Spyware / Malware / Virus Removal

Infection causing issues [Solved]

3 min read

Looking for the outcome? Ask AI

dom1978111 Topic Starter

Post #1March 29, 2015, 9:01 PM UTC

Hi, I have recently performed a clean instal of windows 7 with no issues but started to experience issues after installing a PCI e card (usb 3.0).

If left inactive for a while the screen would go into power save mode but upon moving the mouse of pressing a key the display would not come back on causing me to have to power off to shut down.

A friend suggested to change the hibernation settings which cured the problem but a new problem occurred.

On shutdown/restart the PC would crash hanging on the 'shutting down' screen and the circular mouse icon would also freeze. Again leaving no choice other than to power off. I ran malwarebytes and found hacktool.agent which was quarantined.
I thought this would resolve the shutdown issue but it didn't.

Any assistance would be appreciated.
Thanks

Dom

Satchfan

Post #2March 30, 2015, 8:35 AM UTC

Hello dom1978111 and welcome back to the WTT forum.

My name is Satchfan and I would be glad to help you with your computer problem.

Please read the following guidelines which will help to make cleaning your machine easier:

please follow all instructions in the order posted
please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear
all logs/reports, etc. must be posted in Notepad. Please ensure that word wrap is unchecked. In Notepad click Format, uncheck Word wrap if it is checked
if you don't understand something, please don't hesitate to ask for clarification before proceeding
the fixes are specific to your problem and should only be used for this issue on this machine.
please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!

IMPORTANT:

Please DO NOT install/uninstall any programs unless asked to.
Please DO NOT run any scans other than those requested

It could just be a hardware problem but it will do no harm to check.

===================================================

Note: Please run these in the order given in the instructions.

===================================================

Download and run AdwCleaner

Download AdwCleaner from here and save it to your desktop.

run AdwCleaner
when it has finished, select Clean
if it asks to reboot, allow the reboot
on reboot a log will be produced; please attach the content of the log to your next reply.

===================================================

Download and run Junkware Removal Tool

[external image: thisisujrt.gif] Please download Junkware Removal Tool to your desktop.

shut down your protection software now to avoid potential conflicts.
run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator"
the tool will open and start scanning your system
please be patient as this can take a while to complete depending on your system's specifications
on completion, a log (JRT.txt) is saved to your desktop and will automatically open
post the contents of JRT.txt into your next message.

===================================================

Run Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
press Scan button
it will produce a log called FRST.txt in the same directory the tool is run from
please copy and paste log back here.
the first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

Logs to include with next post:

AdwCleaner log
JRT.txt
FRST.txt
Addition.txt

Thanks

Satchfan

dom1978111

Post #3March 30, 2015, 5:03 PM UTC

Thanks for your response.

Here is the log as requested.

# AdwCleaner v4.200 - Logfile created 30/03/2015 at 17:57:55

# Updated 29/03/2015 by Xplode

# Database : 2015-03-29.1 [Server]

# Operating system : Windows 7 Professional Service Pack 1 (x86)

# Username : Dom&Edyta - SKYNET

# Running from : C:\Users\Dom&Edyta\Downloads\adwcleaner_4.200 (1).exe

# Option : Cleaning

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Dom&Edyta\AppData\Roaming\RHEng

Folder Deleted : C:\Users\Dom&Edyta\AppData\Local\Google\Chrome\User Data\Default\Extensions\mppnoffgpafgpgbaigljliadgbnhljfl

Folder Deleted : C:\Users\Dom&Edyta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nafaimnnclfjfedmmabolbppcngeolgf

File Deleted : C:\Users\Dom&Edyta\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mppnoffgpafgpgbaigljliadgbnhljfl_0.localstorage

File Deleted : C:\Users\Dom&Edyta\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nafaimnnclfjfedmmabolbppcngeolgf_0.localstorage

***** [ Scheduled tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17689

-\\ Google Chrome v41.0.2272.101

[C:\Users\Dom&Edyta\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Extension] : mppnoffgpafgpgbaigljliadgbnhljfl

[C:\Users\Dom&Edyta\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Extension] : nafaimnnclfjfedmmabolbppcngeolgf

*************************

AdwCleaner[R0].txt - [1774 bytes] - [30/03/2015 17:53:58]

AdwCleaner[R1].txt - [1837 bytes] - [30/03/2015 17:56:25]

AdwCleaner[S0].txt - [1778 bytes] - [30/03/2015 17:57:55]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1837 bytes] ##########

dom1978111

Post #4March 30, 2015, 5:54 PM UTC

I ran JRT as instructed (twice) but a log file did not show up on the desktop.

Here is FRST.txt

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015

Ran by [removed] (administrator) on SKYNET on 30-03-2015 18:20:30

Running from C:\Users\[removed]\Downloads

[removed]

Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe

(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(F-Secure Corporation) C:\Program Files\F-Secure\fshoster32.exe

(F-Secure Corporation) C:\Program Files\F-Secure\apps\CCF_Reputation\fsorsp.exe

(F-Secure Corporation) C:\Program Files\F-Secure\apps\ComputerSecurity\Anti-Virus\fsgk32.exe

(F-Secure Corporation) C:\Program Files\F-Secure\apps\ComputerSecurity\Common\FSM32.EXE

(F-Secure Corporation) C:\Program Files\F-Secure\apps\ComputerSecurity\Common\FSMA32.EXE

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(F-Secure Corporation) C:\Program Files\F-Secure\fshoster32.exe

(VIA Technologies, Inc.) C:\VIA_XHCI\usb3Monitor.exe

(Creative Technology Ltd) C:\Windows\System32\Ctxfihlp.exe

(Dell) C:\Users\Dom&Edyta;\AppData\Local\Apps\2.0\8QKDVB4W.0LW\DME48QNK.OWB\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe

(Advanced Micro Devices Inc.) C:\Program Files\AMD\ATI.ACE\Core-Static\MOM.exe

(F-Secure Corporation) C:\Program Files\F-Secure\apps\ComputerSecurity\Anti-Virus\fssm32.exe

(ATI Technologies Inc.) C:\Program Files\AMD\ATI.ACE\Core-Static\CCC.exe

(Creative Technology Ltd) C:\Windows\System32\CTxfispi.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Farbar) C:\Users\Dom&Edyta;\Downloads\FRST (2).exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [F-Secure Manager] => C:\Program Files\F-Secure\apps\ComputerSecurity\Common\FSM32.EXE [310312 2014-06-24] (F-Secure Corporation)

HKLM\…\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [335232 2015-02-10] (Oracle Corporation)

HKLM\…\Run: [StartCCC] => C:\Program Files\AMD\ATI.ACE\Core-Static\x86\CLIStart.exe [748232 2014-11-20] (Advanced Micro Devices, Inc.)

HKLM\…\Run: [F-Secure Hoster (49534)] => C:\Program Files\F-Secure\fshoster32.exe [187432 2014-12-11] (F-Secure Corporation)

HKLM\…\Run: [VIAxHCUtl] => C:\VIA_XHCI\usb3Monitor.exe [331776 2011-07-12] (VIA Technologies, Inc.)

HKLM\…\Run: [CTxfiHlp] => C:\Windows\system32\CTXFIHLP.EXE [25600 2010-05-05] (Creative Technology Ltd)

HKU\S-1-5-21-813584985-4177405723-473064447-1000\…\Run: [CTRegRun] => C:\Windows\CTRegRun.EXE [53248 2006-10-06] (Creative Technology Ltd )

HKU\S-1-5-21-813584985-4177405723-473064447-1000\…\Run: [DellSystemDetect] => C:\Users\Dom&Edyta;\AppData\Local\Apps\2.0\8QKDVB4W.0LW\DME48QNK.OWB\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe [283432 2015-03-08] (Dell)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-813584985-4177405723-473064447-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/en-gb/?ocid=iehp

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

BHO: Virgin Media Browsing Protection -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files\F-Secure\apps\CCF_Scanning\bin\browser\install\fs_ie_https\fs_ie_https.dll [2015-03-08] (F-Secure Corporation)

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-03-08] (Oracle Corporation)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-08] (Oracle Corporation)

DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://files.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab

DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://files.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab

DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)

Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] [removed] [removed]

FireFox:

========

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)

FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-08] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-08] (Oracle Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-08] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-08] (Google Inc.)

