Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

svchoste.exe service not svchost.exe


  • This topic is locked This topic is locked
10 replies to this topic

#1 calinoi

calinoi

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:10:43 PM

Posted 22 June 2014 - 03:49 PM

So I have this service for like 2 weeks now,running on the background everytime I open my PC.I don't know where I got this from.I found out that it's in C:\Users\REACTORUL\AppData\Local\Temp and if I delete the .exe , it will reapear after a reboot.

It really scares me as the description of the service is somekind of an asasiatic writing,you can see that in the photo I will attach.

 

Here is the DDS.txt :

 

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17041  BrowserJavaVersion: 10.55.2
Run by REACTORUL at 23:21:46 on 2014-06-22
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.3984.2484 [GMT 3:00]
.
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\igfxCUIService.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\programdata\brilliantinstaller\so_booster\SO_Booster.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Program Files (x86)\iFunbox 2014\iFunBox2014.exe
C:\Users\REACTORUL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Windows\system32\igfxEM.exe
C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Users\REACTORUL\AppData\Local\Temp\svchoste.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
mWinlogon: Userinit = userinit.exe
BHO: SaverExteEnsiOnn: {0AADAF38-5D5B-ECBE-FBBC-55CC9F958C3F} - C:\ProgramData\SaverExteEnsiOnn\KwxsfMqeTz.dll
BHO: save, On: {23C24FE7-5D35-5D74-BC80-E5F4FAA4FA70} - C:\Program Files (x86)\save, On\rc.dll
BHO: SAve on: {25BE78E2-B767-21FA-EBF3-03B43BC625FC} - C:\Program Files (x86)\SAve on\B4k6.dll
BHO: TakETTheCoupon: {4828250D-AD5F-70A4-680B-8273E3E93AF8} - C:\ProgramData\TakETTheCoupon\_jAqFfICC.dll
BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
uRun: [DAEMON Tools Pro Agent] "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
uRun: [uTorrent] "C:\Users\REACTORUL\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
uRun: [9ca71c12e248b24005cc0556c6384115] "C:\Users\REACTORUL\AppData\Local\Temp\svchoste.exe" ..
uRun: [iFunBox Price Watch] C:\Program Files (x86)\iFunbox 2014\iFunBox2014.exe /tray
uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
uRun: [Spotify] "C:\Users\REACTORUL\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
uRun: [Spotify Web Helper] "C:\Users\REACTORUL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
mRun: [USB3MON] "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [9ca71c12e248b24005cc0556c6384115] "C:\Users\REACTORUL\AppData\Local\Temp\svchoste.exe" ..
mRun: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
StartupFolder: C:\Users\REACTORUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\yy.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
TCP: NameServer = 192.168.0.1
TCP: Interfaces\{8C30BC63-BEF1-4431-B0F0-5ED089F58989} : DHCPNameServer = 8.8.8.8
TCP: Interfaces\{9D7021A4-1EBF-4FA1-BC27-6131A2497EA0} : DHCPNameServer = 192.168.0.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
AppInit_DLLs=   c:\progra~2\so_boo~1\assist~1.dll
SSODL: WebCheck - <orphaned>
x64-BHO: SaverExteEnsiOnn: {0AADAF38-5D5B-ECBE-FBBC-55CC9F958C3F} - C:\ProgramData\SaverExteEnsiOnn\KwxsfMqeTz.x64.dll
x64-BHO: save, On: {23C24FE7-5D35-5D74-BC80-E5F4FAA4FA70} - C:\Program Files (x86)\save, On\rc.x64.dll
x64-BHO: SAve on: {25BE78E2-B767-21FA-EBF3-03B43BC625FC} - C:\Program Files (x86)\SAve on\B4k6.x64.dll
x64-BHO: TakETTheCoupon: {4828250D-AD5F-70A4-680B-8273E3E93AF8} - C:\ProgramData\TakETTheCoupon\_jAqFfICC.x64.dll
x64-BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
x64-BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
x64-Run: [NvBackend] "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
x64-Run: [ShadowPlay] C:\Windows\System32\rundll32.exe C:\Windows\System32\nvspcap64.dll,ShadowPlayOnSystemStart
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\REACTORUL\AppData\Roaming\Mozilla\Firefox\Profiles\l7ash05c.default\
FF - plugin: C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll
.
============= SERVICES / DRIVERS ===============
.
R0 iusb3hcs;Intel® USB 3.0 Host Controller Switch Driver;C:\Windows\System32\drivers\iusb3hcs.sys [2014-5-22 20616]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\System32\drivers\dtsoftbus01.sys [2014-5-22 283064]
R2 29850aa3;SO_Sustainer;C:\Windows\System32\rundll32.exe [2009-7-14 45568]
R2 igfxCUIService1.0.0.0;Intel® HD Graphics Control Panel Service;C:\Windows\System32\igfxCUIService.exe [2014-5-21 314696]
R2 NvNetworkService;NVIDIA Network Service;C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-5-22 1631008]
R2 NvStreamSvc;NVIDIA Streamer Service;C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-5-22 21055432]
R2 RzKLService;RzKLService;C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [2014-5-23 105448]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-5-27 413128]
R3 iusb3hub;Intel® USB 3.0 Hub Driver;C:\Windows\System32\drivers\iusb3hub.sys [2014-5-22 366216]
R3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver;C:\Windows\System32\drivers\iusb3xhc.sys [2014-5-22 786056]
R3 NvStreamKms;NvStreamKms;C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-5-22 20256]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);C:\Windows\System32\drivers\nvvad64v.sys [2014-5-22 40392]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2014-5-22 769168]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-4-3 315008]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);C:\Windows\System32\drivers\ssudbus.sys [2014-6-7 110336]
S3 dmvsc;dmvsc;C:\Windows\System32\drivers\dmvsc.sys [2011-4-12 71168]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-6-7 111616]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2014-6-7 19456]
S3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);C:\Windows\System32\drivers\ssudmdm.sys [2014-6-7 206080]
S3 Synth3dVsc;Synth3dVsc;C:\Windows\System32\drivers\Synth3dVsc.sys [2011-4-12 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver;C:\Windows\System32\drivers\terminpt.sys [2014-6-7 29696]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2014-6-7 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2014-6-7 30208]
S3 tsusbhub;tsusbhub;C:\Windows\System32\drivers\tsusbhub.sys [2011-4-12 117248]
S3 TunnelBearMaintenance;TunnelBear Maintenance;C:\Program Files (x86)\TunnelBear\TBear.Maintenance.exe [2014-5-28 25536]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]
.
=============== Created Last 30 ================
.
2014-06-22 06:42:40    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\Spotify
2014-06-22 06:42:31    --------    d-----w-    C:\Users\REACTORUL\AppData\Roaming\Spotify
2014-06-22 06:37:26    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\IsolatedStorage
2014-06-22 06:37:26    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\HockeyCrashes
2014-06-22 06:37:23    --------    d-----w-    C:\Program Files (x86)\TunnelBear
2014-06-22 06:37:02    --------    d-----w-    C:\ProgramData\TakETTheCoupon
2014-06-18 09:53:29    --------    d-----w-    C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-17 18:53:38    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\Skype
2014-06-17 18:53:28    --------    d-----r-    C:\Program Files (x86)\Skype
2014-06-15 20:38:11    179200    ----a-w-    C:\Users\REACTORUL\WindowsUpdate.exe
2014-06-15 10:33:01    --------    d-----w-    C:\ProgramData\SaverExteEnsiOnn
2014-06-12 11:54:37    --------    d-----w-    C:\Users\REACTORUL\AppData\Roaming\.technic
2014-06-12 11:18:40    466456    ----a-w-    C:\Windows\System32\wrap_oal.dll
2014-06-12 11:18:40    122904    ----a-w-    C:\Windows\System32\OpenAL32.dll
2014-06-12 11:18:40    --------    d-----w-    C:\Program Files (x86)\OpenAL
2014-06-12 11:12:58    --------    d-----w-    C:\Users\REACTORUL\AppData\Roaming\.minecraft
2014-06-12 10:55:21    382464    ----a-w-    C:\Windows\SysWow64\OpenAL64.dll
2014-06-12 10:55:21    109080    ----a-w-    C:\Windows\SysWow64\OpenAL32.dll
2014-06-12 07:52:03    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\Apple Computer
2014-06-12 07:51:28    33240    ----a-w-    C:\Windows\System32\drivers\GEARAspiWDM.sys
2014-06-12 07:51:02    --------    d-----w-    C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-12 07:51:02    --------    d-----w-    C:\Program Files\iTunes
2014-06-12 07:51:02    --------    d-----w-    C:\Program Files\iPod
2014-06-12 07:51:02    --------    d-----w-    C:\Program Files (x86)\iTunes
2014-06-12 07:50:40    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\Apple
2014-06-12 07:50:21    --------    d-----w-    C:\Program Files\Bonjour
2014-06-12 07:50:21    --------    d-----w-    C:\Program Files (x86)\Bonjour
2014-06-12 07:49:29    --------    d-----w-    C:\Users\REACTORUL\AppData\Roaming\iFunBox.NXGen
2014-06-12 07:49:26    --------    d-----w-    C:\Program Files (x86)\iFunbox 2014
2014-06-08 16:06:01    2231296    ----a-w-    C:\Windows\System32\ac3filter64.acm
2014-06-08 16:06:00    1679360    ----a-w-    C:\Windows\SysWow64\ac3filter.acm
2014-06-08 16:05:59    --------    d-----w-    C:\Program Files (x86)\AC3Filter
2014-06-08 09:05:16    --------    d-----w-    C:\ProgramData\BrilliantInstaller
2014-06-08 09:05:10    --------    d-----w-    C:\Program Files (x86)\SO_Booster
2014-06-08 09:04:59    --------    d-----w-    C:\ProgramData\save, On
2014-06-08 09:04:58    --------    d-----w-    C:\Program Files (x86)\save, On
2014-06-08 09:04:49    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\Chromatic Browser
2014-06-08 09:04:49    --------    d-----w-    C:\Program Files (x86)\SAve on
2014-06-07 17:09:03    --------    d-----w-    C:\ProgramData\Origin
2014-06-07 11:34:54    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\Blizzard
2014-06-07 09:31:55    --------    d-sh--w-    C:\Users\REACTORUL\IntelGraphicsProfiles
2014-06-07 09:26:12    --------    d-s---w-    C:\Windows\System32\CompatTel
2014-06-07 09:08:16    167424    ----a-w-    C:\Program Files\Windows Media Player\wmplayer.exe
2014-06-07 09:08:16    164864    ----a-w-    C:\Program Files (x86)\Windows Media Player\wmplayer.exe
2014-06-07 09:08:14    12625920    ----a-w-    C:\Windows\System32\wmploc.DLL
2014-06-07 09:08:13    12625408    ----a-w-    C:\Windows\SysWow64\wmploc.DLL
2014-06-07 09:04:19    --------    d-----w-    C:\Program Files (x86)\Common Files\Intel
2014-06-07 07:57:24    44544    ----a-w-    C:\Windows\System32\TsUsbGDCoInstaller.dll
2014-06-07 07:37:17    2560    ----a-w-    C:\Windows\System32\drivers\en-US\wdf01000.sys.mui
2014-06-07 07:28:19    15360    ----a-w-    C:\Windows\System32\RdpGroupPolicyExtension.dll
2014-06-07 07:28:17    30208    ----a-w-    C:\Windows\System32\drivers\TsUsbGD.sys
2014-06-07 07:28:17    29696    ----a-w-    C:\Windows\System32\drivers\terminpt.sys
2014-06-07 07:28:17    19456    ----a-w-    C:\Windows\System32\drivers\rdpvideominiport.sys
2014-06-07 07:28:16    243200    ----a-w-    C:\Windows\System32\rdpudd.dll
2014-06-07 07:28:16    228864    ----a-w-    C:\Windows\System32\rdpendp_winip.dll
2014-06-07 07:28:16    192000    ----a-w-    C:\Windows\SysWow64\rdpendp_winip.dll
2014-06-07 07:28:15    3174912    ----a-w-    C:\Windows\System32\rdpcorets.dll
2014-06-07 07:18:33    294912    ----a-w-    C:\Windows\System32\browserchoice.exe
2014-06-07 07:03:44    --------    d-----w-    C:\Windows\System32\MRT
2014-06-07 06:55:33    87040    ----a-w-    C:\Windows\System32\drivers\WUDFPf.sys
2014-06-07 06:55:33    84992    ----a-w-    C:\Windows\System32\WUDFSvc.dll
2014-06-07 06:55:33    198656    ----a-w-    C:\Windows\System32\drivers\WUDFRd.sys
2014-06-07 06:55:33    194048    ----a-w-    C:\Windows\System32\WUDFPlatform.dll
2014-06-07 06:55:32    744448    ----a-w-    C:\Windows\System32\WUDFx.dll
2014-06-07 06:55:32    45056    ----a-w-    C:\Windows\System32\WUDFCoinstaller.dll
2014-06-07 06:55:32    229888    ----a-w-    C:\Windows\System32\WUDFHost.exe
2014-06-07 06:43:22    23408    ----a-w-    C:\Windows\System32\drivers\fs_rec.sys
2014-06-07 06:43:21    5120    ----a-w-    C:\Windows\SysWow64\wmi.dll
2014-06-07 06:43:21    5120    ----a-w-    C:\Windows\System32\wmi.dll
2014-06-07 06:34:43    658432    ----a-w-    C:\Windows\System32\RMActivate_isv.exe
2014-06-07 06:33:42    878080    ----a-w-    C:\Windows\System32\advapi32.dll
2014-06-07 06:30:33    569344    ----a-w-    C:\Windows\System32\iphlpsvc.dll
2014-06-07 06:29:59    805376    ----a-w-    C:\Windows\SysWow64\cdosys.dll
2014-06-07 06:28:49    70144    ----a-w-    C:\Windows\System32\appinfo.dll
2014-06-07 06:28:49    111448    ----a-w-    C:\Windows\System32\consent.exe
2014-06-07 06:28:38    1887232    ----a-w-    C:\Windows\System32\d3d11.dll
2014-06-07 06:28:37    1505280    ----a-w-    C:\Windows\SysWow64\d3d11.dll
2014-06-07 06:28:36    53248    ----a-w-    C:\Windows\System32\drivers\usbehci.sys
2014-06-07 06:28:35    99840    ----a-w-    C:\Windows\System32\drivers\usbccgp.sys
2014-06-07 06:28:35    7808    ----a-w-    C:\Windows\System32\drivers\usbd.sys
2014-06-07 06:28:35    343040    ----a-w-    C:\Windows\System32\drivers\usbhub.sys
2014-06-07 06:28:35    325120    ----a-w-    C:\Windows\System32\drivers\usbport.sys
2014-06-07 06:28:12    1192448    ----a-w-    C:\Windows\System32\certutil.exe
2014-06-07 06:28:11    903168    ----a-w-    C:\Windows\SysWow64\certutil.exe
2014-06-07 06:28:10    52224    ----a-w-    C:\Windows\System32\certenc.dll
2014-06-07 06:28:10    43008    ----a-w-    C:\Windows\SysWow64\certenc.dll
2014-06-07 06:25:59    376768    ----a-w-    C:\Windows\System32\drivers\netio.sys
2014-06-07 06:24:56    2048    ----a-w-    C:\Windows\SysWow64\tzres.dll
2014-06-07 06:23:55    142336    ----a-w-    C:\Windows\System32\poqexec.exe
2014-06-07 06:22:53    509952    ----a-w-    C:\Windows\System32\ntshrui.dll
2014-06-07 06:21:58    826880    ----a-w-    C:\Windows\SysWow64\rdpcore.dll
2014-06-07 05:58:20    77312    ----a-w-    C:\Windows\System32\packager.dll
2014-06-07 05:58:20    67072    ----a-w-    C:\Windows\SysWow64\packager.dll
2014-06-07 05:52:11    2622464    ----a-w-    C:\Windows\System32\wucltux.dll
2014-06-07 05:52:04    99840    ----a-w-    C:\Windows\System32\wudriver.dll
2014-06-07 05:51:57    36864    ----a-w-    C:\Windows\System32\wuapp.exe
2014-06-07 05:51:57    186752    ----a-w-    C:\Windows\System32\wuwebv.dll
2014-06-07 05:45:39    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\GHISLER
2014-06-07 05:44:51    --------    d-----w-    C:\Users\REACTORUL\AppData\Roaming\GHISLER
2014-06-07 05:44:51    --------    d-----w-    C:\totalcmd
2014-06-06 21:26:36    456536    ----a-w-    C:\Windows\SysWow64\XCEEDZIP.DLL
2014-06-06 21:26:36    1882104    ----a-w-    C:\Windows\SysWow64\Codejock.Controls.v15.0.1.ocx
2014-06-06 21:12:16    708168    ----a-w-    C:\Windows\System32\WinUSBCoInstaller.dll
2014-06-06 21:12:16    1490656    ----a-w-    C:\Windows\System32\WdfCoInstaller01007.dll
2014-06-06 21:12:15    206080    ----a-w-    C:\Windows\System32\drivers\ssudmdm.sys
2014-06-06 21:12:15    110336    ----a-w-    C:\Windows\System32\drivers\ssudbus.sys
2014-06-06 21:08:23    144664    ----a-w-    C:\Windows\SysWow64\secman.dll
2014-06-06 21:08:21    4659712    ----a-w-    C:\Windows\SysWow64\Redemption.dll
2014-06-06 21:07:25    --------    d-----w-    C:\Program Files (x86)\Samsung
2014-06-06 21:06:11    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\Downloaded Installations
2014-06-06 19:38:25    --------    d-----w-    C:\ProgramData\pwd
2014-06-03 10:06:16    --------    d-----w-    C:\Users\REACTORUL\AppData\Roaming\Tropico 5
2014-06-02 19:06:39    --------    d-----w-    C:\Program Files\TeamSpeak
2014-06-02 16:38:36    1715176    ----a-w-    C:\Windows\System32\nvspbridge64.dll
2014-06-02 16:38:36    1291232    ----a-w-    C:\Windows\SysWow64\nvspbridge.dll
2014-06-02 13:59:15    132096    ----a-w-    C:\Users\REACTORUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\yy.exe
2014-05-30 19:01:38    --------    d-----w-    C:\Program Files (x86)\Common Files\PX Storage Engine
2014-05-30 11:12:13    --------    d-----w-    C:\Users\REACTORUL\AppData\Roaming\LolClient
2014-05-29 20:17:25    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\Macromedia
2014-05-29 20:16:30    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\Mozilla
2014-05-27 09:14:49    601432    ----a-w-    C:\Windows\SysWow64\nvStreaming.exe
2014-05-27 08:40:18    31520    ----a-w-    C:\Windows\System32\nvhdap64.dll
2014-05-27 08:40:18    197408    ----a-w-    C:\Windows\System32\drivers\nvhda64v.sys
2014-05-27 08:40:18    1515296    ----a-w-    C:\Windows\System32\nvhdagenco6420103.dll
2014-05-27 08:22:12    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\Packages
2014-05-27 08:22:12    --------    d-----w-    C:\ProgramData\save on
2014-05-27 08:22:05    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\Torch
2014-05-27 08:22:05    --------    d-----w-    C:\ProgramData\663c5736b33815e1
2014-05-27 08:22:04    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\Comodo
2014-05-27 08:21:41    --------    d-----w-    C:\ProgramData\InstallMate
2014-05-27 07:23:43    1889112    ----a-w-    C:\Windows\System32\nvdispco6433788.dll
2014-05-27 07:23:43    1541576    ----a-w-    C:\Windows\System32\nvdispgenco6433788.dll
2014-05-26 20:37:25    --------    d-----w-    C:\ProgramData\Orbit
2014-05-26 17:21:43    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\Ubisoft Game Launcher
2014-05-26 17:19:19    17688    ----a-w-    C:\Windows\System32\x3daudio1_1.dll
2014-05-26 12:58:14    --------    d-----w-    C:\Windows\PCHEALTH
2014-05-26 12:56:25    --------    d-----w-    C:\Program Files (x86)\Microsoft Analysis Services
2014-05-26 12:56:13    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\Microsoft Help
2014-05-26 12:52:20    --------    d-----w-    C:\Users\REACTORUL\AppData\Local\Adobe
2014-05-25 10:22:29    --------    d-----w-    C:\Program Files\SAMSUNG
2014-05-25 10:22:11    --------    d-----w-    C:\ProgramData\Samsung
.
==================== Find3M  ====================
.
2014-06-09 22:47:54    111016    ----a-w-    C:\Windows\System32\WindowsAccessBridge-64.dll
2014-05-29 23:07:51    1122312    ----a-w-    C:\Windows\SysWow64\nvspcap.dll
2014-05-29 23:07:38    1279480    ----a-w-    C:\Windows\System32\nvspcap64.dll
2014-05-22 20:45:05    283064    ----a-w-    C:\Windows\System32\drivers\dtsoftbus01.sys
2014-05-22 20:10:29    692400    ----a-w-    C:\Windows\SysWow64\FlashPlayerApp.exe
2014-05-22 20:10:28    70832    ----a-w-    C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2014-05-22 19:02:43    1199175    ----a-w-    C:\Windows\unins002.exe
2014-05-22 19:02:33    1198049    ----a-w-    C:\Windows\unins001.exe
2014-05-22 18:59:06    709719    ----a-w-    C:\Windows\unins000.exe
2014-05-20 02:44:03    9735256    ----a-w-    C:\Windows\SysWow64\nvcuda.dll
2014-05-20 01:25:42    6769096    ----a-w-    C:\Windows\System32\nvcpl.dll
2014-05-20 01:25:42    3514144    ----a-w-    C:\Windows\System32\nvsvc64.dll
2014-05-20 01:25:39    927520    ----a-w-    C:\Windows\System32\nvvsvc.exe
2014-05-20 01:25:38    62808    ----a-w-    C:\Windows\System32\nvshext.dll
2014-05-20 01:25:38    387528    ----a-w-    C:\Windows\System32\nvmctray.dll
2014-05-14 23:49:42    3774821    ----a-w-    C:\Windows\System32\nvcoproc.bin
2014-05-09 06:14:03    477184    ----a-w-    C:\Windows\System32\aepdu.dll
2014-05-09 06:11:23    424448    ----a-w-    C:\Windows\System32\aeinv.dll
2014-04-14 17:13:43    96168    ----a-w-    C:\Windows\SysWow64\WindowsAccessBridge-32.dll
2014-04-12 02:22:05    95680    ----a-w-    C:\Windows\System32\drivers\ksecdd.sys
2014-04-12 02:22:05    155072    ----a-w-    C:\Windows\System32\drivers\ksecpkg.sys
2014-04-12 02:19:38    29184    ----a-w-    C:\Windows\System32\sspisrv.dll
2014-04-12 02:19:38    136192    ----a-w-    C:\Windows\System32\sspicli.dll
2014-04-12 02:19:37    28160    ----a-w-    C:\Windows\System32\secur32.dll
2014-04-12 02:19:32    1460736    ----a-w-    C:\Windows\System32\lsasrv.dll
2014-04-12 02:19:05    31232    ----a-w-    C:\Windows\System32\lsass.exe
2014-04-12 02:12:06    22016    ----a-w-    C:\Windows\SysWow64\secur32.dll
2014-04-12 02:10:56    96768    ----a-w-    C:\Windows\SysWow64\sspicli.dll
2014-03-31 16:42:44    40392    ----a-w-    C:\Windows\System32\drivers\nvvad64v.sys
2014-03-31 16:42:42    37320    ----a-w-    C:\Windows\System32\nvaudcap64v.dll
2014-03-31 16:42:40    34760    ----a-w-    C:\Windows\SysWow64\nvaudcap32v.dll
2014-03-27 12:45:52    1890080    ----a-w-    C:\Windows\System32\nvdispco6433750.dll
2014-03-27 12:45:52    1539416    ----a-w-    C:\Windows\System32\nvdispgenco6433750.dll
.
============= FINISH: 23:22:09.47 ===============
 

