API tools faq
paste
Advertisement
ibanezac

FRST

ibanezac
May 25th, 2015
678
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 58.62 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 25-05-2015
  2. Ran by IP Maesstro (administrator) on TRANSYLVANIA5 on 26-05-2015 04:32:03
  3. Running from C:\Users\IP Maesstro\Desktop
  4. Loaded Profiles: IP Maesstro (Available Profiles: IP Maesstro)
  5. Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
  6. Internet Explorer Version 11 (Default browser: Opera)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  15. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  16. (Microsoft Corporation) C:\Windows\System32\wlanext.exe
  17. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
  18. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  19. (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  20. (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
  21. (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
  22. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
  23. (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
  24. (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
  25. (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
  26. (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
  27. (Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
  28. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  29. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  30. (PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
  31. (Swisscom) C:\Program Files (x86)\Telenor\Mobilt bredbånd\Sesam\BIN\SecMIPService.exe
  32. (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
  33. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  34. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  35. (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
  36. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
  37. (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
  38. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  39. (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
  40. (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
  41. (ACD Systems) C:\Program Files\ACD Systems\ACDSee Pro\6.0\ACDSeePro6InTouch2.exe
  42. (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
  43. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  44. (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
  45. (AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
  46. (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
  47. (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
  48. (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
  49. (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
  50. (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
  51. (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
  52. (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
  53. (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
  54. (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
  55. (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
  56. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  57. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  58. (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
  59. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  60. (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
  61.  
  62.  
  63. ==================== Registry (Whitelisted) ==================
  64.  
  65. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  66.  
  67. HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
  68. HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
  69. HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
  70. HKLM\...\Run: [ACPW06EN] => C:\Program Files\ACD Systems\ACDSee Pro\6.0\ACDSeePro6InTouch2.exe [1231992 2012-11-14] (ACD Systems)
  71. HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)
  72. HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
  73. HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
  74. HKLM-x32\...\RunOnce: [20150107] => C:\Program Files\AVAST Software\Avast\setup\emupdate\68fd7ff6-9302-4154-94cc-ac14364cf98e.exe [183232 2015-05-26] (AVAST Software)
  75. HKU\S-1-5-21-3385859915-1071417765-3483183229-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd)
  76. HKU\S-1-5-21-3385859915-1071417765-3483183229-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Acer.scr [456224 2010-07-29] ()
  77. HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
  78. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-01-17]
  79. ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (No File)
  80. ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-23] (Avast Software s.r.o.)
  81. GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
  82. CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
  83. CHR HKU\S-1-5-21-3385859915-1071417765-3483183229-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
  84.  
  85. ==================== Internet (Whitelisted) ====================
  86.  
  87. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  88.  
  89. HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
  90. HKU\S-1-5-21-3385859915-1071417765-3483183229-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
  91. HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
  92. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
  93. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
  94. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
  95. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
  96. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  97. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
  98. HKU\S-1-5-21-3385859915-1071417765-3483183229-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  99. SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  100. SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  101. BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-11-17] (Oracle Corporation)
  102. BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-02] (Avast Software s.r.o.)
  103. BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
  104. BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
  105. BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-17] (Oracle Corporation)
  106. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-11-17] (Oracle Corporation)
  107. BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-02] (Avast Software s.r.o.)
  108. BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
  109. BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
  110. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-17] (Oracle Corporation)
  111. Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
  112. Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
  113. Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
  114. Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
  115. Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 10.0.0.1
  116. Tcpip\..\Interfaces\{7F673B25-2B1A-4AF5-ABEB-80E6F814735A}: [NameServer] 193.213.112.4 130.67.15.198
  117.  
