API tools faq
paste
Guest User

FRST

a guest
May 23rd, 2016
151
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 69.85 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:27-01-2016
  2. Ran by Anonymous (administrator) on DESKTOP-QBBTNUV (23-05-2016 17:29:22)
  3. Running from C:\Users\Anonymous\Desktop
  4. Loaded Profiles: Anonymous (Available Profiles: Anonymous)
  5. Platform: Windows 10 Pro Version 1511 (X64) Language: English (United States)
  6. Internet Explorer Version 11 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (AMD) C:\Windows\System32\atiesrxx.exe
  15. (AMD) C:\Windows\System32\atieclxx.exe
  16. (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
  17. (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
  18. () C:\Windows\syswow64\PnkBstrA.exe
  19. (Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe
  20. (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
  21. (Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
  22. (DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
  23. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  24. (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
  25. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
  26. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
  27. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
  28. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  29. (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
  30. (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
  31. (Flux Software LLC) C:\Users\Anonymous\AppData\Local\FluxSoftware\Flux\flux.exe
  32. (Bogdan Sharkov) C:\Program Files (x86)\Clownfish\Clownfish.exe
  33. (Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaUI.exe
  34. (ShareX Team) C:\Program Files\ShareX\ShareX.exe
  35. (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
  36. (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  37. (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
  38. (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
  39. (Microsoft Corporation) C:\Windows\System32\LockAppHost.exe
  40. (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
  41.  
  42.  
  43. ==================== Registry (Whitelisted) ===========================
  44.  
  45. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  46.  
  47. HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [912920 2016-03-11] (BlueStack Systems, Inc.)
  48. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-11-09] (Oracle Corporation)
  49. HKLM-x32\...\Run: [Aeria Ignite] => C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment)
  50. HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
  51. HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [23745808 2016-05-06] (Dropbox, Inc.)
  52. HKU\S-1-5-21-2813594079-2137593474-1899354593-1002\...\Run: [Dashlane] => C:\Users\Anonymous\AppData\Roaming\Dashlane\Dashlane.exe [227712 2016-02-29] ()
  53. HKU\S-1-5-21-2813594079-2137593474-1899354593-1002\...\Run: [DashlanePlugin] => C:\Users\Anonymous\AppData\Roaming\Dashlane\DashlanePlugin.exe [285568 2016-02-29] ()
  54. HKU\S-1-5-21-2813594079-2137593474-1899354593-1002\...\Run: [Spotify Web Helper] => C:\Users\Anonymous\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-02-19] (Spotify Ltd)
  55. HKU\S-1-5-21-2813594079-2137593474-1899354593-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2914896 2016-05-20] (Valve Corporation)
  56. HKU\S-1-5-21-2813594079-2137593474-1899354593-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [52148864 2016-04-29] (Skype Technologies S.A.)
  57. HKU\S-1-5-21-2813594079-2137593474-1899354593-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8619224 2016-01-15] (Piriform Ltd)
  58. HKU\S-1-5-21-2813594079-2137593474-1899354593-1002\...\Run: [uTorrent] => C:\Users\Anonymous\AppData\Roaming\uTorrent\uTorrent.exe [2094080 2016-03-30] (BitTorrent Inc.)
  59. HKU\S-1-5-21-2813594079-2137593474-1899354593-1002\...\Run: [f.lux] => C:\Users\Anonymous\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-23] (Flux Software LLC)
  60. HKU\S-1-5-21-2813594079-2137593474-1899354593-1002\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [912920 2016-03-11] (BlueStack Systems, Inc.)
  61. HKU\S-1-5-21-2813594079-2137593474-1899354593-1002\...\Run: [Chrome] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304 2016-05-11] (Google Inc.)
  62. HKU\S-1-5-21-2813594079-2137593474-1899354593-1002\...\Run: [Clownfish] => C:\Program Files (x86)\Clownfish\Clownfish.exe [1368816 2016-05-12] (Bogdan Sharkov)
  63. ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-05-06] (Dropbox, Inc.)
  64. ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-05-06] (Dropbox, Inc.)
  65. ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-05-06] (Dropbox, Inc.)
  66. ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-05-06] (Dropbox, Inc.)
  67. ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-05-06] (Dropbox, Inc.)
  68. ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-05-06] (Dropbox, Inc.)
  69. ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-05-06] (Dropbox, Inc.)
  70. ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-05-06] (Dropbox, Inc.)
  71. ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-05-06] (Dropbox, Inc.)
  72. ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-05-06] (Dropbox, Inc.)
  73. ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-05-06] (Dropbox, Inc.)
  74. ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-05-06] (Dropbox, Inc.)
  75. ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-05-06] (Dropbox, Inc.)
  76. ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-05-06] (Dropbox, Inc.)
  77. ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-05-06] (Dropbox, Inc.)
  78. ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-05-06] (Dropbox, Inc.)
  79. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass FF RunOnce.lnk [2016-03-16]
  80. ShortcutTarget: Install LastPass FF RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
  81. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk [2016-03-16]
  82. ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
  83. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ralink Wireless Utility.lnk [2016-03-29]
  84. ShortcutTarget: Ralink Wireless Utility.lnk -> C:\Program Files (x86)\Ralink\Common\RaUI.exe (Ralink Technology, Corp.)
  85. Startup: C:\Users\Anonymous\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ShareX.lnk [2016-03-27]
  86. ShortcutTarget: ShareX.lnk -> C:\Program Files\ShareX\ShareX.exe (ShareX Team)
  87. GroupPolicyScripts: Restriction <======= ATTENTION
  88. GroupPolicyScripts\User: Restriction <======= ATTENTION
  89. CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
  90.  
  91. ==================== Internet (Whitelisted) ====================
  92.  
  93. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  94.  
  95. Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
  96. Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
  97. Tcpip\..\Interfaces\{7e93a5a6-e41b-4ca8-a575-e333e3cf2844}: [DhcpNameServer] 192.168.1.1
  98.  
  99. Internet Explorer:
  100. ==================
  101. HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
  102. BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-11-30] (Oracle Corporation)
  103. BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2016-03-16] (LastPass)
  104. BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-30] (Oracle Corporation)
  105. BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll [2016-03-16] (LastPass)
  106. Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2016-03-16] (LastPass)
  107. Toolbar: HKLM-x32 - Dashlane Toolbar - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\Users\Anonymous\AppData\Roaming\Dashlane\ie\KWIEBar.dll [2016-02-29] (Dashlane)
  108. Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll [2016-03-16] (LastPass)
  109.  
  110. FireFox:
  111. ========
  112. FF ProfilePath: C:\Users\Anonymous\AppData\Roaming\Mozilla\Firefox\Profiles\egr63bqm.default
  113. FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-30] (Oracle Corporation)
  114. FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-30] (Oracle Corporation)
  115. FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2016-03-16] (LastPass)
  116. FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2016-03-16] (LastPass)
  117. FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
  118. FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll [2015-11-14] (Nexon)
  119. FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-11-23] (Nexon)
  120. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
  121. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
  122. FF Plugin HKU\S-1-5-21-2813594079-2137593474-1899354593-1002: @nsroblox.roblox.com/launcher -> C:\Users\Anonymous\AppData\Local\Roblox\Versions\version-44dbdc803ea548d8\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)
  123. FF Plugin HKU\S-1-5-21-2813594079-2137593474-1899354593-1002: @nsroblox.roblox.com/launcher64 -> C:\Users\Anonymous\AppData\Local\Roblox\Versions\version-44dbdc803ea548d8\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)
  124. FF Extension: Stylish - C:\Users\Anonymous\AppData\Roaming\Mozilla\Firefox\Profiles\egr63bqm.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2016-03-16]
  125. FF Extension: Greasemonkey - C:\Users\Anonymous\AppData\Roaming\Mozilla\Firefox\Profiles\egr63bqm.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-03-16]
  126. FF Extension: Owl - For comfortable reading - C:\Users\Anonymous\AppData\Roaming\Mozilla\Firefox\Profiles\egr63bqm.default\Extensions\@owl-comfortable-reading-addon.xpi [2016-03-16]
  127. FF Extension: Dark YouTube Theme - C:\Users\Anonymous\AppData\Roaming\Mozilla\Firefox\Profiles\egr63bqm.default\Extensions\jid1-hDf2iQXGiUjzGQ@jetpack.xpi [2016-03-16]
  128. FF Extension: LastPass - C:\Users\Anonymous\AppData\Roaming\Mozilla\Firefox\Profiles\egr63bqm.default\Extensions\support@lastpass.com [2016-03-23]
  129. FF Extension: FT DeepDark - C:\Users\Anonymous\AppData\Roaming\Mozilla\Firefox\Profiles\egr63bqm.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2016-03-16]
  130. FF Extension: Adblock Plus - C:\Users\Anonymous\AppData\Roaming\Mozilla\Firefox\Profiles\egr63bqm.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-03-16]
  131. FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-24] [not signed]
  132. FF HKU\S-1-5-21-2813594079-2137593474-1899354593-1002\...\Firefox\Extensions: [jetpack-extension@dashlane.com] - C:\Users\Anonymous\AppData\Roaming\Dashlane\3.5.2.94798\Extensions\JetPack_expanded\jetpack-extension@dashlane.com => not found
  133.  