FF HKLM\…\Firefox\Extensions: [{9f91cd43-25be-43b4-9c6d-ecaba254e4bd}] - C:\Program Files\F-Secure\apps\CCF_Scanning\bin\browser\deploy\fs_firefox_https

FF Extension: Browsing Protection - C:\Program Files\F-Secure\apps\CCF_Scanning\bin\browser\deploy\fs_firefox_https [2015-03-08]

Chrome:

=======

CHR HomePage: Default -> hxxp://www.google.com

CHR StartupUrls: Default -> "hxxp://www.google.com/"

CHR DefaultSuggestURL: Default -> http://ssmsp.ask.com/query?sstype=prefix&li;=ff&q;={searchTerms}

CHR Profile: C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-08]

CHR Extension: (Google Docs) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-08]

CHR Extension: (Google Drive) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-08]

CHR Extension: (YouTube) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-08]

CHR Extension: (Google Search) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-08]

CHR Extension: (Google Sheets) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-08]

CHR Extension: (Search by F-Secure) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkmikccifolokanfakbeadbmgchomeli [2015-03-08]

CHR Extension: (Despicable Me) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnckijpagbhcgklmcfiggmigbpcinagn [2015-03-08]

CHR Extension: (Social Fixer for Facebook) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifmhoabcaeehkljcfclfiieohkohdgbb [2015-03-08]

CHR Extension: (Browsing Protection by F-Secure) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmjjnhpacphpjmnnlnccpfmhkcloaade [2015-03-08]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-08]

CHR Extension: (FVD Video Downloader) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp [2015-03-08]

CHR Extension: (Skype Click to Call) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-03-08]

CHR Extension: (Ask Search) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\mppnoffgpafgpgbaigljliadgbnhljfl [2015-03-30]

CHR Extension: (iLivid) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\nafaimnnclfjfedmmabolbppcngeolgf [2015-03-30]

CHR Extension: (Google Wallet) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-08]

CHR Extension: (Gmail) - C:\Users\Dom&Edyta;\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-08]

CHR HKLM\…\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] - C:/Program Files/F-Secure/apps/CCF_Scanning/bin/browser/install/fs_chrome_https/fs_chrome_https.crx [2014-06-25]

CHR HKLM\…\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

CHR HKU\S-1-5-21-813584985-4177405723-473064447-1000\SOFTWARE\Google\Chrome\Extensions\…\Chrome\Extension: [gkmikccifolokanfakbeadbmgchomeli] - C:\Program Files\F-Secure\apps\SafeSearch\Chrome\main.crx [2014-06-19]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2015-03-26] (Creative Labs) [File not signed]

S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2015-03-26] (Creative Labs) [File not signed]

R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [File not signed]

R2 fshoster; C:\Program Files\F-Secure\fshoster32.exe [187432 2014-12-11] (F-Secure Corporation)

R3 FSMA; C:\Program Files\F-Secure\apps\ComputerSecurity\Common\FSMA32.EXE [216104 2014-06-24] (F-Secure Corporation)

R2 FSORSPClient; C:\Program Files\F-Secure\apps\CCF_Reputation\fsorsp.exe [60456 2015-03-09] (F-Secure Corporation)

S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 F-Secure Gatekeeper; C:\Program Files\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [152104 2015-03-08] (F-Secure Corporation)

R1 F-Secure HIPS; C:\Program Files\F-Secure\apps\ComputerSecurity\HIPS\drivers\fshs.sys [74920 2015-03-08] (F-Secure Corporation)

R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [44240 2015-03-08] ()

R3 fsni; C:\Program Files\F-Secure\apps\CCF_Scanning\bin\fsni32.sys [73256 2015-03-08] (F-Secure Corporation)

R1 fsvista; C:\Program Files\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [12840 2014-06-24] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-03-17] (Malwarebytes Corporation)

S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2015-03-29] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-03-17] (Malwarebytes Corporation)

R3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [190976 2013-03-19] (VIA Technologies, Inc.)

R3 VUSBSTOR; C:\Windows\System32\Drivers\vusbstor.sys [73264 2013-01-18] (VIA Technologies, Inc.)

R3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [239104 2013-03-19] (VIA Technologies, Inc.)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-30 18:20 - 2015-03-30 18:20 - 01135104 _____ (Farbar) C:\Users\Dom&Edyta;\Downloads\FRST (2).exe

2015-03-30 18:20 - 2015-03-30 18:20 - 00014343 _____ () C:\Users\Dom&Edyta;\Downloads\FRST.txt

2015-03-30 18:20 - 2015-03-30 18:20 - 00000000 ____D () C:\FRST

2015-03-30 18:17 - 2015-03-30 18:17 - 01135104 _____ (Farbar) C:\Users\Dom&Edyta;\Downloads\FRST (1).exe

2015-03-30 18:16 - 2015-03-30 18:16 - 01135104 _____ (Farbar) C:\Users\Dom&Edyta;\Downloads\FRST.exe

2015-03-30 18:04 - 2015-03-30 18:04 - 01389097 _____ (Thisisu) C:\Users\Dom&Edyta;\Downloads\JRT.exe

2015-03-30 17:56 - 2015-03-30 17:56 - 02208768 _____ () C:\Users\Dom&Edyta;\Downloads\adwcleaner_4.200 (1).exe

2015-03-30 17:53 - 2015-03-30 17:57 - 00000000 ____D () C:\AdwCleaner

2015-03-30 17:52 - 2015-03-30 17:52 - 02208768 _____ () C:\Users\Dom&Edyta;\Downloads\adwcleaner_4.200.exe

2015-03-29 23:34 - 2015-03-30 18:00 - 00000336 _____ () C:\Windows\setupact.log

2015-03-29 23:34 - 2015-03-29 23:34 - 00000000 _____ () C:\Windows\setuperr.log

2015-03-29 23:30 - 2015-03-29 23:30 - 00000000 ____D () C:\Windows\pss

2015-03-29 23:16 - 2015-03-29 23:17 - 00000000 ____D () C:\Users\Dom&Edyta;\Desktop\Impractical Jokers usb

2015-03-29 22:59 - 2015-03-29 22:59 - 00017644 _____ () C:\Users\Dom&Edyta;\Downloads\The Drop (2014) 1080p BrRip x264 - YIFY —[www.bts.to]— .torrent

2015-03-29 22:58 - 2015-03-29 22:58 - 00008022 _____ () C:\Users\Dom&Edyta;\Downloads\[kickass.to]penguins.of.madagascar.2014.720p.brrip.x264.yify.torrent

2015-03-29 22:55 - 2015-03-29 22:55 - 00008642 _____ () C:\Users\Dom&Edyta;\Downloads\[kickass.to]the.drop.2014.720p.brrip.x264.yify (2).torrent

2015-03-29 22:54 - 2015-03-29 22:54 - 00008642 _____ () C:\Users\Dom&Edyta;\Downloads\[kickass.to]the.drop.2014.720p.brrip.x264.yify (1).torrent

2015-03-29 22:53 - 2015-03-29 22:53 - 00008642 _____ () C:\Users\Dom&Edyta;\Downloads\[kickass.to]the.drop.2014.720p.brrip.x264.yify.torrent

2015-03-29 22:50 - 2015-03-29 22:50 - 00017298 _____ () C:\Users\Dom&Edyta;\Downloads\[kickass.to]the.drop.2014.1080p.brrip.x264.yify.torrent

2015-03-29 02:18 - 2015-01-31 04:33 - 02744320 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2015-03-29 02:18 - 2015-01-31 04:33 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2015-03-29 02:18 - 2015-01-31 01:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2015-03-29 02:18 - 2014-12-11 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2015-03-29 02:14 - 2015-03-29 21:04 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-03-29 02:14 - 2015-03-29 02:14 - 00001060 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-03-29 02:14 - 2015-03-29 02:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-03-29 02:13 - 2015-03-29 02:14 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2015-03-29 02:13 - 2015-03-29 02:13 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-03-29 02:13 - 2015-03-17 06:15 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-03-29 02:13 - 2015-03-17 06:15 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-03-29 02:13 - 2015-03-17 06:15 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-03-29 02:11 - 2015-03-29 02:12 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Dom&Edyta;\Downloads\mbam-setup-2.1.4.1018.exe

2015-03-28 10:10 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2015-03-27 21:08 - 2015-03-27 21:08 - 00017559 _____ () C:\Users\Dom&Edyta;\Downloads\dumb-and-dumber-to-2014-1080p.torrent

2015-03-27 21:05 - 2015-03-27 21:05 - 00008143 _____ () C:\Users\Dom&Edyta;\Downloads\high-spirits-1988-720p.torrent

2015-03-27 21:04 - 2015-03-27 21:04 - 00013238 _____ () C:\Users\Dom&Edyta;\Downloads\curious-george-2006-1080p.torrent

2015-03-27 16:45 - 2015-03-27 16:45 - 00101880 _____ () C:\Users\Dom&Edyta;\Documents\cc_20150327_154537.reg

2015-03-27 16:44 - 2015-03-27 16:44 - 05344528 _____ (Piriform Ltd) C:\Users\Dom&Edyta;\Downloads\ccsetup504.exe

2015-03-27 16:44 - 2015-03-27 16:44 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2015-03-27 16:44 - 2015-03-27 16:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2015-03-27 16:44 - 2015-03-27 16:44 - 00000000 ____D () C:\Program Files\CCleaner

2015-03-27 00:05 - 2015-03-27 00:05 - 07833120 _____ () C:\Users\Dom&Edyta;\Downloads\USB-4PCI-3.zip

2015-03-26 23:51 - 2015-03-26 23:51 - 00002267 _____ () C:\Users\Public\Desktop\Creative Product Registration.lnk

2015-03-26 23:51 - 2006-10-06 15:17 - 00053248 ____N (Creative Technology Ltd ) C:\Windows\Ctregrun.exe

2015-03-26 23:51 - 2000-05-22 17:58 - 00647872 ____N (Microsoft Corporation) C:\Windows\system32\Mscomct2.ocx

2015-03-26 23:26 - 2015-03-26 23:27 - 00000000 ___HD () C:\Program Files\Creative Installation Information

2015-03-26 23:26 - 2015-03-26 23:26 - 00000000 ____D () C:\Program Files\Common Files\Creative

2015-03-26 22:45 - 2012-08-23 15:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2015-03-26 22:45 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll

2015-03-26 22:44 - 2015-03-26 23:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative

2015-03-26 22:44 - 2015-03-26 23:51 - 00000000 ____D () C:\ProgramData\Creative

2015-03-26 22:44 - 2015-03-26 22:44 - 00000000 ____D () C:\Program Files\Common Files\Creative Labs Shared