  118. FireFox:
  119. ========
  120. FF ProfilePath: C:\Users\IP Maesstro\AppData\Roaming\Mozilla\Firefox\Profiles\x25yvinx.default
  121. FF DefaultSearchEngine: Yahoo! (Avast)
  122. FF DefaultSearchUrl: https://no.search.yahoo.com/yhs/search
  123. FF SearchEngineOrder.1: Yahoo! (Avast)
  124. FF SearchEngineOrder.3: Bing
  125. FF SelectedSearchEngine: Yahoo! (Avast)
  126. FF Homepage: https://no.search.yahoo.com/?fr=hp-avast&type=avastbcl
  127. FF Keyword.URL: https://no.search.yahoo.com/yhs/search
  128. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-05-24] ()
  129. FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-11-17] (Oracle Corporation)
  130. FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-11-17] (Oracle Corporation)
  131. FF Plugin: @microsoft.com/GENUINE -> disabled No File
  132. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
  133. FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-05-30] (Adobe Systems)
  134. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-24] ()
  135. FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-11-17] (Oracle Corporation)
  136. FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-11-17] (Oracle Corporation)
  137. FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
  138. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
  139. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
  140. FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
  141. FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
  142. FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-01-10] (NVIDIA Corporation)
  143. FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-01-10] (NVIDIA Corporation)
  144. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
  145. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
  146. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
  147. FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-05-30] (Adobe Systems)
  148. FF Plugin HKU\S-1-5-21-3385859915-1071417765-3483183229-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\IP Maesstro\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
  149. FF Plugin HKU\S-1-5-21-3385859915-1071417765-3483183229-1000: @tools.google.com/Google Update;version=3 -> C:\Users\IP Maesstro\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
  150. FF Plugin HKU\S-1-5-21-3385859915-1071417765-3483183229-1000: @tools.google.com/Google Update;version=9 -> C:\Users\IP Maesstro\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
  151. FF SearchPlugin: C:\Users\IP Maesstro\AppData\Roaming\Mozilla\Firefox\Profiles\x25yvinx.default\searchplugins\yahoo-avast.xml [2015-04-24]
  152. FF Extension: ImageHost Grabber - C:\Users\IP Maesstro\AppData\Roaming\Mozilla\Firefox\Profiles\x25yvinx.default\Extensions\{E4091D66-127C-11DB-903A-DE80D2EFDFE8} [2014-07-18]
  153. FF Extension: TinEye Reverse Image Search - C:\Users\IP Maesstro\AppData\Roaming\Mozilla\Firefox\Profiles\x25yvinx.default\Extensions\[email protected] [2015-01-23]
  154. FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-04-22]
  155. FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
  156. FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-05-25]
  157. FF HKU\S-1-5-21-3385859915-1071417765-3483183229-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
  158.  
  159. Chrome:
  160. =======
  161. CHR Profile: C:\Users\IP Maesstro\AppData\Local\Google\Chrome\User Data\Default
  162. CHR Extension: (Bookmark Manager) - C:\Users\IP Maesstro\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-16]
  163. CHR Extension: (Avast Online Security) - C:\Users\IP Maesstro\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-05-24]
  164. CHR Extension: (Chrome Hotword Shared Module) - C:\Users\IP Maesstro\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-05]
  165. CHR Extension: (Google Wallet) - C:\Users\IP Maesstro\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24]
  166. CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-17]
  167. StartMenuInternet: Google Chrome -
  168.  
  169. Opera:
  170. =======
  171. OPR Extension: (Sharp Angle) - C:\Users\IP Maesstro\AppData\Roaming\Opera Software\Opera Stable\Extensions\gjmlbiejjcmigiafjhlbbfadboleiehl [2015-04-23]
  172. OPR Extension: (TinEye Reverse Image Search (Context menu)) - C:\Users\IP Maesstro\AppData\Roaming\Opera Software\Opera Stable\Extensions\kgdmjihcfdjkcgodohgofgcdfiaekdkk [2015-04-24]
  173.  
  174. ==================== Services (Whitelisted) =================
  175.  
  176. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  177.  
  178. R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-23] (Avast Software s.r.o.)
  179. R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-04-23] (Avast Software)
  180. S4 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) []
  181. R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
  182. R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
  183. R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1254400 2015-04-27] (Microsoft Corporation)
  184. S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2012-05-09] (Macrovision Europe Ltd.) []
  185. R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
  186. R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
  187. R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
  188. R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
  189. R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
  190. R2 PaceLicenseDServices; C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [2938880 2012-05-18] (PACE Anti-Piracy, Inc.) []
  191. R2 SesamService; C:\Program Files (x86)\Telenor\Mobilt bredbånd\Sesam\BIN\SecMIPService.exe [1482240 2011-05-26] (Swisscom) []
  192. S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) []
  193. R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
  194. S2 WSWNA3100; C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe [303360 2011-12-07] ()
  195.  
  196. ==================== Drivers (Whitelisted) ====================
  197.  
  198. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  199.  
