpose because I need that information so I can tell you if all on your computer is up to date.

Cookies are harmless text files. They're useful since they keep your login data on your computer so you don't have to enter them each time.

As for all other issues...

In this forum, we make sure, your computer is free of malware and your computer is clean
Because the access to malware forum is very limited, your best option is to create new topic about your current issue, at Windows section.
You'll get more attention.

Good luck

 

[Daniel Burkus]

Oh, I see. Then I will try posting in the other forum. Can you tell me how my machine became infected? Any guesses, even?

 

[Broni]

There is really no way to tell.

 

[Daniel Burkus]

I see. Would it be a good idea, then, to run these malware/spyware/av scans periodically (as I said, I routinely run SUPER every other day or so, and Malwarebytes and Spybot once a week: should I add the others to this regimen as well)?

Well, at any rate, thank you very much for all your help, Broni. Hopefully I will not have to bother you again!

-- Daniel M. Burkus

 

[Broni]

You're very welcome

this is my final speech...

Your computer is clean

1. This step will remove all cleaning tools we used, it'll reset restore points (so you won't get reinfected by accidentally using some older restore point) and it'll make some other minor adjustments...
This is a very crucial step so make sure you don't skip it.
Download

DelFix by Xplode to your desktop. Delfix will delete all the used tools and logfiles.

Double-click Delfix.exe to start the tool.
Make sure the following items are checked:

• Activate UAC (optional; some users prefer to keep it off)
• Remove disinfection tools
• Create registry backup
• Purge System Restore
• Reset system settings

Now click "Run" and wait patiently.
Once finished a logfile will be created. You don't have to attach it to your next reply.

2. Make sure Windows Updates are current.

3. If any trojans, rootkits or bootkits were listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

4. Check if your browser plugins are up to date.
Firefox - https://www.mozilla.org/en-US/plugincheck/
other browsers: https://browsercheck.qualys.com/ (click on "Scan without installing plugin" and then on "Scan now")

5. Download, and install WOT (Web OF Trust): http://www.mywot.com/. It'll warn you (in most cases) about dangerous web sites.

6. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

7. Run Temporary File Cleaner (TFC), AdwCleaner and Junkware Removal Tool (JRT) weekly (you need to redownload these tools since they were removed by DelFix).

8. Download and install Secunia Personal Software Inspector (PSI): https://www.techspot.com/downloads/4898-secunia-personal-software-inspector-psi.html. The Secunia PSI is a FREE security tool designed to detect vulnerable and out-dated programs and plug-ins which expose your PC to attacks. Run it weekly.

9. (optional) If you want to keep all your programs up to date, download and install FileHippo Update Checker.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

10. When installing\updating ANY program, make sure you always select "Custom " installation, so you can UN-check any possible "drive-by-install" (foistware), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.

11. Read:
How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html
Simple and easy ways to keep your computer safe and secure on the Internet: http://www.bleepingcomputer.com/tutorials/keep-your-computer-safe-online/
About those Toolbars and Add-ons - Potentially Unwanted Programs (PUPs) which change your browser settings: http://www.bleepingcomputer.com/for...curity-questions-best-practices/#entry3187642

 

[Daniel Burkus]

Thank you very, very much, Broni! Have yourself a good week!

-- Daniel M. Burkus

 

[Broni]

Same to you