2015-03-26 22:44 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2015-03-26 22:44 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2015-03-26 22:44 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2015-03-26 22:44 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2015-03-26 22:44 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2015-03-26 22:44 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2015-03-26 22:44 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2015-03-26 22:44 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2015-03-26 22:44 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2015-03-26 22:44 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2015-03-26 22:44 - 2003-06-13 00:25 - 00007062 _____ () C:\Windows\system32\audiopid.vxd

2015-03-26 22:43 - 2015-03-26 23:51 - 00000000 ____D () C:\Program Files\Creative

2015-03-26 22:43 - 2015-03-26 22:43 - 00445016 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll

2015-03-26 22:43 - 2015-03-26 22:43 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll

2015-03-26 22:43 - 2015-03-26 22:43 - 00000087 ___RH () C:\Windows\ctfile.rfc

2015-03-26 22:43 - 2015-03-26 22:43 - 00000000 ____D () C:\Program Files\OpenAL

2015-03-26 22:43 - 2009-03-26 15:46 - 00148480 _____ () C:\Windows\system32\APOMngr.DLL

2015-03-26 22:43 - 2009-02-06 19:52 - 00073728 _____ () C:\Windows\system32\CmdRtr.DLL

2015-03-26 22:43 - 2008-02-04 03:27 - 00102400 _____ (Creative Technology Ltd) C:\Windows\system32\cttele32.dll

2015-03-26 22:42 - 2015-03-26 22:42 - 00000000 ____D () C:\Windows\system32\data

2015-03-25 23:12 - 2015-03-25 23:12 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_vusbstor_01009.Wdf

2015-03-24 19:37 - 2015-03-11 04:30 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-03-24 19:37 - 2015-03-11 04:30 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-03-24 19:37 - 2015-03-11 04:29 - 00818176 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-03-24 19:37 - 2015-03-11 04:29 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-03-24 19:37 - 2015-03-11 04:29 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-03-24 19:37 - 2015-03-11 04:29 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-03-24 19:37 - 2015-03-11 04:29 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-03-24 19:37 - 2015-03-11 04:26 - 00892928 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-03-22 21:20 - 2015-03-22 21:25 - 00000000 ____D () C:\Users\Dom&Edyta;\Desktop\Shinobi Kai Video

2015-03-22 19:41 - 2015-03-22 19:41 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ViaHub3_01011.Wdf

2015-03-22 19:40 - 2015-03-22 19:41 - 00000000 ____D () C:\VIA_XHCI

2015-03-22 19:40 - 2015-03-22 19:40 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xhcdrv_01011.Wdf

2015-03-22 19:40 - 2015-03-22 19:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIA XHCI UASP Utility

2015-03-22 19:40 - 2013-03-19 18:04 - 00190976 _____ (VIA Technologies, Inc.) C:\Windows\system32\Drivers\ViaHub3.sys

2015-03-22 19:40 - 2013-01-18 04:11 - 00073264 _____ (VIA Technologies, Inc.) C:\Windows\system32\Drivers\vusbstor.sys

2015-03-22 19:39 - 2015-03-22 19:39 - 00000000 ____D () C:\Program Files\VIA

2015-03-22 19:39 - 2013-03-19 18:04 - 00239104 _____ (VIA Technologies, Inc.) C:\Windows\system32\Drivers\xhcdrv.sys

2015-03-22 19:39 - 2012-08-17 10:47 - 01629040 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll

2015-03-22 19:39 - 2009-07-14 13:27 - 01461992 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll

2015-03-22 19:37 - 2015-03-30 00:19 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information

2015-03-22 19:36 - 2015-03-22 19:36 - 00000000 ____D () C:\ProgramData\Downloaded Installations

2015-03-22 19:34 - 2015-03-22 19:39 - 00000000 ____D () C:\Program Files\Common Files\InstallShield

2015-03-21 19:24 - 2015-03-21 19:24 - 00015494 _____ () C:\Users\Dom&Edyta;\Downloads\The Boxtrolls (2014) 1080p BrRip x264 - YIFY —[www.bts.to]— .torrent

2015-03-21 19:22 - 2015-03-21 19:22 - 00008465 _____ () C:\Users\Dom&Edyta;\Downloads\Night at the Museum- Secret of the Tomb (2014) 720p BrRip x264 - YIFY —[www.bts.to]— .torrent

2015-03-19 17:26 - 2015-03-19 17:27 - 00000000 ____D () C:\Users\Dom&Edyta;\Downloads\Steam Gamer

2015-03-19 14:27 - 2015-03-19 14:27 - 00023858 _____ () C:\Users\Dom&Edyta;\Downloads\Interstellar (2014) (2014) 1080p BrRip x264 - YIFY —[www.bts.to]— .torrent

2015-03-17 00:22 - 2015-03-17 00:22 - 00000000 __SHD () C:\Users\Dom&Edyta;\AppData\Local\EmieUserList

2015-03-17 00:22 - 2015-03-17 00:22 - 00000000 __SHD () C:\Users\Dom&Edyta;\AppData\Local\EmieSiteList

2015-03-17 00:22 - 2015-03-17 00:22 - 00000000 __SHD () C:\Users\Dom&Edyta;\AppData\Local\EmieBrowserModeList

2015-03-16 13:48 - 2015-03-16 13:53 - 00000000 ____D () C:\Windows\system32\MRT

2015-03-16 13:47 - 2015-02-26 22:20 - 119837696 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-03-11 21:33 - 2015-03-11 21:33 - 00015728 _____ () C:\Users\Dom&Edyta;\Downloads\Swamp Thing (1982) DvdRip —[www.bts.to]— .torrent

2015-03-11 21:12 - 2015-03-11 21:12 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Roaming\AMD

2015-03-11 20:56 - 2015-03-11 20:56 - 00000000 ____D () C:\Users\Dom&Edyta;\.swt

2015-03-11 20:55 - 2015-03-11 20:55 - 00029243 _____ () C:\Users\Dom&Edyta;\Downloads\The Return of Swamp Thing 1989 DVDRip-Morsan(SweSub) 4220434 TPB —[www.bts.to]— (1).torrent

2015-03-11 20:54 - 2015-03-29 23:21 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Roaming\Azureus

2015-03-11 20:54 - 2015-03-11 20:55 - 00000000 ____D () C:\Program Files\Vuze

2015-03-11 20:54 - 2015-03-11 20:54 - 00001794 _____ () C:\Users\Public\Desktop\Vuze.lnk

2015-03-11 20:54 - 2015-03-11 20:54 - 00001794 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vuze.lnk

2015-03-11 20:52 - 2015-03-11 20:52 - 00072008 _____ (Azureus Software, Inc.) C:\Users\Dom&Edyta;\Downloads\VuzeBittorrentClientInstaller.exe

2015-03-11 20:52 - 2015-03-11 20:52 - 00029243 _____ () C:\Users\Dom&Edyta;\Downloads\The Return of Swamp Thing 1989 DVDRip-Morsan(SweSub) 4220434 TPB —[www.bts.to]— .torrent

2015-03-11 18:13 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-03-11 18:13 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-03-11 18:13 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2015-03-11 18:13 - 2012-07-06 20:23 - 00393728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2015-03-11 18:13 - 2011-04-28 04:15 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS

2015-03-11 18:13 - 2011-03-11 06:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys

2015-03-11 18:13 - 2011-03-11 06:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys

2015-03-11 18:13 - 2011-03-11 06:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys

2015-03-11 18:13 - 2011-03-11 06:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys

2015-03-11 18:13 - 2011-03-11 06:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys

2015-03-11 18:13 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll

2015-03-11 18:13 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe

2015-03-11 18:13 - 2011-03-11 05:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2015-03-11 18:12 - 2015-02-26 04:11 - 02381312 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-03-11 18:12 - 2015-02-24 03:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-03-11 18:12 - 2015-02-21 01:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-03-11 18:12 - 2015-02-21 01:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-03-11 18:12 - 2015-02-21 01:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-03-11 18:12 - 2015-02-21 01:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-03-11 18:12 - 2015-02-21 00:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-03-11 18:12 - 2015-02-20 03:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-03-11 18:12 - 2015-02-20 03:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-03-11 18:12 - 2015-02-20 03:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-03-11 18:12 - 2015-02-20 03:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-03-11 18:12 - 2015-02-20 03:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-03-11 18:12 - 2015-02-20 03:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-03-11 18:12 - 2015-02-20 03:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-03-11 18:12 - 2015-02-20 03:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-03-11 18:12 - 2015-02-20 03:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-03-11 18:12 - 2015-02-20 02:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-03-11 18:12 - 2015-02-20 02:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-03-11 18:12 - 2015-02-20 02:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-03-11 18:12 - 2015-02-20 02:56 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-03-11 18:12 - 2015-02-20 02:50 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-03-11 18:12 - 2015-02-20 02:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-03-11 18:12 - 2015-02-20 02:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-03-11 18:12 - 2015-02-20 02:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-03-11 18:12 - 2015-02-20 02:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-03-11 18:12 - 2015-02-20 02:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-03-11 18:12 - 2015-02-20 02:24 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-03-11 18:12 - 2015-02-20 02:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-03-11 18:12 - 2015-02-20 02:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-03-11 18:12 - 2015-02-20 01:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-03-11 18:12 - 2015-02-20 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-03-11 18:12 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll

2015-03-11 18:11 - 2015-03-06 06:15 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-03-11 18:11 - 2015-03-06 06:15 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-03-11 18:11 - 2015-03-06 06:10 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-03-11 18:11 - 2015-03-06 06:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-03-11 18:11 - 2015-03-06 06:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-03-11 18:11 - 2015-03-06 06:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-03-11 18:11 - 2015-03-06 06:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-03-11 18:11 - 2015-03-06 06:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-03-11 18:11 - 2015-03-06 06:10 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-03-11 18:11 - 2015-03-06 06:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-03-11 18:11 - 2015-03-06 06:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-03-11 18:11 - 2015-03-06 06:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-03-11 18:11 - 2015-03-06 06:10 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-03-11 18:11 - 2015-03-06 06:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-03-11 18:11 - 2015-03-06 06:09 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-03-11 18:11 - 2015-03-06 06:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-03-11 18:11 - 2015-03-06 06:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-03-11 18:11 - 2015-03-06 06:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-03-11 18:11 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-03-11 18:11 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-03-11 18:11 - 2015-02-20 05:13 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-03-11 18:11 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-03-11 18:11 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-03-11 18:11 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2015-03-11 18:11 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-03-11 18:11 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-03-11 18:11 - 2015-02-03 04:16 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2015-03-11 18:11 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll

2015-03-11 18:11 - 2015-02-03 04:12 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-03-11 18:11 - 2015-02-03 04:11 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-03-11 18:11 - 2015-02-03 04:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2015-03-11 18:11 - 2015-02-03 04:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2015-03-11 18:11 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2015-03-11 18:11 - 2015-02-03 04:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys

2015-03-11 18:11 - 2015-02-03 03:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2015-03-11 18:11 - 2015-01-31 00:56 - 00370488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-03-11 18:11 - 2014-10-31 23:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2015-03-11 18:11 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL

2015-03-11 18:11 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL

2015-03-11 18:11 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL

2015-03-11 18:11 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL

2015-03-11 18:11 - 2014-07-09 02:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL

2015-03-11 18:11 - 2014-06-28 01:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2015-03-11 18:11 - 2014-06-28 01:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2015-03-11 18:10 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2015-03-11 18:10 - 2015-02-03 04:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2015-03-11 18:10 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2015-03-11 18:10 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2015-03-11 18:10 - 2015-02-03 04:12 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-03-11 18:10 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-03-11 18:10 - 2015-02-03 04:12 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2015-03-11 18:10 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-03-11 18:10 - 2015-02-03 04:12 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-03-11 18:10 - 2015-02-03 04:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll

2015-03-11 18:10 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll

2015-03-11 18:10 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx

2015-03-11 18:10 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll

2015-03-11 18:10 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2015-03-11 18:10 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2015-03-11 18:10 - 2015-02-03 04:11 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2015-03-11 18:10 - 2015-02-03 04:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe

2015-03-11 18:10 - 2015-02-03 04:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe

2015-03-11 18:10 - 2015-02-03 04:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll

2015-03-11 18:10 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2015-03-11 18:10 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-03-11 04:08 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\system32\locale.nls

2015-03-11 04:04 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2015-03-10 19:42 - 2015-03-10 19:42 - 01950496 _____ (YourOwnScreensaver.com) C:\Users\Dom&Edyta;\Downloads\DespicableMe2.exe

2015-03-10 19:42 - 2015-03-10 19:42 - 00000000 ____D () C:\Program Files\Your Own Screensaver

2015-03-10 17:37 - 2015-03-10 17:37 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Roaming\Adobe

2015-03-10 17:13 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2015-03-10 17:13 - 2012-02-11 06:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe

2015-03-10 17:13 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2015-03-10 17:11 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2015-03-10 17:03 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2015-03-10 16:47 - 2015-03-25 11:13 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-03-10 16:47 - 2015-03-25 11:13 - 00000000 ____D () C:\Windows\system32\appraiser

2015-03-10 00:09 - 2012-07-26 04:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2015-03-10 00:09 - 2012-07-26 04:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll

2015-03-10 00:09 - 2012-07-26 04:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2015-03-10 00:09 - 2012-07-26 04:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2015-03-10 00:09 - 2012-07-26 04:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll

2015-03-10 00:09 - 2012-07-26 03:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2015-03-10 00:09 - 2012-07-26 03:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2015-03-10 00:09 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

2015-03-10 00:08 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll

2015-03-10 00:08 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe

2015-03-10 00:08 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll

2015-03-10 00:07 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2015-03-10 00:07 - 2012-03-01 06:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys

2015-03-10 00:07 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2015-03-09 23:40 - 2015-03-09 23:40 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-03-09 23:40 - 2015-03-09 23:40 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2015-03-09 23:40 - 2015-03-09 23:40 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2015-03-09 23:40 - 2015-03-09 23:40 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2015-03-09 23:40 - 2015-03-09 23:40 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2015-03-09 23:40 - 2015-03-09 23:40 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2015-03-09 23:40 - 2015-03-09 23:40 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2015-03-09 23:40 - 2015-03-09 23:40 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2015-03-09 23:40 - 2015-03-09 23:40 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2015-03-09 23:37 - 2015-03-09 23:37 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

2015-03-09 23:37 - 2015-03-09 23:37 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll

2015-03-09 14:34 - 2015-03-09 14:34 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-03-09 14:34 - 2015-03-09 14:34 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2015-03-09 14:34 - 2015-03-09 14:34 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2015-03-09 14:34 - 2015-03-09 14:34 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll

2015-03-09 14:33 - 2015-03-09 14:33 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe

2015-03-09 14:30 - 2015-03-09 14:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll

2015-03-09 10:24 - 2015-01-09 03:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll

2015-03-09 10:24 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll

2015-03-09 10:24 - 2015-01-09 03:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll

2015-03-09 10:23 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll

2015-03-09 10:23 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll

2015-03-09 10:23 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll

2015-03-09 10:23 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys

2015-03-09 10:23 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys

2015-03-09 10:23 - 2012-08-22 18:16 - 00712048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2015-03-09 10:23 - 2012-07-04 20:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys

2015-03-09 10:22 - 2013-02-12 04:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys

2015-03-09 10:22 - 2011-04-29 03:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2015-03-09 10:22 - 2011-04-29 03:46 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2015-03-09 10:22 - 2011-04-29 03:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2015-03-09 10:21 - 2014-11-11 02:32 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2015-03-09 10:21 - 2014-07-14 02:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2015-03-09 10:21 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2015-03-09 10:21 - 2013-01-24 05:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2015-03-09 10:21 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll

2015-03-09 10:21 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll

2015-03-09 10:21 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe

2015-03-09 10:20 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

2015-03-09 10:20 - 2014-06-16 02:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2015-03-09 10:20 - 2014-06-16 02:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2015-03-09 10:20 - 2014-06-16 02:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2015-03-09 10:20 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll

2015-03-09 10:20 - 2014-03-04 10:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-03-09 10:20 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll

2015-03-09 10:20 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll

2015-03-09 10:20 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll

2015-03-09 10:20 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll

2015-03-09 10:20 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2015-03-09 10:20 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll

2015-03-09 10:20 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2015-03-09 10:20 - 2011-03-03 06:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll

2015-03-09 10:20 - 2011-03-03 06:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll

2015-03-09 10:20 - 2011-03-03 06:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe

2015-03-09 10:19 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2015-03-09 10:19 - 2014-08-23 02:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-03-09 10:19 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-03-09 10:19 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-03-09 10:19 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

2015-03-09 10:19 - 2014-03-26 15:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2015-03-09 10:19 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll

2015-03-09 10:19 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2015-03-09 10:19 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2015-03-09 10:19 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2015-03-09 10:19 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2015-03-09 10:19 - 2012-08-21 21:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe

2015-03-09 10:19 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl

2015-03-09 10:19 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll

2015-03-09 10:19 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax

2015-03-09 10:18 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2015-03-09 10:18 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2015-03-09 10:18 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll

2015-03-09 10:18 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll

2015-03-09 10:18 - 2011-07-09 03:30 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2015-03-09 10:18 - 2011-05-24 11:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll

2015-03-09 10:18 - 2011-04-27 03:17 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2015-03-09 10:18 - 2011-04-27 03:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2015-03-09 10:17 - 2014-02-04 03:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys

2015-03-09 10:17 - 2014-02-04 03:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2015-03-09 10:17 - 2014-02-04 03:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys

2015-03-09 10:17 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll

2015-03-09 10:17 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

2015-03-09 10:17 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll

2015-03-09 10:17 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe

2015-03-09 10:17 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll

2015-03-09 10:17 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2015-03-09 10:17 - 2013-03-19 04:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll

2015-03-09 10:17 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll

2015-03-09 10:17 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll

2015-03-09 10:17 - 2012-10-03 17:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2015-03-09 10:17 - 2012-10-03 16:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys

2015-03-09 10:17 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2015-03-09 10:16 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2015-03-09 10:16 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2015-03-09 10:16 - 2014-01-24 03:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2015-03-09 10:16 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2015-03-09 10:16 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2015-03-09 10:16 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2015-03-09 10:16 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll

2015-03-09 10:16 - 2012-07-04 22:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll

2015-03-09 10:16 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll

2015-03-09 10:16 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll

2015-03-09 10:16 - 2011-10-15 06:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll

2015-03-09 10:16 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2015-03-09 10:16 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2015-03-09 10:16 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll

2015-03-09 10:16 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll

2015-03-09 10:16 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll

2015-03-09 10:16 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll

2015-03-09 10:16 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe

2015-03-09 10:16 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2015-03-09 10:16 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe

2015-03-09 10:16 - 2011-02-12 06:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe

2015-03-09 10:16 - 2010-12-23 06:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll

2015-03-09 10:16 - 2010-12-23 06:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll

2015-03-09 10:16 - 2010-12-23 06:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax

2015-03-09 10:15 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2015-03-09 10:15 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll

2015-03-09 10:15 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll

2015-03-09 10:15 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll

2015-03-09 10:15 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2015-03-09 10:15 - 2014-06-03 10:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2015-03-09 10:15 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-03-09 10:15 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2015-03-09 10:15 - 2014-05-30 07:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2015-03-09 10:15 - 2014-04-05 03:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2015-03-09 10:15 - 2014-04-05 03:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2015-03-09 10:15 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2015-03-09 10:15 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2015-03-09 10:15 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll

2015-03-09 10:15 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs

2015-03-09 10:15 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs

2015-03-09 10:15 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs

2015-03-09 10:15 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs

2015-03-09 10:15 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs

2015-03-09 10:15 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs

2015-03-09 10:15 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs

2015-03-09 10:15 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs

2015-03-09 10:15 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs

2015-03-09 10:15 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs

2015-03-09 10:15 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs

2015-03-09 10:15 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs

2015-03-09 10:15 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs

2015-03-09 10:15 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs

2015-03-09 10:14 - 2015-01-28 00:36 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2015-03-09 10:14 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-03-09 10:14 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2015-03-09 10:14 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2015-03-09 10:14 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2015-03-09 10:14 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2015-03-09 10:14 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2015-03-09 10:14 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll

2015-03-09 10:14 - 2012-03-17 08:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys

2015-03-09 10:14 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll

2015-03-09 10:14 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll

2015-03-09 10:14 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll

2015-03-09 10:14 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll

2015-03-09 10:14 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll

2015-03-09 10:14 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll

2015-03-09 10:14 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll

2015-03-09 10:13 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe

2015-03-09 10:13 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll

2015-03-09 10:13 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2015-03-09 10:13 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll

2015-03-09 10:13 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys

2015-03-09 10:13 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2015-03-09 10:13 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll

2015-03-09 10:13 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2015-03-09 10:13 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL

2015-03-09 10:13 - 2013-08-05 02:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2015-03-09 10:13 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll

2015-03-09 10:13 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll

2015-03-09 10:13 - 2012-05-14 05:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2015-03-09 10:13 - 2012-04-26 05:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll

2015-03-09 10:13 - 2012-04-26 05:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe

2015-03-09 10:13 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll

2015-03-09 10:12 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2015-03-09 10:12 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2015-03-09 10:12 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2015-03-09 10:12 - 2014-03-04 10:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-03-09 10:12 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll

2015-03-09 10:12 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2015-03-09 10:12 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2015-03-09 10:12 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2015-03-09 10:12 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2015-03-09 10:12 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2015-03-09 10:12 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2015-03-09 10:12 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2015-03-09 10:12 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2015-03-09 10:12 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2015-03-09 10:12 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2015-03-09 10:12 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2015-03-09 10:12 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2015-03-09 10:12 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2015-03-09 10:12 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2015-03-09 10:12 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2015-03-09 10:12 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2015-03-09 10:12 - 2013-08-02 02:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 01:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-03-09 10:12 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-03-09 10:12 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-03-09 10:12 - 2013-07-12 11:08 - 00146816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys

2015-03-09 10:12 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys

2015-03-09 10:12 - 2013-07-12 11:07 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys

2015-03-09 10:12 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2015-03-09 10:12 - 2012-11-28 23:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys

2015-03-09 10:12 - 2012-11-28 23:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll

2015-03-09 10:12 - 2012-11-28 23:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

2015-03-09 10:12 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll

2015-03-09 10:12 - 2012-10-03 17:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll

2015-03-09 10:12 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2015-03-09 10:12 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll

2015-03-09 10:12 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll

2015-03-09 10:12 - 2011-02-23 05:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys

2015-03-09 10:11 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2015-03-09 10:11 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2015-03-09 10:11 - 2013-02-27 05:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2015-03-09 10:01 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2015-03-09 10:01 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll

2015-03-09 10:01 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll

2015-03-09 10:01 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll

2015-03-09 10:01 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe

2015-03-08 22:40 - 2015-03-29 23:21 - 00000000 ____D () C:\Windows\Panther

2015-03-08 21:59 - 2015-03-08 21:59 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Roaming\ATI

2015-03-08 21:59 - 2015-03-08 21:59 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Local\ATI

2015-03-08 21:59 - 2015-03-08 21:59 - 00000000 ____D () C:\ProgramData\ATI

2015-03-08 21:57 - 2015-03-08 21:57 - 00000000 _____ () C:\Windows\ativpsrm.bin

2015-03-08 21:52 - 2015-03-08 21:52 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Roaming\library_dir

2015-03-08 21:52 - 2015-03-08 21:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved

2015-03-08 21:51 - 2015-03-29 23:34 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Roaming\Raptr

2015-03-08 21:51 - 2015-03-26 23:12 - 00000000 ____D () C:\Program Files\Raptr

2015-03-08 21:51 - 2015-03-08 21:51 - 00000000 ____D () C:\ProgramData\AMD

2015-03-08 21:51 - 2015-03-08 21:51 - 00000000 ____D () C:\Program Files\AMD AVT

2015-03-08 21:50 - 2015-03-08 21:50 - 00051762 _____ () C:\Windows\system32\CCCInstall_201503082050583736.log

2015-03-08 21:50 - 2015-03-08 21:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center

2015-03-08 21:48 - 2015-03-08 21:48 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk

2015-03-08 21:48 - 2015-03-08 21:48 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk

2015-03-08 21:47 - 2015-03-08 21:47 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies

2015-03-08 21:45 - 2015-03-30 18:03 - 01746229 _____ () C:\Windows\WindowsUpdate.log

2015-03-08 21:45 - 2015-03-08 21:45 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf

2015-03-08 21:45 - 2015-03-08 21:45 - 00000000 ____D () C:\Program Files\Microsoft.NET

2015-03-08 21:44 - 2015-03-08 21:44 - 00000000 ____D () C:\ProgramData\Package Cache

2015-03-08 21:43 - 2015-03-08 21:49 - 00000000 ____D () C:\Program Files\AMD

2015-03-08 21:42 - 2015-03-08 21:42 - 00000000 ____D () C:\AMD

2015-03-08 21:39 - 2015-03-08 21:39 - 05451464 _____ (Advanced Micro Devices, Inc.) C:\Users\Dom&Edyta;\Downloads\autodetectutility.exe

2015-03-08 20:52 - 2015-03-08 20:52 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2015-03-08 20:52 - 2015-03-08 20:52 - 00000000 ____D () C:\ProgramData\Sun

2015-03-08 20:52 - 2015-03-08 20:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-03-08 20:52 - 2015-03-08 20:52 - 00000000 ____D () C:\Program Files\Common Files\Java

2015-03-08 20:51 - 2015-03-08 20:51 - 00000000 ____D () C:\ProgramData\Oracle

2015-03-08 20:51 - 2015-03-08 20:51 - 00000000 ____D () C:\Program Files\Java

2015-03-08 20:50 - 2015-03-08 20:50 - 00561576 _____ (Oracle Corporation) C:\Users\Dom&Edyta;\Downloads\chromeinstall-8u40.exe

2015-03-08 20:41 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll

2015-03-08 20:41 - 2012-02-17 05:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys

2015-03-08 20:27 - 2015-03-08 20:27 - 01162152 _____ () C:\Users\Dom&Edyta;\Downloads\XPS630i-010012 (1).EXE

2015-03-08 20:16 - 2015-03-08 20:16 - 01162152 _____ () C:\Users\Dom&Edyta;\Downloads\XPS630i-010012.EXE

2015-03-08 20:04 - 2015-03-08 22:28 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Roaming\Apple Computer

2015-03-08 20:04 - 2015-03-08 20:04 - 00001753 _____ () C:\Users\Public\Desktop\iTunes.lnk

2015-03-08 20:04 - 2015-03-08 20:04 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Local\Apple Computer

2015-03-08 20:04 - 2015-03-08 20:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2015-03-08 20:04 - 2012-10-03 17:14 - 00026840 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys

2015-03-08 20:03 - 2015-03-08 20:03 - 00000000 ____D () C:\Program Files\iPod

2015-03-08 20:02 - 2015-03-08 20:04 - 00000000 ____D () C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB

2015-03-08 20:02 - 2015-03-08 20:04 - 00000000 ____D () C:\Program Files\iTunes

2015-03-08 20:02 - 2015-03-08 20:02 - 00000000 ____D () C:\ProgramData\Apple Computer

2015-03-08 20:00 - 2015-03-08 20:00 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk

2015-03-08 20:00 - 2015-03-08 20:00 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Local\Apple

2015-03-08 20:00 - 2015-03-08 20:00 - 00000000 ____D () C:\Program Files\Apple Software Update

