Advertisement
Guest User

Untitled

a guest
Jul 15th, 2015
822
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 151.24 KB | None | 0 0
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-07-2015
  2. Ran by Daniel (administrator) on DANIELGH on 15-07-2015 17:32:15
  3. Running from C:\Users\Daniel\Desktop\Malware Removal
  4. Loaded Profiles: Daniel (Available Profiles: Daniel)
  5. Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
  6. Internet Explorer Version 11 (Default browser: FF)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  15. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  16. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
  17. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
  18. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
  19. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  20. (ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
  21. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
  22. (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
  23. (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
  24. (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
  25. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  26. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  27. (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
  28. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  29. (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
  30. (Perfect Privacy) C:\Program Files (x86)\Perfect Privacy VPN Manager\VPNManagerService.exe
  31. (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
  32. (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
  33. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  34. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
  35. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  36. () C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
  37. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
  38. (TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
  39. (Spotify Ltd) C:\Users\Daniel\AppData\Roaming\Spotify\Spotify.exe
  40. (Spotify Ltd) C:\Users\Daniel\AppData\Roaming\Spotify\SpotifyWebHelper.exe
  41. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  42. (Spotify Ltd) C:\Users\Daniel\AppData\Roaming\Spotify\SpotifyCrashService.exe
  43. (Spotify Ltd) C:\Users\Daniel\AppData\Roaming\Spotify\Spotify.exe
  44. (Spotify Ltd) C:\Users\Daniel\AppData\Roaming\Spotify\Spotify.exe
  45. (QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe
  46. (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
  47. (QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe
  48. (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware.exe
  49. (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
  50. (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-unity-helper.exe
  51. (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\x64\vmware-vmx.exe
  52. (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vprintproxy.exe
  53. (Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe
  54. (TrueCrypt Foundation) C:\Program Files\TrueCrypt\TrueCrypt.exe
  55. (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
  56. (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
  57. (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  58. (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
  59. (Perfect Privacy) C:\Program Files (x86)\Perfect Privacy VPN Manager\VPNManager.exe
  60. (The OpenVPN Project) C:\Program Files (x86)\Perfect Privacy VPN Manager\OpenVPN\openvpn.exe
  61. (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  62. (Sysinternals - www.sysinternals.com) C:\Users\Daniel\Desktop\procexp.exe
  63. (Sysinternals - www.sysinternals.com) C:\Users\Daniel\AppData\Local\Temp\procexp64.exe
  64. (Alexander Roshal) C:\Program Files\WinRAR\WinRAR.exe
  65.  
  66.  
  67. ==================== Registry (Whitelisted) ==================
  68.  
  69. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  70.  
  71. HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5595848 2015-01-28] (ESET)
  72. HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-03] (NVIDIA Corporation)
  73. HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
  74. HKLM-x32\...\Run: [KeyScrambler] => C:\Program Files (x86)\KeyScrambler\keyscrambler.exe [509216 2015-06-10] (QFX Software Corporation)
  75. HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2618680 2015-04-08] (Malwarebytes Corporation)
  76. HKU\S-1-5-21-2722619307-2898166144-2227959933-1000\...\Run: [TeamSpeak 3 Client] => C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe [10725320 2014-08-04] (TeamSpeak Systems GmbH)
  77. HKU\S-1-5-21-2722619307-2898166144-2227959933-1000\...\Run: [Spotify] => C:\Users\Daniel\AppData\Roaming\Spotify\Spotify.exe [7334968 2015-07-13] (Spotify Ltd)
  78. HKU\S-1-5-21-2722619307-2898166144-2227959933-1000\...\Run: [Spotify Web Helper] => C:\Users\Daniel\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2008632 2015-07-13] (Spotify Ltd)
  79.  
  80. ==================== Internet (Whitelisted) ====================
  81.  
  82. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  83.  
  84. HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
  85. HKU\S-1-5-21-2722619307-2898166144-2227959933-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
  86. ProxyServer: [S-1-5-21-2722619307-2898166144-2227959933-1000] => ftp=92.222.27.145:9894;http=92.222.27.145:3128;https=92.222.27.145:9894;socks=92.222.27.145:9894
  87. HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.oursurfing.com/?type=hp&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E
  88. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.oursurfing.com/?type=hp&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E
  89. HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.oursurfing.com/web/?type=ds&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E&q={searchTerms}
  90. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.oursurfing.com/web/?type=ds&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E&q={searchTerms}
  91. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.oursurfing.com/?type=hp&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E
  92. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.oursurfing.com/?type=hp&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E
  93. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.oursurfing.com/web/?type=ds&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E&q={searchTerms}
  94. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.oursurfing.com/web/?type=ds&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E&q={searchTerms}
  95. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  96. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
  97. HKU\S-1-5-21-2722619307-2898166144-2227959933-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  98. HKU\S-1-5-21-2722619307-2898166144-2227959933-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.oursurfing.com/?type=hp&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E
  99. HKU\S-1-5-21-2722619307-2898166144-2227959933-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.oursurfing.com/?type=hp&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E
  100. SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfing.com/web/?type=ds&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E&q={searchTerms}
  101. SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  102. SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfing.com/web/?type=ds&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E&q={searchTerms}
  103. SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfing.com/web/?type=ds&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E&q={searchTerms}
  104. SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  105. SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfing.com/web/?type=ds&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E&q={searchTerms}
  106. SearchScopes: HKU\S-1-5-21-2722619307-2898166144-2227959933-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfing.com/web/?type=ds&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E&q={searchTerms}
  107. SearchScopes: HKU\S-1-5-21-2722619307-2898166144-2227959933-1000 -> {2B0D1A69-005F-4C01-8BDA-440C34AB2F4A} URL =
  108. SearchScopes: HKU\S-1-5-21-2722619307-2898166144-2227959933-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfing.com/web/?type=ds&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E&q={searchTerms}
  109. SearchScopes: HKU\S-1-5-21-2722619307-2898166144-2227959933-1000 -> {A12EDFCA-58CC-4222-B6AA-BF3159090AC4} URL =
  110. Winsock: Catalog5 07 C:\Windows\SysWOW64\PrxerNsp.dll [84040 2015-07-03] ()
  111. Winsock: Catalog9 01 C:\Windows\SysWOW64\PrxerDrv.dll [97864 2015-07-03] (Initex)
  112. Winsock: Catalog9 02 C:\Windows\SysWOW64\PrxerDrv.dll [97864 2015-07-03] (Initex)
  113. Winsock: Catalog9 03 C:\Windows\SysWOW64\PrxerDrv.dll [97864 2015-07-03] (Initex)
  114. Winsock: Catalog9 04 C:\Windows\SysWOW64\PrxerDrv.dll [97864 2015-07-03] (Initex)
  115. Winsock: Catalog9 17 C:\Windows\SysWOW64\PrxerDrv.dll [97864 2015-07-03] (Initex)
  116. Winsock: Catalog5-x64 07 C:\Windows\system32\PrxerNsp.dll [96840 2015-07-03] ()
  117. Winsock: Catalog9-x64 01 C:\Windows\system32\PrxerDrv.dll [118856 2015-07-03] (Initex)
  118. Winsock: Catalog9-x64 02 C:\Windows\system32\PrxerDrv.dll [118856 2015-07-03] (Initex)
  119. Winsock: Catalog9-x64 03 C:\Windows\system32\PrxerDrv.dll [118856 2015-07-03] (Initex)
  120. Winsock: Catalog9-x64 04 C:\Windows\system32\PrxerDrv.dll [118856 2015-07-03] (Initex)
  121. Winsock: Catalog9-x64 17 C:\Windows\system32\PrxerDrv.dll [118856 2015-07-03] (Initex)
  122. Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
  123. Tcpip\..\Interfaces\{2E58198C-E567-45E7-BD01-F02D38A10C0A}: [NameServer] 5.79.71.195,195.138.249.2
  124. Tcpip\..\Interfaces\{2E58198C-E567-45E7-BD01-F02D38A10C0A}: [DhcpNameServer] 192.168.2.1
  125. Tcpip\..\Interfaces\{A8D11008-2DF5-4852-AF2C-38F497F5800E}: [NameServer] 5.79.71.195,195.138.249.2
  126. Tcpip\..\Interfaces\{A8D11008-2DF5-4852-AF2C-38F497F5800E}: [DhcpNameServer] 31.204.150.106 94.242.243.162
  127. StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.oursurfing.com/?type=sc&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E
  128.  
  129. FireFox:
  130. ========
  131. FF ProfilePath: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\mt46boi7.default
  132. FF NewTab: chrome://quick_start/content/index.html
  133. FF Homepage: about:home
  134. FF NetworkProxy: "socks", "127.0.0.1"
  135. FF NetworkProxy: "socks_port", 54873
  136. FF NetworkProxy: "type", 0
  137. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll [2013-05-13] ( Microsoft Corporation)
  138. FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-05-28] (NVIDIA Corporation)
  139. FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-05-28] (NVIDIA Corporation)
  140. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-05] (Google Inc.)
  141. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-05] (Google Inc.)
  142. FF Extension: HTTPS-Everywhere - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\mt46boi7.default\Extensions\https-everywhere@eff.org [2015-07-14]
  143. FF Extension: Random Agent Spoofer - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\mt46boi7.default\Extensions\jid1-AVgCeF1zoVzMjA@jetpack.xpi [2015-06-27]
  144. FF Extension: NoScript - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\mt46boi7.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-06-27]
  145. FF Extension: Adblock Plus - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\mt46boi7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-06-27]
  146. FF Extension: User Agent Switcher - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\mt46boi7.default\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi [2015-07-10]
  147. FF HKLM-x32\...\Firefox\Extensions: [searchffv2@gmail.com] - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\mt46boi7.default\extensions\searchffv2@gmail.com
  148. StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.oursurfing.com/?type=sc&ts=1436618916&z=bdaea586fdef6dd1a1f9abag2z4c9qeqbg3b4t6edc&from=2sq&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBF123387E
  149.  
  150. Chrome:
  151. =======
  152. CHR Profile: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default
  153. CHR Extension: (Google Drive) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-05]
  154. CHR Extension: (YouTube) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-05]
  155. CHR Extension: (Adblock Plus) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-06-05]
  156. CHR Extension: (Steam inventory helper) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2015-06-27]
  157. CHR Extension: (Google Search) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-05]
  158. CHR Extension: (ZenMate Security, Privacy & Unblock VPN) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2015-06-05]
  159. CHR Extension: (agar.io server browser) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\hongpdkjnjhijmdnogoicadboadgllhi [2015-06-20]
  160. CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-05]
  161. CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\moncgiclmgkdhmkagcincfkkikpaggcd [2015-06-06]
  162. CHR Extension: (Google Wallet) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-06-05]
  163. CHR Extension: (Gmail) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-05]
  164.  
  165. ==================== Services (Whitelisted) =================
  166.  
  167. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  168.  
  169. S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1060352 2015-06-10] ()
  170. R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1349576 2015-01-28] (ESET)
  171. S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
  172. S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342240 2015-06-03] (Futuremark)
  173. R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-06-03] (NVIDIA Corporation)
  174. R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [656184 2015-04-08] (Malwarebytes Corporation)
  175. S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
  176. S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
  177. R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-06-03] (NVIDIA Corporation)
  178. R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23007376 2015-06-03] (NVIDIA Corporation)
  179. S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [38200 2015-03-19] (The OpenVPN Project)
  180. S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2004488 2015-07-01] (Electronic Arts)
  181. S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
  182. R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [239176 2013-02-19] (Realtek Semiconductor)
  183. S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
  184. R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-01] (TeamViewer GmbH)
  185. R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [12730048 2015-02-06] ()
  186. R2 VPNManager; C:\Program Files (x86)\Perfect Privacy VPN Manager\VPNManagerService.exe [17408 2015-02-13] (Perfect Privacy) [File not signed]
  187. S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [50408 2015-04-23] (Microsoft Corporation)
  188. R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
  189.  
  190. ==================== Drivers (Whitelisted) ====================
  191.  
  192. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  193.  
  194. R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [496400 2013-02-26] (Intel Corporation)
  195. R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [246000 2015-03-10] (ESET)
  196. U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [241880 2015-03-10] (ESET)
  197. R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [169792 2015-03-10] (ESET)
  198. R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [222280 2015-03-10] (ESET)
  199. R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44632 2015-03-10] (ESET)
  200. R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [64208 2015-03-10] (ESET)
  201. S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [170280 2015-07-03] (ESET)
  202. R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [63064 2015-04-08] ()
  203. R3 KeyScrambler; C:\Windows\System32\drivers\keyscrambler.sys [224208 2015-06-03] (QFX Software Corporation)
  204. S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
  205. S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
  206. R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
  207. R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-03] (NVIDIA Corporation)
  208. R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46768 2015-05-19] (NVIDIA Corporation)
  209. R0 vsock; C:\Windows\System32\drivers\vsock.sys [76480 2015-01-07] (VMware, Inc.)
  210. R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [33872 2013-08-28] (VMware, Inc.)
  211. S3 VGPU; System32\drivers\rdvgkmd.sys [X]
  212.  
  213. ========================== Drivers MD5 =======================
  214.  