Attached Files



BC AdBot (Login to Remove)

 


#2 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:11:43 PM

Posted 23 June 2014 - 06:45 AM

Hello! Welcome to BleepingComputer Forums! :welcome:
My name is Georgi and and I will be helping you with your computer problems.

Before we begin, please note the following:

  • I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The logs can take some time to research, so please be patient with me.
  • Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
  • Instructions that I give are for your system only!
  • Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
  • Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
  • Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.

 

 

Please download the latest version of Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

Regards,

Georgi


Edited by B-boy/StyLe/, 23 June 2014 - 06:45 AM.

cXfZ4wS.png


#3 calinoi

calinoi
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:10:43 PM

Posted 23 June 2014 - 09:26 AM

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-06-2014
Ran by REACTORUL (administrator) on REACTORUL-PC on 23-06-2014 17:22:43
Running from C:\Users\REACTORUL\Desktop
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\ProgramData\BrilliantInstaller\SO_Booster\SO_Booster.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(BitTorrent Inc.) C:\Users\REACTORUL\AppData\Roaming\uTorrent\uTorrent.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(i-Funbox.com) C:\Program Files (x86)\iFunbox 2014\iFunBox2014.exe
(Spotify Ltd) C:\Users\REACTORUL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(与難ḈЏглт与ӨФおҶωеḒқへうӔӔӨзз亊Ḓемϟώг) C:\Users\REACTORUL\AppData\Local\Temp\svchoste.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1279480 2014-05-30] (NVIDIA Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291128 2013-03-06] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [9ca71c12e248b24005cc0556c6384115] => C:\Users\REACTORUL\AppData\Local\Temp\svchoste.exe [132096 2014-06-15] (与難ḈЏглт与ӨФおҶωеḒқへうӔӔӨзз亊Ḓемϟώг)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310064 2014-05-28] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKU\S-1-5-21-3466372072-2229856283-2406641192-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3125280 2013-10-17] (Disc Soft Ltd)
HKU\S-1-5-21-3466372072-2229856283-2406641192-1000\...\Run: [uTorrent] => C:\Users\REACTORUL\AppData\Roaming\uTorrent\uTorrent.exe [1267536 2014-06-13] (BitTorrent Inc.)
HKU\S-1-5-21-3466372072-2229856283-2406641192-1000\...\Run: [9ca71c12e248b24005cc0556c6384115] => C:\Users\REACTORUL\AppData\Local\Temp\svchoste.exe [132096 2014-06-15] (与難ḈЏглт与ӨФおҶωеḒқへうӔӔӨзз亊Ḓемϟώг) <===== ATTENTION
HKU\S-1-5-21-3466372072-2229856283-2406641192-1000\...\Run: [iFunBox Price Watch] => C:\Program Files (x86)\iFunbox 2014\iFunBox2014.exe [7748096 2013-11-26] (i-Funbox.com)
HKU\S-1-5-21-3466372072-2229856283-2406641192-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-3466372072-2229856283-2406641192-1000\...\Run: [Spotify] => C:\Users\REACTORUL\AppData\Roaming\Spotify\Spotify.exe [6170168 2014-06-22] (Spotify Ltd)
HKU\S-1-5-21-3466372072-2229856283-2406641192-1000\...\Run: [Spotify Web Helper] => C:\Users\REACTORUL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-22] (Spotify Ltd)
HKU\S-1-5-21-3466372072-2229856283-2406641192-1000\...\MountPoints2: {3129ea97-e1e0-11e3-8aef-94de80b5f8db} - F:\install.exe
AppInit_DLLs: C:\PROGRA~2\SO_BOO~1\ASSIST~2.DLL => C:\Program Files (x86)\SO_Booster\Assistant_x64.dll [4210176 2014-06-08] ()
AppInit_DLLs-x32: c:\progra~2\so_boo~1\assist~1.dll => c:\Program Files (x86)\SO_Booster\Assistant.dll [4296192 2014-06-08] ()
Startup: C:\Users\REACTORUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\yy.exe (与難ḈЏглт与ӨФおҶωеḒқへうӔӔӨзз亊Ḓемϟώг)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x25A95874EA75CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
BHO: SaverExteEnsiOnn - {0AADAF38-5D5B-ECBE-FBBC-55CC9F958C3F} - C:\ProgramData\SaverExteEnsiOnn\KwxsfMqeTz.x64.dll ()
BHO: save, On - {23C24FE7-5D35-5D74-BC80-E5F4FAA4FA70} - C:\Program Files (x86)\save, On\rc.x64.dll ()
BHO: SAve on - {25BE78E2-B767-21FA-EBF3-03B43BC625FC} - C:\Program Files (x86)\SAve on\B4k6.x64.dll ()
BHO: TakETTheCoupon - {4828250D-AD5F-70A4-680B-8273E3E93AF8} - C:\ProgramData\TakETTheCoupon\_jAqFfICC.x64.dll ()
BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SaverExteEnsiOnn - {0AADAF38-5D5B-ECBE-FBBC-55CC9F958C3F} - C:\ProgramData\SaverExteEnsiOnn\KwxsfMqeTz.dll ()
BHO-x32: save, On - {23C24FE7-5D35-5D74-BC80-E5F4FAA4FA70} - C:\Program Files (x86)\save, On\rc.dll ()
BHO-x32: SAve on - {25BE78E2-B767-21FA-EBF3-03B43BC625FC} - C:\Program Files (x86)\SAve on\B4k6.dll ()
BHO-x32: TakETTheCoupon - {4828250D-AD5F-70A4-680B-8273E3E93AF8} - C:\ProgramData\TakETTheCoupon\_jAqFfICC.dll ()
BHO-x32: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\REACTORUL\AppData\Roaming\Mozilla\Firefox\Profiles\l7ash05c.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.60.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: TakeTheCCoouapon - C:\Users\REACTORUL\AppData\Roaming\Mozilla\Firefox\Profiles\l7ash05c.default\Extensions\7ayyalzr@u-c.edu [2014-06-22]
FF Extension: SaavEoroExtensioN - C:\Users\REACTORUL\AppData\Roaming\Mozilla\Firefox\Profiles\l7ash05c.default\Extensions\bfdckw@opmhvdl.edu [2014-06-15]
FF Extension: SAve on - C:\Users\REACTORUL\AppData\Roaming\Mozilla\Firefox\Profiles\l7ash05c.default\Extensions\e7njna-uu@frobpyeii.net [2014-06-08]
FF Extension: save, On - C:\Users\REACTORUL\AppData\Roaming\Mozilla\Firefox\Profiles\l7ash05c.default\Extensions\iygju@eiaycqyyg.org [2014-06-08]
FF Extension: MEGA - C:\Users\REACTORUL\AppData\Roaming\Mozilla\Firefox\Profiles\l7ash05c.default\Extensions\firefox@mega.co.nz.xpi [2014-06-09]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (SAve on) - C:\Users\REACTORUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\jicmmoedimfidlkbpkgjifpegcfmegpc [2014-06-08]
CHR Extension: (save, On) - C:\Users\REACTORUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfckdjfpmpemamfpdflomlnhbcdjbeha [2014-06-08]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 29850aa3; c:\Program Files (x86)\SO_Booster\AssistantSvc.dll [174928 2014-06-08] () [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-21] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation)
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
S3 TunnelBearMaintenance; C:\Program Files (x86)\TunnelBear\TBear.Maintenance.exe [25536 2014-05-28] ()