2015-03-08 19:57 - 2015-03-08 19:57 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Roaming\Dell

2015-03-08 19:57 - 2015-03-08 19:57 - 00000000 ____D () C:\Program Files\Bonjour

2015-03-08 19:56 - 2015-03-08 20:02 - 00000000 ____D () C:\Program Files\Common Files\Apple

2015-03-08 19:56 - 2015-03-08 20:00 - 00000000 ____D () C:\ProgramData\Apple

2015-03-08 19:54 - 2015-03-08 19:54 - 00000000 ____D () C:\ProgramData\PC-Doctor for Windows

2015-03-08 19:54 - 2015-03-08 19:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell

2015-03-08 19:54 - 2015-03-08 19:54 - 00000000 ____D () C:\Program Files\Dell Support Center

2015-03-08 19:52 - 2015-03-08 19:52 - 00000000 ____D () C:\Program Files\Dell

2015-03-08 19:46 - 2015-03-08 19:49 - 108800816 _____ (Apple Inc.) C:\Users\Dom&Edyta;\Downloads\iTunesSetup (1).exe

2015-03-08 19:31 - 2015-03-08 19:31 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell

2015-03-08 19:25 - 2015-03-08 19:25 - 00417064 _____ () C:\Users\Dom&Edyta;\Downloads\DellSystemDetect.exe

2015-03-08 19:23 - 2015-03-08 19:26 - 108800816 _____ (Apple Inc.) C:\Users\Dom&Edyta;\Downloads\iTunesSetup.exe

2015-03-08 19:06 - 2015-03-08 19:06 - 00000000 ____D () C:\Users\Dom&Edyta;\Tracing

2015-03-08 19:04 - 2015-03-29 14:13 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Roaming\Skype

2015-03-08 19:04 - 2015-03-08 19:04 - 00002685 _____ () C:\Users\Public\Desktop\Skype.lnk

2015-03-08 19:04 - 2015-03-08 19:04 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Local\Skype

2015-03-08 19:04 - 2015-03-08 19:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2015-03-08 19:04 - 2015-03-08 19:04 - 00000000 ____D () C:\Program Files\Common Files\Skype

2015-03-08 19:03 - 2015-03-08 19:04 - 00000000 ___RD () C:\Program Files\Skype

2015-03-08 19:03 - 2015-03-08 19:04 - 00000000 ____D () C:\ProgramData\Skype

2015-03-08 19:02 - 2015-03-08 19:02 - 45211232 _____ (Skype Technologies S.A.) C:\Users\Dom&Edyta;\Downloads\SkypeSetupFull.exe

2015-03-08 19:02 - 2015-03-08 19:02 - 00001587 _____ () C:\Users\Dom&Edyta;\Desktop\DivX Movies.lnk

2015-03-08 19:01 - 2015-03-11 21:12 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Roaming\DivX

2015-03-08 19:01 - 2015-03-08 19:01 - 00001097 _____ () C:\Users\Public\Desktop\DivX Converter.lnk

2015-03-08 19:01 - 2015-03-08 19:01 - 00001032 _____ () C:\Users\Public\Desktop\DivX Player.lnk

2015-03-08 19:01 - 2015-03-08 19:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX

2015-03-08 19:00 - 2015-03-08 19:02 - 00000000 ____D () C:\Program Files\DivX

2015-03-08 19:00 - 2015-03-08 19:01 - 00000000 ____D () C:\Program Files\Common Files\DivX Shared

2015-03-08 18:58 - 2015-03-08 19:02 - 00000000 ____D () C:\ProgramData\DivX

2015-03-08 18:56 - 2015-03-08 18:58 - 01010672 _____ (DivX, LLC) C:\Users\Dom&Edyta;\Downloads\DivXInstaller.exe

2015-03-08 16:52 - 2015-03-08 16:59 - 00044240 _____ () C:\Windows\system32\Drivers\fsbts.sys

2015-03-08 16:51 - 2015-03-08 16:51 - 00020548 _____ () C:\Windows\prodsett_copy.ini

2015-03-08 16:49 - 2015-03-12 04:26 - 00000000 ____D () C:\Program Files\F-Secure

2015-03-08 16:49 - 2015-03-08 16:49 - 00001981 _____ () C:\Users\Public\Desktop\F-Secure.lnk

2015-03-08 16:49 - 2015-03-08 16:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\F-Secure

2015-03-08 16:44 - 2015-03-08 16:54 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Local\F-Secure

2015-03-08 16:44 - 2015-03-08 16:51 - 00000000 ____D () C:\ProgramData\F-Secure

2015-03-08 16:44 - 2015-03-08 16:44 - 00816680 _____ (F-Secure Corporation) C:\Users\Dom&Edyta;\Downloads\VirginMediaNetworkInstaller_C-TU6DW-7HUC7-XUE4N-7XBLE_.exe

2015-03-08 16:27 - 2015-03-30 18:00 - 00000888 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-03-08 16:27 - 2015-03-29 21:32 - 00000892 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-03-08 16:27 - 2015-03-21 11:49 - 00002129 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2015-03-08 16:27 - 2015-03-08 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-03-08 16:27 - 2015-03-08 16:27 - 00000000 ____D () C:\Program Files\Google

2015-03-08 16:26 - 2015-03-11 04:45 - 00058016 _____ () C:\Users\Dom&Edyta;\AppData\Local\GDIPFONTCACHEV1.DAT

2015-03-08 16:26 - 2015-03-08 19:31 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Local\Deployment

2015-03-08 16:26 - 2015-03-08 16:27 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Local\Google

2015-03-08 16:26 - 2015-03-08 16:26 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Local\Apps\2.0

2015-03-08 15:37 - 2015-03-08 15:37 - 00368686 __RSH () C:\RKDXQ

2015-03-08 15:36 - 2015-03-08 15:36 - 00000000 ____D () C:\Users\Dom&Edyta;\Desktop\Windows Loader.v2.2.2

2015-03-08 15:31 - 2014-05-14 17:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-03-08 15:31 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-03-08 15:31 - 2014-05-14 17:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-03-08 15:31 - 2014-05-14 17:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-03-08 15:31 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-03-08 15:31 - 2014-05-14 17:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-03-08 15:31 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-03-08 15:30 - 2014-05-14 10:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-03-08 15:30 - 2014-05-14 10:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-03-08 15:27 - 2015-03-08 15:27 - 00001413 _____ () C:\Users\Dom&Edyta;\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-03-08 15:26 - 2015-03-11 20:56 - 00000000 ____D () C:\Users\Dom&Edyta;

2015-03-08 15:26 - 2015-03-08 15:26 - 00000020 ___SH () C:\Users\Dom&Edyta;\ntuser.ini

2015-03-08 15:26 - 2015-03-08 15:26 - 00000000 ____D () C:\Users\Dom&Edyta;\AppData\Local\VirtualStore

2015-03-08 15:26 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\Dom&Edyta;\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-03-08 15:26 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\Dom&Edyta;\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2015-03-08 15:25 - 2015-03-08 15:25 - 00000000 __SHD () C:\Recovery

2015-03-08 15:00 - 2015-02-24 11:23 - 00246920 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-30 18:07 - 2009-07-14 05:34 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-03-30 18:07 - 2009-07-14 05:34 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-03-30 18:05 - 2010-11-20 22:01 - 00781298 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-03-30 18:00 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-03-29 12:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache

2015-03-26 23:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET

2015-03-26 23:10 - 2009-07-14 03:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

2015-03-12 04:26 - 2009-07-14 05:33 - 00267016 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-03-11 04:38 - 2011-04-12 03:24 - 00000000 ____D () C:\Program Files\Windows Journal

2015-03-11 04:38 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\tracing

2015-03-11 04:38 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\System

2015-03-10 16:47 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Defender

2015-03-10 16:47 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\AppCompat

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-TW

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-HK

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-CN

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\tr-TR

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\sv-SE

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ru-RU

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pt-PT

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pt-BR

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\nl-NL

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\nb-NO

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ko-KR

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ja-JP

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\it-IT

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\hu-HU

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\fr-FR

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\fi-FI

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\el-GR

2015-03-10 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE

2015-03-09 10:45 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\LiveKernelReports

2015-03-08 22:40 - 2012-03-25 06:08 - 00008192 __RSH () C:\BOOTSECT.BAK

2015-03-08 22:40 - 2009-07-14 05:57 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG

2015-03-08 22:40 - 2009-07-14 05:52 - 00028672 _____ () C:\Windows\system32\config\BCD-Template

2015-03-08 21:52 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared

2015-03-08 21:43 - 2011-04-12 03:24 - 00000000 ____D () C:\Windows\CSC

2015-03-08 20:09 - 2012-12-15 09:03 - 00000000 ____D () C:\temp

2015-03-08 19:35 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\LogFiles

2015-03-08 15:29 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries

2015-03-08 15:25 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\Recovery

2015-03-08 15:00 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\restore

Some content of TEMP:

====================

C:\Users\Dom&Edyta;\AppData\Local\Temp\Quarantine.exe

C:\Users\Dom&Edyta;\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-03-25 11:51

==================== End Of Log ============================

And the Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015

Ran by [removed] at 2015-03-30 18:21:07

Running from C:\Users\[removed]\Downloads

Boot Mode: Normal

==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Antivirus (Enabled - Up to date) {0F70A6C4-76E4-6A3B-2695-519F428B1C20}

AS: Antivirus (Enabled - Up to date) {B4114720-50DE-65B5-1C25-6AED390C569D}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AMD Catalyst Install Manager (HKLM\…\{DE7D695C-2EC7-AFDF-F786-6E938DE83175}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

Apple Application Support (32-bit) (HKLM\…\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\…\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.)