  215. C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
  216. C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
  217. C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
  218. C:\Windows\system32\drivers\adp94xx.sys ==> MD5 is legit
  219. C:\Windows\system32\drivers\adpahci.sys ==> MD5 is legit
  220. C:\Windows\system32\drivers\adpu320.sys ==> MD5 is legit
  221. C:\Windows\system32\drivers\afd.sys 314C17917AC8523EC77A710215012A65
  222. C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
  223. C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
  224. C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
  225. C:\Windows\system32\drivers\amdk8.sys ==> MD5 is legit
  226. C:\Windows\system32\drivers\amdppm.sys ==> MD5 is legit
  227. C:\Windows\system32\drivers\amdsata.sys ==> MD5 is legit
  228. C:\Windows\system32\drivers\amdsbs.sys ==> MD5 is legit
  229. C:\Windows\System32\drivers\amdxata.sys ==> MD5 is legit
  230. C:\Windows\system32\drivers\appid.sys ==> MD5 is legit
  231. C:\Windows\system32\drivers\arc.sys ==> MD5 is legit
  232. C:\Windows\system32\drivers\arcsas.sys ==> MD5 is legit
  233. C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
  234. C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
  235. C:\Windows\system32\drivers\bxvbda.sys ==> MD5 is legit
  236. C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit
  237. C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit
  238. C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
  239. C:\Windows\System32\DRIVERS\bowser.sys 91CE0D3DC57DD377E690A2D324022B08
  240. C:\Windows\system32\drivers\BrFiltLo.sys ==> MD5 is legit
  241. C:\Windows\system32\drivers\BrFiltUp.sys ==> MD5 is legit
  242. C:\Windows\System32\DRIVERS\bridge.sys 5C2F352A4E961D72518261257AAE204B
  243. C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
  244. C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
  245. C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
  246. C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
  247. C:\Windows\system32\drivers\bthmodem.sys ==> MD5 is legit
  248. C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
  249. C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
  250. C:\Windows\system32\drivers\circlass.sys ==> MD5 is legit
  251. C:\Windows\System32\CLFS.sys ==> MD5 is legit
  252. C:\Windows\system32\drivers\CmBatt.sys ==> MD5 is legit
  253. C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
  254. C:\Windows\System32\Drivers\cng.sys ==> MD5 is legit
  255. C:\Windows\system32\drivers\compbatt.sys ==> MD5 is legit
  256. C:\Windows\System32\DRIVERS\CompositeBus.sys ==> MD5 is legit
  257. C:\Windows\system32\drivers\crcdisk.sys ==> MD5 is legit
  258. C:\Windows\System32\drivers\csc.sys ==> MD5 is legit
  259. C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
  260. C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
  261. C:\Windows\System32\drivers\disk.sys ==> MD5 is legit
  262. C:\Windows\system32\drivers\dmvsc.sys 5DB085A8A6600BE6401F2B24EECB5415
  263. C:\Windows\System32\drivers\drmkaud.sys ==> MD5 is legit
  264. C:\Windows\System32\drivers\dxgkrnl.sys ==> MD5 is legit
  265. C:\Windows\System32\DRIVERS\e1d62x64.sys 8020B5D39DDFF589200EBD5592314F83
  266. C:\Windows\System32\DRIVERS\eamonm.sys 372FF3A3FAD103A036EEDC57AEC0D411
  267. C:\Windows\system32\drivers\evbda.sys ==> MD5 is legit
  268. C:\Windows\System32\DRIVERS\ehdrv.sys E19846EA7838C0310598BD36B2FA5C41
  269. C:\Windows\system32\drivers\elxstor.sys ==> MD5 is legit
  270. C:\Windows\System32\DRIVERS\epfw.sys E4A99E681B93133D6DA3D321CB074349
  271. C:\Windows\System32\DRIVERS\EpfwLWF.sys 1353EC78DDCDA3F9EB2765D6448B82F9
  272. C:\Windows\System32\DRIVERS\epfwwfp.sys 659D2282E73DA3C923C654A1CA1F5530
  273. C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
  274. C:\Windows\system32\Drivers\ESETCleanersDriver.sys F037314138494EE6BD7DDC4C19C63012
  275. C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys 0D14D1074EA0EA01446481CD3F6F4BCC
  276. C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit
  277. C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit
  278. C:\Windows\system32\drivers\fdc.sys ==> MD5 is legit
  279. C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
  280. C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
  281. C:\Windows\system32\drivers\flpydisk.sys ==> MD5 is legit
  282. C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
  283. C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
  284. C:\Windows\System32\Drivers\Fs_Rec.sys ==> MD5 is legit
  285. C:\Windows\System32\DRIVERS\fvevol.sys ==> MD5 is legit
  286. C:\Windows\system32\drivers\gagp30kx.sys ==> MD5 is legit
  287. C:\Windows\system32\drivers\hcmon.sys 2AC2F4227EA41501E7BD2FFA7B3D82F8
  288. C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
  289. C:\Windows\System32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A
  290. C:\Windows\System32\DRIVERS\HDAudBus.sys ==> MD5 is legit
  291. C:\Windows\system32\drivers\HidBatt.sys ==> MD5 is legit
  292. C:\Windows\system32\drivers\hidbth.sys ==> MD5 is legit
  293. C:\Windows\system32\drivers\hidir.sys ==> MD5 is legit
  294. C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit
  295. C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
  296. C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit
  297. C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
  298. C:\Windows\system32\drivers\i8042prt.sys ==> MD5 is legit
  299. C:\Windows\system32\drivers\iaStorV.sys ==> MD5 is legit
  300. C:\Windows\system32\drivers\iirsp.sys ==> MD5 is legit
  301. C:\Windows\System32\drivers\RTKVHD64.sys CCEDD47ABD068C58C8513DEB785093BB
  302. C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
  303. C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit
  304. C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
  305. C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
  306. C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
  307. C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
  308. C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
  309. C:\Windows\system32\drivers\msiscsi.sys ==> MD5 is legit
  310. C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit
  311. C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit
  312. C:\Windows\System32\drivers\keyscrambler.sys C1ABAED294E2F9937329452B01A2FB2C
  313. C:\Windows\System32\Drivers\ksecdd.sys ==> MD5 is legit
  314. C:\Windows\System32\Drivers\ksecpkg.sys ==> MD5 is legit
  315. C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
  316. C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
  317. C:\Windows\system32\drivers\lsi_fc.sys ==> MD5 is legit
  318. C:\Windows\system32\drivers\lsi_sas.sys ==> MD5 is legit
  319. C:\Windows\system32\drivers\lsi_sas2.sys ==> MD5 is legit
  320. C:\Windows\system32\drivers\lsi_scsi.sys ==> MD5 is legit
  321. C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
  322. C:\Windows\system32\drivers\mbam.sys A8D28D5B3E2A528D1EF0E338E44F2820
  323. C:\Windows\system32\drivers\mwac.sys AE757332EA130E94E646621CC695B52A
  324. C:\Windows\system32\drivers\megasas.sys ==> MD5 is legit
  325. C:\Windows\system32\drivers\MegaSR.sys ==> MD5 is legit
  326. C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
  327. C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
  328. C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
  329. C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
  330. C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit
  331. C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
  332. C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
  333. C:\Windows\system32\drivers\mrxdav.sys ==> MD5 is legit
  334. C:\Windows\System32\DRIVERS\mrxsmb.sys FAF015B07E3A2874A790A39B7D2C579F
  335. C:\Windows\System32\DRIVERS\mrxsmb10.sys 08E2345DF129082BCDFFDC1440F9C00D
  336. C:\Windows\System32\DRIVERS\mrxsmb20.sys 108D87409C5812EF47D81E22843E8C9D
  337. C:\Windows\System32\drivers\msahci.sys ==> MD5 is legit
  338. C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
  339. C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
  340. C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
  341. C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
  342. C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
  343. C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
  344. C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
  345. C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
  346. C:\Windows\System32\DRIVERS\mssmbios.sys ==> MD5 is legit
  347. C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
  348. C:\Windows\system32\drivers\MTConfig.sys ==> MD5 is legit
  349. C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
  350. C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
  351. C:\Windows\System32\drivers\ndis.sys ==> MD5 is legit
  352. C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
  353. C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
  354. C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
  355. C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
  356. C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
  357. C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
  358. C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
  359. C:\Windows\system32\drivers\nfrd960.sys ==> MD5 is legit
  360. C:\Windows\System32\drivers\npf.sys DE7FCC77F4A503AF4CA6A47D49B3713D
  361. C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit
  362. C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
  363. C:\Windows\System32\Drivers\Ntfs.sys ==> MD5 is legit
  364. C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
  365. C:\Windows\System32\drivers\nvhda64v.sys 624C1453F9109D98F7E2612DAD76BBB1
  366. C:\Windows\System32\DRIVERS\nvlddmkm.sys 017E0B4AEFCB291E7CF1CD4BF120A7A8
  367. C:\Windows\system32\drivers\nvraid.sys ==> MD5 is legit
  368. C:\Windows\system32\drivers\nvstor.sys ==> MD5 is legit
  369. C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys 9408391358F3B9FD0F59E27151383C51
  370. C:\Windows\System32\drivers\nvvad64v.sys 6AC68DDFCAC19A300D738AF3493E46AA
  371. C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
  372. C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
  373. C:\Windows\system32\drivers\parport.sys ==> MD5 is legit
  374. C:\Windows\System32\drivers\partmgr.sys ==> MD5 is legit
  375. C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
  376. C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit
  377. C:\Windows\system32\drivers\pcmcia.sys ==> MD5 is legit
  378. C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
  379. C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
  380. C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
  381. C:\Windows\system32\drivers\processr.sys ==> MD5 is legit
  382. C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
  383. C:\Windows\system32\drivers\ql2300.sys ==> MD5 is legit
  384. C:\Windows\system32\drivers\ql40xx.sys ==> MD5 is legit
  385. C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
  386. C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
  387. C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
  388. C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
  389. C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
  390. C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
  391. C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
  392. C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 is legit
  393. C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
  394. C:\Windows\System32\drivers\rdpdr.sys ==> MD5 is legit
  395. C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
  396. C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
  397. C:\Windows\System32\drivers\rdpvideominiport.sys ==> MD5 is legit
  398. C:\Windows\System32\Drivers\RDPWD.sys ==> MD5 is legit
  399. C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
  400. C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
  401. C:\Windows\system32\drivers\vms3cap.sys ==> MD5 is legit
  402. C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
  403. C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
  404. C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
  405. C:\Windows\system32\drivers\serenum.sys ==> MD5 is legit
  406. C:\Windows\system32\drivers\serial.sys ==> MD5 is legit
  407. C:\Windows\system32\drivers\sermouse.sys ==> MD5 is legit
  408. C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
  409. C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
  410. C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
  411. C:\Windows\system32\drivers\sfloppy.sys ==> MD5 is legit
  412. C:\Windows\system32\drivers\SiSRaid2.sys ==> MD5 is legit
  413. C:\Windows\system32\drivers\sisraid4.sys ==> MD5 is legit
  414. C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
  415. C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
  416. C:\Windows\System32\DRIVERS\srv.sys 2098B8556D1CEC2ACA9A29CD479E3692
  417. C:\Windows\System32\DRIVERS\srv2.sys D0F73A42040F21F92FD314B42AC5C9E7
  418. C:\Windows\System32\DRIVERS\srvnet.sys 2BA8F3250828CCDB4204ECF2C6F40B6A
  419. C:\Windows\system32\drivers\stexstor.sys ==> MD5 is legit
  420. C:\Windows\System32\drivers\vmstorfl.sys ==> MD5 is legit
  421. C:\Windows\system32\drivers\storvsc.sys ==> MD5 is legit
  422. C:\Windows\System32\DRIVERS\swenum.sys ==> MD5 is legit
  423. C:\Windows\System32\drivers\synth3dvsc.sys C3A39C4079305480972D29C44B868C78
  424. C:\Windows\System32\DRIVERS\tap0901.sys 3C32FF010F869BC184DF71290477384E
  425. C:\Windows\System32\drivers\tcpip.sys 40AF23633D197905F03AB5628C558C51
  426. C:\Windows\System32\DRIVERS\tcpip.sys 40AF23633D197905F03AB5628C558C51
  427. C:\Windows\System32\drivers\tcpipreg.sys ==> MD5 is legit
  428. C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
  429. C:\Windows\System32\drivers\tdtcp.sys ==> MD5 is legit
  430. C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit
  431. C:\Windows\System32\DRIVERS\termdd.sys ==> MD5 is legit
  432. C:\Windows\system32\drivers\terminpt.sys 2B5BDFF688EC9871D7EC5837833374E9
  433. C:\Windows\System32\drivers\truecrypt.sys 370A6907DDF79532A39319492B1FA38A
  434. C:\Windows\System32\DRIVERS\tssecsrv.sys ==> MD5 is legit
  435. C:\Windows\System32\drivers\tsusbflt.sys ==> MD5 is legit
  436. C:\Windows\system32\drivers\TsUsbGD.sys 9CC2CCAE8A84820EAECB886D477CBCB8
  437. C:\Windows\System32\drivers\tsusbhub.sys E1748D04AE40118B62BC18AC86032192
  438. C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
  439. C:\Windows\system32\drivers\uagp35.sys ==> MD5 is legit
  440. C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
  441. C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
  442. C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit
  443. C:\Windows\system32\drivers\umpass.sys ==> MD5 is legit
  444. C:\Windows\System32\drivers\usbaudio.sys 82E8F44688E6FAC57B5B7C6FC7ADBC2A
  445. C:\Windows\System32\DRIVERS\usbccgp.sys ==> MD5 is legit
  446. C:\Windows\system32\drivers\usbcir.sys ==> MD5 is legit
  447. C:\Windows\System32\DRIVERS\usbehci.sys ==> MD5 is legit
  448. C:\Windows\System32\DRIVERS\usbhub.sys ==> MD5 is legit
  449. C:\Windows\system32\drivers\usbohci.sys ==> MD5 is legit
  450. C:\Windows\system32\drivers\usbprint.sys ==> MD5 is legit
  451. C:\Windows\System32\DRIVERS\USBSTOR.SYS ==> MD5 is legit
  452. C:\Windows\system32\drivers\usbuhci.sys ==> MD5 is legit
  453. C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
  454. C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
  455. C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
  456. C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
  457. C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
  458. C:\Windows\system32\drivers\vmbus.sys ==> MD5 is legit
  459. C:\Windows\system32\drivers\VMBusHID.sys ==> MD5 is legit
  460. C:\Windows\System32\DRIVERS\vmci.sys BE8E5E5D53ACF71D4E8E686B68C99B04
  461. C:\Windows\System32\DRIVERS\vmnetadapter.sys A3412EC3FF7A5AC2CA3A3951476BFA9C
  462. C:\Windows\System32\DRIVERS\vmnetbridge.sys F76AD463DBE8D30CB715A09DF9FF2BE9
  463. C:\Windows\system32\drivers\vmnetuserif.sys FC13DEAE57DE3230B609AAEFF8AFF588
  464. C:\Windows\system32\drivers\vmx86.sys 20BBEDC86615741AC9ACDED5C30A41A8
  465. C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
  466. C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
  467. C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
  468. C:\Windows\system32\drivers\vsmraid.sys ==> MD5 is legit
  469. C:\Windows\System32\drivers\vsock.sys 9884BBFB96048DC37A120A1712E0B479
  470. C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys C279CC22288F277A14620EB949F0E1B9
  471. C:\Windows\System32\drivers\vwifibus.sys ==> MD5 is legit
  472. C:\Windows\system32\drivers\wacompen.sys ==> MD5 is legit
  473. C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
  474. C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
  475. C:\Windows\system32\drivers\wd.sys ==> MD5 is legit
  476. C:\Windows\System32\drivers\Wdf01000.sys ==> MD5 is legit
  477. C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
  478. C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
  479. C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 is legit
  480. C:\Windows\System32\DRIVERS\WinUsb.sys FE88B288356E7B47B74B13372ADD906D
  481. C:\Windows\System32\DRIVERS\wmiacpi.sys ==> MD5 is legit
  482. C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
  483. C:\Windows\System32\drivers\WudfPf.sys ==> MD5 is legit
  484. C:\Windows\System32\DRIVERS\WUDFRd.sys ==> MD5 is legit
  485.  
  486. ==================== NetSvcs (Whitelisted) ===================
  487.  
  488. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  489.  
  490.  
  491. ==================== Three Months Created files and folders ========
  492.  
  493. (If an entry is included in the fixlist, the file/folder will be moved.)
  494.  