  134. Chrome:
  135. =======
  136. CHR DefaultSearchKeyword: Default -> lp
  137. CHR Profile: C:\Users\Anonymous\AppData\Local\Google\Chrome\User Data\Default
  138. CHR Extension: (Google Drive) - C:\Users\Anonymous\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-14]
  139. CHR Extension: (Dark Skin for Youtube™) - C:\Users\Anonymous\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfeknfgchonpnofdjokchhdhdnddhglm [2016-05-02]
  140. CHR Extension: (YouTube) - C:\Users\Anonymous\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-14]
  141. CHR Extension: (Slinky Elegant) - C:\Users\Anonymous\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmanlajnpdncmhfkiccmbgeocgbncfln [2016-01-03]
  142. CHR Extension: (uBlock Origin) - C:\Users\Anonymous\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-05-02]
  143. CHR Extension: (Google Search) - C:\Users\Anonymous\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-14]
  144. CHR Extension: (Tampermonkey) - C:\Users\Anonymous\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2016-04-10]
  145. CHR Extension: (Dark Reader) - C:\Users\Anonymous\AppData\Local\Google\Chrome\User Data\Default\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2016-05-14]
  146. CHR Extension: (Stylish) - C:\Users\Anonymous\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2016-04-05]
  147. CHR Extension: (Authy) - C:\Users\Anonymous\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaedmjdfmmahhbjefcbgaolhhanlaolb [2016-02-03]
  148. CHR Extension: (LastPass: Free Password Manager) - C:\Users\Anonymous\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2016-05-20]
  149. CHR Extension: (Chrome Web Store Payments) - C:\Users\Anonymous\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
  150. CHR Extension: (Facebook Themes (Facebook Theme Gallery)) - C:\Users\Anonymous\AppData\Local\Google\Chrome\User Data\Default\Extensions\phejagnmddcjhjblnacgmejghffmhjfp [2016-01-03]
  151. CHR Extension: (Gmail) - C:\Users\Anonymous\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-14]
  152. CHR HKLM\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - hxxp://clients2.google.com/service/update2/crx
  153. CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - hxxp://clients2.google.com/service/update2/crx
  154.  
  155. ==================== Services (Whitelisted) ========================
  156.  
  157. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  158.  
  159. R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-03-04] (Advanced Micro Devices, Inc.) [File not signed]
  160. S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [437784 2016-03-11] (BlueStack Systems, Inc.)
  161. R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [417304 2016-03-11] (BlueStack Systems, Inc.)
  162. S3 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [880152 2016-03-11] (BlueStack Systems, Inc.)
  163. S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-02-27] (Dropbox, Inc.)
  164. S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-02-27] (Dropbox, Inc.)
  165. S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [3916368 2016-01-09] (INCA Internet Co., Ltd.)
  166. S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [38240 2016-02-01] (The OpenVPN Project)
  167. R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [66872 2016-04-28] ()
  168. S3 RaMediaServer; C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe [621632 2011-03-04] ()
  169. R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-12-03] (DEVGURU Co., LTD.)
  170. R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7032080 2016-05-12] (TeamViewer GmbH)
  171. R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
  172. R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
  173. S2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.1.6.0\WsAppService.exe [388608 2016-01-28] (Wondershare) [File not signed]
  174.  
  175. ===================== Drivers (Whitelisted) ==========================
  176.  
  177. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  178.  
  179. R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
  180. R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
  181. R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [223232 2014-12-21] (Advanced Micro Devices)
  182. R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [154680 2016-03-11] (BlueStack Systems)
  183. S3 EvolveVirtualAdapter; C:\Windows\System32\drivers\evolve.sys [21656 2015-11-28] (Echobit, LLC)
  184. R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (EZB Systems, Inc.)
  185. R3 netr28x; C:\Windows\System32\drivers\netr28x.sys [2504192 2015-10-30] (MediaTek Inc.)
  186. S3 ptun0901; C:\Windows\System32\drivers\ptun0901.sys [27136 2015-01-26] (The OpenVPN Project)
  187. S3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek )
  188. U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [24688 2016-05-20] ()
  189. S3 USBET; C:\Windows\system32\DRIVERS\ETdrv.sys [6422528 2014-05-16] (Etron) [File not signed]
  190. R1 VBoxUSBMon; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)
  191. S2 WCMVCAM; C:\Windows\system32\DRIVERS\wcmvcam64.sys [1071032 2012-04-15] (Windows (R) Win 7 DDK provider)
  192. S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
  193. R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
  194. R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
  195. S3 WsAudioDevice_383; C:\Windows\system32\drivers\VirtualAudio.sys [31080 2015-07-30] (Wondershare)
  196. S3 xhunter1; C:\WINDOWS\xhunter1.sys [36904 2016-04-10] (Wellbia.com Co., Ltd.)
  197. R1 XQHDrv; C:\Windows\system32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
  198. S3 xspirit; C:\WINDOWS\xspirit.sys [19176 2015-12-16] ()
  199. S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
  200. S3 taphss6; \SystemRoot\System32\drivers\taphss6.sys [X]
  201.  
  202. ==================== NetSvcs (Whitelisted) ===================
  203.  
  204. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  205.  
  206.  
  207. ==================== One Month Created files and folders ========
  208.  
  209. (If an entry is included in the fixlist, the file/folder will be moved.)
  210.  