Apple Software Update (HKLM\…\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Bonjour (HKLM\…\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

CCleaner (HKLM\…\CCleaner) (Version: 5.04 - Piriform)

Computer Security 14.115.100.0 (release) (Version: 14.115.100.0 - F-Secure Corporation) Hidden

Creative ALchemy (HKLM\…\ALchemy) (Version: 1.43 - Creative Technology Limited)

Creative Audio Control Panel (HKLM\…\AudioCS) (Version: 2.00 - Creative Technology Limited)

Creative MediaSource 5 (HKLM\…\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}) (Version: 5.26 - Creative Technology Limited)

Creative Software AutoUpdate (HKLM\…\Creative Software AutoUpdate) (Version: 1.40 - Creative Technology Limited)

Creative Sound Blaster Properties (HKLM\…\Creative Sound Blaster Properties) (Version: 1.02 - Creative Technology Limited)

Creative WaveStudio 7 (HKLM\…\WaveStudio 7) (Version: 7.14 - Creative Technology Limited)

Dell SupportAssist (HKLM\…\PC-Doctor for Windows) (Version: 1.0.6584.52 - Dell)

Dell System Detect (HKU\S-1-5-21-813584985-4177405723-473064447-1000\…\73f463568823ebbe) (Version: 5.14.0.9 - Dell)

DivX Setup (HKLM\…\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)

F-Secure (HKLM\…\F-Secure ServiceEnabler 49534) (Version: 2.15.364.0 - F-Secure Corporation)

F-Secure (Version: 2.15.364.0 - F-Secure Corporation) Hidden

F-Secure CCF Reputation (Version: 2.0.1337.0 - F-Secure) Hidden

F-Secure CCF Scanning 1.51.111.300 (release) (Version: 1.51.111.300 - F-Secure Corporation) Hidden

F-Secure Network CCF 1.02.141 (Version: 1.02.141 - F-Secure Corporation) Hidden

F-Secure SafeSearch 1.03.159.0 (release) (Version: 1.03.159.0 - F-Secure Corporation) Hidden

Google Chrome (HKLM\…\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)

Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden

iTunes (HKLM\…\{3A9FE6B1-EE7F-40AC-B831-AC7C9ABB58A0}) (Version: 12.1.1.4 - Apple Inc.)

Java 8 Update 40 (HKLM\…\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)

Malwarebytes Anti-Malware version 2.1.4.1018 (HKLM\…\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\…\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM\…\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Online Safety 2.115.2783.1598 (Version: 2.115.2783.1598 - F-Secure Corporation) Hidden

OpenAL (HKLM\…\OpenAL) (Version: - )

Platform (Version: 1.40 - VIA Technologies, Inc.) Hidden

Raptr (HKLM\…\Raptr) (Version: - )

Skype Click to Call (HKLM\…\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)

Skype™ 7.2 (HKLM\…\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.)

VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden

VIA Platform Device Manager (HKLM\…\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.40 - VIA Technologies, Inc.)

Vuze (HKLM\…\8461-7759-5462-8226) (Version: 5.6.0.0 - Azureus Software, Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

==================== Restore Points =========================

09-03-2015 10:55:27 Scheduled Checkpoint

09-03-2015 14:25:44 Windows Update

09-03-2015 23:28:12 Windows Update

11-03-2015 04:00:52 Windows Update

12-03-2015 04:00:52 Windows Update

16-03-2015 13:47:02 Windows Update

22-03-2015 19:36:37 Installed Renesas Electronics USB 3.0 Host Controller Driver

22-03-2015 19:39:25 Installed Platform

24-03-2015 21:53:10 Windows Update

26-03-2015 22:33:57 Windows Update

26-03-2015 23:24:51 Installed WaveStudio 7

26-03-2015 23:25:56 Installed Creative MediaSource 5

26-03-2015 23:51:01 Installed Creative ALchemy

27-03-2015 00:07:30 Configured Renesas Electronics USB 3.0 Host Controller Driver

28-03-2015 10:06:55 Windows Update

29-03-2015 02:07:58 Windows Update

29-03-2015 10:56:59 Windows Update

30-03-2015 00:19:17 Removed Renesas Electronics USB 3.0 Host Controller Driver

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {00254C64-14F0-4326-B4BC-F0708FCFEFC7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-03-08] (Google Inc.)

Task: {3DAAC636-55BF-4844-83A7-B0DF0B5EA214} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-03-13] (Piriform Ltd)

Task: {65FF6C55-894C-4F76-9DD8-081522ADC833} - System32\Tasks\{3CCBBF48-9A41-40DB-A870-855AF8179EF4} => pcalua.exe -a "E:\JMB363 Driver\setup.exe" -d "E:\JMB363 Driver"

Task: {71051CA4-3ECB-4A01-BC96-235914CCF7DD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {83D36898-5016-4F8E-97FB-273C3F90852F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-03-08] (Google Inc.)

Task: {8555364F-24BD-49AD-A7D2-2AABFEC79B85} - System32\Tasks\{46478179-BAFE-4D9C-AACB-32DA8DA64D85} => pcalua.exe -a "E:\WCH382 Driver\PCISETUP.exe" -d "E:\WCH382 Driver"

Task: {A6F7EAE5-03C1-49B3-9420-1925AF92302F} - \PCDEventLauncherTask No Task File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-02-13 05:20 - 2015-02-13 05:20 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-02-13 05:20 - 2015-02-13 05:20 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2014-12-11 13:08 - 2014-12-11 13:08 - 00220200 _____ () C:\Program Files\F-Secure\daas2.dll

2015-03-08 16:49 - 2015-03-08 16:49 - 00592936 _____ () C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.79_none_b59ec33311fcd586\QtMultimediaKit1.dll

2010-05-05 17:51 - 2010-05-05 17:51 - 00002560 _____ () C:\Windows\CTXFIRES.DLL

2015-03-08 16:56 - 2015-03-08 16:56 - 00029224 _____ () C:\Program Files\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll

2015-03-08 16:51 - 2015-03-08 16:56 - 00212008 _____ () C:\Program Files\F-Secure\apps\ComputerSecurity\Spam Control\fsas.dll

2015-03-08 16:51 - 2015-03-08 16:55 - 00949288 _____ () C:\Program Files\F-Secure\apps\ComputerSecurity\Anti-Virus\fm4av.dll

2015-03-26 22:43 - 2009-03-26 15:46 - 00148480 _____ () C:\Windows\SYSTEM32\APOMngr.DLL

2015-03-21 11:49 - 2015-03-14 11:12 - 01174856 _____ () C:\Program Files\Google\Chrome\Application\41.0.2272.101\libglesv2.dll

2015-03-21 11:49 - 2015-03-14 11:12 - 00080200 _____ () C:\Program Files\Google\Chrome\Application\41.0.2272.101\libegl.dll

2015-03-21 11:49 - 2015-03-14 11:12 - 09278792 _____ () C:\Program Files\Google\Chrome\Application\41.0.2272.101\pdf.dll

2015-03-21 11:49 - 2015-03-14 11:12 - 14974280 _____ () C:\Program Files\Google\Chrome\Application\41.0.2272.101\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-813584985-4177405723-473064447-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dom&Edyta;\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: [removed] - [removed]

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^Dom&Edyta;^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^ScreenUpdate.lnk => C:\Windows\pss\ScreenUpdate.lnk.Startup

MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR

MSCONFIG\startupreg: DivXMediaServer => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe

MSCONFIG\startupreg: DivXUpdate => "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: Raptr => C:\PROGRA~1\Raptr\raptrstub.exe –startup

MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

==================== Accounts: =============================

Administrator (S-1-5-21-813584985-4177405723-473064447-500 - Administrator - Disabled)

Dom&Edyta; (S-1-5-21-813584985-4177405723-473064447-1000 - Administrator - Enabled) => C:\Users\Dom&Edyta;

Guest (S-1-5-21-813584985-4177405723-473064447-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-813584985-4177405723-473064447-1002 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (03/30/2015 06:17:40 PM) (Source: FSecure-FSecure-F-Secure DeepGuard) (EventID: 103) (User: )

Description: 2 2015-03-30 18:17:40+01:00 SKYNET SYSTEM F-Secure DeepGuard

Application was blocked. This was determined to be a high-risk application by system control heuristics.

Application path: \\?\c:\users\dom&edyta;\downloads\frst (1).exe

File hash: a453cf4bb39819b288d814c475089aa89e3881e9

Error: (03/30/2015 06:16:27 PM) (Source: FSecure-FSecure-F-Secure DeepGuard) (EventID: 103) (User: )

Description: 1 2015-03-30 18:16:27+01:00 SKYNET SYSTEM F-Secure DeepGuard

Application was blocked. This was determined to be a high-risk application by system control heuristics.

Application path: \\?\c:\users\dom&edyta;\downloads\frst.exe

File hash: a453cf4bb39819b288d814c475089aa89e3881e9

Error: (03/30/2015 06:02:27 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/30/2015 05:45:02 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/30/2015 00:03:53 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/30/2015 00:02:50 AM) (Source: Dell System Detect) (EventID: 0) (User: )

Description: System.Xml.XmlExceptionLoadConfig192.168.0.4

Error: (03/29/2015 11:35:56 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/29/2015 11:34:41 PM) (Source: Windows Search Service) (EventID: 7010) (User: )

Description: The index cannot be initialized.