==================== Drivers (Whitelisted) ====================

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-05-22] (Disc Soft Ltd)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-23 17:22 - 2014-06-23 17:23 - 00013305 _____ () C:\Users\REACTORUL\Desktop\FRST.txt
2014-06-23 17:22 - 2014-06-23 17:22 - 00000000 ____D () C:\FRST
2014-06-23 17:11 - 2014-06-23 17:11 - 02082816 _____ (Farbar) C:\Users\REACTORUL\Desktop\FRST64.exe
2014-06-23 16:48 - 2014-06-23 16:48 - 00020483 _____ () C:\Windows\SysWOW64\collectionCache.bnk
2014-06-22 23:22 - 2014-06-22 23:22 - 00024766 _____ () C:\Users\REACTORUL\Desktop\dds.txt
2014-06-22 23:22 - 2014-06-22 23:22 - 00005818 _____ () C:\Users\REACTORUL\Desktop\attach.txt
2014-06-22 23:15 - 2014-06-22 23:15 - 00688992 ____R (Swearware) C:\Users\REACTORUL\Desktop\dds.com
2014-06-22 09:42 - 2014-06-23 16:49 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Spotify
2014-06-22 09:42 - 2014-06-23 16:46 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Spotify
2014-06-22 09:42 - 2014-06-22 09:42 - 00001773 _____ () C:\Users\REACTORUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-22 09:37 - 2014-06-22 11:53 - 00000000 ____D () C:\Program Files (x86)\TunnelBear
2014-06-22 09:37 - 2014-06-22 09:37 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\IsolatedStorage
2014-06-22 09:37 - 2014-06-22 09:37 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\HockeyCrashes
2014-06-22 09:37 - 2014-06-22 09:37 - 00000000 ____D () C:\ProgramData\TakETTheCoupon
2014-06-22 09:37 - 2014-06-22 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TunnelBear
2014-06-20 14:05 - 2014-06-20 14:05 - 00000000 ____D () C:\Users\REACTORUL\Documents\Ghost Games
2014-06-18 12:53 - 2014-06-18 12:53 - 00000000 ____D () C:\ProgramData\Mozilla
2014-06-18 12:53 - 2014-06-18 12:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-18 10:16 - 2014-06-18 10:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-17 21:53 - 2014-06-23 16:49 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Skype
2014-06-17 21:53 - 2014-06-17 21:53 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-17 21:53 - 2014-06-17 21:53 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Skype
2014-06-17 21:53 - 2014-06-17 21:53 - 00000000 ____D () C:\ProgramData\Skype
2014-06-17 21:53 - 2014-06-17 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-06-15 23:38 - 2014-06-15 23:45 - 00179200 _____ (уӧへеьϐ六骨おḈえҼҼлこЉẦоЖうくẦ五頂Ҷ争Ќдм) C:\Users\REACTORUL\WindowsUpdate.exe
2014-06-15 13:33 - 2014-06-15 13:33 - 00000000 ____D () C:\ProgramData\SaverExteEnsiOnn
2014-06-12 14:54 - 2014-06-12 14:58 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\.technic
2014-06-12 14:18 - 2014-06-12 14:18 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-06-12 14:18 - 2014-06-12 14:18 - 00122904 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-06-12 14:18 - 2014-06-12 14:18 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-06-12 14:12 - 2014-06-20 13:53 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\.minecraft
2014-06-12 13:55 - 2014-06-12 14:18 - 00109080 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-06-12 13:55 - 2014-06-12 13:40 - 00382464 _____ () C:\Windows\SysWOW64\OpenAL64.dll
2014-06-12 10:52 - 2014-06-12 10:54 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Apple Computer
2014-06-12 10:52 - 2014-06-12 10:52 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Apple Computer
2014-06-12 10:52 - 2014-06-12 10:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-06-12 10:51 - 2014-06-12 10:51 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-06-12 10:51 - 2014-06-12 10:51 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-12 10:51 - 2014-06-12 10:51 - 00000000 ____D () C:\Program Files\iTunes
2014-06-12 10:51 - 2014-06-12 10:51 - 00000000 ____D () C:\Program Files\iPod
2014-06-12 10:51 - 2014-06-12 10:51 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-12 10:51 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-06-12 10:50 - 2014-06-12 10:50 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-06-12 10:50 - 2014-06-12 10:50 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Apple
2014-06-12 10:50 - 2014-06-12 10:50 - 00000000 ____D () C:\ProgramData\Apple
2014-06-12 10:50 - 2014-06-12 10:50 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-06-12 10:50 - 2014-06-12 10:50 - 00000000 ____D () C:\Program Files\Bonjour
2014-06-12 10:50 - 2014-06-12 10:50 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-06-12 10:50 - 2014-06-12 10:50 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-06-12 10:49 - 2014-06-12 10:49 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\iFunBox.NXGen
2014-06-12 10:49 - 2014-06-12 10:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iFunBox 2014
2014-06-12 10:49 - 2014-06-12 10:49 - 00000000 ____D () C:\Program Files (x86)\iFunbox 2014
2014-06-10 01:48 - 2014-06-10 01:47 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-06-10 01:48 - 2014-06-10 01:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-06-10 01:48 - 2014-06-10 01:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-06-09 18:43 - 2014-06-09 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2014-06-08 19:06 - 2014-06-08 19:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AC3Filter
2014-06-08 19:06 - 2013-04-05 21:27 - 02231296 _____ () C:\Windows\system32\ac3filter64.acm
2014-06-08 19:06 - 2013-04-05 21:26 - 01679360 _____ () C:\Windows\SysWOW64\ac3filter.acm
2014-06-08 19:05 - 2014-06-08 19:06 - 00000000 ____D () C:\Program Files (x86)\AC3Filter
2014-06-08 12:05 - 2014-06-23 16:45 - 00000488 ____H () C:\Windows\Tasks\SO_Booster-S-017483117.job
2014-06-08 12:05 - 2014-06-08 12:05 - 00002734 _____ () C:\Windows\System32\Tasks\SO_Booster-S-017483117
2014-06-08 12:05 - 2014-06-08 12:05 - 00000000 ____D () C:\Program Files (x86)\SO_Booster
2014-06-08 12:04 - 2014-06-08 12:04 - 00000394 __RSH () C:\ProgramData\ntuser.pol
2014-06-08 12:04 - 2014-06-08 12:04 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Chromatic Browser
2014-06-08 12:04 - 2014-06-08 12:04 - 00000000 ____D () C:\Users\Guest\AppData\Local\Chromatic Browser
2014-06-08 12:04 - 2014-06-08 12:04 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser
2014-06-08 12:04 - 2014-06-08 12:04 - 00000000 ____D () C:\ProgramData\save, On
2014-06-08 12:04 - 2014-06-08 12:04 - 00000000 ____D () C:\Program Files (x86)\save, On
2014-06-08 12:04 - 2014-06-08 12:04 - 00000000 ____D () C:\Program Files (x86)\SAve on
2014-06-07 20:09 - 2014-06-07 20:09 - 00000000 ____D () C:\ProgramData\Origin
2014-06-07 20:01 - 2014-06-07 20:01 - 00000000 ____D () C:\Users\REACTORUL\Documents\SimCity
2014-06-07 19:59 - 2014-06-07 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razor1911
2014-06-07 14:34 - 2014-06-07 14:34 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Blizzard
2014-06-07 12:26 - 2014-06-07 12:26 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-07 12:08 - 2013-05-10 08:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-06-07 12:08 - 2013-05-10 08:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-06-07 12:08 - 2013-05-10 07:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-06-07 12:08 - 2013-05-10 07:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-06-07 11:31 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-06-07 11:22 - 2014-06-07 11:22 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-07 11:22 - 2014-06-07 11:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-07 11:22 - 2014-06-07 11:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-07 11:22 - 2014-06-07 11:22 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-07 11:22 - 2014-06-07 11:22 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-06-07 11:22 - 2014-06-07 11:22 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-06-07 11:22 - 2014-06-07 11:22 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-06-07 11:22 - 2014-06-07 11:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-06-07 11:22 - 2014-06-07 11:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-06-07 11:22 - 2014-06-07 11:22 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-06-07 11:22 - 2014-06-07 11:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-07 11:12 - 2014-06-07 11:31 - 00012198 _____ () C:\Windows\IE11_main.log
2014-06-07 10:57 - 2013-10-02 05:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-06-07 10:57 - 2013-10-02 05:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-06-07 10:57 - 2013-10-02 05:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-06-07 10:57 - 2013-10-02 04:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-06-07 10:57 - 2013-10-02 04:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-06-07 10:57 - 2013-10-02 04:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-06-07 10:57 - 2013-10-02 04:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-06-07 10:57 - 2013-10-02 03:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-06-07 10:57 - 2013-10-02 03:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-06-07 10:57 - 2013-10-02 03:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-06-07 10:57 - 2013-10-02 03:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-06-07 10:57 - 2013-10-02 03:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-06-07 10:57 - 2013-10-02 02:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-07 10:57 - 2013-10-02 02:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-06-07 10:57 - 2013-10-02 02:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-06-07 10:57 - 2013-10-02 01:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-06-07 10:57 - 2013-10-01 23:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-06-07 10:57 - 2013-10-01 23:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-06-07 10:28 - 2012-08-23 17:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-06-07 10:28 - 2012-08-23 17:12 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\terminpt.sys
2014-06-07 10:28 - 2012-08-23 17:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-06-07 10:28 - 2012-08-23 17:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2014-06-07 10:28 - 2012-08-23 16:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-07 10:28 - 2012-08-23 14:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-06-07 10:28 - 2012-08-23 13:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-06-07 10:28 - 2012-08-23 12:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-07 10:18 - 2010-02-23 11:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2014-06-07 10:03 - 2014-06-07 10:05 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-07 10:03 - 2014-05-04 17:12 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-07 09:55 - 2012-07-26 06:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-06-07 09:55 - 2012-07-26 06:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-06-07 09:55 - 2012-07-26 06:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-06-07 09:55 - 2012-07-26 06:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-06-07 09:55 - 2012-07-26 06:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-06-07 09:55 - 2012-07-26 05:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-06-07 09:55 - 2012-07-26 05:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-06-07 09:55 - 2012-06-02 17:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2014-06-07 09:44 - 2013-01-14 00:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-07 09:44 - 2013-01-14 00:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-06-07 09:44 - 2013-01-14 00:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-06-07 09:44 - 2013-01-14 00:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-06-07 09:44 - 2013-01-14 00:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-06-07 09:44 - 2013-01-14 00:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-06-07 09:44 - 2013-01-14 00:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-06-07 09:44 - 2013-01-14 00:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-06-07 09:44 - 2013-01-14 00:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-06-07 09:44 - 2013-01-13 23:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-06-07 09:44 - 2013-01-13 23:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-07 09:44 - 2013-01-13 23:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-06-07 09:44 - 2013-01-13 23:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-06-07 09:44 - 2013-01-13 23:31 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-06-07 09:44 - 2013-01-13 23:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-06-07 09:44 - 2013-01-13 23:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-06-07 09:44 - 2013-01-13 23:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-06-07 09:44 - 2013-01-13 23:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-06-07 09:44 - 2013-01-13 23:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-06-07 09:44 - 2013-01-13 23:22 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-06-07 09:44 - 2013-01-13 23:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-06-07 09:44 - 2013-01-13 23:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-06-07 09:44 - 2013-01-13 23:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-06-07 09:44 - 2013-01-13 22:59 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-06-07 09:44 - 2013-01-13 22:58 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-06-07 09:44 - 2013-01-13 22:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-06-07 09:44 - 2013-01-13 22:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-06-07 09:44 - 2013-01-13 22:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-06-07 09:44 - 2013-01-13 22:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-06-07 09:44 - 2013-01-13 22:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-06-07 09:44 - 2013-01-13 22:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-06-07 09:44 - 2013-01-13 22:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-06-07 09:44 - 2013-01-13 22:43 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-06-07 09:44 - 2013-01-13 22:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-06-07 09:44 - 2013-01-13 22:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-06-07 09:44 - 2013-01-13 22:37 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-06-07 09:44 - 2013-01-13 22:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-06-07 09:44 - 2013-01-13 22:24 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-06-07 09:44 - 2013-01-13 22:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-06-07 09:44 - 2013-01-13 22:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-06-07 09:44 - 2013-01-13 22:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-06-07 09:44 - 2013-01-13 22:15 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-06-07 09:44 - 2013-01-13 22:10 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-06-07 09:44 - 2013-01-13 22:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-06-07 09:44 - 2013-01-13 21:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-06-07 09:44 - 2013-01-13 21:32 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-06-07 09:44 - 2013-01-13 21:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-06-07 09:44 - 2013-01-13 20:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-06-07 09:44 - 2013-01-13 20:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-06-07 09:44 - 2013-01-04 09:11 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-06-07 09:44 - 2013-01-04 09:11 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-06-07 09:43 - 2012-03-01 09:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-06-07 09:43 - 2012-03-01 09:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-06-07 09:43 - 2012-03-01 08:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2014-06-07 09:37 - 2014-04-12 05:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-06-07 09:37 - 2014-04-12 05:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-06-07 09:37 - 2014-04-12 05:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-06-07 09:37 - 2014-04-12 05:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-06-07 09:37 - 2014-04-12 05:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-06-07 09:37 - 2014-04-12 05:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-06-07 09:37 - 2014-04-12 05:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-06-07 09:37 - 2014-04-12 05:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-06-07 09:37 - 2014-04-12 05:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-06-07 09:37 - 2014-03-04 12:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-06-07 09:37 - 2014-03-04 12:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-06-07 09:37 - 2014-03-04 12:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-06-07 09:37 - 2014-03-04 12:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-06-07 09:37 - 2014-03-04 12:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-06-07 09:37 - 2014-03-04 12:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-06-07 09:37 - 2014-03-04 12:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-06-07 09:37 - 2014-03-04 12:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-06-07 09:37 - 2014-03-04 12:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-06-07 09:37 - 2014-03-04 12:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-06-07 09:37 - 2014-03-04 12:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-06-07 09:37 - 2014-03-04 12:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-06-07 09:37 - 2014-03-04 12:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-06-07 09:37 - 2014-03-04 12:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-06-07 09:37 - 2014-03-04 12:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-06-07 09:37 - 2014-03-04 12:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-06-07 09:37 - 2014-03-04 12:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-06-07 09:37 - 2014-03-04 12:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-06-07 09:37 - 2014-03-04 12:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-06-07 09:37 - 2014-03-04 12:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-06-07 09:37 - 2014-03-04 12:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-06-07 09:37 - 2014-03-04 12:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-06-07 09:37 - 2014-03-04 12:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-06-07 09:37 - 2014-03-04 12:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-06-07 09:37 - 2014-03-04 12:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-06-07 09:37 - 2014-03-04 12:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-06-07 09:37 - 2014-03-04 12:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-06-07 09:37 - 2014-03-04 12:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-06-07 09:37 - 2014-03-04 12:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-06-07 09:37 - 2014-03-04 12:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-06-07 09:37 - 2014-03-04 12:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-06-07 09:37 - 2014-03-04 12:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-06-07 09:37 - 2014-03-04 12:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-06-07 09:37 - 2014-03-04 12:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-06-07 09:37 - 2014-03-04 12:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-06-07 09:37 - 2014-03-04 12:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-06-07 09:37 - 2014-03-04 12:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-06-07 09:37 - 2014-03-04 12:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-06-07 09:37 - 2014-03-04 12:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-06-07 09:37 - 2014-03-04 12:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-06-07 09:37 - 2014-03-04 12:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-06-07 09:37 - 2014-03-04 11:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-06-07 09:37 - 2014-03-04 11:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-06-07 09:37 - 2013-09-25 05:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-06-07 09:37 - 2013-09-25 04:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-06-07 09:37 - 2013-08-02 05:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 05:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 04:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-06-07 09:37 - 2013-08-02 03:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-06-07 09:37 - 2013-08-02 03:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 03:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 03:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-06-07 09:37 - 2013-08-02 03:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2014-06-07 09:37 - 2013-07-04 15:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-06-07 09:34 - 2013-12-04 05:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-06-07 09:34 - 2013-12-04 05:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-06-07 09:34 - 2013-12-04 05:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-06-07 09:34 - 2013-12-04 05:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-06-07 09:34 - 2013-12-04 05:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-06-07 09:34 - 2013-12-04 05:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-06-07 09:34 - 2013-12-04 05:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-06-07 09:34 - 2013-12-04 05:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-06-07 09:34 - 2013-12-04 05:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-06-07 09:34 - 2013-12-04 05:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-06-07 09:34 - 2013-12-04 05:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-06-07 09:34 - 2013-12-04 05:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-06-07 09:34 - 2013-12-04 05:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-06-07 09:34 - 2013-12-04 05:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-06-07 09:34 - 2013-12-04 04:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-06-07 09:34 - 2013-12-04 04:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-06-07 09:34 - 2013-12-04 04:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-06-07 09:34 - 2013-12-04 04:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-06-07 09:33 - 2014-05-09 09:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-07 09:33 - 2014-05-09 09:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-07 09:33 - 2013-08-29 05:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-06-07 09:33 - 2013-08-29 05:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-06-07 09:33 - 2013-08-29 05:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-06-07 09:33 - 2013-08-29 04:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-06-07 09:33 - 2013-08-29 04:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-06-07 09:33 - 2013-08-29 04:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-06-07 09:33 - 2012-12-07 16:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-06-07 09:33 - 2012-12-07 16:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-06-07 09:33 - 2012-12-07 15:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-06-07 09:33 - 2012-12-07 15:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2014-06-07 09:33 - 2012-12-07 14:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2014-06-07 09:33 - 2012-12-07 14:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2014-06-07 09:33 - 2012-12-07 14:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2014-06-07 09:33 - 2012-12-07 14:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2014-06-07 09:33 - 2012-12-07 14:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2014-06-07 09:33 - 2012-12-07 14:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2014-06-07 09:33 - 2012-12-07 14:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2014-06-07 09:33 - 2012-12-07 14:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2014-06-07 09:33 - 2012-12-07 14:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2014-06-07 09:33 - 2012-12-07 14:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2014-06-07 09:33 - 2012-12-07 14:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2014-06-07 09:33 - 2012-12-07 14:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2014-06-07 09:33 - 2012-12-07 14:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2014-06-07 09:33 - 2012-12-07 14:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2014-06-07 09:33 - 2012-12-07 13:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2014-06-07 09:33 - 2012-12-07 13:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2014-06-07 09:33 - 2012-12-07 13:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2014-06-07 09:33 - 2012-12-07 13:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2014-06-07 09:33 - 2012-12-07 13:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2014-06-07 09:33 - 2012-12-07 13:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2014-06-07 09:33 - 2012-12-07 13:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2014-06-07 09:33 - 2012-12-07 13:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2014-06-07 09:33 - 2012-12-07 13:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2014-06-07 09:33 - 2012-12-07 13:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2014-06-07 09:33 - 2012-12-07 13:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2014-06-07 09:33 - 2012-12-07 13:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2014-06-07 09:33 - 2012-12-07 13:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2014-06-07 09:33 - 2012-12-07 13:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2014-06-07 09:30 - 2012-10-03 20:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2014-06-07 09:30 - 2012-10-03 20:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2014-06-07 09:30 - 2012-10-03 20:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2014-06-07 09:30 - 2012-10-03 20:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2014-06-07 09:30 - 2012-10-03 20:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2014-06-07 09:30 - 2012-10-03 20:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-06-07 09:30 - 2012-10-03 19:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2014-06-07 09:30 - 2012-10-03 19:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2014-06-07 09:30 - 2012-10-03 19:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2014-06-07 09:30 - 2012-10-03 19:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-06-07 09:30 - 2012-01-13 10:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2014-06-07 09:29 - 2013-10-05 23:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-06-07 09:29 - 2013-10-05 22:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-06-07 09:29 - 2013-09-25 05:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-06-07 09:29 - 2013-09-25 04:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-06-07 09:29 - 2013-07-09 08:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-06-07 09:29 - 2013-07-09 08:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-06-07 09:29 - 2013-07-09 07:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-06-07 09:29 - 2013-07-09 07:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2014-06-07 09:29 - 2012-08-22 00:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2014-06-07 09:29 - 2012-06-06 09:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2014-06-07 09:29 - 2012-06-06 08:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2014-06-07 09:28 - 2013-11-27 04:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-06-07 09:28 - 2013-11-27 04:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-06-07 09:28 - 2013-11-27 04:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-06-07 09:28 - 2013-11-27 04:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-06-07 09:28 - 2013-11-27 04:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-06-07 09:28 - 2013-05-13 08:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2014-06-07 09:28 - 2013-05-13 06:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-06-07 09:28 - 2013-05-13 06:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2014-06-07 09:28 - 2013-05-13 06:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2014-06-07 09:28 - 2013-04-26 02:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-06-07 09:28 - 2013-04-01 01:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-06-07 09:28 - 2013-02-27 09:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-06-07 09:28 - 2013-02-27 08:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-06-07 09:27 - 2011-11-17 09:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-06-07 09:27 - 2011-11-17 08:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2014-06-07 09:27 - 2011-05-04 08:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2014-06-07 09:27 - 2011-05-04 08:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2014-06-07 09:27 - 2011-05-04 08:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2014-06-07 09:27 - 2011-05-04 08:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2014-06-07 09:27 - 2011-05-04 08:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2014-06-07 09:27 - 2011-05-04 08:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2014-06-07 09:27 - 2011-05-04 08:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2014-06-07 09:27 - 2011-05-04 08:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2014-06-07 09:27 - 2011-05-04 08:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2014-06-07 09:27 - 2011-05-04 07:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2014-06-07 09:27 - 2011-05-04 07:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2014-06-07 09:27 - 2011-05-04 07:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2014-06-07 09:27 - 2011-05-04 07:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2014-06-07 09:27 - 2011-05-04 07:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2014-06-07 09:27 - 2011-05-04 07:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2014-06-07 09:27 - 2011-05-04 07:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2014-06-07 09:27 - 2011-05-04 07:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2014-06-07 09:27 - 2011-05-04 07:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2014-06-07 09:27 - 2010-12-23 13:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-06-07 09:27 - 2010-12-23 13:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-06-07 09:27 - 2010-12-23 13:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2014-06-07 09:27 - 2010-12-23 08:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2014-06-07 09:27 - 2010-12-23 08:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2014-06-07 09:27 - 2010-12-23 08:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2014-06-07 09:26 - 2014-03-25 05:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-06-07 09:26 - 2014-03-25 05:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-06-07 09:26 - 2014-02-04 05:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-06-07 09:26 - 2014-02-04 05:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-06-07 09:26 - 2014-02-04 05:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-06-07 09:26 - 2014-02-04 05:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-06-07 09:26 - 2014-02-04 05:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-06-07 09:26 - 2013-09-08 05:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-07 09:26 - 2013-09-08 05:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-06-07 09:26 - 2013-09-08 05:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-06-07 09:26 - 2013-08-05 05:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2014-06-07 09:26 - 2013-07-26 05:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-06-07 09:26 - 2013-07-26 04:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2014-06-07 09:26 - 2013-07-09 08:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-06-07 09:26 - 2013-07-09 07:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-06-07 09:26 - 2012-10-09 21:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2014-06-07 09:26 - 2012-10-09 21:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2014-06-07 09:26 - 2012-10-09 20:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2014-06-07 09:26 - 2012-10-09 20:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2014-06-07 09:26 - 2011-10-26 08:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-06-07 09:26 - 2011-10-26 07:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-06-07 09:25 - 2013-12-06 05:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-07 09:25 - 2013-12-06 05:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-07 09:25 - 2013-12-06 05:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-07 09:25 - 2013-12-06 05:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-07 09:25 - 2013-11-26 14:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-06-07 09:25 - 2013-10-04 05:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-06-07 09:25 - 2013-10-04 05:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-06-07 09:25 - 2013-10-04 05:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-06-07 09:25 - 2013-10-04 04:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-06-07 09:25 - 2013-10-04 04:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-06-07 09:25 - 2013-10-04 04:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-06-07 09:25 - 2013-09-28 04:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-06-07 09:25 - 2013-06-06 08:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-06-07 09:25 - 2013-06-06 08:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-06-07 09:25 - 2013-06-06 08:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-06-07 09:25 - 2013-06-06 08:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-06-07 09:25 - 2013-06-06 07:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-06-07 09:25 - 2013-06-06 07:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-06-07 09:25 - 2013-06-06 07:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-06-07 09:25 - 2013-06-06 06:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-06-07 09:25 - 2013-06-06 06:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-06-07 09:25 - 2013-06-06 06:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-06-07 09:25 - 2013-05-10 08:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2014-06-07 09:25 - 2013-05-10 06:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2014-06-07 09:25 - 2012-11-01 08:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-07 09:25 - 2012-11-01 07:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-07 09:25 - 2011-08-17 08:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2014-06-07 09:25 - 2011-08-17 08:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2014-06-07 09:25 - 2011-08-17 07:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2014-06-07 09:25 - 2011-08-17 07:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2014-06-07 09:24 - 2014-01-28 05:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-06-07 09:24 - 2014-01-01 02:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-06-07 09:24 - 2014-01-01 02:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-06-07 09:24 - 2013-11-12 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-06-07 09:24 - 2013-11-12 05:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-06-07 09:24 - 2013-10-30 05:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-06-07 09:24 - 2013-10-30 05:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-06-07 09:24 - 2013-10-19 05:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-06-07 09:24 - 2013-10-19 04:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-06-07 09:24 - 2013-07-25 12:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-06-07 09:24 - 2013-07-25 11:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-06-07 09:24 - 2013-07-12 13:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-06-07 09:24 - 2013-07-04 15:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-06-07 09:24 - 2013-07-04 14:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-06-07 09:24 - 2013-07-03 07:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-06-07 09:24 - 2013-07-03 07:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-06-07 09:24 - 2013-03-19 08:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2014-06-07 09:24 - 2013-02-12 07:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-06-07 09:24 - 2012-08-22 21:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-06-07 09:24 - 2012-07-04 23:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2014-06-07 09:24 - 2012-05-04 14:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-06-07 09:24 - 2012-05-04 12:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-06-07 09:24 - 2012-04-28 06:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-06-07 09:24 - 2011-07-09 05:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-06-07 09:24 - 2011-04-27 05:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-06-07 09:24 - 2011-04-27 05:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-06-07 09:23 - 2014-02-07 04:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-06-07 09:23 - 2014-01-29 05:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-06-07 09:23 - 2014-01-29 05:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-06-07 09:23 - 2013-10-04 05:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-06-07 09:23 - 2013-10-04 04:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-06-07 09:23 - 2013-07-09 08:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-06-07 09:23 - 2013-07-09 07:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-06-07 09:23 - 2013-07-04 15:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-06-07 09:23 - 2013-07-04 15:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-06-07 09:23 - 2013-07-04 14:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-06-07 09:23 - 2013-07-04 14:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-06-07 09:23 - 2013-07-04 13:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-06-07 09:23 - 2013-06-26 01:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-06-07 09:23 - 2012-11-29 01:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-06-07 09:23 - 2012-11-29 01:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-06-07 09:23 - 2012-11-29 01:56 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-06-07 09:23 - 2012-11-22 08:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-07 09:23 - 2012-11-22 07:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-07 09:23 - 2012-07-05 01:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-06-07 09:23 - 2012-07-05 01:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-06-07 09:23 - 2012-07-05 01:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2014-06-07 09:23 - 2012-07-05 00:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2014-06-07 09:23 - 2012-07-05 00:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2014-06-07 09:23 - 2012-04-26 08:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-06-07 09:23 - 2012-04-26 08:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-06-07 09:23 - 2012-04-26 08:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2014-06-07 09:23 - 2011-06-15 13:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2014-06-07 09:23 - 2011-06-15 13:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-06-07 09:23 - 2011-06-15 13:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2014-06-07 09:23 - 2011-06-15 13:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2014-06-07 09:23 - 2011-06-15 11:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2014-06-07 09:23 - 2011-06-15 11:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2014-06-07 09:23 - 2011-06-15 11:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2014-06-07 09:23 - 2011-06-15 11:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2014-06-07 09:23 - 2011-06-15 11:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2014-06-07 09:23 - 2011-04-29 06:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-06-07 09:23 - 2011-04-29 06:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-06-07 09:23 - 2011-04-29 06:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-06-07 09:23 - 2011-04-09 09:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-06-07 09:23 - 2011-04-09 08:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-06-07 09:23 - 2011-03-03 09:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-06-07 09:23 - 2011-03-03 09:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-06-07 09:23 - 2011-03-03 09:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2014-06-07 09:23 - 2011-03-03 08:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-06-07 09:23 - 2011-03-03 08:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2014-06-07 09:23 - 2011-02-18 13:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2014-06-07 09:23 - 2011-02-18 08:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2014-06-07 09:22 - 2014-01-24 05:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-06-07 09:22 - 2013-10-12 05:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-06-07 09:22 - 2013-10-12 05:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-06-07 09:22 - 2013-10-12 05:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-06-07 09:22 - 2013-10-12 05:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-06-07 09:22 - 2013-10-12 05:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-06-07 09:22 - 2013-10-12 05:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-06-07 09:22 - 2013-10-12 05:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-06-07 09:22 - 2013-10-12 05:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-06-07 09:22 - 2013-10-12 05:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-06-07 09:22 - 2013-10-12 04:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-06-07 09:22 - 2013-10-12 04:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-06-07 09:22 - 2013-10-12 04:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-06-07 09:22 - 2013-10-12 04:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-06-07 09:22 - 2013-10-03 05:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-06-07 09:22 - 2013-10-03 05:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-06-07 09:22 - 2013-08-01 15:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-06-07 09:22 - 2013-06-15 07:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-06-07 09:22 - 2013-04-26 08:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-06-07 09:22 - 2013-04-26 07:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2014-06-07 09:22 - 2013-04-10 09:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-06-07 09:22 - 2013-01-03 09:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-07 09:22 - 2012-11-02 08:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-06-07 09:22 - 2012-11-02 08:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-06-07 09:22 - 2012-09-26 01:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2014-06-07 09:22 - 2012-09-26 01:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-06-07 09:22 - 2012-05-14 08:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-06-07 09:22 - 2012-05-05 11:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-06-07 09:22 - 2012-05-05 10:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-06-07 09:22 - 2012-04-07 15:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-06-07 09:22 - 2012-04-07 14:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-06-07 09:22 - 2012-03-17 10:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-06-07 09:22 - 2012-01-04 13:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2014-06-07 09:22 - 2012-01-04 11:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2014-06-07 09:22 - 2011-10-15 09:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-06-07 09:22 - 2011-10-15 08:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2014-06-07 09:22 - 2011-08-27 08:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-06-07 09:22 - 2011-08-27 08:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2014-06-07 09:22 - 2011-08-27 07:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-06-07 09:22 - 2011-08-27 07:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2014-06-07 09:22 - 2011-03-11 09:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2014-06-07 09:22 - 2011-03-11 09:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-06-07 09:22 - 2011-03-11 08:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2014-06-07 09:22 - 2011-03-11 08:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2014-06-07 09:22 - 2011-02-23 07:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2014-06-07 09:22 - 2011-02-05 20:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-06-07 09:22 - 2011-02-05 20:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2014-06-07 09:22 - 2011-02-05 20:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2014-06-07 09:22 - 2011-02-05 20:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2014-06-07 09:22 - 2011-02-05 20:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-06-07 09:22 - 2011-02-05 20:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-06-07 09:22 - 2011-02-05 20:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-06-07 09:22 - 2011-02-03 14:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-06-07 09:21 - 2014-02-04 05:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-06-07 09:21 - 2014-02-04 05:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-06-07 09:21 - 2013-08-28 04:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-06-07 09:21 - 2013-07-20 13:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-06-07 09:21 - 2013-07-20 13:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-06-07 09:21 - 2013-01-24 09:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-06-07 09:21 - 2012-11-23 06:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-06-07 09:21 - 2012-05-01 08:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-06-07 09:21 - 2012-02-17 09:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-06-07 09:21 - 2012-02-17 08:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-06-07 09:21 - 2012-02-17 07:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-06-07 09:21 - 2011-12-30 09:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2014-06-07 09:21 - 2011-12-30 08:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2014-06-07 09:21 - 2011-12-16 11:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2014-06-07 09:21 - 2011-12-16 10:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2014-06-07 09:21 - 2011-06-16 08:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2014-06-07 09:21 - 2011-06-16 07:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2014-06-07 09:21 - 2011-05-24 14:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-06-07 09:21 - 2011-05-24 13:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2014-06-07 09:21 - 2011-05-24 13:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2014-06-07 09:21 - 2011-05-24 13:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2014-06-07 09:21 - 2011-05-24 13:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-06-07 09:21 - 2011-05-03 08:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-06-07 09:21 - 2011-05-03 07:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-06-07 09:21 - 2011-02-12 14:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2014-06-07 08:58 - 2011-11-19 17:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-06-07 08:58 - 2011-11-19 17:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-06-07 08:52 - 2012-06-03 01:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-06-07 08:52 - 2012-06-03 01:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-06-07 08:52 - 2012-06-03 01:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-06-07 08:52 - 2012-06-03 01:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-06-07 08:52 - 2012-06-03 01:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-06-07 08:52 - 2012-06-03 01:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-06-07 08:52 - 2012-06-03 01:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-06-07 08:51 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-06-07 08:51 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-06-07 08:46 - 2014-06-07 12:04 - 00000000 ____D () C:\Program Files\Intel
2014-06-07 08:45 - 2014-06-07 08:45 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\GHISLER
2014-06-07 08:44 - 2014-06-07 08:44 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-06-07 08:44 - 2014-06-07 08:44 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\GHISLER
2014-06-07 08:44 - 2014-06-07 08:44 - 00000000 ____D () C:\totalcmd
2014-06-07 01:57 - 2014-06-07 01:57 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-06-07 00:44 - 2014-06-07 00:44 - 00005742 _____ () C:\Windows\DPINST.LOG
2014-06-07 00:26 - 2011-02-08 14:58 - 01882104 _____ (Codejock Software) C:\Windows\SysWOW64\Codejock.Controls.v15.0.1.ocx
2014-06-07 00:26 - 2005-01-12 11:19 - 00456536 _____ (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) C:\Windows\SysWOW64\XCEEDZIP.DLL
2014-06-07 00:12 - 2014-04-11 11:39 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2014-06-07 00:12 - 2014-04-11 11:39 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller.dll
2014-06-07 00:12 - 2014-04-11 11:39 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2014-06-07 00:12 - 2014-04-11 11:39 - 00110336 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2014-06-07 00:08 - 2014-06-07 00:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-06-07 00:08 - 2014-04-30 19:43 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2014-06-07 00:08 - 2014-04-30 19:43 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll
2014-06-07 00:07 - 2014-06-07 00:12 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-06-07 00:06 - 2014-06-07 00:06 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Downloaded Installations
2014-06-06 22:38 - 2014-06-06 22:38 - 00000000 ____D () C:\ProgramData\pwd
2014-06-03 13:06 - 2014-06-09 11:49 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Tropico 5
2014-06-03 12:55 - 2014-06-03 12:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tropico 5
2014-06-02 22:06 - 2014-06-02 22:06 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-06-02 22:06 - 2014-06-02 22:06 - 00000000 ____D () C:\Program Files\TeamSpeak
2014-06-02 19:38 - 2014-05-30 02:07 - 01715176 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-06-02 19:38 - 2014-05-30 02:07 - 01291232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-06-02 16:42 - 2014-06-02 17:28 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Winamp
2014-05-30 21:58 - 2014-06-02 16:42 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-05-30 14:12 - 2014-05-30 14:12 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\LolClient
2014-05-29 23:17 - 2014-05-29 23:17 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Macromedia
2014-05-29 23:16 - 2014-05-29 23:16 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Mozilla
2014-05-29 23:16 - 2014-05-29 23:16 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Mozilla
2014-05-27 12:14 - 2014-05-20 02:10 - 00601432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-05-27 12:11 - 2014-05-20 05:44 - 31387936 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 24025376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 17480432 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 16003912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 12688328 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-05-27 12:11 - 2014-05-20 05:44 - 11644928 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 11599072 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 09735256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 09697640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 03141976 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 02953672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 02785568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 02412376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 00895776 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 00867784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 00861128 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 00837056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 00492376 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 00416712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 00382240 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 00354016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 00335704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 00166568 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-05-27 12:11 - 2014-05-20 05:44 - 00146480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-05-27 11:46 - 2014-05-27 12:15 - 00001351 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-05-27 11:40 - 2013-11-28 16:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-05-27 11:40 - 2013-11-28 16:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-05-27 11:40 - 2013-11-22 11:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-05-27 11:22 - 2014-06-22 09:37 - 00000000 ____D () C:\ProgramData\663c5736b33815e1
2014-05-27 11:22 - 2014-06-09 18:06 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-05-27 11:22 - 2014-06-08 12:04 - 00000000 ____D () C:\ProgramData\save on
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Torch
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Packages
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Comodo
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\Guest\AppData\Local\Torch
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\Guest
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\Administrator
2014-05-27 11:21 - 2014-06-08 12:06 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-27 10:58 - 2014-05-27 10:58 - 00000000 ____D () C:\Windows\Sun
2014-05-27 10:23 - 2014-05-20 05:44 - 01889112 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433788.dll
2014-05-27 10:23 - 2014-05-20 05:44 - 01541576 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433788.dll
2014-05-26 23:37 - 2014-05-26 23:37 - 00000000 ____D () C:\ProgramData\Orbit
2014-05-26 20:21 - 2014-05-27 12:41 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-05-26 20:21 - 2014-05-27 12:41 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-05-26 20:21 - 2014-05-26 20:21 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Ubisoft Game Launcher
2014-05-26 20:19 - 2014-05-27 12:40 - 00035152 _____ () C:\Windows\DirectX.log
2014-05-26 20:19 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-05-26 16:44 - 2014-05-26 16:44 - 00000017 _____ () C:\Users\REACTORUL\AppData\Local\resmon.resmoncfg
2014-05-26 15:58 - 2014-05-26 15:58 - 00000000 ____D () C:\Windows\PCHEALTH
2014-05-26 15:58 - 2014-05-26 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-26 15:57 - 2014-05-26 15:57 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-05-26 15:56 - 2014-05-26 16:00 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-26 15:56 - 2014-05-26 15:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-05-26 15:56 - 2014-05-26 15:56 - 00000000 __RHD () C:\MSOCache
2014-05-26 15:56 - 2014-05-26 15:56 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Microsoft Help
2014-05-26 15:56 - 2014-05-26 15:56 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-05-26 15:56 - 2014-05-26 15:56 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-05-26 15:55 - 2014-05-26 15:55 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-26 15:55 - 2014-05-26 15:55 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-05-26 15:54 - 2014-05-26 15:57 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-26 15:52 - 2014-05-26 15:56 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Adobe
2014-05-25 13:22 - 2014-06-07 00:07 - 00000000 ____D () C:\ProgramData\Samsung
2014-05-25 13:22 - 2014-05-25 13:22 - 00000000 ____D () C:\Program Files\SAMSUNG