  211. 2016-05-23 17:29 - 2016-05-23 17:30 - 00021171 _____ C:\Users\Anonymous\Desktop\FRST.txt
  212. 2016-05-22 20:25 - 2016-05-22 20:25 - 02383360 _____ (Farbar) C:\Users\Anonymous\Downloads\FRST64.exe
  213. 2016-05-21 17:28 - 2016-05-21 17:28 - 00005466 _____ C:\Users\Anonymous\Desktop\eset.txt
  214. 2016-05-20 22:56 - 2016-05-20 22:56 - 00813288 _____ (Shark Labs) C:\Users\Anonymous\Downloads\CFSetup430.exe
  215. 2016-05-20 22:56 - 2016-05-20 22:56 - 00001974 _____ C:\Users\Public\Desktop\Clownfish.lnk
  216. 2016-05-20 22:56 - 2016-05-20 22:56 - 00000000 ____D C:\Users\Anonymous\Documents\Skype Voice Records
  217. 2016-05-20 22:56 - 2016-05-20 22:56 - 00000000 ____D C:\Users\Anonymous\Documents\Clownfish Avatars
  218. 2016-05-20 22:56 - 2016-05-20 22:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clownfish
  219. 2016-05-20 22:56 - 2016-05-20 22:56 - 00000000 ____D C:\Program Files (x86)\Clownfish
  220. 2016-05-20 22:54 - 2016-05-20 22:54 - 02870984 _____ (ESET) C:\Users\Anonymous\Downloads\esetsmartinstaller_enu.exe
  221. 2016-05-20 22:54 - 2016-05-20 22:54 - 00000000 ____D C:\Program Files (x86)\ESET
  222. 2016-05-20 08:32 - 2016-05-20 15:33 - 00000000 ____D C:\ProgramData\RogueKiller
  223. 2016-05-20 08:32 - 2016-05-20 08:32 - 00024688 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
  224. 2016-05-20 08:22 - 2016-05-20 08:32 - 19840072 _____ C:\Users\Anonymous\Downloads\RogueKiller.exe
  225. 2016-05-19 22:55 - 2016-05-19 22:55 - 00198658 _____ C:\Users\Anonymous\Downloads\GMOD Lua Hack Pack.rar
  226. 2016-05-19 22:47 - 2016-05-19 22:48 - 00768583 _____ C:\Users\Anonymous\Downloads\itemstore_-_inventory_for_darkrp-2016-04-29 (1).zip
  227. 2016-05-19 17:56 - 2016-05-19 17:56 - 00000000 ____D C:\Users\Anonymous\Desktop\cac-release-20160428
  228. 2016-05-19 12:57 - 2016-05-19 12:57 - 00002043 _____ C:\Users\Anonymous\Desktop\JRT.txt
  229. 2016-05-19 12:54 - 2016-05-19 13:02 - 00000000 ____D C:\AdwCleaner
  230. 2016-05-19 12:51 - 2016-05-19 12:54 - 03651136 _____ C:\Users\Anonymous\Downloads\AdwCleaner.exe
  231. 2016-05-19 12:51 - 2016-05-19 12:53 - 01610816 _____ (Malwarebytes) C:\Users\Anonymous\Downloads\JRT (1).exe
  232. 2016-05-18 20:07 - 2016-05-18 20:07 - 00403572 _____ C:\Users\Anonymous\Downloads\8F6E0pNa.htm
  233. 2016-05-17 21:23 - 2016-05-17 21:23 - 00000000 ____D C:\Users\Anonymous\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Equalizer APO 1.1.1
  234. 2016-05-17 21:23 - 2016-05-17 21:23 - 00000000 ____D C:\Program Files\EqualizerAPO
  235. 2016-05-17 21:22 - 2016-05-17 21:23 - 07830033 _____ C:\Users\Anonymous\Downloads\EqualizerAPO64-1.1.1.exe
  236. 2016-05-16 17:12 - 2016-05-16 17:12 - 00980833 _____ C:\Users\Anonymous\Desktop\!cake_anti-cheat-2016-04-28.zip
  237. 2016-05-15 03:51 - 2016-05-15 03:51 - 691968839 _____ C:\Users\Anonymous\Downloads\CSS_Content_Addon-Jan2015.rar
  238. 2016-05-15 03:23 - 2016-05-15 03:41 - 1234605651 _____ C:\Users\Anonymous\Desktop\Dormant.rar
  239. 2016-05-15 03:13 - 2016-05-15 03:13 - 00036751 _____ C:\Users\Anonymous\Downloads\advanced_reporting_system-1.9 (1).zip
  240. 2016-05-15 02:39 - 2016-05-15 02:39 - 00046367 _____ C:\Users\Anonymous\Downloads\acrashscreen-1.03.00 (1).zip
  241. 2016-05-15 01:52 - 2014-12-24 15:09 - 00000000 ____D C:\Users\Anonymous\Desktop\robberysystem
  242. 2016-05-14 17:34 - 2016-05-14 17:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
  243. 2016-05-12 01:35 - 2016-05-12 01:35 - 00003452 _____ C:\Users\Anonymous\Downloads\restart timer V3.zip
  244. 2016-05-11 20:45 - 2016-05-11 20:45 - 06513888 _____ (Tim Kosse) C:\Users\Anonymous\Downloads\FileZilla_3.17.0.1_win64-setup.exe
  245. 2016-05-11 17:56 - 2016-05-11 17:56 - 00004983 _____ C:\Users\Anonymous\Downloads\xtfusg (1).zip
  246. 2016-05-11 03:23 - 2016-05-11 03:23 - 00005394 _____ C:\Users\Anonymous\Downloads\color.zip
  247. 2016-05-11 01:10 - 2016-05-11 01:10 - 00013404 _____ C:\Users\Anonymous\Downloads\awarn2(free) (1).zip
  248. 2016-05-11 01:09 - 2016-05-11 01:09 - 00000428 _____ C:\Users\Anonymous\Downloads\auto_warn_godmode.zip
  249. 2016-05-11 01:09 - 2016-05-11 01:09 - 00000391 _____ C:\Users\Anonymous\Downloads\auto_warn_noclip.zip
  250. 2016-05-11 00:02 - 2016-05-11 00:02 - 00000000 ____D C:\Users\Anonymous\Desktop\lua
  251. 2016-05-10 23:58 - 2016-05-11 02:03 - 258425856 _____ C:\Users\Anonymous\Desktop\sv.db
  252. 2016-05-10 23:58 - 2016-05-10 23:58 - 00001582 _____ C:\Users\Anonymous\Desktop\sammyservers_textscreens.txt
  253. 2016-05-10 23:58 - 2016-05-10 23:58 - 00000193 _____ C:\Users\Anonymous\Desktop\permaprops_config.txt
  254. 2016-05-10 23:52 - 2016-05-10 23:57 - 00000000 ____D C:\Users\Anonymous\Desktop\itemstore
  255. 2016-05-10 23:51 - 2016-05-10 23:53 - 00000000 ____D C:\Users\Anonymous\Desktop\_arcbank
  256. 2016-05-10 22:12 - 2016-04-23 05:31 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
  257. 2016-05-10 22:12 - 2016-04-23 05:30 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
  258. 2016-05-10 22:12 - 2016-04-23 05:28 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
  259. 2016-05-10 22:12 - 2016-04-23 05:26 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
  260. 2016-05-10 22:12 - 2016-04-23 05:25 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
  261. 2016-05-10 22:12 - 2016-04-23 05:22 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
  262. 2016-05-10 22:12 - 2016-04-23 05:20 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
  263. 2016-05-10 22:12 - 2016-04-23 05:20 - 18676224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
  264. 2016-05-10 22:12 - 2016-04-23 05:19 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
  265. 2016-05-10 22:12 - 2016-04-23 05:19 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
  266. 2016-05-10 22:12 - 2016-04-23 05:19 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
  267. 2016-05-10 22:12 - 2016-04-23 05:19 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
  268. 2016-05-10 22:12 - 2016-04-23 05:18 - 24604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
  269. 2016-05-10 22:12 - 2016-04-23 05:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
  270. 2016-05-10 22:12 - 2016-04-23 05:18 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
  271. 2016-05-10 22:12 - 2016-04-23 05:18 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
  272. 2016-05-10 22:12 - 2016-04-23 05:16 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
  273. 2016-05-10 22:12 - 2016-04-23 05:15 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
  274. 2016-05-10 22:12 - 2016-04-23 05:15 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
  275. 2016-05-10 22:12 - 2016-04-23 05:14 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
  276. 2016-05-10 22:12 - 2016-04-23 05:13 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
  277. 2016-05-10 22:12 - 2016-04-23 05:13 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
  278. 2016-05-10 22:12 - 2016-04-23 05:09 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
  279. 2016-05-10 22:12 - 2016-04-23 05:08 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
  280. 2016-05-10 22:12 - 2016-04-23 05:07 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
  281. 2016-05-10 22:11 - 2016-05-06 05:53 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdport.sys
  282. 2016-05-10 22:11 - 2016-05-06 05:05 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
  283. 2016-05-10 22:11 - 2016-05-06 05:03 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
  284. 2016-05-10 22:11 - 2016-05-06 04:53 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
  285. 2016-05-10 22:11 - 2016-05-06 04:49 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
  286. 2016-05-10 22:11 - 2016-05-06 04:44 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
  287. 2016-05-10 22:11 - 2016-05-06 04:43 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
  288. 2016-05-10 22:11 - 2016-05-06 04:23 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