  200. U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
  201. R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-23] ()
  202. R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-23] (Avast Software s.r.o.)
  203. R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-23] (Avast Software s.r.o.)
  204. R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-23] ()
  205. R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-23] (Avast Software s.r.o.)
  206. R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-04-23] (Avast Software s.r.o.)
  207. R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-23] (Avast Software s.r.o.)
  208. S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [44640 2013-10-21] (The OpenVPN Project)
  209. R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-23] ()
  210. S3 massfilter_LTE; C:\Windows\System32\DRIVERS\massfilter_LTE.sys [17736 2012-06-04] (HandSet Incorporated)
  211. R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
  212. R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-05-26] (Malwarebytes Corporation)
  213. R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
  214. R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
  215. R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
  216. S3 pfc; C:\Windows\SysWOW64\drivers\pfc.sys [10368 2013-05-07] (Padus, Inc.) []
  217. R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-04-23] (Avast Software)
  218. R3 WtSmpAdap; C:\Windows\System32\DRIVERS\wtsmpadap.sys [56688 2011-04-11] (Swisscom)
  219. R1 WtSmpFlt; C:\Windows\System32\DRIVERS\wtsmpflt.sys [409456 2011-04-11] (Swisscom)
  220. S3 xusb21; C:\Windows\System32\DRIVERS\xusb21.sys [73984 2009-08-13] (Microsoft Corporation) []
  221. S3 zgdcat; C:\Windows\System32\DRIVERS\zgdcat.sys [129520 2012-05-29] (ZTE Incorporated)
  222. S3 zgdcdiag; C:\Windows\System32\DRIVERS\zgdcdiag.sys [129520 2012-05-29] (ZTE Incorporated)
  223. S3 zgdcmdm; C:\Windows\System32\DRIVERS\zgdcmdm.sys [129520 2012-05-29] (ZTE Incorporated)
  224. S3 zgdcnmea; C:\Windows\System32\DRIVERS\zgdcnmea.sys [129520 2012-05-29] (ZTE Incorporated)
  225. S3 zgdcwwan; C:\Windows\System32\DRIVERS\zgdcwwan.sys [257048 2012-09-26] (ZTE Corporation)
  226. S3 catchme; \??\C:\ComboFix\catchme.sys [X]
  227.  
  228. ==================== NetSvcs (Whitelisted) ===================
  229.  
  230. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  231.  
  232.  
  233. ==================== One Month Created files and folders ========
  234.  
  235. (If an entry is included in the fixlist, the file/folder will be moved.)
  236.  
  237. 2015-05-26 04:32 - 2015-05-26 04:32 - 00022359 _____ () C:\Users\IP Maesstro\Desktop\FRST.txt
  238. 2015-05-26 04:31 - 2015-05-26 04:32 - 00000000 ____D () C:\FRST
  239. 2015-05-26 04:31 - 2015-05-26 04:28 - 02108928 _____ (Farbar) C:\Users\IP Maesstro\Desktop\FRST64.exe
  240. 2015-05-24 20:37 - 2015-05-25 10:48 - 00000000 ____D () C:\ComboFix
  241. 2015-05-24 20:37 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
  242. 2015-05-24 20:37 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
  243. 2015-05-24 20:37 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
  244. 2015-05-24 20:37 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
  245. 2015-05-24 20:37 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
  246. 2015-05-24 20:37 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
  247. 2015-05-24 20:37 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
  248. 2015-05-24 20:37 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
  249. 2015-05-24 20:36 - 2015-05-24 20:49 - 00000000 ____D () C:\Windows\erdnt
  250. 2015-05-24 20:36 - 2015-05-24 20:37 - 00000000 ____D () C:\Qoobox
  251. 2015-05-24 20:33 - 2015-05-24 20:34 - 00001420 _____ () C:\Users\IP Maesstro\Desktop\Rkill.txt
  252. 2015-05-24 20:33 - 2015-05-24 20:33 - 00000000 ____D () C:\Users\IP Maesstro\Desktop\rkill
  253. 2015-05-24 20:23 - 2015-05-24 20:25 - 00000000 ____D () C:\AdwCleaner
  254. 2015-05-24 15:37 - 2015-05-24 15:37 - 00620382 _____ () C:\Users\IP Maesstro\Documents\cc_20150524_153740.reg
  255. 2015-05-24 15:02 - 2015-05-24 15:02 - 00002812 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
  256. 2015-05-24 15:02 - 2015-05-24 15:02 - 00000786 _____ () C:\Users\Public\Desktop\CCleaner.lnk
  257. 2015-05-24 15:02 - 2015-05-24 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
  258. 2015-05-24 15:02 - 2015-05-24 15:02 - 00000000 ____D () C:\Program Files\CCleaner
  259. 2015-05-24 14:19 - 2015-05-26 03:58 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
  260. 2015-05-24 14:18 - 2015-05-24 14:18 - 00001110 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  261. 2015-05-24 14:18 - 2015-05-24 14:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
  262. 2015-05-24 14:18 - 2015-05-24 14:18 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
  263. 2015-05-24 14:18 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
  264. 2015-05-24 14:18 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
  265. 2015-05-24 14:18 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
  266. 2015-05-21 18:12 - 2015-05-21 18:12 - 00000000 ____D () C:\Users\IP Maesstro\AppData\Roaming\Warner Bros. Interactive Entertainment
  267. 2015-05-21 18:12 - 2015-05-21 18:12 - 00000000 ____D () C:\Users\IP Maesstro\AppData\Local\EMU
  268. 2015-05-21 18:08 - 2015-05-21 18:11 - 00000000 ____D () C:\Program Files (x86)\LEGO MARVEL Super Heroes
  269. 2015-05-21 18:08 - 2015-05-21 18:08 - 00002051 _____ () C:\Users\Public\Desktop\LEGO MARVEL Super Heroes.lnk
  270. 2015-05-21 18:08 - 2015-05-21 18:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEGO MARVEL Super Heroes
  271. 2015-05-20 21:02 - 2015-05-20 21:02 - 00000000 ____D () C:\TDSSKiller_Quarantine
  272. 2015-05-15 23:08 - 2015-05-15 23:08 - 00003372 _____ () C:\Windows\System32\Tasks\{82C83E47-F908-45C5-8252-D3827A82C774}
  273. 2015-05-15 22:19 - 2015-05-24 15:31 - 00000000 ____D () C:\Users\IP Maesstro\AppData\Roaming\uTorrent
  274. 2015-05-14 01:33 - 2015-05-01 15:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