Details:

The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/29/2015 11:34:41 PM) (Source: Windows Search Service) (EventID: 3058) (User: )

Description: The application cannot be initialized.

Context: Windows Application

Details:

The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/29/2015 11:34:41 PM) (Source: Windows Search Service) (EventID: 3028) (User: )

Description: The gatherer object cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:

The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

System errors:

=============

Error: (03/30/2015 05:58:26 PM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error:

%%1056

Error: (03/30/2015 05:57:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Windows Search service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (03/30/2015 05:57:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (03/30/2015 05:57:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The F-Secure Management Agent service terminated unexpectedly. It has done this 1 time(s).

Error: (03/30/2015 05:57:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (03/30/2015 05:57:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The F-Secure ORSP Client service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.

Error: (03/30/2015 05:57:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The F-Secure Dll Hoster service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (03/30/2015 05:57:45 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Skype Click to Call PNR Service service terminated unexpectedly. It has done this 1 time(s).

Error: (03/30/2015 05:57:45 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Skype Click to Call Updater service terminated unexpectedly. It has done this 1 time(s).

Error: (03/30/2015 05:57:45 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Bonjour Service service terminated unexpectedly. It has done this 1 time(s).

Microsoft Office Sessions:

=========================

Error: (03/30/2015 06:17:40 PM) (Source: FSecure-FSecure-F-Secure DeepGuard) (EventID: 103) (User: )

Description: 2 2015-03-30 18:17:40+01:00 SKYNET SYSTEM F-Secure DeepGuard

Application was blocked. This was determined to be a high-risk application by system control heuristics.

Application path: \\?\c:\users\dom&edyta;\downloads\frst (1).exe

File hash: a453cf4bb39819b288d814c475089aa89e3881e9

Error: (03/30/2015 06:16:27 PM) (Source: FSecure-FSecure-F-Secure DeepGuard) (EventID: 103) (User: )

Description: 1 2015-03-30 18:16:27+01:00 SKYNET SYSTEM F-Secure DeepGuard

Application was blocked. This was determined to be a high-risk application by system control heuristics.

Application path: \\?\c:\users\dom&edyta;\downloads\frst.exe

File hash: a453cf4bb39819b288d814c475089aa89e3881e9

Error: (03/30/2015 06:02:27 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/30/2015 05:45:02 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/30/2015 00:03:53 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/30/2015 00:02:50 AM) (Source: Dell System Detect) (EventID: 0) (User: )

Description: System.Xml.XmlExceptionLoadConfig192.168.0.4

Error: (03/29/2015 11:35:56 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/29/2015 11:34:41 PM) (Source: Windows Search Service) (EventID: 7010) (User: )

Description:

Details:

The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/29/2015 11:34:41 PM) (Source: Windows Search Service) (EventID: 3058) (User: )

Description: Context: Windows Application

Details:

The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/29/2015 11:34:41 PM) (Source: Windows Search Service) (EventID: 3028) (User: )

Description: Context: Windows Application, SystemIndex Catalog

Details:

The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz

Percentage of memory in use: 39%

Total physical RAM: 3325.47 MB

Available physical RAM: 2013.61 MB

Total Pagefile: 6649.24 MB

Available Pagefile: 4849.07 MB

Total Virtual: 2047.88 MB

Available Virtual: 1892.19 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:921.44 GB) (Free:612.7 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (RECOVERY) (Fixed) (Total:10 GB) (Free:4.8 GB) NTFS

Drive m: (Volume) (Fixed) (Total:596.17 GB) (Free:36.91 GB) NTFS

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: D0000000)

Partition 1: (Not Active) - (Size=71 MB) - (Type=DE)

Partition 2: (Not Active) - (Size=10 GB) - (Type=07 NTFS)

Partition 3: (Active) - (Size=921.4 GB) - (Type=07 NTFS)

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: EB5ECED0)

Partition 1: (Not Active) - (Size=596.2 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Thanks

dom1978111

Post #5March 30, 2015, 6:17 PM UTC

Can I ask, does it matter that I have files in malwerebytes quarantine? or will they be cleaned anyway?

Satchfan

Post #6March 30, 2015, 10:02 PM UTC

Please leave everything as it is until I've looked at your logs. I may want to look at that folder and as I asked, please run nothing or do nothing until I reply.

I'll need time check the logs but meanwhile, can you run another scan.

Please download MGADiag by clicking here and save it to your desktop
double click the [external image: diagicon.png] icon on your desktop
push [external image: continue.png]
push [external image: copy.png]
go to Start -> Run and type in "Notepad"
go to Edit -> Paste in notepad
Copy and paste that log here.

Thanks

Satchfan

dom1978111

Post #7March 31, 2015, 5:49 AM UTC

Here you go

Diagnostic Report (1.9.0027.0):

—————————————–

Windows Validation Data–>

Validation Code: 0

Cached Online Validation Code: N/A, hr = 0xc004f012

Windows Product Key: *****-*****-M3DJT-4J3WC-733WD

Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=

Windows Product ID: 00371-OEM-8992671-00524

Windows Product ID Type: 2

Windows License Type: OEM SLP

Windows OS version: 6.1.7601.2.00010100.1.0.048

ID: {9879AD4D-45BC-40D1-83EA-E2BE554A193F}(1)

Is Admin: Yes

TestCab: 0x0

LegitcheckControl ActiveX: N/A, hr = 0x80070002

Signed By: N/A, hr = 0x80070002

Product Name: Windows 7 Professional

Architecture: 0x00000000

Build lab: 7601.win7sp1_gdr.150202-1526

TTS Error:

Validation Diagnostic:

Resolution Status: N/A

Vista WgaER Data–>

ThreatID(s): N/A, hr = 0x80070002

Version: N/A, hr = 0x80070002

Windows XP Notifications Data–>

Cached Result: N/A, hr = 0x80070002

File Exists: No

Version: N/A, hr = 0x80070002

WgaTray.exe Signed By: N/A, hr = 0x80070002

WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data–>

Cached Result: N/A, hr = 0x80070002

Version: N/A, hr = 0x80070002

OGAExec.exe Signed By: N/A, hr = 0x80070002

OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data–>

Office Status: 109 N/A

OGA Version: N/A, 0x80070002

Signed By: N/A, hr = 0x80070002

Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data–>

Proxy settings: N/A

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

Default Browser: C:\Program Files\Google\Chrome\Application\chrome.exe

Download signed ActiveX controls: Prompt

Download unsigned ActiveX controls: Disabled

Run ActiveX controls and plug-ins: Allowed

Initialize and script ActiveX controls not marked as safe: Disabled

Allow scripting of Internet Explorer Webbrowser control: Disabled

Active scripting: Allowed

Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data–>

File Mismatch: C:\Windows\system32\wat\watadminsvc.exe

File Mismatch: C:\Windows\system32\wat\npwatweb.dll

File Mismatch: C:\Windows\system32\wat\watux.exe

File Mismatch: C:\Windows\system32\wat\watweb.dll

Other data–>

Office Details: {9879AD4D-45BC-40D1-83EA-E2BE554A193F}1.9.0027.06.1.7601.2.00010100.1.0.048x32*****-*****-*****-*****-733WD00371-OEM-8992671-005242S-1-5-21-813584985-4177405723-473064447Dell IncXPS 630iDell Inc.1.0.1220081028000000.000000+00085FB3507018400FA08090409GMT Standard Time(GMT+00:00)03DELL WN09 109

Spsys.log Content: 0x80070002

Licensing Data–>

Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Professional edition

Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764

Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

Extended PID: 00371-00178-926-700524-02-2057-7601.0000-0672015

Installation ID: 010531595755159422314991998460546202818843272726861172

Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

Partial Product Key: 733WD

License Status: Licensed

Remaining Windows rearm count: 3

Trusted time: 31/03/2015 06:44:58

Windows Activation Technologies–>

HrOffline: 0x00000000

HrOnline: N/A

HealthStatus: 0x0000000000000000

Event Time Stamp: N/A

ActiveX: Not Registered - 0x80040154

Admin Service: Not Registered - 0x80040154

HealthStatus Bitmask Output:

HWID Data–>

HWID Hash Current: OgAAAAIAAgABAAEAAwADAAAAAgABAAEA6GF2QrxTjAUqa0gk2PaMdNqugH1M6oqbqOU313/ZFvfMMQ==

OEM Activation 1.0 Data–>

N/A

OEM Activation 2.0 Data–>

BIOS valid for OA 2.0: yes

Windows marker version: 0x20001

OEMID and OEMTableID Consistent: yes

BIOS Information:

ACPI Table Name OEMID Value OEMTableID Value

APIC DELL MC09

FACP DELL MC09

HPET DELL MC09

BOOT DELL MC09

MCFG DELL MC09

SLIC DELL WN09

SSDT PmRef CpuPm

Satchfan

Post #8March 31, 2015, 10:55 AM UTC

There is some question as to whether your version of Windows is genuine. This may not be the case and if you think it is genuine, please install the Windows update KB971033 for Windows 7 x86-based systems:

When you’ve done that, please run MGADiag again and send the new report.

Thanks

Satchfan

Satchfan

Post #9March 31, 2015, 10:23 PM UTC

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Infection causing issues [Solved]

✨ Ask AI

Ask AI