  289. 2016-05-10 22:11 - 2016-04-30 07:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
  290. 2016-05-10 22:11 - 2016-04-30 07:31 - 03591168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
  291. 2016-05-10 22:11 - 2016-04-23 07:12 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
  292. 2016-05-10 22:11 - 2016-04-23 07:12 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
  293. 2016-05-10 22:11 - 2016-04-23 07:12 - 00713920 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
  294. 2016-05-10 22:11 - 2016-04-23 07:12 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
  295. 2016-05-10 22:11 - 2016-04-23 07:12 - 00294592 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
  296. 2016-05-10 22:11 - 2016-04-23 07:12 - 00190144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
  297. 2016-05-10 22:11 - 2016-04-23 07:12 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
  298. 2016-05-10 22:11 - 2016-04-23 07:12 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
  299. 2016-05-10 22:11 - 2016-04-23 06:28 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
  300. 2016-05-10 22:11 - 2016-04-23 06:28 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
  301. 2016-05-10 22:11 - 2016-04-23 06:26 - 00707608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
  302. 2016-05-10 22:11 - 2016-04-23 06:24 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
  303. 2016-05-10 22:11 - 2016-04-23 06:24 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
  304. 2016-05-10 22:11 - 2016-04-23 06:24 - 01819208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
  305. 2016-05-10 22:11 - 2016-04-23 06:24 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
  306. 2016-05-10 22:11 - 2016-04-23 06:24 - 00638816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
  307. 2016-05-10 22:11 - 2016-04-23 06:24 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
  308. 2016-05-10 22:11 - 2016-04-23 06:24 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
  309. 2016-05-10 22:11 - 2016-04-23 06:22 - 01161120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
  310. 2016-05-10 22:11 - 2016-04-23 06:18 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
  311. 2016-05-10 22:11 - 2016-04-23 06:13 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
  312. 2016-05-10 22:11 - 2016-04-23 06:13 - 00306832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
  313. 2016-05-10 22:11 - 2016-04-23 06:13 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
  314. 2016-05-10 22:11 - 2016-04-23 06:12 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
  315. 2016-05-10 22:11 - 2016-04-23 06:12 - 00451928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
  316. 2016-05-10 22:11 - 2016-04-23 06:12 - 00413536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
  317. 2016-05-10 22:11 - 2016-04-23 06:11 - 01092464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
  318. 2016-05-10 22:11 - 2016-04-23 06:11 - 00696672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
  319. 2016-05-10 22:11 - 2016-04-23 06:11 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
  320. 2016-05-10 22:11 - 2016-04-23 06:11 - 00390496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
  321. 2016-05-10 22:11 - 2016-04-23 06:11 - 00131424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufxsynopsys.sys
  322. 2016-05-10 22:11 - 2016-04-23 06:11 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
  323. 2016-05-10 22:11 - 2016-04-23 06:10 - 03673424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
  324. 2016-05-10 22:11 - 2016-04-23 06:10 - 02919832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
  325. 2016-05-10 22:11 - 2016-04-23 06:10 - 00330072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
  326. 2016-05-10 22:11 - 2016-04-23 06:09 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
  327. 2016-05-10 22:11 - 2016-04-23 06:09 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
  328. 2016-05-10 22:11 - 2016-04-23 06:09 - 05240960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
  329. 2016-05-10 22:11 - 2016-04-23 06:09 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
  330. 2016-05-10 22:11 - 2016-04-23 06:09 - 00569744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
  331. 2016-05-10 22:11 - 2016-04-23 06:09 - 00565600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
  332. 2016-05-10 22:11 - 2016-04-23 06:09 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
  333. 2016-05-10 22:11 - 2016-04-23 06:09 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
  334. 2016-05-10 22:11 - 2016-04-23 06:09 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
  335. 2016-05-10 22:11 - 2016-04-23 06:08 - 06605504 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
  336. 2016-05-10 22:11 - 2016-04-23 06:08 - 04515256 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
  337. 2016-05-10 22:11 - 2016-04-23 06:08 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
  338. 2016-05-10 22:11 - 2016-04-23 06:07 - 01848072 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
  339. 2016-05-10 22:11 - 2016-04-23 06:07 - 01536088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
  340. 2016-05-10 22:11 - 2016-04-23 06:07 - 00204048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
  341. 2016-05-10 22:11 - 2016-04-23 06:07 - 00183904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
  342. 2016-05-10 22:11 - 2016-04-23 06:06 - 00291360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
  343. 2016-05-10 22:11 - 2016-04-23 06:02 - 00188256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
  344. 2016-05-10 22:11 - 2016-04-23 06:01 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
  345. 2016-05-10 22:11 - 2016-04-23 06:01 - 00650304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
  346. 2016-05-10 22:11 - 2016-04-23 06:01 - 00619296 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll
  347. 2016-05-10 22:11 - 2016-04-23 06:01 - 00577368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
  348. 2016-05-10 22:11 - 2016-04-23 06:01 - 00522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
  349. 2016-05-10 22:11 - 2016-04-23 06:01 - 00513368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll
  350. 2016-05-10 22:11 - 2016-04-23 06:01 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
  351. 2016-05-10 22:11 - 2016-04-23 06:01 - 00217440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
  352. 2016-05-10 22:11 - 2016-04-23 06:00 - 01776768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
  353. 2016-05-10 22:11 - 2016-04-23 06:00 - 01594920 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
  354. 2016-05-10 22:11 - 2016-04-23 06:00 - 01522152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
  355. 2016-05-10 22:11 - 2016-04-23 06:00 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
  356. 2016-05-10 22:11 - 2016-04-23 06:00 - 01372304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
  357. 2016-05-10 22:11 - 2016-04-23 06:00 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
  358. 2016-05-10 22:11 - 2016-04-23 06:00 - 00550656 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll
  359. 2016-05-10 22:11 - 2016-04-23 06:00 - 00453472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll
  360. 2016-05-10 22:11 - 2016-04-23 06:00 - 00058208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwminit.dll
  361. 2016-05-10 22:11 - 2016-04-23 05:56 - 00534872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
  362. 2016-05-10 22:11 - 2016-04-23 05:39 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
  363. 2016-05-10 22:11 - 2016-04-23 05:35 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
  364. 2016-05-10 22:11 - 2016-04-23 05:34 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
  365. 2016-05-10 22:11 - 2016-04-23 05:34 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll
  366. 2016-05-10 22:11 - 2016-04-23 05:34 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