  495. 2015-07-15 17:32 - 2015-07-15 17:32 - 00000000 ____D C:\FRST
  496. 2015-07-15 17:31 - 2015-07-15 17:32 - 00000000 ____D C:\Users\Daniel\Desktop\Malware Removal
  497. 2015-07-15 16:59 - 2015-07-15 16:59 - 00006629 _____ C:\Users\Daniel\Downloads\run_calc_chm(pass_infected).zip
  498. 2015-07-15 14:04 - 2015-07-15 14:07 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\.purple
  499. 2015-07-15 14:03 - 2015-07-15 14:03 - 00001001 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pidgin.lnk
  500. 2015-07-15 14:03 - 2015-07-15 14:03 - 00000000 ____D C:\Program Files (x86)\Pidgin
  501. 2015-07-15 14:00 - 2015-07-15 14:01 - 09670472 _____ C:\Users\Daniel\Downloads\pidgin-2.10.11.exe
  502. 2015-07-15 13:59 - 2015-07-15 15:39 - 00000223 _____ C:\Users\Daniel\Desktop\elapz.txt
  503. 2015-07-14 16:21 - 2015-07-14 16:42 - 00000669 _____ C:\Users\Daniel\Desktop\test.txt
  504. 2015-07-14 13:13 - 2015-07-14 16:14 - 00000044 _____ C:\Users\Daniel\AppData\Roaming\test.txt
  505. 2015-07-14 13:00 - 2015-07-14 12:59 - 06483456 _____ (Tim Kosse) C:\Users\Daniel\Downloads\FileZilla_3.12.0.2_win64-setup.exe
  506. 2015-07-14 12:59 - 2015-07-14 12:59 - 00001503 _____ C:\Users\Daniel\Desktop\FileZilla.lnk
  507. 2015-07-14 12:52 - 2015-07-14 12:52 - 01948380 _____ C:\Users\Daniel\Downloads\ipsnatchersource.rar
  508. 2015-07-14 12:51 - 2015-07-14 12:51 - 00026953 _____ C:\Users\Daniel\Downloads\Intrusion-prevention-system-master.zip
  509. 2015-07-14 12:48 - 2015-07-14 12:48 - 01866433 _____ C:\Users\Daniel\Downloads\sedona_aptcode.zip
  510. 2015-07-12 19:09 - 2015-07-12 19:09 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Macromedia
  511. 2015-07-12 19:09 - 2015-07-12 19:09 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\LolClient
  512. 2015-07-11 18:11 - 2015-07-11 18:12 - 00174080 _____ (Zettabit) C:\Users\Daniel\Downloads\LiteHTTP Builder.exe
  513. 2015-07-11 16:46 - 2015-07-11 16:49 - 24774990 _____ C:\Users\Daniel\Downloads\eyyxo.torrent
  514. 2015-07-11 16:32 - 2015-07-11 16:32 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Process Hacker 2
  515. 2015-07-11 16:26 - 2015-07-11 16:26 - 02905529 _____ C:\Users\Daniel\Downloads\processhacker-2.36-bin.zip
  516. 2015-07-11 14:57 - 2015-07-11 14:57 - 00003150 _____ C:\Windows\System32\Tasks\{D97CB3D6-A90D-493D-9033-D9C68CD380C1}
  517. 2015-07-11 14:48 - 2015-07-11 14:58 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\oursurfing
  518. 2015-07-11 14:46 - 2015-07-11 14:49 - 00000000 ____D C:\Program Files (x86)\Windows Loader
  519. 2015-07-10 17:09 - 2015-07-10 17:34 - 00000000 ____D C:\Users\Daniel\Downloads\Hacking Team
  520. 2015-07-08 16:36 - 2015-07-12 15:06 - 00000851 _____ C:\Users\Public\Desktop\Die Sims 4.lnk
  521. 2015-07-08 16:36 - 2015-07-08 16:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Die Sims 4
  522. 2015-07-08 15:43 - 2015-06-26 18:14 - 00000000 ____D C:\Users\Daniel\Desktop\BasicIRC
  523. 2015-07-08 12:44 - 2015-07-08 20:15 - 00000080 _____ C:\Users\Daniel\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
  524. 2015-07-08 12:44 - 2015-07-08 12:44 - 00000000 ____D C:\Users\Daniel\AppData\Local\Rockstar Games
  525. 2015-07-08 12:42 - 2015-07-08 12:50 - 00000000 ____D C:\Users\Daniel\Documents\Rockstar Games
  526. 2015-07-08 12:42 - 2015-07-08 12:50 - 00000000 ____D C:\Program Files\Rockstar Games
  527. 2015-07-08 12:42 - 2015-07-08 12:50 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
  528. 2015-07-08 12:41 - 2015-07-08 12:41 - 00000684 _____ C:\Users\Public\Desktop\Grand Theft Auto V.lnk
  529. 2015-07-08 12:41 - 2015-07-08 12:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
  530. 2015-07-08 12:32 - 2015-07-09 13:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
  531. 2015-07-08 10:53 - 2015-07-08 10:53 - 00000000 ____D C:\Users\Daniel\AppData\Local\Perfect_Privacy
  532. 2015-07-08 10:52 - 2015-07-08 10:55 - 00000000 ____D C:\Program Files (x86)\Perfect Privacy VPN Manager
  533. 2015-07-08 10:52 - 2015-07-08 10:52 - 00001160 _____ C:\Users\Public\Desktop\VPN Manager.lnk
  534. 2015-07-08 10:52 - 2015-07-08 10:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect Privacy VPN
  535. 2015-07-08 10:39 - 2015-07-14 17:51 - 00003599 _____ C:\Users\Daniel\Desktop\pw.txt
  536. 2015-07-07 15:35 - 2015-07-07 15:35 - 00002195 ____H C:\Users\Daniel\Documents\la.txt
  537. 2015-07-07 15:33 - 2015-07-07 15:35 - 15666210 ____H C:\Users\Daniel\Documents\hjagsdhjgadsggahsdguyiqwdgahjsdgajhsd.exe
  538. 2015-07-07 15:13 - 2015-07-07 15:31 - 00000000 ____D C:\Users\Daniel\Desktop\adasd
  539. 2015-07-07 14:01 - 2015-07-07 14:01 - 00003088 _____ C:\Windows\System32\Tasks\{3D9CFEC3-F022-4577-A2F6-8AA73CA3F530}
  540. 2015-07-07 13:51 - 2015-07-07 13:51 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Wireshark
  541. 2015-07-07 13:49 - 2015-07-07 13:49 - 00001545 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
  542. 2015-07-07 13:49 - 2015-07-07 13:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
  543. 2015-07-07 13:49 - 2015-07-07 13:49 - 00000000 ____D C:\Program Files (x86)\WinPcap
  544. 2015-07-07 13:48 - 2015-07-07 13:49 - 00000000 ____D C:\Program Files\Wireshark
  545. 2015-07-07 12:47 - 2015-07-07 12:47 - 00000000 ____D C:\Users\Daniel\Documents\Verweise
  546. 2015-07-07 12:46 - 2015-07-07 12:46 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\NuGet
  547. 2015-07-06 21:52 - 2015-07-15 17:08 - 00000000 ____D C:\Users\Daniel\Documents\Visual Studio 2015
  548. 2015-07-06 21:47 - 2015-07-06 21:47 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 11.0
  549. 2015-07-06 21:39 - 2015-07-06 21:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
  550. 2015-07-06 21:38 - 2015-07-06 21:38 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
  551. 2015-07-06 21:35 - 2015-07-06 21:35 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
  552. 2015-07-06 21:35 - 2015-07-06 21:35 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
  553. 2015-07-06 21:02 - 2015-07-06 21:02 - 00000000 ____D C:\Program Files\Application Verifier
  554. 2015-07-06 21:02 - 2015-07-06 21:02 - 00000000 ____D C:\Program Files (x86)\Application Verifier
  555. 2015-07-06 21:00 - 2015-07-06 21:00 - 00000000 ____D C:\ProgramData\Windows App Certification Kit
  556. 2015-07-06 20:43 - 2015-07-06 21:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
  557. 2015-07-06 20:15 - 2015-07-06 20:15 - 00000000 ____D C:\ProgramData\PreEmptive Solutions
  558. 2015-07-06 20:13 - 2015-07-06 20:13 - 00000000 ____D C:\Program Files (x86)\ShellDir
  559. 2015-07-06 20:10 - 2015-07-06 20:10 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET
  560. 2015-07-06 19:57 - 2015-07-06 19:57 - 00000000 ____D C:\ProgramData\Microsoft DNX
  561. 2015-07-06 19:57 - 2015-07-06 19:57 - 00000000 ____D C:\Program Files\Microsoft DNX
  562. 2015-07-06 19:55 - 2015-07-06 19:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Web Tools
  563. 2015-07-06 19:36 - 2015-07-06 19:36 - 00000000 ____D C:\Program Files\IIS Express
  564. 2015-07-06 19:36 - 2015-07-06 19:36 - 00000000 ____D C:\Program Files (x86)\IIS Express
  565. 2015-07-06 19:35 - 2015-07-06 19:35 - 00000000 ____D C:\Program Files (x86)\AppInsights
  566. 2015-07-06 19:33 - 2015-07-07 12:46 - 00000000 ____D C:\ProgramData\NuGet
  567. 2015-07-06 19:33 - 2015-07-06 19:33 - 00000000 ____D C:\Program Files (x86)\NuGet
  568. 2015-07-06 19:31 - 2015-07-06 19:31 - 00000000 ____D C:\Program Files (x86)\Microsoft WCF Data Services
  569. 2015-07-06 19:30 - 2015-07-06 19:30 - 00000000 ____D C:\Program Files\IIS
  570. 2015-07-06 19:30 - 2015-07-06 19:30 - 00000000 ____D C:\Program Files (x86)\IIS
  571. 2015-07-06 19:24 - 2015-07-06 19:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression
  572. 2015-07-06 19:16 - 2015-07-06 19:16 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 12.0
  573. 2015-07-06 19:15 - 2015-07-06 19:15 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0
  574. 2015-07-06 19:15 - 2015-07-06 19:15 - 00000000 ____D C:\Program Files (x86)\HTML Help Workshop
  575. 2015-07-06 18:33 - 2015-07-06 21:28 - 00000000 ____D C:\Program Files (x86)\Windows Kits
  576. 2015-07-06 18:33 - 2015-07-06 18:33 - 00000000 ____D C:\Windows\symbols
  577. 2015-07-06 18:33 - 2015-07-06 18:33 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer
  578. 2015-07-06 15:44 - 2015-07-09 17:57 - 00000000 ____D C:\Users\Daniel\AppData\Local\Arma 3
  579. 2015-07-06 15:44 - 2015-07-06 15:48 - 00000000 ____D C:\Users\Daniel\Documents\Arma 3
  580. 2015-07-06 15:44 - 2015-07-06 15:44 - 00000000 ____D C:\ProgramData\Bohemia Interactive
  581. 2015-07-06 15:42 - 2015-07-06 15:42 - 00000000 ____D C:\Users\Daniel\AppData\Local\Bohemia_Interactive
  582. 2015-07-06 15:41 - 2015-07-06 16:46 - 00000000 ____D C:\Users\Daniel\AppData\Local\Arma 3 Launcher
  583. 2015-07-06 15:24 - 2015-07-06 15:40 - 00000000 ____D C:\Users\Daniel\AppData\Local\DotNet Resolver
  584. 2015-07-05 19:28 - 2015-07-06 18:28 - 00000022 _____ C:\Windows\GPU-Z.INI
  585. 2015-07-05 19:28 - 2015-07-05 19:28 - 00000000 ____D C:\Temp
  586. 2015-07-05 19:27 - 2015-07-05 20:14 - 00000000 ____D C:\Users\Daniel\Documents\3DMark
  587. 2015-07-05 19:27 - 2015-07-05 19:27 - 00000000 ____D C:\Users\Daniel\AppData\Local\Futuremark
  588. 2015-07-05 19:26 - 2015-07-05 19:26 - 00000000 ____D C:\Program Files (x86)\Futuremark
  589. 2015-07-03 13:54 - 2015-07-03 13:54 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Proxifier
  590. 2015-07-03 13:54 - 2015-07-03 13:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Proxifier
  591. 2015-07-03 13:54 - 2015-07-03 13:54 - 00000000 ____D C:\Program Files (x86)\Proxifier
  592. 2015-07-03 13:54 - 2015-03-28 15:55 - 00143944 _____ (Initex) C:\Windows\system32\ProxifierShellExt.dll
  593. 2015-07-03 13:54 - 2015-03-28 15:55 - 00119880 _____ (Initex) C:\Windows\SysWOW64\ProxifierShellExt.dll
  594. 2015-07-03 13:54 - 2015-03-28 15:55 - 00118856 _____ (Initex) C:\Windows\system32\PrxerDrv.dll
  595. 2015-07-03 13:54 - 2015-03-28 15:55 - 00097864 _____ (Initex) C:\Windows\SysWOW64\PrxerDrv.dll
  596. 2015-07-03 13:54 - 2015-03-28 15:55 - 00096840 _____ C:\Windows\system32\PrxerNsp.dll
  597. 2015-07-03 13:54 - 2015-03-28 15:55 - 00084040 _____ C:\Windows\SysWOW64\PrxerNsp.dll
  598. 2015-07-03 13:54 - 2015-03-24 19:09 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SPORDER.DLL
  599. 2015-07-03 13:43 - 2015-07-08 19:39 - 00000000 ____D C:\Users\Daniel\Desktop\BSOD
  600. 2015-07-03 13:43 - 2015-07-08 19:16 - 00000000 ____D C:\Users\Daniel\Desktop\c#
  601. 2015-07-03 13:05 - 2015-07-03 13:05 - 00170280 _____ (ESET) C:\Windows\system32\Drivers\ESETCleanersDriver.sys
  602. 2015-07-03 11:25 - 2015-07-03 11:25 - 00000000 __RHD C:\Users\Daniel\AppData\Roaming\SecuROM
  603. 2015-07-03 11:22 - 2015-07-08 16:38 - 00000000 ____D C:\Users\Daniel\Documents\Electronic Arts
  604. 2015-07-03 11:22 - 2015-07-03 11:22 - 00000000 ____D C:\ProgramData\EA Core
  605. 2015-07-03 11:18 - 2015-07-03 11:18 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE
  606. 2015-07-03 11:18 - 2014-09-16 18:45 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll
  607. 2015-07-03 11:12 - 2015-07-03 11:12 - 00000000 ____D C:\Program Files (x86)\Origin Games
  608. 2015-07-02 18:24 - 2015-07-02 18:26 - 09111231 _____ C:\Users\Daniel\Downloads\Gorynch -DiamondFox 4.2.0.302 Panel + Cracked Builder by The Old Warrior.7z
  609. 2015-07-02 09:49 - 2015-07-02 09:49 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\FFE1D348-95D4-456A-8FB0-FC36B79F25FE
  610. 2015-07-01 15:02 - 2015-07-03 11:12 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Origin
  611. 2015-07-01 15:02 - 2015-07-03 11:12 - 00000000 ____D C:\Users\Daniel\AppData\Local\Origin
  612. 2015-07-01 14:54 - 2015-07-14 19:40 - 00000000 ____D C:\ProgramData\Origin
  613. 2015-07-01 14:54 - 2015-07-08 16:38 - 00000000 ____D C:\ProgramData\Electronic Arts
  614. 2015-07-01 14:54 - 2015-07-01 15:02 - 00000000 ____D C:\Program Files (x86)\Origin
  615. 2015-07-01 14:54 - 2015-07-01 14:54 - 00000989 _____ C:\Users\Public\Desktop\Origin.lnk
  616. 2015-07-01 14:54 - 2015-07-01 14:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
  617. 2015-07-01 12:39 - 2015-07-01 12:39 - 00001112 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  618. 2015-06-30 12:37 - 2015-06-30 12:37 - 00000000 _____ C:\Users\Daniel\AppData\Local\{3FD4F697-1B7C-4D80-9D1A-71ADB8B51BCB}
  619. 2015-06-29 19:32 - 2015-06-29 19:33 - 38167255 _____ C:\Users\Daniel\Documents\Chris der XxTroller.mp4
  620. 2015-06-29 19:31 - 2015-06-29 19:31 - 00013184 _____ C:\Users\Daniel\Documents\Chris der XxTroller.veg
  621. 2015-06-29 19:29 - 2015-06-29 19:29 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Sony Creative Software Inc
  622. 2015-06-29 19:25 - 2015-06-29 19:26 - 00014968 _____ C:\Users\Daniel\Documents\Sequenz 01.mp4.sfk
  623. 2015-06-29 12:30 - 2015-07-11 18:28 - 00000000 ____D C:\Users\Daniel\Desktop\x64
  624. 2015-06-28 14:07 - 2015-07-06 18:38 - 00000000 ____D C:\Windows\SysWOW64\1031
  625. 2015-06-28 14:07 - 2015-06-28 14:08 - 00000000 ____D C:\Windows\system32\1033
  626. 2015-06-28 14:07 - 2015-06-28 14:07 - 00000000 ____D C:\Windows\SysWOW64\1033
  627. 2015-06-28 14:06 - 2015-07-06 21:35 - 00000000 ____D C:\Program Files\Microsoft SQL Server
  628. 2015-06-28 14:06 - 2015-07-06 21:35 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
  629. 2015-06-28 14:05 - 2015-07-06 19:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015
  630. 2015-06-27 13:14 - 2015-06-27 13:14 - 00000000 __SHD C:\Users\Daniel\AppData\Local\EmieUserList
  631. 2015-06-27 13:14 - 2015-06-27 13:14 - 00000000 __SHD C:\Users\Daniel\AppData\Local\EmieSiteList
  632. 2015-06-27 13:14 - 2015-06-27 13:14 - 00000000 __SHD C:\Users\Daniel\AppData\Local\EmieBrowserModeList
  633. 2015-06-26 22:34 - 2015-06-26 22:36 - 18723436 _____ C:\Users\Daniel\Desktop\Electrum.exe
  634. 2015-06-26 21:46 - 2015-06-26 21:46 - 00343873 _____ C:\Users\Daniel\Documents\ts3_clientui-win64-1407159763-2015-06-26 21_46_20.949843.dmp
  635. 2015-06-26 21:45 - 2015-06-26 21:45 - 00383239 _____ C:\Users\Daniel\Documents\ts3_clientui-win64-1407159763-2015-06-26 21_45_09.006207.dmp
  636. 2015-06-26 21:45 - 2015-06-26 21:45 - 00353361 _____ C:\Users\Daniel\Documents\ts3_clientui-win64-1407159763-2015-06-26 21_45_28.408171.dmp
  637. 2015-06-26 21:45 - 2015-06-26 21:45 - 00342569 _____ C:\Users\Daniel\Documents\ts3_clientui-win64-1407159763-2015-06-26 21_45_55.603124.dmp
  638. 2015-06-26 18:54 - 2015-06-26 18:55 - 03870435 _____ C:\Users\Daniel\Desktop\BasicIRC.rar
  639. 2015-06-25 19:20 - 2015-07-12 13:06 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\BitTorrent
  640. 2015-06-25 19:20 - 2015-06-25 19:20 - 00000880 _____ C:\Users\Daniel\Desktop\BitTorrent.lnk
  641. 2015-06-25 19:20 - 2015-06-25 19:20 - 00000860 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
  642. 2015-06-23 18:24 - 2015-06-23 18:24 - 00002618 _____ C:\Users\Daniel\Downloads\Kaspersky Reset Trial 2015 CRACKPATCH - UNLIMITED ANTIVIRUS.txt
  643. 2015-06-23 18:23 - 2015-06-23 18:23 - 00001209 _____ C:\Users\Daniel\Downloads\Sony Vegas Pro 13 CRACK.txt
  644. 2015-06-23 15:02 - 2015-06-23 15:21 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\.minecraft
  645. 2015-06-23 15:02 - 2015-06-23 15:02 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\java
  646. 2015-06-23 14:57 - 2015-06-23 15:01 - 00000000 ____D C:\Program Files (x86)\Minecraft
  647. 2015-06-23 14:57 - 2015-06-23 14:57 - 00000967 _____ C:\Users\Public\Desktop\Minecraft.lnk
  648. 2015-06-23 14:57 - 2015-06-23 14:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
  649. 2015-06-22 19:34 - 2015-07-15 17:28 - 00000000 ____D C:\Users\Daniel\Desktop\Shared Folder
  650. 2015-06-22 19:23 - 2015-07-11 14:48 - 00001467 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
  651. 2015-06-22 19:23 - 2015-07-11 14:48 - 00001455 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
  652. 2015-06-22 19:23 - 2015-07-09 13:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
  653. 2015-06-22 19:23 - 2015-06-22 19:25 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Mozilla
  654. 2015-06-22 19:23 - 2015-06-22 19:25 - 00000000 ____D C:\Users\Daniel\AppData\Local\Mozilla
  655. 2015-06-22 19:23 - 2015-06-22 19:23 - 00000000 ____D C:\ProgramData\Mozilla
  656. 2015-06-22 14:50 - 2015-07-10 15:11 - 00000000 ____D C:\Users\Daniel\Desktop\Website
  657. 2015-06-22 13:52 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