  275. 2015-05-14 01:33 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
  276. 2015-05-13 11:49 - 2015-04-22 04:28 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  277. 2015-05-13 11:49 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
  278. 2015-05-13 11:49 - 2015-04-21 19:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  279. 2015-05-13 11:49 - 2015-04-21 19:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
  280. 2015-05-13 11:49 - 2015-04-21 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
  281. 2015-05-13 11:49 - 2015-04-21 18:51 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
  282. 2015-05-13 11:49 - 2015-04-21 18:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  283. 2015-05-13 11:49 - 2015-04-21 18:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
  284. 2015-05-13 11:49 - 2015-04-21 18:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
  285. 2015-05-13 11:49 - 2015-04-21 18:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  286. 2015-05-13 11:49 - 2015-04-21 18:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
  287. 2015-05-13 11:49 - 2015-04-21 18:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
  288. 2015-05-13 11:49 - 2015-04-21 18:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
  289. 2015-05-13 11:49 - 2015-04-21 18:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
  290. 2015-05-13 11:49 - 2015-04-21 18:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
  291. 2015-05-13 11:49 - 2015-04-21 18:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
  292. 2015-05-13 11:49 - 2015-04-21 18:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
  293. 2015-05-13 11:49 - 2015-04-21 18:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
  294. 2015-05-13 11:49 - 2015-04-21 18:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  295. 2015-05-13 11:49 - 2015-04-21 18:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
  296. 2015-05-13 11:49 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
  297. 2015-05-13 11:49 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  298. 2015-05-13 11:49 - 2015-04-21 18:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
  299. 2015-05-13 11:49 - 2015-04-21 18:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
  300. 2015-05-13 11:49 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
  301. 2015-05-13 11:49 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
  302. 2015-05-13 11:49 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
  303. 2015-05-13 11:49 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
  304. 2015-05-13 11:49 - 2015-04-21 18:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
  305. 2015-05-13 11:49 - 2015-04-21 18:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  306. 2015-05-13 11:49 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
  307. 2015-05-13 11:49 - 2015-04-21 18:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  308. 2015-05-13 11:49 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  309. 2015-05-13 11:49 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
  310. 2015-05-13 11:49 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
  311. 2015-05-13 11:49 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
  312. 2015-05-13 11:49 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
  313. 2015-05-13 11:49 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
  314. 2015-05-13 11:49 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
  315. 2015-05-13 11:49 - 2015-04-21 17:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  316. 2015-05-13 11:49 - 2015-04-21 17:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
  317. 2015-05-13 11:49 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
  318. 2015-05-13 11:49 - 2015-04-21 17:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
  319. 2015-05-13 11:49 - 2015-04-21 17:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  320. 2015-05-13 11:49 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
  321. 2015-05-13 11:49 - 2015-04-21 17:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  322. 2015-05-13 11:49 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
  323. 2015-05-13 11:49 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
  324. 2015-05-13 11:49 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
  325. 2015-05-13 11:49 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
  326. 2015-05-13 11:49 - 2015-04-21 17:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  327. 2015-05-13 11:49 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
  328. 2015-05-13 11:49 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
  329. 2015-05-13 11:49 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
  330. 2015-05-13 11:49 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  331. 2015-05-13 11:49 - 2015-04-21 17:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  332. 2015-05-13 11:49 - 2015-04-21 17:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
  333. 2015-05-13 11:49 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  334. 2015-05-13 11:49 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  335. 2015-05-13 11:49 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
  336. 2015-05-13 07:36 - 2015-03-04 06:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
  337. 2015-05-13 07:36 - 2015-03-04 06:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
  338. 2015-05-13 07:36 - 2015-03-04 06:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
  339. 2015-05-13 07:36 - 2015-03-04 06:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
  340. 2015-05-13 07:36 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
  341. 2015-05-13 07:36 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
  342. 2015-05-13 07:36 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
  343. 2015-05-13 07:28 - 2015-05-05 03:29 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
  344. 2015-05-13 07:28 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
  345. 2015-05-13 07:28 - 2015-04-18 05:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