  367. 2016-05-10 22:11 - 2016-04-23 05:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
  368. 2016-05-10 22:11 - 2016-04-23 05:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
  369. 2016-05-10 22:11 - 2016-04-23 05:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
  370. 2016-05-10 22:11 - 2016-04-23 05:33 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe
  371. 2016-05-10 22:11 - 2016-04-23 05:32 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
  372. 2016-05-10 22:11 - 2016-04-23 05:32 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
  373. 2016-05-10 22:11 - 2016-04-23 05:32 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
  374. 2016-05-10 22:11 - 2016-04-23 05:31 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
  375. 2016-05-10 22:11 - 2016-04-23 05:30 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
  376. 2016-05-10 22:11 - 2016-04-23 05:30 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
  377. 2016-05-10 22:11 - 2016-04-23 05:29 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
  378. 2016-05-10 22:11 - 2016-04-23 05:29 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
  379. 2016-05-10 22:11 - 2016-04-23 05:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\filecrypt.sys
  380. 2016-05-10 22:11 - 2016-04-23 05:29 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
  381. 2016-05-10 22:11 - 2016-04-23 05:29 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
  382. 2016-05-10 22:11 - 2016-04-23 05:29 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll
  383. 2016-05-10 22:11 - 2016-04-23 05:29 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe
  384. 2016-05-10 22:11 - 2016-04-23 05:29 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
  385. 2016-05-10 22:11 - 2016-04-23 05:28 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
  386. 2016-05-10 22:11 - 2016-04-23 05:28 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
  387. 2016-05-10 22:11 - 2016-04-23 05:28 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
  388. 2016-05-10 22:11 - 2016-04-23 05:28 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
  389. 2016-05-10 22:11 - 2016-04-23 05:28 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
  390. 2016-05-10 22:11 - 2016-04-23 05:27 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
  391. 2016-05-10 22:11 - 2016-04-23 05:27 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
  392. 2016-05-10 22:11 - 2016-04-23 05:26 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
  393. 2016-05-10 22:11 - 2016-04-23 05:26 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
  394. 2016-05-10 22:11 - 2016-04-23 05:25 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
  395. 2016-05-10 22:11 - 2016-04-23 05:25 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
  396. 2016-05-10 22:11 - 2016-04-23 05:25 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
  397. 2016-05-10 22:11 - 2016-04-23 05:25 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
  398. 2016-05-10 22:11 - 2016-04-23 05:24 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
  399. 2016-05-10 22:11 - 2016-04-23 05:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
  400. 2016-05-10 22:11 - 2016-04-23 05:24 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
  401. 2016-05-10 22:11 - 2016-04-23 05:24 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
  402. 2016-05-10 22:11 - 2016-04-23 05:24 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
  403. 2016-05-10 22:11 - 2016-04-23 05:24 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
  404. 2016-05-10 22:11 - 2016-04-23 05:24 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
  405. 2016-05-10 22:11 - 2016-04-23 05:23 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
  406. 2016-05-10 22:11 - 2016-04-23 05:23 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
  407. 2016-05-10 22:11 - 2016-04-23 05:23 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
  408. 2016-05-10 22:11 - 2016-04-23 05:23 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrowserSettingSync.dll
  409. 2016-05-10 22:11 - 2016-04-23 05:23 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
  410. 2016-05-10 22:11 - 2016-04-23 05:22 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
  411. 2016-05-10 22:11 - 2016-04-23 05:22 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
  412. 2016-05-10 22:11 - 2016-04-23 05:21 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
  413. 2016-05-10 22:11 - 2016-04-23 05:21 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
  414. 2016-05-10 22:11 - 2016-04-23 05:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
  415. 2016-05-10 22:11 - 2016-04-23 05:20 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
  416. 2016-05-10 22:11 - 2016-04-23 05:20 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
  417. 2016-05-10 22:11 - 2016-04-23 05:20 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
  418. 2016-05-10 22:11 - 2016-04-23 05:20 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
  419. 2016-05-10 22:11 - 2016-04-23 05:20 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
  420. 2016-05-10 22:11 - 2016-04-23 05:19 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
  421. 2016-05-10 22:11 - 2016-04-23 05:19 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
  422. 2016-05-10 22:11 - 2016-04-23 05:19 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BrowserSettingSync.dll
  423. 2016-05-10 22:11 - 2016-04-23 05:18 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
  424. 2016-05-10 22:11 - 2016-04-23 05:18 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
  425. 2016-05-10 22:11 - 2016-04-23 05:18 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
  426. 2016-05-10 22:11 - 2016-04-23 05:18 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
  427. 2016-05-10 22:11 - 2016-04-23 05:18 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
  428. 2016-05-10 22:11 - 2016-04-23 05:18 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
  429. 2016-05-10 22:11 - 2016-04-23 05:18 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
  430. 2016-05-10 22:11 - 2016-04-23 05:18 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
  431. 2016-05-10 22:11 - 2016-04-23 05:18 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
  432. 2016-05-10 22:11 - 2016-04-23 05:17 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
  433. 2016-05-10 22:11 - 2016-04-23 05:17 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
  434. 2016-05-10 22:11 - 2016-04-23 05:17 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
  435. 2016-05-10 22:11 - 2016-04-23 05:17 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
  436. 2016-05-10 22:11 - 2016-04-23 05:16 - 01319424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
  437. 2016-05-10 22:11 - 2016-04-23 05:16 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
  438. 2016-05-10 22:11 - 2016-04-23 05:15 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
  439. 2016-05-10 22:11 - 2016-04-23 05:15 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
  440. 2016-05-10 22:11 - 2016-04-23 05:15 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
  441. 2016-05-10 22:11 - 2016-04-23 05:15 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
  442. 2016-05-10 22:11 - 2016-04-23 05:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
  443. 2016-05-10 22:11 - 2016-04-23 05:14 - 13383168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
  444. 2016-05-10 22:11 - 2016-04-23 05:14 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
  445. 2016-05-10 22:11 - 2016-04-23 05:14 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
  446. 2016-05-10 22:11 - 2016-04-23 05:14 - 00647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
  447. 2016-05-10 22:11 - 2016-04-23 05:14 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
  448. 2016-05-10 22:11 - 2016-04-23 05:14 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
  449. 2016-05-10 22:11 - 2016-04-23 05:14 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
  450. 2016-05-10 22:11 - 2016-04-23 05:13 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
  451. 2016-05-10 22:11 - 2016-04-23 05:13 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
  452. 2016-05-10 22:11 - 2016-04-23 05:13 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
  453. 2016-05-10 22:11 - 2016-04-23 05:12 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
  454. 2016-05-10 22:11 - 2016-04-23 05:10 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
  455. 2016-05-10 22:11 - 2016-04-23 05:10 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
  456. 2016-05-10 22:11 - 2016-04-23 05:09 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
  457. 2016-05-10 22:11 - 2016-04-23 05:08 - 05324288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
  458. 2016-05-10 22:11 - 2016-04-23 05:07 - 02598912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
  459. 2016-05-10 22:11 - 2016-04-23 05:07 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
  460. 2016-05-10 22:11 - 2016-04-23 05:07 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
  461. 2016-05-10 22:11 - 2016-04-23 05:06 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
  462. 2016-05-10 22:11 - 2016-04-23 05:05 - 05502976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
  463. 2016-05-10 22:11 - 2016-04-23 05:05 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
  464. 2016-05-10 22:11 - 2016-04-23 05:05 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
  465. 2016-05-10 22:11 - 2016-04-23 05:05 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
  466. 2016-05-10 22:11 - 2016-04-23 05:05 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
  467. 2016-05-10 22:11 - 2016-04-23 05:05 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
  468. 2016-05-10 22:11 - 2016-04-23 05:05 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
  469. 2016-05-10 22:11 - 2016-04-23 05:05 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
  470. 2016-05-10 22:11 - 2016-04-23 05:04 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
  471. 2016-05-10 22:11 - 2016-04-23 05:04 - 01731072 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
  472. 2016-05-10 22:11 - 2016-04-23 05:03 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
  473. 2016-05-10 22:11 - 2016-04-23 05:03 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
  474. 2016-05-10 22:11 - 2016-04-23 05:03 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
  475. 2016-05-10 22:11 - 2016-04-23 05:03 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
  476. 2016-05-10 22:11 - 2016-04-23 05:03 - 02000896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
  477. 2016-05-10 22:11 - 2016-04-23 05:03 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
  478. 2016-05-10 22:11 - 2016-04-23 05:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
  479. 2016-05-10 22:11 - 2016-04-23 05:02 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
  480. 2016-05-10 22:11 - 2016-04-23 05:02 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
  481. 2016-05-10 22:11 - 2016-04-23 05:01 - 04775424 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
  482. 2016-05-10 22:11 - 2016-04-23 05:00 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
  483. 2016-05-10 22:11 - 2016-04-23 05:00 - 00984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
  484. 2016-05-10 22:11 - 2016-04-23 04:45 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
  485. 2016-05-10 22:11 - 2016-04-23 03:10 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
  486. 2016-05-10 22:11 - 2016-04-23 03:10 - 00002186 _____ C:\WINDOWS\system32\AppxProvisioning.xml
  487. 2016-05-10 22:11 - 2016-04-18 23:30 - 00002186 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml
  488. 2016-05-10 19:16 - 2016-05-15 03:10 - 00000000 ____D C:\Users\Anonymous\Desktop\gmas
  489. 2016-05-10 19:16 - 2016-05-10 19:16 - 00055881 _____ C:\Users\Anonymous\Downloads\gmad_-_easy_addon_extractor_2.zip
  490. 2016-05-10 19:11 - 2016-05-10 19:11 - 07548888 _____ (Sublime HQ Pty Ltd ) C:\Users\Anonymous\Downloads\Sublime Text Build 3103 Setup.exe
  491. 2016-05-10 19:11 - 2016-05-10 19:11 - 00000000 ____D C:\Program Files (x86)\Sublime Text 3
  492. 2016-05-10 19:05 - 2016-05-10 19:05 - 00742893 _____ ( ) C:\Users\Anonymous\Downloads\WindowsGrep23.exe
  493. 2016-05-10 19:05 - 2016-05-10 19:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Grep
  494. 2016-05-10 19:05 - 2016-05-10 19:05 - 00000000 ____D C:\Program Files (x86)\Windows Grep
  495. 2016-05-10 17:46 - 2016-05-10 23:26 - 00000000 ____D C:\Users\Anonymous\Desktop\Dormant
  496. 2016-05-09 07:59 - 2016-05-14 17:59 - 00000000 ____D C:\Users\Anonymous\AppData\Roaming\HLSW
  497. 2016-05-09 07:59 - 2016-05-09 07:59 - 00001024 _____ C:\Users\Anonymous\Desktop\HLSW.lnk
  498. 2016-05-09 07:59 - 2016-05-09 07:59 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HLSW
  499. 2016-05-09 07:59 - 2016-05-09 07:59 - 00000000 ___SD C:\Program Files (x86)\HLSW
  500. 2016-05-09 07:58 - 2016-05-09 07:58 - 11613796 _____ (Stripf Software ) C:\Users\Anonymous\Downloads\hlsw_1_4_0_2_setup.exe
  501. 2016-05-08 03:57 - 2016-05-08 03:57 - 00000000 ____D C:\Users\Anonymous\crystaload
  502. 2016-05-08 03:31 - 2016-05-08 03:31 - 00079254 _____ C:\Users\Anonymous\Downloads\ULib-v2_60.zip
  503. 2016-05-08 02:55 - 2016-05-08 02:55 - 00046366 _____ C:\Users\Anonymous\Downloads\acrashscreen-1.03.00.zip
  504. 2016-05-08 02:28 - 2016-05-08 02:28 - 00051248 _____ C:\Users\Anonymous\Downloads\acrashscreen-2.00.00_(beta).zip
  505. 2016-05-08 02:28 - 2016-05-08 02:28 - 00036750 _____ C:\Users\Anonymous\Downloads\advanced_reporting_system-1.9.zip
  506. 2016-05-08 00:40 - 2016-05-21 12:42 - 00000468 _____ C:\Users\Anonymous\Desktop\numbers.txt
  507. 2016-05-07 23:27 - 2016-05-18 17:17 - 00002747 _____ C:\Users\Anonymous\Desktop\Authy.lnk
  508. 2016-05-07 16:37 - 2016-05-07 16:37 - 00000000 ____D C:\Users\Anonymous\progressweapon_base_v1
  509. 2016-05-07 16:37 - 2016-05-07 16:37 - 00000000 ____D C:\Users\Anonymous\pickpocket
  510. 2016-05-07 13:12 - 2016-05-07 13:13 - 00852535 _____ C:\Users\Anonymous\Downloads\cac-release-20160331.zip
  511. 2016-05-06 14:40 - 2016-05-06 14:40 - 00379417 _____ C:\Users\Anonymous\Downloads\New Gmod Hack 2015 Updated!.rar
  512. 2016-05-06 14:28 - 2016-05-06 14:28 - 00020553 _____ C:\Users\Anonymous\Downloads\TrafficHack_mpgh.net.rar
  513. 2016-05-06 14:28 - 2016-05-06 14:28 - 00020553 _____ C:\Users\Anonymous\Downloads\TrafficHack_mpgh.net (1).rar
  514. 2016-05-06 14:12 - 2016-05-06 14:13 - 00038400 _____ C:\Users\Anonymous\Downloads\gmcl_cvar3_win32.dll
  515. 2016-05-06 14:12 - 2016-05-06 14:12 - 00000291 _____ C:\Users\Anonymous\Downloads\bypass.lua
  516. 2016-05-05 13:24 - 2016-05-05 13:24 - 00004131 _____ C:\Users\Anonymous\Downloads\Pickpocket.rar
  517. 2016-05-04 23:16 - 2016-05-04 23:17 - 00003262 _____ C:\Users\Anonymous\Downloads\money-weapon-pickpocket-swep.zip
  518. 2016-05-04 21:49 - 2016-05-07 13:47 - 00000574 _____ C:\Users\Anonymous\Desktop\shit to try.txt
  519. 2016-05-02 18:54 - 2016-05-02 18:54 - 00000258 __RSH C:\Users\Anonymous\ntuser.pol
  520. 2016-05-02 17:07 - 2016-05-02 17:07 - 00000652 __RSH C:\ProgramData\ntuser.pol
  521. 2016-05-02 14:47 - 2016-05-02 14:47 - 00066955 _____ C:\Users\Anonymous\Desktop\^C04BC41258E8E09DC9BDC98AAC124CBBEB46EECA77610A5871^pimgpsh_fullsize_distr.jpg
  522. 2016-05-02 14:47 - 2016-05-02 14:47 - 00007369 _____ C:\Users\Anonymous\Desktop\^C04BC41258E8E09DC9BDC98AAC124CBBEB46EECA77610A5871^pimgpsh_thumbnail_win_distr.jpg
  523. 2016-05-02 14:18 - 2016-05-02 14:18 - 00000762 ____N C:\Users\Anonymous\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechnicLauncher.lnk
  524. 2016-04-30 13:29 - 2016-04-30 13:29 - 00772182 _____ C:\Users\Anonymous\Downloads\itemstore_-_inventory_for_darkrp-2016-04-29.zip
  525. 2016-04-29 21:16 - 2016-04-29 21:16 - 00000000 ____D C:\Users\Anonymous\normal_lock