  658. 2015-06-22 13:50 - 2015-06-22 13:50 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  659. 2015-06-22 13:50 - 2015-06-22 13:50 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  660. 2015-06-22 13:50 - 2015-06-22 13:50 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  661. 2015-06-22 13:50 - 2015-06-22 13:50 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  662. 2015-06-22 13:50 - 2015-06-22 13:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  663. 2015-06-22 13:50 - 2015-06-22 13:50 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
  664. 2015-06-22 13:50 - 2015-06-22 13:50 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  665. 2015-06-22 13:50 - 2015-06-22 13:50 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
  666. 2015-06-22 13:50 - 2015-06-22 13:50 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
  667. 2015-06-22 13:50 - 2015-06-22 13:50 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  668. 2015-06-22 13:50 - 2015-06-22 13:50 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  669. 2015-06-22 13:50 - 2015-06-22 13:50 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  670. 2015-06-22 13:50 - 2015-06-22 13:50 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
  671. 2015-06-22 13:50 - 2015-06-22 13:50 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  672. 2015-06-22 13:50 - 2015-06-22 13:50 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  673. 2015-06-22 13:50 - 2015-06-22 13:50 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
  674. 2015-06-22 13:50 - 2015-06-22 13:50 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  675. 2015-06-22 13:50 - 2015-06-22 13:50 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
  676. 2015-06-22 13:50 - 2015-06-22 13:50 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
  677. 2015-06-22 13:50 - 2015-06-22 13:50 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
  678. 2015-06-22 13:50 - 2015-06-22 13:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
  679. 2015-06-22 13:50 - 2015-06-22 13:50 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  680. 2015-06-22 13:50 - 2015-06-22 13:50 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
  681. 2015-06-22 13:50 - 2015-06-22 13:50 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
  682. 2015-06-22 13:50 - 2015-06-22 13:50 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
  683. 2015-06-22 13:50 - 2015-06-22 13:50 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
  684. 2015-06-22 13:50 - 2015-06-22 13:50 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
  685. 2015-06-22 13:50 - 2015-06-22 13:50 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
  686. 2015-06-22 13:50 - 2015-06-22 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
  687. 2015-06-22 13:50 - 2015-06-22 13:50 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
  688. 2015-06-22 13:50 - 2015-06-22 13:50 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
  689. 2015-06-22 13:50 - 2015-06-22 13:50 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
  690. 2015-06-22 13:50 - 2015-06-22 13:50 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
  691. 2015-06-22 13:50 - 2015-06-22 13:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  692. 2015-06-22 13:50 - 2015-06-22 13:50 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
  693. 2015-06-22 13:50 - 2015-06-22 13:50 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
  694. 2015-06-22 13:50 - 2015-06-22 13:50 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
  695. 2015-06-22 13:50 - 2015-06-22 13:50 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
  696. 2015-06-22 13:50 - 2015-06-22 13:50 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
  697. 2015-06-22 13:50 - 2015-06-22 13:50 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  698. 2015-06-22 13:50 - 2015-06-22 13:50 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
  699. 2015-06-22 13:50 - 2015-06-22 13:50 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
  700. 2015-06-22 13:50 - 2015-06-22 13:50 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  701. 2015-06-22 13:50 - 2015-06-22 13:50 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
  702. 2015-06-22 13:50 - 2015-06-22 13:50 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
  703. 2015-06-22 13:50 - 2015-06-22 13:50 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
  704. 2015-06-22 13:50 - 2015-06-22 13:50 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
  705. 2015-06-22 13:50 - 2015-06-22 13:50 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
  706. 2015-06-22 13:50 - 2015-06-22 13:50 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
  707. 2015-06-22 13:50 - 2015-06-22 13:50 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
  708. 2015-06-22 13:50 - 2015-06-22 13:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
  709. 2015-06-22 13:50 - 2015-06-22 13:50 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
  710. 2015-06-22 13:50 - 2015-06-22 13:50 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
  711. 2015-06-22 13:50 - 2015-06-22 13:50 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
  712. 2015-06-22 13:50 - 2015-06-22 13:50 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
  713. 2015-06-22 13:50 - 2015-06-22 13:50 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
  714. 2015-06-22 13:50 - 2015-06-22 13:50 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
  715. 2015-06-22 13:50 - 2015-06-22 13:50 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
  716. 2015-06-22 13:50 - 2015-06-22 13:50 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
  717. 2015-06-22 13:50 - 2015-06-22 13:50 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
  718. 2015-06-22 13:50 - 2015-06-22 13:50 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
  719. 2015-06-22 13:50 - 2015-06-22 13:50 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
  720. 2015-06-22 13:50 - 2015-06-22 13:50 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
  721. 2015-06-22 13:50 - 2015-06-22 13:50 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
  722. 2015-06-22 13:50 - 2015-06-22 13:50 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
  723. 2015-06-22 13:50 - 2015-06-22 13:50 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
  724. 2015-06-22 13:50 - 2015-06-22 13:50 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
  725. 2015-06-22 13:50 - 2015-06-22 13:50 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
  726. 2015-06-22 13:50 - 2015-06-22 13:50 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
  727. 2015-06-22 13:50 - 2015-06-22 13:50 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  728. 2015-06-22 13:50 - 2015-06-22 13:50 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
  729. 2015-06-22 13:50 - 2015-06-22 13:50 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
  730. 2015-06-22 13:50 - 2015-06-22 13:50 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
  731. 2015-06-22 13:50 - 2015-06-22 13:50 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
  732. 2015-06-22 13:50 - 2015-06-22 13:50 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
  733. 2015-06-22 13:50 - 2015-06-22 13:50 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
  734. 2015-06-22 13:50 - 2015-06-22 13:50 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
  735. 2015-06-22 13:50 - 2015-06-22 13:50 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
  736. 2015-06-22 13:50 - 2015-06-22 13:50 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
  737. 2015-06-22 13:50 - 2015-06-22 13:50 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
  738. 2015-06-22 13:50 - 2015-06-22 13:50 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
  739. 2015-06-22 13:50 - 2015-06-22 13:50 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
  740. 2015-06-22 13:50 - 2015-06-22 13:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
  741. 2015-06-22 13:50 - 2015-06-22 13:50 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
  742. 2015-06-22 13:50 - 2015-06-22 13:50 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
  743. 2015-06-22 13:50 - 2015-06-22 13:50 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
  744. 2015-06-22 13:50 - 2015-06-22 13:50 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
  745. 2015-06-22 13:50 - 2015-06-22 13:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
  746. 2015-06-22 13:50 - 2015-06-22 13:50 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
  747. 2015-06-22 13:50 - 2015-06-22 13:50 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
  748. 2015-06-22 13:50 - 2015-06-22 13:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
  749. 2015-06-22 13:50 - 2015-06-22 13:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
  750. 2015-06-22 13:50 - 2015-06-22 13:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
  751. 2015-06-22 13:50 - 2015-06-22 13:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
  752. 2015-06-22 13:50 - 2015-06-22 13:50 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
  753. 2015-06-22 13:50 - 2015-06-22 13:50 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
  754. 2015-06-22 13:50 - 2015-06-22 13:50 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
  755. 2015-06-22 13:50 - 2015-06-22 13:50 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
  756. 2015-06-22 13:50 - 2015-06-22 13:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
  757. 2015-06-22 13:50 - 2015-06-22 13:50 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
  758. 2015-06-22 13:50 - 2015-06-22 13:50 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
  759. 2015-06-22 13:50 - 2015-06-22 13:50 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
  760. 2015-06-22 13:50 - 2015-06-22 13:50 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
  761. 2015-06-22 13:50 - 2015-06-22 13:50 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
  762. 2015-06-22 13:50 - 2015-06-22 13:50 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
  763. 2015-06-22 13:50 - 2015-06-22 13:50 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
  764. 2015-06-22 13:50 - 2015-06-22 13:50 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
  765. 2015-06-22 13:50 - 2015-06-22 13:50 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
  766. 2015-06-22 13:47 - 2015-06-22 13:47 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
  767. 2015-06-22 13:47 - 2015-06-22 13:47 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
  768. 2015-06-22 13:47 - 2015-06-22 13:47 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
  769. 2015-06-22 13:47 - 2015-06-22 13:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
  770. 2015-06-22 13:47 - 2015-06-22 13:47 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
  771. 2015-06-22 13:47 - 2015-06-22 13:47 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
  772. 2015-06-22 13:47 - 2015-06-22 13:47 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
  773. 2015-06-22 13:47 - 2015-06-22 13:47 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
  774. 2015-06-22 13:47 - 2015-06-22 13:47 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
  775. 2015-06-22 13:47 - 2015-06-22 13:47 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
  776. 2015-06-22 13:47 - 2015-06-22 13:47 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
  777. 2015-06-22 13:47 - 2015-06-22 13:47 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
  778. 2015-06-22 13:47 - 2015-06-22 13:47 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
  779. 2015-06-22 13:47 - 2015-06-22 13:47 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
  780. 2015-06-22 13:47 - 2015-06-22 13:47 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
  781. 2015-06-22 13:47 - 2015-06-22 13:47 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
  782. 2015-06-22 13:47 - 2015-06-22 13:47 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
  783. 2015-06-22 13:47 - 2015-06-22 13:47 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
  784. 2015-06-22 13:47 - 2015-06-22 13:47 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
  785. 2015-06-22 13:47 - 2015-06-22 13:47 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
  786. 2015-06-22 13:47 - 2015-06-22 13:47 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
  787. 2015-06-22 13:47 - 2015-06-22 13:47 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
  788. 2015-06-22 13:47 - 2015-06-22 13:47 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
  789. 2015-06-22 13:47 - 2015-06-22 13:47 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
  790. 2015-06-22 13:47 - 2015-06-22 13:47 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
  791. 2015-06-22 13:47 - 2015-06-22 13:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
  792. 2015-06-22 13:47 - 2015-06-22 13:47 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
  793. 2015-06-22 13:47 - 2015-06-22 13:47 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
  794. 2015-06-22 13:47 - 2015-06-22 13:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
  795. 2015-06-22 13:47 - 2015-06-22 13:47 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
  796. 2015-06-22 13:47 - 2015-06-22 13:47 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
  797. 2015-06-22 13:47 - 2015-06-22 13:47 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
  798. 2015-06-22 13:47 - 2015-06-22 13:47 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
  799. 2015-06-22 13:47 - 2015-06-22 13:47 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
  800. 2015-06-22 13:47 - 2015-06-22 13:47 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
  801. 2015-06-22 13:47 - 2015-06-22 13:47 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
  802. 2015-06-22 13:47 - 2015-06-22 13:47 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
  803. 2015-06-22 13:47 - 2015-06-22 13:47 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
  804. 2015-06-22 13:47 - 2015-06-22 13:47 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
  805. 2015-06-22 13:47 - 2015-06-22 13:47 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
  806. 2015-06-22 13:47 - 2015-06-22 13:47 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
  807. 2015-06-22 13:47 - 2015-06-22 13:47 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
  808. 2015-06-22 13:47 - 2015-06-22 13:47 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
  809. 2015-06-22 13:47 - 2015-06-22 13:47 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
  810. 2015-06-22 13:47 - 2015-06-22 13:47 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
  811. 2015-06-22 13:47 - 2015-06-22 13:47 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
  812. 2015-06-22 13:47 - 2015-06-22 13:47 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
  813. 2015-06-22 13:47 - 2015-06-22 13:47 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
  814. 2015-06-22 13:47 - 2015-06-22 13:47 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
  815. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
  816. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
  817. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
  818. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
  819. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
  820. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
  821. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
  822. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
  823. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
  824. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
  825. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
  826. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
  827. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
  828. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
  829. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
  830. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
  831. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
  832. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
  833. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
  834. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
  835. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
  836. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
  837. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
  838. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
  839. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
  840. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
  841. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
  842. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
  843. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