  346. 2015-05-13 07:28 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
  347. 2015-05-13 07:23 - 2015-04-13 05:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
  348. 2015-05-13 07:19 - 2015-04-27 21:28 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
  349. 2015-05-13 07:19 - 2015-04-27 21:26 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
  350. 2015-05-13 07:19 - 2015-04-27 21:23 - 01254400 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
  351. 2015-05-13 07:19 - 2015-04-27 21:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
  352. 2015-05-13 07:19 - 2015-04-27 20:06 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
  353. 2015-05-13 07:18 - 2015-04-27 21:28 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
  354. 2015-05-13 07:18 - 2015-04-27 21:28 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
  355. 2015-05-13 07:18 - 2015-04-27 21:23 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  356. 2015-05-13 07:18 - 2015-04-27 21:23 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
  357. 2015-05-13 07:18 - 2015-04-27 21:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
  358. 2015-05-13 07:18 - 2015-04-27 21:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
  359. 2015-05-13 07:18 - 2015-04-27 21:23 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
  360. 2015-05-13 07:18 - 2015-04-27 21:23 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
  361. 2015-05-13 07:18 - 2015-04-27 21:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
  362. 2015-05-13 07:18 - 2015-04-27 21:23 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
  363. 2015-05-13 07:18 - 2015-04-27 21:23 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
  364. 2015-05-13 07:18 - 2015-04-27 21:23 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
  365. 2015-05-13 07:18 - 2015-04-27 21:23 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
  366. 2015-05-13 07:18 - 2015-04-27 21:23 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
  367. 2015-05-13 07:18 - 2015-04-27 21:23 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
  368. 2015-05-13 07:18 - 2015-04-27 21:23 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
  369. 2015-05-13 07:18 - 2015-04-27 21:23 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
  370. 2015-05-13 07:18 - 2015-04-27 21:23 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
  371. 2015-05-13 07:18 - 2015-04-27 21:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
  372. 2015-05-13 07:18 - 2015-04-27 21:23 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
  373. 2015-05-13 07:18 - 2015-04-27 21:23 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
  374. 2015-05-13 07:18 - 2015-04-27 21:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
  375. 2015-05-13 07:18 - 2015-04-27 21:23 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
  376. 2015-05-13 07:18 - 2015-04-27 21:23 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
  377. 2015-05-13 07:18 - 2015-04-27 21:23 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
  378. 2015-05-13 07:18 - 2015-04-27 21:22 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
  379. 2015-05-13 07:18 - 2015-04-27 21:22 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
  380. 2015-05-13 07:18 - 2015-04-27 21:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
  381. 2015-05-13 07:18 - 2015-04-27 21:22 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
  382. 2015-05-13 07:18 - 2015-04-27 21:22 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
  383. 2015-05-13 07:18 - 2015-04-27 21:22 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
  384. 2015-05-13 07:18 - 2015-04-27 21:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
  385. 2015-05-13 07:18 - 2015-04-27 21:22 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
  386. 2015-05-13 07:18 - 2015-04-27 21:22 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
  387. 2015-05-13 07:18 - 2015-04-27 21:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
  388. 2015-05-13 07:18 - 2015-04-27 21:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
  389. 2015-05-13 07:18 - 2015-04-27 21:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
  390. 2015-05-13 07:18 - 2015-04-27 21:16 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
  391. 2015-05-13 07:18 - 2015-04-27 21:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
  392. 2015-05-13 07:18 - 2015-04-27 21:16 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
  393. 2015-05-13 07:18 - 2015-04-27 21:16 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
  394. 2015-05-13 07:18 - 2015-04-27 21:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
  395. 2015-05-13 07:18 - 2015-04-27 21:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
  396. 2015-05-13 07:18 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
  397. 2015-05-13 07:18 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
  398. 2015-05-13 07:18 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
  399. 2015-05-13 07:18 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
  400. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
  401. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
  402. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
  403. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
  404. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
  405. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
  406. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
  407. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
  408. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
  409. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
  410. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
  411. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
  412. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
  413. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
  414. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
  415. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
  416. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
  417. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
  418. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
  419. 2015-05-13 07:18 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
  420. 2015-05-13 07:18 - 2015-04-27 21:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
  421. 2015-05-13 07:18 - 2015-04-27 21:08 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
  422. 2015-05-13 07:18 - 2015-04-27 21:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
  423. 2015-05-13 07:18 - 2015-04-27 21:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
  424. 2015-05-13 07:18 - 2015-04-27 21:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
  425. 2015-05-13 07:18 - 2015-04-27 21:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
  426. 2015-05-13 07:18 - 2015-04-27 21:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
  427. 2015-05-13 07:18 - 2015-04-27 21:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
  428. 2015-05-13 07:18 - 2015-04-27 21:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
  429. 2015-05-13 07:18 - 2015-04-27 21:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
  430. 2015-05-13 07:18 - 2015-04-27 21:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
  431. 2015-05-13 07:18 - 2015-04-27 21:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
  432. 2015-05-13 07:18 - 2015-04-27 21:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
  433. 2015-05-13 07:18 - 2015-04-27 21:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
  434. 2015-05-13 07:18 - 2015-04-27 21:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
  435. 2015-05-13 07:18 - 2015-04-27 21:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
  436. 2015-05-13 07:18 - 2015-04-27 21:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
  437. 2015-05-13 07:18 - 2015-04-27 21:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
  438. 2015-05-13 07:18 - 2015-04-27 21:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
  439. 2015-05-13 07:18 - 2015-04-27 21:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
  440. 2015-05-13 07:18 - 2015-04-27 21:03 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
  441. 2015-05-13 07:18 - 2015-04-27 21:03 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
  442. 2015-05-13 07:18 - 2015-04-27 21:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
  443. 2015-05-13 07:18 - 2015-04-27 21:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
  444. 2015-05-13 07:18 - 2015-04-27 21:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
  445. 2015-05-13 07:18 - 2015-04-27 21:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
  446. 2015-05-13 07:18 - 2015-04-27 21:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
  447. 2015-05-13 07:18 - 2015-04-27 20:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
  448. 2015-05-13 07:18 - 2015-04-27 20:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
  449. 2015-05-13 07:18 - 2015-04-27 20:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
  450. 2015-05-13 07:18 - 2015-04-27 20:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
  451. 2015-05-13 07:18 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
  452. 2015-05-13 07:18 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
  453. 2015-05-13 07:18 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
  454. 2015-05-13 07:18 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
  455. 2015-05-13 07:18 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
  456. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
  457. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
  458. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
  459. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
  460. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
  461. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
  462. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
  463. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
  464. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
  465. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
  466. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
  467. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
  468. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
  469. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
  470. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
  471. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
  472. 2015-05-13 07:18 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
  473. 2015-05-13 07:18 - 2015-04-27 19:57 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
  474. 2015-05-13 07:18 - 2015-04-27 19:57 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
  475. 2015-05-13 07:18 - 2015-04-27 19:55 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
  476. 2015-05-13 07:18 - 2015-04-27 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
  477. 2015-05-13 07:18 - 2015-04-27 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
  478. 2015-05-13 07:18 - 2015-04-27 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
  479. 2015-05-13 07:17 - 2015-04-20 05:17 - 01647104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
  480. 2015-05-13 07:17 - 2015-04-20 05:17 - 01179136 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
  481. 2015-05-13 07:17 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
  482. 2015-05-13 07:17 - 2015-04-20 04:11 - 03204608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
  483. 2015-05-13 07:17 - 2015-04-08 05:29 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
  484. 2015-05-13 07:17 - 2015-04-08 05:29 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
  485. 2015-05-13 07:17 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
  486. 2015-05-13 07:10 - 2015-01-29 05:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
  487. 2015-05-13 07:10 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
  488. 2015-05-13 07:05 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
  489. 2015-05-13 07:05 - 2015-02-18 09:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
  490. 2015-04-29 19:57 - 2015-04-29 19:57 - 00000000 ____D () C:\Users\IP Maesstro\Tracing
  491.  
  492. ==================== One Month Modified files and folders ========
  493.  
  494. (If an entry is included in the fixlist, the file/folder will be moved.)
  495.  
  496. 2015-05-26 04:32 - 2012-05-05 15:20 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
  497. 2015-05-26 04:07 - 2009-07-14 06:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  498. 2015-05-26 04:07 - 2009-07-14 06:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  499. 2015-05-26 04:04 - 2009-07-14 07:13 - 00783400 _____ () C:\Windows\system32\PerfStringBackup.INI
  500. 2015-05-26 04:02 - 2012-03-19 16:57 - 01125935 _____ () C:\Windows\WindowsUpdate.log
  501. 2015-05-26 03:59 - 2013-05-28 23:27 - 00000992 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  502. 2015-05-26 03:58 - 2012-07-04 13:47 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
  503. 2015-05-26 03:57 - 2013-05-28 23:27 - 00000988 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  504. 2015-05-26 03:57 - 2012-03-19 17:03 - 00000000 ____D () C:\ProgramData\NVIDIA
  505. 2015-05-26 03:57 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
  506. 2015-05-26 03:57 - 2009-07-14 06:51 - 00218012 _____ () C:\Windows\setupact.log
  507. 2015-05-26 00:17 - 2012-06-19 15:07 - 00001046 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3385859915-1071417765-3483183229-1000UA.job
  508. 2015-05-25 23:53 - 2012-11-28 18:08 - 00001026 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3385859915-1071417765-3483183229-1000UA.job
  509. 2015-05-25 22:53 - 2012-11-28 18:08 - 00000974 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3385859915-1071417765-3483183229-1000Core.job
  510. 2015-05-25 21:55 - 2012-05-06 08:52 - 00002407 _____ () C:\Users\IP Maesstro\Desktop\Google Chrome.lnk
  511. 2015-05-25 10:44 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
  512. 2015-05-25 10:42 - 2010-11-21 05:47 - 00442746 _____ () C:\Windows\PFRO.log
  513. 2015-05-24 17:29 - 2012-06-19 15:39 - 00000000 ____D () C:\Users\IP Maesstro\AppData\Roaming\Skype
  514. 2015-05-24 16:07 - 2014-08-13 18:26 - 00000000 ____D () C:\Users\IP Maesstro\AppData\Local\Adobe
  515. 2015-05-24 16:06 - 2011-07-11 09:36 - 00000000 ____D () C:\ProgramData\Skype
  516. 2015-05-24 16:04 - 2012-05-05 15:20 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  517. 2015-05-24 16:04 - 2012-05-05 15:20 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
  518. 2015-05-24 16:04 - 2011-07-11 10:04 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  519. 2015-05-24 15:58 - 2014-11-18 23:07 - 00000000 ____D () C:\Users\IP Maesstro\AppData\Local\CrashDumps
  520. 2015-05-24 15:32 - 2014-06-15 17:50 - 00000000 ____D () C:\Users\IP Maesstro\AppData\Roaming\DAEMON Tools Lite
  521. 2015-05-24 15:31 - 2014-06-15 17:52 - 00000000 ____D () C:\Program Files (x86)\Steam
  522. 2015-05-24 15:19 - 2012-06-30 21:21 - 00000000 ____D () C:\Windows\Minidump
  523. 2015-05-24 15:10 - 2011-07-11 09:39 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
  524. 2015-05-24 15:08 - 2014-11-17 15:46 - 00000000 ____D () C:\Program Files\CyberLink
  525. 2015-05-24 15:06 - 2015-03-19 20:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
  526. 2015-05-24 15:06 - 2015-03-19 19:57 - 00000000 ____D () C:\Program Files (x86)\R.G. Mechanics
  527. 2015-05-24 14:18 - 2012-05-14 15:27 - 00000000 ____D () C:\ProgramData\Malwarebytes
  528. 2015-05-24 14:16 - 2009-07-14 04:34 - 00000537 _____ () C:\Windows\win.ini
  529. 2015-05-24 09:17 - 2012-06-19 15:07 - 00001024 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3385859915-1071417765-3483183229-1000Core.job
  530. 2015-05-23 18:56 - 2015-04-25 20:48 - 00000892 _____ () C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
  531. 2015-05-21 23:58 - 2014-07-16 17:45 - 00000000 ____D () C:\My Web Sites
  532. 2015-05-21 18:08 - 2014-12-04 18:05 - 00001982 _____ () C:\Users\Public\Desktop\Cat-A-Cat Games.lnk
  533. 2015-05-21 01:27 - 2015-04-05 03:00 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
  534. 2015-05-21 01:27 - 2015-04-05 03:00 - 00000000 ___SD () C:\Windows\system32\GWX
  535. 2015-05-20 13:07 - 2015-04-24 11:26 - 00003840 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1429867572
  536. 2015-05-20 13:07 - 2012-05-04 17:46 - 00000000 ____D () C:\Program Files (x86)\Opera
  537. 2015-05-18 22:48 - 2012-11-28 18:08 - 00004008 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3385859915-1071417765-3483183229-1000UA
  538. 2015-05-18 22:48 - 2012-11-28 18:08 - 00003612 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3385859915-1071417765-3483183229-1000Core
  539. 2015-05-18 18:54 - 2013-05-28 23:27 - 00003988 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
  540. 2015-05-18 18:54 - 2013-05-28 23:27 - 00003736 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
  541. 2015-05-17 11:04 - 2009-07-14 07:08 - 00032620 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
  542. 2015-05-15 23:02 - 2015-04-15 01:22 - 00000000 ____D () C:\Program Files (x86)\uTorrent
  543. 2015-05-15 12:27 - 2012-11-18 18:27 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
  544. 2015-05-14 10:29 - 2009-07-14 06:45 - 05219784 _____ () C:\Windows\system32\FNTCACHE.DAT
  545. 2015-05-14 10:24 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal
  546. 2015-05-14 10:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
  547. 2015-05-14 10:22 - 2012-05-10 06:50 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
  548. 2015-05-14 10:22 - 2011-07-11 09:37 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
  549. 2015-05-14 01:41 - 2012-10-09 07:01 - 00791348 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
  550. 2015-05-14 01:41 - 2012-10-09 07:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client
  551. 2015-05-14 01:40 - 2013-08-14 12:37 - 00000000 ____D () C:\Windows\system32\MRT
  552. 2015-05-14 01:34 - 2012-05-11 11:32 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
  553. 2015-05-14 01:33 - 2012-05-13 08:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
  554. 2015-04-29 19:57 - 2012-05-05 01:18 - 00000000 ____D () C:\Users\IP Maesstro
  555. 2015-04-29 19:57 - 2011-07-11 09:37 - 00000000 ___RD () C:\Program Files (x86)\Skype
  556. 2015-04-26 00:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
  557.  
  558. ==================== Files in the root of some directories =======
  559.  
  560. 2013-05-07 17:53 - 2013-05-07 17:53 - 25222144 _____ () C:\Program Files (x86)\ACDSee Pro.msi
  561. 2013-07-29 15:32 - 2014-06-22 17:43 - 0003730 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
  562. 2013-03-14 02:59 - 2013-03-14 02:59 - 56079904 _____ () C:\Users\IP Maesstro\AppData\Local\AdobeSetupUtility.zip.aamdownload
  563. 2013-03-14 02:59 - 2013-03-14 02:59 - 0000830 _____ () C:\Users\IP Maesstro\AppData\Local\AdobeSetupUtility.zip.aamdownload.aamd
  564. 2012-09-02 21:47 - 2013-01-20 21:31 - 0006144 _____ () C:\Users\IP Maesstro\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  565. 2012-05-15 15:40 - 2012-05-15 15:40 - 0000017 _____ () C:\Users\IP Maesstro\AppData\Local\resmon.resmoncfg
  566. 2012-03-19 17:30 - 2012-03-19 17:32 - 0002640 _____ () C:\ProgramData\ArcadeDeluxe5.log
  567. 2012-05-15 15:09 - 2012-05-15 15:09 - 0000032 _____ () C:\ProgramData\PS.log
  568.  
  569. ==================== Bamital & volsnap Check =================
  570.  
  571. (There is no automatic fix for files that do not pass verification.)
  572.  
  573. C:\Windows\System32\winlogon.exe => File is digitally signed
  574. C:\Windows\System32\wininit.exe => File is digitally signed
  575. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  576. C:\Windows\explorer.exe => File is digitally signed
  577. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  578. C:\Windows\System32\svchost.exe => File is digitally signed
  579. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  580. C:\Windows\System32\services.exe => File is digitally signed
  581. C:\Windows\System32\User32.dll => File is digitally signed
  582. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  583. C:\Windows\System32\userinit.exe => File is digitally signed
  584. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  585. C:\Windows\System32\rpcss.dll => File is digitally signed
  586. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  587.  
  588.  
  589. LastRegBack: 2015-05-08 10:10
  590.  
  591. ==================== End of log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!