  526. 2016-04-29 21:16 - 2016-04-29 21:16 - 00000000 ____D C:\Users\Anonymous\gold_lock
  527. 2016-04-29 21:16 - 2016-04-29 21:16 - 00000000 ____D C:\Users\Anonymous\easy_lock
  528. 2016-04-29 20:57 - 2016-04-29 20:57 - 00000000 ____D C:\Users\Anonymous\advancedlockpicking
  529. 2016-04-29 20:56 - 2016-04-29 20:56 - 00000255 _____ C:\Users\Anonymous\statistics_6055.lua
  530. 2016-04-29 20:56 - 2016-04-29 20:56 - 00000237 _____ C:\Users\Anonymous\handcufffiles.lua
  531. 2016-04-29 20:56 - 2016-04-29 20:56 - 00000000 ____D C:\Users\Anonymous\darkrp_handcuffs243
  532. 2016-04-29 20:56 - 2016-04-29 20:56 - 00000000 ____D C:\Users\Anonymous\darkrp_handcuffs
  533. 2016-04-29 20:55 - 2016-04-29 20:55 - 00000000 ____D C:\Users\Anonymous\spy
  534. 2016-04-29 20:52 - 2016-04-29 20:53 - 00000000 ____D C:\Users\Anonymous\lockpickshity
  535. 2016-04-29 20:47 - 2016-04-29 20:47 - 00963776 _____ C:\Users\Anonymous\handcuffs.vvd
  536. 2016-04-29 20:47 - 2016-04-29 20:47 - 00174906 _____ C:\Users\Anonymous\handcuffs.dx80.vtx
  537. 2016-04-29 20:47 - 2016-04-29 20:47 - 00174544 _____ C:\Users\Anonymous\handcuffs.dx90.vtx
  538. 2016-04-29 20:47 - 2016-04-29 20:47 - 00174200 _____ C:\Users\Anonymous\handcuffs.sw.vtx
  539. 2016-04-29 20:47 - 2016-04-29 20:47 - 00064832 _____ C:\Users\Anonymous\w_handcuffs.vvd
  540. 2016-04-29 20:47 - 2016-04-29 20:47 - 00025928 _____ C:\Users\Anonymous\handcuffs.mdl
  541. 2016-04-29 20:47 - 2016-04-29 20:47 - 00016417 _____ C:\Users\Anonymous\w_handcuffs.dx90.vtx
  542. 2016-04-29 20:47 - 2016-04-29 20:47 - 00016417 _____ C:\Users\Anonymous\w_handcuffs.dx80.vtx
  543. 2016-04-29 20:47 - 2016-04-29 20:47 - 00016393 _____ C:\Users\Anonymous\w_handcuffs.sw.vtx
  544. 2016-04-29 20:47 - 2016-04-29 20:47 - 00003016 _____ C:\Users\Anonymous\w_handcuffs.mdl
  545. 2016-04-29 20:47 - 2016-04-29 20:47 - 00000725 _____ C:\Users\Anonymous\w_handcuffs.phy
  546. 2016-04-29 20:40 - 2016-04-29 20:40 - 00004354 _____ C:\Users\Anonymous\shared.lua
  547. 2016-04-29 20:27 - 2016-04-29 20:27 - 00000261 _____ C:\Users\Anonymous\addon.txt
  548. 2016-04-29 15:31 - 2016-04-29 15:32 - 04227889 _____ C:\Users\Anonymous\Downloads\Call+of+Duty+World+at+War+by+Savemygame.rar
  549. 2016-04-29 15:28 - 2016-04-29 15:28 - 87527379 _____ C:\Users\Anonymous\Downloads\nazi_zombie_five.zip
  550. 2016-04-29 14:40 - 2016-04-29 14:47 - 17278696 _____ (Activision ) C:\Users\Anonymous\Downloads\CoDWaW-1.6-1.7-PatchSetup.exe
  551. 2016-04-29 14:18 - 2016-04-29 14:18 - 00000000 ____D C:\Users\Anonymous\AppData\Local\Activision
  552. 2016-04-29 13:57 - 2016-04-29 13:57 - 00000000 ____D C:\Program Files (x86)\Activision
  553. 2016-04-29 13:24 - 2016-04-29 13:41 - 12503253 _____ (Activision ) C:\Users\Anonymous\Downloads\CoDWaW-1.2-PatchSetup.exe
  554. 2016-04-29 13:11 - 2016-04-29 13:11 - 00355378 _____ C:\Users\Anonymous\Downloads\Project X 2.0.zip
  555. 2016-04-28 17:40 - 2016-04-28 17:40 - 00000741 _____ C:\Users\Anonymous\aimbot.lua
  556. 2016-04-28 13:37 - 2016-04-28 13:37 - 00003664 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
  557. 2016-04-28 13:26 - 2016-04-28 13:39 - 00000000 ____D C:\Users\Anonymous\AppData\Roaming\.technic
  558. 2016-04-28 13:26 - 2016-04-28 13:26 - 04734664 _____ () C:\Users\Anonymous\Desktop\TechnicLauncher.exe
  559. 2016-04-28 09:45 - 2016-04-28 09:45 - 00000000 ____D C:\Users\Anonymous\AppData\Local\PunkBuster
  560. 2016-04-28 09:32 - 2016-04-29 15:46 - 00111928 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
  561. 2016-04-28 09:32 - 2016-04-29 14:04 - 00682280 _____ C:\WINDOWS\SysWOW64\pbsvc.exe
  562. 2016-04-28 09:32 - 2016-04-28 09:32 - 00066872 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
  563. 2016-04-28 08:28 - 2016-04-28 08:28 - 00000000 ____D C:\Users\Anonymous\Downloads\Call.Of.Duty.World.At.War-RELOADED
  564. 2016-04-28 08:27 - 2016-04-28 08:27 - 00036238 _____ C:\Users\Anonymous\Downloads\Call.Of.Duty.World.At.War-font.color=#ccc--RELOADED--font-.torrent
  565. 2016-04-27 21:41 - 2016-04-27 21:41 - 01894247 _____ C:\Users\Anonymous\Downloads\Le Fluffie App.rar
  566. 2016-04-27 21:30 - 2016-04-27 21:30 - 02317212 _____ C:\Users\Anonymous\Downloads\XB36Hazards_Installer (3).zip
  567. 2016-04-27 21:27 - 2016-04-27 21:31 - 00001886 ____N C:\Users\Anonymous\Desktop\Anarchy.lnk
  568. 2016-04-27 21:27 - 2016-04-27 21:31 - 00000000 ____D C:\Program Files\Anarchy
  569. 2016-04-27 21:25 - 2016-04-27 21:25 - 02317212 _____ C:\Users\Anonymous\Downloads\XB36Hazards_Installer (2).zip
  570. 2016-04-27 21:23 - 2016-04-27 21:27 - 02317194 _____ C:\Users\Anonymous\Downloads\XB36Hazards_Installer (1).zip
  571. 2016-04-27 21:19 - 2016-04-27 21:19 - 00000850 _____ C:\Users\Anonymous\Downloads\Boombox-2016-04-27.zip
  572. 2016-04-27 17:27 - 2016-04-27 17:27 - 00006782 _____ C:\Users\Anonymous\Downloads\safe-zone-protect-your-players (1).zip
  573. 2016-04-27 16:42 - 2016-04-27 16:42 - 00433434 _____ C:\Users\Anonymous\Downloads\Gmod_Script_Bundle.zip
  574. 2016-04-27 13:21 - 2016-04-27 13:21 - 00983896 _____ C:\Users\Anonymous\Downloads\!cake_anti-cheat-2016-03-31.zip
  575. 2016-04-26 20:48 - 2016-04-26 20:48 - 00091529 _____ C:\Users\Anonymous\Downloads\Wyozi-2016-04-26.zip
  576. 2016-04-26 20:48 - 2016-04-26 20:48 - 00022318 _____ C:\Users\Anonymous\Downloads\Cuffs-2016-04-26.zip
  577. 2016-04-26 20:07 - 2016-04-26 20:08 - 06522120 _____ (Tim Kosse) C:\Users\Anonymous\Downloads\FileZilla_3.17.0_win64-setup.exe
  578. 2016-04-26 19:55 - 2016-04-26 19:55 - 00045425 _____ C:\Users\Anonymous\Downloads\download (1).htm
  579. 2016-04-26 18:19 - 2016-05-18 20:51 - 00000000 ____D C:\Users\Anonymous\AppData\Local\GVSE
  580. 2016-04-26 18:19 - 2016-04-26 18:19 - 00002050 ____N C:\Users\Anonymous\Desktop\GTA V Save Editor.lnk
  581. 2016-04-26 18:19 - 2016-04-26 18:19 - 00000000 ____D C:\Program Files\GTA V Save Editor
  582. 2016-04-26 18:15 - 2016-04-26 18:15 - 02317212 _____ C:\Users\Anonymous\Downloads\XB36Hazards_Installer.zip
  583. 2016-04-24 22:54 - 2016-04-24 23:04 - 614544905 _____ C:\Users\Anonymous\Downloads\5d167f60f8ad48ef51a660cd3baa92e4.zip
  584. 2016-04-24 22:14 - 2016-04-24 22:14 - 00512833 _____ C:\Users\Anonymous\Downloads\download.htm
  585. 2016-04-24 18:07 - 2016-04-24 18:07 - 00060489 _____ C:\Users\Anonymous\Downloads\enhanced_meth_lab-1.0.8.zip
  586.  
  587. ==================== One Month Modified files and folders ========
  588.  
  589. (If an entry is included in the fixlist, the file/folder will be moved.)
  590.  
  591. 2016-05-23 17:30 - 2015-11-14 06:01 - 00000000 ____D C:\Users\Anonymous\AppData\Roaming\Skype
  592. 2016-05-23 17:29 - 2016-01-27 22:31 - 00000000 ____D C:\FRST
  593. 2016-05-22 21:32 - 2016-02-27 23:27 - 00000946 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
  594. 2016-05-22 21:01 - 2015-12-25 04:41 - 00000938 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
  595. 2016-05-22 20:36 - 2015-12-10 13:34 - 00000000 ____D C:\Program Files (x86)\Steam
  596. 2016-05-22 20:34 - 2016-02-27 23:27 - 00000942 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
  597. 2016-05-22 20:34 - 2015-12-25 04:41 - 00000934 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
  598. 2016-05-22 20:27 - 2015-11-14 04:52 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
  599. 2016-05-22 20:07 - 2015-11-28 14:53 - 00004176 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{7387FE85-DB4A-405C-ADEC-335A465C33AE}
  600. 2016-05-22 13:06 - 2015-12-13 20:35 - 00000000 ___RD C:\Program Files (x86)\Skype
  601. 2016-05-22 13:06 - 2015-11-14 06:01 - 00000000 ____D C:\ProgramData\Skype
  602. 2016-05-22 11:46 - 2015-11-14 04:37 - 00000000 ____D C:\WINDOWS\AppReadiness
  603. 2016-05-21 12:39 - 2015-11-14 05:12 - 00000000 ____D C:\Users\Anonymous
  604. 2016-05-20 23:40 - 2015-12-03 13:46 - 00000000 ____D C:\Users\Anonymous\AppData\Roaming\TS3Client
  605. 2016-05-20 23:30 - 2015-11-28 20:19 - 00002250 ____H C:\Users\Anonymous\Documents\Default.rdp