  844. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
  845. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
  846. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
  847. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
  848. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
  849. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
  850. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
  851. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
  852. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
  853. 2015-06-22 13:47 - 2015-06-22 13:47 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
  854. 2015-06-22 13:47 - 2015-06-22 13:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
  855. 2015-06-22 13:46 - 2015-06-22 13:46 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
  856. 2015-06-22 13:46 - 2015-06-22 13:46 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
  857. 2015-06-22 13:46 - 2015-06-22 13:46 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
  858. 2015-06-22 13:46 - 2015-06-22 13:46 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
  859. 2015-06-22 13:46 - 2015-06-22 13:46 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
  860. 2015-06-22 13:46 - 2015-06-22 13:46 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
  861. 2015-06-22 13:46 - 2015-06-22 13:46 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
  862. 2015-06-22 13:46 - 2015-06-22 13:46 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
  863. 2015-06-22 13:46 - 2015-06-22 13:46 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
  864. 2015-06-22 13:46 - 2015-06-22 13:46 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
  865. 2015-06-22 13:46 - 2015-06-22 13:46 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
  866. 2015-06-22 13:46 - 2015-06-22 13:46 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
  867. 2015-06-22 13:46 - 2015-06-22 13:46 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
  868. 2015-06-22 13:46 - 2015-06-22 13:46 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
  869. 2015-06-22 13:46 - 2015-06-22 13:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
  870. 2015-06-22 13:46 - 2015-06-22 13:46 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
  871. 2015-06-22 13:46 - 2015-06-22 13:46 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
  872. 2015-06-22 13:46 - 2015-06-22 13:46 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
  873. 2015-06-22 13:46 - 2015-06-22 13:46 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
  874. 2015-06-22 13:46 - 2015-06-22 13:46 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
  875. 2015-06-22 13:46 - 2015-06-22 13:46 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
  876. 2015-06-22 13:46 - 2015-06-22 13:46 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
  877. 2015-06-22 13:46 - 2015-06-22 13:46 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
  878. 2015-06-22 13:46 - 2015-06-22 13:46 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
  879. 2015-06-22 13:46 - 2015-06-22 13:46 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
  880. 2015-06-22 13:46 - 2015-06-22 13:46 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
  881. 2015-06-22 13:46 - 2015-06-22 13:46 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
  882. 2015-06-22 13:46 - 2015-06-22 13:46 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
  883. 2015-06-22 13:46 - 2015-06-22 13:46 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
  884. 2015-06-22 13:46 - 2015-06-22 13:46 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
  885. 2015-06-22 13:46 - 2015-06-22 13:46 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
  886. 2015-06-22 13:46 - 2015-06-22 13:46 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
  887. 2015-06-22 13:46 - 2015-06-22 13:46 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
  888. 2015-06-22 13:46 - 2015-06-22 13:46 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
  889. 2015-06-22 13:46 - 2015-06-22 13:46 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
  890. 2015-06-22 13:46 - 2015-06-22 13:46 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
  891. 2015-06-22 13:46 - 2015-06-22 13:46 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
  892. 2015-06-22 13:46 - 2015-06-22 13:46 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
  893. 2015-06-22 13:46 - 2015-06-22 13:46 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
  894. 2015-06-22 13:46 - 2015-06-22 13:46 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
  895. 2015-06-22 13:46 - 2015-06-22 13:46 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
  896. 2015-06-22 13:46 - 2015-06-22 13:46 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
  897. 2015-06-22 13:46 - 2015-06-22 13:46 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
  898. 2015-06-22 13:46 - 2015-06-22 13:46 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
  899. 2015-06-22 13:46 - 2015-06-22 13:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
  900. 2015-06-22 13:46 - 2015-06-22 13:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
  901. 2015-06-22 13:46 - 2015-06-22 13:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
  902. 2015-06-22 13:46 - 2015-06-22 13:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
  903. 2015-06-22 13:46 - 2015-06-22 13:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
  904. 2015-06-22 13:46 - 2015-06-22 13:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
  905. 2015-06-22 13:46 - 2015-06-22 13:46 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
  906. 2015-06-22 13:46 - 2015-06-22 13:46 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
  907. 2015-06-22 13:45 - 2015-06-22 13:45 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
  908. 2015-06-22 13:45 - 2015-06-22 13:45 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
  909. 2015-06-22 13:40 - 2015-06-22 13:52 - 00015469 _____ C:\Windows\IE11_main.log
  910. 2015-06-21 21:16 - 2015-06-21 21:16 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\MPC-HC
  911. 2015-06-21 21:16 - 2015-06-21 21:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64
  912. 2015-06-21 21:16 - 2015-06-21 21:16 - 00000000 ____D C:\Program Files\MPC-HC
  913. 2015-06-21 20:57 - 2015-06-21 21:19 - 20356650 _____ C:\Users\Daniel\Documents\Sequenz 01.mp4
  914. 2015-06-21 18:21 - 2015-06-21 18:21 - 00000000 ____D C:\Program Files (x86)\Invalid Visual Studio Folder
  915. 2015-06-21 18:16 - 2015-07-06 21:50 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
  916. 2015-06-21 18:16 - 2015-07-06 21:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 14.0
  917. 2015-06-21 18:16 - 2015-06-28 14:07 - 00000000 ____D C:\Windows\system32\1031
  918. 2015-06-21 18:16 - 2015-06-21 18:16 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 14.0
  919. 2015-06-21 18:05 - 2015-06-21 18:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader
  920. 2015-06-21 17:51 - 2015-03-26 00:21 - 01005736 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
  921. 2015-06-21 17:51 - 2015-03-26 00:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
  922. 2015-06-21 17:51 - 2015-03-26 00:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
  923. 2015-06-21 17:51 - 2015-03-26 00:21 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
  924. 2015-06-21 17:51 - 2015-03-26 00:21 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
  925. 2015-06-21 17:51 - 2015-03-26 00:21 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
  926. 2015-06-21 17:51 - 2015-03-26 00:21 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
  927. 2015-06-21 17:51 - 2015-03-26 00:21 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
  928. 2015-06-21 17:51 - 2015-03-26 00:21 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
  929. 2015-06-21 17:51 - 2015-03-26 00:21 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
  930. 2015-06-21 17:51 - 2015-03-26 00:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
  931. 2015-06-21 17:51 - 2015-03-26 00:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
  932. 2015-06-21 17:51 - 2015-03-26 00:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
  933. 2015-06-21 17:51 - 2015-03-26 00:21 - 00003584 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
  934. 2015-06-21 17:51 - 2015-03-26 00:21 - 00003584 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
  935. 2015-06-21 17:51 - 2015-03-26 00:21 - 00003584 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
  936. 2015-06-21 17:51 - 2015-03-26 00:21 - 00003584 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
  937. 2015-06-21 17:51 - 2015-03-26 00:21 - 00003584 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
  938. 2015-06-21 17:51 - 2015-03-26 00:21 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
  939. 2015-06-21 17:51 - 2015-03-26 00:21 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
  940. 2015-06-21 17:51 - 2015-03-26 00:21 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
  941. 2015-06-21 17:51 - 2015-03-26 00:21 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
  942. 2015-06-21 17:51 - 2015-03-26 00:21 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
  943. 2015-06-21 17:51 - 2015-03-26 00:21 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
  944. 2015-06-21 17:51 - 2015-03-26 00:20 - 01005696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
  945. 2015-06-21 17:51 - 2015-03-26 00:20 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
  946. 2015-06-21 17:51 - 2015-03-26 00:20 - 00013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
  947. 2015-06-21 17:51 - 2015-03-26 00:20 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
  948. 2015-06-21 17:51 - 2015-03-26 00:20 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
  949. 2015-06-21 17:51 - 2015-03-26 00:20 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
  950. 2015-06-21 17:51 - 2015-03-26 00:20 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
  951. 2015-06-21 17:51 - 2015-03-26 00:20 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
  952. 2015-06-21 17:51 - 2015-03-26 00:20 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
  953. 2015-06-21 17:51 - 2015-03-26 00:20 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
  954. 2015-06-21 17:51 - 2015-03-26 00:20 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
  955. 2015-06-21 17:51 - 2015-03-26 00:20 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
  956. 2015-06-21 17:51 - 2015-03-26 00:20 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
  957. 2015-06-21 17:51 - 2015-03-26 00:20 - 00003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
  958. 2015-06-21 17:51 - 2015-03-26 00:20 - 00003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
  959. 2015-06-21 17:51 - 2015-03-26 00:20 - 00003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
  960. 2015-06-21 17:51 - 2015-03-26 00:20 - 00003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
  961. 2015-06-21 17:51 - 2015-03-26 00:20 - 00003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
  962. 2015-06-21 17:51 - 2015-03-26 00:20 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
  963. 2015-06-21 17:51 - 2015-03-26 00:20 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
  964. 2015-06-21 17:51 - 2015-03-26 00:20 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
  965. 2015-06-21 17:51 - 2015-03-26 00:20 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
  966. 2015-06-21 17:51 - 2015-03-26 00:20 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
  967. 2015-06-21 17:51 - 2015-03-26 00:20 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
  968. 2015-06-21 17:48 - 2015-07-06 22:04 - 00000000 ____D C:\ProgramData\VsTelemetry
  969. 2015-06-21 17:47 - 2015-06-21 17:47 - 03066120 _____ (Microsoft Corporation) C:\Users\Daniel\Downloads\vs_community.exe
  970. 2015-06-21 16:27 - 2015-06-21 16:32 - 00000000 ____D C:\Users\Daniel\Desktop\Tor Browser
  971. 2015-06-20 17:51 - 2015-06-21 18:05 - 00000000 ____D C:\ProgramData\YTD Video Downloader
  972. 2015-06-20 17:51 - 2015-06-20 17:51 - 00000000 ____D C:\Program Files (x86)\GreenTree Applications
  973. 2015-06-20 17:41 - 2015-06-26 21:03 - 00000000 ____D C:\Program Files\Recuva
  974. 2015-06-20 17:41 - 2015-06-20 17:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
  975. 2015-06-20 17:26 - 2015-07-08 16:36 - 00000000 ____D C:\ProgramData\Package Cache
  976. 2015-06-20 17:00 - 2015-06-20 17:00 - 00003264 _____ C:\Windows\System32\Tasks\{02AE6351-CC12-4412-8A16-B1EE6CBB9E17}
  977. 2015-06-20 16:44 - 2015-06-20 16:44 - 00000000 ____D C:\Windows\ERUNT
  978. 2015-06-20 14:53 - 2015-06-19 17:18 - 50595930 _____ C:\Users\Daniel\Documents\5k AWP Clutch 15s.dem
  979. 2015-06-19 22:45 - 2015-06-19 22:45 - 00016416 _____ C:\Users\Daniel\Documents\5k AWP Clutch.veg
  980. 2015-06-19 22:31 - 2015-06-19 22:35 - 60078738 _____ C:\Users\Daniel\Documents\5k AWP Clutch.mp4
  981. 2015-06-19 22:19 - 2015-06-19 22:19 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Publish Providers
  982. 2015-06-19 22:19 - 2015-06-19 22:19 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\NVIDIA
  983. 2015-06-19 22:18 - 2015-06-19 22:18 - 00001044 _____ C:\Users\Public\Desktop\Vegas Pro 13.0 (64-bit).lnk
  984. 2015-06-19 22:18 - 2015-06-19 22:18 - 00000000 ____D C:\Users\Daniel\AppData\Local\Sony
  985. 2015-06-19 22:18 - 2015-06-19 22:18 - 00000000 ____D C:\ProgramData\Sony
  986. 2015-06-19 22:18 - 2015-06-19 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
  987. 2015-06-19 22:18 - 2015-06-19 22:18 - 00000000 ____D C:\Program Files\Sony
  988. 2015-06-19 22:18 - 2015-06-19 22:18 - 00000000 ____D C:\Program Files (x86)\Sony
  989. 2015-06-19 22:05 - 2015-06-19 22:29 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Sony
  990. 2015-06-19 19:51 - 2015-04-19 19:34 - 09408816 _____ C:\Users\Daniel\Desktop\Intro ReZZeX.mp4
  991. 2015-06-19 19:34 - 2015-05-19 05:29 - 00046768 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
  992. 2015-06-19 19:34 - 2015-05-19 05:14 - 00057520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
  993. 2015-06-19 19:25 - 2015-06-19 19:25 - 00000000 ____D C:\Program Files (x86)\ESET
  994. 2015-06-19 15:48 - 2015-06-25 19:16 - 00000000 ____D C:\Users\Daniel\Desktop\Steam
  995. 2015-06-19 14:32 - 2015-06-19 15:07 - 00000000 ____D C:\Windows\erdnt
  996. 2015-06-18 18:23 - 2015-07-03 13:17 - 00000000 ____D C:\Users\Daniel\Desktop\Stick
  997. 2015-06-18 16:50 - 2015-06-18 16:50 - 00000168 _____ C:\Users\Daniel\Desktop\fov.conf
  998. 2015-06-18 15:31 - 2015-06-18 15:31 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\com.playsaurus.heroclicker
  999. 2015-06-18 15:31 - 2015-06-18 15:31 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Adobe
  1000. 2015-06-17 14:17 - 2015-07-15 13:33 - 00000000 ____D C:\Users\Daniel\AppData\Local\Spotify
  1001. 2015-06-17 14:17 - 2015-06-17 14:17 - 00001818 _____ C:\Users\Daniel\Desktop\Spotify.lnk
  1002. 2015-06-17 14:17 - 2015-06-17 14:17 - 00001804 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
  1003. 2015-06-17 14:14 - 2015-07-15 15:53 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Spotify
  1004. 2015-06-15 19:14 - 2015-06-15 19:14 - 00524288 _____ (Simon Tatham) C:\Users\Daniel\Desktop\putty.exe
  1005. 2015-06-15 18:08 - 2015-07-11 18:30 - 00000000 ____D C:\Users\Daniel\AppData\Local\CrashDumps
  1006. 2015-06-15 16:00 - 2015-07-14 17:59 - 00000600 _____ C:\Users\Daniel\AppData\Local\PUTTY.RND
  1007. 2015-06-15 15:59 - 2015-07-14 20:12 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\FileZilla
  1008. 2015-06-15 15:59 - 2015-06-15 15:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
  1009. 2015-06-15 15:59 - 2015-06-15 15:59 - 00000000 ____D C:\Program Files\FileZilla FTP Client
  1010. 2015-06-15 15:40 - 2015-06-15 15:40 - 00000840 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
  1011. 2015-06-14 20:29 - 2015-06-15 17:25 - 00000000 ____D C:\Users\Daniel\AppData\Local\fabi.me
  1012. 2015-06-14 18:12 - 2015-06-14 10:15 - 00013824 _____ () C:\Users\Daniel\Desktop\reFUDme.exe
  1013. 2015-06-13 10:30 - 2015-06-13 10:30 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\WinRAR
  1014. 2015-06-12 22:15 - 2015-06-26 19:10 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Rootkit
  1015. 2015-06-12 22:11 - 2015-06-26 19:10 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
  1016. 2015-06-12 14:50 - 2015-06-12 14:50 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
  1017. 2015-06-12 14:50 - 2015-06-12 14:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