==================== One Month Modified Files and Folders =======

2014-06-23 17:23 - 2014-06-23 17:22 - 00013305 _____ () C:\Users\REACTORUL\Desktop\FRST.txt
2014-06-23 17:22 - 2014-06-23 17:22 - 00000000 ____D () C:\FRST
2014-06-23 17:22 - 2014-05-22 22:45 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\uTorrent
2014-06-23 17:11 - 2014-06-23 17:11 - 02082816 _____ (Farbar) C:\Users\REACTORUL\Desktop\FRST64.exe
2014-06-23 17:10 - 2014-05-22 22:00 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-23 16:52 - 2009-07-14 07:45 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-23 16:52 - 2009-07-14 07:45 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-23 16:49 - 2014-06-22 09:42 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Spotify
2014-06-23 16:49 - 2014-06-17 21:53 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Skype
2014-06-23 16:48 - 2014-06-23 16:48 - 00020483 _____ () C:\Windows\SysWOW64\collectionCache.bnk
2014-06-23 16:48 - 2014-05-22 20:50 - 01831898 _____ () C:\Windows\WindowsUpdate.log
2014-06-23 16:46 - 2014-06-22 09:42 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Spotify
2014-06-23 16:45 - 2014-06-08 12:05 - 00000488 ____H () C:\Windows\Tasks\SO_Booster-S-017483117.job
2014-06-23 16:45 - 2014-05-22 21:32 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-06-23 16:45 - 2009-07-14 08:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-23 16:45 - 2009-07-14 07:51 - 00041669 _____ () C:\Windows\setupact.log
2014-06-22 23:22 - 2014-06-22 23:22 - 00024766 _____ () C:\Users\REACTORUL\Desktop\dds.txt
2014-06-22 23:22 - 2014-06-22 23:22 - 00005818 _____ () C:\Users\REACTORUL\Desktop\attach.txt
2014-06-22 23:15 - 2014-06-22 23:15 - 00688992 ____R (Swearware) C:\Users\REACTORUL\Desktop\dds.com
2014-06-22 11:53 - 2014-06-22 09:37 - 00000000 ____D () C:\Program Files (x86)\TunnelBear
2014-06-22 09:42 - 2014-06-22 09:42 - 00001773 _____ () C:\Users\REACTORUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-22 09:37 - 2014-06-22 09:37 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\IsolatedStorage
2014-06-22 09:37 - 2014-06-22 09:37 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\HockeyCrashes
2014-06-22 09:37 - 2014-06-22 09:37 - 00000000 ____D () C:\ProgramData\TakETTheCoupon
2014-06-22 09:37 - 2014-06-22 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TunnelBear
2014-06-22 09:37 - 2014-05-27 11:22 - 00000000 ____D () C:\ProgramData\663c5736b33815e1
2014-06-22 09:37 - 2014-05-22 21:51 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-20 14:05 - 2014-06-20 14:05 - 00000000 ____D () C:\Users\REACTORUL\Documents\Ghost Games
2014-06-20 13:53 - 2014-06-12 14:12 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\.minecraft
2014-06-18 12:53 - 2014-06-18 12:53 - 00000000 ____D () C:\ProgramData\Mozilla
2014-06-18 12:53 - 2014-06-18 12:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-18 10:16 - 2014-06-18 10:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-18 01:53 - 2014-05-22 23:01 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Battle.net
2014-06-17 21:53 - 2014-06-17 21:53 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-17 21:53 - 2014-06-17 21:53 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Skype
2014-06-17 21:53 - 2014-06-17 21:53 - 00000000 ____D () C:\ProgramData\Skype
2014-06-17 21:53 - 2014-06-17 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-06-15 23:45 - 2014-06-15 23:38 - 00179200 _____ (уӧへеьϐ六骨おḈえҼҼлこЉẦоЖうくẦ五頂Ҷ争Ќдм) C:\Users\REACTORUL\WindowsUpdate.exe
2014-06-15 23:45 - 2014-05-22 20:48 - 00000000 ____D () C:\Users\REACTORUL
2014-06-15 13:33 - 2014-06-15 13:33 - 00000000 ____D () C:\ProgramData\SaverExteEnsiOnn
2014-06-12 14:58 - 2014-06-12 14:54 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\.technic
2014-06-12 14:18 - 2014-06-12 14:18 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-06-12 14:18 - 2014-06-12 14:18 - 00122904 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-06-12 14:18 - 2014-06-12 14:18 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-06-12 14:18 - 2014-06-12 13:55 - 00109080 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-06-12 13:40 - 2014-06-12 13:55 - 00382464 _____ () C:\Windows\SysWOW64\OpenAL64.dll
2014-06-12 10:54 - 2014-06-12 10:52 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Apple Computer
2014-06-12 10:52 - 2014-06-12 10:52 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Apple Computer
2014-06-12 10:52 - 2014-06-12 10:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-06-12 10:51 - 2014-06-12 10:51 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-06-12 10:51 - 2014-06-12 10:51 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-12 10:51 - 2014-06-12 10:51 - 00000000 ____D () C:\Program Files\iTunes
2014-06-12 10:51 - 2014-06-12 10:51 - 00000000 ____D () C:\Program Files\iPod
2014-06-12 10:51 - 2014-06-12 10:51 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-12 10:50 - 2014-06-12 10:50 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-06-12 10:50 - 2014-06-12 10:50 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Apple
2014-06-12 10:50 - 2014-06-12 10:50 - 00000000 ____D () C:\ProgramData\Apple
2014-06-12 10:50 - 2014-06-12 10:50 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-06-12 10:50 - 2014-06-12 10:50 - 00000000 ____D () C:\Program Files\Bonjour
2014-06-12 10:50 - 2014-06-12 10:50 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-06-12 10:50 - 2014-06-12 10:50 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-06-12 10:49 - 2014-06-12 10:49 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\iFunBox.NXGen
2014-06-12 10:49 - 2014-06-12 10:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iFunBox 2014
2014-06-12 10:49 - 2014-06-12 10:49 - 00000000 ____D () C:\Program Files (x86)\iFunbox 2014
2014-06-11 10:52 - 2014-05-22 23:01 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-06-10 01:47 - 2014-06-10 01:48 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-06-10 01:47 - 2014-06-10 01:48 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-06-10 01:47 - 2014-06-10 01:48 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-06-10 01:47 - 2014-05-22 21:01 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-06-10 01:45 - 2014-05-23 10:50 - 00000000 ____D () C:\ProgramData\Oracle
2014-06-09 18:43 - 2014-06-09 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2014-06-09 18:06 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-06-09 14:49 - 2009-07-14 08:13 - 00795870 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-09 11:49 - 2014-06-03 13:06 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Tropico 5
2014-06-08 23:12 - 2010-11-21 06:47 - 00084424 _____ () C:\Windows\PFRO.log
2014-06-08 19:06 - 2014-06-08 19:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AC3Filter
2014-06-08 19:06 - 2014-06-08 19:05 - 00000000 ____D () C:\Program Files (x86)\AC3Filter
2014-06-08 12:06 - 2014-05-27 11:21 - 00000000 ____D () C:\ProgramData\InstallMate
2014-06-08 12:05 - 2014-06-08 12:05 - 00002734 _____ () C:\Windows\System32\Tasks\SO_Booster-S-017483117
2014-06-08 12:05 - 2014-06-08 12:05 - 00000000 ____D () C:\Program Files (x86)\SO_Booster
2014-06-08 12:04 - 2014-06-08 12:04 - 00000394 __RSH () C:\ProgramData\ntuser.pol
2014-06-08 12:04 - 2014-06-08 12:04 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Chromatic Browser
2014-06-08 12:04 - 2014-06-08 12:04 - 00000000 ____D () C:\Users\Guest\AppData\Local\Chromatic Browser
2014-06-08 12:04 - 2014-06-08 12:04 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser
2014-06-08 12:04 - 2014-06-08 12:04 - 00000000 ____D () C:\ProgramData\save, On
2014-06-08 12:04 - 2014-06-08 12:04 - 00000000 ____D () C:\Program Files (x86)\save, On
2014-06-08 12:04 - 2014-06-08 12:04 - 00000000 ____D () C:\Program Files (x86)\SAve on
2014-06-08 12:04 - 2014-05-27 11:22 - 00000000 ____D () C:\ProgramData\save on
2014-06-08 12:04 - 2014-05-22 22:48 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Google
2014-06-08 12:04 - 2009-07-14 06:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-06-08 12:04 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-06-08 11:46 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\rescache
2014-06-07 20:09 - 2014-06-07 20:09 - 00000000 ____D () C:\ProgramData\Origin
2014-06-07 20:01 - 2014-06-07 20:01 - 00000000 ____D () C:\Users\REACTORUL\Documents\SimCity
2014-06-07 19:59 - 2014-06-07 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razor1911
2014-06-07 15:04 - 2014-05-22 21:03 - 00063744 _____ () C:\Users\REACTORUL\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-07 14:34 - 2014-06-07 14:34 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Blizzard
2014-06-07 12:32 - 2009-07-14 08:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-06-07 12:32 - 2009-07-14 07:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-06-07 12:31 - 2014-05-22 20:48 - 00001417 _____ () C:\Users\REACTORUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-07 12:30 - 2009-07-14 06:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-07 12:29 - 2009-07-14 07:45 - 00286792 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-07 12:26 - 2014-06-07 12:26 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-07 12:26 - 2009-07-14 08:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-06-07 12:26 - 2009-07-14 08:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-06-07 12:26 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-06-07 12:26 - 2009-07-14 06:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-06-07 12:25 - 2011-04-12 11:28 - 00000000 ____D () C:\Program Files\Windows Journal
2014-06-07 12:25 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-06-07 12:25 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-06-07 12:25 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-06-07 12:25 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-06-07 12:05 - 2014-05-22 21:36 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-06-07 12:04 - 2014-06-07 08:46 - 00000000 ____D () C:\Program Files\Intel
2014-06-07 11:31 - 2014-06-07 11:12 - 00012198 _____ () C:\Windows\IE11_main.log
2014-06-07 11:22 - 2014-06-07 11:22 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-07 11:22 - 2014-06-07 11:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-07 11:22 - 2014-06-07 11:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-07 11:22 - 2014-06-07 11:22 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-07 11:22 - 2014-06-07 11:22 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-06-07 11:22 - 2014-06-07 11:22 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-06-07 11:22 - 2014-06-07 11:22 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-06-07 11:22 - 2014-06-07 11:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-06-07 11:22 - 2014-06-07 11:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-06-07 11:22 - 2014-06-07 11:22 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-06-07 11:22 - 2014-06-07 11:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-06-07 11:22 - 2014-06-07 11:22 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-06-07 11:22 - 2014-06-07 11:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-07 10:20 - 2014-05-22 21:23 - 00787708 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-06-07 10:05 - 2014-06-07 10:03 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-07 08:45 - 2014-06-07 08:45 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\GHISLER
2014-06-07 08:44 - 2014-06-07 08:44 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-06-07 08:44 - 2014-06-07 08:44 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\GHISLER
2014-06-07 08:44 - 2014-06-07 08:44 - 00000000 ____D () C:\totalcmd
2014-06-07 01:57 - 2014-06-07 01:57 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-06-07 01:01 - 2014-05-22 21:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-07 00:44 - 2014-06-07 00:44 - 00005742 _____ () C:\Windows\DPINST.LOG
2014-06-07 00:12 - 2014-06-07 00:07 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-06-07 00:08 - 2014-06-07 00:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-06-07 00:07 - 2014-05-25 13:22 - 00000000 ____D () C:\ProgramData\Samsung
2014-06-07 00:06 - 2014-06-07 00:06 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Downloaded Installations
2014-06-06 22:38 - 2014-06-06 22:38 - 00000000 ____D () C:\ProgramData\pwd
2014-06-03 12:55 - 2014-06-03 12:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tropico 5
2014-06-02 22:06 - 2014-06-02 22:06 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-06-02 22:06 - 2014-06-02 22:06 - 00000000 ____D () C:\Program Files\TeamSpeak
2014-06-02 19:38 - 2014-05-22 21:20 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-06-02 17:28 - 2014-06-02 16:42 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Winamp
2014-06-02 16:42 - 2014-05-30 21:58 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-05-30 14:12 - 2014-05-30 14:12 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\LolClient
2014-05-30 02:07 - 2014-06-02 19:38 - 01715176 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-05-30 02:07 - 2014-06-02 19:38 - 01291232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-05-30 02:07 - 2014-05-22 21:24 - 01279480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-05-30 02:07 - 2014-05-22 21:24 - 01122312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-05-29 23:21 - 2014-05-22 22:48 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-29 23:17 - 2014-05-29 23:17 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Macromedia
2014-05-29 23:16 - 2014-05-29 23:16 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Mozilla
2014-05-29 23:16 - 2014-05-29 23:16 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Mozilla
2014-05-27 12:41 - 2014-05-26 20:21 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-05-27 12:41 - 2014-05-26 20:21 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-05-27 12:40 - 2014-05-26 20:19 - 00035152 _____ () C:\Windows\DirectX.log
2014-05-27 12:15 - 2014-05-27 11:46 - 00001351 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-05-27 12:15 - 2014-05-22 21:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-05-27 12:14 - 2014-05-22 21:20 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-05-27 11:49 - 2009-07-14 05:34 - 00000512 _____ () C:\Windows\win.ini
2014-05-27 11:44 - 2014-05-22 21:24 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\NVIDIA Corporation
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Torch
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Packages
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Comodo
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\Guest\AppData\Local\Torch
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\Guest
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-27 11:22 - 2014-05-27 11:22 - 00000000 ____D () C:\Users\Administrator
2014-05-27 10:58 - 2014-05-27 10:58 - 00000000 ____D () C:\Windows\Sun
2014-05-26 23:37 - 2014-05-26 23:37 - 00000000 ____D () C:\ProgramData\Orbit
2014-05-26 23:37 - 2014-05-09 15:58 - 00000000 ____D () C:\Users\REACTORUL\Documents\My Games
2014-05-26 20:21 - 2014-05-26 20:21 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Ubisoft Game Launcher
2014-05-26 20:21 - 2009-07-14 08:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-26 20:01 - 2014-05-22 22:47 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\BSplayer
2014-05-26 16:44 - 2014-05-26 16:44 - 00000017 _____ () C:\Users\REACTORUL\AppData\Local\resmon.resmoncfg
2014-05-26 16:00 - 2014-05-26 15:56 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-26 15:58 - 2014-05-26 15:58 - 00000000 ____D () C:\Windows\PCHEALTH
2014-05-26 15:58 - 2014-05-26 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-26 15:58 - 2014-05-26 15:56 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-05-26 15:57 - 2014-05-26 15:57 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-05-26 15:57 - 2014-05-26 15:54 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-26 15:57 - 2009-07-14 06:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-05-26 15:56 - 2014-05-26 15:56 - 00000000 __RHD () C:\MSOCache
2014-05-26 15:56 - 2014-05-26 15:56 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Microsoft Help
2014-05-26 15:56 - 2014-05-26 15:56 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-05-26 15:56 - 2014-05-26 15:56 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-05-26 15:56 - 2014-05-26 15:52 - 00000000 ____D () C:\Users\REACTORUL\AppData\Local\Adobe
2014-05-26 15:56 - 2014-05-22 22:48 - 00000000 ____D () C:\Users\REACTORUL\AppData\Roaming\Adobe
2014-05-26 15:56 - 2011-04-12 11:28 - 00000000 ____D () C:\Windows\ShellNew
2014-05-26 15:55 - 2014-05-26 15:55 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-26 15:55 - 2014-05-26 15:55 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-05-25 13:22 - 2014-05-25 13:22 - 00000000 ____D () C:\Program Files\SAMSUNG