  606. 2016-05-20 17:39 - 2015-11-14 04:37 - 00000000 ____D C:\WINDOWS\system32\NDF
  607. 2016-05-20 17:25 - 2015-11-14 04:51 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
  608. 2016-05-20 17:25 - 2015-11-14 04:24 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
  609. 2016-05-20 17:21 - 2015-11-14 06:03 - 00000000 ____D C:\Program Files (x86)\TeamViewer
  610. 2016-05-20 17:07 - 2015-11-14 04:35 - 00000000 ____D C:\WINDOWS\INF
  611. 2016-05-20 15:42 - 2015-12-01 09:13 - 00000000 ____D C:\Users\Anonymous\AppData\Local\CrashDumps
  612. 2016-05-19 18:15 - 2015-11-14 05:32 - 00000000 ____D C:\Users\Anonymous\AppData\Local\Comms
  613. 2016-05-19 13:07 - 2016-02-27 23:30 - 00000000 ___RD C:\Users\Anonymous\Dropbox
  614. 2016-05-18 20:48 - 2015-11-14 04:57 - 00879220 _____ C:\WINDOWS\system32\PerfStringBackup.INI
  615. 2016-05-18 20:00 - 2015-11-15 15:08 - 00000000 ____D C:\Users\Anonymous\Documents\ShareX
  616. 2016-05-17 15:41 - 2016-02-06 19:25 - 00000000 ____D C:\Program Files\CCleaner
  617. 2016-05-16 08:21 - 2016-02-27 23:27 - 00000000 ____D C:\Users\Anonymous\AppData\Local\Dropbox
  618. 2016-05-15 13:59 - 2015-11-30 18:45 - 00000000 ____D C:\Users\Anonymous\AppData\Roaming\FileZilla
  619. 2016-05-15 04:00 - 2016-03-21 20:06 - 00001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
  620. 2016-05-15 04:00 - 2016-03-21 20:06 - 00001028 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
  621. 2016-05-14 18:16 - 2015-11-14 04:30 - 00000000 ____D C:\WINDOWS\CbsTemp
  622. 2016-05-14 17:35 - 2016-02-27 23:27 - 00000000 ____D C:\Program Files (x86)\Dropbox
  623. 2016-05-13 13:32 - 2015-11-14 04:37 - 00000000 ____D C:\WINDOWS\rescache
  624. 2016-05-12 13:48 - 2015-11-14 05:13 - 00000000 __RHD C:\Users\Public\AccountPictures
  625. 2016-05-12 13:18 - 2015-11-14 04:37 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
  626. 2016-05-12 13:18 - 2015-11-14 04:37 - 00000000 ____D C:\WINDOWS\system32\oobe
  627. 2016-05-12 13:18 - 2015-11-14 04:37 - 00000000 ____D C:\WINDOWS\system32\en-GB
  628. 2016-05-12 13:18 - 2015-11-14 04:37 - 00000000 ____D C:\WINDOWS\system32\appraiser
  629. 2016-05-12 13:18 - 2015-11-14 04:37 - 00000000 ____D C:\WINDOWS\Provisioning
  630. 2016-05-12 13:18 - 2015-11-14 04:37 - 00000000 ____D C:\WINDOWS\bcastdvr
  631. 2016-05-12 13:18 - 2015-11-14 04:37 - 00000000 ____D C:\Program Files\Windows Journal
  632. 2016-05-12 13:17 - 2015-11-14 04:37 - 00015703 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
  633. 2016-05-11 20:57 - 2015-11-14 04:38 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
  634. 2016-05-11 20:57 - 2015-11-14 04:38 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
  635. 2016-05-11 16:38 - 2015-12-09 00:36 - 00000000 ____D C:\WINDOWS\system32\MRT
  636. 2016-05-11 16:30 - 2015-12-09 00:36 - 139319312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
  637. 2016-05-11 00:56 - 2015-12-25 04:41 - 00003996 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
  638. 2016-05-11 00:56 - 2015-12-25 04:41 - 00003764 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
  639. 2016-05-10 21:49 - 2015-11-15 23:53 - 00000000 ____D C:\Users\Anonymous\AppData\Roaming\TeamViewer
  640. 2016-05-10 19:11 - 2016-04-09 22:16 - 00001154 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sublime Text 3.lnk
  641. 2016-05-08 23:12 - 2015-11-13 23:30 - 00000000 ____D C:\Users\Anonymous\Desktop\Background Images
  642. 2016-05-02 17:07 - 2015-11-14 04:37 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
  643. 2016-05-02 17:06 - 2016-03-16 01:18 - 00002032 ____R C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfох.lnk
  644. 2016-05-02 17:06 - 2016-02-03 15:26 - 00000000 ____D C:\Users\Anonymous\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
  645. 2016-05-02 17:06 - 2016-02-03 15:26 - 00000000 ____D C:\Users\Anonymous\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
  646. 2016-05-02 17:06 - 2016-01-01 22:29 - 00001947 ____R C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Оpеrа.lnk
  647. 2016-05-02 17:06 - 2015-12-25 04:52 - 00002295 ____R C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk
  648. 2016-05-02 17:05 - 2016-03-16 01:18 - 00002020 ____R C:\Users\Public\Desktop\Моzillа Firеfох.lnk
  649. 2016-05-02 17:05 - 2016-03-16 01:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
  650. 2016-05-02 17:05 - 2016-01-01 22:29 - 00001935 ____R C:\Users\Public\Desktop\Оpеrа.lnk
  651. 2016-05-02 17:05 - 2016-01-01 22:28 - 00000000 ____D C:\Program Files (x86)\Opera
  652. 2016-05-02 17:05 - 2015-12-25 04:52 - 00002283 ____R C:\Users\Public\Desktop\Gооglе Сhrоmе.lnk
  653. 2016-04-30 17:27 - 2016-02-03 23:01 - 00000000 ____D C:\Program Files (x86)\NCSOFT
  654. 2016-04-30 17:26 - 2016-02-03 23:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSOFT
  655. 2016-04-30 17:26 - 2015-11-14 05:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
  656. 2016-04-30 17:21 - 2015-12-11 20:13 - 00000000 ____D C:\Users\Anonymous\Desktop\Games
  657. 2016-04-30 17:19 - 2015-11-26 22:39 - 00000000 ____D C:\Users\Anonymous\Desktop\Random Images
  658. 2016-04-28 23:56 - 2016-02-16 17:14 - 00000000 ____D C:\Users\Anonymous\AppData\Roaming\uTorrent
  659. 2016-04-28 08:28 - 2016-03-31 15:51 - 00000000 ____D C:\Users\Anonymous\AppData\LocalLow\uTorrent
  660. 2016-04-28 08:15 - 2016-03-12 16:35 - 00000000 ____D C:\Users\Anonymous\AppData\Roaming\Spotydl
  661. 2016-04-28 08:14 - 2016-03-23 16:54 - 00000000 ____D C:\Program Files (x86)\AbiWord
  662. 2016-04-27 13:14 - 2015-11-30 18:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
  663. 2016-04-27 13:14 - 2015-11-30 18:45 - 00000000 ____D C:\Program Files\FileZilla FTP Client
  664.  
  665. ==================== Files in the root of some directories =======
  666.  
  667. 2016-03-16 00:36 - 2016-03-16 00:36 - 29895388 _____ () C:\Program Files (x86)\4KDownload.rar
  668. 2016-03-20 16:04 - 2016-03-20 16:04 - 2045804 _____ () C:\Program Files (x86)\FileZilla Server.rar
  669. 2015-12-03 04:18 - 2016-03-16 02:09 - 21572120 _____ (LastPass) C:\Program Files (x86)\Common Files\lpuninstall.exe
  670. 2016-01-10 01:37 - 2016-01-10 01:37 - 0000000 ___SH () C:\Users\Anonymous\AppData\Local\LumaEmu
  671. 2016-04-05 20:21 - 2016-04-05 20:21 - 0001499 _____ () C:\Users\Anonymous\AppData\Local\recently-used.xbel
  672. 2016-03-25 17:37 - 2016-04-13 22:41 - 0007607 _____ () C:\Users\Anonymous\AppData\Local\Resmon.ResmonCfg
  673. 2015-11-14 04:47 - 2015-11-14 04:47 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
  674.  
  675. Some files in TEMP:
  676. ====================
  677. C:\Users\Anonymous\AppData\Local\Temp\dllnt_dump.dll
  678. C:\Users\Anonymous\AppData\Local\Temp\SkypeSetup.exe
  679.  
  680.  
  681. ==================== Bamital & volsnap =================
  682.  
  683. (There is no automatic fix for files that do not pass verification.)
  684.  
  685. C:\WINDOWS\system32\winlogon.exe => File is digitally signed
  686. C:\WINDOWS\system32\wininit.exe => File is digitally signed
  687. C:\WINDOWS\explorer.exe => File is digitally signed
  688. C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
  689. C:\WINDOWS\system32\svchost.exe => File is digitally signed
  690. C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
  691. C:\WINDOWS\system32\services.exe => File is digitally signed
  692. C:\WINDOWS\system32\User32.dll => File is digitally signed
  693. C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
  694. C:\WINDOWS\system32\userinit.exe => File is digitally signed
  695. C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
  696. C:\WINDOWS\system32\rpcss.dll => File is digitally signed
  697. C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
  698. C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
  699. C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
  700.  
  701.  
  702. LastRegBack: 2016-05-17 09:18
  703.  
  704. ==================== End of FRST.txt ============================
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!