  1018. 2015-06-12 14:50 - 2015-06-12 14:50 - 00000000 ____D C:\Program Files\WinRAR
  1019. 2015-06-12 13:46 - 2015-07-12 16:32 - 00000000 ____D C:\ProgramData\Riot Games
  1020. 2015-06-11 21:28 - 2015-06-11 21:28 - 00000000 ____D C:\Windows\pss
  1021. 2015-06-11 18:37 - 2015-06-11 18:37 - 00000000 ____D C:\Windows\SysWOW64\Macromed
  1022. 2015-06-11 18:37 - 2015-06-11 18:37 - 00000000 ____D C:\Windows\system32\Macromed
  1023. 2015-06-11 18:32 - 2015-06-11 18:38 - 00000000 ____D C:\Users\Daniel\AppData\Local\Adobe
  1024. 2015-06-10 17:52 - 2015-07-15 15:39 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit
  1025. 2015-06-10 17:52 - 2015-06-10 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Exploit
  1026. 2015-06-10 17:52 - 2015-06-10 17:52 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit
  1027. 2015-06-10 15:55 - 2015-06-10 15:55 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\TeamViewer
  1028. 2015-06-08 21:35 - 2015-06-17 16:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyScrambler
  1029. 2015-06-08 21:35 - 2015-06-17 16:58 - 00000000 ____D C:\Program Files (x86)\KeyScrambler
  1030. 2015-06-08 21:35 - 2015-06-08 21:35 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\QFX Software
  1031. 2015-06-08 21:35 - 2015-06-08 21:35 - 00000000 ____D C:\ProgramData\QFX Software
  1032. 2015-06-08 21:35 - 2015-06-03 15:43 - 00224208 _____ (QFX Software Corporation) C:\Windows\system32\Drivers\keyscrambler.sys
  1033. 2015-06-07 12:24 - 2015-06-07 12:24 - 00000000 ____D C:\Users\Daniel\Tracing
  1034. 2015-06-07 12:21 - 2015-07-13 20:48 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Skype
  1035. 2015-06-07 12:21 - 2015-06-07 12:21 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
  1036. 2015-06-07 12:21 - 2015-06-07 12:21 - 00000000 ___RD C:\Program Files (x86)\Skype
  1037. 2015-06-07 12:21 - 2015-06-07 12:21 - 00000000 ____D C:\Users\Daniel\AppData\Local\Skype
  1038. 2015-06-07 12:21 - 2015-06-07 12:21 - 00000000 ____D C:\ProgramData\Skype
  1039. 2015-06-07 12:21 - 2015-06-07 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  1040. 2015-06-07 12:07 - 2015-06-07 12:07 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
  1041. 2015-06-06 18:52 - 2015-06-18 15:49 - 00000000 ____D C:\Users\Daniel\Documents\Virtual Machines
  1042. 2015-06-06 18:31 - 2015-07-09 20:57 - 00000000 ____D C:\ProgramData\Nimoru
  1043. 2015-06-06 18:29 - 2015-06-06 18:29 - 00000914 _____ C:\Users\Public\Desktop\OpenVPN GUI.lnk
  1044. 2015-06-06 18:29 - 2015-06-06 18:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows
  1045. 2015-06-06 18:29 - 2015-06-06 18:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
  1046. 2015-06-06 18:29 - 2015-06-06 18:29 - 00000000 ____D C:\Program Files\TAP-Windows
  1047. 2015-06-06 18:29 - 2015-06-06 18:29 - 00000000 ____D C:\Program Files\OpenVPN
  1048. 2015-06-06 17:25 - 2015-06-28 17:04 - 00000000 ____D C:\Program Files (x86)\TeamViewer
  1049. 2015-06-06 17:25 - 2015-06-06 17:25 - 00001053 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
  1050. 2015-06-06 17:25 - 2015-06-06 17:25 - 00001041 _____ C:\Users\Public\Desktop\TeamViewer 10.lnk
  1051. 2015-06-06 16:56 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
  1052. 2015-06-06 16:56 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
  1053. 2015-06-06 16:56 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
  1054. 2015-06-06 16:56 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
  1055. 2015-06-06 16:56 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
  1056. 2015-06-06 16:56 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
  1057. 2015-06-06 16:56 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
  1058. 2015-06-06 16:56 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
  1059. 2015-06-06 16:54 - 2015-06-09 14:53 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Notepad++
  1060. 2015-06-06 16:54 - 2015-06-06 16:54 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
  1061. 2015-06-06 16:54 - 2015-06-06 16:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
  1062. 2015-06-06 16:54 - 2015-06-06 16:54 - 00000000 ____D C:\Program Files (x86)\Notepad++
  1063. 2015-06-06 16:25 - 2015-06-19 19:04 - 00000202 _____ C:\Users\Daniel\Desktop\Steam Offers...txt
  1064. 2015-06-06 16:24 - 2015-06-26 19:01 - 00002862 _____ C:\Users\Daniel\Desktop\unrealircd.conf
  1065. 2015-06-06 16:22 - 2015-06-05 17:20 - 00000585 _____ C:\Users\Daniel\Desktop\opcash.php
  1066. 2015-06-06 16:20 - 2015-06-26 22:36 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Electrum
  1067. 2015-06-06 16:10 - 2015-06-08 21:42 - 00000000 ____D C:\Users\Daniel\Desktop\ISOs
  1068. 2015-06-06 16:10 - 2015-06-06 16:17 - 00000000 ____D C:\Users\Daniel\Desktop\Wallets
  1069. 2015-06-06 16:05 - 2015-06-15 15:13 - 01835008 _____ C:\Users\Daniel\Documents\TrueCrypt Rescue Disk.iso
  1070. 2015-06-06 16:05 - 2015-06-06 16:05 - 00000000 ____D C:\ProgramData\TrueCrypt
  1071. 2015-06-06 16:03 - 2015-06-15 15:22 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\TrueCrypt
  1072. 2015-06-06 16:02 - 2015-06-06 16:02 - 00231376 _____ (TrueCrypt Foundation) C:\Windows\system32\Drivers\truecrypt.sys
  1073. 2015-06-06 16:02 - 2015-06-06 16:02 - 00000881 _____ C:\Users\Public\Desktop\TrueCrypt.lnk
  1074. 2015-06-06 16:02 - 2015-06-06 16:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TrueCrypt
  1075. 2015-06-06 16:02 - 2015-06-06 16:02 - 00000000 ____D C:\Program Files\TrueCrypt
  1076. 2015-06-06 15:50 - 2015-07-15 13:52 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\VMware
  1077. 2015-06-06 15:50 - 2015-07-15 13:52 - 00000000 ____D C:\Users\Daniel\AppData\Local\VMware
  1078. 2015-06-06 14:12 - 2015-06-19 19:45 - 00000000 ____D C:\Users\Daniel\AppData\Local\NVIDIA Corporation
  1079. 2015-06-06 14:12 - 2015-06-19 19:35 - 00000000 ____D C:\Users\Daniel\AppData\Local\NVIDIA
  1080. 2015-06-06 14:11 - 2015-07-15 13:33 - 00000000 ____D C:\ProgramData\NVIDIA
  1081. 2015-06-06 14:11 - 2015-06-19 19:35 - 00001387 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
  1082. 2015-06-06 14:11 - 2015-06-06 14:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
  1083. 2015-06-06 14:11 - 2015-06-03 23:04 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
  1084. 2015-06-06 14:11 - 2015-06-03 23:04 - 01571696 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
  1085. 2015-06-06 14:11 - 2015-06-03 23:04 - 01320304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
  1086. 2015-06-06 14:11 - 2015-06-03 23:04 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
  1087. 2015-06-06 14:10 - 2015-06-06 14:11 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
  1088. 2015-06-06 14:10 - 2015-05-28 09:04 - 00112968 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
  1089. 2015-06-06 14:10 - 2015-05-28 09:04 - 00105288 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
  1090. 2015-06-06 14:10 - 2015-05-28 06:15 - 06872904 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
  1091. 2015-06-06 14:10 - 2015-05-28 06:15 - 03491984 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
  1092. 2015-06-06 14:10 - 2015-05-28 06:15 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
  1093. 2015-06-06 14:10 - 2015-05-28 06:15 - 00937288 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
  1094. 2015-06-06 14:10 - 2015-05-28 06:15 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
  1095. 2015-06-06 14:10 - 2015-05-28 06:15 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
  1096. 2015-06-06 14:10 - 2015-05-28 05:52 - 00571024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
  1097. 2015-06-06 14:10 - 2015-05-27 12:48 - 04408727 _____ C:\Windows\system32\nvcoproc.bin
  1098. 2015-06-06 14:03 - 2015-06-19 19:35 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
  1099. 2015-06-06 14:03 - 2015-06-19 19:34 - 00000000 ____D C:\ProgramData\boost_interprocess
  1100. 2015-06-06 14:03 - 2015-06-06 14:11 - 00000000 ____D C:\Program Files\NVIDIA Corporation
  1101. 2015-06-06 14:03 - 2015-06-06 14:03 - 00000000 ____D C:\NVIDIA
  1102. 2015-06-06 14:03 - 2015-05-28 09:04 - 42719888 _____ C:\Windows\system32\nvcompiler.dll
  1103. 2015-06-06 14:03 - 2015-05-28 09:04 - 37741712 _____ C:\Windows\SysWOW64\nvcompiler.dll
  1104. 2015-06-06 14:03 - 2015-05-28 09:04 - 30480528 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
  1105. 2015-06-06 14:03 - 2015-05-28 09:04 - 22946960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
  1106. 2015-06-06 14:03 - 2015-05-28 09:04 - 17486856 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
  1107. 2015-06-06 14:03 - 2015-05-28 09:04 - 16185352 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
  1108. 2015-06-06 14:03 - 2015-05-28 09:04 - 15864064 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
  1109. 2015-06-06 14:03 - 2015-05-28 09:04 - 14987528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
  1110. 2015-06-06 14:03 - 2015-05-28 09:04 - 14495448 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
  1111. 2015-06-06 14:03 - 2015-05-28 09:04 - 13304280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
  1112. 2015-06-06 14:03 - 2015-05-28 09:04 - 12852152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
  1113. 2015-06-06 14:03 - 2015-05-28 09:04 - 11830512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
  1114. 2015-06-06 14:03 - 2015-05-28 09:04 - 10995528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
  1115. 2015-06-06 14:03 - 2015-05-28 09:04 - 03379680 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
  1116. 2015-06-06 14:03 - 2015-05-28 09:04 - 02986392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
  1117. 2015-06-06 14:03 - 2015-05-28 09:04 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
  1118. 2015-06-06 14:03 - 2015-05-28 09:04 - 02599056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
  1119. 2015-06-06 14:03 - 2015-05-28 09:04 - 01898312 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435306.dll
  1120. 2015-06-06 14:03 - 2015-05-28 09:04 - 01558848 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
  1121. 2015-06-06 14:03 - 2015-05-28 09:04 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435306.dll
  1122. 2015-06-06 14:03 - 2015-05-28 09:04 - 01099808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
  1123. 2015-06-06 14:03 - 2015-05-28 09:04 - 01059984 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
  1124. 2015-06-06 14:03 - 2015-05-28 09:04 - 01050440 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
  1125. 2015-06-06 14:03 - 2015-05-28 09:04 - 00982856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
  1126. 2015-06-06 14:03 - 2015-05-28 09:04 - 00974480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
  1127. 2015-06-06 14:03 - 2015-05-28 09:04 - 00939080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
  1128. 2015-06-06 14:03 - 2015-05-28 09:04 - 00503408 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
  1129. 2015-06-06 14:03 - 2015-05-28 09:04 - 00408208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
  1130. 2015-06-06 14:03 - 2015-05-28 09:04 - 00407112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
  1131. 2015-06-06 14:03 - 2015-05-28 09:04 - 00364176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
  1132. 2015-06-06 14:03 - 2015-05-28 09:04 - 00195912 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
  1133. 2015-06-06 14:03 - 2015-05-28 09:04 - 00175880 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
  1134. 2015-06-06 14:03 - 2015-05-28 09:04 - 00154256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
  1135. 2015-06-06 14:03 - 2015-05-28 09:04 - 00150648 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
  1136. 2015-06-06 14:03 - 2015-05-28 09:04 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
  1137. 2015-06-06 14:03 - 2015-05-28 09:04 - 00031552 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
  1138. 2015-06-06 14:03 - 2015-05-28 09:04 - 00030966 _____ C:\Windows\system32\nvinfo.pb
  1139. 2015-06-06 14:03 - 2015-05-19 05:14 - 00061616 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
  1140. 2015-06-06 13:53 - 2015-02-06 18:40 - 00066752 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmx86.sys
  1141. 2015-06-06 13:53 - 2015-01-07 15:55 - 00076480 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vsock.sys
  1142. 2015-06-06 13:53 - 2015-01-07 15:55 - 00068288 _____ (VMware, Inc.) C:\Windows\system32\vsocklib.dll
  1143. 2015-06-06 13:53 - 2015-01-07 15:55 - 00064192 _____ (VMware, Inc.) C:\Windows\SysWOW64\vsocklib.dll
  1144. 2015-06-06 13:52 - 2015-07-15 17:10 - 00000000 ____D C:\ProgramData\VMware
  1145. 2015-06-06 13:52 - 2015-06-21 18:15 - 01601394 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
  1146. 2015-06-06 13:52 - 2015-06-06 13:52 - 00002133 _____ C:\Users\Public\Desktop\VMware Workstation.lnk
  1147. 2015-06-06 13:52 - 2015-06-06 13:52 - 00001024 _____ C:\Windows\SysWOW64\%TMP%
  1148. 2015-06-06 13:52 - 2015-06-06 13:52 - 00000000 ____D C:\Users\Public\Documents\Shared Virtual Machines
  1149. 2015-06-06 13:52 - 2015-06-06 13:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
  1150. 2015-06-06 13:52 - 2015-06-06 13:52 - 00000000 ____D C:\Program Files\Common Files\VMware
  1151. 2015-06-06 13:52 - 2015-06-06 13:52 - 00000000 ____D C:\Program Files (x86)\VMware
  1152. 2015-06-06 13:52 - 2015-02-06 18:40 - 00438464 _____ (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
  1153. 2015-06-06 13:52 - 2015-02-06 18:40 - 00359104 _____ (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
  1154. 2015-06-06 13:52 - 2015-02-06 18:40 - 00026816 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmnetuserif.sys
  1155. 2015-06-06 13:52 - 2015-02-06 18:39 - 00931008 _____ (VMware, Inc.) C:\Windows\system32\vnetlib64.dll
  1156. 2015-06-06 13:52 - 2015-01-07 08:02 - 00055488 _____ (VMware, Inc.) C:\Windows\system32\Drivers\hcmon.sys
  1157. 2015-06-06 13:31 - 2015-07-08 12:42 - 00080251 _____ C:\Windows\DirectX.log
  1158. 2015-06-06 13:31 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
  1159. 2015-06-06 13:31 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
  1160. 2015-06-06 13:31 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
  1161. 2015-06-06 13:31 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
  1162. 2015-06-06 13:31 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
  1163. 2015-06-06 13:31 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
  1164. 2015-06-06 13:31 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
  1165. 2015-06-06 13:31 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
  1166. 2015-06-06 13:31 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
  1167. 2015-06-06 13:31 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
  1168. 2015-06-06 13:31 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
  1169. 2015-06-06 13:31 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
  1170. 2015-06-06 13:31 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
  1171. 2015-06-06 13:31 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
  1172. 2015-06-06 13:31 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
  1173. 2015-06-06 13:31 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
  1174. 2015-06-06 13:31 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
  1175. 2015-06-06 13:31 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
  1176. 2015-06-06 13:31 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
  1177. 2015-06-06 13:31 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
  1178. 2015-06-06 13:31 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
  1179. 2015-06-06 13:31 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
  1180. 2015-06-06 13:31 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
  1181. 2015-06-06 13:31 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
  1182. 2015-06-06 13:31 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
  1183. 2015-06-06 13:31 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
  1184. 2015-06-06 13:31 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
  1185. 2015-06-06 13:31 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
  1186. 2015-06-06 13:31 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
  1187. 2015-06-06 13:31 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
  1188. 2015-06-06 13:31 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
  1189. 2015-06-06 13:31 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
  1190. 2015-06-06 13:31 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
  1191. 2015-06-06 13:31 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