Files to move or delete:
====================
C:\Users\REACTORUL\AppData\Local\Temp\svchoste.exe
C:\Users\REACTORUL\WindowsUpdate.exe


Some content of TEMP:
====================
C:\Users\REACTORUL\AppData\Local\Temp\msvcp100.dll
C:\Users\REACTORUL\AppData\Local\Temp\msvcr100.dll
C:\Users\REACTORUL\AppData\Local\Temp\nss3.dll
C:\Users\REACTORUL\AppData\Local\Temp\svchoste.exe
C:\Users\REACTORUL\AppData\Local\Temp\tmp50A.tmp.exe
C:\Users\REACTORUL\AppData\Local\Temp\tmp9855.tmp.exe
C:\Users\REACTORUL\AppData\Local\Temp\Uninstall.exe
C:\Users\REACTORUL\AppData\Local\Temp\uninstall30925.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-18 02:15

==================== End Of Log ============================

Attached Files



#4 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:11:43 PM

Posted 23 June 2014 - 05:57 PM

Hello,

 

Your log(s) show that you are using so called peer-to-peer or file-sharing programs (in your case uTorrent). These programs allow to share files between users as the name(s) suggest. In today's world the cyber crime has come to an enormous dimension and any means is used to infect personal computers to make use of their stored data or machine power for further propagation of the malware files. A popular means is the use of file-sharing tools as a tremendous amount of prospective victims can be reached through it.

It is therefore possible to be infected by downloading manipulated files via peer-to-peer tools and thus suggested to be used with intense care. Some further readings on this subject, along the included links, are as follows: "File-Sharing, otherwise known as Peer To Peer" and "Risks of File-Sharing Technology."

It is also important to note that sharing entertainment files and proprietary software infringes the copyright laws in many countries over the world and you are putting yourself at risk of being indicted through organisations watching over the rights of the authors of such files (i.e. the RIAA for music files, or the MPAA for movie files in the USA) or the authors of the files themselves.

Naturally there are also legal ways to use these services, such as downloading Linux distributions or office suites such as "Libre Office or GIMP."


Also, please take a look here:

How cyber criminals infect victims via P2P with pirated software

 

 

 

Also click on Start > type in appwiz.cpl in the search box and press Enter
From the list find and uninstall the following applications:

 

save, On

SaverExteEnsiOnn

SO_Booster

SO_Sustainer 1.80

TakETTheCoupon

 

 

 

Next please download the following file => and save it to the Desktop.
NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

Run FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

 

 

Also can you please temporary disable your antivirus program (see here how if you are not sure) then go to C:\FRST\Quarantine and right click on the folder, select send to compressed(zip) folder that will make a zipped copy of this folder.

Then please upload it to http://zippyshare.com/ and send me the download link via PM so I can examine the files and submit to antivirus companies if needed.
After that please delete the zip file you just created.

 

Let me know how are things after the procedures above! :)

 

 

Regards,

Georgi


cXfZ4wS.png


#5 calinoi

calinoi
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:10:43 PM

Posted 24 June 2014 - 12:51 AM

svchoste.exe is gone !!! Thanks so much.I'm afraid I cannot send you that files,I'm sorry!

 

 

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 22-06-2014
Ran by REACTORUL at 2014-06-24 08:39:16 Run:1
Running from C:\Users\REACTORUL\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
() C:\ProgramData\BrilliantInstaller\SO_Booster\SO_Booster.exe
C:\ProgramData\BrilliantInstaller
(与難ḈЏглт与ӨФおҶωеḒқへうӔӔӨзз亊Ḓемϟώг) C:\Users\REACTORUL\AppData\Local\Temp\svchoste.exe
HKLM-x32\...\Run: [9ca71c12e248b24005cc0556c6384115] => C:\Users\REACTORUL\AppData\Local\Temp\svchoste.exe [132096 2014-06-15] (与難ḈЏглт与ӨФおҶωеḒқへうӔӔӨзз亊Ḓемϟώг)
HKU\S-1-5-21-3466372072-2229856283-2406641192-1000\...\Run: [9ca71c12e248b24005cc0556c6384115] => C:\Users\REACTORUL\AppData\Local\Temp\svchoste.exe [132096 2014-06-15] (与難ḈЏглт与ӨФおҶωеḒқへうӔӔӨзз亊Ḓемϟώг) <===== ATTENTION
C:\Users\REACTORUL\AppData\Local\Temp\svchoste.exe
HKU\S-1-5-21-3466372072-2229856283-2406641192-1000\...\MountPoints2: {3129ea97-e1e0-11e3-8aef-94de80b5f8db} - F:\install.exe
AppInit_DLLs: C:\PROGRA~2\SO_BOO~1\ASSIST~2.DLL => C:\Program Files (x86)\SO_Booster\Assistant_x64.dll [4210176 2014-06-08] ()
AppInit_DLLs-x32: c:\progra~2\so_boo~1\assist~1.dll => c:\Program Files (x86)\SO_Booster\Assistant.dll [4296192 2014-06-08] ()
Startup: C:\Users\REACTORUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\yy.exe (与難ḈЏглт与ӨФおҶωеḒқへうӔӔӨзз亊Ḓемϟώг)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
BHO: SaverExteEnsiOnn - {0AADAF38-5D5B-ECBE-FBBC-55CC9F958C3F} - C:\ProgramData\SaverExteEnsiOnn\KwxsfMqeTz.x64.dll ()
C:\ProgramData\SaverExteEnsiOnn
BHO: save, On - {23C24FE7-5D35-5D74-BC80-E5F4FAA4FA70} - C:\Program Files (x86)\save, On\rc.x64.dll ()
C:\Program Files (x86)\save, On
BHO: SAve on - {25BE78E2-B767-21FA-EBF3-03B43BC625FC} - C:\Program Files (x86)\SAve on\B4k6.x64.dll ()
C:\Program Files (x86)\SAve on
BHO: TakETTheCoupon - {4828250D-AD5F-70A4-680B-8273E3E93AF8} - C:\ProgramData\TakETTheCoupon\_jAqFfICC.x64.dll ()
C:\ProgramData\TakETTheCoupon
BHO-x32: SaverExteEnsiOnn - {0AADAF38-5D5B-ECBE-FBBC-55CC9F958C3F} - C:\ProgramData\SaverExteEnsiOnn\KwxsfMqeTz.dll ()
BHO-x32: save, On - {23C24FE7-5D35-5D74-BC80-E5F4FAA4FA70} - C:\Program Files (x86)\save, On\rc.dll ()
BHO-x32: SAve on - {25BE78E2-B767-21FA-EBF3-03B43BC625FC} - C:\Program Files (x86)\SAve on\B4k6.dll ()
BHO-x32: TakETTheCoupon - {4828250D-AD5F-70A4-680B-8273E3E93AF8} - C:\ProgramData\TakETTheCoupon\_jAqFfICC.dll ()
FF Extension: TakeTheCCoouapon - C:\Users\REACTORUL\AppData\Roaming\Mozilla\Firefox\Profiles\l7ash05c.default\Extensions\7ayyalzr@u-c.edu [2014-06-22]
FF Extension: SaavEoroExtensioN - C:\Users\REACTORUL\AppData\Roaming\Mozilla\Firefox\Profiles\l7ash05c.default\Extensions\bfdckw@opmhvdl.edu [2014-06-15]
FF Extension: SAve on - C:\Users\REACTORUL\AppData\Roaming\Mozilla\Firefox\Profiles\l7ash05c.default\Extensions\e7njna-uu@frobpyeii.net [2014-06-08]
FF Extension: save, On - C:\Users\REACTORUL\AppData\Roaming\Mozilla\Firefox\Profiles\l7ash05c.default\Extensions\iygju@eiaycqyyg.org [2014-06-08]
CHR Extension: (SAve on) - C:\Users\REACTORUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\jicmmoedimfidlkbpkgjifpegcfmegpc [2014-06-08]
CHR Extension: (save, On) - C:\Users\REACTORUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfckdjfpmpemamfpdflomlnhbcdjbeha [2014-06-08]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
R2 29850aa3; c:\Program Files (x86)\SO_Booster\AssistantSvc.dll [174928 2014-06-08] () [File not signed]
2014-06-15 23:38 - 2014-06-15 23:45 - 00179200 _____ (уӧへеьϐ六骨おḈえҼҼлこЉẦоЖうくẦ五頂Ҷ争Ќдм) C:\Users\REACTORUL\WindowsUpdate.exe
2014-06-08 12:05 - 2014-06-23 16:45 - 00000488 ____H () C:\Windows\Tasks\SO_Booster-S-017483117.job
2014-06-08 12:05 - 2014-06-08 12:05 - 00002734 _____ () C:\Windows\System32\Tasks\SO_Booster-S-017483117
2014-06-08 12:05 - 2014-06-08 12:05 - 00000000 ____D () C:\Program Files (x86)\SO_Booster
2014-06-08 12:04 - 2014-06-08 12:04 - 00000000 ____D () C:\ProgramData\save, On
2014-05-27 11:22 - 2014-06-22 09:37 - 00000000 ____D () C:\ProgramData\663c5736b33815e1
2014-05-27 11:21 - 2014-06-08 12:06 - 00000000 ____D () C:\ProgramData\InstallMate
Task: {A400C14A-02DA-448F-95CA-05A4EE8B95AF} - System32\Tasks\SO_Booster-S-017483117 => c:\programdata\brilliantinstaller\so_booster\SO_Booster.exe [2013-06-08] () <==== ATTENTION
Task: C:\Windows\Tasks\SO_Booster-S-017483117.job => c:\programdata\brilliantinstaller\so_booster\SO_Booster.exe
cmd: netsh winsock reset
cmd: ipconfig /flushdns
C:\Users\REACTORUL\AppData\Local\Temp
end
*****************

C:\ProgramData\BrilliantInstaller\SO_Booster\SO_Booster.exe => No running process found
C:\ProgramData\BrilliantInstaller => Moved successfully.
[4332] C:\Users\REACTORUL\AppData\Local\Temp\svchoste.exe => Process closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\9ca71c12e248b24005cc0556c6384115 => value deleted successfully.
HKU\S-1-5-21-3466372072-2229856283-2406641192-1000\Software\Microsoft\Windows\CurrentVersion\Run\\9ca71c12e248b24005cc0556c6384115 => value deleted successfully.
C:\Users\REACTORUL\AppData\Local\Temp\svchoste.exe => Moved successfully.
'HKU\S-1-5-21-3466372072-2229856283-2406641192-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3129ea97-e1e0-11e3-8aef-94de80b5f8db}' => Key deleted successfully.
'HKCR\CLSID\{3129ea97-e1e0-11e3-8aef-94de80b5f8db}'=> Key not found.
"C:\PROGRA~2\SO_BOO~1\ASSIST~2.DLL" => Value Data not found.
"c:\progra~2\so_boo~1\assist~1.dll" => Value Data not found.
C:\Users\REACTORUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\yy.exe => Moved successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0AADAF38-5D5B-ECBE-FBBC-55CC9F958C3F}'=> Key not found.
'HKCR\CLSID\{0AADAF38-5D5B-ECBE-FBBC-55CC9F958C3F}' => Key deleted successfully.
C:\ProgramData\SaverExteEnsiOnn => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{23C24FE7-5D35-5D74-BC80-E5F4FAA4FA70}'=> Key not found.
'HKCR\CLSID\{23C24FE7-5D35-5D74-BC80-E5F4FAA4FA70}' => Key deleted successfully.
C:\Program Files (x86)\save, On => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25BE78E2-B767-21FA-EBF3-03B43BC625FC}' => Key deleted successfully.
'HKCR\CLSID\{25BE78E2-B767-21FA-EBF3-03B43BC625FC}' => Key deleted successfully.
C:\Program Files (x86)\SAve on => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4828250D-AD5F-70A4-680B-8273E3E93AF8}'=> Key not found.
'HKCR\CLSID\{4828250D-AD5F-70A4-680B-8273E3E93AF8}' => Key deleted successfully.
C:\ProgramData\TakETTheCoupon => Moved successfully.
'HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0AADAF38-5D5B-ECBE-FBBC-55CC9F958C3F}'=> Key not found.
'HKCR\Wow6432Node\CLSID\{0AADAF38-5D5B-ECBE-FBBC-55CC9F958C3F}' => Key deleted successfully.
'HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{23C24FE7-5D35-5D74-BC80-E5F4FAA4FA70}'=> Key not found.
'HKCR\Wow6432Node\CLSID\{23C24FE7-5D35-5D74-BC80-E5F4FAA4FA70}' => Key deleted successfully.
'HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25BE78E2-B767-21FA-EBF3-03B43BC625FC}' => Key deleted successfully.
'HKCR\Wow6432Node\CLSID\{25BE78E2-B767-21FA-EBF3-03B43BC625FC}' => Key deleted successfully.
'HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4828250D-AD5F-70A4-680B-8273E3E93AF8}'=> Key not found.
'HKCR\Wow6432Node\CLSID\{4828250D-AD5F-70A4-680B-8273E3E93AF8}' => Key deleted successfully.
C:\Users\REACTORUL\AppData\Roaming\Mozilla\Firefox\Profiles\l7ash05c.default\Extensions\7ayyalzr@u-c.edu => Moved successfully.
C:\Users\REACTORUL\AppData\Roaming\Mozilla\Firefox\Profiles\l7ash05c.default\Extensions\bfdckw@opmhvdl.edu => Moved successfully.
C:\Users\REACTORUL\AppData\Roaming\Mozilla\Firefox\Profiles\l7ash05c.default\Extensions\e7njna-uu@frobpyeii.net => Moved successfully.
C:\Users\REACTORUL\AppData\Roaming\Mozilla\Firefox\Profiles\l7ash05c.default\Extensions\iygju@eiaycqyyg.org => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\jicmmoedimfidlkbpkgjifpegcfmegpc => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfckdjfpmpemamfpdflomlnhbcdjbeha => Moved successfully.
'HKLM\SOFTWARE\Policies\Google' => Key deleted successfully.
29850aa3 => Service not found.
C:\Users\REACTORUL\WindowsUpdate.exe => Moved successfully.
"C:\Windows\Tasks\SO_Booster-S-017483117.job" => File/Directory not found.
"C:\Windows\System32\Tasks\SO_Booster-S-017483117" => File/Directory not found.
"C:\Program Files (x86)\SO_Booster" => File/Directory not found.
C:\ProgramData\save, On => Moved successfully.
C:\ProgramData\663c5736b33815e1 => Moved successfully.
C:\ProgramData\InstallMate => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A400C14A-02DA-448F-95CA-05A4EE8B95AF}'=> Key not found.
C:\Windows\System32\Tasks\SO_Booster-S-017483117 not found.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SO_Booster-S-017483117'=> Key not found.
C:\Windows\Tasks\SO_Booster-S-017483117.job not found.

=========  netsh winsock reset =========


Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.


========= End of CMD: =========


=========  ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========


"C:\Users\REACTORUL\AppData\Local\Temp" directory move:

C:\Users\REACTORUL\AppData\Local\Temp\+~JF7705937211813728497.tmp => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\+~JF7717368624075044369.tmp => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\+~JF8112907022307930988.tmp => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\AdobeARM.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\ASPNETSetup_00000.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\ASPNETSetup_00001.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\Attach.txt => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\AUCHECK_PARSER.txt => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\DDS.txt => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\dd_NDP45-KB2898869-x64_decompression_log.txt => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\dd_NDP45-KB2901126-x64_decompression_log.txt => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\dd_NDP45-KB2931368-x64_decompression_log.txt => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\DMI1A00.tmp => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\DMI595.tmp => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\DMI651.tmp => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\DMIBAC1.tmp => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\DMIE56E.tmp => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\DMIE5F5.tmp => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\EPOKXP.tmp.app2HTML => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\etilqs_6a79Ml2wCeYkfip => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\etilqs_d3qtYat4cT3MpmC => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\etilqs_ELnY27lnH6XaGMe => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\etilqs_iZ0w9Xdgn2zIxRJ => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\etilqs_J9XSAf8AZ9fJjhf => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\etilqs_tJzQNyCPgdF1WVE => Moved successfully.
Could not move "C:\Users\REACTORUL\AppData\Local\Temp\FXSAPIDebugLogFile.txt" => Scheduled to move on reboot.
C:\Users\REACTORUL\AppData\Local\Temp\JAUReg.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\JavaDeployReg.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\java_install.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\java_install_reg.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\jusched.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\KB2898869_20140607_104404218-Microsoft .NET Framework 4.5.1-MSP0.txt => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\KB2898869_20140607_104404218.html => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\KB2901126_20140607_101931014-Microsoft .NET Framework 4.5.1-MSP0.txt => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\KB2901126_20140607_101931014.html => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\KB2931368_20140607_094749386-Microsoft .NET Framework 4.5.1-MSP0.txt => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\KB2931368_20140607_094749386.html => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\KiesInstall.Log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MSI12706.LOG => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MSIc64b.LOG => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\msvcp100.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\msvcr100.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\nss3.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\RDA841.tmp => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\RGI6692.tmp => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\RGI6692.tmp-tmp => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\SetupAdmin9CC.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\Skype.msi => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\tmp50A.tmp => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\tmp50A.tmp.exe => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\tmp9855.tmp => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\tmp9855.tmp.exe => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\TunnelBear_20140622093701.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\TunnelBear_20140622093701_0_TBear.Setup.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\TunnelBear_Installer_635390266284907840.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\uninstall.dat => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\Uninstall.exe => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\uninstall30925.exe => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\wmsetup.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\_iu14D2N.tmp => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\__ASMedia_Installer.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\__tmp_11d3ce79 => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\~DF00CBF2E3E0D4729C.TMP => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\{C4DDC63B-232E-4A1F-9CF6-EC2172E4C588}\ISBEW64.exe => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\SimCity\0x10c83361!1762653858709798212.jpg => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\plugtmp-2\plugin-crossdomain-1.xml => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\plugtmp-2\plugin-crossdomain-2.xml => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_15f74c7777689be5_0_0.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_15f74c7777689be5_0_0.toc => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_15f74c7777689be5_0_1.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_15f74c7777689be5_0_1.toc => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_4d99a46b71e1fac1_0_0.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_4d99a46b71e1fac1_0_0.toc => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_4d99a46b71e1fac1_0_1.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_4d99a46b71e1fac1_0_1.toc => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_4d99a46b71e1fac1_0_2.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_4d99a46b71e1fac1_0_2.toc => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_4d99a46b71e1fac1_0_3.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_5fd2c11ebece692d_0_0.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_5fd2c11ebece692d_0_0.toc => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_5fd2c11ebece692d_0_1.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_5fd2c11ebece692d_0_1.toc => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_5fd2c11ebece692d_0_2.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_8e912777872ba4e3_0_0.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_8e912777872ba4e3_0_0.toc => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\26b5dc9e48691a8035dafb2b7ed76562_fce8395f8fd8a84b_8e912777872ba4e3_0_1.bin => Moved successfully.
Could not move "C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_6229ccd76215aea1_0_0.bin" => Scheduled to move on reboot.
Could not move "C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_6229ccd76215aea1_0_0.toc" => Scheduled to move on reboot.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_62e6fe8886721168_0_0.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_62e6fe8886721168_0_0.toc => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_62e6fe8886721168_0_1.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_62e6fe8886721168_0_1.toc => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_62e6fe8886721168_0_2.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_62e6fe8886721168_0_2.toc => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_62e6fe8886721168_0_3.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_f20ce0490e0177f4_0_0.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_f20ce0490e0177f4_0_0.toc => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_f20ce0490e0177f4_0_1.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_f20ce0490e0177f4_0_1.toc => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_f20ce0490e0177f4_0_2.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_f20ce0490e0177f4_0_2.toc => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_f20ce0490e0177f4_0_3.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_f20ce0490e0177f4_0_4.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_f20ce0490e0177f4_0_5.bin => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\MaAgent.exe => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\MAAuthProc.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\MACLICX13.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\MACLicX15.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\MACSMANAGER.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\MaCSMgr.exe => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\MaCSProHook.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\mapshapi.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\mapwij10.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\MaSyncP.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\MaWAMP.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\MAWebControl.exe => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\MaWMP.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\MPXBox.exe => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\MtpAccess.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\UserShare.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\XSYNCClt.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAFileUpdate.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdate.exe => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdateBoot.exe => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MaUpdateClient.exe => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\KiesTemporary\avrt.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\KiesTemporary\InstallSetting.cfg => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\KiesTemporary\wlanapi.dll => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\Intel\Logs\Chipset_20140607084541.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\Intel\Logs\Chipset_20140607084541_0_SetupChipsetx64.msi.log => Moved successfully.
C:\Users\REACTORUL\AppData\Local\Temp\Intel\Logs\Chipset_20140620135634.log => Moved successfully.
Could not move "C:\Users\REACTORUL\AppData\Local\Temp" directory. => Scheduled to move on reboot.


=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-06-24 08:40:40)<=

C:\Users\REACTORUL\AppData\Local\Temp\FXSAPIDebugLogFile.txt => Is moved successfully.
"C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_6229ccd76215aea1_0_0.bin" => File could not move.
"C:\Users\REACTORUL\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_6229ccd76215aea1_0_0.toc" => File could not move.
"C:\Users\REACTORUL\AppData\Local\Temp" => Directory could not move.

==== End of Fixlog ====

Attached Files



#6 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:11:43 PM

Posted 24 June 2014 - 02:00 AM

Hello,

 

svchoste.exe is gone !!! Thanks so much.

 

Ok, I am glad I could help!

 

I'm afraid I cannot send you that files,I'm sorry!

 

Can I ask why? You can protect a lot of users by sending this folder for my review!

 

 

Regards,

Georgi


cXfZ4wS.png


#7 calinoi

calinoi
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:10:43 PM

Posted 24 June 2014 - 03:02 AM

I'm afraid that it contains infos about my pc,accounts,etc.



#8 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:11:43 PM

Posted 24 June 2014 - 03:26 AM

No...The folder contains only the quarantined files that we removed from your computer.

Ok here is another way for your assurance:

 

Please open the folder C:\FRST\Quarantine and press Ctrl + F. Type in svchoste.exe and then please upload it to www.bleepingcomputer.com/submit-malware.php?channel=122 so I can examine the files and submit to antivirus companies if needed.

Repeat the steps and upload to my channel the following files as well:

yy.exe
WindowsUpdate.exe

 

Thanks for your cooperation!

 

 

Regards,

Georgi


cXfZ4wS.png


#9 calinoi

calinoi
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:10:43 PM

Posted 24 June 2014 - 12:16 PM

Okay,I did so with that files.Thanks again for everything!



#10 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:11:43 PM

Posted 25 June 2014 - 01:31 AM

Hello,

 

 

Nice work! We managed to deal with the trojan. :)

 

However I want to make sure there is nothing lurking on the system so just in case I want you to go through these steps:

 

The most of them should take no more than 5 minutes each (but the time they take to complete can vary depending on the size of your hard and the speed of your computer).

 

 

STEP 1

 

 

  • Please download RKill by Grinler from the link below and save it to your desktop.

    Rkill
  • Before we begin, you should disable your anti-malware softwares you have installed so they do not interfere RKill running as some anti-malware softwares detect RKill as malicious. Please refer to this page if you are not sure how.
  • Double-click on Rkill on your desktop to run it. (If you are using Windows Vista, please right-click on it and select Run As Administrator)
  • A black screen will appear and then disappear. Please do not worry, that is normal. This means that the tool has been successfully executed.
  • If nothing happens or if the tool does not run, please let me know in your next reply.
  • A log pops up at the end of the run. This log file is located at C:\rkill.log.
  • Please post the log in your next reply.

 

 

STEP 2

 

 

  • Please download RogueKillerx64.exe and save to the desktop.
  • Close all windows and browsers
  • Right-click the program and select 'Run as Administrator'
  • Press the scan button.
  • A report opens on the desktop named - RKreport.txt
  • Please copy and past the results at pastebin.com and post the link to the log in your next reply.

 

 

STEP 3
 

 

Please download the latest version of TDSSKiller from here and save it to your Desktop.

  • Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
     
  • Put a checkmark beside loaded modules.
    Sbf88.png
  • A reboot will be needed to apply the changes. Do it.
  • TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is normal. Give it enough time to load your background programs.
  • Then click on Change parameters in TDSSKiller.
  • Check all boxes then click OK.
     
  • Click the Start Scan button.
     
  • The scan should take no longer than 2 minutes.
  • If a suspicious object is detected, the default action will be Skip, click on Continue.
    67776163.jpg
  • If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
    Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
    62117367.jpg
    Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
  • A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and past the results at pastebin.com and post the link to the log in your next reply.

 

 

STEP 4

 

 

Please download Malwarebytes Anti-Malware to your desktop.
 

  • Double-click mbam-setup-2.0.2.1007.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to the following:
    • Launch Malwarebytes Anti-Malware
    • A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.
  • Click Finish.
  • On the Settings tab > Detection and Protection subtab, Detection Options, tick the box 'Scan for rootkits'.
  • Click on the Scan tab, then click on Scan Now >> . If an update is available, click the Update Now button.
  • A Threat Scan will begin.
  • With some infections, you may see this message box.
    • 'Could not load DDA driver'
  • Click 'Yes' to this message, to allow the driver to load after a restart.
  • Allow the computer to restart. Continue with the rest of these instructions.
  • When the scan is complete, click Apply Actions.
  • Wait for the prompt to restart the computer to appear, then click on Yes.
  • After the restart once you are back at your desktop, open MBAM once more.
  • Click on the History tab > Application Logs.
  • Double click on the scan log which shows the Date and time of the scan just performed.
  • Click 'Copy to Clipboard'
  • Paste the contents of the clipboard into your reply.

 

 

STEP 5

 

 

1.Please download HitmanPro.

  • For 32-bit Operating System - dEMD6.gif.
  • This is the mirror - dEMD6.gif
  • For 64-bit Operating System - dEMD6.gif
  • This is the mirror - dEMD6.gif

2.Launch the program by double clicking on the 5vo5F.jpg icon. (Windows Vista/7 users right click on the HitmanPro icon and select run as administrator).

Note: If the program won't run please then open the program while holding down the left CTRL key until the program is loaded.

3.Click on the next button. You must agree with the terms of EULA. (if asked)

4.Check the box beside "No, I only want to perform a one-time scan to check this computer".

5.Click on the next button.

6.The program will start to scan the computer. The scan will typically take no more than 2-3 minutes.

7.When the scan is done click on drop-down menu of the found entries (if any) and choose - Apply to all => Ignore <= IMPORTANT!!!
 
8.Click on the next button.

9.Click on the "Save Log" button.

10.Save that file to your desktop and post the content of that file in your next reply.
 
Note: if there isn't a dropdown menu when the scan is done then please don't delete anything and close HitmanPro

Navigate to C:\ProgramData\HitmanPro\Logs open the report and copy and paste it to your next reply.

 

 

 

Regards,

Georgi


cXfZ4wS.png


#11 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:11:43 PM

Posted 29 June 2014 - 02:42 PM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.

cXfZ4wS.png





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users