API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Sep 19th, 2017
997
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 100.62 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-09-2017 01
  2. Ran by Vondy (administrator) on VONDY-PC (19-09-2017 15:09:39)
  3. Running from C:\Users\Vondy\Downloads
  4. Loaded Profiles: Vondy (Available Profiles: Vondy)
  5. Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
  6. Internet Explorer Version 11 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
  15. (Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
  16. (Comodo) C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
  17. (COMODO) C:\Program Files (x86)\Comodo\Internet Security Essentials\isesrv.exe
  18. (Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
  19. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  20. (Bitdefender) C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe
  21. (Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsserv.exe
  22. (Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe
  23. (Windscribe Limited) C:\Program Files (x86)\Windscribe\WindscribeService.exe
  24. (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
  25. (Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdagent.exe
  26. (Intel Corporation) C:\Windows\System32\hkcmd.exe
  27. (Intel Corporation) C:\Windows\System32\igfxtray.exe
  28. (Intel Corporation) C:\Windows\System32\igfxsrvc.exe
  29. (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
  30. (Intel Corporation) C:\Windows\System32\igfxpers.exe
  31. (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
  32. (WinZip Computing, S.L.) C:\Program Files\WinZip\FAHWindow64.exe
  33. (QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe
  34. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  35. (Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.10\Lightshot.exe
  36. (QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe
  37. (Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
  38. (COMODO) C:\Program Files (x86)\Comodo\Internet Security Essentials\vkise.exe
  39. (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
  40. (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
  41. (Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ICM-Service.exe
  42. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  43. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  44. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  45. (Discord Inc.) C:\Users\Vondy\AppData\Local\Discord\app-0.0.298\Discord.exe
  46. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  47. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  48. (Discord Inc.) C:\Users\Vondy\AppData\Local\Discord\app-0.0.298\Discord.exe
  49. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  50. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  51. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  52.  
  53. ==================== Registry (Whitelisted) ====================
  54.  
  55. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  56.  
  57. HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
  58. HKLM-x32\...\Run: [KeyScrambler] => C:\Program Files (x86)\KeyScrambler\keyscrambler.exe [515600 2017-04-22] (QFX Software Corporation)
  59. HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2017-04-11] ()
  60. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
  61. HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [145208 2017-04-14] (Check Point Software Technologies Ltd.)
  62. HKLM-x32\...\Run: [IseUI] => C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe [3632848 2017-08-07] (COMODO)
  63. Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
  64. HKU\S-1-5-21-943429571-515038988-1173784223-1000\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [799368 2017-06-05] (Sandboxie Holdings, LLC)
  65. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FAH.lnk [2017-07-20]
  66. ShortcutTarget: FAH.lnk -> C:\Program Files\WinZip\FAHConsole.exe (WinZip Computing, S.L.)
  67. GroupPolicy: Restriction <==== ATTENTION
  68.  
  69. ==================== Internet (Whitelisted) ====================
  70.  
  71. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  72.  
  73. Tcpip\Parameters: [DhcpNameServer] 208.180.42.68 208.180.42.100
  74. Tcpip\..\Interfaces\{E85B42F9-803E-403B-A53B-7524A1086397}: [DhcpNameServer] 208.180.42.68 208.180.42.100
  75.  
  76. Internet Explorer:
  77. ==================
  78. HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
  79. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
  80. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
  81. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
  82. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
  83. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
  84. HKU\S-1-5-21-943429571-515038988-1173784223-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
  85. SearchScopes: HKU\S-1-5-21-943429571-515038988-1173784223-1000 -> {FDC907E7-1939-4A7D-96CB-4EE43960C03B} URL = hxxps://search.yahoo.com/search?p={searchTerms}&intl=us&fr=chrf-iryus&type=ypi_znlrm_00_00_ie
  86. BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll [2017-08-09] (Oracle Corporation)
  87. BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-09] (Oracle Corporation)
  88. Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2016-01-04] (Belarc, Inc.)
  89.  
  90. FireFox:
  91. ========
  92. FF DefaultProfile: t6ti7zlb.default-1498532686076
  93. FF ProfilePath: C:\Users\Vondy\AppData\Roaming\NETGATE Technologies\BlackHawk\Profiles\y89ktzbp.default [2017-06-09]
  94. FF ProfilePath: C:\Users\Vondy\AppData\Roaming\Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 [2017-09-18]
  95. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> backup.ftp", "46.5.252.70"
  96. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> backup.ftp_port", 1080
  97. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> backup.socks", "46.5.252.70"
  98. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> backup.socks_port", 1080
  99. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> backup.ssl", "46.5.252.70"
  100. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> backup.ssl_port", 1080
  101. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> ftp", "104.224.137.44"
  102. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> ftp_port", 8118
  103. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> http", "104.224.137.44"
  104. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> http_port", 8118
  105. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> share_proxy_settings", true
  106. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> socks", "104.224.137.44"
  107. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> socks_port", 8118
  108. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> ssl", "104.224.137.44"
  109. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> ssl_port", 8118
  110. FF NetworkProxy: Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076 -> type", 1
  111. FF Extension: (Search and New Tab by Yahoo) - C:\Users\Vondy\AppData\Roaming\Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076\Extensions\jid1-16aeif9OQIRKxA@jetpack.xpi [2017-09-17]
  112. FF Extension: (uBlock Origin) - C:\Users\Vondy\AppData\Roaming\Mozilla\Firefox\Profiles\t6ti7zlb.default-1498532686076\Extensions\uBlock0@raymondhill.net.xpi [2017-07-21]
  113. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-12] ()
  114. FF Plugin: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-09] (Oracle Corporation)
  115. FF Plugin: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-09] (Oracle Corporation)
  116. FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
  117. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-12] ()
  118. FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
  119. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-01] (Google Inc.)
  120. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-01] (Google Inc.)
  121.  
  122. Chrome:
  123. =======
  124. CHR DefaultProfile: Profile 4
  125. CHR DefaultSearchURL: Profile 4 -> hxxps://search.yahoo.com/search?p={searchTerms}&fr=chrf-iryus&type=ypi_znlrm_00_00_chr
  126. CHR DefaultSearchKeyword: Profile 4 -> Yahoo
  127. CHR DefaultSuggestURL: Profile 4 -> hxxps://search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10
  128. CHR Profile: C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Default [2017-09-01]
  129. CHR Extension: (MultiLogin) - C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nknfhhmhoflkcijaodalbncnmidocced [2017-05-11]
  130. CHR Extension: (Chrome Web Store Payments) - C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-18]
  131. CHR Extension: (Web Server for Chrome) - C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofhbbkphhbklhfoeikjpcbhemlocgigb [2017-04-18]
  132. CHR Extension: (Gmail) - C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-04-18]
  133. CHR Extension: (Chrome Media Router) - C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-18]
  134. CHR Profile: C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-08-27]
  135. CHR Extension: (Google Sheets) - C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-05-10]
  136. CHR Extension: (Google Docs Offline) - C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-05-10]
  137. CHR Extension: (MultiLogin) - C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nknfhhmhoflkcijaodalbncnmidocced [2017-05-10]
  138. CHR Extension: (Chrome Web Store Payments) - C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-05-10]
  139. CHR Extension: (Gmail) - C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-05-10]
  140. CHR Extension: (Chrome Media Router) - C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-10]
  141. CHR Profile: C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Profile 4 [2017-09-19]
  142. CHR Extension: (Chrome Web Store Payments) - C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-18]
  143. CHR Extension: (Chrome Media Router) - C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-18]
  144. CHR Profile: C:\Users\Vondy\AppData\Local\Google\Chrome\User Data\System Profile [2017-09-18]
  145. CHR HKU\S-1-5-21-943429571-515038988-1173784223-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [hpacaholihkepnhgeeiipghhgonbhdfb] - hxxps://clients2.google.com/service/update2/crx
  146.  
  147. ==================== Services (Whitelisted) ====================
  148.  
  149. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  150.  
  151. R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2273432 2017-08-08] (Comodo)
  152. R2 isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [133840 2017-08-07] (COMODO)
  153. R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
  154. R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1254736 2017-04-11] (Bitdefender)
  155. S3 QFXUpdateService; C:\Program Files (x86)\KeyScrambler\x64\QFXUpdateService.exe [86544 2017-04-22] ()
  156. R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [198792 2017-06-05] (Sandboxie Holdings, LLC)
  157. R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-08-29] (TeamViewer GmbH)
  158. R2 updatesrv; C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe [100392 2017-08-29] (Bitdefender)
  159. R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [4107680 2017-04-14] (Check Point Software Technologies Ltd.)
  160. R2 vsserv; C:\Program Files\Bitdefender Antivirus Free\vsserv.exe [100392 2017-08-29] (Bitdefender)
  161. R2 vsservppl; C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe [100392 2017-08-29] (Bitdefender)
  162. S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
  163. R2 WindscribeService; C:\Program Files (x86)\Windscribe\WindscribeService.exe [71272 2017-05-09] (Windscribe Limited)
  164. S3 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [114936 2016-11-01] (Check Point Software Technologies, Ltd.)
  165. R2 ZoneAlarm ICM Service; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ICM-Service.exe [1058616 2017-04-14] (Check Point Software Technologies Ltd.)
  166.  
  167. ===================== Drivers (Whitelisted) ======================
  168.  
  169. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  170.  
  171. R0 atc; C:\Windows\System32\DRIVERS\atc.sys [950160 2017-06-23] (BitDefender S.R.L. Bucharest, ROMANIA)
  172. R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1763744 2017-08-29] (BitDefender)
  173. S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [878072 2016-09-20] (BitDefender)
  174. R1 bdfwfpf; C:\Program Files\Bitdefender Antivirus Free\bdfwfpf.sys [127312 2016-02-22] (BitDefender LLC)
  175. R3 edrsensor; C:\Windows\System32\DRIVERS\edrsensor.sys [259880 2017-07-24] (BitDefender S.R.L. Bucharest, ROMANIA)
  176. R0 gzflt; C:\Windows\System32\drivers\gzflt.sys [187688 2017-07-24] (BitDefender LLC)
  177. R1 isedrv; C:\Windows\system32\drivers\isedrv.sys [50856 2017-08-07] (COMODO)
  178. R3 KeyScrambler; C:\Windows\System32\drivers\keyscrambler.sys [233248 2017-02-19] (QFX Software Corporation)
  179. R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [253856 2017-09-19] (Malwarebytes)
  180. R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [207496 2017-06-05] (Sandboxie Holdings, LLC)
  181. R3 tapwindscribe0901; C:\Windows\System32\DRIVERS\tapwindscribe0901.sys [45560 2017-03-29] (The OpenVPN Project)
  182. S3 tenCapture; C:\Windows\System32\DRIVERS\tenCapture.sys [23736 2012-07-20] (Hajo Krabbenhöft)
  183. R2 trufos; C:\Windows\System32\drivers\trufos.sys [520032 2016-06-22] (BitDefender S.R.L.)
  184. S3 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [196040 2017-09-13] (Oracle Corporation)
  185. R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [461240 2017-04-13] (Check Point Software Technologies Ltd.)
  186. U3 iswSvc; no ImagePath
  187. S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
  188.  
  189. ========================== Drivers MD5 =======================
  190.  
  191. C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
  192. C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
  193. C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
  194. C:\Windows\system32\drivers\adp94xx.sys ==> MD5 is legit
  195. C:\Windows\system32\drivers\adpahci.sys ==> MD5 is legit
  196. C:\Windows\system32\drivers\adpu320.sys ==> MD5 is legit
  197. C:\Windows\system32\drivers\afd.sys 0DC2A9882540DEA4A55B08785E09D8FC
  198. C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
  199. C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
  200. C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
  201. C:\Windows\system32\drivers\amdk8.sys ==> MD5 is legit
  202. C:\Windows\system32\drivers\amdppm.sys ==> MD5 is legit
  203. C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49
  204. C:\Windows\system32\drivers\amdsbs.sys ==> MD5 is legit
  205. C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048
  206. C:\Windows\system32\drivers\appid.sys 086CA47573FAF282C93BE3416E1B6D65
  207. C:\Windows\system32\drivers\arc.sys ==> MD5 is legit
  208. C:\Windows\system32\drivers\arcsas.sys ==> MD5 is legit
  209. C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
  210. C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
  211. C:\Windows\System32\DRIVERS\atc.sys 6E7122FFFF7BEFB1DC256234E02CE1B9
  212. C:\Windows\System32\DRIVERS\avc3.sys 8AFE08FD37D6F27C54A13118FD167786
  213. C:\Windows\System32\DRIVERS\avckf.sys 09A3015AEA14CF9A4ECDE1CEA6AFE0AA
  214. C:\Windows\system32\drivers\bxvbda.sys ==> MD5 is legit
  215. C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit
  216. C:\Program Files\Bitdefender Antivirus Free\bdfwfpf.sys BCC56866F6A9BD35B2BC4787787C1F32
  217. C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit
  218. C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
  219. C:\Windows\System32\DRIVERS\bowser.sys ABA3984C822E4D3F889699912D85D6C5
  220. C:\Windows\system32\drivers\BrFiltLo.sys ==> MD5 is legit
  221. C:\Windows\system32\drivers\BrFiltUp.sys ==> MD5 is legit
  222. C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
  223. C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
  224. C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
  225. C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
  226. C:\Windows\system32\drivers\bthmodem.sys ==> MD5 is legit
  227. C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
  228. C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
  229. C:\Windows\system32\drivers\circlass.sys ==> MD5 is legit
  230. C:\Windows\System32\CLFS.sys 3963FEC1892368DD500E6ED1F5C286CE
  231. C:\Windows\system32\drivers\CmBatt.sys ==> MD5 is legit
  232. C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
  233. C:\Windows\System32\Drivers\cng.sys A98CED39AD91B445E2E442A9BD67E8B4
  234. C:\Windows\system32\drivers\compbatt.sys ==> MD5 is legit
  235. C:\Windows\System32\DRIVERS\CompositeBus.sys ==> MD5 is legit
  236. C:\Windows\system32\drivers\crcdisk.sys ==> MD5 is legit
  237. C:\Windows\System32\drivers\csc.sys ==> MD5 is legit
  238. C:\Windows\System32\Drivers\dfsc.sys 9B38580063D281A99E68EF5813022A5F
  239. C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
  240. C:\Windows\System32\drivers\disk.sys 616387BBD83372220B09DE95F4E67BBC
  241. C:\Windows\system32\drivers\dmvsc.sys 5DB085A8A6600BE6401F2B24EECB5415
  242. C:\Windows\system32\drivers\drmkaud.sys 26FE888505E5A945B0536AF9A2A27A6F
  243. C:\Windows\System32\drivers\dxgkrnl.sys 5CEF80AE869336376F550ECAE91E424A
  244. C:\Windows\System32\DRIVERS\e1e6232e.sys 099E01A94167CA8BDA2CF72037AD0E28
  245. C:\Windows\system32\drivers\evbda.sys ==> MD5 is legit
  246. C:\Windows\System32\DRIVERS\edrsensor.sys C6D3E9E9CCBE85B074E39A29E6977072
  247. C:\Windows\system32\drivers\elxstor.sys ==> MD5 is legit
  248. C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
  249. C:\Windows\System32\Drivers\exfat.sys 7E45F8B117419ABA3BB26579F6E70324
  250. C:\Windows\System32\Drivers\fastfat.sys 6EDFA237D25433C03F42FBFDB16BDD24
  251. C:\Windows\system32\drivers\fdc.sys ==> MD5 is legit
  252. C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
  253. C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
  254. C:\Windows\system32\drivers\flpydisk.sys ==> MD5 is legit
  255. C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
  256. C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
  257. C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B
  258. C:\Windows\System32\DRIVERS\fvevol.sys 8F6322049018354F45F05A2FD2D4E5E0
  259. C:\Windows\system32\drivers\gagp30kx.sys ==> MD5 is legit
  260. C:\Windows\System32\drivers\gzflt.sys DD528E0A0C57B02A6FC311AA05D430C2
  261. C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
  262. C:\Windows\System32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A
  263. C:\Windows\System32\DRIVERS\HDAudBus.sys ==> MD5 is legit
  264. C:\Windows\system32\drivers\HidBatt.sys ==> MD5 is legit
  265. C:\Windows\system32\drivers\hidbth.sys ==> MD5 is legit
  266. C:\Windows\system32\drivers\hidir.sys ==> MD5 is legit
  267. C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit
  268. C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
  269. C:\Windows\System32\drivers\HTTP.sys CF5C9BD985120781200D35FD445D0BD5
  270. C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
  271. C:\Windows\system32\drivers\i8042prt.sys ==> MD5 is legit
  272. C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366
  273. C:\Windows\System32\DRIVERS\igdkmd64.sys 24CC43ECDEEFD4C19FBBEE4951B647F1
  274. C:\Windows\system32\drivers\iirsp.sys ==> MD5 is legit
  275. C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
  276. C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit
  277. C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
  278. C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
  279. C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
  280. C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
  281. C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
  282. C:\Windows\system32\drivers\msiscsi.sys 96BB922A0981BC7432C8CF52B5410FE6
  283. C:\Windows\system32\drivers\isedrv.sys 6B3A4144928A5DB3C57C6BD728365AB2
  284. C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit
  285. C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit
  286. C:\Windows\System32\drivers\keyscrambler.sys B1264F1A93F18CDE125FB18339CD6E87
  287. C:\Windows\System32\Drivers\ksecdd.sys 7635071BC8EDBC8B501F4EF2B0A82820
  288. C:\Windows\System32\Drivers\ksecpkg.sys 033937305C234FC8215A4692193AA43E
  289. C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
  290. C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
  291. C:\Windows\system32\drivers\lsi_fc.sys ==> MD5 is legit
  292. C:\Windows\system32\drivers\lsi_sas.sys ==> MD5 is legit
  293. C:\Windows\system32\drivers\lsi_sas2.sys ==> MD5 is legit
  294. C:\Windows\system32\drivers\lsi_scsi.sys ==> MD5 is legit
  295. C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
  296. C:\Windows\System32\drivers\MBAMSwissArmy.sys C3549BE8C1FE4ECBEE21DAD3378F6CD0
  297. C:\Windows\system32\drivers\megasas.sys ==> MD5 is legit
  298. C:\Windows\system32\drivers\MegaSR.sys ==> MD5 is legit
  299. C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
  300. C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
  301. C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
  302. C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
  303. C:\Windows\System32\drivers\mountmgr.sys 072D8646E23ECF8A3F5F0157017B4DB6
  304. C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
  305. C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
  306. C:\Windows\system32\drivers\mrxdav.sys 98DB1790F0A584E0A2528B92B052417F
  307. C:\Windows\System32\DRIVERS\mrxsmb.sys F77E8ABD746B93B9B4F9C13250302C47
  308. C:\Windows\System32\DRIVERS\mrxsmb10.sys FF1B4AF370481C25B078FEAEE5455EDC
  309. C:\Windows\System32\DRIVERS\mrxsmb20.sys 125B7C9D7372711EDBD5BFEE2E33CE60
  310. C:\Windows\system32\drivers\msahci.sys ==> MD5 is legit
  311. C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
  312. C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
  313. C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
  314. C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
  315. C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
  316. C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
  317. C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
  318. C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
  319. C:\Windows\System32\DRIVERS\mssmbios.sys ==> MD5 is legit
  320. C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
  321. C:\Windows\system32\drivers\MTConfig.sys ==> MD5 is legit
  322. C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
  323. C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
  324. C:\Windows\System32\drivers\ndis.sys F7309F42555F8AAB7144A51A1F2585B0
  325. C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
  326. C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
  327. C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
  328. C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
  329. C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
  330. C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
  331. C:\Windows\System32\DRIVERS\netbt.sys 734837208CAFD6E0959A7A0333C95C9D
  332. C:\Windows\system32\drivers\nfrd960.sys ==> MD5 is legit
  333. C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit
  334. C:\Windows\System32\drivers\nsiproxy.sys BE313E566EEA2A4B7F9AAC9782A567D4
  335. C:\Windows\System32\Drivers\Ntfs.sys 7FD5A7FB8F55254E9AF5666C653AF3CA
  336. C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
  337. C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
  338. C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
  339. C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
  340. C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
  341. C:\Windows\System32\DRIVERS\parport.sys ==> MD5 is legit
  342. C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
  343. C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
  344. C:\Windows\System32\drivers\pciide.sys ==> MD5 is legit
  345. C:\Windows\system32\drivers\pcmcia.sys ==> MD5 is legit
  346. C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
  347. C:\Windows\System32\drivers\peauth.sys EA4D67448BE493D543F1730D6CD04694
  348. C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
  349. C:\Windows\system32\drivers\processr.sys ==> MD5 is legit
  350. C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
  351. C:\Windows\system32\drivers\ql2300.sys ==> MD5 is legit
  352. C:\Windows\system32\drivers\ql40xx.sys ==> MD5 is legit
  353. C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
  354. C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
  355. C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
  356. C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
  357. C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
  358. C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
  359. C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
  360. C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 is legit
  361. C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
  362. C:\Windows\System32\drivers\rdpdr.sys ==> MD5 is legit
  363. C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
  364. C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
  365. C:\Windows\System32\drivers\rdpvideominiport.sys 313F68E1A3E6345A4F47A36B07062F34
  366. C:\Windows\System32\Drivers\RDPWD.sys FE571E088C2D83619D2D48D4E961BF41
  367. C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
  368. C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
  369. C:\Windows\system32\drivers\vms3cap.sys ==> MD5 is legit
  370. C:\Program Files\Sandboxie\SbieDrv.sys DB45229EC585D2477C833E25D0645381
  371. C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
  372. C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
  373. C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
  374. C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit
  375. C:\Windows\System32\DRIVERS\serial.sys ==> MD5 is legit
  376. C:\Windows\system32\drivers\sermouse.sys ==> MD5 is legit
  377. C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
  378. C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
  379. C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
  380. C:\Windows\system32\drivers\sfloppy.sys ==> MD5 is legit
  381. C:\Windows\system32\drivers\SiSRaid2.sys ==> MD5 is legit
  382. C:\Windows\system32\drivers\sisraid4.sys ==> MD5 is legit
  383. C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
  384. C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
  385. C:\Windows\System32\DRIVERS\srv.sys 9FDD80B815A7F29554FF6E0D77A7F60D
  386. C:\Windows\System32\DRIVERS\srv2.sys D62B353400F2C1FD0A5E93F8BDA83715
  387. C:\Windows\System32\DRIVERS\srvnet.sys CAEAA7FF473E33DB8E5B72AB145907D3
  388. C:\Windows\system32\drivers\stexstor.sys ==> MD5 is legit
  389. C:\Windows\System32\drivers\vmstorfl.sys ==> MD5 is legit
  390. C:\Windows\system32\drivers\storvsc.sys ==> MD5 is legit
  391. C:\Windows\System32\DRIVERS\swenum.sys ==> MD5 is legit
  392. C:\Windows\System32\DRIVERS\tapwindscribe0901.sys 267B8DAF6D74CCE8C16C06C0940EB6E8
  393. C:\Windows\System32\drivers\tcpip.sys 7FB36A0A036ADDACE0A868E4A43C1C27
  394. C:\Windows\System32\DRIVERS\tcpip.sys 7FB36A0A036ADDACE0A868E4A43C1C27
  395. C:\Windows\System32\drivers\tcpipreg.sys 7FE5586314EE7D6AA8483264A089E5AF
  396. C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
  397. C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
  398. C:\Windows\System32\DRIVERS\tdx.sys 4DD986720F7CB7A8A5D1226793097B9A
  399. C:\Windows\System32\DRIVERS\tenCapture.sys 96FEB48B5140153092882F19F05256F6
  400. C:\Windows\System32\DRIVERS\termdd.sys ==> MD5 is legit
  401. C:\Windows\System32\drivers\trufos.sys AA129EFF64E41947F6A46388A7F5F966
  402. C:\Windows\System32\DRIVERS\tssecsrv.sys 19BEDA57F3E0A06B8D5EB6D619BD5624
  403. C:\Windows\System32\drivers\tsusbflt.sys E9981ECE8D894CEF7038FD1D040EB426
  404. C:\Windows\system32\drivers\TsUsbGD.sys 9CC2CCAE8A84820EAECB886D477CBCB8
  405. C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
  406. C:\Windows\system32\drivers\uagp35.sys ==> MD5 is legit
  407. C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
  408. C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
  409. C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit
  410. C:\Windows\system32\drivers\umpass.sys ==> MD5 is legit
  411. C:\Windows\System32\DRIVERS\usbccgp.sys 28B81917A195B67617AF7DCF4DFE5736
  412. C:\Windows\system32\drivers\usbcir.sys 80B0F7D5CCF86CEB5D402EAAF61FEC31
  413. C:\Windows\system32\drivers\usbehci.sys B626F048318DAE65A3317F0592BE592C
  414. C:\Windows\system32\drivers\usbhub.sys 390109E8E05BA00375DCB1ED64DC60AF
  415. C:\Windows\system32\drivers\usbohci.sys B4DF0F4C1D9D25DFE1DAD1D8670F1D4F
  416. C:\Windows\system32\drivers\usbprint.sys ==> MD5 is legit
  417. C:\Windows\System32\DRIVERS\USBSTOR.SYS D029DD09E22EB24318A8FC3D8138BA43
  418. C:\Windows\system32\drivers\usbuhci.sys CFEAAF96E666E3DCBD8F6DFF516784AE
  419. C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys E330CAD54160934D1FB0CC35A49C9CD1
  420. C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
  421. C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
  422. C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
  423. C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
  424. C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
  425. C:\Windows\system32\drivers\vmbus.sys ==> MD5 is legit
  426. C:\Windows\system32\drivers\VMBusHID.sys ==> MD5 is legit
  427. C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
  428. C:\Windows\System32\drivers\volmgrx.sys 85C5468BC395819AE2A0C747334BA14C
  429. C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
  430. C:\Windows\System32\DRIVERS\vsdatant.sys B0395671CD4A1B046BC7269A37C8E089
  431. C:\Windows\system32\drivers\vsmraid.sys ==> MD5 is legit
  432. C:\Windows\System32\drivers\vwifibus.sys ==> MD5 is legit
  433. C:\Windows\system32\drivers\wacompen.sys ==> MD5 is legit
  434. C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
  435. C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
  436. C:\Windows\system32\drivers\wd.sys ==> MD5 is legit
  437. C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8
  438. C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
  439. C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
  440. C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 is legit
  441. C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
  442. C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
  443. C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
  444. C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659
  445.  
  446. ==================== NetSvcs (Whitelisted) ===================
  447.  
  448. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  449.  
  450.  
  451. ==================== Three Months Created files and folders ========
  452.  
  453. (If an entry is included in the fixlist, the file/folder will be moved.)
  454.  
  455. 2017-09-19 15:06 - 2017-09-19 15:06 - 002399744 _____ (Farbar) C:\Users\Vondy\Downloads\FRST64 (1).exe
  456. 2017-09-19 06:24 - 2017-09-19 15:11 - 000032647 _____ C:\Users\Vondy\Downloads\FRST.txt
  457. 2017-09-19 06:23 - 2017-09-19 06:24 - 002399744 _____ (Farbar) C:\Users\Vondy\Downloads\FRST64.exe
  458. 2017-09-18 22:30 - 2017-09-18 22:30 - 000000000 ____D C:\NoBot
  459. 2017-09-18 22:29 - 2017-09-18 22:29 - 001369080 _____ (Simple IT Solutions, LLC) C:\Users\Vondy\Downloads\NoBot.exe
  460. 2017-09-18 21:09 - 2017-09-18 21:09 - 103392222 ____X C:\Users\Vondy\Desktop\FAMILYPC (841 879 915)_2017-09-18 20.29.tvs
  461. 2017-09-18 20:29 - 2017-09-18 20:29 - 429798552 ____X C:\Users\Vondy\Desktop\FAMILYPC (841 879 915)_2017-09-18 19.06.tvs
  462. 2017-09-18 19:06 - 2017-09-18 19:06 - 004726742 ____X C:\Users\Vondy\Desktop\FAMILYPC (841 879 915)_2017-09-18 19.03.tvs
  463. 2017-09-18 15:16 - 2017-09-18 15:16 - 000002819 _____ C:\Users\Vondy\Documents\1800youfail_habbo_dox.txt
  464. 2017-09-18 15:15 - 2017-09-18 15:15 - 000002866 _____ C:\Users\Vondy\Documents\LadyLove90 dox.txt
  465. 2017-09-18 15:14 - 2017-09-18 15:14 - 000002642 _____ C:\Users\Vondy\Documents\brian,, dox
  466. 2017-09-17 23:50 - 2017-09-17 23:50 - 000000000 ____D C:\Program Files\COMODO
  467. 2017-09-17 23:49 - 2017-08-07 22:46 - 000256040 _____ (COMODO) C:\Windows\system32\iseguard64.dll
  468. 2017-09-17 23:49 - 2017-08-07 22:46 - 000205536 _____ (COMODO) C:\Windows\SysWOW64\iseguard32.dll
  469. 2017-09-17 23:49 - 2017-08-07 22:46 - 000050856 _____ (COMODO) C:\Windows\system32\Drivers\isedrv.sys
  470. 2017-09-17 23:48 - 2017-09-18 22:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
  471. 2017-09-17 23:48 - 2017-09-17 23:48 - 000002110 _____ C:\Users\Public\Desktop\Comodo Dragon.lnk
  472. 2017-09-17 23:48 - 2017-09-17 23:48 - 000000000 ____D C:\Users\Vondy\AppData\Local\Comodo
  473. 2017-09-17 23:47 - 2017-09-17 23:48 - 000000000 ____D C:\Program Files (x86)\Comodo
  474. 2017-09-17 23:44 - 2017-09-19 00:21 - 000000000 ____D C:\ProgramData\Comodo
  475. 2017-09-17 23:43 - 2017-09-17 23:43 - 005365960 ____X (COMODO) C:\Users\Vondy\Desktop\cmd_fw_installer_6113_c7.exe
  476. 2017-09-17 23:07 - 2017-09-17 23:12 - 000000000 ___HD C:\Users\Vondy\Documents\Hacks
  477. 2017-09-17 17:24 - 2017-09-17 17:24 - 007442477 ____X C:\Users\Vondy\Desktop\PUPPET-PC (905 371 000)_2017-09-17 17.15.tvs
  478. 2017-09-17 17:23 - 2017-09-17 17:23 - 000000000 ____D C:\Program Files (x86)\WinRAR
  479. 2017-09-17 17:22 - 2017-09-17 17:22 - 001987408 ____X C:\Users\Vondy\Desktop\wrar550.exe
  480. 2017-09-17 17:01 - 2017-09-17 17:01 - 000000000 ___DX C:\Users\Vondy\Desktop\rufus_files
  481. 2017-09-17 16:58 - 2017-09-17 18:13 - 000000400 __RSH C:\ProgramData\ntuser.pol
  482. 2017-09-17 16:58 - 2017-09-17 16:59 - 000000100 ____X C:\Users\Vondy\Desktop\rufus.ini
  483. 2017-09-17 16:58 - 2017-09-17 16:58 - 000966776 ____X (Akeo Consulting (hxxp://akeo.ie)) C:\Users\Vondy\Desktop\rufus-2.17p.exe
  484. 2017-09-17 16:47 - 2017-09-17 16:47 - 000000000 ____D C:\Users\Vondy\VirtualBox VMs
  485. 2017-09-17 16:16 - 2017-09-17 16:29 - 2794307584 ____X C:\Users\Vondy\Desktop\kali-linux-2017.1-amd64.iso
  486. 2017-09-17 16:14 - 2017-09-17 16:59 - 000000000 ____D C:\Users\Vondy\.VirtualBox
  487. 2017-09-17 16:10 - 2017-09-17 16:10 - 123929944 ____X (Oracle Corporation) C:\Users\Vondy\Desktop\VirtualBox-5.1.28-117968-Win.exe
  488. 2017-09-17 16:04 - 2017-09-17 16:04 - 000117312 ____X (Gibson Research Corp.) C:\Users\Vondy\Desktop\securable.exe
  489. 2017-09-17 15:39 - 2017-09-17 15:39 - 000000000 _____ C:\Windows\system32\Drivers\etc\lmhosts
  490. 2017-09-17 15:38 - 2017-09-17 15:38 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\Yahoo
  491. 2017-09-17 15:37 - 2017-09-17 15:38 - 000441296 _____ C:\Windows\system32\Drivers\vsconfig.xml
  492. 2017-09-17 15:37 - 2017-09-17 15:37 - 000000762 _____ C:\Users\Public\Desktop\ZoneAlarm Security.lnk
  493. 2017-09-17 15:37 - 2017-09-17 15:37 - 000000000 ____D C:\Users\Vondy\AppData\Local\YSearchUtil
  494. 2017-09-17 15:37 - 2017-09-17 15:37 - 000000000 ____D C:\Users\Vondy\AppData\Local\Yahoo
  495. 2017-09-17 15:37 - 2017-09-17 15:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Check Point
  496. 2017-09-17 15:35 - 2017-09-17 15:37 - 000000000 ____D C:\Program Files (x86)\CheckPoint
  497. 2017-09-17 15:35 - 2017-09-17 15:35 - 000000000 ____D C:\ProgramData\CheckPoint
  498. 2017-09-17 15:34 - 2017-09-17 15:34 - 005984464 ____X (Check Point Software Technologies Ltd.) C:\Users\Vondy\Desktop\zafwSetupWeb_151_504_17269.exe
  499. 2017-09-15 16:02 - 2017-09-15 16:02 - 000001773 ____X C:\Users\Vondy\Desktop\skull.txt
  500. 2017-09-14 21:19 - 2017-09-14 21:19 - 000000000 ___HD C:\Users\Vondy\Documents\Important
  501. 2017-09-13 15:09 - 2017-08-19 11:10 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
  502. 2017-09-13 15:09 - 2017-08-16 11:10 - 000629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
  503. 2017-09-13 15:09 - 2017-08-14 13:35 - 002150912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll
  504. 2017-09-13 15:09 - 2017-08-14 13:35 - 000303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcbase.dll
  505. 2017-09-13 15:09 - 2017-08-14 13:35 - 000172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cic.dll
  506. 2017-09-13 15:09 - 2017-08-14 13:35 - 000128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcshext.dll
  507. 2017-09-13 15:09 - 2017-08-13 17:30 - 001401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe
  508. 2017-09-13 15:09 - 2017-08-13 12:24 - 002291200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  509. 2017-09-13 15:09 - 2017-08-13 12:00 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
  510. 2017-09-13 15:09 - 2017-08-13 11:57 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
  511. 2017-09-13 15:09 - 2017-08-11 02:24 - 004001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
  512. 2017-09-13 15:09 - 2017-08-11 02:24 - 003945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
  513. 2017-09-13 15:09 - 2017-08-11 02:19 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
  514. 2017-09-13 15:09 - 2017-08-11 02:19 - 000299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
  515. 2017-09-13 15:09 - 2017-08-11 02:19 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
  516. 2017-09-13 15:09 - 2017-08-11 02:19 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
  517. 2017-09-13 15:09 - 2017-08-11 02:19 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
  518. 2017-09-13 15:09 - 2017-08-11 02:19 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
  519. 2017-09-13 15:09 - 2017-08-11 02:19 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
  520. 2017-09-13 15:09 - 2017-08-11 02:19 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
  521. 2017-09-13 15:09 - 2017-08-11 02:19 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
  522. 2017-09-13 15:09 - 2017-08-11 02:19 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
  523. 2017-09-13 15:09 - 2017-08-11 02:19 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
  524. 2017-09-13 15:09 - 2017-08-11 02:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
  525. 2017-09-13 15:09 - 2017-08-11 02:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
  526. 2017-09-13 15:09 - 2017-08-11 02:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
  527. 2017-09-13 15:09 - 2017-08-11 02:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
  528. 2017-09-13 15:09 - 2017-08-11 02:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
  529. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
  530. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
  531. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
  532. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
  533. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
  534. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
  535. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
  536. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
  537. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
  538. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
  539. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
  540. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
  541. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
  542. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
  543. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
  544. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
  545. 2017-09-13 15:09 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
  546. 2017-09-13 15:09 - 2017-08-11 02:09 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
  547. 2017-09-13 15:09 - 2017-08-11 02:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
  548. 2017-09-13 15:09 - 2017-08-11 01:55 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
  549. 2017-09-13 15:09 - 2017-08-11 01:55 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
  550. 2017-09-13 15:09 - 2017-08-11 01:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
  551. 2017-09-13 15:09 - 2017-08-11 01:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
  552. 2017-09-13 15:08 - 2017-08-15 20:25 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
  553. 2017-09-13 15:08 - 2017-08-15 11:10 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
  554. 2017-09-13 15:08 - 2017-08-15 11:10 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
  555. 2017-09-13 15:08 - 2017-08-15 10:01 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
  556. 2017-09-13 15:08 - 2017-08-15 10:01 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
  557. 2017-09-13 15:08 - 2017-08-15 10:01 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
  558. 2017-09-13 15:08 - 2017-08-15 09:58 - 013673984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  559. 2017-09-13 15:08 - 2017-08-13 12:54 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  560. 2017-09-13 15:08 - 2017-08-13 12:46 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
  561. 2017-09-13 15:08 - 2017-08-13 12:30 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
  562. 2017-09-13 15:08 - 2017-08-13 12:29 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
  563. 2017-09-13 15:08 - 2017-08-13 12:29 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
  564. 2017-09-13 15:08 - 2017-08-13 12:29 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
  565. 2017-09-13 15:08 - 2017-08-13 12:28 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
  566. 2017-09-13 15:08 - 2017-08-13 12:22 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
  567. 2017-09-13 15:08 - 2017-08-13 12:21 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
  568. 2017-09-13 15:08 - 2017-08-13 12:19 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
  569. 2017-09-13 15:08 - 2017-08-13 12:17 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
  570. 2017-09-13 15:08 - 2017-08-13 12:17 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
  571. 2017-09-13 15:08 - 2017-08-13 12:17 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
  572. 2017-09-13 15:08 - 2017-08-13 12:01 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
  573. 2017-09-13 15:08 - 2017-08-13 12:01 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
  574. 2017-09-13 15:08 - 2017-08-13 11:53 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
  575. 2017-09-13 15:08 - 2017-08-13 11:48 - 004547072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
  576. 2017-09-13 15:08 - 2017-08-13 11:46 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
  577. 2017-09-13 15:08 - 2017-08-13 11:44 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
  578. 2017-09-13 15:08 - 2017-08-13 11:43 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
  579. 2017-09-13 15:08 - 2017-08-13 11:43 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
  580. 2017-09-13 15:08 - 2017-08-13 11:17 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  581. 2017-09-13 15:08 - 2017-08-13 11:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
  582. 2017-09-13 15:08 - 2017-08-13 11:13 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  583. 2017-09-13 15:08 - 2017-08-11 02:21 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
  584. 2017-09-13 15:08 - 2017-08-11 02:19 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
  585. 2017-09-13 15:08 - 2017-08-11 02:19 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
  586. 2017-09-13 15:08 - 2017-08-11 02:19 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
  587. 2017-09-13 15:08 - 2017-08-11 02:19 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
  588. 2017-09-13 15:08 - 2017-08-11 02:19 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
  589. 2017-09-13 15:08 - 2017-08-11 02:19 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
  590. 2017-09-13 15:08 - 2017-08-11 02:19 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
  591. 2017-09-13 15:08 - 2017-08-11 02:19 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
  592. 2017-09-13 15:08 - 2017-08-11 02:19 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
  593. 2017-09-13 15:08 - 2017-08-11 02:19 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
  594. 2017-09-13 15:08 - 2017-08-11 02:19 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
  595. 2017-09-13 15:08 - 2017-08-11 02:19 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
  596. 2017-09-13 15:08 - 2017-08-11 02:19 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
  597. 2017-09-13 15:08 - 2017-08-11 02:19 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
  598. 2017-09-13 15:08 - 2017-08-11 02:19 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
  599. 2017-09-13 15:08 - 2017-08-11 02:19 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
  600. 2017-09-13 15:08 - 2017-08-11 02:19 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
  601. 2017-09-13 15:08 - 2017-08-11 02:19 - 000016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winnsi.dll
  602. 2017-09-13 15:08 - 2017-08-11 02:19 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nsi.dll
  603. 2017-09-13 15:08 - 2017-08-11 02:19 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
  604. 2017-09-13 15:08 - 2017-08-11 02:19 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
  605. 2017-09-13 15:08 - 2017-08-11 02:03 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
  606. 2017-09-13 15:08 - 2017-08-11 02:01 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
  607. 2017-09-13 15:08 - 2017-08-11 01:56 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
  608. 2017-09-13 15:08 - 2017-08-11 01:56 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
  609. 2017-09-13 15:08 - 2017-08-11 01:56 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
  610. 2017-09-13 15:08 - 2017-08-11 01:56 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
  611. 2017-09-13 15:08 - 2017-08-11 01:55 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
  612. 2017-09-13 15:08 - 2017-07-07 11:10 - 000973312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXPTaskRingtone.dll
  613. 2017-09-13 15:07 - 2017-08-19 11:28 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
  614. 2017-09-13 15:07 - 2017-08-16 11:29 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
  615. 2017-09-13 15:07 - 2017-08-16 10:57 - 003224576 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
  616. 2017-09-13 15:07 - 2017-08-15 11:29 - 014182400 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
  617. 2017-09-13 15:07 - 2017-08-13 13:05 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  618. 2017-09-13 15:07 - 2017-08-13 12:50 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
  619. 2017-09-13 15:07 - 2017-08-11 02:35 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
  620. 2017-09-13 15:07 - 2017-08-11 02:35 - 000362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
  621. 2017-09-13 15:07 - 2017-08-11 02:35 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
  622. 2017-09-13 15:07 - 2017-08-11 02:35 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
  623. 2017-09-13 15:07 - 2017-08-11 02:35 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
  624. 2017-09-13 15:07 - 2017-08-11 02:35 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
  625. 2017-09-13 15:07 - 2017-08-11 02:35 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
  626. 2017-09-13 15:07 - 2017-08-11 02:35 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
  627. 2017-09-13 15:07 - 2017-08-11 02:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll
  628. 2017-09-13 15:07 - 2017-08-11 02:35 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll
  629. 2017-09-13 15:07 - 2017-08-11 02:35 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
  630. 2017-09-13 15:07 - 2017-08-11 02:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
  631. 2017-09-13 15:07 - 2017-08-11 02:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll
  632. 2017-09-13 15:07 - 2017-08-11 02:34 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
  633. 2017-09-13 15:07 - 2017-08-11 02:34 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
  634. 2017-09-13 15:07 - 2017-08-11 02:34 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
  635. 2017-09-13 15:07 - 2017-08-11 02:34 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
  636. 2017-09-13 15:07 - 2017-08-11 02:02 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
  637. 2017-09-13 15:07 - 2017-08-11 02:00 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
  638. 2017-09-13 15:07 - 2017-08-11 01:59 - 000460800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
  639. 2017-09-13 15:07 - 2017-08-11 01:59 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
  640. 2017-09-13 15:07 - 2017-08-11 01:59 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
  641. 2017-09-13 15:07 - 2017-08-11 01:59 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
  642. 2017-09-13 15:07 - 2017-08-11 01:59 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
  643. 2017-09-13 15:07 - 2017-08-11 01:58 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
  644. 2017-09-13 15:07 - 2017-08-11 01:58 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
  645. 2017-09-13 15:06 - 2017-08-15 21:10 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  646. 2017-09-13 15:06 - 2017-08-15 11:29 - 001867264 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
  647. 2017-09-13 15:06 - 2017-08-15 10:06 - 015260160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  648. 2017-09-13 15:06 - 2017-08-14 13:35 - 003203584 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
  649. 2017-09-13 15:06 - 2017-08-14 13:35 - 000355328 _____ (Microsoft Corporation) C:\Windows\system32\mmcbase.dll
  650. 2017-09-13 15:06 - 2017-08-14 13:35 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\mmcshext.dll
  651. 2017-09-13 15:06 - 2017-08-14 13:34 - 000211968 _____ (Microsoft Corporation) C:\Windows\system32\cic.dll
  652. 2017-09-13 15:06 - 2017-08-13 17:37 - 002144256 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
  653. 2017-09-13 15:06 - 2017-08-13 14:58 - 025730560 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  654. 2017-09-13 15:06 - 2017-08-13 13:24 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
  655. 2017-09-13 15:06 - 2017-08-13 13:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
  656. 2017-09-13 15:06 - 2017-08-13 13:06 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
  657. 2017-09-13 15:06 - 2017-08-13 13:05 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
  658. 2017-09-13 15:06 - 2017-08-13 13:05 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
  659. 2017-09-13 15:06 - 2017-08-13 13:05 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
  660. 2017-09-13 15:06 - 2017-08-13 13:04 - 002899968 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  661. 2017-09-13 15:06 - 2017-08-13 12:56 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
  662. 2017-09-13 15:06 - 2017-08-13 12:55 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
  663. 2017-09-13 15:06 - 2017-08-13 12:52 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
  664. 2017-09-13 15:06 - 2017-08-13 12:51 - 005981696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  665. 2017-09-13 15:06 - 2017-08-13 12:51 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
  666. 2017-09-13 15:06 - 2017-08-13 12:51 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
  667. 2017-09-13 15:06 - 2017-08-13 12:50 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
  668. 2017-09-13 15:06 - 2017-08-13 12:41 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
  669. 2017-09-13 15:06 - 2017-08-13 12:38 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
  670. 2017-09-13 15:06 - 2017-08-13 12:29 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
  671. 2017-09-13 15:06 - 2017-08-13 12:29 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
  672. 2017-09-13 15:06 - 2017-08-13 12:27 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
  673. 2017-09-13 15:06 - 2017-08-13 12:24 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
  674. 2017-09-13 15:06 - 2017-08-13 12:23 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  675. 2017-09-13 15:06 - 2017-08-13 12:20 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  676. 2017-09-13 15:06 - 2017-08-13 12:18 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
  677. 2017-09-13 15:06 - 2017-08-13 12:07 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
  678. 2017-09-13 15:06 - 2017-08-13 12:04 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  679. 2017-09-13 15:06 - 2017-08-13 12:04 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
  680. 2017-09-13 15:06 - 2017-08-13 12:02 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
  681. 2017-09-13 15:06 - 2017-08-13 12:01 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  682. 2017-09-13 15:06 - 2017-08-13 11:40 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  683. 2017-09-13 15:06 - 2017-08-13 11:27 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  684. 2017-09-13 15:06 - 2017-08-13 11:18 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
  685. 2017-09-13 15:06 - 2017-08-11 02:42 - 000631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
  686. 2017-09-13 15:06 - 2017-08-11 02:38 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
  687. 2017-09-13 15:06 - 2017-08-11 02:38 - 000706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
  688. 2017-09-13 15:06 - 2017-08-11 02:38 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
  689. 2017-09-13 15:06 - 2017-08-11 02:38 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
  690. 2017-09-13 15:06 - 2017-08-11 02:36 - 001732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
  691. 2017-09-13 15:06 - 2017-08-11 02:35 - 002065408 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
  692. 2017-09-13 15:06 - 2017-08-11 02:35 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
  693. 2017-09-13 15:06 - 2017-08-11 02:35 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
  694. 2017-09-13 15:06 - 2017-08-11 02:35 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
  695. 2017-09-13 15:06 - 2017-08-11 02:35 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
  696. 2017-09-13 15:06 - 2017-08-11 02:35 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
  697. 2017-09-13 15:06 - 2017-08-11 02:35 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
  698. 2017-09-13 15:06 - 2017-08-11 02:35 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
  699. 2017-09-13 15:06 - 2017-08-11 02:35 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
  700. 2017-09-13 15:06 - 2017-08-11 02:35 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
  701. 2017-09-13 15:06 - 2017-08-11 02:35 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
  702. 2017-09-13 15:06 - 2017-08-11 02:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
  703. 2017-09-13 15:06 - 2017-08-11 02:34 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  704. 2017-09-13 15:06 - 2017-08-11 02:34 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
  705. 2017-09-13 15:06 - 2017-08-11 02:34 - 000971776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
  706. 2017-09-13 15:06 - 2017-08-11 02:34 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
  707. 2017-09-13 15:06 - 2017-08-11 02:34 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
  708. 2017-09-13 15:06 - 2017-08-11 02:34 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
  709. 2017-09-13 15:06 - 2017-08-11 02:34 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
  710. 2017-09-13 15:06 - 2017-08-11 02:34 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
  711. 2017-09-13 15:06 - 2017-08-11 02:34 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
  712. 2017-09-13 15:06 - 2017-08-11 02:34 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
  713. 2017-09-13 15:06 - 2017-08-11 02:34 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
  714. 2017-09-13 15:06 - 2017-08-11 02:34 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
  715. 2017-09-13 15:06 - 2017-08-11 02:34 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
  716. 2017-09-13 15:06 - 2017-08-11 02:34 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
  717. 2017-09-13 15:06 - 2017-08-11 02:34 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
  718. 2017-09-13 15:06 - 2017-08-11 02:34 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
  719. 2017-09-13 15:06 - 2017-08-11 02:34 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
  720. 2017-09-13 15:06 - 2017-08-11 02:34 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
  721. 2017-09-13 15:06 - 2017-08-11 02:34 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
  722. 2017-09-13 15:06 - 2017-08-11 02:34 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
  723. 2017-09-13 15:06 - 2017-08-11 02:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
  724. 2017-09-13 15:06 - 2017-08-11 02:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
  725. 2017-09-13 15:06 - 2017-08-11 02:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
  726. 2017-09-13 15:06 - 2017-08-11 02:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
  727. 2017-09-13 15:06 - 2017-08-11 02:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
  728. 2017-09-13 15:06 - 2017-08-11 02:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
  729. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
  730. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
  731. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
  732. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
  733. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
  734. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
  735. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
  736. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
  737. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
  738. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
  739. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
  740. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
  741. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
  742. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
  743. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
  744. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
  745. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
  746. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
  747. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
  748. 2017-09-13 15:06 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
  749. 2017-09-13 15:06 - 2017-08-11 02:20 - 000071680 _____ C:\Windows\system32\PrintBrmUi.exe
  750. 2017-09-13 15:06 - 2017-08-11 02:20 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
  751. 2017-09-13 15:06 - 2017-08-11 02:20 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
  752. 2017-09-13 15:06 - 2017-08-11 02:12 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
  753. 2017-09-13 15:06 - 2017-08-11 02:07 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
  754. 2017-09-13 15:06 - 2017-08-11 02:07 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
  755. 2017-09-13 15:06 - 2017-08-11 02:07 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
  756. 2017-09-13 15:06 - 2017-08-11 02:06 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
  757. 2017-09-13 15:06 - 2017-08-11 02:03 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
  758. 2017-09-13 15:06 - 2017-08-11 02:00 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
  759. 2017-09-13 15:06 - 2017-08-11 01:58 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
  760. 2017-09-13 15:06 - 2017-07-07 11:29 - 001143296 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
  761. 2017-09-13 11:04 - 2017-09-13 11:04 - 000206976 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetLwf.sys
  762. 2017-09-13 11:04 - 2017-09-13 11:04 - 000196040 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp6.sys
  763. 2017-09-12 18:35 - 2017-09-12 19:35 - 005680640 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
  764. 2017-09-08 18:55 - 2017-09-08 18:55 - 000000000 __HDX C:\Users\Vondy\Desktop\mademen
  765. 2017-09-07 16:36 - 2017-09-07 16:36 - 000000256 _____ C:\Users\Vondy\Documents\caligirl4ever6.txt
  766. 2017-09-06 20:15 - 2017-09-06 20:15 - 002600288 ____X (Comfort Software Group ) C:\Users\Vondy\Desktop\FreeAlarmClockSetup.exe
  767. 2017-09-06 20:14 - 2017-09-06 20:14 - 000000341 ____X C:\Users\Vondy\Desktop\Reminder.ini
  768. 2017-09-06 20:04 - 2017-09-06 20:04 - 000000038 ____X C:\Users\Vondy\Desktop\Reminder.lst
  769. 2017-09-06 20:03 - 2017-09-06 20:03 - 000138961 ____X C:\Users\Vondy\Desktop\reminder.zip
  770. 2017-09-06 20:03 - 2017-06-10 10:48 - 000163840 ____X (Horst Schaeffer) C:\Users\Vondy\Desktop\Reminder.exe
  771. 2017-09-06 19:49 - 2017-09-06 19:49 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\DesktopReminder
  772. 2017-09-06 19:45 - 2017-09-18 15:02 - 000000000 ____D C:\Users\Vondy\Documents\DesktopReminder
  773. 2017-09-06 19:45 - 2017-09-06 19:45 - 000000000 ____D C:\Users\Vondy\AppData\Local\Polenter_-_Software_Solut
  774. 2017-09-06 19:42 - 2017-09-06 19:42 - 000000000 ____D C:\Users\Vondy\AppData\Local\PackageAware
  775. 2017-09-06 19:41 - 2017-09-06 19:42 - 014627864 ____X (Polenter - Software Solutions ) C:\Users\Vondy\Desktop\DesktopReminderSetup.exe
  776. 2017-09-05 15:36 - 2017-09-05 15:36 - 000001071 _____ C:\Users\Public\Desktop\Windscribe.lnk
  777. 2017-09-05 15:36 - 2017-09-05 15:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windscribe
  778. 2017-09-05 15:35 - 2017-09-05 15:35 - 015139472 ____X (Windscribe ) C:\Users\Vondy\Desktop\Windscribe.exe
  779. 2017-09-03 16:59 - 2017-09-03 16:59 - 054331872 ____X C:\Users\Vondy\Desktop\torbrowser-install-7.0.4_en-US (1).exe
  780. 2017-09-03 16:55 - 2017-09-03 16:56 - 054331872 ____X C:\Users\Vondy\Desktop\torbrowser-install-7.0.4_en-US.exe
  781. 2017-09-02 21:57 - 2017-09-02 21:57 - 000000198 _____ C:\Users\Vondy\Documents\zhoulyt dox.txt
  782. 2017-09-01 21:29 - 2017-09-01 21:36 - 000000000 ____D C:\AdwCleaner
  783. 2017-09-01 21:29 - 2017-09-01 21:29 - 008182736 ____X (Malwarebytes) C:\Users\Vondy\Desktop\adwcleaner_7.0.2.1.exe
  784. 2017-08-31 15:07 - 2017-09-17 16:30 - 000000000 __HDX C:\Users\Vondy\Desktop\me
  785. 2017-08-30 21:33 - 2017-08-30 21:38 - 000030487 ____X C:\Users\Vondy\Desktop\Addition.txt
  786. 2017-08-30 21:31 - 2017-09-19 06:24 - 000000000 ____D C:\FRST
  787. 2017-08-30 21:31 - 2017-08-30 21:38 - 000069266 ____X C:\Users\Vondy\Desktop\FRST.txt
  788. 2017-08-30 21:31 - 2017-08-30 21:31 - 002395648 ____X (Farbar) C:\Users\Vondy\Desktop\FRST64.exe
  789. 2017-08-30 19:36 - 2017-08-30 19:36 - 000030959 _____ C:\ProgramData\agent.update.1504136188.bdinstall.bin
  790. 2017-08-30 19:35 - 2017-08-30 19:35 - 000028750 _____ C:\ProgramData\agent.1504136135.bdinstall.bin
  791. 2017-08-29 21:58 - 2017-08-29 21:58 - 000000019 ____X C:\Users\Vondy\Desktop\°¡ì»í¡° Capo Regime.txt
  792. 2017-08-29 15:18 - 2017-09-18 16:42 - 000000000 ____D C:\ProgramData\Vintager
  793. 2017-08-29 15:18 - 2017-08-29 15:18 - 000000000 ____D C:\Users\Vondy\AppData\Local\Vintager
  794. 2017-08-29 15:16 - 2017-08-29 15:17 - 093983902 ____X (Exeone ) C:\Users\Vondy\Desktop\vintager_setup.exe
  795. 2017-08-25 12:04 - 2017-08-29 23:33 - 000000000 ___DX C:\Users\Vondy\Desktop\Wallpaper
  796. 2017-08-25 11:23 - 2017-08-25 11:25 - 000000000 ___DX C:\Users\Vondy\Desktop\juink
  797. 2017-08-23 19:50 - 2017-08-23 19:50 - 000000000 __HDX C:\Users\Vondy\Desktop\Takeout
  798. 2017-08-21 10:43 - 2017-08-21 10:43 - 000368761 __RSH C:\EONHW
  799. 2017-08-21 10:21 - 2017-08-21 10:21 - 000000000 ___HD C:\$SysReset
  800. 2017-08-21 04:57 - 2017-08-21 04:57 - 000008192 _____ C:\Windows\system32\config\userdiff
  801. 2017-08-20 23:42 - 2017-03-18 17:38 - 000000001 ___SH C:\BOOTNXT
  802. 2017-08-20 22:58 - 2017-08-21 10:38 - 000000000 ___HD C:\$WINDOWS.~BT
  803. 2017-08-20 22:58 - 2017-08-20 23:45 - 000002829 _____ C:\Windows\diagerr.xml
  804. 2017-08-20 22:58 - 2017-08-20 23:45 - 000001908 _____ C:\Windows\diagwrn.xml
  805. 2017-08-20 22:43 - 2017-08-21 10:38 - 000000066 _____ C:\Windows\progress.ini
  806. 2017-08-20 21:06 - 2017-08-20 21:06 - 000000000 ____D C:\Users\Vondy\Desktop\Sims 2
  807. 2017-08-20 20:46 - 2007-04-29 06:12 - 000591872 ____X (www.winmd5.com) C:\Users\Vondy\Desktop\WinMD5.exe
  808. 2017-08-20 10:33 - 2017-08-21 14:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sims2Pack Clean Installer
  809. 2017-08-20 10:33 - 2017-08-20 10:35 - 000000000 ____D C:\Program Files (x86)\Sims2Pack Clean Installer
  810. 2017-08-20 10:33 - 2017-08-20 10:33 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sims2Pack Clean Installer
  811. 2017-08-18 16:15 - 2017-09-03 17:01 - 000000781 ____X C:\Users\Vondy\Desktop\Start Tor Browser.lnk
  812. 2017-08-18 16:14 - 2017-08-18 16:15 - 000000000 ___DX C:\Users\Vondy\Desktop\Tor Browser
  813. 2017-08-17 19:45 - 2017-08-21 11:06 - 000000000 ____D C:\Users\Vondy\Desktop\everything sims
  814. 2017-08-17 17:41 - 2017-08-17 17:41 - 000000000 ____D C:\Users\Vondy\AppData\Local\CEF
  815. 2017-08-17 16:56 - 2017-08-17 16:56 - 000000000 ____D C:\Users\Public\Documents\EA Games
  816. 2017-08-17 16:54 - 2017-08-17 16:54 - 000002396 _____ C:\Users\Public\Desktop\The Sims™ 2 Mansion and Garden Stuff.lnk
  817. 2017-08-16 22:53 - 2017-08-21 14:26 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
  818. 2017-08-16 22:42 - 2017-09-14 21:18 - 000000000 ____D C:\Users\Vondy\Documents\EA Games
  819. 2017-08-16 22:42 - 2017-08-17 16:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES
  820. 2017-08-16 22:34 - 2017-08-17 16:51 - 000000000 ____D C:\Program Files (x86)\EA GAMES
  821. 2017-08-16 22:34 - 2017-08-16 22:34 - 000000000 ____X C:\Windows\system32\vp6vfw.dll
  822. 2017-08-15 15:39 - 2017-09-18 21:33 - 000000000 ____D C:\Program Files\Common Files\McAfee
  823. 2017-08-15 15:39 - 2017-08-16 05:44 - 000000000 ____D C:\Program Files (x86)\McAfee
  824. 2017-08-15 15:30 - 2017-09-12 19:35 - 000004474 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
  825. 2017-08-14 17:56 - 2017-09-18 19:03 - 000000000 ____D C:\Program Files (x86)\TeamViewer
  826. 2017-08-14 17:56 - 2017-09-18 19:02 - 000001043 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
  827. 2017-08-14 17:56 - 2017-09-17 17:24 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\TeamViewer
  828. 2017-08-11 18:39 - 2017-08-21 14:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  829. 2017-08-11 18:39 - 2017-08-11 18:39 - 000000000 ____D C:\Users\Vondy\Tracing
  830. 2017-08-11 18:38 - 2017-08-11 18:39 - 000000000 ___RD C:\Program Files (x86)\Skype
  831. 2017-08-08 22:48 - 2017-07-21 10:26 - 000518144 _____ C:\Windows\SysWOW64\msjetoledb40.dll
  832. 2017-08-08 22:48 - 2017-07-21 10:26 - 000290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjtes40.dll
  833. 2017-08-08 22:48 - 2017-07-14 11:29 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
  834. 2017-08-08 22:48 - 2017-07-14 11:29 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
  835. 2017-08-08 22:48 - 2017-07-14 11:29 - 000486400 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
  836. 2017-08-08 22:48 - 2017-07-14 11:10 - 001549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
  837. 2017-08-08 22:48 - 2017-07-14 11:10 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
  838. 2017-08-08 22:48 - 2017-07-14 11:10 - 000382976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
  839. 2017-08-08 22:48 - 2017-07-08 11:34 - 000370920 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
  840. 2017-08-08 22:48 - 2017-07-07 11:33 - 000363752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
  841. 2017-08-08 22:48 - 2017-07-01 09:05 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
  842. 2017-08-08 22:48 - 2017-07-01 09:05 - 000866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswdat10.dll
  843. 2017-08-08 22:48 - 2017-07-01 09:05 - 000641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll
  844. 2017-08-08 22:48 - 2017-07-01 09:05 - 000616448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrepl40.dll
  845. 2017-08-08 22:48 - 2017-07-01 09:05 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll
  846. 2017-08-08 22:48 - 2017-07-01 09:05 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll
  847. 2017-08-08 22:48 - 2017-07-01 09:05 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
  848. 2017-08-08 22:48 - 2017-07-01 09:05 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
  849. 2017-08-08 22:48 - 2017-07-01 09:05 - 000310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
  850. 2017-08-08 22:48 - 2017-07-01 09:05 - 000240640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll
  851. 2017-08-08 22:48 - 2017-07-01 09:05 - 000144896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjint40.dll
  852. 2017-08-08 22:48 - 2017-07-01 09:05 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjter40.dll
  853. 2017-08-08 22:47 - 2017-07-29 10:56 - 000117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
  854. 2017-08-08 22:47 - 2017-07-21 10:26 - 000409600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexch40.dll
  855. 2017-08-08 22:47 - 2017-07-21 10:26 - 000282624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstext40.dll
  856. 2017-08-08 22:47 - 2017-07-14 11:29 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
  857. 2017-08-08 22:47 - 2017-07-14 11:29 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
  858. 2017-08-08 22:47 - 2017-07-14 11:29 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
  859. 2017-08-08 22:47 - 2017-07-14 11:29 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
  860. 2017-08-08 22:47 - 2017-07-14 11:29 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
  861. 2017-08-08 22:47 - 2017-07-14 11:29 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
  862. 2017-08-08 22:47 - 2017-07-14 11:29 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
  863. 2017-08-08 22:47 - 2017-07-14 11:29 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
  864. 2017-08-08 22:47 - 2017-07-14 11:29 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
  865. 2017-08-08 22:47 - 2017-07-14 11:12 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
  866. 2017-08-08 22:47 - 2017-07-14 11:12 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
  867. 2017-08-08 22:47 - 2017-07-14 11:11 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
  868. 2017-08-08 22:47 - 2017-07-14 11:10 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
  869. 2017-08-08 22:47 - 2017-07-14 11:10 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
  870. 2017-08-08 22:47 - 2017-07-14 11:10 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
  871. 2017-08-08 22:47 - 2017-07-14 11:10 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
  872. 2017-08-08 22:47 - 2017-07-14 11:10 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
  873. 2017-08-08 22:47 - 2017-07-14 11:10 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
  874. 2017-08-08 22:47 - 2017-07-14 11:10 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
  875. 2017-08-08 22:47 - 2017-07-14 11:00 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
  876. 2017-08-08 22:47 - 2017-07-14 11:00 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
  877. 2017-08-08 22:47 - 2017-07-14 10:59 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
  878. 2017-08-08 22:47 - 2017-07-14 10:59 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
  879. 2017-08-08 22:47 - 2017-07-14 10:57 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
  880. 2017-08-08 22:47 - 2017-07-14 10:50 - 000054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
  881. 2017-08-08 22:47 - 2017-07-14 10:50 - 000028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
  882. 2017-08-08 22:47 - 2017-07-07 11:29 - 000149504 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
  883. 2017-08-08 22:47 - 2017-07-07 11:11 - 000109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
  884. 2017-08-08 20:06 - 2017-08-08 20:06 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
  885. 2017-08-05 19:43 - 2017-09-18 15:20 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\Blurity
  886. 2017-08-05 19:36 - 2017-08-21 14:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Focus Magic
  887. 2017-08-05 19:36 - 2017-08-05 19:37 - 000000163 _____ C:\Users\Vondy\AppData\Roaming\PLGComp.ini
  888. 2017-08-05 19:36 - 2017-08-05 19:36 - 000000000 ____D C:\Program Files (x86)\Focus Magic
  889. 2017-08-05 19:36 - 2015-10-29 15:23 - 008886904 _____ (Acclaim Software Ltd) C:\Windows\SysWOW64\FocusMag.dll
  890. 2017-08-05 19:36 - 2015-10-29 15:23 - 003607672 _____ (Acclaim Software Ltd) C:\Windows\system32\FocusMag64.dll
  891. 2017-08-05 19:36 - 2012-10-28 05:05 - 002790912 _____ (FreeImage) C:\Windows\SysWOW64\FreeImage.dll
  892. 2017-07-31 22:08 - 2017-07-31 22:08 - 000000000 ___RD C:\Sandbox
  893. 2017-07-31 22:06 - 2017-09-17 23:54 - 000001864 _____ C:\Windows\Sandboxie.ini
  894. 2017-07-31 22:02 - 2017-08-21 14:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie
  895. 2017-07-31 22:02 - 2017-07-31 22:02 - 000000000 ____D C:\Program Files\Sandboxie
  896. 2017-07-31 19:12 - 2017-07-31 19:12 - 000001786 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
  897. 2017-07-31 17:25 - 2017-07-31 19:12 - 000000000 ____D C:\Program Files\Wireshark
  898. 2017-07-30 04:43 - 2017-07-30 04:43 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\QFX Software
  899. 2017-07-30 04:43 - 2017-07-30 04:43 - 000000000 ____D C:\ProgramData\QFX Software
  900. 2017-07-29 19:58 - 2017-08-21 14:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyScrambler
  901. 2017-07-29 19:58 - 2017-07-29 19:58 - 000000000 ____D C:\Program Files (x86)\KeyScrambler
  902. 2017-07-29 19:58 - 2017-02-19 15:15 - 000233248 _____ (QFX Software Corporation) C:\Windows\system32\Drivers\keyscrambler.sys
  903. 2017-07-27 20:27 - 2017-07-27 20:27 - 000000054 _____ C:\Users\Vondy\.gitconfig
  904. 2017-07-27 20:26 - 2017-09-18 16:19 - 000000000 ____D C:\Users\Vondy\AppData\Local\GitHubDesktop
  905. 2017-07-27 20:26 - 2017-08-21 14:26 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
  906. 2017-07-27 20:26 - 2017-07-27 20:38 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\GitHub Desktop
  907. 2017-07-27 17:14 - 2017-07-31 05:42 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\CodeBlocks
  908. 2017-07-27 17:13 - 2017-09-18 15:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks
  909. 2017-07-27 16:56 - 2017-07-27 17:28 - 000000000 ___DX C:\Users\Vondy\Desktop\Coding
  910. 2017-07-21 16:39 - 2017-08-08 20:06 - 000000000 ____D C:\Users\Vondy\AppData\Local\Discord
  911. 2017-07-20 00:01 - 2017-09-17 17:23 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
  912. 2017-07-20 00:01 - 2017-09-17 17:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
  913. 2017-07-20 00:01 - 2017-07-20 00:01 - 000000000 ____D C:\Program Files\WinRAR
  914. 2017-07-20 00:00 - 2017-08-21 14:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip 21.0
  915. 2017-07-20 00:00 - 2017-07-20 00:00 - 000003518 _____ C:\Windows\System32\Tasks\WinZipBackGroundToolsTask
  916. 2017-07-20 00:00 - 2017-07-20 00:00 - 000003404 _____ C:\Windows\System32\Tasks\WinZip Update Notifier
  917. 2017-07-20 00:00 - 2017-07-20 00:00 - 000002336 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Update Notifier.lnk
  918. 2017-07-20 00:00 - 2017-07-20 00:00 - 000002313 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinZip Background Tools.lnk
  919. 2017-07-20 00:00 - 2017-07-20 00:00 - 000002283 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
  920. 2017-07-19 23:59 - 2017-07-20 00:00 - 000000000 ____D C:\Users\Vondy\AppData\Local\WinZip
  921. 2017-07-19 23:59 - 2017-07-19 23:59 - 000000000 ____D C:\Program Files\WinZip
  922. 2017-07-19 12:24 - 2017-05-05 14:58 - 000001071 __RHX C:\Users\Vondy\Desktop\Windscribe.lnk
  923. 2017-07-19 12:10 - 2017-07-19 12:10 - 000000104 ____X C:\Users\Vondy\Desktop\Control Panel - Shortcut.lnk
  924. 2017-07-18 17:10 - 2017-07-18 17:11 - 299983712 _____ C:\Users\Vondy\Downloads\VMware Workstation Pro 12.1.1 Build 3770994 + Keys [SadeemPC].zip
  925. 2017-07-17 12:56 - 2017-08-26 20:01 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
  926. 2017-07-17 12:56 - 2017-07-17 13:11 - 000000248 _____ C:\Users\Vondy\AppData\LocalLow\rbxcsettings.rbx
  927. 2017-07-17 12:55 - 2017-07-17 13:04 - 000000000 ____D C:\Users\Vondy\AppData\Local\Roblox
  928. 2017-07-17 02:15 - 2017-06-15 16:23 - 000753664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
  929. 2017-07-17 02:15 - 2017-06-12 18:49 - 001363456 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
  930. 2017-07-17 02:15 - 2017-06-12 18:49 - 000594432 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
  931. 2017-07-17 02:15 - 2017-06-12 18:49 - 000475136 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
  932. 2017-07-17 02:15 - 2017-06-12 18:49 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
  933. 2017-07-17 02:15 - 2017-06-12 18:29 - 001227264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
  934. 2017-07-17 02:15 - 2017-06-12 18:29 - 000444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
  935. 2017-07-17 02:15 - 2017-06-12 18:29 - 000390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
  936. 2017-07-17 02:15 - 2017-06-12 18:28 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdhui.dll
  937. 2017-07-17 02:15 - 2017-06-12 18:14 - 000379392 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
  938. 2017-07-17 02:15 - 2017-06-12 18:14 - 000172544 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
  939. 2017-07-17 02:15 - 2017-06-12 18:14 - 000103936 _____ (Microsoft Corporation) C:\Windows\system32\resmon.exe
  940. 2017-07-17 02:15 - 2017-06-12 18:06 - 000303616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
  941. 2017-07-17 02:15 - 2017-06-12 18:06 - 000157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfmon.exe
  942. 2017-07-17 02:15 - 2017-06-12 18:06 - 000103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resmon.exe
  943. 2017-07-17 02:15 - 2017-06-09 11:33 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
  944. 2017-07-17 02:15 - 2017-05-30 00:56 - 001895656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
  945. 2017-07-17 02:15 - 2017-05-30 00:56 - 000377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
  946. 2017-07-17 02:15 - 2017-05-30 00:56 - 000287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
  947. 2017-07-17 02:15 - 2017-05-21 00:24 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
  948. 2017-07-17 02:15 - 2017-05-21 00:06 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
  949. 2017-07-17 02:15 - 2017-05-16 11:35 - 000986856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
  950. 2017-07-17 02:15 - 2017-05-16 11:35 - 000265448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
  951. 2017-07-17 02:15 - 2017-05-16 11:30 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
  952. 2017-07-01 23:33 - 2017-09-16 15:29 - 000000000 ____D C:\Users\Vondy\Documents\Fax
  953. 2017-06-27 21:56 - 2017-06-27 21:56 - 000000000 ____D C:\Windows\System32\Tasks\Games
  954. 2017-06-27 00:48 - 2017-09-17 18:47 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\discord
  955. 2017-06-27 00:48 - 2017-07-21 16:41 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
  956. 2017-06-27 00:47 - 2017-07-27 20:27 - 000000000 ____D C:\Users\Vondy\AppData\Local\SquirrelTemp
  957. 2017-06-26 23:03 - 2017-09-03 10:24 - 000000000 ____D C:\Program Files\Mozilla Firefox
  958. 2017-06-26 23:03 - 2017-09-03 10:24 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
  959. 2017-06-26 23:03 - 2017-06-26 23:03 - 000000936 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
  960. 2017-06-25 22:46 - 2017-06-25 22:46 - 000000000 ____D C:\Users\Vondy\AppData\LocalLow\Oracle
  961. 2017-06-25 22:16 - 2017-06-19 19:58 - 000088504 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmx86.sys
  962. 2017-06-25 22:16 - 2017-06-19 19:58 - 000049216 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmparport.sys
  963. 2017-06-25 22:15 - 2017-02-20 08:02 - 000083008 _____ (VMware, Inc.) C:\Windows\system32\Drivers\hcmon.sys
  964. 2017-06-25 22:02 - 2017-06-26 13:20 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\VMware
  965. 2017-06-25 22:02 - 2017-06-26 13:20 - 000000000 ____D C:\Users\Vondy\AppData\Local\VMware
  966. 2017-06-25 21:59 - 2017-06-25 21:59 - 000001024 _____ C:\Windows\SysWOW64\%TMP%
  967. 2017-06-25 21:58 - 2017-06-27 14:57 - 000000000 ____D C:\ProgramData\VMware
  968. 2017-06-25 21:37 - 2017-08-30 17:51 - 000000000 ____D C:\Users\Vondy\AppData\LocalLow\uTorrent
  969. 2017-06-25 21:37 - 2017-06-25 21:37 - 000002639 _____ C:\Users\Vondy\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
  970. 2017-06-25 21:35 - 2017-08-30 21:06 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\uTorrent
  971. 2017-06-23 10:59 - 2017-06-23 10:59 - 000950160 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\Windows\system32\Drivers\atc.sys
  972. 2017-06-22 15:56 - 2017-06-22 15:56 - 000000000 ____D C:\ProgramData\libproxycap
  973. 2017-06-22 14:38 - 2017-07-16 21:43 - 000000000 ____D C:\Users\Vondy\AppData\Local\Torifier
  974. 2017-06-22 11:42 - 2016-03-23 18:40 - 003181568 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
  975. 2017-06-22 11:42 - 2016-03-23 18:40 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
  976. 2017-06-22 11:41 - 2017-03-07 10:05 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
  977.  
  978. ==================== Three Months Modified files and folders ========
  979.  
  980. (If an entry is included in the fixlist, the file/folder will be moved.)
  981.  
  982. 2017-09-19 15:07 - 2017-06-15 09:12 - 000000000 ____D C:\Program Files\Bitdefender Antivirus Free
  983. 2017-09-19 15:06 - 2009-07-14 00:45 - 000033440 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  984. 2017-09-19 15:06 - 2009-07-14 00:45 - 000033440 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  985. 2017-09-19 15:00 - 2017-06-14 23:58 - 000000000 ____D C:\Program Files\Bitdefender Agent
  986. 2017-09-19 14:58 - 2017-06-14 23:56 - 000253856 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
  987. 2017-09-19 14:57 - 2009-07-14 01:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
  988. 2017-09-19 03:54 - 2017-04-19 18:32 - 000000388 _____ C:\Windows\Tasks\update-sys.job
  989. 2017-09-19 02:09 - 2017-04-19 18:32 - 000000388 _____ C:\Windows\Tasks\update-S-1-5-21-943429571-515038988-1173784223-1000.job
  990. 2017-09-19 00:22 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\rescache
  991. 2017-09-18 22:21 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\inf
  992. 2017-09-18 16:35 - 2017-06-01 05:31 - 000000000 ____D C:\Windows\system32\appmgmt
  993. 2017-09-18 15:18 - 2017-04-18 23:45 - 000000000 ____D C:\Users\Vondy\AppData\Local\Bluestacks
  994. 2017-09-18 15:18 - 2009-07-13 23:20 - 000000000 __RHD C:\Users\Public\Libraries
  995. 2017-09-17 17:11 - 2017-06-01 05:23 - 000000000 ____D C:\Windows\pss
  996. 2017-09-17 16:58 - 2009-07-13 23:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy
  997. 2017-09-17 16:58 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
  998. 2017-09-17 16:57 - 2009-07-14 01:13 - 000781790 _____ C:\Windows\system32\PerfStringBackup.INI
  999. 2017-09-17 16:47 - 2017-04-18 23:15 - 000000000 ____D C:\Users\Vondy
  1000. 2017-09-14 06:20 - 2009-07-14 00:45 - 000268392 _____ C:\Windows\system32\FNTCACHE.DAT
  1001. 2017-09-13 23:20 - 2017-06-17 22:36 - 000000000 ____D C:\Windows\system32\MRT
  1002. 2017-09-13 23:16 - 2017-06-17 22:35 - 138202976 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
  1003. 2017-09-13 19:21 - 2017-05-22 00:11 - 000000000 ____D C:\Users\Vondy\AppData\LocalLow\Mozilla
  1004. 2017-09-13 06:34 - 2017-04-18 23:39 - 000773912 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
  1005. 2017-09-12 19:35 - 2017-05-22 00:15 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  1006. 2017-09-12 19:35 - 2017-05-22 00:15 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  1007. 2017-09-12 19:35 - 2017-05-22 00:15 - 000004324 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
  1008. 2017-09-12 19:35 - 2017-05-22 00:15 - 000000000 ____D C:\Windows\SysWOW64\Macromed
  1009. 2017-09-12 19:35 - 2017-05-22 00:15 - 000000000 ____D C:\Windows\system32\Macromed
  1010. 2017-09-06 19:23 - 2017-05-01 15:29 - 000000000 ____D C:\Users\Vondy\AppData\Local\ElevatedDiagnostics
  1011. 2017-09-06 06:20 - 2017-04-19 17:46 - 000000000 ____D C:\Program Files (x86)\Windscribe
  1012. 2017-09-03 17:01 - 2017-05-14 18:48 - 000000829 _____ C:\Users\Vondy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk
  1013. 2017-08-29 15:25 - 2017-06-15 09:14 - 001763744 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys
  1014. 2017-08-27 20:12 - 2017-04-19 02:44 - 000000000 ____D C:\Windows\Panther
  1015. 2017-08-25 20:42 - 2017-04-18 23:18 - 000002195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
  1016. 2017-08-25 20:42 - 2017-04-18 23:18 - 000002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
  1017. 2017-08-21 14:26 - 2017-06-15 10:06 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maxthon Nitro
  1018. 2017-08-21 14:26 - 2017-06-15 09:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Antivirus Free
  1019. 2017-08-21 14:26 - 2017-06-14 23:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
  1020. 2017-08-21 14:26 - 2017-05-21 21:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  1021. 2017-08-21 14:26 - 2017-05-06 22:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightshot
  1022. 2017-08-21 14:26 - 2017-04-18 23:50 - 000000000 ____D C:\Windows\SysWOW64\x64
  1023. 2017-08-21 14:26 - 2011-04-12 04:28 - 000000000 ___RD C:\Users\Public\Recorded TV
  1024. 2017-08-21 14:26 - 2009-07-14 01:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
  1025. 2017-08-21 14:26 - 2009-07-13 23:20 - 000000000 __RSD C:\Windows\Media
  1026. 2017-08-21 14:26 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\system32\NDF
  1027. 2017-08-21 14:26 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\PolicyDefinitions
  1028. 2017-08-21 14:26 - 2009-07-13 23:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared
  1029. 2017-08-21 09:12 - 2017-05-05 17:41 - 000000000 ____D C:\Users\Vondy\AppData\Roaming\Skype
  1030. 2017-08-21 08:58 - 2017-03-26 16:32 - 000000000 ___HD C:\$GetCurrent
  1031. 2017-08-21 01:51 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\Registration
  1032. 2017-08-20 23:42 - 2017-04-19 02:44 - 000008192 __RSH C:\BOOTSECT.BAK
  1033.  
  1034. ==================== Files in the root of some directories =======
  1035.  
  1036. 2017-08-05 19:36 - 2017-08-05 19:37 - 000000163 _____ () C:\Users\Vondy\AppData\Roaming\PLGComp.ini
  1037. 2017-06-03 15:54 - 2017-06-03 15:54 - 000001181 _____ () C:\Users\Vondy\AppData\Roaming\trace_FilterInstaller.1.txt
  1038. 2017-06-03 15:54 - 2017-06-06 20:04 - 000000919 _____ () C:\Users\Vondy\AppData\Roaming\trace_FilterInstaller.txt
  1039. 2017-06-03 15:54 - 2017-06-06 20:04 - 000000000 _____ () C:\Users\Vondy\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
  1040. 2017-06-03 02:52 - 2017-07-16 21:29 - 000007597 _____ () C:\Users\Vondy\AppData\Local\resmon.resmoncfg
  1041. 2017-04-19 15:45 - 2017-04-19 15:45 - 000000552 _____ () C:\Users\Vondy\AppData\Local\TroubleshooterConfig.json
  1042. 2017-04-19 18:32 - 2017-04-19 18:32 - 000000003 _____ () C:\Users\Vondy\AppData\Local\updater.log
  1043. 2017-04-19 18:32 - 2017-05-06 22:36 - 000000425 _____ () C:\Users\Vondy\AppData\Local\UserProducts.xml
  1044. 2017-04-18 23:26 - 2017-04-18 23:26 - 000050386 _____ () C:\ProgramData\agent.1492572357.bdinstall.bin
  1045. 2017-04-19 16:47 - 2017-04-19 16:47 - 000029153 _____ () C:\ProgramData\agent.1492634858.bdinstall.bin
  1046. 2017-06-14 23:58 - 2017-06-14 23:58 - 000047198 _____ () C:\ProgramData\agent.1497499107.bdinstall.bin
  1047. 2017-06-15 00:00 - 2017-06-15 00:00 - 000028750 _____ () C:\ProgramData\agent.1497499181.bdinstall.bin
  1048. 2017-06-15 09:11 - 2017-06-15 09:11 - 000028750 _____ () C:\ProgramData\agent.1497532289.bdinstall.bin
  1049. 2017-08-30 19:35 - 2017-08-30 19:35 - 000028750 _____ () C:\ProgramData\agent.1504136135.bdinstall.bin
  1050. 2017-08-30 19:36 - 2017-08-30 19:36 - 000030959 _____ () C:\ProgramData\agent.update.1504136188.bdinstall.bin
  1051.  
  1052. Some files in TEMP:
  1053. ====================
  1054. 2017-09-18 15:18 - 2017-04-07 02:41 - 000782872 _____ (BlueStack Systems, Inc.) C:\Users\Vondy\AppData\Local\Temp\HD-Common.dll
  1055. 2017-09-18 15:18 - 2017-04-07 02:41 - 000464920 _____ (BlueStack Systems, Inc.) C:\Users\Vondy\AppData\Local\Temp\HD-InstallerUtils.dll
  1056. 2017-09-18 15:18 - 2017-04-07 02:39 - 000187416 _____ (BlueStack Systems) C:\Users\Vondy\AppData\Local\Temp\HD-LibraryHandler.dll
  1057. 2017-09-18 15:18 - 2017-04-07 02:38 - 000246808 _____ (BlueStack Systems) C:\Users\Vondy\AppData\Local\Temp\HD-Logger-Native.dll
  1058. 2017-09-18 15:18 - 2017-04-07 02:41 - 000385048 _____ (BlueStack Systems, Inc.) C:\Users\Vondy\AppData\Local\Temp\HD-Uninstaller.exe
  1059.  
  1060. Some zero byte size files/folders:
  1061. ==========================
  1062. C:\Windows\System32\vp6vfw.dll
  1063.  
  1064. ==================== Bamital & volsnap ======================
  1065.  
  1066. (There is no automatic fix for files that do not pass verification.)
  1067.  
  1068. C:\Windows\system32\winlogon.exe => File is digitally signed
  1069. C:\Windows\system32\wininit.exe => File is digitally signed
  1070. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  1071. C:\Windows\explorer.exe => File is digitally signed
  1072. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  1073. C:\Windows\system32\svchost.exe => File is digitally signed
  1074. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  1075. C:\Windows\system32\services.exe => File is digitally signed
  1076. C:\Windows\system32\User32.dll => File is digitally signed
  1077. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  1078. C:\Windows\system32\userinit.exe => File is digitally signed
  1079. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  1080. C:\Windows\system32\rpcss.dll => File is digitally signed
  1081. C:\Windows\system32\dnsapi.dll => File is digitally signed
  1082. C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
  1083. C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
  1084.  
  1085. ==================== BCD ================================
  1086.  
  1087. Windows Boot Manager
  1088. --------------------
  1089. identifier {bootmgr}
  1090. device partition=C:
  1091. description Windows Boot Manager
  1092. locale en-US
  1093. inherit {globalsettings}
  1094. default {current}
  1095. resumeobject {9fc0a5a0-24cb-11e7-ac63-e9f5f56954ba}
  1096. displayorder {current}
  1097. toolsdisplayorder {memdiag}
  1098. timeout 30
  1099.  
  1100. Windows Boot Loader
  1101. -------------------
  1102. identifier {current}
  1103. device partition=C:
  1104. path \Windows\system32\winload.exe
  1105. description Windows 7
  1106. locale en-US
  1107. inherit {bootloadersettings}
  1108. recoverysequence {9fc0a5a2-24cb-11e7-ac63-e9f5f56954ba}
  1109. recoveryenabled Yes
  1110. osdevice partition=C:
  1111. systemroot \Windows
  1112. resumeobject {9fc0a5a0-24cb-11e7-ac63-e9f5f56954ba}
  1113. nx OptIn
  1114. numproc 2
  1115. usefirmwarepcisettings No
  1116.  
  1117. Windows Boot Loader
  1118. -------------------
  1119. identifier {9fc0a5a2-24cb-11e7-ac63-e9f5f56954ba}
  1120. device ramdisk=[C:]\Recovery\9fc0a5a2-24cb-11e7-ac63-e9f5f56954ba\Winre.wim,{9fc0a5a3-24cb-11e7-ac63-e9f5f56954ba}
  1121. path \windows\system32\winload.exe
  1122. description Windows Recovery Environment
  1123. inherit {bootloadersettings}
  1124. osdevice ramdisk=[C:]\Recovery\9fc0a5a2-24cb-11e7-ac63-e9f5f56954ba\Winre.wim,{9fc0a5a3-24cb-11e7-ac63-e9f5f56954ba}
  1125. systemroot \windows
  1126. nx OptIn
  1127. winpe Yes
  1128.  
  1129. Resume from Hibernate
  1130. ---------------------
  1131. identifier {9fc0a5a0-24cb-11e7-ac63-e9f5f56954ba}
  1132. device partition=C:
  1133. path \Windows\system32\winresume.exe
  1134. description Windows Resume Application
  1135. locale en-US
  1136. inherit {resumeloadersettings}
  1137. filedevice partition=C:
  1138. filepath \hiberfil.sys
  1139. debugoptionenabled No
  1140.  
  1141. Windows Memory Tester
  1142. ---------------------
  1143. identifier {memdiag}
  1144. device partition=C:
  1145. path \boot\memtest.exe
  1146. description Windows Memory Diagnostic
  1147. locale en-US
  1148. inherit {globalsettings}
  1149. badmemoryaccess Yes
  1150.  
  1151. EMS Settings
  1152. ------------
  1153. identifier {emssettings}
  1154. bootems Yes
  1155.  
  1156. Debugger Settings
  1157. -----------------
  1158. identifier {dbgsettings}
  1159. debugtype Serial
  1160. debugport 1
  1161. baudrate 115200
  1162.  
  1163. RAM Defects
  1164. -----------
  1165. identifier {badmemory}
  1166.  
  1167. Global Settings
  1168. ---------------
  1169. identifier {globalsettings}
  1170. inherit {dbgsettings}
  1171. {emssettings}
  1172. {badmemory}
  1173.  
  1174. Boot Loader Settings
  1175. --------------------
  1176. identifier {bootloadersettings}
  1177. inherit {globalsettings}
  1178. {hypervisorsettings}
  1179.  
  1180. Hypervisor Settings
  1181. -------------------
  1182. identifier {hypervisorsettings}
  1183. hypervisordebugtype Serial
  1184. hypervisordebugport 1
  1185. hypervisorbaudrate 115200
  1186.  
  1187. Resume Loader Settings
  1188. ----------------------
  1189. identifier {resumeloadersettings}
  1190. inherit {globalsettings}
  1191.  
  1192. Device options
  1193. --------------
  1194. identifier {9fc0a5a3-24cb-11e7-ac63-e9f5f56954ba}
  1195. description Ramdisk Options
  1196. ramdisksdidevice partition=C:
  1197. ramdisksdipath \Recovery\9fc0a5a2-24cb-11e7-ac63-e9f5f56954ba\boot.sdi
  1198.  
  1199.  
  1200. LastRegBack: 2017-09-10 13:28
  1201.  
  1202. ==================== End of FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!