  1192. 2015-06-06 13:31 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
  1193. 2015-06-06 13:31 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
  1194. 2015-06-06 13:31 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
  1195. 2015-06-06 13:31 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
  1196. 2015-06-06 13:31 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
  1197. 2015-06-06 13:31 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
  1198. 2015-06-06 13:31 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
  1199. 2015-06-06 13:31 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
  1200. 2015-06-06 13:31 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
  1201. 2015-06-06 13:31 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
  1202. 2015-06-06 13:31 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
  1203. 2015-06-06 13:31 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
  1204. 2015-06-06 13:31 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
  1205. 2015-06-06 13:31 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
  1206. 2015-06-06 13:31 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
  1207. 2015-06-06 13:31 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
  1208. 2015-06-06 13:31 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
  1209. 2015-06-06 13:31 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
  1210. 2015-06-06 13:31 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
  1211. 2015-06-06 13:31 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
  1212. 2015-06-06 13:31 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
  1213. 2015-06-06 13:31 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
  1214. 2015-06-06 13:31 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
  1215. 2015-06-06 13:31 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
  1216. 2015-06-06 13:31 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
  1217. 2015-06-06 13:31 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
  1218. 2015-06-06 13:31 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
  1219. 2015-06-06 13:31 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
  1220. 2015-06-06 13:31 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
  1221. 2015-06-06 13:31 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
  1222. 2015-06-06 13:31 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
  1223. 2015-06-06 13:31 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
  1224. 2015-06-06 13:31 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
  1225. 2015-06-06 13:31 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
  1226. 2015-06-06 13:31 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
  1227. 2015-06-06 13:31 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
  1228. 2015-06-06 13:31 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
  1229. 2015-06-06 13:31 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
  1230. 2015-06-06 13:31 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
  1231. 2015-06-06 13:31 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
  1232. 2015-06-06 13:31 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
  1233. 2015-06-06 13:31 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
  1234. 2015-06-06 13:31 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
  1235. 2015-06-06 13:31 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
  1236. 2015-06-06 13:31 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
  1237. 2015-06-06 13:31 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
  1238. 2015-06-06 13:31 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
  1239. 2015-06-06 13:31 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
  1240. 2015-06-06 13:31 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
  1241. 2015-06-06 13:31 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
  1242. 2015-06-06 13:31 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
  1243. 2015-06-06 13:31 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
  1244. 2015-06-06 13:31 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
  1245. 2015-06-06 13:31 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
  1246. 2015-06-06 13:31 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
  1247. 2015-06-06 13:31 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
  1248. 2015-06-06 13:31 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
  1249. 2015-06-06 13:31 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
  1250. 2015-06-06 13:31 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
  1251. 2015-06-06 13:31 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
  1252. 2015-06-06 13:31 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
  1253. 2015-06-06 13:31 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
  1254. 2015-06-06 13:31 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
  1255. 2015-06-06 13:31 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
  1256. 2015-06-06 13:31 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
  1257. 2015-06-06 13:31 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
  1258. 2015-06-06 13:31 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
  1259. 2015-06-06 13:31 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
  1260. 2015-06-06 13:31 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
  1261. 2015-06-06 13:31 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
  1262. 2015-06-06 13:31 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
  1263. 2015-06-06 13:31 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
  1264. 2015-06-06 13:31 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
  1265. 2015-06-06 13:31 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
  1266. 2015-06-06 13:31 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
  1267. 2015-06-06 13:31 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
  1268. 2015-06-06 13:31 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
  1269. 2015-06-06 13:31 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
  1270. 2015-06-06 13:31 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
  1271. 2015-06-06 13:31 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
  1272. 2015-06-06 13:31 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
  1273. 2015-06-06 13:31 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
  1274. 2015-06-06 13:31 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
  1275. 2015-06-06 13:31 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
  1276. 2015-06-06 13:31 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
  1277. 2015-06-06 13:31 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
  1278. 2015-06-06 13:31 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
  1279. 2015-06-06 13:31 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
  1280. 2015-06-06 13:31 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
  1281. 2015-06-06 13:31 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
  1282. 2015-06-06 13:31 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
  1283. 2015-06-06 13:31 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
  1284. 2015-06-06 13:31 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
  1285. 2015-06-06 13:31 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
  1286. 2015-06-06 13:31 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
  1287. 2015-06-06 13:31 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
  1288. 2015-06-06 13:31 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
  1289. 2015-06-06 13:31 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
  1290. 2015-06-06 13:31 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
  1291. 2015-06-06 13:31 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
  1292. 2015-06-06 13:31 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
  1293. 2015-06-06 13:31 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
  1294. 2015-06-06 13:31 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
  1295. 2015-06-06 13:31 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
  1296. 2015-06-06 13:31 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
  1297. 2015-06-06 13:31 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
  1298. 2015-06-06 13:31 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
  1299. 2015-06-06 13:31 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
  1300. 2015-06-06 13:31 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
  1301. 2015-06-06 13:31 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
  1302. 2015-06-06 13:31 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
  1303. 2015-06-06 13:31 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
  1304. 2015-06-06 13:31 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
  1305. 2015-06-06 13:31 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
  1306. 2015-06-06 13:31 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
  1307. 2015-06-06 13:31 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
  1308. 2015-06-06 13:31 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
  1309. 2015-06-06 13:31 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
  1310. 2015-06-06 13:31 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
  1311. 2015-06-06 13:31 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
  1312. 2015-06-06 13:31 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
  1313. 2015-06-06 13:31 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
  1314. 2015-06-06 13:31 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
  1315. 2015-06-06 13:31 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
  1316. 2015-06-06 13:31 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
  1317. 2015-06-06 13:31 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
  1318. 2015-06-06 13:31 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
  1319. 2015-06-06 13:31 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
  1320. 2015-06-06 13:31 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
  1321. 2015-06-06 13:31 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
  1322. 2015-06-06 13:31 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
  1323. 2015-06-06 13:31 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
  1324. 2015-06-06 13:31 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
  1325. 2015-06-06 13:31 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
  1326. 2015-06-06 13:31 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
  1327. 2015-06-06 13:31 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
  1328. 2015-06-06 13:31 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
  1329. 2015-06-06 13:31 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
  1330. 2015-06-06 13:31 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
  1331. 2015-06-06 13:31 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
  1332. 2015-06-06 13:31 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
  1333. 2015-06-06 13:31 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
  1334. 2015-06-06 13:31 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
  1335. 2015-06-06 13:31 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
  1336. 2015-06-06 13:31 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
  1337. 2015-06-06 13:31 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
  1338. 2015-06-06 13:31 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
  1339. 2015-06-06 13:31 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
  1340. 2015-06-06 13:30 - 2015-07-05 18:41 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
  1341. 2015-06-06 13:26 - 2015-06-06 13:26 - 00000985 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YaTQA.lnk
  1342. 2015-06-06 13:26 - 2015-06-06 13:26 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\YaTQA
  1343. 2015-06-06 13:26 - 2015-06-06 13:26 - 00000000 ____D C:\Users\Daniel\AppData\Local\Steam
  1344. 2015-06-06 13:26 - 2015-06-06 13:26 - 00000000 ____D C:\Program Files (x86)\YaTQA
  1345. 2015-06-05 16:28 - 2015-06-05 15:33 - 00000000 ____D C:\Windows\Panther
  1346. 2015-06-05 16:18 - 2015-07-08 12:41 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
  1347. 2015-06-05 16:18 - 2015-06-05 16:18 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
  1348. 2015-06-05 16:18 - 2013-03-29 15:42 - 03379272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
  1349. 2015-06-05 16:18 - 2013-03-29 11:10 - 00449481 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
  1350. 2015-06-05 16:18 - 2013-03-27 10:57 - 00135240 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
  1351. 2015-06-05 16:18 - 2013-03-26 11:06 - 02797128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
  1352. 2015-06-05 16:18 - 2013-03-26 11:04 - 02734624 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
  1353. 2015-06-05 16:18 - 2013-03-26 09:40 - 03693128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
  1354. 2015-06-05 16:18 - 2013-03-26 08:38 - 01659464 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
  1355. 2015-06-05 16:18 - 2013-03-22 21:43 - 00208072 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
  1356. 2015-06-05 16:18 - 2013-03-12 12:16 - 00613448 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
  1357. 2015-06-05 16:18 - 2013-02-20 12:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
  1358. 2015-06-05 16:18 - 2013-02-19 12:52 - 00991816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
  1359. 2015-06-05 16:18 - 2012-06-20 11:26 - 00110592 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
  1360. 2015-06-05 16:18 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
  1361. 2015-06-05 16:18 - 2012-01-30 05:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
  1362. 2015-06-05 16:18 - 2012-01-10 04:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
  1363. 2015-06-05 16:18 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
  1364. 2015-06-05 16:18 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
  1365. 2015-06-05 16:18 - 2011-03-17 06:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
  1366. 2015-06-05 16:18 - 2011-03-07 11:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
  1367. 2015-06-05 16:18 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
  1368. 2015-06-05 16:18 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
  1369. 2015-06-05 16:18 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
  1370. 2015-06-05 16:18 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
  1371. 2015-06-05 16:18 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
  1372. 2015-06-05 16:18 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
  1373. 2015-06-05 16:18 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
  1374. 2015-06-05 16:07 - 2015-06-05 16:07 - 00000000 ____D C:\Program Files (x86)\Realtek
  1375. 2015-06-05 16:04 - 2015-06-06 13:46 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Audacity
  1376. 2015-06-05 16:04 - 2015-06-05 16:04 - 00001029 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
  1377. 2015-06-05 16:04 - 2015-06-05 16:04 - 00000000 ____D C:\Program Files (x86)\Audacity
  1378. 2015-06-05 16:03 - 2015-06-05 16:03 - 00000000 ____D C:\Windows\system32\SRSLabs
  1379. 2015-06-05 16:03 - 2015-06-05 16:03 - 00000000 ____D C:\Program Files\Realtek
  1380. 2015-06-05 16:03 - 2013-01-16 10:02 - 02079816 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
  1381. 2015-06-05 15:59 - 2015-06-05 15:59 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\ESET
  1382. 2015-06-05 15:59 - 2015-06-05 15:59 - 00000000 ____D C:\Users\Daniel\AppData\Local\ESET
  1383. 2015-06-05 15:59 - 2015-06-05 15:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
  1384. 2015-06-05 15:59 - 2015-06-05 15:59 - 00000000 ____D C:\ProgramData\ESET
  1385. 2015-06-05 15:59 - 2015-06-05 15:59 - 00000000 ____D C:\Program Files\ESET
  1386. 2015-06-05 15:52 - 2015-07-15 13:33 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
  1387. 2015-06-05 15:52 - 2015-07-01 12:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
  1388. 2015-06-05 15:52 - 2015-07-01 12:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
  1389. 2015-06-05 15:52 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
  1390. 2015-06-05 15:52 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
  1391. 2015-06-05 15:52 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
  1392. 2015-06-05 15:52 - 2015-06-05 15:52 - 00000000 ____D C:\ProgramData\Malwarebytes
