Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Rootkit infection by USB-drive. Windows update acts weird. Fake Antivirus.


  • This topic is locked This topic is locked
27 replies to this topic

#1 MagicTux

MagicTux

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:50 AM

Posted 03 May 2016 - 02:45 PM

Hi guys

 

Once again I'm in trouble I have been infected on all my machines with some rootkit. I ended up buying a new motherboard and all was running fine until I made a very stupid mistake! I actually ended up sticking a wrong USB-drive into the new machine and it got infected too. Stupid me but immediately when I putted the USB in my MalwareBytes Anti Malware and Bitdefender ended as not responding the screen turned also black for a while so I ended up rebooting.
 

I have for a while been getting weird entries in the Rootkit/Malware tab in Gmer. I have also noticed some strange executables running among processes.

All described as Windows services but you could easily see that those executables didn't belong to a clean Windows 7 install or Windows 8.1 install.

Windows update is acting strange. I get noticed about updates and can download and install them but when installation is done and I have to reboot it reverts all the updates.

Another reason for me that supports the idea of infection is that when I use Steam and Bitdefender, normally on a clean machine Bitdefender actually blocks the webpages inside of Steam but it doesn't anymore, could that be caused of running an fake Antivirus or? Some times I feel stuttering in the mouse and keyboard but my PC is freshly installed and is quite good.

I have been using DBAN to wipe all disks, formatted them and reinstalled but I keep getting infected. All above mentioned returns.
Any feedback would be awesome since I'm becoming quite desperate!

FRST log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:03-05-2016
Ran by MO (administrator) on MO-PC (03-05-2016 21:41:13)
Running from C:\Users\MO\Downloads
Loaded Profiles: MO (Available Profiles: MO)
Platform: Windows 8.1 Enterprise (Update 1) (X64) Language: Dansk (Danmark)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Valve Corporation) C:\Games\Steam\Steam.exe
() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
(Valve Corporation) C:\Games\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Games\Steam\bin\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17709_none_fa7932f59afc2e40\TiWorker.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(AVAST Software) C:\Users\MO\Downloads\aswmbr.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sysinternals - www.sysinternals.com) C:\Users\MO\Downloads\ProcessExplorer\procexp.exe
(Sysinternals - www.sysinternals.com) C:\Users\MO\AppData\Local\Temp\procexp64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\MO\Downloads\94ld40gr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [322472 2015-06-23] (Intel Corporation)
HKU\S-1-5-21-2428884997-516092901-2209752320-1001\...\Run: [Steam] => C:\Games\Steam\steam.exe [3077712 2016-03-31] (Valve Corporation)
HKU\S-1-5-21-2428884997-516092901-2209752320-1001\...\MountPoints2: {cf94686f-112b-11e6-824f-806e6f6e6963} - "D:\Run.exe" 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2016-05-03]
ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{401FADAA-1C16-4721-9F02-19067E1A1CA8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{EAD46EE9-00E2-4B29-84F0-0BD2CF4ACB71}: [DhcpNameServer] 192.168.0.1
 
Internet Explorer:
==================
 
FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-05-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-05-03] (Google Inc.)
 
Chrome: 
=======
CHR Profile: C:\Users\MO\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Præsentation) - C:\Users\MO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-05-03]
CHR Extension: (Google Dokumenter) - C:\Users\MO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-05-03]
CHR Extension: (Google Drev) - C:\Users\MO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-03]
CHR Extension: (YouTube) - C:\Users\MO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-03]
CHR Extension: (Google Ark) - C:\Users\MO\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-05-03]
CHR Extension: (Google Docs Offline) - C:\Users\MO\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-03]
CHR Extension: (Betalinger i Chrome Webshop) - C:\Users\MO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-03]
CHR Extension: (Gmail) - C:\Users\MO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-03]
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-23] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344168 2015-08-10] (Intel Corporation)
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [343040 2013-08-08] (Qualcomm Atheros) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
S4 ProductAgentService; "C:\Program Files\Bitdefender Agent\ProductAgentService.exe" [X]
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [75056 2013-02-13] (Qualcomm Atheros, Inc.)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 Ke2200; C:\Windows\system32\DRIVERS\e22w8x64.sys [163536 2013-03-20] (Qualcomm Atheros, Inc.)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [184608 2015-07-07] (Intel Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
U4 avc3; system32\DRIVERS\avc3.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
U3 aswMBR; \??\C:\Users\MO\AppData\Local\Temp\aswMBR.sys [X]
U3 aswVmm; \??\C:\Users\MO\AppData\Local\Temp\aswVmm.sys [X]
U3 pxldypoc; \??\C:\Users\MO\AppData\Local\Temp\pxldypoc.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-05-03 21:41 - 2016-05-03 21:41 - 00008223 _____ C:\Users\MO\Downloads\FRST.txt
2016-05-03 21:40 - 2016-05-03 21:41 - 00000000 ____D C:\FRST
2016-05-03 21:36 - 2016-05-03 21:36 - 02377216 _____ (Farbar) C:\Users\MO\Downloads\FRST64.exe
2016-05-03 21:25 - 2016-05-03 21:25 - 00027618 _____ C:\ProgramData\1462303509.bdinstall.bin
2016-05-03 21:24 - 2016-05-03 21:24 - 00239763 _____ C:\ProgramData\1462303331.bdinstall.bin
2016-05-03 21:24 - 2016-05-03 21:24 - 00000000 __SHD C:\Users\MO\AppData\LocalLow\EmieSiteList
2016-05-03 21:24 - 2016-05-03 21:24 - 00000000 __SHD C:\Users\MO\AppData\Local\EmieUserList
2016-05-03 21:24 - 2016-05-03 21:24 - 00000000 __SHD C:\Users\MO\AppData\Local\EmieSiteList
2016-05-03 21:22 - 2016-05-03 21:22 - 05168776 _____ (AVAST Software) C:\Users\MO\Downloads\avast_free_antivirus_setup_online.exe
2016-05-03 21:22 - 2016-05-03 21:22 - 01270466 _____ C:\Users\MO\Downloads\ProcessExplorer.zip
2016-05-03 21:22 - 2016-05-03 21:22 - 00000000 ____D C:\Users\MO\Downloads\ProcessExplorer
2016-05-03 21:16 - 2016-05-03 21:16 - 05200384 _____ (AVAST Software) C:\Users\MO\Downloads\aswmbr.exe
2016-05-03 21:15 - 2016-05-03 21:15 - 00380928 _____ C:\Users\MO\Downloads\94ld40gr.exe
2016-05-03 21:13 - 2016-05-03 21:13 - 00000034 _____ C:\Windows\system32\STOOLSubmit.ret
2016-05-03 21:11 - 2016-05-03 21:13 - 00000000 ____D C:\ProgramData\Dumps
2016-05-03 17:39 - 2016-03-10 19:03 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dsparse.dll
2016-05-03 17:39 - 2016-03-10 18:48 - 00024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsparse.dll
2016-05-03 17:39 - 2016-02-27 20:28 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-05-03 17:39 - 2016-02-27 19:57 - 03273728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2016-05-03 17:39 - 2016-02-27 19:19 - 03820544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-05-03 17:39 - 2016-02-27 18:32 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-05-03 17:23 - 2016-05-03 17:23 - 00000000 ____D C:\Windows\pss
2016-05-03 17:16 - 2016-05-03 20:31 - 00000000 ____D C:\Users\MO\Desktop\mbar
2016-05-03 17:16 - 2016-05-03 20:31 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-05-03 17:16 - 2016-05-03 20:20 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-05-03 17:16 - 2016-05-03 20:19 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-05-03 17:16 - 2016-05-03 17:16 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-05-03 17:11 - 2014-10-29 05:56 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2016-05-03 17:11 - 2014-10-29 04:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll
2016-05-03 17:09 - 2016-05-03 17:09 - 00000000 ____D C:\Users\MO\AppData\Local\Steam
2016-05-03 17:09 - 2016-05-03 17:09 - 00000000 ____D C:\Users\MO\AppData\Local\CEF
2016-05-03 17:08 - 2016-05-03 17:08 - 00000680 _____ C:\Users\Public\Desktop\Steam.lnk
2016-05-03 17:08 - 2016-05-03 17:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-05-03 17:08 - 2016-05-03 17:08 - 00000000 ____D C:\Games
2016-05-03 17:05 - 2016-05-03 17:05 - 00000118 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-05-03 16:52 - 2014-02-22 18:59 - 01290688 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-05-03 16:52 - 2014-02-22 17:55 - 01435304 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-05-03 16:52 - 2014-02-22 17:53 - 03394384 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2016-05-03 16:52 - 2014-02-22 17:50 - 02588168 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2016-05-03 16:52 - 2014-02-22 17:48 - 02574240 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-05-03 16:52 - 2014-02-22 17:46 - 01927600 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-05-03 16:52 - 2014-02-22 17:46 - 01445616 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
2016-05-03 16:52 - 2014-02-22 17:41 - 02142976 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-05-03 16:52 - 2014-02-22 16:38 - 01374384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-05-03 16:52 - 2014-02-22 16:08 - 01474104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-05-03 16:52 - 2014-02-22 16:04 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-05-03 16:52 - 2014-02-22 14:15 - 04192768 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-05-03 16:52 - 2014-02-22 14:08 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll
2016-05-03 16:52 - 2014-02-22 13:44 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-05-03 16:52 - 2014-02-22 13:17 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OobeFldr.dll
2016-05-03 16:52 - 2014-02-22 13:00 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-05-03 16:52 - 2014-02-22 12:44 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-05-03 16:52 - 2014-02-22 12:36 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-05-03 16:52 - 2014-02-22 12:34 - 11742720 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2016-05-03 16:52 - 2014-02-22 12:06 - 02943488 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2016-05-03 16:52 - 2014-02-22 12:02 - 08946688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2016-05-03 16:52 - 2014-02-22 11:52 - 01132032 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2016-05-03 16:52 - 2014-02-22 11:47 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-05-03 16:52 - 2014-02-22 11:39 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-03 16:52 - 2014-02-22 11:33 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-05-03 16:52 - 2014-02-22 11:28 - 02643456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2016-05-03 16:52 - 2014-02-22 11:23 - 03494912 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-05-03 16:52 - 2014-02-22 11:23 - 02843136 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-05-03 16:52 - 2014-02-22 11:23 - 01576960 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2016-05-03 16:52 - 2014-02-22 11:23 - 00628224 _____ (Microsoft Corporation) C:\Windows\system32\msTextPrediction.dll
2016-05-03 16:52 - 2014-02-22 11:16 - 11776000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-05-03 16:52 - 2014-02-22 11:13 - 01728000 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll
2016-05-03 16:52 - 2014-02-22 11:11 - 02262016 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-05-03 16:52 - 2014-02-22 11:11 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2016-05-03 16:52 - 2014-02-22 11:01 - 13933568 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-05-03 16:52 - 2014-02-22 11:00 - 01341440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dui70.dll
2016-05-03 16:52 - 2014-02-22 10:54 - 00647168 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-05-03 16:52 - 2014-02-22 10:53 - 12027904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-05-03 16:52 - 2014-02-22 10:49 - 08874496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-05-03 16:52 - 2014-02-22 10:42 - 03408384 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-05-03 16:52 - 2014-02-22 10:40 - 02368512 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-05-03 16:52 - 2014-02-22 10:37 - 01716736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2016-05-03 16:52 - 2014-02-22 10:34 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2016-05-03 16:52 - 2014-02-22 10:32 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-05-03 16:52 - 2014-02-22 10:06 - 01640960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-05-03 16:52 - 2014-02-22 10:04 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2016-05-03 16:52 - 2014-02-08 03:08 - 00139600 _____ C:\Windows\system32\systemsf.ebd
2016-05-03 16:51 - 2014-02-22 18:59 - 01519520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-05-03 16:51 - 2014-02-22 18:59 - 00526304 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-05-03 16:51 - 2014-02-22 18:59 - 00461176 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2016-05-03 16:51 - 2014-02-22 18:59 - 00407536 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2016-05-03 16:51 - 2014-02-22 18:59 - 00289752 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
2016-05-03 16:51 - 2014-02-22 18:59 - 00209160 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll
2016-05-03 16:51 - 2014-02-22 18:59 - 00139464 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2016-05-03 16:51 - 2014-02-22 18:59 - 00123448 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-05-03 16:51 - 2014-02-22 18:58 - 00036200 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2016-05-03 16:51 - 2014-02-22 18:15 - 01929608 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2016-05-03 16:51 - 2014-02-22 18:15 - 01206000 _____ (Microsoft Corporation) C:\Windows\system32\Taskmgr.exe
2016-05-03 16:51 - 2014-02-22 18:15 - 00531128 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-05-03 16:51 - 2014-02-22 18:15 - 00275312 _____ (Microsoft Corporation) C:\Windows\system32\powrprof.dll
2016-05-03 16:51 - 2014-02-22 18:15 - 00188464 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2016-05-03 16:51 - 2014-02-22 18:15 - 00071888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpfve.sys
2016-05-03 16:51 - 2014-02-22 18:02 - 00170952 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-05-03 16:51 - 2014-02-22 18:02 - 00083120 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2016-05-03 16:51 - 2014-02-22 18:02 - 00080048 _____ (Microsoft Corporation) C:\Windows\system32\taskhostex.exe
2016-05-03 16:51 - 2014-02-22 18:00 - 00590168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-05-03 16:51 - 2014-02-22 18:00 - 00249688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2016-05-03 16:51 - 2014-02-22 18:00 - 00236888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2016-05-03 16:51 - 2014-02-22 18:00 - 00151384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2016-05-03 16:51 - 2014-02-22 18:00 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fileinfo.sys
2016-05-03 16:51 - 2014-02-22 17:59 - 00032088 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2016-05-03 16:51 - 2014-02-22 17:59 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2016-05-03 16:51 - 2014-02-22 17:55 - 00388408 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-05-03 16:51 - 2014-02-22 17:55 - 00244848 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-05-03 16:51 - 2014-02-22 17:55 - 00162176 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
2016-05-03 16:51 - 2014-02-22 17:55 - 00152848 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2016-05-03 16:51 - 2014-02-22 17:55 - 00131168 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe
2016-05-03 16:51 - 2014-02-22 17:55 - 00105864 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2016-05-03 16:51 - 2014-02-22 17:53 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-05-03 16:51 - 2014-02-22 17:50 - 00761792 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2016-05-03 16:51 - 2014-02-22 17:50 - 00645104 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2016-05-03 16:51 - 2014-02-22 17:50 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2016-05-03 16:51 - 2014-02-22 17:50 - 00258784 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2016-05-03 16:51 - 2014-02-22 17:50 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\RestoreOptIn.exe
2016-05-03 16:51 - 2014-02-22 17:50 - 00054816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2016-05-03 16:51 - 2014-02-22 17:50 - 00043408 _____ (Microsoft Corporation) C:\Windows\system32\CloudNotifications.exe
2016-05-03 16:51 - 2014-02-22 17:50 - 00032544 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountBroker.exe
2016-05-03 16:51 - 2014-02-22 17:49 - 00384856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-05-03 16:51 - 2014-02-22 17:49 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-05-03 16:51 - 2014-02-22 17:49 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2016-05-03 16:51 - 2014-02-22 17:49 - 00280920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-05-03 16:51 - 2014-02-22 17:49 - 00189784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2016-05-03 16:51 - 2014-02-22 17:49 - 00148824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-05-03 16:51 - 2014-02-22 17:49 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2016-05-03 16:51 - 2014-02-22 17:49 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdstor.sys
2016-05-03 16:51 - 2014-02-22 17:48 - 00210736 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2016-05-03 16:51 - 2014-02-22 17:46 - 01000424 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-05-03 16:51 - 2014-02-22 17:46 - 00669896 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-05-03 16:51 - 2014-02-22 17:44 - 00924504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2016-05-03 16:51 - 2014-02-22 17:44 - 00539992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2016-05-03 16:51 - 2014-02-22 17:44 - 00424280 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2016-05-03 16:51 - 2014-02-22 17:44 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2016-05-03 16:51 - 2014-02-22 17:44 - 00311640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2016-05-03 16:51 - 2014-02-22 17:43 - 01727760 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-05-03 16:51 - 2014-02-22 17:43 - 01659056 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-05-03 16:51 - 2014-02-22 17:43 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-05-03 16:51 - 2014-02-22 17:43 - 01487520 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-05-03 16:51 - 2014-02-22 17:43 - 01356360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-05-03 16:51 - 2014-02-22 17:43 - 00142576 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-05-03 16:51 - 2014-02-22 17:43 - 00094560 _____ (Microsoft Corporation) C:\Windows\system32\bcd.dll
2016-05-03 16:51 - 2014-02-22 17:41 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-05-03 16:51 - 2014-02-22 17:41 - 01374384 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-05-03 16:51 - 2014-02-22 17:41 - 01215832 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-05-03 16:51 - 2014-02-22 17:41 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-05-03 16:51 - 2014-02-22 17:41 - 00800552 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-05-03 16:51 - 2014-02-22 17:41 - 00609456 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-05-03 16:51 - 2014-02-22 17:41 - 00391008 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2016-05-03 16:51 - 2014-02-22 17:41 - 00372360 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2016-05-03 16:51 - 2014-02-22 17:41 - 00324896 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2016-05-03 16:51 - 2014-02-22 17:41 - 00028416 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-05-03 16:51 - 2014-02-22 17:40 - 01118552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-05-03 16:51 - 2014-02-22 16:52 - 01767440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
2016-05-03 16:51 - 2014-02-22 16:52 - 00251504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powrprof.dll
2016-05-03 16:51 - 2014-02-22 16:51 - 01063976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Taskmgr.exe
2016-05-03 16:51 - 2014-02-22 16:51 - 00140456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2016-05-03 16:51 - 2014-02-22 16:42 - 01017936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-05-03 16:51 - 2014-02-22 16:42 - 00422968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-05-03 16:51 - 2014-02-22 16:42 - 00410568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2016-05-03 16:51 - 2014-02-22 16:42 - 00369288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2016-05-03 16:51 - 2014-02-22 16:42 - 00232896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll
2016-05-03 16:51 - 2014-02-22 16:42 - 00137344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2016-05-03 16:51 - 2014-02-22 16:42 - 00098072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2016-05-03 16:51 - 2014-02-22 16:41 - 00033056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2016-05-03 16:51 - 2014-02-22 16:38 - 01077944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webservices.dll
2016-05-03 16:51 - 2014-02-22 16:38 - 00506120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-05-03 16:51 - 2014-02-22 16:38 - 00336232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-05-03 16:51 - 2014-02-22 16:38 - 00089848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2016-05-03 16:51 - 2014-02-22 16:25 - 02410496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-05-03 16:51 - 2014-02-22 16:25 - 00180240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
2016-05-03 16:51 - 2014-02-22 16:18 - 00477744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2016-05-03 16:51 - 2014-02-22 16:18 - 00419928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2016-05-03 16:51 - 2014-02-22 16:18 - 00089848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RestoreOptIn.exe
2016-05-03 16:51 - 2014-02-22 16:18 - 00041320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudNotifications.exe
2016-05-03 16:51 - 2014-02-22 16:18 - 00029912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserAccountBroker.exe
2016-05-03 16:51 - 2014-02-22 16:11 - 00490136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-05-03 16:51 - 2014-02-22 16:08 - 00079496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcd.dll
2016-05-03 16:51 - 2014-02-22 16:04 - 01206000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2016-05-03 16:51 - 2014-02-22 16:04 - 01011280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2016-05-03 16:51 - 2014-02-22 16:04 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-05-03 16:51 - 2014-02-22 16:04 - 00650736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2016-05-03 16:51 - 2014-02-22 16:04 - 00518552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-05-03 16:51 - 2014-02-22 16:04 - 00317584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2016-05-03 16:51 - 2014-02-22 16:04 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
2016-05-03 16:51 - 2014-02-22 16:04 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2016-05-03 16:51 - 2014-02-22 14:24 - 02825216 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-05-03 16:51 - 2014-02-22 14:22 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2016-05-03 16:51 - 2014-02-22 14:20 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-05-03 16:51 - 2014-02-22 14:20 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-kernel-power-events.dll
2016-05-03 16:51 - 2014-02-22 14:17 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2016-05-03 16:51 - 2014-02-22 14:17 - 00890880 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2016-05-03 16:51 - 2014-02-22 14:17 - 00874496 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2016-05-03 16:51 - 2014-02-22 14:17 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\f3ahvoas.dll
2016-05-03 16:51 - 2014-02-22 14:17 - 00008192 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-ntuser-private-l1-1-1.dll
2016-05-03 16:51 - 2014-02-22 14:17 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-session-winsta-l1-1-0.dll
2016-05-03 16:51 - 2014-02-22 14:17 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-ntuser-private-l1-1-0.dll
2016-05-03 16:51 - 2014-02-22 14:17 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-kernel32-package-l1-1-1.dll
2016-05-03 16:51 - 2014-02-22 14:14 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2016-05-03 16:51 - 2014-02-22 14:14 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2016-05-03 16:51 - 2014-02-22 14:14 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\watchdog.sys
2016-05-03 16:51 - 2014-02-22 14:14 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2016-05-03 16:51 - 2014-02-22 14:11 - 00272896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-05-03 16:51 - 2014-02-22 14:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-05-03 16:51 - 2014-02-22 14:08 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll
2016-05-03 16:51 - 2014-02-22 14:08 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2016-05-03 16:51 - 2014-02-22 14:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-05-03 16:51 - 2014-02-22 14:08 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-05-03 16:51 - 2014-02-22 14:08 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-05-03 16:51 - 2014-02-22 14:07 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-05-03 16:51 - 2014-02-22 14:07 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-05-03 16:51 - 2014-02-22 14:07 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\WofUtil.dll
2016-05-03 16:51 - 2014-02-22 14:07 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\clrhost.dll
2016-05-03 16:51 - 2014-02-22 14:06 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-05-03 16:51 - 2014-02-22 14:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2016-05-03 16:51 - 2014-02-22 14:03 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2016-05-03 16:51 - 2014-02-22 14:03 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
2016-05-03 16:51 - 2014-02-22 14:02 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-05-03 16:51 - 2014-02-22 14:01 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\spcompat.dll
2016-05-03 16:51 - 2014-02-22 14:00 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-05-03 16:51 - 2014-02-22 14:00 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2016-05-03 16:51 - 2014-02-22 14:00 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\lpksetupproxyserv.dll
2016-05-03 16:51 - 2014-02-22 13:57 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2016-05-03 16:51 - 2014-02-22 13:57 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2016-05-03 16:51 - 2014-02-22 13:54 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2016-05-03 16:51 - 2014-02-22 13:50 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll
2016-05-03 16:51 - 2014-02-22 13:50 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2016-05-03 16:51 - 2014-02-22 13:48 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll
2016-05-03 16:51 - 2014-02-22 13:47 - 00589312 _____ (Microsoft Corporation) C:\Windows\system32\vdsdyn.dll
2016-05-03 16:51 - 2014-02-22 13:47 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2016-05-03 16:51 - 2014-02-22 13:47 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2016-05-03 16:51 - 2014-02-22 13:46 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-05-03 16:51 - 2014-02-22 13:46 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-05-03 16:51 - 2014-02-22 13:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
2016-05-03 16:51 - 2014-02-22 13:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\fhevents.dll
2016-05-03 16:51 - 2014-02-22 13:42 - 00038680 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentServer.exe
2016-05-03 16:51 - 2014-02-22 13:41 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
2016-05-03 16:51 - 2014-02-22 13:39 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\fhsvcctl.dll
2016-05-03 16:51 - 2014-02-22 13:37 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
2016-05-03 16:51 - 2014-02-22 13:34 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\dmdskmgr.dll
2016-05-03 16:51 - 2014-02-22 13:32 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2016-05-03 16:51 - 2014-02-22 13:30 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-05-03 16:51 - 2014-02-22 13:29 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2016-05-03 16:51 - 2014-02-22 13:28 - 02428928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-05-03 16:51 - 2014-02-22 13:27 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\dot3mm.dll
2016-05-03 16:51 - 2014-02-22 13:25 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\recimg.exe
2016-05-03 16:51 - 2014-02-22 13:25 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2016-05-03 16:51 - 2014-02-22 13:25 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2016-05-03 16:51 - 2014-02-22 13:25 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2016-05-03 16:51 - 2014-02-22 13:25 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\f3ahvoas.dll
2016-05-03 16:51 - 2014-02-22 13:25 - 00008192 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-ntuser-private-l1-1-1.dll
2016-05-03 16:51 - 2014-02-22 13:25 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-ntuser-private-l1-1-0.dll
2016-05-03 16:51 - 2014-02-22 13:24 - 00800256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe
2016-05-03 16:51 - 2014-02-22 13:24 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2016-05-03 16:51 - 2014-02-22 13:24 - 00780288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe
2016-05-03 16:51 - 2014-02-22 13:24 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SSShim.dll
2016-05-03 16:51 - 2014-02-22 13:24 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-session-winsta-l1-1-0.dll
2016-05-03 16:51 - 2014-02-22 13:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-networking-wcmapi-l1-1-0.dll
2016-05-03 16:51 - 2014-02-22 13:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-kernel32-package-l1-1-1.dll
2016-05-03 16:51 - 2014-02-22 13:22 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2016-05-03 16:51 - 2014-02-22 13:22 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-05-03 16:51 - 2014-02-22 13:17 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-05-03 16:51 - 2014-02-22 13:17 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\DAMM.dll
2016-05-03 16:51 - 2014-02-22 13:17 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe
2016-05-03 16:51 - 2014-02-22 13:16 - 00617472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-05-03 16:51 - 2014-02-22 13:16 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-05-03 16:51 - 2014-02-22 13:16 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2016-05-03 16:51 - 2014-02-22 13:16 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2016-05-03 16:51 - 2014-02-22 13:16 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-05-03 16:51 - 2014-02-22 13:16 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clrhost.dll
2016-05-03 16:51 - 2014-02-22 13:15 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imm32.dll
2016-05-03 16:51 - 2014-02-22 13:14 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\cleanmgr.exe
2016-05-03 16:51 - 2014-02-22 13:13 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
2016-05-03 16:51 - 2014-02-22 13:11 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll
2016-05-03 16:51 - 2014-02-22 13:09 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-05-03 16:51 - 2014-02-22 13:09 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2016-05-03 16:51 - 2014-02-22 13:08 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2016-05-03 16:51 - 2014-02-22 13:08 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2016-05-03 16:51 - 2014-02-22 13:07 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-05-03 16:51 - 2014-02-22 13:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\StorageContextHandler.dll
2016-05-03 16:51 - 2014-02-22 13:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2016-05-03 16:51 - 2014-02-22 13:06 - 00148992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slc.dll
2016-05-03 16:51 - 2014-02-22 13:05 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\RASMM.dll
2016-05-03 16:51 - 2014-02-22 13:05 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\pnpclean.dll
2016-05-03 16:51 - 2014-02-22 13:05 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2016-05-03 16:51 - 2014-02-22 13:05 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentHost.dll
2016-05-03 16:51 - 2014-02-22 13:04 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
2016-05-03 16:51 - 2014-02-22 13:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-05-03 16:51 - 2014-02-22 13:02 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContent.dll
2016-05-03 16:51 - 2014-02-22 13:02 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll
2016-05-03 16:51 - 2014-02-22 13:01 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-05-03 16:51 - 2014-02-22 13:01 - 00112640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2016-05-03 16:51 - 2014-02-22 13:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-05-03 16:51 - 2014-02-22 12:59 - 01283584 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2016-05-03 16:51 - 2014-02-22 12:59 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2016-05-03 16:51 - 2014-02-22 12:59 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetapi.dll
2016-05-03 16:51 - 2014-02-22 12:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-05-03 16:51 - 2014-02-22 12:58 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2016-05-03 16:51 - 2014-02-22 12:58 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-05-03 16:51 - 2014-02-22 12:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\DAConn.dll
2016-05-03 16:51 - 2014-02-22 12:57 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll
2016-05-03 16:51 - 2014-02-22 12:57 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2016-05-03 16:51 - 2014-02-22 12:56 - 02862592 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2016-05-03 16:51 - 2014-02-22 12:56 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-05-03 16:51 - 2014-02-22 12:56 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
2016-05-03 16:51 - 2014-02-22 12:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\dmvdsitf.dll
2016-05-03 16:51 - 2014-02-22 12:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
2016-05-03 16:51 - 2014-02-22 12:55 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\SrTasks.exe
2016-05-03 16:51 - 2014-02-22 12:54 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-05-03 16:51 - 2014-02-22 12:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PkgMgr.exe
2016-05-03 16:51 - 2014-02-22 12:52 - 02288640 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2016-05-03 16:51 - 2014-02-22 12:52 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll
2016-05-03 16:51 - 2014-02-22 12:51 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
2016-05-03 16:51 - 2014-02-22 12:50 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2016-05-03 16:51 - 2014-02-22 12:50 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskpart.exe
2016-05-03 16:51 - 2014-02-22 12:47 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmdskmgr.dll
2016-05-03 16:51 - 2014-02-22 12:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2016-05-03 16:51 - 2014-02-22 12:47 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe
2016-05-03 16:51 - 2014-02-22 12:47 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-05-03 16:51 - 2014-02-22 12:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\dfp.exe
2016-05-03 16:51 - 2014-02-22 12:46 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\wbadmin.exe
2016-05-03 16:51 - 2014-02-22 12:44 - 00781824 _____ (Microsoft Corporation) C:\Windows\system32\pwcreator.exe
2016-05-03 16:51 - 2014-02-22 12:41 - 02566656 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2016-05-03 16:51 - 2014-02-22 12:41 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2016-05-03 16:51 - 2014-02-22 12:41 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-05-03 16:51 - 2014-02-22 12:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll
2016-05-03 16:51 - 2014-02-22 12:40 - 00304640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe
2016-05-03 16:51 - 2014-02-22 12:40 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2016-05-03 16:51 - 2014-02-22 12:39 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2016-05-03 16:51 - 2014-02-22 12:38 - 00390656 _____ (Microsoft Corporation) C:\Windows\system32\DfpCommon.dll
2016-05-03 16:51 - 2014-02-22 12:38 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll
2016-05-03 16:51 - 2014-02-22 12:37 - 00912384 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2016-05-03 16:51 - 2014-02-22 12:36 - 00441344 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2016-05-03 16:51 - 2014-02-22 12:36 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-05-03 16:51 - 2014-02-22 12:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-05-03 16:51 - 2014-02-22 12:35 - 00504832 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2016-05-03 16:51 - 2014-02-22 12:35 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe
2016-05-03 16:51 - 2014-02-22 12:33 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-05-03 16:51 - 2014-02-22 12:33 - 00402944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2016-05-03 16:51 - 2014-02-22 12:32 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2016-05-03 16:51 - 2014-02-22 12:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-05-03 16:51 - 2014-02-22 12:30 - 00213504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cleanmgr.exe
2016-05-03 16:51 - 2014-02-22 12:29 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-05-03 16:51 - 2014-02-22 12:28 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-05-03 16:51 - 2014-02-22 12:27 - 00397824 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
2016-05-03 16:51 - 2014-02-22 12:27 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-05-03 16:51 - 2014-02-22 12:25 - 01428480 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2016-05-03 16:51 - 2014-02-22 12:25 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StorageContextHandler.dll
2016-05-03 16:51 - 2014-02-22 12:22 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-05-03 16:51 - 2014-02-22 12:21 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfrgui.exe
2016-05-03 16:51 - 2014-02-22 12:21 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-05-03 16:51 - 2014-02-22 12:21 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\acppage.dll
2016-05-03 16:51 - 2014-02-22 12:20 - 01152512 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2016-05-03 16:51 - 2014-02-22 12:18 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2016-05-03 16:51 - 2014-02-22 12:18 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-05-03 16:51 - 2014-02-22 12:17 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll
2016-05-03 16:51 - 2014-02-22 12:17 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-05-03 16:51 - 2014-02-22 12:17 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2016-05-03 16:51 - 2014-02-22 12:16 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
2016-05-03 16:51 - 2014-02-22 12:16 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srchadmin.dll
2016-05-03 16:51 - 2014-02-22 12:16 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmvdsitf.dll
2016-05-03 16:51 - 2014-02-22 12:15 - 01543680 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2016-05-03 16:51 - 2014-02-22 12:14 - 02811392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
2016-05-03 16:51 - 2014-02-22 12:14 - 02165760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncCenter.dll
2016-05-03 16:51 - 2014-02-22 12:14 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2016-05-03 16:51 - 2014-02-22 12:13 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2016-05-03 16:51 - 2014-02-22 12:13 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2016-05-03 16:51 - 2014-02-22 12:13 - 00307200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\newdev.dll
2016-05-03 16:51 - 2014-02-22 12:12 - 00797696 _____ (Microsoft Corporation) C:\Windows\system32\PurchaseWindowsLicense.dll
2016-05-03 16:51 - 2014-02-22 12:12 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizeng.dll
2016-05-03 16:51 - 2014-02-22 12:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-05-03 16:51 - 2014-02-22 12:09 - 01224192 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2016-05-03 16:51 - 2014-02-22 12:09 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-05-03 16:51 - 2014-02-22 12:09 - 00097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll
2016-05-03 16:51 - 2014-02-22 12:09 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-05-03 16:51 - 2014-02-22 12:08 - 00997888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2016-05-03 16:51 - 2014-02-22 12:05 - 01757184 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2016-05-03 16:51 - 2014-02-22 12:04 - 00935424 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll
2016-05-03 16:51 - 2014-02-22 12:04 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\WLanConn.dll
2016-05-03 16:51 - 2014-02-22 12:04 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netid.dll
2016-05-03 16:51 - 2014-02-22 12:03 - 02544128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll
2016-05-03 16:51 - 2014-02-22 12:03 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2016-05-03 16:51 - 2014-02-22 12:02 - 00258560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2016-05-03 16:51 - 2014-02-22 12:01 - 02648064 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2016-05-03 16:51 - 2014-02-22 12:01 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-05-03 16:51 - 2014-02-22 12:01 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2016-05-03 16:51 - 2014-02-22 12:01 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2016-05-03 16:51 - 2014-02-22 12:00 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-05-03 16:51 - 2014-02-22 12:00 - 00217600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2016-05-03 16:51 - 2014-02-22 11:59 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-05-03 16:51 - 2014-02-22 11:59 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2016-05-03 16:51 - 2014-02-22 11:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-05-03 16:51 - 2014-02-22 11:57 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2016-05-03 16:51 - 2014-02-22 11:56 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-05-03 16:51 - 2014-02-22 11:55 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-05-03 16:51 - 2014-02-22 11:54 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2016-05-03 16:51 - 2014-02-22 11:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll
2016-05-03 16:51 - 2014-02-22 11:54 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-05-03 16:51 - 2014-02-22 11:54 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll
2016-05-03 16:51 - 2014-02-22 11:53 - 00825344 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-05-03 16:51 - 2014-02-22 11:53 - 00545280 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2016-05-03 16:51 - 2014-02-22 11:53 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-05-03 16:51 - 2014-02-22 11:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2016-05-03 16:51 - 2014-02-22 11:51 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\fveskybackup.dll
2016-05-03 16:51 - 2014-02-22 11:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\winbrand.dll
2016-05-03 16:51 - 2014-02-22 11:49 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\MicrosoftAccountTokenProvider.dll
2016-05-03 16:51 - 2014-02-22 11:48 - 01136128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2016-05-03 16:51 - 2014-02-22 11:48 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-05-03 16:51 - 2014-02-22 11:48 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2016-05-03 16:51 - 2014-02-22 11:48 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2016-05-03 16:51 - 2014-02-22 11:46 - 00528896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2016-05-03 16:51 - 2014-02-22 11:46 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\winsku.dll
2016-05-03 16:51 - 2014-02-22 11:45 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-05-03 16:51 - 2014-02-22 11:45 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2016-05-03 16:51 - 2014-02-22 11:45 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2016-05-03 16:51 - 2014-02-22 11:45 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-05-03 16:51 - 2014-02-22 11:45 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2016-05-03 16:51 - 2014-02-22 11:44 - 00675328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2016-05-03 16:51 - 2014-02-22 11:44 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-05-03 16:51 - 2014-02-22 11:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\korwbrkr.dll
2016-05-03 16:51 - 2014-02-22 11:43 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2016-05-03 16:51 - 2014-02-22 11:43 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Sockets.PushEnabledApplication.dll
2016-05-03 16:51 - 2014-02-22 11:41 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2016-05-03 16:51 - 2014-02-22 11:40 - 02537472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2016-05-03 16:51 - 2014-02-22 11:40 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-05-03 16:51 - 2014-02-22 11:39 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe
2016-05-03 16:51 - 2014-02-22 11:38 - 00753664 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2016-05-03 16:51 - 2014-02-22 11:37 - 02220032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2016-05-03 16:51 - 2014-02-22 11:37 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2016-05-03 16:51 - 2014-02-22 11:36 - 01392640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2016-05-03 16:51 - 2014-02-22 11:36 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasgcw.dll
2016-05-03 16:51 - 2014-02-22 11:36 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WLanConn.dll
2016-05-03 16:51 - 2014-02-22 11:36 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\Dism.exe
2016-05-03 16:51 - 2014-02-22 11:35 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-05-03 16:51 - 2014-02-22 11:35 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WofTasks.dll
2016-05-03 16:51 - 2014-02-22 11:34 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2016-05-03 16:51 - 2014-02-22 11:34 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2016-05-03 16:51 - 2014-02-22 11:33 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-05-03 16:51 - 2014-02-22 11:33 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\DismApi.dll
2016-05-03 16:51 - 2014-02-22 11:32 - 01162752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2016-05-03 16:51 - 2014-02-22 11:31 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2016-05-03 16:51 - 2014-02-22 11:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2016-05-03 16:51 - 2014-02-22 11:29 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2016-05-03 16:51 - 2014-02-22 11:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-05-03 16:51 - 2014-02-22 11:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authz.dll
2016-05-03 16:51 - 2014-02-22 11:28 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceassociation.dll
2016-05-03 16:51 - 2014-02-22 11:27 - 00484864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2016-05-03 16:51 - 2014-02-22 11:27 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2016-05-03 16:51 - 2014-02-22 11:26 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2016-05-03 16:51 - 2014-02-22 11:26 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2016-05-03 16:51 - 2014-02-22 11:26 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-05-03 16:51 - 2014-02-22 11:26 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.exe
2016-05-03 16:51 - 2014-02-22 11:25 - 01361408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-05-03 16:51 - 2014-02-22 11:25 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2016-05-03 16:51 - 2014-02-22 11:25 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2016-05-03 16:51 - 2014-02-22 11:25 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-05-03 16:51 - 2014-02-22 11:25 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-05-03 16:51 - 2014-02-22 11:25 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2016-05-03 16:51 - 2014-02-22 11:25 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winbrand.dll
2016-05-03 16:51 - 2014-02-22 11:24 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2016-05-03 16:51 - 2014-02-22 11:23 - 00344576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-05-03 16:51 - 2014-02-22 11:23 - 00256000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2016-05-03 16:51 - 2014-02-22 11:23 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MicrosoftAccountTokenProvider.dll
2016-05-03 16:51 - 2014-02-22 11:22 - 00336384 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2016-05-03 16:51 - 2014-02-22 11:22 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsku.dll
2016-05-03 16:51 - 2014-02-22 11:21 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-05-03 16:51 - 2014-02-22 11:19 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\korwbrkr.dll
2016-05-03 16:51 - 2014-02-22 11:19 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2016-05-03 16:51 - 2014-02-22 11:19 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll
2016-05-03 16:51 - 2014-02-22 11:18 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\UserLanguagesCpl.dll
2016-05-03 16:51 - 2014-02-22 11:16 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxshared.dll
2016-05-03 16:51 - 2014-02-22 11:15 - 00211968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Dism.exe
2016-05-03 16:51 - 2014-02-22 11:14 - 00752640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-05-03 16:51 - 2014-02-22 11:14 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-05-03 16:51 - 2014-02-22 11:12 - 00459776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DismApi.dll
2016-05-03 16:51 - 2014-02-22 11:11 - 02395136 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-05-03 16:51 - 2014-02-22 11:10 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll
2016-05-03 16:51 - 2014-02-22 11:10 - 00569856 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2016-05-03 16:51 - 2014-02-22 11:09 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2016-05-03 16:51 - 2014-02-22 11:09 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\dwm.exe
2016-05-03 16:51 - 2014-02-22 11:08 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-05-03 16:51 - 2014-02-22 11:07 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2016-05-03 16:51 - 2014-02-22 11:07 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2016-05-03 16:51 - 2014-02-22 11:07 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll
2016-05-03 16:51 - 2014-02-22 11:06 - 01035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-05-03 16:51 - 2014-02-22 11:06 - 00251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2016-05-03 16:51 - 2014-02-22 11:04 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2016-05-03 16:51 - 2014-02-22 11:04 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2016-05-03 16:51 - 2014-02-22 11:04 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\slpts.dll
2016-05-03 16:51 - 2014-02-22 11:02 - 00559104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguagesCpl.dll
2016-05-03 16:51 - 2014-02-22 11:02 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2016-05-03 16:51 - 2014-02-22 11:02 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2016-05-03 16:51 - 2014-02-22 11:00 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-05-03 16:51 - 2014-02-22 10:59 - 01621504 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
2016-05-03 16:51 - 2014-02-22 10:59 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2016-05-03 16:51 - 2014-02-22 10:59 - 01403392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2016-05-03 16:51 - 2014-02-22 10:59 - 00791552 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2016-05-03 16:51 - 2014-02-22 10:59 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2016-05-03 16:51 - 2014-02-22 10:58 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2016-05-03 16:51 - 2014-02-22 10:57 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2016-05-03 16:51 - 2014-02-22 10:57 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-05-03 16:51 - 2014-02-22 10:55 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-05-03 16:51 - 2014-02-22 10:55 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-05-03 16:51 - 2014-02-22 10:55 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2016-05-03 16:51 - 2014-02-22 10:55 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\ConfigureExpandedStorage.dll
2016-05-03 16:51 - 2014-02-22 10:55 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll
2016-05-03 16:51 - 2014-02-22 10:55 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\energytask.dll
2016-05-03 16:51 - 2014-02-22 10:55 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slpts.dll
2016-05-03 16:51 - 2014-02-22 10:55 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2016-05-03 16:51 - 2014-02-22 10:54 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll
2016-05-03 16:51 - 2014-02-22 10:54 - 00286720 _____ (Microsoft Corporation) C:\Windows\system32\wlidcredprov.dll
2016-05-03 16:51 - 2014-02-22 10:54 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2016-05-03 16:51 - 2014-02-22 10:54 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2016-05-03 16:51 - 2014-02-22 10:54 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\AepRoam.dll
2016-05-03 16:51 - 2014-02-22 10:53 - 00876544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2016-05-03 16:51 - 2014-02-22 10:52 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2016-05-03 16:51 - 2014-02-22 10:52 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-05-03 16:51 - 2014-02-22 10:51 - 01258496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RacEngn.dll
2016-05-03 16:51 - 2014-02-22 10:51 - 00716288 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-05-03 16:51 - 2014-02-22 10:51 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2016-05-03 16:51 - 2014-02-22 10:51 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2016-05-03 16:51 - 2014-02-22 10:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2016-05-03 16:51 - 2014-02-22 10:49 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-03 16:51 - 2014-02-22 10:49 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll
2016-05-03 16:51 - 2014-02-22 10:49 - 00468480 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2016-05-03 16:51 - 2014-02-22 10:49 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-05-03 16:51 - 2014-02-22 10:49 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-05-03 16:51 - 2014-02-22 10:48 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2016-05-03 16:51 - 2014-02-22 10:48 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\BioCredProv.dll
2016-05-03 16:51 - 2014-02-22 10:48 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-05-03 16:51 - 2014-02-22 10:48 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-05-03 16:51 - 2014-02-22 10:48 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ConfigureExpandedStorage.dll
2016-05-03 16:51 - 2014-02-22 10:48 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2016-05-03 16:51 - 2014-02-22 10:48 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dataclen.dll
2016-05-03 16:51 - 2014-02-22 10:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2016-05-03 16:51 - 2014-02-22 10:47 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\WlanMM.dll
2016-05-03 16:51 - 2014-02-22 10:47 - 00517120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2016-05-03 16:51 - 2014-02-22 10:47 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2016-05-03 16:51 - 2014-02-22 10:47 - 00185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcredprov.dll
2016-05-03 16:51 - 2014-02-22 10:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\AltTab.dll
2016-05-03 16:51 - 2014-02-22 10:46 - 03312128 _____ (Microsoft Corporation) C:\Windows\system32\bootux.dll
2016-05-03 16:51 - 2014-02-22 10:46 - 00824832 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-05-03 16:51 - 2014-02-22 10:45 - 00845824 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-05-03 16:51 - 2014-02-22 10:45 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2016-05-03 16:51 - 2014-02-22 10:45 - 00169472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2016-05-03 16:51 - 2014-02-22 10:45 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2016-05-03 16:51 - 2014-02-22 10:44 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2016-05-03 16:51 - 2014-02-22 10:44 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2016-05-03 16:51 - 2014-02-22 10:44 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll
2016-05-03 16:51 - 2014-02-22 10:44 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2016-05-03 16:51 - 2014-02-22 10:44 - 00154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll
2016-05-03 16:51 - 2014-02-22 10:43 - 00644608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-05-03 16:51 - 2014-02-22 10:43 - 00469504 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2016-05-03 16:51 - 2014-02-22 10:43 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BioCredProv.dll
2016-05-03 16:51 - 2014-02-22 10:43 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2016-05-03 16:51 - 2014-02-22 10:43 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2016-05-03 16:51 - 2014-02-22 10:43 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-05-03 16:51 - 2014-02-22 10:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Renewal.dll
2016-05-03 16:51 - 2014-02-22 10:42 - 00943104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WlanMM.dll
2016-05-03 16:51 - 2014-02-22 10:42 - 00709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll
2016-05-03 16:51 - 2014-02-22 10:42 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2016-05-03 16:51 - 2014-02-22 10:41 - 00662528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-05-03 16:51 - 2014-02-22 10:40 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2016-05-03 16:51 - 2014-02-22 10:40 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-05-03 16:51 - 2014-02-22 10:40 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2016-05-03 16:51 - 2014-02-22 10:39 - 00556032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2016-05-03 16:51 - 2014-02-22 10:39 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe
2016-05-03 16:51 - 2014-02-22 10:39 - 00321536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\provsvc.dll
2016-05-03 16:51 - 2014-02-22 10:39 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl
2016-05-03 16:51 - 2014-02-22 10:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-05-03 16:51 - 2014-02-22 10:38 - 00470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2016-05-03 16:51 - 2014-02-22 10:38 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2016-05-03 16:51 - 2014-02-22 10:37 - 00658432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2016-05-03 16:51 - 2014-02-22 10:36 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\InputSwitch.dll
2016-05-03 16:51 - 2014-02-22 10:35 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-05-03 16:51 - 2014-02-22 10:35 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\SettingMonitor.dll
2016-05-03 16:51 - 2014-02-22 10:34 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2016-05-03 16:51 - 2014-02-22 10:33 - 00609792 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2016-05-03 16:51 - 2014-02-22 10:33 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingMonitor.dll
2016-05-03 16:51 - 2014-02-22 10:31 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2016-05-03 16:51 - 2014-02-22 10:31 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll
2016-05-03 16:51 - 2014-02-22 10:30 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2016-05-03 16:51 - 2014-02-22 10:29 - 00191488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputSwitch.dll
2016-05-03 16:51 - 2014-02-22 10:27 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-05-03 16:51 - 2014-02-22 10:24 - 02760704 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2016-05-03 16:51 - 2014-02-22 10:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\MrmIndexer.dll
2016-05-03 16:51 - 2014-02-22 10:24 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IdCtrls.dll
2016-05-03 16:51 - 2014-02-22 10:22 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-05-03 16:51 - 2014-02-22 10:22 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2016-05-03 16:51 - 2014-02-22 10:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncPolicy.dll
2016-05-03 16:51 - 2014-02-22 10:21 - 00854528 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2016-05-03 16:51 - 2014-02-22 10:21 - 00600576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2016-05-03 16:51 - 2014-02-22 10:21 - 00518144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmIndexer.dll
2016-05-03 16:51 - 2014-02-22 10:20 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2016-05-03 16:51 - 2014-02-22 10:20 - 00027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncPolicy.dll
2016-05-03 16:51 - 2014-02-22 10:19 - 00698880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2016-05-03 16:51 - 2014-02-22 10:19 - 00099840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
2016-05-03 16:51 - 2014-02-22 10:18 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2016-05-03 16:51 - 2014-02-22 10:17 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2016-05-03 16:51 - 2014-02-22 10:17 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\CloudStorageWizard.exe
2016-05-03 16:51 - 2014-02-22 10:17 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudStorageWizard.exe
2016-05-03 16:51 - 2014-02-22 10:03 - 01496576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2016-05-03 16:51 - 2014-02-22 10:01 - 00978944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2016-05-03 16:51 - 2014-02-22 10:01 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-05-03 16:51 - 2014-02-22 10:00 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2016-05-03 16:51 - 2014-02-22 09:54 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
2016-05-03 16:51 - 2014-02-22 06:43 - 00002440 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileManager.lnk
2016-05-03 16:51 - 2014-02-22 06:37 - 00000369 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2016-05-03 16:51 - 2014-02-22 06:37 - 00000369 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2016-05-03 16:51 - 2014-02-22 06:37 - 00000369 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2016-05-03 16:51 - 2014-02-22 06:37 - 00000369 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2016-05-03 16:51 - 2014-02-22 06:33 - 00262335 _____ C:\Windows\system32\dfpinc.dat
2016-05-03 16:51 - 2014-02-08 03:08 - 00100197 _____ C:\Windows\SysWOW64\RacRules.xml
2016-05-03 16:51 - 2014-02-08 03:08 - 00100197 _____ C:\Windows\system32\RacRules.xml
2016-05-03 16:51 - 2014-02-02 16:48 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-05-03 16:51 - 2014-02-02 15:33 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-05-03 16:51 - 2014-02-01 08:00 - 00011109 _____ C:\Windows\SysWOW64\connectedsearch-results.searchconnector-ms
2016-05-03 16:51 - 2014-02-01 08:00 - 00011109 _____ C:\Windows\system32\connectedsearch-results.searchconnector-ms
2016-05-03 16:51 - 2014-02-01 08:00 - 00007762 _____ C:\Windows\SysWOW64\connectedsearch-suggestions.searchconnector-ms
2016-05-03 16:51 - 2014-02-01 08:00 - 00007762 _____ C:\Windows\system32\connectedsearch-suggestions.searchconnector-ms
2016-05-03 16:51 - 2014-02-01 08:00 - 00007130 _____ C:\Windows\SysWOW64\connectedsearch-zeroinput.searchconnector-ms
2016-05-03 16:51 - 2014-02-01 08:00 - 00007130 _____ C:\Windows\system32\connectedsearch-zeroinput.searchconnector-ms
2016-05-03 16:51 - 2014-02-01 08:00 - 00002255 _____ C:\Windows\SysWOW64\WimBootCompress.ini
2016-05-03 16:51 - 2014-02-01 08:00 - 00002255 _____ C:\Windows\system32\WimBootCompress.ini
2016-05-03 16:51 - 2014-01-31 13:59 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-05-03 16:51 - 2014-01-31 13:11 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-05-03 16:51 - 2014-01-31 11:19 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2016-05-03 16:51 - 2014-01-31 11:15 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2016-05-03 16:51 - 2014-01-31 11:10 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-05-03 16:51 - 2014-01-31 11:08 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2016-05-03 16:51 - 2014-01-31 11:04 - 00409600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2016-05-03 16:51 - 2014-01-31 10:24 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2016-05-03 16:51 - 2014-01-31 10:18 - 01185280 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2016-05-03 16:51 - 2014-01-29 10:53 - 01653352 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-05-03 16:51 - 2014-01-29 10:52 - 00551256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2016-05-03 16:51 - 2014-01-29 10:40 - 00994136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-05-03 16:51 - 2014-01-29 09:44 - 01369736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-05-03 16:51 - 2014-01-29 02:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2016-05-03 16:51 - 2014-01-29 02:18 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-05-03 16:51 - 2014-01-29 02:17 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2016-05-03 16:51 - 2014-01-27 21:53 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-05-03 16:51 - 2014-01-27 19:54 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2016-05-03 16:51 - 2014-01-27 19:04 - 01311744 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-05-03 16:51 - 2014-01-27 17:38 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2016-05-03 16:51 - 2014-01-27 13:45 - 00050053 _____ C:\Windows\system32\srms.dat
2016-05-03 16:51 - 2014-01-22 08:21 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2016-05-03 16:51 - 2014-01-22 07:50 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2016-05-03 16:51 - 2014-01-17 19:24 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\ninput.dll
2016-05-03 16:51 - 2014-01-17 19:04 - 00292864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ninput.dll
2016-05-03 16:51 - 2014-01-08 03:30 - 00745328 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-05-03 16:51 - 2014-01-08 02:33 - 00552632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-05-03 16:51 - 2013-12-10 09:35 - 00530944 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2016-05-03 16:51 - 2013-12-04 17:54 - 00660480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2016-05-03 16:51 - 2013-12-04 17:16 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2016-05-03 16:51 - 2013-12-04 16:19 - 00439808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2016-05-03 16:51 - 2013-12-04 15:53 - 00473600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2016-05-03 16:51 - 2013-11-27 11:47 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\finger.exe
2016-05-03 16:51 - 2013-11-27 11:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\finger.exe
2016-05-03 16:51 - 2013-11-27 11:10 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2016-05-03 16:51 - 2013-11-27 10:56 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll
2016-05-03 16:51 - 2013-11-11 01:41 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
2016-05-03 16:51 - 2013-11-08 06:04 - 00488960 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2016-05-03 16:51 - 2013-11-08 05:47 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2016-05-03 16:50 - 2014-03-20 06:19 - 01291200 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-05-03 16:50 - 2014-03-20 05:48 - 21232792 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-05-03 16:50 - 2014-03-20 05:41 - 02013016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-05-03 16:50 - 2014-03-20 05:41 - 00376152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-05-03 16:50 - 2014-03-20 05:40 - 01112536 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-05-03 16:50 - 2014-03-20 03:29 - 04268544 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2016-05-03 16:50 - 2014-03-20 03:20 - 18679216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-05-03 16:50 - 2014-03-20 02:53 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2016-05-03 16:50 - 2014-03-20 02:48 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll
2016-05-03 16:50 - 2014-03-20 01:55 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-05-03 16:50 - 2014-03-20 01:39 - 00800256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2016-05-03 16:50 - 2014-03-20 01:36 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll
2016-05-03 16:50 - 2014-03-19 09:13 - 00836096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-05-03 16:50 - 2014-03-19 07:57 - 00621568 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2016-05-03 16:50 - 2014-03-19 07:50 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe
2016-05-03 16:50 - 2014-03-19 07:31 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-05-03 16:50 - 2014-03-19 07:20 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w32tm.exe
2016-05-03 16:50 - 2014-03-19 07:08 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2016-05-03 16:50 - 2014-03-19 06:41 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2016-05-03 16:50 - 2014-03-19 06:17 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2016-05-03 16:50 - 2014-03-15 06:56 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2016-05-03 16:50 - 2014-03-15 06:44 - 01705984 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-05-03 16:50 - 2014-03-13 14:35 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2016-05-03 16:50 - 2014-03-12 15:45 - 00387210 _____ C:\Windows\system32\ApnDatabase.xml
2016-05-03 16:50 - 2014-03-11 18:04 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfg.exe
2016-05-03 16:50 - 2014-03-11 17:45 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll
2016-05-03 16:50 - 2014-03-11 17:18 - 01015808 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2016-05-03 16:50 - 2014-03-11 17:02 - 00794112 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2016-05-03 16:50 - 2014-03-11 16:28 - 00887296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2016-05-03 16:50 - 2014-03-11 16:25 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2016-05-03 16:50 - 2014-03-11 16:05 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-05-03 16:50 - 2014-03-11 16:03 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2016-05-03 16:50 - 2014-03-11 16:00 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-05-03 16:50 - 2014-03-11 15:21 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2016-05-03 16:50 - 2014-03-11 15:02 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2016-05-03 16:50 - 2014-03-11 14:42 - 02641920 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-05-03 16:50 - 2014-03-11 14:35 - 02317824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-05-03 16:50 - 2014-03-08 22:47 - 00565536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-05-03 16:50 - 2014-03-08 22:47 - 00180056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-05-03 16:50 - 2014-03-08 22:40 - 00136024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2016-05-03 16:50 - 2014-03-08 22:38 - 01542768 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-05-03 16:50 - 2014-03-08 22:35 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2016-05-03 16:50 - 2014-03-08 22:35 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2016-05-03 16:50 - 2014-03-08 17:29 - 01339240 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-05-03 16:50 - 2014-03-08 17:29 - 00356848 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2016-05-03 16:50 - 2014-03-08 13:34 - 01095488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-05-03 16:50 - 2014-03-08 11:34 - 00731648 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-05-03 16:50 - 2014-03-08 11:02 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\sxproxy.dll
2016-05-03 16:50 - 2014-03-08 10:44 - 00731648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-05-03 16:50 - 2014-03-08 10:33 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2016-05-03 16:50 - 2014-03-08 10:25 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\SetNetworkLocation.dll
2016-05-03 16:50 - 2014-03-08 10:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxproxy.dll
2016-05-03 16:50 - 2014-03-08 09:53 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2016-05-03 16:50 - 2014-03-08 09:51 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2016-05-03 16:50 - 2014-03-08 09:47 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spp.dll
2016-05-03 16:50 - 2014-03-08 09:12 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2016-05-03 16:50 - 2014-03-08 09:09 - 01411584 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-05-03 16:50 - 2014-03-08 09:04 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2016-05-03 16:50 - 2014-03-08 09:03 - 00939520 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-05-03 16:50 - 2014-03-08 09:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2016-05-03 16:50 - 2014-03-08 08:50 - 01066496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-05-03 16:50 - 2014-03-08 08:48 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-05-03 16:50 - 2014-03-08 08:46 - 01063424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-05-03 16:50 - 2014-03-08 08:41 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-05-03 16:50 - 2014-03-08 08:40 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2016-05-03 16:50 - 2014-03-08 08:37 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-05-03 16:50 - 2014-03-08 08:31 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2016-05-03 16:50 - 2014-03-08 08:30 - 00197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2016-05-03 16:50 - 2014-03-08 08:25 - 00264192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-05-03 16:50 - 2014-03-08 08:09 - 00958464 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-05-03 16:50 - 2014-03-08 08:04 - 00717312 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-05-03 16:50 - 2014-03-08 08:02 - 00801792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-05-03 16:50 - 2014-03-08 07:58 - 00567296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2016-05-03 16:50 - 2014-03-08 07:41 - 01306624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-05-03 16:50 - 2014-03-08 07:11 - 00924160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2016-05-03 16:50 - 2014-03-06 16:35 - 01466864 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2016-05-03 16:50 - 2014-03-06 16:34 - 02331000 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-05-03 16:50 - 2014-03-06 16:34 - 00113648 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2016-05-03 16:50 - 2014-03-06 14:53 - 02141912 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-05-03 16:50 - 2014-03-06 14:53 - 00518552 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-05-03 16:50 - 2014-03-06 14:51 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-05-03 16:50 - 2014-03-06 14:51 - 00488280 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2016-05-03 16:50 - 2014-03-06 14:51 - 00379224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-05-03 16:50 - 2014-03-06 14:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-03 16:50 - 2014-03-06 14:40 - 00492256 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-05-03 16:50 - 2014-03-06 14:40 - 00467504 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-05-03 16:50 - 2014-03-06 14:40 - 00463264 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-05-03 16:50 - 2014-03-06 14:40 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-05-03 16:50 - 2014-03-06 14:40 - 00244888 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-05-03 16:50 - 2014-03-06 14:39 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-05-03 16:50 - 2014-03-06 13:20 - 01200296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2016-05-03 16:50 - 2014-03-06 13:19 - 00390488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2016-05-03 16:50 - 2014-03-06 13:19 - 00094016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll
2016-05-03 16:50 - 2014-03-06 13:13 - 01779800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-05-03 16:50 - 2014-03-06 13:13 - 00406912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-05-03 16:50 - 2014-03-06 12:46 - 01679128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-05-03 16:50 - 2014-03-06 12:35 - 00406512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-05-03 16:50 - 2014-03-06 12:35 - 00388408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-05-03 16:50 - 2014-03-06 12:35 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-05-03 16:50 - 2014-03-06 12:35 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-05-03 16:50 - 2014-03-06 11:29 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2016-05-03 16:50 - 2014-03-06 11:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-05-03 16:50 - 2014-03-06 11:24 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2016-05-03 16:50 - 2014-03-06 11:24 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2016-05-03 16:50 - 2014-03-06 11:22 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-05-03 16:50 - 2014-03-06 11:22 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-05-03 16:50 - 2014-03-06 11:22 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-05-03 16:50 - 2014-03-06 11:20 - 00443392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2016-05-03 16:50 - 2014-03-06 11:20 - 00402944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-05-03 16:50 - 2014-03-06 11:20 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-05-03 16:50 - 2014-03-06 11:19 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-05-03 16:50 - 2014-03-06 11:19 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2016-05-03 16:50 - 2014-03-06 11:19 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2016-05-03 16:50 - 2014-03-06 11:19 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-05-03 16:50 - 2014-03-06 11:19 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2016-05-03 16:50 - 2014-03-06 11:08 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2016-05-03 16:50 - 2014-03-06 11:08 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\l2gpstore.dll
2016-05-03 16:50 - 2014-03-06 10:41 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\DevPropMgr.dll
2016-05-03 16:50 - 2014-03-06 10:38 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-05-03 16:50 - 2014-03-06 10:37 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-05-03 16:50 - 2014-03-06 10:28 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2016-05-03 16:50 - 2014-03-06 10:20 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-05-03 16:50 - 2014-03-06 10:10 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\l2gpstore.dll
2016-05-03 16:50 - 2014-03-06 10:09 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2016-05-03 16:50 - 2014-03-06 10:00 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2016-05-03 16:50 - 2014-03-06 09:47 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2016-05-03 16:50 - 2014-03-06 09:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-05-03 16:50 - 2014-03-06 09:44 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2016-05-03 16:50 - 2014-03-06 09:22 - 16875520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-05-03 16:50 - 2014-03-06 09:16 - 00171008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2016-05-03 16:50 - 2014-03-06 09:15 - 00667136 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2016-05-03 16:50 - 2014-03-06 09:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2016-05-03 16:50 - 2014-03-06 09:02 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2016-05-03 16:50 - 2014-03-06 08:59 - 12732416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-05-03 16:50 - 2014-03-06 08:57 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2016-05-03 16:50 - 2014-03-06 08:51 - 02900992 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-05-03 16:50 - 2014-03-06 08:42 - 00589824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2016-05-03 16:50 - 2014-03-06 08:39 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-05-03 16:50 - 2014-03-06 08:34 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-05-03 16:50 - 2014-03-06 08:33 - 13286400 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-05-03 16:50 - 2014-03-06 08:32 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-05-03 16:50 - 2014-03-06 08:31 - 02479616 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-05-03 16:50 - 2014-03-06 08:29 - 11791360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-05-03 16:50 - 2014-03-06 08:29 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2016-05-03 16:50 - 2014-03-06 08:27 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-05-03 16:50 - 2014-03-06 08:24 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2016-05-03 16:50 - 2014-03-06 08:23 - 02270208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2016-05-03 16:50 - 2014-03-06 08:23 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll
2016-05-03 16:50 - 2014-03-06 08:21 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-05-03 16:50 - 2014-03-06 08:21 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2016-05-03 16:50 - 2014-03-06 08:16 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2016-05-03 16:50 - 2014-03-06 08:16 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-05-03 16:50 - 2014-03-06 08:13 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2016-05-03 16:50 - 2014-03-06 08:13 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2016-05-03 16:50 - 2014-03-06 08:11 - 02030080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-05-03 16:50 - 2014-03-06 08:09 - 01764864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-05-03 16:50 - 2014-03-06 08:06 - 00386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlangpui.dll
2016-05-03 16:50 - 2014-03-06 08:05 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-05-03 16:50 - 2014-03-06 08:04 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2016-05-03 16:50 - 2014-03-06 08:04 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2016-05-03 16:50 - 2014-03-06 08:01 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2016-05-03 16:50 - 2014-03-06 07:54 - 01023488 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-05-03 16:50 - 2014-03-06 07:54 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-05-03 16:50 - 2014-03-06 07:51 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2016-05-03 16:50 - 2014-03-06 07:47 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2016-05-03 16:50 - 2014-03-06 07:42 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2016-05-03 16:50 - 2014-03-06 07:42 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2016-05-03 16:50 - 2014-03-06 07:35 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2016-05-03 16:50 - 2014-03-06 07:33 - 00839168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2016-05-03 16:50 - 2014-03-06 07:32 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2016-05-03 16:50 - 2014-03-06 07:28 - 08653824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-05-03 16:50 - 2014-03-06 07:27 - 05833728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2016-05-03 16:50 - 2014-03-06 07:21 - 05770752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-05-03 16:50 - 2014-03-06 07:20 - 06641152 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-05-03 16:50 - 2014-03-04 14:25 - 02373784 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-05-03 16:50 - 2014-03-04 14:15 - 02519384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-05-03 16:50 - 2014-03-04 14:15 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-05-03 16:50 - 2014-03-04 14:14 - 00360512 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2016-05-03 16:50 - 2014-03-04 13:16 - 02088160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-05-03 16:50 - 2014-03-04 13:10 - 00355832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2016-05-03 16:50 - 2014-03-04 10:11 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\AdmTmpl.dll
2016-05-03 16:50 - 2014-03-04 09:26 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AdmTmpl.dll
2016-05-03 16:50 - 2014-03-04 09:16 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-05-03 16:50 - 2014-03-04 09:13 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-05-03 16:50 - 2014-03-04 09:08 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2016-05-03 16:50 - 2014-03-04 09:00 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2016-05-03 16:50 - 2014-03-04 08:56 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2016-05-03 16:50 - 2014-03-04 08:50 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-05-03 16:50 - 2014-03-04 08:42 - 00494592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-05-03 16:50 - 2014-03-04 08:39 - 00254976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2016-05-03 16:50 - 2014-03-04 08:32 - 00356864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll
2016-05-03 16:50 - 2014-03-04 08:15 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2016-05-03 16:50 - 2014-03-04 08:05 - 00402432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
2016-05-03 16:50 - 2014-03-04 08:03 - 00669696 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2016-05-03 16:50 - 2014-03-04 08:03 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2016-05-03 16:50 - 2014-03-04 07:54 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2016-05-03 16:50 - 2014-03-04 07:52 - 00605184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2016-05-03 16:50 - 2014-03-02 12:20 - 23549952 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-05-03 16:50 - 2014-03-02 11:33 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-05-03 16:50 - 2014-02-26 08:29 - 02678784 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2016-05-03 16:50 - 2014-02-07 00:59 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2016-05-03 16:50 - 2014-02-06 23:26 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2016-05-03 16:50 - 2013-12-24 01:28 - 00262656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2016-05-03 16:50 - 2013-12-24 01:26 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
2016-05-03 16:47 - 2016-05-03 21:02 - 00000000 ____D C:\Users\MO\AppData\Local\Google
2016-05-03 16:47 - 2016-05-03 16:47 - 00002227 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-03 16:47 - 2016-05-03 16:47 - 00002215 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-03 16:46 - 2016-05-03 20:51 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-03 16:46 - 2016-05-03 20:33 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-03 16:46 - 2016-05-03 16:46 - 00003924 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-03 16:46 - 2016-05-03 16:46 - 00003688 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-03 16:46 - 2016-05-03 16:46 - 00000000 ____D C:\Program Files (x86)\Google
2016-05-03 16:45 - 2016-05-03 20:33 - 00000000 __SHD C:\Users\MO\IntelGraphicsProfiles
2016-05-03 16:45 - 2016-05-03 16:45 - 00000401 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-05-03 16:43 - 2016-05-03 21:22 - 00004671 _____ C:\bdlog.txt
2016-05-03 16:39 - 2016-05-03 16:40 - 00000000 ____D C:\Windows\system32\MRT
2016-05-03 16:39 - 2016-05-03 16:39 - 135176864 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-05-03 16:39 - 2016-05-03 16:39 - 00000385 _____ C:\Users\MO\AppData\Roaminguser_gensett.xml
2016-05-03 16:37 - 2014-10-31 00:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-05-03 16:37 - 2014-10-31 00:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-05-03 16:37 - 2014-04-16 01:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2016-05-03 16:37 - 2014-04-16 01:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2016-05-03 16:37 - 2014-01-04 17:54 - 00138240 _____ C:\Windows\system32\OEMLicense.dll
2016-05-03 16:37 - 2014-01-04 17:08 - 00103936 _____ C:\Windows\SysWOW64\OEMLicense.dll
2016-05-03 16:37 - 2014-01-03 01:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-05-03 16:37 - 2014-01-03 01:48 - 00336896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2016-05-03 16:37 - 2014-01-01 01:57 - 01214976 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-05-03 16:37 - 2013-12-31 01:34 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sti.dll
2016-05-03 16:37 - 2013-12-31 01:32 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\sti.dll
2016-05-03 16:37 - 2013-12-27 10:57 - 00842752 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
2016-05-03 16:37 - 2013-12-27 09:03 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
2016-05-03 16:37 - 2013-12-21 09:21 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll
2016-05-03 16:37 - 2013-12-17 09:21 - 00408576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-05-03 16:37 - 2013-11-27 17:34 - 03210528 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-05-03 16:37 - 2013-11-27 17:27 - 00809872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-05-03 16:37 - 2013-11-27 16:00 - 00663680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2016-05-03 16:37 - 2013-11-27 15:47 - 02804528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-05-03 16:37 - 2013-11-27 14:02 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipnat.sys
2016-05-03 16:37 - 2013-11-27 13:41 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe
2016-05-03 16:37 - 2013-11-27 12:24 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2016-05-03 16:37 - 2013-11-27 11:46 - 00273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2016-05-03 16:37 - 2013-11-27 11:10 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll
2016-05-03 16:37 - 2013-11-27 10:56 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll
2016-05-03 16:37 - 2013-11-25 01:30 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2016-05-03 16:37 - 2013-11-25 01:28 - 00589824 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-05-03 16:37 - 2013-11-23 09:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\bi.dll
2016-05-03 16:37 - 2013-11-23 09:13 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BtaMPM.sys
2016-05-03 16:37 - 2013-11-23 06:50 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2016-05-03 16:37 - 2013-11-21 08:58 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\deviceregistration.dll
2016-05-03 16:37 - 2013-11-15 16:59 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-05-03 16:37 - 2013-11-15 16:25 - 00433664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-05-03 16:37 - 2013-11-15 16:08 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-05-03 16:37 - 2013-11-11 04:48 - 00039768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2016-05-03 16:37 - 2013-11-08 07:23 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\appmgr.dll
2016-05-03 16:37 - 2013-11-08 06:42 - 00366080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appmgr.dll
2016-05-03 16:37 - 2013-11-01 13:39 - 00086872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-05-03 16:37 - 2013-10-26 03:54 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SerCx2.sys
2016-05-03 16:37 - 2013-10-23 13:29 - 00044936 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll
2016-05-03 16:37 - 2013-10-23 13:21 - 00155480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2016-05-03 16:37 - 2013-10-23 13:13 - 00171864 _____ (Microsoft Corporation) C:\Windows\system32\kd_02_8086.dll
2016-05-03 16:37 - 2013-10-22 10:18 - 00096088 _____ (Microsoft Corporation) C:\Windows\system32\embeddedapplauncher.exe
2016-05-03 16:37 - 2013-10-22 05:56 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2016-05-03 16:37 - 2013-10-19 07:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-05-03 16:37 - 2013-10-08 07:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll
2016-05-03 16:37 - 2013-10-08 07:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2016-05-03 16:37 - 2013-10-08 06:50 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-05-03 16:37 - 2013-10-08 06:50 - 00762368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2016-05-03 16:37 - 2013-10-05 17:25 - 00057176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2016-05-03 16:37 - 2013-10-05 16:21 - 00699840 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-05-03 16:37 - 2013-10-05 14:05 - 00578952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-05-03 16:37 - 2013-10-05 13:01 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-05-03 16:37 - 2013-10-05 11:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2016-05-03 16:37 - 2013-10-05 11:18 - 01011712 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-05-03 16:37 - 2013-10-05 10:56 - 01147904 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2016-05-03 16:37 - 2013-10-05 10:55 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\miutils.dll
2016-05-03 16:37 - 2013-10-05 10:40 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2016-05-03 16:37 - 2013-10-05 10:24 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\miutils.dll
2016-05-03 16:37 - 2013-10-05 10:21 - 00920064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2016-05-03 16:37 - 2013-10-05 10:15 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2016-05-03 16:37 - 2013-10-05 09:43 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2016-05-03 16:37 - 2013-10-05 09:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-05-03 16:37 - 2013-09-17 11:06 - 01067080 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2016-05-03 16:37 - 2013-09-17 08:31 - 00883184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2016-05-03 16:37 - 2013-09-14 16:07 - 02134120 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2016-05-03 16:37 - 2013-09-14 16:00 - 00391512 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2016-05-03 16:37 - 2013-09-14 14:39 - 01799944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2016-05-03 16:37 - 2013-09-14 14:33 - 00345552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2016-05-03 16:37 - 2013-09-14 12:05 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2016-05-03 16:37 - 2013-09-14 11:11 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2016-05-03 16:37 - 2013-09-13 10:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2016-05-03 16:37 - 2013-09-13 09:47 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ftp.exe
2016-05-03 16:37 - 2013-09-12 10:45 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2016-05-03 16:37 - 2013-09-12 10:08 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2016-05-03 16:37 - 2013-09-12 10:02 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2016-05-03 16:37 - 2013-09-12 09:44 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2016-05-03 16:37 - 2013-09-12 09:37 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2016-05-03 16:37 - 2013-09-12 09:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2016-05-03 16:37 - 2013-09-12 09:16 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2016-05-03 16:37 - 2013-09-12 09:01 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2016-05-03 16:37 - 2013-09-10 06:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\msched.dll
2016-05-03 16:36 - 2014-01-29 08:41 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2016-05-03 16:36 - 2014-01-29 02:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2016-05-03 16:36 - 2014-01-27 21:07 - 04175360 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2016-05-03 16:36 - 2014-01-27 20:23 - 02873344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2016-05-03 16:36 - 2014-01-27 19:18 - 01486848 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2016-05-03 16:36 - 2014-01-27 19:00 - 01238016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2016-05-03 16:36 - 2014-01-18 01:04 - 00764864 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2016-05-03 16:36 - 2014-01-17 23:54 - 00669352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2016-05-03 16:36 - 2014-01-07 09:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe
2016-05-03 16:36 - 2014-01-07 07:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.exe
2016-05-03 16:36 - 2014-01-07 07:00 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-05-03 16:36 - 2014-01-07 06:30 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-05-03 16:36 - 2013-12-21 16:51 - 06353960 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-05-03 16:36 - 2013-12-21 10:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2016-05-03 16:36 - 2013-12-09 02:27 - 02152448 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-05-03 16:36 - 2013-12-09 02:19 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2016-05-03 16:36 - 2013-12-09 01:55 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2016-05-03 16:36 - 2013-12-09 01:54 - 01317376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-05-03 16:36 - 2013-11-23 06:34 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2016-05-03 16:36 - 2013-11-23 06:13 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2016-05-03 16:36 - 2013-11-21 08:42 - 04604416 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-05-03 16:36 - 2013-11-21 07:44 - 03936256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-05-03 16:36 - 2013-10-19 10:53 - 00075360 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2016-05-03 16:36 - 2013-10-19 09:14 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2016-05-03 16:36 - 2013-10-16 17:58 - 01943536 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-05-03 16:36 - 2013-10-16 15:54 - 01581968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-05-03 16:34 - 2016-05-03 21:13 - 00000000 ____D C:\ProgramData\BDLogging
2016-05-03 16:34 - 2016-05-03 16:34 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2016-05-03 16:34 - 2016-05-03 16:34 - 00000000 ____D C:\Users\MO\AppData\Roaming\QuickScan
2016-05-03 16:34 - 2016-05-03 16:34 - 00000000 ____D C:\Program Files\Bitdefender
2016-05-03 16:34 - 2013-09-08 20:04 - 00023568 _____ (Bitdefender) C:\Windows\system32\Drivers\bdelam.sys
2016-05-03 16:34 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
2016-05-03 16:33 - 2016-05-03 21:25 - 00000000 ____D C:\Program Files\Bitdefender Agent
2016-05-03 16:33 - 2016-05-03 21:24 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2016-05-03 16:33 - 2016-05-03 16:33 - 00000000 ____D C:\ProgramData\Bitdefender Agent
2016-05-03 15:21 - 2016-05-03 15:21 - 00000000 _____ C:\Recovery.txt
2016-05-03 14:53 - 2016-05-03 14:53 - 00000000 ____D C:\Users\MO\AppData\Roaming\Intel Corporation
2016-05-03 14:52 - 2016-05-03 14:52 - 01331736 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-05-03 14:52 - 2016-05-03 14:52 - 00002799 _____ C:\Users\Public\Desktop\Killer Network Manager.lnk
2016-05-03 14:52 - 2016-05-03 14:52 - 00000724 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® HD Graphics Control Panel.lnk
2016-05-03 14:52 - 2016-05-03 14:52 - 00000712 _____ C:\Users\Public\Desktop\Intel® HD Graphics Control Panel.lnk
2016-05-03 14:52 - 2016-05-03 14:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-05-03 14:52 - 2016-05-03 14:52 - 00000000 ____D C:\ProgramData\Qualcomm
2016-05-03 14:52 - 2016-05-03 14:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros
2016-05-03 14:52 - 2016-05-03 14:52 - 00000000 ____D C:\ProgramData\Downloaded Installations
2016-05-03 14:52 - 2016-05-03 14:52 - 00000000 ____D C:\Program Files\Qualcomm Atheros
2016-05-03 14:52 - 2016-05-03 14:52 - 00000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2016-05-03 14:52 - 2015-08-10 11:45 - 24849272 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 24049992 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 17807680 _____ C:\Windows\system32\igd11dxva64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 17331296 _____ C:\Windows\SysWOW64\igd11dxva32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 15981056 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 10851840 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 09551872 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 09426536 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 08637056 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 07519744 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 06725162 _____ C:\Windows\system32\igdclbif.bin
2016-05-03 14:52 - 2015-08-10 11:45 - 06189288 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 04918008 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2016-05-03 14:52 - 2015-08-10 11:45 - 04876008 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 03590656 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 03325440 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 02946688 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiVAD64.exe
2016-05-03 14:52 - 2015-08-10 11:45 - 02813952 _____ C:\Windows\system32\iglhxa64.cpa
2016-05-03 14:52 - 2015-08-10 11:45 - 02777088 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAAC64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 02039808 _____ (Intel Corporation) C:\Windows\system32\igfxLHM.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 01513984 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSecureSourceFilter64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 01402336 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 01399240 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 01370624 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 01277736 _____ (Intel Corporation) C:\Windows\system32\igdmd64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 01131008 _____ (Intel Corporation) C:\Windows\system32\GfxResources.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 01064448 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 01036904 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe
2016-05-03 14:52 - 2015-08-10 11:45 - 01033832 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe
2016-05-03 14:52 - 2015-08-10 11:45 - 01020176 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmd32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 01015808 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiWinNextAgent64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00698880 _____ (Intel Corporation) C:\Windows\system32\igfxDH.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00672768 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAudioFilter64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00641530 _____ C:\Windows\system32\FilmModeDetection.wmv
2016-05-03 14:52 - 2015-08-10 11:45 - 00624128 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00616960 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMux64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00472168 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUMS64.exe
2016-05-03 14:52 - 2015-08-10 11:45 - 00448104 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe
2016-05-03 14:52 - 2015-08-10 11:45 - 00425472 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00403671 _____ C:\Windows\system32\ImageStabilization.wmv
2016-05-03 14:52 - 2015-08-10 11:45 - 00393320 _____ C:\Windows\system32\igfxTray.exe
2016-05-03 14:52 - 2015-08-10 11:45 - 00385024 _____ (Intel Corporation) C:\Windows\system32\igfxOSP.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00375173 _____ C:\Windows\system32\ColorImageEnhancement.wmv
2016-05-03 14:52 - 2015-08-10 11:45 - 00374272 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00372224 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00354816 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSilenceFilter64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00344168 _____ (Intel Corporation) C:\Windows\system32\igfxCUIService.exe
2016-05-03 14:52 - 2015-08-10 11:45 - 00339048 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe
2016-05-03 14:52 - 2015-08-10 11:45 - 00338536 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe
2016-05-03 14:52 - 2015-08-10 11:45 - 00313448 _____ (Intel Corporation) C:\Windows\system32\igfxEM.exe
2016-05-03 14:52 - 2015-08-10 11:45 - 00304128 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxDI.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00282696 _____ (Intel Corporation) C:\Windows\system32\igd10idpp64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00279144 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2016-05-03 14:52 - 2015-08-10 11:45 - 00268800 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUtils64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00263120 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10idpp32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00256000 _____ C:\Windows\system32\igfxCPL.cpl
2016-05-03 14:52 - 2015-08-10 11:45 - 00248424 _____ (Intel Corporation) C:\Windows\system32\igfxHK.exe
2016-05-03 14:52 - 2015-08-10 11:45 - 00231424 _____ (Intel Corporation) C:\Windows\system32\igfxDTCM.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00220432 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00218728 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2016-05-03 14:52 - 2015-08-10 11:45 - 00214016 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00213192 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00198144 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiDDEAgent64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00192000 _____ C:\Windows\system32\igdde64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00184352 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00183296 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v4264.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00179200 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00178672 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00169984 _____ (Intel Corporation) C:\Windows\system32\igdail64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00156264 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2016-05-03 14:52 - 2015-08-10 11:45 - 00153088 _____ C:\Windows\SysWOW64\igdde32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00152064 _____ (Intel Corporation) C:\Windows\SysWOW64\igdail32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00135680 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMCUMD64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00128000 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiLogServer64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00094208 _____ C:\Windows\system32\IccLibDll_x64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00086528 _____ C:\Windows\system32\igfxCUIServicePS.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00086528 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL
2016-05-03 14:52 - 2015-08-10 11:45 - 00086528 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00082432 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2016-05-03 14:52 - 2015-08-10 11:45 - 00082432 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00073728 _____ ( ) C:\Windows\system32\igfxDHLibv2_0.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00060928 _____ ( ) C:\Windows\system32\igfxDHLib.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00044025 _____ C:\Windows\system32\iglhxo64.vp
2016-05-03 14:52 - 2015-08-10 11:45 - 00043816 _____ C:\Windows\system32\iglhxc64_dev.vp
2016-05-03 14:52 - 2015-08-10 11:45 - 00043494 _____ C:\Windows\system32\iglhxc64.vp
2016-05-03 14:52 - 2015-08-10 11:45 - 00043298 _____ C:\Windows\system32\iglhxg64_dev.vp
2016-05-03 14:52 - 2015-08-10 11:45 - 00043256 _____ C:\Windows\system32\iglhxg64.vp
2016-05-03 14:52 - 2015-08-10 11:45 - 00042079 _____ C:\Windows\system32\iglhxo64_dev.vp
2016-05-03 14:52 - 2015-08-10 11:45 - 00036616 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00035328 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00011264 _____ ( ) C:\Windows\system32\igfxDILib.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00010752 _____ ( ) C:\Windows\system32\igfxDILibv2_0.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLibv2_0.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLib.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLibv2_0.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLib.dll
2016-05-03 14:52 - 2015-08-10 11:45 - 00004040 _____ C:\Windows\system32\iglhxs64.vp
2016-05-03 14:52 - 2015-08-10 11:45 - 00001125 _____ C:\Windows\system32\iglhxa64.vp
2016-05-03 14:52 - 2015-08-10 11:45 - 00000935 _____ C:\Windows\system32\Gfxv4_0.exe.config
2016-05-03 14:52 - 2015-08-10 11:45 - 00000935 _____ C:\Windows\system32\DPTopologyApp.exe.config
2016-05-03 14:52 - 2015-08-10 11:45 - 00000895 _____ C:\Windows\system32\Gfxv2_0.exe.config
2016-05-03 14:52 - 2015-08-10 11:45 - 00000895 _____ C:\Windows\system32\DPTopologyAppv2_0.exe.config
2016-05-03 14:51 - 2016-05-03 21:30 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2428884997-516092901-2209752320-1001
2016-05-03 14:50 - 2016-05-03 16:45 - 00000000 ____D C:\Intel
2016-05-03 14:50 - 2016-05-03 14:52 - 00000000 ____D C:\Program Files\Intel
2016-05-03 14:50 - 2016-05-03 14:52 - 00000000 ____D C:\Program Files (x86)\Intel
2016-05-03 14:50 - 2016-05-03 14:50 - 00000000 ____D C:\Users\MO\Intel
2016-05-03 14:50 - 2016-05-03 14:50 - 00000000 ____D C:\ProgramData\Package Cache
2016-05-03 14:50 - 2016-05-03 14:50 - 00000000 ____D C:\ProgramData\Intel
2016-05-03 14:50 - 2015-08-10 11:45 - 00460048 _____ (Intel® Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2016-05-03 14:49 - 2016-05-03 14:49 - 00000010 _____ C:\Windows\GSetup.ini
2016-05-03 14:49 - 2009-08-27 09:04 - 00207400 ____R () C:\Windows\GSetup.exe
2016-05-03 14:45 - 2016-05-03 16:45 - 00000000 ____D C:\Users\MO
2016-05-03 14:45 - 2016-05-03 14:45 - 00001446 _____ C:\Users\MO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-05-03 14:45 - 2016-05-03 14:45 - 00000020 ___SH C:\Users\MO\ntuser.ini
2016-05-03 14:45 - 2016-05-03 14:45 - 00000000 _SHDL C:\Users\MO\Skabeloner
2016-05-03 14:45 - 2016-05-03 14:45 - 00000000 _SHDL C:\Users\MO\Printere
2016-05-03 14:45 - 2016-05-03 14:45 - 00000000 _SHDL C:\Users\MO\Menuen Start
2016-05-03 14:45 - 2016-05-03 14:45 - 00000000 _SHDL C:\Users\MO\Lokale indstillinger
2016-05-03 14:45 - 2016-05-03 14:45 - 00000000 _SHDL C:\Users\MO\Dokumenter
2016-05-03 14:45 - 2016-05-03 14:45 - 00000000 _SHDL C:\Users\MO\Documents\Videoer
2016-05-03 14:45 - 2016-05-03 14:45 - 00000000 _SHDL C:\Users\MO\Documents\Musik
2016-05-03 14:45 - 2016-05-03 14:45 - 00000000 _SHDL C:\Users\MO\Documents\Billeder
2016-05-03 14:45 - 2016-05-03 14:45 - 00000000 _SHDL C:\Users\MO\AppData\Roaming\Microsoft\Windows\Start Menu\Programmer
2016-05-03 14:45 - 2016-05-03 14:45 - 00000000 _SHDL C:\Users\MO\AppData\Local\Oversigt
2016-05-03 14:45 - 2016-05-03 14:45 - 00000000 _SHDL C:\Users\MO\Andre computere
2016-05-03 14:45 - 2016-05-03 14:45 - 00000000 ____D C:\Windows\CSC
2016-05-03 14:45 - 2016-05-03 14:45 - 00000000 ____D C:\Users\MO\AppData\Roaming\Adobe
2016-05-03 14:45 - 2016-05-03 14:45 - 00000000 ____D C:\Users\MO\AppData\Local\VirtualStore
2016-05-03 14:45 - 2016-05-03 14:45 - 00000000 ____D C:\Users\MO\AppData\Local\Packages
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Public\Documents\Videoer
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Public\Documents\Musik
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Public\Documents\Billeder
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default\Skabeloner
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default\Printere
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default\Menuen Start
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default\Lokale indstillinger
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default\Dokumenter
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default\Documents\Videoer
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default\Documents\Musik
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default\Documents\Billeder
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programmer
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default\AppData\Local\Oversigt
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default\Andre computere
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default User\Documents\Videoer
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default User\Documents\Musik
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default User\Documents\Billeder
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programmer
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Oversigt
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Programmer
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\ProgramData\Skrivebord
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\ProgramData\Skabeloner
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programmer
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\ProgramData\Menuen Start
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\ProgramData\Dokumenter
2016-05-03 14:40 - 2016-05-03 14:40 - 00000000 _SHDL C:\Program Files\Fælles filer
2016-05-03 14:37 - 2016-05-03 14:45 - 00000000 ____D C:\Windows\Panther
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-05-03 21:40 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2016-05-03 20:39 - 2013-09-30 06:13 - 01310100 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-03 20:39 - 2013-09-30 05:55 - 00429184 _____ C:\Windows\system32\perfh006.dat
2016-05-03 20:39 - 2013-09-30 05:55 - 00072110 _____ C:\Windows\system32\perfc006.dat
2016-05-03 20:39 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf
2016-05-03 20:34 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-05-03 20:34 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2016-05-03 20:32 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-03 18:02 - 2013-08-22 16:44 - 00335320 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-03 18:00 - 2013-09-30 05:58 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-03 18:00 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
2016-05-03 18:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore
2016-05-03 18:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-05-03 17:10 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2016-05-03 17:03 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-05-03 17:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2016-05-03 17:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\setup
2016-05-03 17:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\migwiz
2016-05-03 17:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\lv-LV
2016-05-03 17:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\lt-LT
2016-05-03 17:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\et-EE
2016-05-03 17:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\en-GB
2016-05-03 17:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\MediaViewer
2016-05-03 17:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\FileManager
2016-05-03 17:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\Camera
2016-05-03 17:03 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-05-03 17:03 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-05-03 17:03 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-05-03 17:03 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-05-03 17:03 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\SysWOW64\oobe
2016-05-03 17:03 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-05-03 17:03 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\Sysprep
2016-05-03 17:03 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\oobe
2016-05-03 17:03 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\Dism
2016-05-03 17:03 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\servicing
2016-05-03 17:03 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-05-03 16:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\SecureBootUpdates
2016-05-03 16:37 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-05-03 15:21 - 2013-08-22 17:36 - 00262144 _____ C:\Windows\system32\config\BCD-Template
2016-05-03 14:40 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows NT
2016-04-26 12:22 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\ELAMBKUP
 
==================== Files in the root of some directories =======
 
2016-05-03 21:24 - 2016-05-03 21:24 - 0239763 _____ () C:\ProgramData\1462303331.bdinstall.bin
2016-05-03 21:25 - 2016-05-03 21:25 - 0027618 _____ () C:\ProgramData\1462303509.bdinstall.bin
 
Some files in TEMP:
====================
C:\Users\MO\AppData\Local\Temp\procexp64.exe
 
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2016-05-03 14:37
 
==================== End of FRST.txt ============================
 
Addition log:
Additional scan result of Farbar Recovery Scan Tool (x64) Version:03-05-2016
Ran by MO (2016-05-03 21:41:35)
Running from C:\Users\MO\Downloads
Windows 8.1 Enterprise (Update 1) (X64) (2016-05-03 12:45:35)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-2428884997-516092901-2209752320-500 - Administrator - Disabled)
Gæst (S-1-5-21-2428884997-516092901-2209752320-501 - Limited - Disabled)
MO (S-1-5-21-2428884997-516092901-2209752320-1001 - Administrator - Enabled) => C:\Users\MO
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Google Chrome (HKLM-x32\...\{84F46B98-8E48-33EB-BCE1-796B52E45B68}) (Version: 50.0.2661.94 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Intel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)
Intel® Chipset Device Software (x32 Version: 10.1.1.8 - Intel® Corporation) Hidden
Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.0.30.1259 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer E220x Drivers (Version: 1.0.30.1259 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer Network Manager Suite (HKLM-x32\...\{FE5DFB80-6937-4154-A2C7-EF845C1301F8}) (Version: 1.0.30.1259 - Qualcomm Atheros)
Qualcomm Atheros Network Manager (Version: 1.0.30.1259 - Qualcomm Atheros) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-2428884997-516092901-2209752320-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {0CFC257B-1729-4C24-BB58-96B634025E8D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-03] (Google Inc.)
Task: {2CF0C1E2-7D0D-44E1-8575-3492E13F049D} - System32\Tasks\Microsoft\Windows\SetupSQMTask => C:\Windows\SYSTEM32\OOBE\SETUPSQM.EXE [2013-08-22] (Microsoft Corporation)
Task: {2D6E7DF6-7B09-4158-B1A6-EF091B6AFA55} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-03] (Google Inc.)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Shortcuts =============================
 
(The entries could be listed to be restored or removed.)
 
==================== Loaded Modules (Whitelisted) ==============
 
2016-05-03 14:52 - 2015-08-10 11:45 - 00393320 _____ () C:\Windows\system32\igfxTray.exe
2013-08-08 14:30 - 2013-08-08 14:30 - 00283648 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
2016-05-03 16:47 - 2016-04-28 09:33 - 02224280 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.94\libglesv2.dll
2016-05-03 16:47 - 2016-04-28 09:33 - 00097944 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.94\libegl.dll
2016-05-03 21:15 - 2016-05-03 21:15 - 00380928 _____ () C:\Users\MO\Downloads\94ld40gr.exe
2016-05-03 16:47 - 2016-04-28 09:33 - 31411864 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.94\PepperFlash\pepflashplayer.dll
2016-05-03 17:08 - 2016-03-11 02:56 - 00783360 _____ () C:\Games\Steam\SDL2.dll
2016-05-03 17:08 - 2015-07-03 18:12 - 04962816 _____ () C:\Games\Steam\v8.dll
2016-05-03 17:08 - 2016-03-31 22:55 - 02549840 _____ () C:\Games\Steam\video.dll
2016-05-03 17:08 - 2015-07-03 18:12 - 01556992 _____ () C:\Games\Steam\icui18n.dll
2016-05-03 17:08 - 2015-07-03 18:12 - 01187840 _____ () C:\Games\Steam\icuuc.dll
2016-05-03 17:08 - 2016-02-09 01:14 - 02549760 _____ () C:\Games\Steam\libavcodec-56.dll
2016-05-03 17:08 - 2016-02-09 01:14 - 00491008 _____ () C:\Games\Steam\libavformat-56.dll
2016-05-03 17:08 - 2016-02-09 01:14 - 00332800 _____ () C:\Games\Steam\libavresample-2.dll
2016-05-03 17:08 - 2016-02-09 01:14 - 00442880 _____ () C:\Games\Steam\libavutil-54.dll
2016-05-03 17:08 - 2016-02-09 01:14 - 00485888 _____ () C:\Games\Steam\libswscale-3.dll
2016-05-03 17:08 - 2016-03-31 22:55 - 00829008 _____ () C:\Games\Steam\bin\chromehtml.DLL
2016-05-03 17:08 - 2016-02-18 00:25 - 00281088 _____ () C:\Games\Steam\openvr_api.dll
2016-05-03 17:08 - 2016-02-09 03:33 - 48400672 _____ () C:\Games\Steam\bin\libcef.dll
2016-05-03 17:08 - 2015-09-25 01:56 - 00119208 _____ () C:\Games\Steam\winh264.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
AlternateDataStreams: C:\Users\MO\Downloads\94ld40gr.exe:BDU [0]
AlternateDataStreams: C:\Users\MO\Downloads\aswmbr.exe:BDU [0]
AlternateDataStreams: C:\Users\MO\Downloads\avast_free_antivirus_setup_online.exe:BDU [0]
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 
==================== EXE Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2013-08-22 15:25 - 2016-05-03 20:32 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-2428884997-516092901-2209752320-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{B32DFE05-DA46-4A69-BDA4-1173CF0D2E22}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{63764B79-8610-44E4-BABA-789CBEF47567}] => (Allow) C:\Games\Steam\Steam.exe
FirewallRules: [{FA9BFB2C-5EED-4ABC-A972-DFA6D3E49DE5}] => (Allow) C:\Games\Steam\Steam.exe
FirewallRules: [{2DD726B2-318C-4874-B45B-B16139F56A26}] => (Allow) C:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{8A4FCCE8-4A07-4DC7-8A12-F7B21B19D068}] => (Allow) C:\Games\Steam\bin\steamwebhelper.exe
 
==================== Restore Points =========================
 
03-05-2016 14:52:51 IIF_MSI
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (05/03/2016 08:33:06 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
 
Error: (05/03/2016 08:32:47 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (05/03/2016 05:22:42 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
 
Error: (05/03/2016 05:22:28 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (05/03/2016 05:05:54 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
 
Error: (05/03/2016 05:05:25 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (05/03/2016 04:45:27 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
 
Error: (05/03/2016 04:45:19 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (05/03/2016 04:32:04 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (05/03/2016 04:32:02 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=NetworkAvailable
 
 
System errors:
=============
Error: (05/03/2016 08:33:47 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installationsfejl: Der opstod en fejl, da Windows skulle installere følgende opdatering 0x800f0923: Sikkerhedsopdatering til Windows 8.1 til x64-baserede systemer (KB3145739).
 
Error: (05/03/2016 08:33:47 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installationsfejl: Der opstod en fejl, da Windows skulle installere følgende opdatering 0x800f0923: Sikkerhedsopdatering til Windows 8.1 til x64-baserede systemer (KB3033889).
 
Error: (05/03/2016 08:33:44 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installationsfejl: Der opstod en fejl, da Windows skulle installere følgende opdatering 0x800f0923: Opdatering til Windows 8.1 til x64-baserede systemer (KB3063843).
 
Error: (05/03/2016 08:33:44 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installationsfejl: Der opstod en fejl, da Windows skulle installere følgende opdatering 0x800f0923: Sikkerhedsopdatering til Windows 8.1 til x64-baserede systemer (KB3121918).
 
Error: (05/03/2016 08:33:44 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installationsfejl: Der opstod en fejl, da Windows skulle installere følgende opdatering 0x800f0923: Sikkerhedsopdatering til Microsoft .NET Framework 4.5.1 og 4.5.2 på Windows 8.1 og Windows-server 2012 R2 x64-baserede systemer (KB2977765).
 
Error: (05/03/2016 08:33:44 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installationsfejl: Der opstod en fejl, da Windows skulle installere følgende opdatering 0x800f0923: Sikkerhedsopdatering til Windows 8.1 til x64-baserede systemer (KB3102939).
 
Error: (05/03/2016 08:33:44 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installationsfejl: Der opstod en fejl, da Windows skulle installere følgende opdatering 0x800f0923: Opdatering til Windows 8.1 til x64-baserede systemer (KB3044374).
 
Error: (05/03/2016 08:33:44 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installationsfejl: Der opstod en fejl, da Windows skulle installere følgende opdatering 0x800f0923: Sikkerhedsopdatering til Windows 8.1 til x64-baserede systemer (KB3011780).
 
Error: (05/03/2016 08:33:44 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installationsfejl: Der opstod en fejl, da Windows skulle installere følgende opdatering 0x800f0923: Opdatering til Windows 8.1 til x64-baserede systemer (KB3080800).
 
Error: (05/03/2016 08:33:44 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installationsfejl: Der opstod en fejl, da Windows skulle installere følgende opdatering 0x800f0923: Opdatering til Windows 8.1 til x64-baserede systemer (KB3079318).
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i7-4790K CPU @ 4.00GHz
Percentage of memory in use: 62%
Total physical RAM: 8052.82 MB
Available physical RAM: 3049 MB
Total Virtual: 9972.82 MB
Available Virtual: 4819.24 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:111.27 GB) (Free:79.7 GB) NTFS
Drive d: (GIGABYTE) (CDROM) (Total:4 GB) (Free:0 GB) CDFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 00000000)
 
Partition: GPT.
 
==================== End of Addition.txt ============================

 



BC AdBot (Login to Remove)

 


#2 MagicTux

MagicTux
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:50 AM

Posted 03 May 2016 - 02:51 PM

aswMBR log:

aswMBR version 1.0.1.2290 Copyright© 2014 AVAST Software
Run date: 2016-05-03 21:16:40
-----------------------------
21:16:40.238    OS Version: Windows x64 6.2.9200 
21:16:40.238    Number of processors: 8 586 0x3C03
21:16:40.239    ComputerName: MO-PC  UserName: MO
21:16:40.428    Initialize success
21:16:40.834    VM: initialized successfully
21:16:40.865    VM: Intel CPU supported 
21:16:42.618    VM: disk I/O iaStorA.sys
21:17:16.056    AVAST engine defs: 16050301
21:19:19.338    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000036
21:19:19.340    Disk 0 Vendor: Samsung_SSD_840_EVO_120GB EXT0DB6Q Size: 114473MB BusType: 11
21:19:19.765    Disk 0 MBR read successfully
21:19:19.767    Disk 0 MBR scan
21:19:19.798    Disk 0 Windows 7 default MBR code
21:19:19.824    Disk 0 Partition 1 00     EE            GPT           2097151 MB offset 1
21:19:20.279    Disk 0 scanning C:\Windows\system32\drivers
21:20:00.755    Service scanning
21:20:01.281    Service bdfwfpf C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys **LOCKED** 5
21:20:07.073    Modules scanning
21:20:07.446    Disk 0 trace - called modules:
21:20:07.491    ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys storport.sys hal.dll iaStorA.sys 
21:20:07.495    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xffffe001db3ca060]
21:20:07.498    3 CLASSPNP.SYS[fffff80038ef427b] -> nt!IofCallDriver -> [0xffffe001d8913580]
21:20:07.501    5 ACPI.sys[fffff800380247aa] -> nt!IofCallDriver -> [0xffffe001d6ff70d0]
21:20:07.504    7 ACPI.sys[fffff800380247aa] -> nt!IofCallDriver -> \Device\00000036[0xffffe001d8912060]
21:20:07.700    AVAST engine scan C:\Windows
21:20:29.005    AVAST engine scan C:\Windows\system32
21:37:31.041    AVAST engine scan C:\Windows\system32\drivers
21:39:38.163    AVAST engine scan C:\Users\MO
21:42:00.645    AVAST engine scan C:\ProgramData
21:42:04.040    Disk 0 statistics 2525317/0/0 @ 31,58 MB/s
21:42:04.041    Scan finished successfully
21:46:51.978    Disk 0 MBR has been saved successfully to "C:\Users\MO\Downloads\MBR.dat"
21:46:51.980    The log file has been saved successfully to "C:\Users\MO\Downloads\aswMBR.txt"
 
 
aswMBR version 1.0.1.2290 Copyright© 2014 AVAST Software
Run date: 2016-05-03 21:16:40
-----------------------------
21:16:40.238    OS Version: Windows x64 6.2.9200 
21:16:40.238    Number of processors: 8 586 0x3C03
21:16:40.239    ComputerName: MO-PC  UserName: MO
21:16:40.428    Initialize success
21:16:40.834    VM: initialized successfully
21:16:40.865    VM: Intel CPU supported 
21:16:42.618    VM: disk I/O iaStorA.sys
21:17:16.056    AVAST engine defs: 16050301
21:19:19.338    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000036
21:19:19.340    Disk 0 Vendor: Samsung_SSD_840_EVO_120GB EXT0DB6Q Size: 114473MB BusType: 11
21:19:19.765    Disk 0 MBR read successfully
21:19:19.767    Disk 0 MBR scan
21:19:19.798    Disk 0 Windows 7 default MBR code
21:19:19.824    Disk 0 Partition 1 00     EE            GPT           2097151 MB offset 1
21:19:20.279    Disk 0 scanning C:\Windows\system32\drivers
21:20:00.755    Service scanning
21:20:01.281    Service bdfwfpf C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys **LOCKED** 5
21:20:07.073    Modules scanning
21:20:07.446    Disk 0 trace - called modules:
21:20:07.491    ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys storport.sys hal.dll iaStorA.sys 
21:20:07.495    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xffffe001db3ca060]
21:20:07.498    3 CLASSPNP.SYS[fffff80038ef427b] -> nt!IofCallDriver -> [0xffffe001d8913580]
21:20:07.501    5 ACPI.sys[fffff800380247aa] -> nt!IofCallDriver -> [0xffffe001d6ff70d0]
21:20:07.504    7 ACPI.sys[fffff800380247aa] -> nt!IofCallDriver -> \Device\00000036[0xffffe001d8912060]
21:20:07.700    AVAST engine scan C:\Windows
21:20:29.005    AVAST engine scan C:\Windows\system32
21:37:31.041    AVAST engine scan C:\Windows\system32\drivers
21:39:38.163    AVAST engine scan C:\Users\MO
21:42:00.645    AVAST engine scan C:\ProgramData
21:42:04.040    Disk 0 statistics 2525317/0/0 @ 31,58 MB/s
21:42:04.041    Scan finished successfully
21:46:51.978    Disk 0 MBR has been saved successfully to "C:\Users\MO\Downloads\MBR.dat"
21:46:51.980    The log file has been saved successfully to "C:\Users\MO\Downloads\aswMBR.txt"
21:48:16.618    Disk 0 MBR has been saved successfully to "C:\Users\MO\Downloads\MBR.dat"
21:48:16.618    The log file has been saved successfully to "C:\Users\MO\Downloads\aswMBR.txt"
 
 
aswMBR version 1.0.1.2290 Copyright© 2014 AVAST Software
Run date: 2016-05-03 21:16:40
-----------------------------
21:16:40.238    OS Version: Windows x64 6.2.9200 
21:16:40.238    Number of processors: 8 586 0x3C03
21:16:40.239    ComputerName: MO-PC  UserName: MO
21:16:40.428    Initialize success
21:16:40.834    VM: initialized successfully
21:16:40.865    VM: Intel CPU supported 
21:16:42.618    VM: disk I/O iaStorA.sys
21:17:16.056    AVAST engine defs: 16050301
21:19:19.338    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000036
21:19:19.340    Disk 0 Vendor: Samsung_SSD_840_EVO_120GB EXT0DB6Q Size: 114473MB BusType: 11
21:19:19.765    Disk 0 MBR read successfully
21:19:19.767    Disk 0 MBR scan
21:19:19.798    Disk 0 Windows 7 default MBR code
21:19:19.824    Disk 0 Partition 1 00     EE            GPT           2097151 MB offset 1
21:19:20.279    Disk 0 scanning C:\Windows\system32\drivers
21:20:00.755    Service scanning
21:20:01.281    Service bdfwfpf C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys **LOCKED** 5
21:20:07.073    Modules scanning
21:20:07.446    Disk 0 trace - called modules:
21:20:07.491    ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys storport.sys hal.dll iaStorA.sys 
21:20:07.495    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xffffe001db3ca060]
21:20:07.498    3 CLASSPNP.SYS[fffff80038ef427b] -> nt!IofCallDriver -> [0xffffe001d8913580]
21:20:07.501    5 ACPI.sys[fffff800380247aa] -> nt!IofCallDriver -> [0xffffe001d6ff70d0]
21:20:07.504    7 ACPI.sys[fffff800380247aa] -> nt!IofCallDriver -> \Device\00000036[0xffffe001d8912060]
21:20:07.700    AVAST engine scan C:\Windows
21:20:29.005    AVAST engine scan C:\Windows\system32
21:37:31.041    AVAST engine scan C:\Windows\system32\drivers
21:39:38.163    AVAST engine scan C:\Users\MO
21:42:00.645    AVAST engine scan C:\ProgramData
21:42:04.040    Disk 0 statistics 2525317/0/0 @ 31,58 MB/s
21:42:04.041    Scan finished successfully
21:46:51.978    Disk 0 MBR has been saved successfully to "C:\Users\MO\Downloads\MBR.dat"
21:46:51.980    The log file has been saved successfully to "C:\Users\MO\Downloads\aswMBR.txt"
21:48:16.618    Disk 0 MBR has been saved successfully to "C:\Users\MO\Downloads\MBR.dat"
21:48:16.618    The log file has been saved successfully to "C:\Users\MO\Downloads\aswMBR.txt"
21:49:16.487    Disk 0 MBR has been saved successfully to "C:\Users\MO\Downloads\MBR.dat"
21:49:16.487    The log file has been saved successfully to "C:\Users\MO\Downloads\aswMBR.txt"


#3 MagicTux

MagicTux
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:50 AM

Posted 03 May 2016 - 02:53 PM

I also have a log of gmer. But it is too long to post here.



#4 MagicTux

MagicTux
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:50 AM

Posted 04 May 2016 - 04:05 PM

Gmer log as attachement 

Attached Files



#5 MagicTux

MagicTux
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:50 AM

Posted 06 May 2016 - 05:26 PM

After setting SecureBoot up correctly I managed to find a lot more via GMER.
 

Attached Files



#6 HelpBot

HelpBot

    Bleepin' Binary Bot


  • Bots
  • 12,769 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:50 PM

Posted 08 May 2016 - 02:50 PM

Hello and welcome to Bleeping Computer!

I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

To help Bleeping Computer better assist you please perform the following steps:

***************************************************

step1.gif In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.

CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/612925 <<< CLICK THIS LINK



If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.

***************************************************

step2.gifIf you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:

  • If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.
  • A new FRST log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
    • Please do this even if you have previously posted logs for us.
    • If you were unable to produce the logs originally please try once more.
    • If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
    • If you are unsure about any of these characteristics just post what you can and we will guide you.
  • Please tell us if you have your original Windows CD/DVD available.
  • Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.

Thank you for your patience, and again sorry for the delay.

***************************************************

We need to see some information about what is happening in your machine. Please perform the following scan again:

  • Download FRST by Farbar from the following link if you no longer have it available and save it to your destop.

    FRST Download Link

  • When you go to the above page, there will be 32-bit and 64-bit downloads available. Please click on the appropriate one for your version of Windows. If you are unsure as to whether your Windows is 32-bit or 64-bit, please see this tutorial.
  • Double click on the FRST icon and allow it to run.
  • Agree to the usage agreement and FRST will open. Do not make any changes and click on the Scan button.
  • Notepad will open with the results.
  • Post the new logs as explained in the prep guide.
  • Close the program window, and delete the program from your desktop.


As I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

#7 MagicTux

MagicTux
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:50 AM

Posted 08 May 2016 - 04:47 PM

I'm still having issues and the problems are worse now. I can't even watch youtube or anything without lag, spikes and stuttering both in picture and audio.
I have tried to flash the BIOS. Reinstall Windows. Wipe disks. I ended up buying a new motherboard where I used the same RAM, SSD, HDD and GFX from the previous build and were clean until I made a mistake with the USB-drives
I have tried both several original Windows CD/DVDs in the install of Windows.



#8 garioch7

garioch7

    RCMP Veteran


  • Malware Response Instructor
  • 3,917 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Port Hood, Nova Scotia, Canada
  • Local time:09:50 PM

Posted 11 May 2016 - 06:54 AM

MagicTux:

:welcome: to the Bleeping Computer Virus, Trojans, Spyware, and Malware Removal Logs Forum. My name is Phil and I am a trainee in the Bleeping Computer Malware Removal Study Hall. I would like to address you by your first name, if that is alright with you since we will be working together.

I will be assisting you with your computer issues. All of my proposed fixes and suggestions must be approved by a fully-qualified Malware Removal Instructor. This will delay response times somewhat, but I will endeavor to respond within a reasonable time, normally 48 hours after your last post.

I will need some time to review your FRST logs and consult with the Malware Response Instructor (MRI) who will be assigned to supervise this topic. That could take a few days. Once I have reviewed my proposed response with the assigned MRI, I will reply to you with initial instructions.

 

PLEASE CONFIRM THAT THE FRST LOGS you submitted initially in this topic (Post #1) are still an accurate reflection of your computer, now.

 

If you have installed or uninstalled programs or run any more anti-malware utilities since the date and time of the FRST LOG, please re-run a FRST scan again, and please ensure that "Addition.txt" is checked.  Please copy and paste both logs into a reply as soon as possible.

PLEASE DO NOT RUN ANY ADDITIONAL SCANS OR ANTI-MALWARE REMOVAL TOOLS, OR INSTALL/UNINSTALL PROGRAMS UNTIL YOU HAVE RECEIVED A RESPONSE FROM ME.

Doing so would complicate the situation and it would cause further delays in resolving your issues. It could also potentially result in harm to your computer because my "fix" will be based on the FRST scan logs that you inform me are current.

Thank you and have a great day.

Regards,
-Phil


Graduate of the Bleeping Computer Malware Removal Study Hall


#9 MagicTux

MagicTux
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:50 AM

Posted 11 May 2016 - 07:03 AM

Hi Phil my name is Morten and I'm really glad that you are here to help me, I have been struggling with this for over a month now. 
I have tried a lot of different anti-malware removal since the first log from FRST, so I will provide some new logs below!

FRST log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:09-05-2016
Ran by monisteren (administrator) on MO-PC (11-05-2016 13:01:27)
Running from C:\Users\monisteren\Downloads
Loaded Profiles: monisteren (Available Profiles: monisteren)
Platform: Windows 8.1 Enterprise (X64) Language: Dansk (Danmark)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe
() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17709_none_fa7932f59afc2e40\TiWorker.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1651600 2016-04-25] (Bitdefender)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596504 2016-04-01] (Oracle Corporation)
HKU\S-1-5-21-3831128305-126522246-1650269402-1001\...\Run: [Steam] => C:\Games\Steam\steam.exe [3077712 2016-03-31] (Valve Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2016-05-04]
ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{401FADAA-1C16-4721-9F02-19067E1A1CA8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{7EE03374-CBFC-461F-AB3F-B04EB208C5C4}: [DhcpNameServer] 192.168.0.1
 
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3831128305-126522246-1650269402-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Bitdefender Wallet  -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-04-05] (Bitdefender)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-05-04] (Oracle Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-04] (Oracle Corporation)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-04-05] (Bitdefender)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-05-04] (Oracle Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-04] (Oracle Corporation)
Toolbar: HKLM - Bitdefender Wallet  - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-04-05] (Bitdefender)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-04-05] (Bitdefender)
 
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-04] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-04] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-04] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-04] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff [2016-04-26]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext
FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2016-04-26] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext
 
Chrome: 
=======
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Dokumenter) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-05-08]
CHR Extension: (Google Drev) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-08]
CHR Extension: (YouTube) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-08]
CHR Extension: (Google Docs Offline) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-08]
CHR Extension: (Betalinger i Chrome Webshop) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-08]
CHR Extension: (Gmail) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-08]
CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-23] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344168 2015-08-10] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [947640 2016-03-30] (Bitdefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [156016 2016-04-25] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1693104 2016-04-25] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R0 6215B8DF6; C:\Windows\System32\drivers\6215B8DF6.sys [478392 2016-05-09] (Kaspersky Lab ZAO)
R0 6215B8DF61; C:\Windows\System32\drivers\6215B8DF61.sys [478392 2016-05-09] (Kaspersky Lab ZAO)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1623536 2016-03-18] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [842152 2016-03-18] (BitDefender)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [127312 2016-02-22] (BitDefender LLC)
S4 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender)
R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [75056 2013-02-13] (Qualcomm Atheros, Inc.)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R1 epp; C:\EEK\bin64\epp.sys [124080 2016-02-11] (Emsisoft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [182936 2015-12-16] (BitDefender LLC)
R3 Ke2200; C:\Windows\system32\DRIVERS\e22w8x64.sys [163536 2013-03-20] (Qualcomm Atheros, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-05-11] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [184608 2015-07-07] (Intel Corporation)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [28272 2016-05-07] ()
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [511320 2016-02-22] (BitDefender S.R.L.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 MFE_RR; \??\C:\Users\MONIST~1\AppData\Local\Temp\mfe_rr.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-05-11 13:01 - 2016-05-11 13:01 - 02381312 _____ (Farbar) C:\Users\monisteren\Downloads\FRST64.exe
2016-05-11 13:01 - 2016-05-11 13:01 - 00013241 _____ C:\Users\monisteren\Downloads\FRST.txt
2016-05-11 13:01 - 2016-05-11 13:01 - 00000000 ____D C:\FRST
2016-05-11 12:36 - 2016-05-11 12:36 - 00231390 _____ C:\Users\monisteren\Downloads\RootkitRevealer.zip
2016-05-11 11:58 - 2016-05-11 11:58 - 22851472 _____ (Malwarebytes ) C:\Users\monisteren\Downloads\mbam-setup-bc.1878-2.2.1.1043.exe
2016-05-11 10:21 - 2016-05-11 10:21 - 01953658 _____ C:\Users\monisteren\Downloads\hjred103.zip
2016-05-11 10:20 - 2016-05-11 10:20 - 01270466 _____ C:\Users\monisteren\Downloads\ProcessExplorer.zip
2016-05-10 22:58 - 2016-05-10 22:58 - 00784152 _____ (McAfee, Inc.) C:\Users\monisteren\Downloads\rootkitremover.exe
2016-05-09 22:16 - 2016-05-09 22:21 - 00000000 ____D C:\Users\monisteren\Downloads\Triple.9.2016.Custom.DKsubs.1080p.WEB-DL.x264-UNiTY
2016-05-09 22:16 - 2016-05-09 22:16 - 00020048 _____ C:\Users\monisteren\Downloads\Triple.9.2016.Custom.DKsubs.1080p.WEB-DL.x264-UNiTY.torrent
2016-05-09 22:05 - 2016-05-09 22:05 - 00478392 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\6215B8DF61.sys
2016-05-09 22:03 - 2016-05-09 22:03 - 00478392 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\6215B8DF6.sys
2016-05-09 22:02 - 2016-05-09 22:03 - 00000846 _____ C:\Users\monisteren\Downloads\Stinger_09052016_220259.html
2016-05-09 22:02 - 2016-05-09 22:02 - 00000846 _____ C:\Users\monisteren\Downloads\Stinger_09052016_220217.html
2016-05-09 22:01 - 2016-05-09 22:01 - 00000807 _____ C:\Users\monisteren\Downloads\Stinger_09052016_220106.html
2016-05-09 21:57 - 2016-05-09 21:57 - 00000000 ____D C:\KVRT_Data
2016-05-09 21:49 - 2016-05-09 22:03 - 00000124 ___RH C:\Users\monisteren\Downloads\Stinger.opt
2016-05-09 21:49 - 2016-05-09 21:49 - 96118248 _____ (Kaspersky Lab ZAO) C:\Users\monisteren\Downloads\KVRT.exe
2016-05-09 20:41 - 2016-05-09 20:41 - 00704672 _____ (Sysinternals - www.sysinternals.com) C:\Users\monisteren\Downloads\autoruns.exe
2016-05-09 20:33 - 2016-05-09 22:03 - 00000000 ____D C:\Program Files (x86)\stinger
2016-05-09 20:33 - 2016-05-09 21:22 - 00001058 _____ C:\Users\monisteren\Downloads\Stinger_09052016_203313.html
2016-05-09 20:33 - 2016-05-09 20:33 - 00000000 ____D C:\Users\monisteren\AppData\Local\WmiExplorer
2016-05-09 20:33 - 2016-05-09 20:33 - 00000000 ____D C:\Quarantine
2016-05-09 20:32 - 2016-05-09 20:32 - 15901040 _____ (McAfee Inc) C:\Users\monisteren\Downloads\stinger32.exe
2016-05-09 20:32 - 2016-05-09 20:32 - 01720176 _____ (McAfee Inc.) C:\Users\monisteren\Downloads\realprotect.exe
2016-05-09 20:32 - 2016-05-09 20:32 - 00228140 _____ C:\Users\monisteren\Downloads\WMIExplorer_2.0.0.0.zip
2016-05-09 20:32 - 2016-05-09 20:32 - 00000000 ____D C:\Program Files\McAfee
2016-05-09 20:02 - 2016-05-09 20:02 - 00380928 _____ C:\Users\monisteren\Downloads\db0083kc.exe
2016-05-08 17:58 - 2016-05-08 17:58 - 00000808 _____ C:\Users\Public\Desktop\Speccy.lnk
2016-05-08 17:58 - 2016-05-08 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2016-05-08 17:58 - 2016-05-08 17:58 - 00000000 ____D C:\Program Files\Speccy
2016-05-08 17:57 - 2016-05-08 17:57 - 05111240 _____ (Piriform Ltd) C:\Users\monisteren\Downloads\spsetup129.exe
2016-05-08 12:16 - 2016-05-08 12:16 - 00000000 ____D C:\Users\monisteren\Downloads\log
2016-05-08 00:08 - 2016-05-08 00:08 - 00210902 _____ C:\TDSSKiller.3.1.0.9_08.05.2016_00.08.04_log.txt
2016-05-07 23:52 - 2016-05-08 00:06 - 00000108 _____ C:\Users\monisteren\Desktop\Nyt tekstdokument.txt
2016-05-07 23:23 - 2016-05-07 23:23 - 00000000 ____D C:\TDSSKiller_Quarantine
2016-05-07 23:22 - 2016-05-07 23:23 - 00414846 _____ C:\TDSSKiller.3.1.0.9_07.05.2016_23.22.39_log.txt
2016-05-07 23:11 - 2016-05-07 23:11 - 00209262 _____ C:\TDSSKiller.3.1.0.9_07.05.2016_23.11.25_log.txt
2016-05-07 23:02 - 2016-05-07 23:02 - 00000043 _____ C:\Users\monisteren\Desktop\asdasd.txt
2016-05-07 23:02 - 2016-05-07 23:02 - 00000000 ____D C:\Windows\pss
2016-05-07 22:59 - 2016-05-07 22:59 - 11427128 _____ (Bitdefender LLC) C:\Users\monisteren\Desktop\qweqweqweqad.exe
2016-05-07 20:27 - 2016-05-07 20:28 - 00416622 _____ C:\TDSSKiller.3.1.0.9_07.05.2016_20.27.32_log.txt
2016-05-07 20:21 - 2016-05-07 20:21 - 00002210 _____ C:\Users\monisteren\Desktop\Rkill.txt
2016-05-06 15:56 - 2016-05-08 12:17 - 00000000 ____D C:\Users\monisteren\Downloads\TMRBLog
2016-05-06 12:34 - 2016-05-06 12:34 - 135176864 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-05-06 12:34 - 2016-05-06 12:34 - 00000000 ____D C:\Windows\system32\MRT
2016-05-06 12:31 - 2014-04-16 01:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2016-05-06 12:31 - 2014-04-16 01:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2016-05-06 12:17 - 2014-10-31 00:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-05-06 12:17 - 2014-10-31 00:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-05-06 12:17 - 2014-04-19 13:15 - 21186352 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-05-06 12:17 - 2014-04-19 08:49 - 18644072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-05-06 12:17 - 2014-01-31 18:15 - 00311640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2016-05-06 12:17 - 2014-01-31 18:07 - 00233920 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-05-06 12:17 - 2014-01-31 18:06 - 02133208 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-05-06 12:17 - 2014-01-31 15:47 - 02143960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-05-06 12:17 - 2014-01-31 11:06 - 00716288 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2016-05-06 12:17 - 2014-01-29 10:53 - 00458616 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2016-05-06 12:17 - 2014-01-29 10:53 - 00407024 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2016-05-06 12:17 - 2014-01-29 10:49 - 01928144 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-05-06 12:17 - 2014-01-29 10:47 - 02543960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-05-06 12:17 - 2014-01-29 09:44 - 01371824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-05-06 12:17 - 2014-01-29 09:44 - 00408480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2016-05-06 12:17 - 2014-01-29 09:44 - 00369280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2016-05-06 12:17 - 2014-01-29 08:41 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2016-05-06 12:17 - 2014-01-29 02:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2016-05-06 12:17 - 2014-01-27 21:07 - 04175360 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2016-05-06 12:17 - 2014-01-27 21:06 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-05-06 12:17 - 2014-01-27 21:04 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2016-05-06 12:17 - 2014-01-27 20:23 - 02873344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2016-05-06 12:17 - 2014-01-27 20:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2016-05-06 12:17 - 2014-01-27 20:20 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2016-05-06 12:17 - 2014-01-27 20:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2016-05-06 12:17 - 2014-01-27 19:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2016-05-06 12:17 - 2014-01-27 19:18 - 01486848 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2016-05-06 12:17 - 2014-01-27 19:00 - 01238016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2016-05-06 12:17 - 2014-01-27 17:58 - 05770752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-05-06 12:17 - 2014-01-27 17:50 - 06640640 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-05-06 12:17 - 2014-01-27 13:45 - 00386722 _____ C:\Windows\system32\ApnDatabase.xml
2016-05-06 12:17 - 2014-01-18 01:04 - 00764864 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2016-05-06 12:17 - 2014-01-17 23:54 - 00669352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2016-05-06 12:17 - 2014-01-08 03:46 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2016-05-06 12:17 - 2014-01-08 03:41 - 01530712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-05-06 12:17 - 2014-01-08 03:41 - 00382808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-05-06 12:17 - 2014-01-07 07:00 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-05-06 12:17 - 2014-01-07 06:30 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-05-06 12:17 - 2014-01-04 17:54 - 00138240 _____ C:\Windows\system32\OEMLicense.dll
2016-05-06 12:17 - 2014-01-04 17:08 - 00103936 _____ C:\Windows\SysWOW64\OEMLicense.dll
2016-05-06 12:17 - 2014-01-04 16:08 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2016-05-06 12:17 - 2014-01-04 15:53 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2016-05-06 12:17 - 2014-01-03 01:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-05-06 12:17 - 2014-01-03 01:48 - 00336896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2016-05-06 12:17 - 2014-01-01 03:55 - 01720560 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-05-06 12:17 - 2014-01-01 03:52 - 00481944 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-05-06 12:17 - 2014-01-01 02:56 - 01472048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-05-06 12:17 - 2014-01-01 02:55 - 00381168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-05-06 12:17 - 2014-01-01 01:59 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-05-06 12:17 - 2014-01-01 01:57 - 01214976 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-05-06 12:17 - 2014-01-01 01:56 - 00960512 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-05-06 12:17 - 2013-12-31 01:34 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sti.dll
2016-05-06 12:17 - 2013-12-31 01:33 - 00770560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2016-05-06 12:17 - 2013-12-31 01:32 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\sti.dll
2016-05-06 12:17 - 2013-12-31 01:31 - 00947712 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2016-05-06 12:17 - 2013-12-31 01:31 - 00914944 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2016-05-06 12:17 - 2013-12-27 17:09 - 00419160 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2016-05-06 12:17 - 2013-12-27 10:57 - 00842752 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
2016-05-06 12:17 - 2013-12-27 10:57 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-05-06 12:17 - 2013-12-27 10:23 - 00749056 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-05-06 12:17 - 2013-12-27 09:03 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
2016-05-06 12:17 - 2013-12-27 09:03 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2016-05-06 12:17 - 2013-12-27 08:37 - 00588800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2016-05-06 12:17 - 2013-12-21 16:51 - 06353960 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-05-06 12:17 - 2013-12-21 10:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2016-05-06 12:17 - 2013-12-21 09:21 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll
2016-05-06 12:17 - 2013-12-17 09:21 - 00408576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-05-06 12:17 - 2013-12-14 08:31 - 13949440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-05-06 12:17 - 2013-12-14 08:19 - 18576384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-05-06 12:17 - 2013-12-13 12:54 - 00131160 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe
2016-05-06 12:17 - 2013-12-13 09:24 - 00121088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2016-05-06 12:17 - 2013-12-13 08:36 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2016-05-06 12:17 - 2013-12-13 07:32 - 00140800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll
2016-05-06 12:17 - 2013-12-11 09:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2016-05-06 12:17 - 2013-12-09 02:34 - 01227264 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-05-06 12:17 - 2013-12-09 02:27 - 02152448 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-05-06 12:17 - 2013-12-09 02:19 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2016-05-06 12:17 - 2013-12-09 02:04 - 00980480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2016-05-06 12:17 - 2013-12-09 01:55 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2016-05-06 12:17 - 2013-12-09 01:54 - 01317376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-05-06 12:17 - 2013-11-27 17:36 - 03395920 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2016-05-06 12:17 - 2013-11-27 17:34 - 03210528 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-05-06 12:17 - 2013-11-27 17:27 - 00809872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-05-06 12:17 - 2013-11-27 16:00 - 00663680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2016-05-06 12:17 - 2013-11-27 15:47 - 02804528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-05-06 12:17 - 2013-11-27 14:02 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipnat.sys
2016-05-06 12:17 - 2013-11-27 13:41 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe
2016-05-06 12:17 - 2013-11-27 12:24 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2016-05-06 12:17 - 2013-11-27 11:46 - 00273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2016-05-06 12:17 - 2013-11-27 11:41 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2016-05-06 12:17 - 2013-11-27 11:17 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-05-06 12:17 - 2013-11-27 11:10 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll
2016-05-06 12:17 - 2013-11-27 10:58 - 01503232 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2016-05-06 12:17 - 2013-11-27 10:56 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll
2016-05-06 12:17 - 2013-11-27 10:48 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-05-06 12:17 - 2013-11-27 10:40 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-05-06 12:17 - 2013-11-27 10:20 - 04106240 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2016-05-06 12:17 - 2013-11-27 10:17 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2016-05-06 12:17 - 2013-11-27 10:12 - 00848384 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2016-05-06 12:17 - 2013-11-26 15:20 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-05-06 12:17 - 2013-11-26 15:20 - 01374384 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-05-06 12:17 - 2013-11-26 13:44 - 01204968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2016-05-06 12:17 - 2013-11-25 03:45 - 00142680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-05-06 12:17 - 2013-11-25 03:32 - 01119064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-05-06 12:17 - 2013-11-25 01:30 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2016-05-06 12:17 - 2013-11-25 01:28 - 00589824 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-05-06 12:17 - 2013-11-23 14:47 - 00032088 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2016-05-06 12:17 - 2013-11-23 09:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\bi.dll
2016-05-06 12:17 - 2013-11-23 09:13 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BtaMPM.sys
2016-05-06 12:17 - 2013-11-23 09:08 - 00403456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-05-06 12:17 - 2013-11-23 06:50 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2016-05-06 12:17 - 2013-11-23 05:19 - 02617344 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-05-06 12:17 - 2013-11-23 05:15 - 02295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-05-06 12:17 - 2013-11-21 08:58 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\deviceregistration.dll
2016-05-06 12:17 - 2013-11-21 08:42 - 04604416 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-05-06 12:17 - 2013-11-21 08:26 - 01415680 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-05-06 12:17 - 2013-11-21 07:44 - 03936256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-05-06 12:17 - 2013-11-15 16:59 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-05-06 12:17 - 2013-11-15 16:25 - 00433664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-05-06 12:17 - 2013-11-15 16:08 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-05-06 12:17 - 2013-11-15 15:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-05-06 12:17 - 2013-11-11 04:48 - 00039768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2016-05-06 12:17 - 2013-11-09 08:37 - 01756160 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2016-05-06 12:17 - 2013-11-09 07:56 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2016-05-06 12:17 - 2013-11-08 12:26 - 00358896 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2016-05-06 12:17 - 2013-11-08 07:23 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\appmgr.dll
2016-05-06 12:17 - 2013-11-08 06:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-05-06 12:17 - 2013-11-08 06:42 - 00366080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appmgr.dll
2016-05-06 12:17 - 2013-11-08 06:16 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2016-05-06 12:17 - 2013-11-08 06:15 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2016-05-06 12:17 - 2013-11-08 05:41 - 01302528 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-05-06 12:17 - 2013-11-08 05:14 - 00922624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2016-05-06 12:17 - 2013-11-05 16:19 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2016-05-06 12:17 - 2013-11-05 15:17 - 00565248 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2016-05-06 12:17 - 2013-11-04 15:07 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2016-05-06 12:17 - 2013-11-04 13:50 - 02143744 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-05-06 12:17 - 2013-11-04 12:32 - 02570240 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2016-05-06 12:17 - 2013-11-04 04:28 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2016-05-06 12:17 - 2013-11-04 03:30 - 01765376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-05-06 12:17 - 2013-11-01 13:39 - 00086872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-05-06 12:17 - 2013-11-01 08:08 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll
2016-05-06 12:17 - 2013-11-01 07:57 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2016-05-06 12:17 - 2013-10-31 02:58 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-05-06 12:17 - 2013-10-31 02:42 - 07399256 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-06 12:17 - 2013-10-31 02:29 - 00745336 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-05-06 12:17 - 2013-10-31 01:41 - 00552624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-05-06 12:17 - 2013-10-26 03:54 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SerCx2.sys
2016-05-06 12:17 - 2013-10-24 11:31 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2016-05-06 12:17 - 2013-10-24 11:12 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2016-05-06 12:17 - 2013-10-23 13:29 - 00044936 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll
2016-05-06 12:17 - 2013-10-23 13:21 - 00155480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2016-05-06 12:17 - 2013-10-23 13:13 - 00171864 _____ (Microsoft Corporation) C:\Windows\system32\kd_02_8086.dll
2016-05-06 12:17 - 2013-10-22 10:18 - 00096088 _____ (Microsoft Corporation) C:\Windows\system32\embeddedapplauncher.exe
2016-05-06 12:17 - 2013-10-22 09:55 - 02328872 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-05-06 12:17 - 2013-10-22 08:03 - 02065448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-05-06 12:17 - 2013-10-22 07:15 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-05-06 12:17 - 2013-10-22 06:04 - 00618496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-05-06 12:17 - 2013-10-22 05:56 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2016-05-06 12:17 - 2013-10-22 05:44 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2016-05-06 12:17 - 2013-10-22 04:38 - 01362944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-05-06 12:17 - 2013-10-22 04:22 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2016-05-06 12:17 - 2013-10-22 04:13 - 01704448 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-05-06 12:17 - 2013-10-22 03:53 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2016-05-06 12:17 - 2013-10-19 10:53 - 00075360 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2016-05-06 12:17 - 2013-10-19 10:08 - 23212544 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-05-06 12:17 - 2013-10-19 09:14 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2016-05-06 12:17 - 2013-10-19 08:37 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-05-06 12:17 - 2013-10-19 08:02 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-05-06 12:17 - 2013-10-19 07:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-05-06 12:17 - 2013-10-19 07:19 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-05-06 12:17 - 2013-10-19 07:10 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-05-06 12:17 - 2013-10-19 06:52 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-05-06 12:17 - 2013-10-19 06:48 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-05-06 12:17 - 2013-10-19 06:44 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-05-06 12:17 - 2013-10-19 06:37 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-06 12:17 - 2013-10-19 06:31 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-05-06 12:17 - 2013-10-19 06:03 - 00531968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2016-05-06 12:17 - 2013-10-19 05:56 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-05-06 12:17 - 2013-10-19 05:55 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-05-06 12:17 - 2013-10-19 05:53 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-05-06 12:17 - 2013-10-19 05:26 - 01231360 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-05-06 12:17 - 2013-10-19 05:23 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-06 12:17 - 2013-10-19 05:14 - 00888832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-05-06 12:17 - 2013-10-19 05:09 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-05-06 12:17 - 2013-10-19 05:02 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-05-06 12:17 - 2013-10-17 13:21 - 02896896 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-05-06 12:17 - 2013-10-17 12:36 - 02266624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2016-05-06 12:17 - 2013-10-16 11:34 - 00518656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2016-05-06 12:17 - 2013-10-16 11:33 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-05-06 12:17 - 2013-10-13 05:06 - 00258904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2016-05-06 12:17 - 2013-10-13 04:43 - 00708616 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2016-05-06 12:17 - 2013-10-10 18:26 - 00317616 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-05-06 12:17 - 2013-10-10 18:26 - 00104320 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2016-05-06 12:17 - 2013-10-10 16:53 - 00235960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-05-06 12:17 - 2013-10-10 16:53 - 00088272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2016-05-06 12:17 - 2013-10-10 13:53 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2016-05-06 12:17 - 2013-10-10 13:38 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-05-06 12:17 - 2013-10-10 13:26 - 02801664 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-05-06 12:17 - 2013-10-10 13:21 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2016-05-06 12:17 - 2013-10-10 13:05 - 01019392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-05-06 12:17 - 2013-10-10 12:34 - 01085952 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2016-05-06 12:17 - 2013-10-10 12:27 - 00869888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2016-05-06 12:17 - 2013-10-08 12:28 - 00523096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2016-05-06 12:17 - 2013-10-08 08:46 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2016-05-06 12:17 - 2013-10-08 07:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll
2016-05-06 12:17 - 2013-10-08 07:50 - 00656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-05-06 12:17 - 2013-10-08 07:48 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-05-06 12:17 - 2013-10-08 07:15 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-05-06 12:17 - 2013-10-08 07:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2016-05-06 12:17 - 2013-10-08 06:50 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-05-06 12:17 - 2013-10-08 06:50 - 00762368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2016-05-06 12:17 - 2013-10-07 09:21 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-05-06 12:17 - 2013-10-07 04:13 - 03532288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-05-06 12:17 - 2013-10-05 17:25 - 00057176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2016-05-06 12:17 - 2013-10-05 16:21 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-05-06 12:17 - 2013-10-05 16:21 - 00699840 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-05-06 12:17 - 2013-10-05 16:21 - 00516496 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-05-06 12:17 - 2013-10-05 14:05 - 01765384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-05-06 12:17 - 2013-10-05 14:05 - 00578952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-05-06 12:17 - 2013-10-05 14:05 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-05-06 12:17 - 2013-10-05 13:01 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-05-06 12:17 - 2013-10-05 11:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2016-05-06 12:17 - 2013-10-05 11:18 - 01011712 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-05-06 12:17 - 2013-10-05 11:07 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-05-06 12:17 - 2013-10-05 10:56 - 01147904 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2016-05-06 12:17 - 2013-10-05 10:55 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\miutils.dll
2016-05-06 12:17 - 2013-10-05 10:40 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2016-05-06 12:17 - 2013-10-05 10:24 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\miutils.dll
2016-05-06 12:17 - 2013-10-05 10:21 - 00920064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2016-05-06 12:17 - 2013-10-05 10:15 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2016-05-06 12:17 - 2013-10-05 09:43 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2016-05-06 12:17 - 2013-10-05 09:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-05-06 12:17 - 2013-10-04 10:10 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2016-05-06 12:17 - 2013-10-03 11:16 - 00294400 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2016-05-06 12:17 - 2013-10-03 11:02 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2016-05-06 12:17 - 2013-10-02 13:00 - 01286552 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-05-06 12:17 - 2013-10-02 11:47 - 01018960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-05-06 12:17 - 2013-10-01 05:42 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2016-05-06 12:17 - 2013-10-01 05:36 - 00977408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2016-05-06 12:17 - 2013-09-17 11:06 - 01067080 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2016-05-06 12:17 - 2013-09-17 11:06 - 00465960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-05-06 12:17 - 2013-09-17 09:01 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-05-06 12:17 - 2013-09-17 08:31 - 00883184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2016-05-06 12:17 - 2013-09-17 08:31 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-05-06 12:17 - 2013-09-17 06:37 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2016-05-06 12:17 - 2013-09-14 16:07 - 02134120 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2016-05-06 12:17 - 2013-09-14 16:00 - 00391512 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2016-05-06 12:17 - 2013-09-14 14:39 - 01799944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2016-05-06 12:17 - 2013-09-14 14:33 - 00345552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2016-05-06 12:17 - 2013-09-14 12:05 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2016-05-06 12:17 - 2013-09-14 11:11 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2016-05-06 12:17 - 2013-09-13 10:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2016-05-06 12:17 - 2013-09-13 09:47 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ftp.exe
2016-05-06 12:17 - 2013-09-12 10:45 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2016-05-06 12:17 - 2013-09-12 10:08 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2016-05-06 12:17 - 2013-09-12 10:08 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2016-05-06 12:17 - 2013-09-12 10:02 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2016-05-06 12:17 - 2013-09-12 09:44 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2016-05-06 12:17 - 2013-09-12 09:37 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2016-05-06 12:17 - 2013-09-12 09:37 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll
2016-05-06 12:17 - 2013-09-12 09:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2016-05-06 12:17 - 2013-09-12 09:16 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2016-05-06 12:17 - 2013-09-12 09:01 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2016-05-06 12:17 - 2013-09-10 06:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\msched.dll
2016-05-06 12:16 - 2014-03-10 12:35 - 02008408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-05-06 12:16 - 2014-03-10 12:35 - 00377176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-05-06 12:16 - 2014-03-06 11:19 - 01287576 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-05-06 12:16 - 2014-03-06 11:02 - 01109424 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-05-06 12:16 - 2014-03-06 08:17 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-05-06 12:16 - 2014-03-06 08:10 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-05-06 12:16 - 2014-01-04 22:50 - 01462216 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2016-05-06 12:16 - 2014-01-04 21:22 - 01202888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2016-05-06 12:16 - 2014-01-04 16:30 - 13209088 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-05-06 12:16 - 2014-01-04 16:23 - 11702272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-05-06 12:16 - 2014-01-04 16:03 - 00919040 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2016-05-06 12:16 - 2014-01-04 15:47 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2016-05-06 12:16 - 2014-01-04 15:42 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2016-05-06 12:16 - 2014-01-04 15:40 - 07416832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-05-06 12:16 - 2014-01-04 15:36 - 00830976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2016-05-06 12:16 - 2014-01-04 15:28 - 04961792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2016-05-06 12:16 - 2013-12-21 04:10 - 00009701 _____ C:\Windows\SysWOW64\connectedsearch-results.searchconnector-ms
2016-05-06 12:16 - 2013-12-21 04:10 - 00009701 _____ C:\Windows\system32\connectedsearch-results.searchconnector-ms
2016-05-06 12:16 - 2013-12-20 12:18 - 01643584 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-05-06 12:16 - 2013-12-20 12:18 - 01507704 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-05-06 12:16 - 2013-11-23 06:34 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2016-05-06 12:16 - 2013-11-23 06:13 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2016-05-06 12:16 - 2013-10-31 02:33 - 01476184 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-05-06 12:16 - 2013-10-31 02:33 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-05-06 12:16 - 2013-10-13 04:48 - 00136536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2016-05-06 12:16 - 2013-10-12 23:48 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2016-05-06 12:16 - 2013-10-12 23:34 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-05-06 12:16 - 2013-10-05 16:21 - 01341288 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-05-06 12:16 - 2013-10-05 10:39 - 01067008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-05-06 12:14 - 2014-02-11 05:04 - 04189184 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-05-06 12:14 - 2014-02-11 04:43 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-05-06 12:14 - 2014-02-11 04:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-05-06 12:14 - 2014-01-07 09:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe
2016-05-06 12:14 - 2014-01-07 07:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.exe
2016-05-06 12:14 - 2013-10-16 17:58 - 01943536 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-05-06 12:14 - 2013-10-16 15:54 - 01581968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-05-06 12:13 - 2013-12-09 02:15 - 00787968 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2016-05-06 12:13 - 2013-11-09 08:34 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2016-05-06 12:13 - 2013-11-09 08:34 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-05-06 12:13 - 2013-11-09 07:52 - 00240128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2016-05-06 12:13 - 2013-10-15 10:54 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-05-06 12:13 - 2013-10-15 10:03 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2016-05-05 16:49 - 2016-05-05 16:49 - 00372043 _____ C:\Users\Public\Desktop\bdsyslog.zip
2016-05-05 16:47 - 2016-05-05 16:47 - 06590976 _____ (Bitdefender S.R.L) C:\Users\monisteren\Downloads\BDSysLog_i.exe
2016-05-05 16:43 - 2016-05-05 16:43 - 00852798 _____ C:\Users\monisteren\Downloads\SecurityCheck.exe
2016-05-05 14:38 - 2016-05-09 22:34 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\vlc
2016-05-05 14:37 - 2016-05-05 14:37 - 00211670 _____ C:\TDSSKiller.3.1.0.9_05.05.2016_14.37.08_log.txt
2016-05-05 14:36 - 2016-05-05 14:36 - 00050477 _____ C:\Users\monisteren\Downloads\Defogger.exe
2016-05-05 14:22 - 2016-05-10 00:55 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\qBittorrent
2016-05-05 14:22 - 2016-05-05 14:23 - 00000000 ____D C:\Users\monisteren\Downloads\Formel.1.2016.Rusland.Race.720p50
2016-05-05 14:22 - 2016-05-05 14:22 - 00000000 ____D C:\Users\monisteren\AppData\Local\qBittorrent
2016-05-04 21:53 - 2016-05-04 21:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-05-04 21:47 - 2016-05-11 12:37 - 00000000 ____D C:\Users\monisteren\AppData\Local\CrashDumps
2016-05-04 21:17 - 2016-05-07 23:32 - 00000000 ____D C:\AdwCleaner
2016-05-04 20:59 - 2016-05-04 20:59 - 00045414 _____ C:\Users\monisteren\Downloads\Extras.Txt
2016-05-04 20:44 - 2016-05-04 20:44 - 03203332 _____ C:\Users\monisteren\Downloads\gmer1.txt
2016-05-04 20:42 - 2016-05-04 20:42 - 03615296 _____ C:\Users\monisteren\Downloads\AdwCleaner (1).exe
2016-05-04 20:41 - 2016-05-04 20:41 - 00000000 ____D C:\Program Files (x86)\ESET
2016-05-04 20:39 - 2016-05-07 23:26 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-05-04 20:38 - 2016-05-07 23:26 - 00000000 ____D C:\Users\monisteren\Desktop\mbar
2016-05-04 20:32 - 2016-05-04 20:33 - 00628656 _____ C:\TDSSKiller.3.1.0.9_04.05.2016_20.32.57_log.txt
2016-05-04 20:32 - 2016-05-04 20:32 - 00002330 _____ C:\TDSSKiller.3.1.0.9_04.05.2016_20.32.08_log.txt
2016-05-04 20:29 - 2016-05-04 20:29 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\monisteren\Desktop\cykablyatkurwajebemtemama.exe
2016-05-04 20:24 - 2016-05-07 23:29 - 00000000 ____D C:\ProgramData\RogueKiller
2016-05-04 20:24 - 2016-05-07 23:27 - 00028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2016-05-04 20:07 - 2016-05-08 00:07 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-05-04 20:07 - 2016-05-04 20:07 - 00885504 _____ (Akeo Consulting (hxxp://akeo.ie)) C:\Users\monisteren\Downloads\rufus-2.8.exe
2016-05-04 20:06 - 2016-05-04 20:06 - 05860019 _____ C:\Users\monisteren\Downloads\mb_bios_ga-z97x-gaming3_f8d.zip
2016-05-04 20:06 - 2016-05-04 20:06 - 00000000 ____D C:\Users\monisteren\Downloads\mb_bios_ga-z97x-gaming3_f8d
2016-05-04 20:06 - 2016-05-04 20:06 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\WinRAR
2016-05-04 18:44 - 2016-05-04 18:44 - 00000000 ____D C:\Users\monisteren\AppData\Local\Steam
2016-05-04 18:44 - 2016-05-04 18:44 - 00000000 ____D C:\Users\monisteren\AppData\Local\CEF
2016-05-04 18:43 - 2016-05-04 18:43 - 01380712 _____ C:\Users\monisteren\Downloads\SteamSetup.exe
2016-05-04 18:43 - 2016-05-04 18:43 - 00000680 _____ C:\Users\Public\Desktop\Steam.lnk
2016-05-04 18:43 - 2016-05-04 18:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-05-04 18:43 - 2016-05-04 18:43 - 00000000 ____D C:\Games
2016-05-04 18:31 - 2016-05-04 18:31 - 00026034 _____ C:\ProgramData\1462379477.bdinstall.bin
2016-05-04 18:30 - 2016-05-04 18:30 - 10314888 _____ C:\Users\monisteren\Downloads\bitdefender_windows_296b4a9e-91b8-44ed-a088-94e53dfd9cfc.exe
2016-05-04 18:30 - 2016-05-04 18:30 - 00026034 _____ C:\ProgramData\1462379447.bdinstall.bin
2016-05-04 18:00 - 2016-05-07 23:37 - 00000000 ____D C:\EEK
2016-05-04 17:43 - 2016-05-11 12:05 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-05-04 17:41 - 2016-05-04 17:44 - 00208944 _____ C:\TDSSKiller.3.1.0.9_04.05.2016_17.41.52_log.txt
2016-05-04 17:26 - 2016-05-11 12:02 - 00001114 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-05-04 17:26 - 2016-05-11 12:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-05-04 17:26 - 2016-05-11 12:02 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-05-04 17:26 - 2016-05-04 17:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-05-04 17:26 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-05-04 17:26 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-05-04 17:26 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-05-04 17:25 - 2016-05-04 18:04 - 00000000 ____D C:\Users\monisteren\AppData\Local\Google
2016-05-04 17:25 - 2016-05-04 17:25 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-05-04 17:25 - 2016-05-04 17:25 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-05-04 17:25 - 2016-05-04 17:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2016-05-04 17:25 - 2016-05-04 17:25 - 00000000 ____D C:\Program Files\Java
2016-05-04 17:24 - 2016-05-04 17:25 - 00000000 ____D C:\Program Files (x86)\Java
2016-05-04 17:24 - 2016-05-04 17:24 - 00001073 _____ C:\Users\Public\Desktop\qBittorrent.lnk
2016-05-04 17:24 - 2016-05-04 17:24 - 00001053 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinSCP.lnk
2016-05-04 17:24 - 2016-05-04 17:24 - 00000991 _____ C:\Users\Public\Desktop\WinSCP.lnk
2016-05-04 17:24 - 2016-05-04 17:24 - 00000887 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-05-04 17:24 - 2016-05-04 17:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-05-04 17:24 - 2016-05-04 17:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2016-05-04 17:24 - 2016-05-04 17:24 - 00000000 ____D C:\Program Files\VideoLAN
2016-05-04 17:24 - 2016-05-04 17:24 - 00000000 ____D C:\Program Files (x86)\qBittorrent
2016-05-04 17:23 - 2016-05-08 17:58 - 00000000 ____D C:\Users\monisteren\.oracle_jre_usage
2016-05-04 17:23 - 2016-05-04 17:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-05-04 17:23 - 2016-05-04 17:24 - 00000000 ____D C:\Program Files (x86)\WinSCP
2016-05-04 17:23 - 2016-05-04 17:23 - 00001049 _____ C:\Users\Public\Desktop\Notepad++.lnk
2016-05-04 17:23 - 2016-05-04 17:23 - 00000997 _____ C:\Users\Public\Desktop\WinRAR.lnk
2016-05-04 17:23 - 2016-05-04 17:23 - 00000993 _____ C:\Users\Public\Desktop\PuTTY.lnk
2016-05-04 17:23 - 2016-05-04 17:23 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\Sun
2016-05-04 17:23 - 2016-05-04 17:23 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\Notepad++
2016-05-04 17:23 - 2016-05-04 17:23 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-05-04 17:23 - 2016-05-04 17:23 - 00000000 ____D C:\Users\monisteren\AppData\LocalLow\Sun
2016-05-04 17:23 - 2016-05-04 17:23 - 00000000 ____D C:\Users\monisteren\AppData\LocalLow\Oracle
2016-05-04 17:23 - 2016-05-04 17:23 - 00000000 ____D C:\ProgramData\Oracle
2016-05-04 17:23 - 2016-05-04 17:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-05-04 17:23 - 2016-05-04 17:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PuTTY
2016-05-04 17:23 - 2016-05-04 17:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2016-05-04 17:23 - 2016-05-04 17:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-05-04 17:23 - 2016-05-04 17:23 - 00000000 ____D C:\Program Files\WinRAR
2016-05-04 17:23 - 2016-05-04 17:23 - 00000000 ____D C:\Program Files (x86)\PuTTY
2016-05-04 17:23 - 2016-05-04 17:23 - 00000000 ____D C:\Program Files (x86)\Notepad++
2016-05-04 17:22 - 2016-05-11 12:33 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-04 17:22 - 2016-05-11 10:16 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-04 17:22 - 2016-05-10 22:28 - 00003924 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-04 17:22 - 2016-05-10 22:28 - 00003688 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-04 17:22 - 2016-05-04 17:22 - 00002227 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-04 17:22 - 2016-05-04 17:22 - 00002215 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-04 17:22 - 2016-05-04 17:22 - 00001171 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-05-04 17:22 - 2016-05-04 17:22 - 00001159 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-05-04 17:22 - 2016-05-04 17:22 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-05-04 17:22 - 2016-05-04 17:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-05-04 17:22 - 2016-05-04 17:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-05-04 17:22 - 2016-05-04 17:22 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-05-04 17:22 - 2016-05-04 17:22 - 00000000 ____D C:\Program Files (x86)\Google
2016-05-04 17:22 - 2016-05-04 16:47 - 00000000 ____D C:\Windows\Panther
2016-05-04 17:18 - 2016-05-04 17:18 - 00298736 _____ (Bitdefender) C:\Windows\system32\Drivers\ignis.sys
2016-05-04 17:14 - 2016-05-11 00:11 - 00019487 _____ C:\bdlog.txt
2016-05-04 17:14 - 2016-05-04 17:14 - 00398672 _____ C:\ProgramData\1462374316.bdinstall.bin
2016-05-04 17:10 - 2016-05-04 17:10 - 00000385 _____ C:\Users\monisteren\AppData\Roaminguser_gensett.xml
2016-05-04 17:06 - 2016-05-04 17:06 - 00003640 _____ C:\Windows\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2016-05-04 17:06 - 2016-05-04 17:06 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2016-05-04 17:05 - 2016-05-04 17:18 - 00000000 ____D C:\ProgramData\Bitdefender
2016-05-04 17:05 - 2016-05-04 17:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2016
2016-05-04 17:05 - 2016-05-04 17:14 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\Bitdefender
2016-05-04 17:05 - 2016-05-04 17:05 - 00002213 _____ C:\Users\Public\Desktop\Bitdefender 2016.lnk
2016-05-04 17:05 - 2016-05-04 17:05 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\QuickScan
2016-05-04 17:05 - 2016-05-04 17:05 - 00000000 ____D C:\ProgramData\BDLogging
2016-05-04 17:05 - 2016-05-04 17:05 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2016-05-04 17:05 - 2016-05-04 17:05 - 00000000 ____D C:\Program Files\Bitdefender
2016-05-04 17:05 - 2016-03-18 06:58 - 00842152 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys
2016-05-04 17:05 - 2016-03-18 06:56 - 01623536 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys
2016-05-04 17:05 - 2016-02-22 15:13 - 00511320 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2016-05-04 17:05 - 2015-12-16 05:53 - 00182936 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2016-05-04 17:05 - 2015-12-04 19:27 - 00087912 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys
2016-05-04 17:05 - 2013-09-08 20:04 - 00023568 _____ (Bitdefender) C:\Windows\system32\Drivers\bdelam.sys
2016-05-04 17:05 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
2016-05-04 17:04 - 2016-05-11 12:35 - 00000000 ____D C:\Program Files\Bitdefender Agent
2016-05-04 17:04 - 2016-05-04 17:04 - 00000000 ____D C:\ProgramData\Bitdefender Agent
2016-05-04 17:02 - 2016-05-04 17:02 - 00000118 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-05-04 17:01 - 2016-05-04 17:01 - 00018424 _____ C:\Windows\system32\results.xml
2016-05-04 17:00 - 2016-05-11 10:15 - 00000000 __SHD C:\Users\monisteren\IntelGraphicsProfiles
2016-05-04 17:00 - 2016-05-04 17:00 - 00000401 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-05-04 16:58 - 2016-05-04 16:58 - 01331736 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-05-04 16:58 - 2016-05-04 16:58 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-05-04 16:58 - 2016-05-04 16:58 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\Intel Corporation
2016-05-04 16:58 - 2016-05-04 16:58 - 00000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2016-05-04 16:57 - 2016-05-04 16:58 - 00000000 ____D C:\ProgramData\Qualcomm
2016-05-04 16:57 - 2016-05-04 16:57 - 00002799 _____ C:\Users\Public\Desktop\Killer Network Manager.lnk
2016-05-04 16:57 - 2016-05-04 16:57 - 00000724 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® HD Graphics Control Panel.lnk
2016-05-04 16:57 - 2016-05-04 16:57 - 00000712 _____ C:\Users\Public\Desktop\Intel® HD Graphics Control Panel.lnk
2016-05-04 16:57 - 2016-05-04 16:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros
2016-05-04 16:57 - 2016-05-04 16:57 - 00000000 ____D C:\ProgramData\Downloaded Installations
2016-05-04 16:57 - 2016-05-04 16:57 - 00000000 ____D C:\Program Files\Qualcomm Atheros
2016-05-04 16:57 - 2015-08-10 11:45 - 24849272 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 24049992 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 17807680 _____ C:\Windows\system32\igd11dxva64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 17331296 _____ C:\Windows\SysWOW64\igd11dxva32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 15981056 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 10851840 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 09551872 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 09426536 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 08637056 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 07519744 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 06725162 _____ C:\Windows\system32\igdclbif.bin
2016-05-04 16:57 - 2015-08-10 11:45 - 06189288 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 04918008 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2016-05-04 16:57 - 2015-08-10 11:45 - 04876008 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 03590656 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 03325440 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 02946688 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiVAD64.exe
2016-05-04 16:57 - 2015-08-10 11:45 - 02813952 _____ C:\Windows\system32\iglhxa64.cpa
2016-05-04 16:57 - 2015-08-10 11:45 - 02777088 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAAC64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 02039808 _____ (Intel Corporation) C:\Windows\system32\igfxLHM.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 01513984 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSecureSourceFilter64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 01402336 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 01399240 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 01370624 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 01277736 _____ (Intel Corporation) C:\Windows\system32\igdmd64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 01131008 _____ (Intel Corporation) C:\Windows\system32\GfxResources.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 01064448 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 01036904 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe
2016-05-04 16:57 - 2015-08-10 11:45 - 01033832 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe
2016-05-04 16:57 - 2015-08-10 11:45 - 01020176 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmd32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 01015808 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiWinNextAgent64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00698880 _____ (Intel Corporation) C:\Windows\system32\igfxDH.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00672768 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAudioFilter64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00641530 _____ C:\Windows\system32\FilmModeDetection.wmv
2016-05-04 16:57 - 2015-08-10 11:45 - 00624128 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00616960 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMux64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00472168 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUMS64.exe
2016-05-04 16:57 - 2015-08-10 11:45 - 00448104 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe
2016-05-04 16:57 - 2015-08-10 11:45 - 00425472 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00403671 _____ C:\Windows\system32\ImageStabilization.wmv
2016-05-04 16:57 - 2015-08-10 11:45 - 00393320 _____ C:\Windows\system32\igfxTray.exe
2016-05-04 16:57 - 2015-08-10 11:45 - 00385024 _____ (Intel Corporation) C:\Windows\system32\igfxOSP.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00375173 _____ C:\Windows\system32\ColorImageEnhancement.wmv
2016-05-04 16:57 - 2015-08-10 11:45 - 00374272 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00372224 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00354816 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSilenceFilter64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00344168 _____ (Intel Corporation) C:\Windows\system32\igfxCUIService.exe
2016-05-04 16:57 - 2015-08-10 11:45 - 00339048 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe
2016-05-04 16:57 - 2015-08-10 11:45 - 00338536 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe
2016-05-04 16:57 - 2015-08-10 11:45 - 00313448 _____ (Intel Corporation) C:\Windows\system32\igfxEM.exe
2016-05-04 16:57 - 2015-08-10 11:45 - 00304128 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxDI.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00282696 _____ (Intel Corporation) C:\Windows\system32\igd10idpp64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00279144 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2016-05-04 16:57 - 2015-08-10 11:45 - 00268800 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUtils64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00263120 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10idpp32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00256000 _____ C:\Windows\system32\igfxCPL.cpl
2016-05-04 16:57 - 2015-08-10 11:45 - 00248424 _____ (Intel Corporation) C:\Windows\system32\igfxHK.exe
2016-05-04 16:57 - 2015-08-10 11:45 - 00231424 _____ (Intel Corporation) C:\Windows\system32\igfxDTCM.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00220432 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00218728 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2016-05-04 16:57 - 2015-08-10 11:45 - 00214016 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00213192 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00198144 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiDDEAgent64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00192000 _____ C:\Windows\system32\igdde64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00184352 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00183296 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v4264.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00179200 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00178672 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00169984 _____ (Intel Corporation) C:\Windows\system32\igdail64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00156264 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2016-05-04 16:57 - 2015-08-10 11:45 - 00153088 _____ C:\Windows\SysWOW64\igdde32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00152064 _____ (Intel Corporation) C:\Windows\SysWOW64\igdail32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00135680 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMCUMD64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00128000 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiLogServer64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00094208 _____ C:\Windows\system32\IccLibDll_x64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00086528 _____ C:\Windows\system32\igfxCUIServicePS.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00086528 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL
2016-05-04 16:57 - 2015-08-10 11:45 - 00086528 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00082432 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2016-05-04 16:57 - 2015-08-10 11:45 - 00082432 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00073728 _____ ( ) C:\Windows\system32\igfxDHLibv2_0.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00060928 _____ ( ) C:\Windows\system32\igfxDHLib.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00044025 _____ C:\Windows\system32\iglhxo64.vp
2016-05-04 16:57 - 2015-08-10 11:45 - 00043816 _____ C:\Windows\system32\iglhxc64_dev.vp
2016-05-04 16:57 - 2015-08-10 11:45 - 00043494 _____ C:\Windows\system32\iglhxc64.vp
2016-05-04 16:57 - 2015-08-10 11:45 - 00043298 _____ C:\Windows\system32\iglhxg64_dev.vp
2016-05-04 16:57 - 2015-08-10 11:45 - 00043256 _____ C:\Windows\system32\iglhxg64.vp
2016-05-04 16:57 - 2015-08-10 11:45 - 00042079 _____ C:\Windows\system32\iglhxo64_dev.vp
2016-05-04 16:57 - 2015-08-10 11:45 - 00036616 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00035328 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00011264 _____ ( ) C:\Windows\system32\igfxDILib.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00010752 _____ ( ) C:\Windows\system32\igfxDILibv2_0.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLibv2_0.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLib.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLibv2_0.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLib.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00004040 _____ C:\Windows\system32\iglhxs64.vp
2016-05-04 16:57 - 2015-08-10 11:45 - 00001125 _____ C:\Windows\system32\iglhxa64.vp
2016-05-04 16:57 - 2015-08-10 11:45 - 00000935 _____ C:\Windows\system32\Gfxv4_0.exe.config
2016-05-04 16:57 - 2015-08-10 11:45 - 00000935 _____ C:\Windows\system32\DPTopologyApp.exe.config
2016-05-04 16:57 - 2015-08-10 11:45 - 00000895 _____ C:\Windows\system32\Gfxv2_0.exe.config
2016-05-04 16:57 - 2015-08-10 11:45 - 00000895 _____ C:\Windows\system32\DPTopologyAppv2_0.exe.config
2016-05-04 16:55 - 2016-05-04 17:00 - 00000000 ____D C:\Intel
2016-05-04 16:55 - 2016-05-04 16:58 - 00000000 ____D C:\Program Files\Intel
2016-05-04 16:55 - 2016-05-04 16:57 - 00000000 ____D C:\Program Files (x86)\Intel
2016-05-04 16:55 - 2016-05-04 16:55 - 00000000 ____D C:\Users\monisteren\Intel
2016-05-04 16:55 - 2016-05-04 16:55 - 00000000 ____D C:\ProgramData\Package Cache
2016-05-04 16:55 - 2016-05-04 16:55 - 00000000 ____D C:\ProgramData\Intel
2016-05-04 16:55 - 2015-08-10 11:45 - 00460048 _____ (Intel® Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2016-05-04 16:54 - 2016-05-04 16:54 - 00000010 _____ C:\Windows\GSetup.ini
2016-05-04 16:54 - 2009-08-27 09:04 - 00207400 ____R () C:\Windows\GSetup.exe
2016-05-04 16:52 - 2016-05-11 12:08 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3831128305-126522246-1650269402-1001
2016-05-04 16:47 - 2016-05-08 00:06 - 00000000 ____D C:\Users\monisteren
2016-05-04 16:47 - 2016-05-04 16:47 - 00001446 _____ C:\Users\monisteren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-05-04 16:47 - 2016-05-04 16:47 - 00000020 ___SH C:\Users\monisteren\ntuser.ini
2016-05-04 16:47 - 2016-05-04 16:47 - 00000000 _SHDL C:\Users\monisteren\Skabeloner
2016-05-04 16:47 - 2016-05-04 16:47 - 00000000 _SHDL C:\Users\monisteren\Printere
2016-05-04 16:47 - 2016-05-04 16:47 - 00000000 _SHDL C:\Users\monisteren\Menuen Start
2016-05-04 16:47 - 2016-05-04 16:47 - 00000000 _SHDL C:\Users\monisteren\Lokale indstillinger
2016-05-04 16:47 - 2016-05-04 16:47 - 00000000 _SHDL C:\Users\monisteren\Dokumenter
2016-05-04 16:47 - 2016-05-04 16:47 - 00000000 _SHDL C:\Users\monisteren\Documents\Videoer
2016-05-04 16:47 - 2016-05-04 16:47 - 00000000 _SHDL C:\Users\monisteren\Documents\Musik
2016-05-04 16:47 - 2016-05-04 16:47 - 00000000 _SHDL C:\Users\monisteren\Documents\Billeder
2016-05-04 16:47 - 2016-05-04 16:47 - 00000000 _SHDL C:\Users\monisteren\AppData\Roaming\Microsoft\Windows\Start Menu\Programmer
2016-05-04 16:47 - 2016-05-04 16:47 - 00000000 _SHDL C:\Users\monisteren\AppData\Local\Oversigt
2016-05-04 16:47 - 2016-05-04 16:47 - 00000000 _SHDL C:\Users\monisteren\Andre computere
2016-05-04 16:47 - 2016-05-04 16:47 - 00000000 ____D C:\Windows\CSC
2016-05-04 16:47 - 2016-05-04 16:47 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\Adobe
2016-05-04 16:47 - 2016-05-04 16:47 - 00000000 ____D C:\Users\monisteren\AppData\Local\VirtualStore
2016-05-04 16:47 - 2016-05-04 16:47 - 00000000 ____D C:\Users\monisteren\AppData\Local\Packages
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Public\Documents\Videoer
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Public\Documents\Musik
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Public\Documents\Billeder
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default\Skabeloner
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default\Printere
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default\Menuen Start
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default\Lokale indstillinger
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default\Dokumenter
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default\Documents\Videoer
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default\Documents\Musik
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default\Documents\Billeder
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programmer
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Oversigt
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default\Andre computere
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default User\Documents\Videoer
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default User\Documents\Musik
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default User\Documents\Billeder
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programmer
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Oversigt
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Programmer
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\ProgramData\Skrivebord
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\ProgramData\Skabeloner
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programmer
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\ProgramData\Menuen Start
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\ProgramData\Dokumenter
2016-05-04 16:38 - 2016-05-04 16:38 - 00000000 _SHDL C:\Program Files\Fælles filer
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-05-11 13:01 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2016-05-11 10:18 - 2013-09-30 06:13 - 01310100 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-11 10:18 - 2013-09-30 05:55 - 00429184 _____ C:\Windows\system32\perfh006.dat
2016-05-11 10:18 - 2013-09-30 05:55 - 00072110 _____ C:\Windows\system32\perfc006.dat
2016-05-11 10:18 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf
2016-05-11 10:14 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-10 18:06 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2016-05-09 21:55 - 2013-08-22 16:44 - 00335320 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\setup
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\migwiz
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\lv-LV
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\lt-LT
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\et-EE
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\en-GB
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\MediaViewer
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\FileManager
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\Camera
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-05-09 21:54 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-05-09 21:54 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\SysWOW64\oobe
2016-05-09 21:54 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-05-09 21:54 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\Sysprep
2016-05-09 21:54 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\oobe
2016-05-09 21:54 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\Dism
2016-05-09 21:54 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\servicing
2016-05-09 10:44 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2016-05-06 12:31 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\SecureBootUpdates
2016-05-06 12:31 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-05-05 17:22 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-05-05 17:22 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2016-05-04 21:55 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-05-04 17:22 - 2013-08-22 17:36 - 00262144 _____ C:\Windows\system32\config\BCD-Template
2016-05-04 16:38 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows NT
2016-04-26 12:22 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\ELAMBKUP
 
==================== Files in the root of some directories =======
 
2016-05-04 17:14 - 2016-05-04 17:14 - 0398672 _____ () C:\ProgramData\1462374316.bdinstall.bin
2016-05-04 18:30 - 2016-05-04 18:30 - 0026034 _____ () C:\ProgramData\1462379447.bdinstall.bin
2016-05-04 18:31 - 2016-05-04 18:31 - 0026034 _____ () C:\ProgramData\1462379477.bdinstall.bin
 
Some files in TEMP:
====================
C:\Users\monisteren\AppData\Local\Temp\dllnt_dump.dll
C:\Users\monisteren\AppData\Local\Temp\UJKE.exe
C:\Users\monisteren\AppData\Local\Temp\xmlUpdater.exe
 
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2016-05-04 16:27
 
==================== End of FRST.txt ============================

Addition log:
Additional scan result of Farbar Recovery Scan Tool (x64) Version:09-05-2016
Ran by monisteren (2016-05-11 13:01:44)
Running from C:\Users\monisteren\Downloads
Windows 8.1 Enterprise (X64) (2016-05-04 14:47:17)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-3831128305-126522246-1650269402-500 - Administrator - Disabled)
Gæst (S-1-5-21-3831128305-126522246-1650269402-501 - Limited - Disabled)
monisteren (S-1-5-21-3831128305-126522246-1650269402-1001 - Administrator - Enabled) => C:\Users\monisteren
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Bitdefender Antivirus (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}
AS: Bitdefender Antispyware (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.26.1436 - Bitdefender)
Bitdefender Antivirus Plus 2016 (HKLM\...\Bitdefender) (Version: 20.0.27.1467 - Bitdefender)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Google Chrome (HKLM-x32\...\{84F46B98-8E48-33EB-BCE1-796B52E45B68}) (Version: 50.0.2661.94 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
Intel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)
Intel® Chipset Device Software (x32 Version: 10.1.1.8 - Intel® Corporation) Hidden
Java 8 Update 91 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418091F0}) (Version: 8.0.910.14 - Oracle Corporation)
Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation)
Java SE Development Kit 8 Update 91 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180910}) (Version: 8.0.910.14 - Oracle Corporation)
Java SE Development Kit 8 Update 91 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0180910}) (Version: 8.0.910.14 - Oracle Corporation)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Mozilla Firefox 46.0.1 (x86 da) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 da)) (Version: 46.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1 - Mozilla)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9.1 - Notepad++ Team)
PuTTY release 0.67 (HKLM-x32\...\PuTTY_is1) (Version: 0.67 - Simon Tatham)
qBittorrent 3.3.4 (HKLM-x32\...\qBittorrent) (Version: 3.3.4 - The qBittorrent project)
Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.0.30.1259 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer E220x Drivers (Version: 1.0.30.1259 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer Network Manager Suite (HKLM-x32\...\{FE5DFB80-6937-4154-A2C7-EF845C1301F8}) (Version: 1.0.30.1259 - Qualcomm Atheros)
Qualcomm Atheros Network Manager (Version: 1.0.30.1259 - Qualcomm Atheros) Hidden
Speccy (HKLM\...\Speccy) (Version: 1.29 - Piriform)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.3 - VideoLAN)
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
WinSCP 5.7.7 (HKLM-x32\...\winscp3_is1) (Version: 5.7.7 - Martin Prikryl)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-3831128305-126522246-1650269402-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {3ACF801F-64BF-4650-AEA7-BD96E0C7BF1C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-04] (Google Inc.)
Task: {3FAF0F5A-F9BD-4B04-9098-B9012FB2133C} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-03-30] (Bitdefender)
Task: {F8FF4C37-183C-4A66-B8AA-C189E5BC4453} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-04] (Google Inc.)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Shortcuts =============================
 
(The entries could be listed to be restored or removed.)
 
==================== Loaded Modules (Whitelisted) ==============
 
2016-05-04 17:05 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll
2016-05-09 10:10 - 2016-05-09 10:10 - 01006336 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02251_002\ashttpbr.mdl
2016-05-09 10:10 - 2016-05-09 10:10 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02251_002\ashttpdsp.mdl
2016-05-09 10:10 - 2016-05-09 10:10 - 03035488 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02251_002\ashttpph.mdl
2016-05-09 10:10 - 2016-05-09 10:10 - 01541440 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02251_002\ashttprbl.mdl
2016-03-28 20:07 - 2016-03-28 20:07 - 00230064 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 00393320 _____ () C:\Windows\system32\igfxTray.exe
2016-05-04 17:22 - 2016-04-28 09:33 - 02224280 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.94\libglesv2.dll
2016-05-04 17:22 - 2016-04-28 09:33 - 00097944 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.94\libegl.dll
2016-05-04 16:57 - 2015-08-10 11:45 - 17807680 _____ () C:\Windows\SYSTEM32\igd11dxva64.dll
2013-08-08 14:30 - 2013-08-08 14:30 - 00283648 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
2016-05-04 17:22 - 2016-04-28 09:33 - 31411864 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.94\PepperFlash\pepflashplayer.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
AlternateDataStreams: C:\Users\monisteren\Desktop\cykablyatkurwajebemtemama.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Desktop\qweqweqweqad.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\AdwCleaner (1).exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\autoruns.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\BDSysLog_i.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\bitdefender_windows_296b4a9e-91b8-44ed-a088-94e53dfd9cfc.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\db0083kc.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\Defogger.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\FRST64.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\KVRT.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\mbam-setup-bc.1878-2.2.1.1043.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\realprotect.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\rootkitremover.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\rufus-2.8.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\SecurityCheck.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\spsetup129.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\SteamSetup.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\stinger32.exe:BDU [0]
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\09320003.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\48555473.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\60069741.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\6215B8DF6.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\6215B8DF61.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\63381232.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\77295769.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\93893268.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\09320003.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\48555473.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\60069741.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\6215B8DF6.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\6215B8DF61.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\63381232.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\77295769.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\93893268.sys => ""="Driver"
 
==================== Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2013-08-22 15:25 - 2016-05-11 12:35 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-3831128305-126522246-1650269402-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{501CF3B6-A9F4-4DE4-9824-8163740A6FAE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F033E32D-6CF7-42AE-9460-CBB6A38338EE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F2210B52-E6F4-48E6-A2C6-DA1B0F941237}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{A6DBDECC-02B7-4367-86AF-37E7F91D8ADE}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{0EA3CB1C-52E5-4E8C-AFC1-EE75E1E8E715}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{49752AB4-DD72-4694-8A8A-CC7DD4C9ABD7}] => (Allow) C:\Games\Steam\Steam.exe
FirewallRules: [{3B5A437C-AC12-4F71-B4D5-74BC66CDD6E4}] => (Allow) C:\Games\Steam\Steam.exe
FirewallRules: [{B762711C-F79E-4035-A12E-5F8ADF661390}] => (Allow) C:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{1F45792D-307A-43B5-AE09-D65EA1AC59D4}] => (Allow) C:\Games\Steam\bin\steamwebhelper.exe
 
==================== Restore Points =========================
 
04-05-2016 16:58:10 IIF_MSI
09-05-2016 10:37:47 Windows Update
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (05/11/2016 12:36:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Navn på program med fejl: RootkitRevealer.exe, version: 1.71.0.0, tidsstempel: 0x44e255aa
Navn på modul med fejl: RootkitRevealer.exe, version: 1.71.0.0, tidsstempel: 0x44e255aa
Undtagelseskode: 0xc0000005
Forskydning med fejl 0x000040cd
Proces-id 0x17a4
Programmets starttidspunkt 0xRootkitRevealer.exe0
Programsti: RootkitRevealer.exe1
Modulsti: RootkitRevealer.exe2
Rapport-id: RootkitRevealer.exe3
Fuldt navn på program med fejl: RootkitRevealer.exe4
Relativt program-id for program med fejl: RootkitRevealer.exe5
 
Error: (05/11/2016 11:35:24 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (05/11/2016 10:16:08 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
 
Error: (05/11/2016 10:14:19 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (05/11/2016 10:14:09 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (05/10/2016 07:46:22 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (05/10/2016 05:07:22 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
 
Error: (05/10/2016 05:02:06 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (05/10/2016 01:41:20 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=UserLogon;SessionId=2
 
Error: (05/10/2016 01:40:05 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktivering (slui.exe) mislykkedes med følgende fejlkode: 
hr=0x8007007B
Kommandolinjeargumenter: 
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=NetworkAvailable
 
 
System errors:
=============
Error: (05/11/2016 10:27:43 AM) (Source: DCOM) (EventID: 10010) (User: MO-PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
 
Error: (05/10/2016 05:01:49 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 32212256841126384
 
Error: (05/10/2016 05:01:55 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Den foregående systemlukning kl. 15:00:56 d. ‎10-‎05-‎2016 var uventet.
 
Error: (05/10/2016 10:22:34 AM) (Source: DCOM) (EventID: 10010) (User: MO-PC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 
Error: (05/10/2016 10:22:04 AM) (Source: DCOM) (EventID: 10010) (User: MO-PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
 
Error: (05/09/2016 10:08:18 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installationsfejl: Der opstod en fejl, da Windows skulle installere følgende opdatering 0x800f0923: Microsoft .NET Framework 4.5.2-sprogpakker til Windows 8.1 og Windows Server 2012 R2 til x64-baserede systemer (KB2938104).
 
Error: (05/09/2016 10:08:18 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installationsfejl: Der opstod en fejl, da Windows skulle installere følgende opdatering 0x800f0923: Windows 8.1 Update til x64-baserede systemer (KB2919355).
 
Error: (05/09/2016 10:05:50 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Tjenesten WinHTTP-tjenesten Web Proxy Auto-Discovery afhænger af tjenesten DHCP-klientprogram, der ikke kunne starte pga. følgende fejl: 
%%1068
 
Error: (05/09/2016 10:05:50 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Tjenesten NLA (Network Location Awareness) afhænger af tjenesten DHCP-klientprogram, der ikke kunne starte pga. følgende fejl: 
%%1068
 
Error: (05/09/2016 10:05:50 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Tjenesten SMB 2.0 MiniRedirector afhænger af tjenesten Wrapper og program til SMB MiniRedirector, der ikke kunne starte pga. følgende fejl: 
%%1068
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i7-4790K CPU @ 4.00GHz
Percentage of memory in use: 51%
Total physical RAM: 8052.84 MB
Available physical RAM: 3867.86 MB
Total Virtual: 9972.84 MB
Available Virtual: 5143.52 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:111.27 GB) (Free:71.36 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 00000000)
 
Partition: GPT.
 
==================== End of Addition.txt ============================


#10 garioch7

garioch7

    RCMP Veteran


  • Malware Response Instructor
  • 3,917 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Port Hood, Nova Scotia, Canada
  • Local time:09:50 PM

Posted 11 May 2016 - 07:17 AM

Morten:

 

Thank you for permission to address you by your first name.  Thank you also for your new FRST logs.  I will get to work analyzing them today and will consult with the Malware Response Instructor who will be assigned to supervise your topic.

 

As soon as that process is completed, I will post back initial instructions for you.  That could take a few days, but I am hoping that it will be sooner.  These Forums are VERY busy, as you have discovered.

 

I will greatly appreciate your patience.  We are off to a good start with fresh logs! :thumbup2:  Have a great day, Morten.

 

Regards,

-Phil


Graduate of the Bleeping Computer Malware Removal Study Hall


#11 MagicTux

MagicTux
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:50 AM

Posted 11 May 2016 - 09:09 AM

Sounds very promissing Phil and thank you so much. I really hope we come up with a solution. I think all my machines are infected with the same malware!



#12 garioch7

garioch7

    RCMP Veteran


  • Malware Response Instructor
  • 3,917 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Port Hood, Nova Scotia, Canada
  • Local time:09:50 PM

Posted 12 May 2016 - 03:02 PM

Morten:

Thank you for your patience while I reviewed your FRST logs and consulted with the Malware Response Instructor assigned to supervise your topic.

In researching your reported issues, I saw that you had previously sought, and obtained assistance from, Oh My!, here, a Bleeping Computer Malware Response Instructor, who declared your computer clean at that time.

I also note that you also posted in the Malwarebytes Forum here at about the same time as you posted that topic here at Bleeping Computer, a thread you seem to have abandoned. You should post only in one Forum, and on one site to avoid duplication of effort and to avoid confusion among those experts who are volunteering their time and expertise to help you.
 

 

 

:step1: Please request this thread here at Bleeping Computer be closed; or, request the closure of the topic you opened on the Malwarebytes Forum and which remains open.



:step2: I would like you to please run the MGADiag Tool to check for possible issues with your Windows 8.1 Enterprise edition installation itself. I noticed that there are Windows Activation errors in your "Addition.txt" log. It is unusual for private individuals to be running an Enterprise version of Windows. Future assistance is contingent on you resolving any possible licencing issues with Microsoft. Once you have resolved any possible licencing issues with Microsoft, please run the MGADiag Tool.

If you don't wish to continue with this topic, please so inform me and I will have it concluded.

ONLY once any possible licencing issues are resolved with Microsoft, and you have requested the closure of your Malwarebytes Forum topic, should you proceed with running the MGADiag tool and following the rest of the instructions contained in the steps outlined below.

PLEASE NOTE: This program may not function correctly on all versions of Windows. I know that it does not function on Windows 10, which I am using personally. The research that I have conducted indicates that it does function on Windows XP, Vista, and 7. Some websites say that it also supports Windows 8/8.1, but if there is an issue with the program not appearing to do what it should, please just copy and send what the tool does produce, if anything.

  • Download MGADiag Tool and save it to your desktop
  • Double click the icon then if necessary click OK on the Executable File warning
  • Click Run, then Continue
  • Once completed a Microsoft Genuine Advantage Diagnostic Tool screen will open
    and be populated with system information
  • Click Copy
  • Press the Windows Key + R at the same time
  • Type Notepad and press Enter
  • Right click inside the Notepad document and select Paste
  • Save the file on your Desktop as WGA.txt
  • Upload the file here
  • Let me know when the file has been uploaded

 

 

:step3: Please uninstall the ESET Online Scanner using the Control Panel, Add/Remove Programs. It could potentiall cause conflicts with Bitdefender. See this excellent post by Quietman7 on why only one anti-virus application should be installed on your computer.

I also found some Kaspersky kernel level drivers running that I will terminate for you. These also could cause conflicts with Bitdefender.



:step4: In going over your logs I noticed that you have qBittorrent installed. I would like to recommend the following as sound security procedures:

  • Avoid gaming sites, pirated software, cracking tools, keygens, and peer-to-peer (P2P) file sharing programs.
  • They are a security risk which can make your computer susceptible to a wide variety of malware infections, remote attacks, exposure of personal information, and identity theft. Many malicious worms and Trojans spread across P2P file sharing networks, gaming and underground sites.
  • Users visiting such pages may see innocuous-looking banner ads containing code which can trigger pop-up ads and malicious Flash ads that install viruses, Trojans and spyware. Ads are a target for hackers because they offer a stealthy way to distribute malware to a wide range of Internet users.
  • The best way to reduce the risk of infection is to avoid these types of web sites and not use any P2P applications.

It is pretty much certain that if you continue to use P2P programs, you will get infected.
I would recommend that you uninstall qBittorrent, however that choice is up to you. If you choose to remove these programs, you can do so via Start > Control Panel > Add/Remove Programs.
If you wish to keep it, please do not use it until your computer is cleaned.



:step5: Please copy and paste the text in the code box below into Notepad and save the file as fixlist.txt to the C:\Users\monisteren\Downloads folder.

* * * * * Please rename your FRST64.exe file to FRST64eng.exe. This ensures that the output is in English. I apologize, but I don't speak Danish.

NOTE. It's important that both files, FRST64eng.exe and fixlist.txt are both in the same folder or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this individual computer. Running this on another computer may cause damage to your operating system.

Run FRST64eng.exe and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please copy and paste it into your reply.
 

CloseProcesses:
CreateRestorePoint:

CHR Extension: (Betalinger i Chrome Webshop) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-08]
R0 6215B8DF6; C:\Windows\System32\drivers\6215B8DF6.sys [478392 2016-05-09] (Kaspersky Lab ZAO)
C:\Windows\System32\drivers\6215B8DF6.sys
R0 6215B8DF61; C:\Windows\System32\drivers\6215B8DF61.sys [478392 2016-05-09] (Kaspersky Lab ZAO)
C:\Windows\System32\drivers\6215B8DF61.sys
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [28272 2016-05-07] ()
C:\Windows\system32\Drivers\TrueSight.sys
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 MFE_RR; \??\C:\Users\MONIST~1\AppData\Local\Temp\mfe_rr.sys [X]
File: C:\Users\monisteren\Downloads\db0083kc.exe

EmptyTemp:

 

The good news is that I have found no sign of active malware on your computer. :thumbup2:

Please provide a copy of the "fixlog.txt" file with your next response and let me know about any issues you might still be experiencing with your computer, in as much detail as possible.

If there are still issues, then please supply a fresh set of FRST logs after the fix has completed and your computer has rebooted.

* * * * * Please ensure that "Addition.txt" is checked and that you run the fresh logs from the renamed FRST64eng.exe file.

Have a great day, Morden.

Regards,
-Phil


Graduate of the Bleeping Computer Malware Removal Study Hall


#13 MagicTux

MagicTux
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:50 AM

Posted 12 May 2016 - 05:39 PM

Hello again Phil
 
Thank you for your response, and thank you as well for the very detailed instructions.
 
I would like to start with saying that the topic on Malwarebytes was created in desperation and I have actually lost access to their forum and that user, so I'm very sorry that I abandoned the other thread and would like that the one on here; Bleeping computer, can stay open.

Regarding the licencing issues I have installed this Windows 8.1 Enterprise only for testing, too see if I could get rid of the rootkit. I have another Windows 8.1 Professional N with a key, but I'm quite sure if I install and use that edition, I will still get infection.
 
I have also been running the MGADiag Tool it gave the error "Failed to create outputfiles, hr = 0x80070002. Please contact support."
 
I have removed the requested programs on my PC that could have given conflicts with Bitdefender, making sure that nothing was in the way. However I am quite positive still that my PC is infected.
 
In regards to your FRST scan, should I attempt with Windows in safe mode? I have attempted in safe mode with GMER, giving me a warning that I have rootkit activity within the harddrive and harddisk.
 
On a final note you were telling me about Qbittorrent, I installed it but it hasn't been used yet and this is a newly installed PC and completly fresh, it has not been having any illegal activities done to it, nor any cracking tools, pirated software, P2P sharing or keygens. 
 
Thank you for reading.

Edited by MagicTux, 12 May 2016 - 05:44 PM.


#14 MagicTux

MagicTux
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:50 AM

Posted 13 May 2016 - 12:55 PM

I have wiped the disks once again and installed Windows 8.1 Pro N 64bit and activated it with my original key to get rid of the activation issue.
I'm still convinced that my PC is infected with some kind of rootkit because it is not performing as it should. Even when I type here on the forum sometimes it takes several seconds before it responses on what key I have pressed on the keyboard.

My Bitdefender still appears as a fake application, cause I know that Bitdefender will block the webpages inside Steam as per default and Bitdefender blocked the pages when I changed motherboard and was clean, but at the moment it doesn't. After installing drivers, programs like Winrar etc. I ran GMER and it prompted me instantly that there is rootkit-activity.

I hope it is okay that I have attached two screenshots and two logs to confirm above mentioned.
I will provide a new log from FRST but I haven't used your fixlist because of the reformat and install of Windows and I haven't used any other Anti-Malware software since.

FRST log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:09-05-2016
Ran by monisteren (administrator) on MO-PC (13-05-2016 19:24:42)
Running from C:\Users\monisteren\Downloads
Loaded Profiles: monisteren (Available Profiles: monisteren)
Platform: Windows 8.1 Pro (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
() C:\Program Files\GIGABYTE\SmartSwitch\GSBSVR.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
() C:\Program Files\GIGABYTE\SmartSwitch\GSmartSwitch.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Valve Corporation) C:\Games\Steam\Steam.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe
() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Valve Corporation) C:\Games\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Games\Steam\bin\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Valve Corporation) C:\Games\Steam\bin\steamwebhelper.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
() C:\Program Files (x86)\Gigabyte\AppCenter\ApCent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\FileManager\PhotosApp.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [322472 2015-06-23] (Intel Corporation)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1651600 2016-04-25] (Bitdefender)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596504 2016-04-01] (Oracle Corporation)
HKLM\...\RunOnce: [RPMKickstart] => C:\Program Files\Gigabyte\SmartRecovery2\RPMKickstartEx.exe [2320384 2014-04-01] (TODO: <Company name>)
HKLM-x32\...\RunOnce: [PreRun] => C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe [8192 2013-04-29] ()
HKU\S-1-5-21-2884503210-3240709553-2359294085-1001\...\MountPoints2: {1e3ca77b-1925-11e6-824c-806e6f6e6963} - "D:\Run.exe" 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2016-05-13]
ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{401FADAA-1C16-4721-9F02-19067E1A1CA8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{1D339CE1-0BC5-43AF-9C1D-BE46831B9AF1}: [DhcpNameServer] 192.168.0.1
 
Internet Explorer:
==================
BHO: Bitdefender Wallet  -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-04-05] (Bitdefender)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-05-13] (Oracle Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-13] (Google Inc.)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-13] (Oracle Corporation)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-04-05] (Bitdefender)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-05-13] (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-13] (Google Inc.)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-13] (Oracle Corporation)
Toolbar: HKLM - Bitdefender Wallet  - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-04-05] (Bitdefender)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-13] (Google Inc.)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-04-05] (Bitdefender)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-13] (Google Inc.)
 
FireFox:
========
FF ProfilePath: C:\Users\monisteren\AppData\Roaming\Mozilla\Firefox\Profiles\jdsj6yr0.default
FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-13] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-13] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-13] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-13] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff [2016-05-12]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext
FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2016-05-12] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext
 
Chrome: 
=======
CHR Profile: C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-05-13]
CHR Extension: (Google Docs) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-05-13]
CHR Extension: (Google Drive) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-13]
CHR Extension: (YouTube) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-13]
CHR Extension: (Bitdefender Wallet) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhhejlifdlcgcmogbggeomfodgklfaem [2016-05-13]
CHR Extension: (Google Sheets) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-05-13]
CHR Extension: (Google Docs Offline) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-13]
CHR Extension: (Chrome Web Store Payments) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-13]
CHR Extension: (Gmail) - C:\Users\monisteren\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-13]
CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S2 gadjservice; C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [16896 2015-04-14] () [File not signed]
R2 GigabyteStartButtonService; C:\Program Files\GIGABYTE\SmartSwitch\GSBSVR.exe [252928 2014-08-25] () [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-23] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344168 2015-08-10] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [947640 2016-03-30] (Bitdefender)
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [343040 2013-08-08] (Qualcomm Atheros) [File not signed]
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [156016 2016-04-25] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1693104 2016-05-11] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1623536 2016-03-18] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [842152 2016-03-18] (BitDefender)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [127312 2016-02-22] (BitDefender LLC)
S4 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender)
R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [75056 2013-02-13] (Qualcomm Atheros, Inc.)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [182936 2015-12-16] (BitDefender LLC)
R3 Ke2200; C:\Windows\system32\DRIVERS\e22w8x64.sys [163536 2013-03-20] (Qualcomm Atheros, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [184608 2015-07-07] (Intel Corporation)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [511320 2016-02-22] (BitDefender S.R.L.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
U3 pxldypoc; \??\C:\Users\MONIST~1\AppData\Local\Temp\pxldypoc.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-05-14 04:08 - 2016-05-13 18:11 - 00000000 ____D C:\Windows\Panther
2016-05-13 19:24 - 2016-05-13 19:24 - 00014595 _____ C:\Users\monisteren\Downloads\FRST.txt
2016-05-13 19:23 - 2016-05-13 19:24 - 00000000 ____D C:\FRST
2016-05-13 19:23 - 2016-05-13 19:23 - 02381312 _____ (Farbar) C:\Users\monisteren\Downloads\FRST64.exe
2016-05-13 19:22 - 2016-05-13 19:22 - 00000000 ____D C:\ProgramData\Office Genuine Advantage
2016-05-13 19:21 - 2016-05-13 19:21 - 02031992 _____ (Microsoft Corporation) C:\Users\monisteren\Downloads\MGADiag.exe
2016-05-13 19:21 - 2016-05-13 19:21 - 00397498 _____ C:\Users\monisteren\Desktop\GMERlog1.txt
2016-05-13 19:11 - 2016-05-13 19:11 - 00000000 ____D C:\ProgramData\Google
2016-05-13 19:11 - 2016-05-13 19:11 - 00000000 ____D C:\Program Files\Google
2016-05-13 19:10 - 2016-05-13 19:10 - 00000747 _____ C:\Users\monisteren\Desktop\GMERlog0.txt
2016-05-13 19:08 - 2016-05-13 19:11 - 00026192 _____ (Windows ® Server 2003 DDK provider) C:\Windows\gdrv.sys
2016-05-13 19:03 - 2016-05-13 19:03 - 00000000 ____D C:\Users\monisteren\AppData\Local\Downloaded Installations
2016-05-13 19:02 - 2016-05-13 19:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gigabyte
2016-05-13 19:02 - 2016-05-13 19:06 - 00000000 ____D C:\Program Files (x86)\Gigabyte
2016-05-13 18:58 - 2016-05-13 19:10 - 00000000 ____D C:\Users\monisteren\AppData\Local\Google
2016-05-13 18:58 - 2016-05-13 18:58 - 00000401 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-05-13 18:58 - 2016-05-13 18:58 - 00000000 __SHD C:\Users\monisteren\IntelGraphicsProfiles
2016-05-13 18:58 - 2016-05-13 18:58 - 00000000 ____D C:\Users\monisteren\Documents\SmartSwitch
2016-05-13 18:57 - 2016-05-13 18:57 - 00000000 ____D C:\ProgramData\NVIDIA
2016-05-13 18:55 - 2016-05-13 18:55 - 00298736 _____ (Bitdefender) C:\Windows\system32\Drivers\ignis.sys
2016-05-13 18:54 - 2016-05-13 18:57 - 00001368 _____ C:\bdlog.txt
2016-05-13 18:54 - 2016-05-13 18:54 - 00399154 _____ C:\ProgramData\1463157548.bdinstall.bin
2016-05-13 18:54 - 2016-05-13 18:54 - 00002217 _____ C:\Users\Public\Desktop\Bitdefender 2016.lnk
2016-05-13 18:54 - 2016-05-13 18:54 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2016-05-13 18:54 - 2016-05-13 18:54 - 00000385 _____ C:\Users\monisteren\AppData\Roaminguser_gensett.xml
2016-05-13 18:54 - 2016-05-13 18:54 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\Bitdefender
2016-05-13 18:54 - 2016-05-13 18:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2016
2016-05-13 18:54 - 2016-05-13 18:54 - 00000000 ____D C:\ProgramData\BDLogging
2016-05-13 18:54 - 2016-03-18 06:58 - 00842152 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys
2016-05-13 18:54 - 2016-03-18 06:56 - 01623536 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys
2016-05-13 18:54 - 2015-12-04 19:27 - 00087912 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys
2016-05-13 18:54 - 2013-09-08 20:04 - 00023568 _____ (Bitdefender) C:\Windows\system32\Drivers\bdelam.sys
2016-05-13 18:54 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
2016-05-13 18:52 - 2016-05-13 19:22 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\TS3Client
2016-05-13 18:52 - 2016-05-13 18:52 - 31581784 _____ (TeamSpeak Systems GmbH) C:\Users\monisteren\Downloads\TeamSpeak3-Client-win64-3.0.19.1.exe
2016-05-13 18:52 - 2016-05-13 18:52 - 00000979 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2016-05-13 18:52 - 2016-05-13 18:52 - 00000941 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2016-05-13 18:52 - 2016-05-13 18:52 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2016-05-13 18:51 - 2016-05-13 18:54 - 00000000 ____D C:\ProgramData\Bitdefender
2016-05-13 18:51 - 2016-05-13 18:51 - 00000000 ____D C:\Program Files\Bitdefender
2016-05-13 18:51 - 2016-02-22 15:13 - 00511320 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2016-05-13 18:51 - 2015-12-16 05:53 - 00182936 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2016-05-13 18:51 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2016-05-13 18:51 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2016-05-13 18:51 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2016-05-13 18:51 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2016-05-13 18:51 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2016-05-13 18:51 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2016-05-13 18:51 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2016-05-13 18:51 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2016-05-13 18:51 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2016-05-13 18:51 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2016-05-13 18:51 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2016-05-13 18:51 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2016-05-13 18:51 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2016-05-13 18:51 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2016-05-13 18:51 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2016-05-13 18:51 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2016-05-13 18:51 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2016-05-13 18:51 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2016-05-13 18:51 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2016-05-13 18:51 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2016-05-13 18:51 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2016-05-13 18:51 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2016-05-13 18:51 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2016-05-13 18:51 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2016-05-13 18:51 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2016-05-13 18:51 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2016-05-13 18:51 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2016-05-13 18:51 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2016-05-13 18:51 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2016-05-13 18:51 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2016-05-13 18:51 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2016-05-13 18:51 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2016-05-13 18:51 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2016-05-13 18:51 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2016-05-13 18:51 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2016-05-13 18:51 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2016-05-13 18:51 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2016-05-13 18:51 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2016-05-13 18:51 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2016-05-13 18:51 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2016-05-13 18:51 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2016-05-13 18:51 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2016-05-13 18:51 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2016-05-13 18:51 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2016-05-13 18:51 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2016-05-13 18:51 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2016-05-13 18:51 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2016-05-13 18:51 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2016-05-13 18:51 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2016-05-13 18:51 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2016-05-13 18:51 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2016-05-13 18:51 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2016-05-13 18:51 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2016-05-13 18:51 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2016-05-13 18:51 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2016-05-13 18:51 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2016-05-13 18:51 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2016-05-13 18:51 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2016-05-13 18:51 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2016-05-13 18:51 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2016-05-13 18:51 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2016-05-13 18:51 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2016-05-13 18:51 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2016-05-13 18:51 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2016-05-13 18:51 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2016-05-13 18:51 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2016-05-13 18:51 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2016-05-13 18:51 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2016-05-13 18:51 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2016-05-13 18:51 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2016-05-13 18:51 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2016-05-13 18:51 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2016-05-13 18:51 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2016-05-13 18:51 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2016-05-13 18:51 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2016-05-13 18:51 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2016-05-13 18:51 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2016-05-13 18:51 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2016-05-13 18:51 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2016-05-13 18:51 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2016-05-13 18:51 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2016-05-13 18:51 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2016-05-13 18:51 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2016-05-13 18:51 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2016-05-13 18:51 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2016-05-13 18:51 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2016-05-13 18:51 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2016-05-13 18:51 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2016-05-13 18:51 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2016-05-13 18:51 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2016-05-13 18:51 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2016-05-13 18:51 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2016-05-13 18:51 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2016-05-13 18:51 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2016-05-13 18:51 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2016-05-13 18:51 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2016-05-13 18:51 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2016-05-13 18:51 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2016-05-13 18:51 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2016-05-13 18:51 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2016-05-13 18:51 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2016-05-13 18:51 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2016-05-13 18:51 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2016-05-13 18:51 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2016-05-13 18:51 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2016-05-13 18:51 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2016-05-13 18:51 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2016-05-13 18:51 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2016-05-13 18:51 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2016-05-13 18:51 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2016-05-13 18:51 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2016-05-13 18:51 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2016-05-13 18:51 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2016-05-13 18:51 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2016-05-13 18:51 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2016-05-13 18:51 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2016-05-13 18:51 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2016-05-13 18:51 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2016-05-13 18:51 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2016-05-13 18:51 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2016-05-13 18:51 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2016-05-13 18:51 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2016-05-13 18:51 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2016-05-13 18:51 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2016-05-13 18:51 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2016-05-13 18:51 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2016-05-13 18:51 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2016-05-13 18:51 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2016-05-13 18:51 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2016-05-13 18:51 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2016-05-13 18:51 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2016-05-13 18:51 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2016-05-13 18:51 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2016-05-13 18:51 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2016-05-13 18:51 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2016-05-13 18:51 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2016-05-13 18:51 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2016-05-13 18:51 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2016-05-13 18:51 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2016-05-13 18:51 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2016-05-13 18:51 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2016-05-13 18:51 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2016-05-13 18:51 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2016-05-13 18:51 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2016-05-13 18:51 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2016-05-13 18:51 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2016-05-13 18:51 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2016-05-13 18:51 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2016-05-13 18:51 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2016-05-13 18:51 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2016-05-13 18:51 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2016-05-13 18:51 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2016-05-13 18:51 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2016-05-13 18:51 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2016-05-13 18:51 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2016-05-13 18:51 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2016-05-13 18:51 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2016-05-13 18:51 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2016-05-13 18:51 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2016-05-13 18:51 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2016-05-13 18:51 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2016-05-13 18:51 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2016-05-13 18:51 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2016-05-13 18:51 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2016-05-13 18:51 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2016-05-13 18:51 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2016-05-13 18:51 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2016-05-13 18:51 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2016-05-13 18:51 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2016-05-13 18:51 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2016-05-13 18:51 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2016-05-13 18:51 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2016-05-13 18:51 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2016-05-13 18:51 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2016-05-13 18:51 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2016-05-13 18:51 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2016-05-13 18:51 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2016-05-13 18:51 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2016-05-13 18:51 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2016-05-13 18:51 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2016-05-13 18:51 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2016-05-13 18:51 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2016-05-13 18:39 - 2016-05-13 18:51 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2016-05-13 18:39 - 2016-05-13 18:39 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\QuickScan
2016-05-13 18:27 - 2016-05-13 18:27 - 00003640 _____ C:\Windows\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2016-05-13 18:25 - 2016-05-13 18:58 - 00000000 ____D C:\Program Files\Bitdefender Agent
2016-05-13 18:25 - 2016-05-13 18:25 - 00000205 _____ C:\Users\monisteren\Desktop\Counter-Strike Global Offensive.url
2016-05-13 18:25 - 2016-05-13 18:25 - 00000000 ____D C:\ProgramData\Bitdefender Agent
2016-05-13 18:24 - 2016-05-13 18:24 - 00000000 ____D C:\Users\monisteren\AppData\Local\Steam
2016-05-13 18:24 - 2016-05-13 18:24 - 00000000 ____D C:\Users\monisteren\AppData\Local\CEF
2016-05-13 18:24 - 2016-05-13 18:24 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-05-13 18:24 - 2016-05-10 01:40 - 06369728 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-05-13 18:24 - 2016-05-10 01:40 - 02993088 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-05-13 18:24 - 2016-05-10 01:40 - 02563128 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-05-13 18:24 - 2016-05-10 01:40 - 01201600 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-05-13 18:24 - 2016-05-10 01:40 - 00532536 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-05-13 18:24 - 2016-05-10 01:40 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-05-13 18:24 - 2016-05-10 01:40 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-05-13 18:24 - 2016-05-10 01:40 - 00071224 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-05-13 18:24 - 2016-05-06 16:02 - 06423191 _____ C:\Windows\system32\nvcoproc.bin
2016-05-13 18:24 - 2016-05-04 04:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-05-13 18:24 - 2016-05-04 04:22 - 00130848 _____ C:\Windows\system32\vulkan-1.dll
2016-05-13 18:24 - 2016-05-04 04:22 - 00045344 _____ C:\Windows\system32\vulkaninfo.exe
2016-05-13 18:24 - 2016-05-04 04:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-05-13 18:23 - 2016-05-13 18:23 - 00000680 _____ C:\Users\Public\Desktop\Steam.lnk
2016-05-13 18:23 - 2016-05-13 18:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-05-13 18:23 - 2016-05-13 18:23 - 00000000 ____D C:\Games
2016-05-13 18:23 - 2016-05-10 18:59 - 01572496 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2016-05-13 18:23 - 2016-05-10 18:59 - 00205456 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-05-13 18:23 - 2016-05-10 18:59 - 00039240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 42923576 _____ C:\Windows\system32\nvcompiler.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 37567424 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 31584704 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 25346616 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 21372456 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 20914600 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 17768992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 17362992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 17248920 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 14129544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 12550712 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-05-13 18:23 - 2016-05-10 06:07 - 10566520 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 08673880 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 03714144 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 03286664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 03234240 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 02809280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 01922496 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436519.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 01573432 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436519.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00959544 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00887744 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00878816 _____ C:\Windows\system32\nvmcumd.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00751552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00695864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00678704 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00571912 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00473592 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00423360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00423080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00391632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00377792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00175552 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00153392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-05-13 18:23 - 2016-05-10 06:07 - 00000592 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-05-13 18:23 - 2016-05-10 06:07 - 00000592 _____ C:\Windows\system32\nv-vk64.json
2016-05-13 18:22 - 2016-05-13 18:22 - 10314904 _____ C:\Users\monisteren\Downloads\bitdefender_antivirus.exe
2016-05-13 18:20 - 2016-05-13 18:20 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-05-13 18:20 - 2016-05-13 18:20 - 00001118 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-05-13 18:20 - 2016-05-13 18:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-05-13 18:20 - 2016-05-13 18:20 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-05-13 18:20 - 2016-05-13 18:20 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-05-13 18:20 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-05-13 18:20 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-05-13 18:20 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-05-13 18:19 - 2016-05-13 18:24 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-05-13 18:19 - 2016-05-13 18:24 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-05-13 18:19 - 2016-05-13 18:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2016-05-13 18:19 - 2016-05-13 18:19 - 00380928 _____ C:\Users\monisteren\Downloads\dmdrd9ih.exe
2016-05-13 18:19 - 2016-05-13 18:19 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-05-13 18:19 - 2016-05-13 18:19 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-05-13 18:19 - 2016-05-13 18:19 - 00000000 ____D C:\Program Files\Java
2016-05-13 18:18 - 2016-05-13 18:19 - 00000000 ____D C:\Program Files (x86)\Java
2016-05-13 18:18 - 2016-05-13 18:18 - 01380712 _____ C:\Users\monisteren\Downloads\SteamSetup.exe
2016-05-13 18:18 - 2016-05-13 18:18 - 00001057 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinSCP.lnk
2016-05-13 18:18 - 2016-05-13 18:18 - 00001053 _____ C:\Users\Public\Desktop\Notepad++.lnk
2016-05-13 18:18 - 2016-05-13 18:18 - 00000995 _____ C:\Users\Public\Desktop\WinSCP.lnk
2016-05-13 18:18 - 2016-05-13 18:18 - 00000887 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-05-13 18:18 - 2016-05-13 18:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-05-13 18:18 - 2016-05-13 18:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2016-05-13 18:18 - 2016-05-13 18:18 - 00000000 ____D C:\Program Files\VideoLAN
2016-05-13 18:18 - 2016-05-13 18:18 - 00000000 ____D C:\Program Files (x86)\WinSCP
2016-05-13 18:18 - 2016-05-13 18:18 - 00000000 ____D C:\NVIDIA
2016-05-13 18:17 - 2016-05-13 18:22 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\Notepad++
2016-05-13 18:17 - 2016-05-13 18:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-05-13 18:17 - 2016-05-13 18:18 - 360508680 _____ (NVIDIA Corporation) C:\Users\monisteren\Downloads\365.19-desktop-win8-win7-winvista-64bit-international-whql.exe
2016-05-13 18:17 - 2016-05-13 18:18 - 00000000 ____D C:\Program Files (x86)\Notepad++
2016-05-13 18:17 - 2016-05-13 18:17 - 00001009 _____ C:\Users\Public\Desktop\WinRAR.lnk
2016-05-13 18:17 - 2016-05-13 18:17 - 00000997 _____ C:\Users\Public\Desktop\PuTTY.lnk
2016-05-13 18:17 - 2016-05-13 18:17 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\Sun
2016-05-13 18:17 - 2016-05-13 18:17 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-05-13 18:17 - 2016-05-13 18:17 - 00000000 ____D C:\Users\monisteren\AppData\LocalLow\Sun
2016-05-13 18:17 - 2016-05-13 18:17 - 00000000 ____D C:\Users\monisteren\AppData\LocalLow\Oracle
2016-05-13 18:17 - 2016-05-13 18:17 - 00000000 ____D C:\Users\monisteren\.oracle_jre_usage
2016-05-13 18:17 - 2016-05-13 18:17 - 00000000 ____D C:\ProgramData\Oracle
2016-05-13 18:17 - 2016-05-13 18:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-05-13 18:17 - 2016-05-13 18:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PuTTY
2016-05-13 18:17 - 2016-05-13 18:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-05-13 18:17 - 2016-05-13 18:17 - 00000000 ____D C:\Program Files\WinRAR
2016-05-13 18:17 - 2016-05-13 18:17 - 00000000 ____D C:\Program Files (x86)\PuTTY
2016-05-13 18:16 - 2016-05-13 19:21 - 00000972 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-13 18:16 - 2016-05-13 19:11 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2884503210-3240709553-2359294085-1001
2016-05-13 18:16 - 2016-05-13 19:11 - 00000000 ____D C:\Program Files (x86)\Google
2016-05-13 18:16 - 2016-05-13 19:04 - 00820548 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-13 18:16 - 2016-05-13 19:04 - 00000000 ____D C:\Program Files\GIGABYTE
2016-05-13 18:16 - 2016-05-13 18:58 - 00000968 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-13 18:16 - 2016-05-13 18:24 - 00000000 ____D C:\Windows\LastGood.Tmp
2016-05-13 18:16 - 2016-05-13 18:22 - 00000000 ____D C:\Users\monisteren\AppData\Local\Mozilla
2016-05-13 18:16 - 2016-05-13 18:16 - 00307200 _____ (Secure By Design Inc.) C:\Users\monisteren\Downloads\Ninite Chrome Firefox JDK 8 JDK x64 8 Java 8 Installer.exe
2016-05-13 18:16 - 2016-05-13 18:16 - 00003944 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-13 18:16 - 2016-05-13 18:16 - 00003708 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-13 18:16 - 2016-05-13 18:16 - 00002215 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-13 18:16 - 2016-05-13 18:16 - 00002203 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-13 18:16 - 2016-05-13 18:16 - 00001175 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-05-13 18:16 - 2016-05-13 18:16 - 00001163 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-05-13 18:16 - 2016-05-13 18:16 - 00000728 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® HD Graphics Control Panel.lnk
2016-05-13 18:16 - 2016-05-13 18:16 - 00000716 _____ C:\Users\Public\Desktop\Intel® HD Graphics Control Panel.lnk
2016-05-13 18:16 - 2016-05-13 18:16 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\Mozilla
2016-05-13 18:16 - 2016-05-13 18:16 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-05-13 18:16 - 2016-05-13 18:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-05-13 18:16 - 2016-05-13 18:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-05-13 18:16 - 2016-05-13 18:16 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-05-13 18:16 - 2015-08-10 11:45 - 24849272 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 24049992 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 17807680 _____ C:\Windows\system32\igd11dxva64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 17331296 _____ C:\Windows\SysWOW64\igd11dxva32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 15981056 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 10851840 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 09551872 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 09426536 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 08637056 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 07519744 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 06725162 _____ C:\Windows\system32\igdclbif.bin
2016-05-13 18:16 - 2015-08-10 11:45 - 06189288 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 04918008 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2016-05-13 18:16 - 2015-08-10 11:45 - 04876008 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 03590656 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 03325440 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 02946688 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiVAD64.exe
2016-05-13 18:16 - 2015-08-10 11:45 - 02813952 _____ C:\Windows\system32\iglhxa64.cpa
2016-05-13 18:16 - 2015-08-10 11:45 - 02777088 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAAC64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 02039808 _____ (Intel Corporation) C:\Windows\system32\igfxLHM.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 01513984 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSecureSourceFilter64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 01402336 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 01399240 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 01370624 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 01277736 _____ (Intel Corporation) C:\Windows\system32\igdmd64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 01131008 _____ (Intel Corporation) C:\Windows\system32\GfxResources.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 01064448 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 01036904 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe
2016-05-13 18:16 - 2015-08-10 11:45 - 01033832 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe
2016-05-13 18:16 - 2015-08-10 11:45 - 01020176 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmd32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 01015808 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiWinNextAgent64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00698880 _____ (Intel Corporation) C:\Windows\system32\igfxDH.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00672768 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAudioFilter64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00641530 _____ C:\Windows\system32\FilmModeDetection.wmv
2016-05-13 18:16 - 2015-08-10 11:45 - 00624128 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00616960 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMux64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00472168 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUMS64.exe
2016-05-13 18:16 - 2015-08-10 11:45 - 00448104 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe
2016-05-13 18:16 - 2015-08-10 11:45 - 00425472 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00403671 _____ C:\Windows\system32\ImageStabilization.wmv
2016-05-13 18:16 - 2015-08-10 11:45 - 00393320 _____ C:\Windows\system32\igfxTray.exe
2016-05-13 18:16 - 2015-08-10 11:45 - 00385024 _____ (Intel Corporation) C:\Windows\system32\igfxOSP.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00375173 _____ C:\Windows\system32\ColorImageEnhancement.wmv
2016-05-13 18:16 - 2015-08-10 11:45 - 00374272 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00372224 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00354816 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSilenceFilter64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00344168 _____ (Intel Corporation) C:\Windows\system32\igfxCUIService.exe
2016-05-13 18:16 - 2015-08-10 11:45 - 00339048 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe
2016-05-13 18:16 - 2015-08-10 11:45 - 00338536 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe
2016-05-13 18:16 - 2015-08-10 11:45 - 00313448 _____ (Intel Corporation) C:\Windows\system32\igfxEM.exe
2016-05-13 18:16 - 2015-08-10 11:45 - 00304128 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxDI.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00282696 _____ (Intel Corporation) C:\Windows\system32\igd10idpp64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00279144 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2016-05-13 18:16 - 2015-08-10 11:45 - 00268800 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUtils64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00263120 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10idpp32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00256000 _____ C:\Windows\system32\igfxCPL.cpl
2016-05-13 18:16 - 2015-08-10 11:45 - 00248424 _____ (Intel Corporation) C:\Windows\system32\igfxHK.exe
2016-05-13 18:16 - 2015-08-10 11:45 - 00231424 _____ (Intel Corporation) C:\Windows\system32\igfxDTCM.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00220432 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00218728 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2016-05-13 18:16 - 2015-08-10 11:45 - 00214016 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00213192 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00198144 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiDDEAgent64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00192000 _____ C:\Windows\system32\igdde64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00184352 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00183296 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v4264.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00179200 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00178672 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00169984 _____ (Intel Corporation) C:\Windows\system32\igdail64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00156264 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2016-05-13 18:16 - 2015-08-10 11:45 - 00153088 _____ C:\Windows\SysWOW64\igdde32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00152064 _____ (Intel Corporation) C:\Windows\SysWOW64\igdail32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00135680 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMCUMD64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00128000 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiLogServer64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00094208 _____ C:\Windows\system32\IccLibDll_x64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00086528 _____ C:\Windows\system32\igfxCUIServicePS.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00086528 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL
2016-05-13 18:16 - 2015-08-10 11:45 - 00086528 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00082432 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2016-05-13 18:16 - 2015-08-10 11:45 - 00082432 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00073728 _____ ( ) C:\Windows\system32\igfxDHLibv2_0.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00060928 _____ ( ) C:\Windows\system32\igfxDHLib.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00044025 _____ C:\Windows\system32\iglhxo64.vp
2016-05-13 18:16 - 2015-08-10 11:45 - 00043816 _____ C:\Windows\system32\iglhxc64_dev.vp
2016-05-13 18:16 - 2015-08-10 11:45 - 00043494 _____ C:\Windows\system32\iglhxc64.vp
2016-05-13 18:16 - 2015-08-10 11:45 - 00043298 _____ C:\Windows\system32\iglhxg64_dev.vp
2016-05-13 18:16 - 2015-08-10 11:45 - 00043256 _____ C:\Windows\system32\iglhxg64.vp
2016-05-13 18:16 - 2015-08-10 11:45 - 00042079 _____ C:\Windows\system32\iglhxo64_dev.vp
2016-05-13 18:16 - 2015-08-10 11:45 - 00036616 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00035328 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00011264 _____ ( ) C:\Windows\system32\igfxDILib.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00010752 _____ ( ) C:\Windows\system32\igfxDILibv2_0.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLibv2_0.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLib.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLibv2_0.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLib.dll
2016-05-13 18:16 - 2015-08-10 11:45 - 00004040 _____ C:\Windows\system32\iglhxs64.vp
2016-05-13 18:16 - 2015-08-10 11:45 - 00001125 _____ C:\Windows\system32\iglhxa64.vp
2016-05-13 18:16 - 2015-08-10 11:45 - 00000935 _____ C:\Windows\system32\Gfxv4_0.exe.config
2016-05-13 18:16 - 2015-08-10 11:45 - 00000935 _____ C:\Windows\system32\DPTopologyApp.exe.config
2016-05-13 18:16 - 2015-08-10 11:45 - 00000895 _____ C:\Windows\system32\Gfxv2_0.exe.config
2016-05-13 18:16 - 2015-08-10 11:45 - 00000895 _____ C:\Windows\system32\DPTopologyAppv2_0.exe.config
2016-05-13 18:15 - 2016-05-13 18:15 - 00818732 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-05-13 18:15 - 2016-05-13 18:15 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-05-13 18:15 - 2016-05-13 18:15 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\Intel Corporation
2016-05-13 18:14 - 2016-05-13 19:04 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-05-13 18:13 - 2016-05-13 18:58 - 00000000 ____D C:\Intel
2016-05-13 18:13 - 2016-05-13 18:24 - 00000000 ____D C:\ProgramData\Package Cache
2016-05-13 18:13 - 2016-05-13 18:16 - 00000000 ____D C:\Program Files\Intel
2016-05-13 18:13 - 2016-05-13 18:16 - 00000000 ____D C:\Program Files (x86)\Intel
2016-05-13 18:13 - 2016-05-13 18:14 - 00000000 ____D C:\ProgramData\Qualcomm
2016-05-13 18:13 - 2016-05-13 18:13 - 00002799 _____ C:\Users\Public\Desktop\Killer Network Manager.lnk
2016-05-13 18:13 - 2016-05-13 18:13 - 00000000 ____D C:\Users\monisteren\Intel
2016-05-13 18:13 - 2016-05-13 18:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros
2016-05-13 18:13 - 2016-05-13 18:13 - 00000000 ____D C:\ProgramData\Intel
2016-05-13 18:13 - 2016-05-13 18:13 - 00000000 ____D C:\ProgramData\Downloaded Installations
2016-05-13 18:13 - 2016-05-13 18:13 - 00000000 ____D C:\Program Files\Qualcomm Atheros
2016-05-13 18:13 - 2016-05-13 18:13 - 00000000 _____ C:\Users\monisteren\AppData\Local\Driver_LOM_8161Present.flag
2016-05-13 18:13 - 2015-08-10 11:45 - 00460048 _____ (Intel® Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2016-05-13 18:12 - 2016-05-13 19:01 - 00000010 _____ C:\Windows\GSetup.ini
2016-05-13 18:12 - 2013-08-22 07:17 - 02407936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2016-05-13 18:12 - 2009-08-27 09:04 - 00207400 ____R () C:\Windows\GSetup.exe
2016-05-13 18:11 - 2016-05-13 18:58 - 00000000 ____D C:\Users\monisteren
2016-05-13 18:11 - 2016-05-13 18:11 - 00001446 _____ C:\Users\monisteren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-05-13 18:11 - 2016-05-13 18:11 - 00000020 ___SH C:\Users\monisteren\ntuser.ini
2016-05-13 18:11 - 2016-05-13 18:11 - 00000000 _SHDL C:\Users\monisteren\My Documents
2016-05-13 18:11 - 2016-05-13 18:11 - 00000000 _SHDL C:\Users\monisteren\Documents\My Videos
2016-05-13 18:11 - 2016-05-13 18:11 - 00000000 _SHDL C:\Users\monisteren\Documents\My Pictures
2016-05-13 18:11 - 2016-05-13 18:11 - 00000000 _SHDL C:\Users\monisteren\Documents\My Music
2016-05-13 18:11 - 2016-05-13 18:11 - 00000000 ____D C:\Windows\CSC
2016-05-13 18:11 - 2016-05-13 18:11 - 00000000 ____D C:\Users\monisteren\AppData\Roaming\Adobe
2016-05-13 18:11 - 2016-05-13 18:11 - 00000000 ____D C:\Users\monisteren\AppData\Local\VirtualStore
2016-05-13 18:11 - 2016-05-13 18:11 - 00000000 ____D C:\Users\monisteren\AppData\Local\Packages
2016-05-04 04:23 - 2016-05-04 04:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1-1-0-11-1.dll
2016-05-04 04:22 - 2016-05-04 04:22 - 00130848 _____ C:\Windows\system32\vulkan-1-1-0-11-1.dll
2016-05-04 04:22 - 2016-05-04 04:22 - 00045344 _____ C:\Windows\system32\vulkaninfo-1-1-0-11-1.exe
2016-05-04 04:22 - 2016-05-04 04:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo-1-1-0-11-1.exe
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-05-14 04:07 - 2013-08-22 17:36 - 00262144 _____ C:\Windows\system32\config\BCD-Template
2016-05-13 19:04 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf
2016-05-13 18:57 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-13 18:57 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-05-13 18:55 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2016-05-13 18:24 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\Help
2016-05-13 18:21 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2016-05-13 18:11 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-05-13 18:11 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-05-13 18:11 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore
2016-05-13 18:11 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\FileManager
2016-05-13 18:11 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\Camera
2016-05-13 18:10 - 2013-08-22 16:44 - 00335320 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-12 18:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\ELAMBKUP
2016-05-10 06:07 - 2015-11-10 02:51 - 19006432 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-05-10 06:07 - 2015-11-10 02:51 - 16449616 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-05-10 06:07 - 2015-11-10 01:13 - 00037091 _____ C:\Windows\system32\nvinfo.pb
 
==================== Files in the root of some directories =======
 
2013-06-27 10:20 - 2013-06-27 10:20 - 0000282 _____ () C:\Program Files (x86)\NoShowDT.reg
2013-08-06 14:57 - 2013-08-06 14:57 - 0000365 _____ () C:\Program Files (x86)\ShowCOM.reg
2013-06-27 10:20 - 2013-06-27 10:20 - 0000308 _____ () C:\Program Files (x86)\ShowDT.reg
2016-05-13 18:13 - 2016-05-13 18:13 - 0000000 _____ () C:\Users\monisteren\AppData\Local\Driver_LOM_8161Present.flag
2016-05-13 18:54 - 2016-05-13 18:54 - 0399154 _____ () C:\ProgramData\1463157548.bdinstall.bin
 
Some files in TEMP:
====================
C:\Users\monisteren\AppData\Local\Temp\xmlUpdater.exe
 
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2016-05-13 18:09
 
==================== End of FRST.txt ============================

Addition log:
Additional scan result of Farbar Recovery Scan Tool (x64) Version:09-05-2016
Ran by monisteren (2016-05-13 19:24:59)
Running from C:\Users\monisteren\Downloads
Windows 8.1 Pro (X64) (2016-05-13 16:11:18)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-2884503210-3240709553-2359294085-500 - Administrator - Disabled)
Guest (S-1-5-21-2884503210-3240709553-2359294085-501 - Limited - Disabled)
monisteren (S-1-5-21-2884503210-3240709553-2359294085-1001 - Administrator - Enabled) => C:\Users\monisteren
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Bitdefender Antivirus (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}
AS: Bitdefender Antispyware (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
@BIOS B15.0630.1 (HKLM-x32\...\InstallShield_{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 3.00.0000 - GIGABYTE)
@BIOS B15.0630.1 (x32 Version: 3.00.0000 - GIGABYTE) Hidden
APP Center (HKLM-x32\...\InstallShield_{F3D47276-0E35-42CF-A677-B45118470E21}) (Version: 1.16.0503 - Gigabyte)
APP Center (x32 Version: 1.16.0503 - Gigabyte) Hidden
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.26.1436 - Bitdefender)
Bitdefender Antivirus Plus 2016 (HKLM\...\Bitdefender) (Version: 20.0.28.1478 - Bitdefender)
BUSB (HKLM-x32\...\{0AADC50C-C4F8-49A7-8699-AFE46875CA67}) (Version: 1.14.0819.1 -  GIGABYTE)
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version:  - Valve)
EZSetup B15.0811.1 (HKLM-x32\...\InstallShield_{9EAB60B6-70FE-4EC7-8DF4-54773E4EAC05}) (Version: 1.00.0000 - GIGABYTE)
EZSetup B15.0811.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Fast Boot (HKLM-x32\...\InstallShield_{FA8FB4F2-F524-48E1-A06C-45602FBF26CD}) (Version: 1.15.0626 - GIGABYTE)
Fast Boot (x32 Version: 1.15.0626 - GIGABYTE) Hidden
Google Chrome (HKLM-x32\...\{52DDE975-6911-306D-B24A-DED54FF8E2B1}) (Version: 50.0.2661.102 - Google, Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6710.2136 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
Intel® Chipset Device Software (x32 Version: 10.1.1.8 - Intel® Corporation) Hidden
Intel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)
Java 8 Update 91 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418091F0}) (Version: 8.0.910.14 - Oracle Corporation)
Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation)
Java SE Development Kit 8 Update 91 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180910}) (Version: 8.0.910.14 - Oracle Corporation)
Java SE Development Kit 8 Update 91 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0180910}) (Version: 8.0.910.14 - Oracle Corporation)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 46.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 en-US)) (Version: 46.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1 - Mozilla)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9.1 - Notepad++ Team)
NVIDIA Graphics Driver 365.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 365.19 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
PuTTY release 0.67 (HKLM-x32\...\PuTTY_is1) (Version: 0.67 - Simon Tatham)
Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.0.30.1259 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer E220x Drivers (Version: 1.0.30.1259 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer Network Manager Suite (HKLM-x32\...\{FE5DFB80-6937-4154-A2C7-EF845C1301F8}) (Version: 1.0.30.1259 - Qualcomm Atheros)
Qualcomm Atheros Network Manager (Version: 1.0.30.1259 - Qualcomm Atheros) Hidden
Smart Recovery 2 B15.0812.1  (x64) (HKLM-x32\...\{BC1FA5CF-A36F-4C61-9638-09D0B431B006}) (Version: 1.00.0003 - GIGABYTE)
SmartSwitch B14.0828.1 (HKLM-x32\...\InstallShield_{45DEDAD2-EEBF-400F-A78C-D236F278D442}) (Version: 1.00.0013 - GIGABYTE)
SmartSwitch B14.0828.1 (Version: 1.00.0013 - GIGABYTE) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.3 - VideoLAN)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
WinSCP 5.7.7 (HKLM-x32\...\winscp3_is1) (Version: 5.7.7 - Martin Prikryl)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-2884503210-3240709553-2359294085-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {108CB305-25FF-45AA-A267-97AEE607E167} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-13] (Google Inc.)
Task: {1FD0B910-894D-4823-801A-E10161F65ECE} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-03-30] (Bitdefender)
Task: {36656C75-A66E-4AC9-932C-800CC932E3D1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-13] (Google Inc.)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Shortcuts =============================
 
(The entries could be listed to be restored or removed.)
 
==================== Loaded Modules (Whitelisted) ==============
 
2016-05-13 18:54 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll
2016-05-13 18:54 - 2016-05-09 11:29 - 01006336 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpbr.mdl
2016-05-13 18:54 - 2016-05-09 11:29 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpdsp.mdl
2016-05-13 18:54 - 2016-05-09 11:29 - 03035488 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpph.mdl
2016-05-13 18:54 - 2016-05-09 11:29 - 01541440 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttprbl.mdl
2016-05-13 18:24 - 2016-05-10 01:40 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-08-25 17:07 - 2014-08-25 17:07 - 00252928 _____ () C:\Program Files\GIGABYTE\SmartSwitch\GSBSVR.exe
2014-08-25 17:07 - 2014-08-25 17:07 - 01168896 _____ () C:\Program Files\GIGABYTE\SmartSwitch\GSBL.dll
2016-03-28 20:07 - 2016-03-28 20:07 - 00230064 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2014-08-28 14:39 - 2014-08-28 14:39 - 00735040 _____ () C:\Program Files\GIGABYTE\SmartSwitch\GSmartSwitch.exe
2016-04-25 15:12 - 2016-04-25 15:12 - 00174872 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll
2016-04-25 15:12 - 2016-04-25 15:12 - 00103192 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2016-04-25 15:12 - 2016-04-25 15:12 - 00107800 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2016-04-25 15:13 - 2016-04-25 15:13 - 00312088 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2016-04-25 15:13 - 2016-04-25 15:13 - 00485656 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2013-08-08 14:30 - 2013-08-08 14:30 - 00283648 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
2015-07-30 09:52 - 2015-07-30 09:52 - 01244456 _____ () C:\Program Files (x86)\Gigabyte\AppCenter\ApCent.exe
2016-05-13 18:16 - 2016-05-11 05:49 - 02224280 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\libglesv2.dll
2016-05-13 18:16 - 2016-05-11 05:49 - 00097944 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\libegl.dll
2016-05-13 18:16 - 2016-05-11 05:50 - 31491736 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\PepperFlash\pepflashplayer.dll
2016-05-13 18:23 - 2016-04-29 22:10 - 00785920 _____ () C:\Games\Steam\SDL2.dll
2016-05-13 18:23 - 2015-07-03 18:12 - 04962816 _____ () C:\Games\Steam\v8.dll
2016-05-13 18:23 - 2016-04-30 02:10 - 02549840 _____ () C:\Games\Steam\video.dll
2016-05-13 18:23 - 2015-07-03 18:12 - 01556992 _____ () C:\Games\Steam\icui18n.dll
2016-05-13 18:23 - 2015-07-03 18:12 - 01187840 _____ () C:\Games\Steam\icuuc.dll
2016-05-13 18:23 - 2016-02-09 01:14 - 02549760 _____ () C:\Games\Steam\libavcodec-56.dll
2016-05-13 18:23 - 2016-02-09 01:14 - 00491008 _____ () C:\Games\Steam\libavformat-56.dll
2016-05-13 18:23 - 2016-02-09 01:14 - 00332800 _____ () C:\Games\Steam\libavresample-2.dll
2016-05-13 18:23 - 2016-02-09 01:14 - 00442880 _____ () C:\Games\Steam\libavutil-54.dll
2016-05-13 18:23 - 2016-02-09 01:14 - 00485888 _____ () C:\Games\Steam\libswscale-3.dll
2016-05-13 18:23 - 2016-04-30 02:10 - 00829008 _____ () C:\Games\Steam\bin\chromehtml.DLL
2016-05-13 18:23 - 2016-02-18 00:25 - 00281088 _____ () C:\Games\Steam\openvr_api.dll
2016-05-13 18:23 - 2016-04-28 03:00 - 49825056 _____ () C:\Games\Steam\bin\libcef.dll
2016-05-13 18:23 - 2015-09-25 01:56 - 00119208 _____ () C:\Games\Steam\winh264.dll
2014-01-22 13:53 - 2014-01-22 13:53 - 01607680 _____ () C:\Program Files (x86)\Gigabyte\AppCenter\BDR_info.dll
2015-02-16 10:47 - 2015-02-16 10:47 - 00105472 _____ () C:\Program Files (x86)\Gigabyte\AppCenter\ycc.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
AlternateDataStreams: C:\Users\monisteren\Downloads\FRST64.exe:BDU [0]
AlternateDataStreams: C:\Users\monisteren\Downloads\MGADiag.exe:BDU [0]
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 
==================== Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2013-08-22 15:25 - 2016-05-13 18:58 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-2884503210-3240709553-2359294085-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{DF9EF6F8-0A1E-4390-9F65-F9DE1F805BED}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{93A3DB2A-1B4A-423C-8F46-EE6F8A3D45FC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1A27840B-44BA-4013-98A5-9D0A3E7F53D5}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{B9B25721-E5ED-459E-A340-C107F1179EF9}] => (Allow) C:\Games\Steam\Steam.exe
FirewallRules: [{9CDD2810-D0AF-4CEB-ADB8-845940C04239}] => (Allow) C:\Games\Steam\Steam.exe
FirewallRules: [{063B67E6-EA88-46CC-9502-17271085ABFB}] => (Allow) C:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{1E8F06CC-A471-4C2D-92EA-EE5D0BBB4603}] => (Allow) C:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{0272C8C7-390F-496F-8239-B32E26B6FFC3}] => (Allow) C:\Games\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{10737F85-D5A9-4FCC-BE79-B5D98F7AD86B}] => (Allow) C:\Games\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{9F7796A1-AA34-4453-B7C3-E2A52844504E}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe
FirewallRules: [UDP Query User{F890BDF6-B73A-4940-8E07-B68104BF8520}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe
FirewallRules: [TCP Query User{D9EFB77D-C004-4EAC-BE2E-C5C8E5615651}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe
FirewallRules: [UDP Query User{4E58663F-BB29-4F4A-9408-3BD3D6251EDF}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe
 
==================== Restore Points =========================
 
13-05-2016 18:15:13 IIF_MSI
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (05/13/2016 07:07:49 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program FlashBIOS.exe version 1.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: a90
 
Start Time: 01d1ad39bfb44230
 
Termination Time: 55
 
Application Path: C:\Program Files (x86)\Gigabyte\@BIOS\FlashBIOS.exe
 
Report Id: 34faf64d-192d-11e6-824e-408d5cb7e55c
 
Faulting package full name: 
 
Faulting package-relative application ID:
 
Error: (05/13/2016 06:15:20 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4
 
Error: (05/13/2016 06:15:14 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.
 
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
 
System Error:
Access is denied.
.
 
Error: (05/13/2016 06:13:53 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004E028
Command-line arguments:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=8da2dfae-e4f5-4e6a-9272-96f8470e033e;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (05/13/2016 06:13:51 PM) (Source: Software Protection Platform Service) (EventID: 8208) (User: )
Description: Acquisition of genuine ticket failed (hr=0x80072EFE) for template Id {99d92734-d682-4d71-983e-d6ec3f16059f}
 
Error: (05/13/2016 06:13:51 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: License acquisition failure details. 
hr=0x80072EFE
 
Error: (05/13/2016 06:11:23 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x80072EE7
Command-line arguments:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=8da2dfae-e4f5-4e6a-9272-96f8470e033e;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
 
Error: (05/13/2016 06:11:23 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Acquisition of End User License failed. hr=0x80072EE7
Sku Id=8da2dfae-e4f5-4e6a-9272-96f8470e033e
 
Error: (05/13/2016 06:11:23 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: License acquisition failure details. 
hr=0x80072EE7
 
 
System errors:
=============
Error: (05/13/2016 06:54:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Bitdefender Virus Shield service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (05/13/2016 06:24:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Steam Client Service service failed to start due to the following error: 
%%1053
 
Error: (05/13/2016 06:24:34 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.
 
Error: (05/13/2016 06:12:51 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The Printer Extensions and Notifications service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.
 
Error: (05/13/2016 06:10:08 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Network List Service service terminated with the following error: 
%%21
 
Error: (05/13/2016 06:10:06 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The IP Helper service terminated with the following error: 
%%1058
 
Error: (05/13/2016 06:09:49 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Crash dump initialization failed!
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i7-4790K CPU @ 4.00GHz
Percentage of memory in use: 42%
Total physical RAM: 8052.82 MB
Available physical RAM: 4670.34 MB
Total Virtual: 9972.82 MB
Available Virtual: 6319.89 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:111.27 GB) (Free:70.57 GB) NTFS
Drive d: (GIGABYTE) (CDROM) (Total:4 GB) (Free:0 GB) CDFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 00000000)
 
Partition: GPT.
 
==================== End of Addition.txt ============================

 

Attached Files



#15 garioch7

garioch7

    RCMP Veteran


  • Malware Response Instructor
  • 3,917 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Port Hood, Nova Scotia, Canada
  • Local time:09:50 PM

Posted 15 May 2016 - 09:43 AM

Morten:

Thank you for your new logs and the GMER images. I am still seeing a lot of Windows licencing issues in the "System Errors" section of your "Addition.txt" log, but I recall you mentioned that you swapped out your motherboard, which could account for what I am seeing, if the version of Windows 8.1 Pro that you are running was first installed on the old motherboard because Microsoft would have "married" that Windows 8.1 Pro licence key to that specific motherboard. I am going to assume that is the case.

The file being reported by GMER as a rootkit is not appearing in the FRST logs. I think that we need to dig a bit deeper.


:step1: Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!

  • Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
    Vista/Windows 7 users right-click and select Run As Administrator.
  • If TDSSKiller does not run, try renaming it.
  • To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.
  • Click the Start Scan button.
  • Do not use the computer during the scan
  • If the scan completes with nothing found, click Close to exit.
  • If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
  • Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
    Note: If Cure is not an option, Skip instead, do not choose Delete unless instructed.
  • A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).
  • Copy and paste the contents of that file in your next reply.

 

 

:step2: Let's run another aswMBR scan. Please download aswMBR ( 4.5MB ) to your desktop.

  • Double click the aswMBR.exe icon, and click Run.
  • When asked if you'd like to "download the latest Avast! virus definitions", click Yes.
  • Click the Scan button to start the scan.
  • On completion of the scan, click the save log button, save it to your desktop, then copy and paste it in your next reply.

 

 

Please copy and paste the results of both scans into your next reply.

Thank you and have a great day.

Regards,
-Phil


Graduate of the Bleeping Computer Malware Removal Study Hall





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users