  1393. 2015-06-05 15:50 - 2015-06-05 15:50 - 01205675 _____ C:\Users\Daniel\Documents\ts3_clientui-win32-1407159763-2015-06-05 15_50_03.221019.dmp
  1394. 2015-06-05 15:45 - 2015-06-05 15:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
  1395. 2015-06-05 15:42 - 2015-07-15 16:48 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\TS3Client
  1396. 2015-06-05 15:42 - 2015-06-06 13:20 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
  1397. 2015-06-05 15:42 - 2015-06-05 15:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
  1398. 2015-06-05 15:40 - 2015-07-15 16:53 - 00000000 ____D C:\Program Files (x86)\Steam
  1399. 2015-06-05 15:40 - 2015-06-05 15:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
  1400. 2015-06-05 15:37 - 2015-07-15 17:04 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  1401. 2015-06-05 15:37 - 2015-07-15 16:04 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  1402. 2015-06-05 15:37 - 2015-06-06 18:31 - 00057560 _____ C:\Users\Daniel\AppData\Local\GDIPFONTCACHEV1.DAT
  1403. 2015-06-05 15:37 - 2015-06-05 15:59 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
  1404. 2015-06-05 15:37 - 2015-06-05 15:59 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
  1405. 2015-06-05 15:37 - 2015-06-05 15:45 - 00000000 ____D C:\Users\Daniel\AppData\Local\Google
  1406. 2015-06-05 15:37 - 2015-06-05 15:45 - 00000000 ____D C:\Program Files (x86)\Google
  1407. 2015-06-05 15:37 - 2015-06-05 15:37 - 00000000 ____D C:\Users\Daniel\AppData\Local\Deployment
  1408. 2015-06-05 15:37 - 2015-06-05 15:37 - 00000000 ____D C:\Users\Daniel\AppData\Local\Apps\2.0
  1409. 2015-06-05 15:36 - 2015-06-05 15:36 - 00000000 ____D C:\Program Files\Intel
  1410. 2015-06-05 15:36 - 2013-02-08 20:37 - 00544568 ____R (Intel Corporation) C:\Windows\system32\PROUnstl.exe
  1411. 2015-06-05 15:36 - 2006-01-12 09:52 - 00001904 ____N C:\Windows\system32\SetupBD.din
  1412. 2015-06-05 15:35 - 2015-07-15 13:40 - 02079830 _____ C:\Windows\WindowsUpdate.log
  1413. 2015-06-05 15:35 - 2013-02-26 11:23 - 00496400 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1d62x64.sys
  1414. 2015-06-05 15:35 - 2012-12-05 22:34 - 00073032 _____ (Intel Corporation) C:\Windows\system32\e1dmsg.dll
  1415. 2015-06-05 15:35 - 2012-11-13 23:01 - 00101224 _____ (Intel Corporation) C:\Windows\system32\NicInstD.dll
  1416. 2015-06-05 15:35 - 2012-01-06 08:03 - 00003114 _____ C:\Windows\system32\e1d62x64.din
  1417. 2015-06-05 15:35 - 2009-05-26 04:05 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll
  1418. 2015-06-05 15:33 - 2015-07-11 14:48 - 00001741 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
  1419. 2015-06-05 15:33 - 2015-06-19 22:04 - 00000000 ____D C:\Users\Daniel\AppData\Local\VirtualStore
  1420. 2015-06-05 15:33 - 2015-06-07 12:24 - 00000000 ____D C:\Users\Daniel
  1421. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000020 ___SH C:\Users\Daniel\ntuser.ini
  1422. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
  1423. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
  1424. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default\Vorlagen
  1425. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default\Startmenü
  1426. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
  1427. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
  1428. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
  1429. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default\Druckumgebung
  1430. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
  1431. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
  1432. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
  1433. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
  1434. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
  1435. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
  1436. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
  1437. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
  1438. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
  1439. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
  1440. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
  1441. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Daniel\Vorlagen
  1442. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Daniel\Startmenü
  1443. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Daniel\Netzwerkumgebung
  1444. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Daniel\Lokale Einstellungen
  1445. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Daniel\Eigene Dateien
  1446. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Daniel\Druckumgebung
  1447. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Daniel\Documents\Eigene Musik
  1448. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Daniel\Documents\Eigene Bilder
  1449. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
  1450. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Daniel\AppData\Local\Verlauf
  1451. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Daniel\AppData\Local\Anwendungsdaten
  1452. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Users\Daniel\Anwendungsdaten
  1453. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Programme
  1454. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\ProgramData\Vorlagen
  1455. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\ProgramData\Startmenü
  1456. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
  1457. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\ProgramData\Favoriten
  1458. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\ProgramData\Dokumente
  1459. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
  1460. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
  1461. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 _SHDL C:\Dokumente und Einstellungen
  1462. 2015-06-05 15:33 - 2015-06-05 15:33 - 00000000 ____D C:\Recovery
  1463. 2015-06-05 15:33 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
  1464. 2015-06-05 15:33 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
  1465. 2015-06-05 15:31 - 2015-06-05 15:31 - 00001355 _____ C:\Windows\TSSysprep.log
  1466. 2015-06-05 15:31 - 2015-06-05 15:31 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
  1467. 2015-06-05 15:31 - 2015-06-05 15:31 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
  1468. 2015-06-05 15:31 - 2015-06-05 15:31 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
  1469. 2015-05-24 12:39 - 2015-06-06 13:43 - 00680600 _____ (Sysinternals - www.sysinternals.com) C:\Users\Daniel\Desktop\Autoruns.exe
  1470. 2015-05-10 21:56 - 2015-06-06 13:52 - 02508432 _____ (Sysinternals - www.sysinternals.com) C:\Users\Daniel\Desktop\procexp.exe
  1471. 2015-04-23 02:14 - 2015-04-23 02:14 - 01773768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsHelper.dll
  1472. 2015-04-23 02:14 - 2015-04-23 02:14 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsjitdebugger.exe
  1473. 2015-04-23 02:14 - 2015-04-23 02:14 - 00219304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VSPerf140.dll
  1474. 2015-04-23 02:14 - 2015-04-23 02:14 - 00175792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VSCover140.dll
  1475. 2015-04-23 01:06 - 2015-04-23 01:06 - 03005640 _____ (Microsoft Corporation) C:\Windows\system32\VSGraphicsHelper.dll
  1476. 2015-04-23 01:06 - 2015-04-23 01:06 - 00356024 _____ (Microsoft Corporation) C:\Windows\system32\vsjitdebugger.exe
  1477. 2015-04-23 01:06 - 2015-04-23 01:06 - 00264360 _____ (Microsoft Corporation) C:\Windows\system32\VSPerf140.dll
  1478. 2015-04-23 01:06 - 2015-04-23 01:06 - 00203440 _____ (Microsoft Corporation) C:\Windows\system32\VSCover140.dll
  1479.  
  1480. ==================== Three Months Modified files and folders ========
  1481.  
  1482. (If an entry is included in the fixlist, the file/folder will be moved.)
  1483.  
  1484. 2015-07-15 13:40 - 2009-07-14 06:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  1485. 2015-07-15 13:40 - 2009-07-14 06:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  1486. 2015-07-15 13:39 - 2011-04-12 09:43 - 00702100 _____ C:\Windows\system32\perfh007.dat
  1487. 2015-07-15 13:39 - 2011-04-12 09:43 - 00150766 _____ C:\Windows\system32\perfc007.dat
  1488. 2015-07-15 13:39 - 2009-07-14 07:13 - 01628730 _____ C:\Windows\system32\PerfStringBackup.INI
  1489. 2015-07-15 13:33 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
  1490. 2015-07-15 13:33 - 2009-07-14 06:51 - 00037948 _____ C:\Windows\setupact.log
  1491. 2015-07-11 17:29 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
  1492. 2015-07-09 13:34 - 2010-11-21 05:47 - 00196088 _____ C:\Windows\PFRO.log
  1493. 2015-07-08 16:36 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
  1494. 2015-07-06 21:35 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
  1495. 2015-07-06 18:33 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
  1496. 2015-07-05 19:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports
  1497. 2015-06-23 13:34 - 2009-07-14 06:45 - 00275576 _____ C:\Windows\system32\FNTCACHE.DAT
  1498. 2015-06-22 21:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
  1499. 2015-06-22 21:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
  1500. 2015-06-22 21:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK
  1501. 2015-06-22 21:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
  1502. 2015-06-22 21:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
  1503. 2015-06-20 19:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
  1504. 2015-06-19 15:17 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
  1505. 2015-06-19 15:16 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
  1506.  
  1507. ==================== Files in the root of some directories =======
  1508.  
  1509. 2015-07-14 13:13 - 2015-07-14 16:14 - 0000044 _____ () C:\Users\Daniel\AppData\Roaming\test.txt
  1510. 2015-06-15 16:00 - 2015-07-14 17:59 - 0000600 _____ () C:\Users\Daniel\AppData\Local\PUTTY.RND
  1511. 2015-06-30 12:37 - 2015-06-30 12:37 - 0000000 _____ () C:\Users\Daniel\AppData\Local\{3FD4F697-1B7C-4D80-9D1A-71ADB8B51BCB}
  1512.  
  1513. Some files in TEMP:
  1514. ====================
  1515. C:\Users\Daniel\AppData\Local\Temp\dotNET45Web.exe
  1516. C:\Users\Daniel\AppData\Local\Temp\drm_dyndata_7390006.dll
  1517. C:\Users\Daniel\AppData\Local\Temp\genteert.dll
  1518. C:\Users\Daniel\AppData\Local\Temp\GTA_V_Patch_1_0_393_2.exe
  1519. C:\Users\Daniel\AppData\Local\Temp\oo2.exe
  1520. C:\Users\Daniel\AppData\Local\Temp\procexp64.exe
  1521. C:\Users\Daniel\AppData\Local\Temp\SkypeSetup.exe
  1522.  
  1523.  
  1524. ==================== Bamital & volsnap Check =================
  1525.  
  1526. (There is no automatic fix for files that do not pass verification.)
  1527.  
  1528. C:\Windows\System32\winlogon.exe => File is digitally signed
  1529. C:\Windows\System32\wininit.exe => File is digitally signed
  1530. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  1531. C:\Windows\explorer.exe => File is digitally signed
  1532. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  1533. C:\Windows\System32\svchost.exe => File is digitally signed
  1534. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  1535. C:\Windows\System32\services.exe => File is digitally signed
  1536. C:\Windows\System32\User32.dll => File is digitally signed
  1537. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  1538. C:\Windows\System32\userinit.exe => File is digitally signed
  1539. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  1540. C:\Windows\System32\rpcss.dll => File is digitally signed
  1541. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  1542.  
  1543. ==================== BCD ================================
  1544.  
  1545. Windows-Start-Manager
  1546. ---------------------
  1547. Bezeichner {bootmgr}
  1548. device partition=\Device\HarddiskVolume4
  1549. path \bootmgr
  1550. description Windows Boot Manager
  1551. locale de-DE
  1552. inherit {globalsettings}
  1553. default {current}
  1554. resumeobject {1098762d-0b8f-11e5-83b1-ea38dc59d23c}
  1555. displayorder {current}
  1556. toolsdisplayorder {memdiag}
  1557. timeout 30
  1558.  
  1559. Windows-Startladeprogramm
  1560. -------------------------
  1561. Bezeichner {current}
  1562. device partition=C:
  1563. path \Windows\system32\winload.exe
  1564. description Windows 7
  1565. locale de-DE
  1566. inherit {bootloadersettings}
  1567. recoverysequence {1098762f-0b8f-11e5-83b1-ea38dc59d23c}
  1568. recoveryenabled Yes
  1569. osdevice partition=C:
  1570. systemroot \Windows
  1571. resumeobject {1098762d-0b8f-11e5-83b1-ea38dc59d23c}
  1572. nx OptIn
  1573.  
  1574. Windows-Startladeprogramm
  1575. -------------------------
  1576. Bezeichner {1098762f-0b8f-11e5-83b1-ea38dc59d23c}
  1577. device ramdisk=[C:]\Recovery\1098762f-0b8f-11e5-83b1-ea38dc59d23c\Winre.wim,{10987630-0b8f-11e5-83b1-ea38dc59d23c}
  1578. path \windows\system32\winload.exe
  1579. description Windows Recovery Environment
  1580. inherit {bootloadersettings}
  1581. osdevice ramdisk=[C:]\Recovery\1098762f-0b8f-11e5-83b1-ea38dc59d23c\Winre.wim,{10987630-0b8f-11e5-83b1-ea38dc59d23c}
  1582. systemroot \windows
  1583. nx OptIn
  1584. winpe Yes
  1585.  
  1586. Windows-Startladeprogramm
  1587. -------------------------
  1588. Bezeichner {10987632-0b8f-11e5-83b1-ea38dc59d23c}
  1589. device ramdisk=[E:]\Recovery\414b848f-a25e-11e4-89ef-c2b7f308843a\Winre.wim,{10987633-0b8f-11e5-83b1-ea38dc59d23c}
  1590. path \windows\system32\winload.exe
  1591. description Windows Recovery Environment (wiederhergestellt)
  1592. locale
  1593. osdevice ramdisk=[E:]\Recovery\414b848f-a25e-11e4-89ef-c2b7f308843a\Winre.wim,{10987633-0b8f-11e5-83b1-ea38dc59d23c}
  1594. systemroot \windows
  1595. winpe Yes
  1596.  
  1597. Wiederaufnahme aus dem Ruhezustand
  1598. ----------------------------------
  1599. Bezeichner {1098762d-0b8f-11e5-83b1-ea38dc59d23c}
  1600. device partition=C:
  1601. path \Windows\system32\winresume.exe
  1602. description Windows Resume Application
  1603. locale de-DE
  1604. inherit {resumeloadersettings}
  1605. filedevice partition=C:
  1606. filepath \hiberfil.sys
  1607. debugoptionenabled No
  1608.  
  1609. Wiederaufnahme aus dem Ruhezustand
  1610. ----------------------------------
  1611. Bezeichner {bf503b43-0b8e-11e5-a0d3-806e6f6e6963}
  1612. device partition=E:
  1613. path \Windows\system32\winresume.exe
  1614. description Windows 7 Ultimate (wiederhergestellt)
  1615. locale de-DE
  1616. inherit {resumeloadersettings}
  1617. filedevice partition=E:
  1618. filepath \hiberfil.sys
  1619. debugoptionenabled No
  1620.  
  1621. Windows-Speichertestprogramm
  1622. ----------------------------
  1623. Bezeichner {memdiag}
  1624. device partition=\Device\HarddiskVolume4
  1625. path \boot\memtest.exe
  1626. description Windows-Speicherdiagnose
  1627. locale de-DE
  1628. inherit {globalsettings}
  1629. badmemoryaccess Yes
  1630.  
  1631. EMS-Einstellungen
  1632. -----------------
  1633. Bezeichner {emssettings}
  1634. bootems Yes
  1635.  
  1636. Debuggereinstellungen
  1637. ---------------------
  1638. Bezeichner {dbgsettings}
  1639. debugtype Serial
  1640. debugport 1
  1641. baudrate 115200
  1642.  
  1643. RAM-Defekte
  1644. -----------
  1645. Bezeichner {badmemory}
  1646.  
  1647. Globale Einstellungen
  1648. ---------------------
  1649. Bezeichner {globalsettings}
  1650. inherit {dbgsettings}
  1651. {emssettings}
  1652. {badmemory}
  1653.  
  1654. Startladeprogramm-Einstellungen
  1655. -------------------------------
  1656. Bezeichner {bootloadersettings}
  1657. inherit {globalsettings}
  1658. {hypervisorsettings}
  1659.  
  1660. Hypervisoreinstellungen
  1661. -------------------
  1662. Bezeichner {hypervisorsettings}
  1663. hypervisordebugtype Serial
  1664. hypervisordebugport 1
  1665. hypervisorbaudrate 115200
  1666.  
  1667. Einstellungen zur Ladeprogrammfortsetzung
  1668. -----------------------------------------
  1669. Bezeichner {resumeloadersettings}
  1670. inherit {globalsettings}
  1671.  
  1672. Geräteoptionen
  1673. --------------
  1674. Bezeichner {10987630-0b8f-11e5-83b1-ea38dc59d23c}
  1675. description Ramdisk Options
  1676. ramdisksdidevice partition=C:
  1677. ramdisksdipath \Recovery\1098762f-0b8f-11e5-83b1-ea38dc59d23c\boot.sdi
  1678.  
  1679. Geräteoptionen
  1680. --------------
  1681. Bezeichner {10987633-0b8f-11e5-83b1-ea38dc59d23c}
  1682. ramdisksdidevice partition=E:
  1683. ramdisksdipath \Recovery\414b848f-a25e-11e4-89ef-c2b7f308843a\boot.sdi
  1684.  
  1685.  
  1686.  
  1687. LastRegBack: 2015-06-05 15:28
  1688.  
  1689. ==================== End of log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement