РЕШЕН Зловреден код показващ ми множество реклами

Христина Николова · Януари 2, 2016

Здравейте,

Вчера ми излезе съобщение, че трябва да направя update на K-lite kodec. Изтеглих го и го инсталирах и от тогава при сърфиране в интернет с Google chrome и Firefox ми излизат множество рекламни прозорци на страницата, при цъкане на някоя страница се отварят няколко други и като цяло е ужасно. Изобщо не мога нищо да разгледам.

Следвах инструкциите. Сканирах с Malwarebytes Anti-Malware, излезе ми, че имам 65 заплахи, които изтрих и след това рестартирах. Ето и резултата от сканирането:

Malwarebytes Anti-Malware

www.malwarebytes.org

Scan Date: 2.1.2016 г.

Scan Time: 17:29 ч.

Logfile: Malware scan.txt

Administrator: Yes

Version: 2.2.0.1024

Malware Database: v2016.01.02.04

Rootkit Database: v2015.12.26.01

License: Free

Malware Protection: Disabled

Malicious Website Protection: Disabled

Self-protection: Disabled

OS: Windows 7 Service Pack 1

CPU: x64

File System: NTFS

User: Dell

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 323387

Time Elapsed: 9 min, 54 sec

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Enabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

Processes: 1

PUP.Optional.Yontoo, C:\Program Files (x86)\Common Files\48ed1695-d484-472b-bd42-582714ef1368\updater.exe, 2256, Delete-on-Reboot, [8a5285af8514c47259a77d3851b0d030]

Modules: 0

(No malicious items detected)

Registry Keys: 21

PUP.Optional.Yontoo, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update Mgr MiddleRush, Quarantined, [8a5285af8514c47259a77d3851b0d030],

PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\CLSID\{E104B9E4-01BA-4AAF-9957-6A525CC5451A}, Quarantined, [0cd010244158a39338a576cdfd055ca4],

PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E104B9E4-01BA-4AAF-9957-6A525CC5451A}, Quarantined, [0cd010244158a39338a576cdfd055ca4],

PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E104B9E4-01BA-4AAF-9957-6A525CC5451A}, Quarantined, [0cd010244158a39338a576cdfd055ca4],

PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B853E835-9F24-4F4B-B55C-E554D15CCCD2}, Quarantined, [e4f8013325747cbaa834ea5940c227d9],

PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{B853E835-9F24-4F4B-B55C-E554D15CCCD2}, Quarantined, [e4f8013325747cbaa834ea5940c227d9],

PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{d00ab4cc-662c-40b6-a85f-d53086f4bb16}, Quarantined, [c616f93bd9c064d261294f2781819868],

PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{d00ab4cc-662c-40b6-a85f-d53086f4bb16}, Quarantined, [c616f93bd9c064d261294f2781819868],

PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\TYPELIB\{1ca43a3d-3e65-435f-a71d-73a1db05e389}, Quarantined, [c616f93bd9c064d261294f2781819868],

PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\INTERFACE\{88459867-DD98-45C8-B96A-B12B77CB698B}, Quarantined, [c616f93bd9c064d261294f2781819868],

PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{88459867-DD98-45C8-B96A-B12B77CB698B}, Quarantined, [c616f93bd9c064d261294f2781819868],

PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{88459867-DD98-45C8-B96A-B12B77CB698B}, Quarantined, [c616f93bd9c064d261294f2781819868],

PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{1ca43a3d-3e65-435f-a71d-73a1db05e389}, Quarantined, [c616f93bd9c064d261294f2781819868],

PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{1ca43a3d-3e65-435f-a71d-73a1db05e389}, Quarantined, [c616f93bd9c064d261294f2781819868],

PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{D00AB4CC-662C-40B6-A85F-D53086F4BB16}, Quarantined, [c616f93bd9c064d261294f2781819868],

PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}, Quarantined, [aa32fb398d0c83b36c744003a55d956b],

PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}, Quarantined, [aa32fb398d0c83b36c744003a55d956b],

PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Middle Rush, Quarantined, [2bb147eda2f71d19669aa90c748dfd03],

PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\MiddleRush, Quarantined, [f6e6d55fecad8bab524e5eab73917f81],

PUP.Optional.PluginContainer, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SERVICE MGR MIDDLERUSH, Quarantined, [b7258aaa5a3fd95dbc9f5d6230d341bf],

PUP.Optional.ProductSetup, HKU\S-1-5-21-3507426487-3905541825-2756082460-1000\SOFTWARE\PRODUCTSETUP, Quarantined, [86564de70990f1457028d3ee05fea060],

Registry Values: 3

PUP.Optional.PluginContainer, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Service Mgr MiddleRush|ImagePath, "C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\PluginContainer.exe", Quarantined, [b7258aaa5a3fd95dbc9f5d6230d341bf]

PUP.Optional.Updater, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update Mgr MiddleRush|ImagePath, "C:\Program Files (x86)\Common Files\48ed1695-d484-472b-bd42-582714ef1368\updater.exe", Quarantined, [449886ae6d2c280ecd6c765b32d1ad53]

PUP.Optional.ProductSetup, HKU\S-1-5-21-3507426487-3905541825-2756082460-1000\SOFTWARE\PRODUCTSETUP|tb, Quarantined, [86564de70990f1457028d3ee05fea060],

Registry Data: 0

(No malicious items detected)

Folders: 16

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368, Quarantined, [b12bdc58e9b09b9b1a25b800ab57cf31],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\PluginContainer, Quarantined, [b12bdc58e9b09b9b1a25b800ab57cf31],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins, Quarantined, [b12bdc58e9b09b9b1a25b800ab57cf31],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\10, Quarantined, [b12bdc58e9b09b9b1a25b800ab57cf31],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\12, Quarantined, [b12bdc58e9b09b9b1a25b800ab57cf31],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\12\resources, Quarantined, [b12bdc58e9b09b9b1a25b800ab57cf31],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\2, Quarantined, [b12bdc58e9b09b9b1a25b800ab57cf31],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\3, Quarantined, [b12bdc58e9b09b9b1a25b800ab57cf31],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\5, Quarantined, [b12bdc58e9b09b9b1a25b800ab57cf31],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\7, Quarantined, [b12bdc58e9b09b9b1a25b800ab57cf31],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\7\resources, Quarantined, [b12bdc58e9b09b9b1a25b800ab57cf31],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\8, Quarantined, [b12bdc58e9b09b9b1a25b800ab57cf31],

PUP.Optional.Yontoo, C:\Program Files (x86)\Common Files\48ed1695-d484-472b-bd42-582714ef1368, Delete-on-Reboot, [dffda58f2574330346fae6d211f1b050],

PUP.Optional.Yontoo, C:\Program Files (x86)\Common Files\48ed1695-d484-472b-bd42-582714ef1368\updater, Quarantined, [dffda58f2574330346fae6d211f1b050],

PUP.Optional.Yontoo, C:\Program Files (x86)\Middle Rush, Quarantined, [1cc0f242a0f95dd99ca59127a55dcd33],

PUP.Optional.Yontoo, C:\Program Files (x86)\Middle Rush\Extensions, Quarantined, [1cc0f242a0f95dd99ca59127a55dcd33],

Files: 24

PUP.Optional.Yontoo, C:\Program Files (x86)\Common Files\48ed1695-d484-472b-bd42-582714ef1368\updater.exe, Delete-on-Reboot, [8a5285af8514c47259a77d3851b0d030],

PUP.Optional.Yontoo, C:\Program Files (x86)\Middle Rush\Extensions\d00ab4cc-662c-40b6-a85f-d53086f4bb16.dll, Quarantined, [c616f93bd9c064d261294f2781819868],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\10\Plugin.exe, Quarantined, [885402328514b08649b75461e41d7e82],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\12\Plugin.exe, Quarantined, [6577f53f0a8fce68eb15476e8a778878],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\12\resources\plugin.dll, Quarantined, [bd1f7bb9623784b23ac62392649d837d],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\2\Plugin.exe, Quarantined, [eaf237fd940571c5768ac8edca37f10f],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\3\Plugin.exe, Quarantined, [cd0fe45015840e2833cd2a8b98691be5],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\7\Plugin.exe, Quarantined, [ad2fe153a1f885b140c031849170916f],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\7\resources\40.0.0.dll, Quarantined, [d50755dfaaef55e1d32db9fca75a1ee2],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\7\resources\45.0.1.dll, Quarantined, [16c679bbd3c63ef805fb6b4a9b66ae52],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\plugins\8\Plugin.exe, Quarantined, [d00c46ee2376ff37ea16d8ddec15847c],

PUP.Optional.Yontoo, C:\Program Files (x86)\Middle Rush\Uninstaller.exe, Quarantined, [2bb147eda2f71d19669aa90c748dfd03],

PUP.Optional.InstallCore, C:\Users\Dell\AppData\Local\Temp\ICReinstall_Codec_Pack_Basic.exe, Quarantined, [f1eb47ed0099cf67a21abc8ef30e867a],

PUP.Optional.Yontoo, C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.kingtopdeals.com_0.localstorage, Delete-on-Reboot, [32aab084683189add7c5665637cbfb05],

PUP.Optional.Yontoo, C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.kingtopdeals.com_0.localstorage-journal, Delete-on-Reboot, [54880f250396b086acf03b8128da10f0],

PUP.Optional.Yontoo.ChrPRST, C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_middlerush-a.akamaihd.net_0.localstorage, Delete-on-Reboot, [eaf256defc9d79bd980b5eabfd07857b],

PUP.Optional.Yontoo.ChrPRST, C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_middlerush-a.akamaihd.net_0.localstorage-journal, Delete-on-Reboot, [5d7fc86cb2e7d462594ad13805fff010],

PUP.Optional.PriceMoon, C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.pricemoon.co_0.localstorage, Delete-on-Reboot, [8f4d062eb2e70b2b33de55c68b7902fe],

PUP.Optional.PriceMoon, C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.pricemoon.co_0.localstorage-journal, Delete-on-Reboot, [a735e1533762c670b75a0714fb0955ab],

PUP.Optional.Yontoo, C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\temp, Quarantined, [b12bdc58e9b09b9b1a25b800ab57cf31],

PUP.Optional.Yontoo, C:\Program Files (x86)\Middle Rush\7za.exe, Quarantined, [1cc0f242a0f95dd99ca59127a55dcd33],

PUP.Optional.Yontoo, C:\Program Files (x86)\Middle Rush\Extensions\cgoipkpiboplnnmodjhbmgpdegnomgdf.crx, Quarantined, [1cc0f242a0f95dd99ca59127a55dcd33],

PUP.Optional.Yontoo, C:\Program Files (x86)\Middle Rush\Extensions\{5e37b501-adc4-48f4-aae0-553fc40ba814}.xpi, Quarantined, [1cc0f242a0f95dd99ca59127a55dcd33],

PUM.Optional.FireFoxSearchOverride, C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\a8wtlefq.default\user.js, Quarantined, [b22ad95bbbdeae88ea5b54759a6a56aa],

Physical Sectors: 0

(No malicious items detected)

(end)

След това сканирах и с FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-12-2015

Ran by Dell (administrator) on DELL-PC (02-01-2016 18:01:16)

Running from C:\Users\Dell\Desktop

Loaded Profiles: Dell (Available Profiles: Dell)

Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [sysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-06-17] (IDT, Inc.)

HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2009-12-23] (Synaptics Incorporated)

HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [85160 2009-06-17] (Elaborate Bytes AG)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-08] (AVAST Software)

HKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-06-01] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKU\S-1-5-21-3507426487-3905541825-2756082460-1000\...\MountPoints2: {c3466eec-8ff0-11e5-a5d1-f04da2ce6f6d} - G:\SETUP.EXE

HKU\S-1-5-21-3507426487-3905541825-2756082460-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-12-08] (AVAST Software)

CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 4.2.2.1 78.159.128.2

Tcpip\..\Interfaces\{16ABC5A5-AC2E-468A-9463-35EAE25CA632}: [DhcpNameServer] 8.8.8.8 4.2.2.1 78.159.128.2

Internet Explorer:

==================

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-20] (AVAST Software)

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-20] (AVAST Software)

FireFox:

========

FF ProfilePath: C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\a8wtlefq.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-20] ()

FF Plugin: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-20] ()

FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)

FF Extension: signTextJS - C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\a8wtlefq.default\Extensions\jid1-AXn9cXcB4fD1QQ@jetpack.xpi [2015-11-30]

FF Extension: Middle Rush - C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\a8wtlefq.default\Extensions\{5e37b501-adc4-48f4-aae0-553fc40ba814}.xpi [2016-01-01] [not signed]

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-08]

FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF

FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2015-12-08]

Chrome:

=======

CHR Profile: C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Презентации) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-02]

CHR Extension: (Google Документи) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-02]

CHR Extension: (Google Диск) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-02]

CHR Extension: (YouTube) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-02]

CHR Extension: (Google Търсене) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-02]

CHR Extension: (Електронни таблици от Google) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-02]

CHR Extension: (Google Документи офлайн) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-02]

CHR Extension: (Avast Online Security) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-01-02]

CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-02]

CHR Extension: (Gmail) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-02]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-20]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-08] (AVAST Software)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-12-08] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-12-18] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-12-08] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-12-08] (AVAST Software)

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1055560 2015-12-08] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [451040 2015-12-18] (AVAST Software)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2015-12-08] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-12-08] (AVAST Software)

S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)

S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-02 18:01 - 2016-01-02 18:01 - 00010225 _____ C:\Users\Dell\Desktop\FRST.txt

2016-01-02 18:01 - 2016-01-02 18:01 - 00000000 ____D C:\FRST

2016-01-02 18:00 - 2016-01-02 18:00 - 00010911 _____ C:\Users\Dell\Desktop\Malware scan.txt

2016-01-02 17:26 - 2016-01-02 17:59 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2016-01-02 17:25 - 2016-01-02 17:25 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2016-01-02 17:25 - 2016-01-02 17:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2016-01-02 17:25 - 2016-01-02 17:25 - 00000000 ____D C:\ProgramData\Malwarebytes

2016-01-02 17:25 - 2016-01-02 17:25 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2016-01-02 17:25 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys

2016-01-02 17:25 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2016-01-02 17:25 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys

2016-01-02 17:24 - 2016-01-02 17:24 - 22908888 _____ (Malwarebytes ) C:\Users\Dell\Downloads\mbam-setup-2.2.0.1024.exe

2016-01-02 16:58 - 2016-01-02 16:58 - 02370560 _____ (Farbar) C:\Users\Dell\Downloads\FRST64.exe

2016-01-02 16:58 - 2016-01-02 16:58 - 02370560 _____ (Farbar) C:\Users\Dell\Desktop\FRST64.exe

2016-01-02 13:25 - 2016-01-02 13:25 - 00002337 _____ C:\Users\Dell\Desktop\Стартов панел с приложения за Chrome.lnk

2016-01-02 13:25 - 2016-01-02 13:25 - 00000000 ____D C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Приложения в Chrome

2016-01-02 13:25 - 2016-01-02 13:25 - 00000000 ____D C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

2016-01-02 11:28 - 2016-01-02 17:57 - 00000258 __RSH C:\ProgramData\ntuser.pol

2016-01-01 20:17 - 2016-01-01 20:18 - 09746554 _____ ( ) C:\Users\Dell\Downloads\klcp_update_1182_20151231.exe

2016-01-01 19:58 - 2016-01-01 19:58 - 10501064 _____ (CCCP Project ) C:\Users\Dell\Downloads\Codec_Pack_Basic [1].exe

2016-01-01 19:58 - 2016-01-01 19:58 - 00000000 ____D C:\Users\Dell\AppData\Local\AION

2015-12-29 19:51 - 2016-01-01 16:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2015-12-29 16:14 - 2015-12-29 16:14 - 00015768 _____ C:\Users\Dell\Downloads\The.Judgment.2014.SATRip.XviD.BGAUDiO-SiSO (1).torrent

2015-12-27 15:48 - 2015-12-27 15:48 - 00047120 _____ C:\Users\Dell\Downloads\Downton.Abbey.S06E09.HDTV.x264-TLA.torrent

2015-12-27 15:48 - 2015-12-27 15:48 - 00038164 _____ C:\Users\Dell\Downloads\Downton.Abbey.S06E08.HDTV.x264-ORGANiC.torrent

2015-12-27 15:48 - 2015-12-27 15:48 - 00038164 _____ C:\Users\Dell\Downloads\Downton.Abbey.S06E08.HDTV.x264-ORGANiC (1).torrent

2015-12-27 15:48 - 2015-12-27 15:48 - 00031820 _____ C:\Users\Dell\Downloads\Downton.Abbey.S06E08.HDTV.x264_ORGANiC.(subs.sab.bz).zip

2015-12-27 15:47 - 2015-12-27 15:47 - 00023331 _____ C:\Users\Dell\Downloads\Downton.Abbey.S06E07.HDTV.x264_ORGANiC.(subs.sab.bz).zip

2015-12-27 15:45 - 2015-12-27 15:45 - 00014124 _____ C:\Users\Dell\Downloads\Downton.Abbey.S06E07.HDTV.x264-ORGANiC.mp4.torrent

2015-12-27 15:44 - 2015-12-27 15:44 - 00024945 _____ C:\Users\Dell\Downloads\Downton.Abbey.S06E06.HDTV.x264_ORGANiC.(subs.sab.bz).zip

2015-12-27 15:44 - 2015-12-27 15:44 - 00011924 _____ C:\Users\Dell\Downloads\Downton.Abbey.S06E06.HDTV.x264-ORGANiC.mp4.torrent

2015-12-27 15:43 - 2015-12-27 15:43 - 00025290 _____ C:\Users\Dell\Downloads\Downton.Abbey.S06E05.HDTV.x264_ORGANiC.(subs.sab.bz).zip

2015-12-27 15:43 - 2015-12-27 15:43 - 00024868 _____ C:\Users\Dell\Downloads\Downton.Abbey.S06E04.HDTV.x264_ORGANiC.(subs.sab.bz).zip

2015-12-27 15:43 - 2015-12-27 15:43 - 00012084 _____ C:\Users\Dell\Downloads\Downton.Abbey.S06E05.HDTV.x264-ORGANiC.mp4.torrent

2015-12-27 15:42 - 2015-12-27 15:42 - 00022942 _____ C:\Users\Dell\Downloads\Downton.Abbey.S06E03.HDTV.x264_ORGANiC.(subs.sab.bz).zip

2015-12-27 15:42 - 2015-12-27 15:42 - 00011759 _____ C:\Users\Dell\Downloads\Downton Abbey.S06E03.HDTV.x264-ORGANiC.torrent

2015-12-27 15:42 - 2015-12-27 15:42 - 00011552 _____ C:\Users\Dell\Downloads\Downton Abbey S06E04.HDTV.x264-ORGANiC.torrent

2015-12-27 15:41 - 2015-12-27 15:41 - 00024070 _____ C:\Users\Dell\Downloads\Downton.Abbey.S06E02.HDTV.x264_ORGANiC.(subs.sab.bz).zip

2015-12-27 15:40 - 2015-12-27 15:40 - 00012579 _____ C:\Users\Dell\Downloads\Downton Abbey.S06E02.HDTV.x264-ORGANiC.torrent

2015-12-27 14:45 - 2015-12-27 14:45 - 00018481 _____ C:\Users\Dell\Downloads\The.Good.Wife.S07E09.HDTV.x264-LOL.torrent

2015-12-27 14:45 - 2015-12-27 14:45 - 00015361 _____ C:\Users\Dell\Downloads\The.Good.Wife.S07E10.HDTV.x264-LOL.torrent

2015-12-27 14:45 - 2015-12-27 14:45 - 00014952 _____ C:\Users\Dell\Downloads\the.good.wife.708.hdtv-lol.mp4.torrent

2015-12-27 14:43 - 2015-12-27 14:43 - 00016572 _____ C:\Users\Dell\Downloads\the.good.wife.707.hdtv-lol.mp4.torrent

2015-12-27 14:43 - 2015-12-27 14:43 - 00016572 _____ C:\Users\Dell\Downloads\the.good.wife.707.hdtv-lol.mp4 (1).torrent

2015-12-25 19:20 - 2015-12-25 19:20 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf

2015-12-20 16:48 - 2015-12-27 15:49 - 00000000 ____D C:\Users\Dell\Desktop\Snimki OLX

2015-12-18 22:00 - 2015-12-18 22:00 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01005.Wdf

2015-12-18 13:38 - 2015-12-18 13:38 - 00013691 _____ C:\Users\Dell\Downloads\the.originals.s03e09(subsunacs.net).rar

2015-12-18 13:37 - 2015-12-18 13:37 - 00014615 _____ C:\Users\Dell\Downloads\the.originals.s03e08(subsunacs.net).rar

2015-12-18 13:37 - 2015-12-18 13:37 - 00014481 _____ C:\Users\Dell\Downloads\The.Originals.S03E09.HDTV.XviD-FUM.torrent

2015-12-18 13:36 - 2015-12-18 13:36 - 00021109 _____ C:\Users\Dell\Downloads\The.Originals.S03E08.XviD-AFG.torrent

2015-12-18 13:36 - 2015-12-18 13:36 - 00014917 _____ C:\Users\Dell\Downloads\the.originals.s03e07(subsunacs.net).rar

2015-12-18 13:35 - 2015-12-18 13:35 - 00013916 _____ C:\Users\Dell\Downloads\the.originals.s03e06(subsunacs.net).rar

2015-12-18 13:35 - 2015-12-18 13:35 - 00012115 _____ C:\Users\Dell\Downloads\The.Originals.S03E07.XviD-AFG.avi.torrent

2015-12-18 13:34 - 2015-12-18 13:34 - 00011663 _____ C:\Users\Dell\Downloads\The.Originals.S03E06.XviD-AFG.avi.torrent

2015-12-18 13:33 - 2015-12-18 13:33 - 00014861 _____ C:\Users\Dell\Downloads\the.originals.s03e05(subsunacs.net).rar

2015-12-18 13:33 - 2015-12-18 13:33 - 00011523 _____ C:\Users\Dell\Downloads\The.Originals.S03E05.XviD-AFG.avi.torrent

2015-12-18 13:32 - 2015-12-18 13:32 - 00013409 _____ C:\Users\Dell\Downloads\the.originals.s03e04(subsunacs.net).rar

2015-12-18 13:32 - 2015-12-18 13:32 - 00013301 _____ C:\Users\Dell\Downloads\The.Originals.S03E04.XviD-AFG.torrent

2015-12-18 13:31 - 2015-12-18 13:31 - 00014543 _____ C:\Users\Dell\Downloads\the.originals.s03e03(subsunacs.net).rar

2015-12-18 13:31 - 2015-12-18 13:31 - 00014384 _____ C:\Users\Dell\Downloads\The.Originals.S03E03.HDTV.XviD-FUM.torrent

2015-12-17 23:03 - 2015-12-17 23:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf

2015-12-14 22:46 - 2015-12-14 22:46 - 00070176 _____ C:\Users\Dell\Downloads\Arrow.S04E09.(subs.sab.bz).rar

2015-12-14 22:46 - 2015-12-14 22:46 - 00070176 _____ C:\Users\Dell\Downloads\Arrow.S04E09.(subs.sab.bz) (1).rar

2015-12-14 22:45 - 2015-12-14 22:45 - 00010737 _____ C:\Users\Dell\Downloads\Arrow.S04E09.XviD-AFG.avi.torrent

2015-12-13 15:10 - 2015-12-13 15:10 - 00010972 _____ C:\Users\Dell\Downloads\pretty.little.liars.s06.special-5.years.forward.hdtv.x264-bajskorv.mp4.torrent

2015-12-13 10:00 - 2015-12-13 10:00 - 00018858 _____ C:\Users\Dell\Downloads\the.vampire.diaries.709.hdtv-lol.mp4.torrent

2015-12-13 09:56 - 2015-12-13 09:56 - 00015768 _____ C:\Users\Dell\Downloads\The.Judgment.2014.SATRip.XviD.BGAUDiO-SiSO.torrent

2015-12-09 19:01 - 2015-11-20 20:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-12-09 19:01 - 2015-11-20 20:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-12-09 19:01 - 2015-11-20 20:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-12-09 19:01 - 2015-11-20 20:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-12-09 19:01 - 2015-11-20 20:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-12-09 19:01 - 2015-11-20 20:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-12-09 19:01 - 2015-11-20 20:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-12-09 19:01 - 2015-11-20 20:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-12-09 19:01 - 2015-11-20 20:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-12-09 19:01 - 2015-11-20 20:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-12-09 19:01 - 2015-11-20 20:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-12-09 19:01 - 2015-11-20 20:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-12-09 19:01 - 2015-11-20 20:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-12-09 19:01 - 2015-11-20 20:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-12-09 19:01 - 2015-11-20 20:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-12-09 19:01 - 2015-11-20 20:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-12-09 19:01 - 2015-11-11 23:12 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-12-09 19:01 - 2015-11-11 22:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-12-09 19:01 - 2015-11-11 20:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll

2015-12-09 19:01 - 2015-11-11 20:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll

2015-12-09 19:01 - 2015-11-11 20:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll

2015-12-09 19:01 - 2015-11-11 20:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll

2015-12-09 19:01 - 2015-11-11 18:21 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-12-09 19:01 - 2015-11-11 18:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-12-09 19:01 - 2015-11-11 17:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-12-09 19:01 - 2015-11-11 17:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-12-09 19:01 - 2015-11-11 17:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-12-09 19:01 - 2015-11-11 17:12 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-12-09 19:01 - 2015-11-11 16:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-12-09 19:01 - 2015-11-10 20:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2015-12-09 19:01 - 2015-11-10 20:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2015-12-09 19:01 - 2015-11-10 20:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll

2015-12-09 19:01 - 2015-11-10 20:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2015-12-09 19:01 - 2015-11-10 20:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll

2015-12-09 19:01 - 2015-11-10 19:47 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-12-09 19:01 - 2015-11-10 02:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-12-09 19:01 - 2015-11-10 02:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-12-09 19:01 - 2015-11-10 02:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-12-09 19:01 - 2015-11-10 02:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-12-09 19:01 - 2015-11-10 02:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-12-09 19:01 - 2015-11-10 02:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-12-09 19:01 - 2015-11-10 02:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-12-09 19:01 - 2015-11-10 02:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-12-09 19:01 - 2015-11-10 02:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-12-09 19:01 - 2015-11-10 02:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-12-09 19:01 - 2015-11-10 02:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-12-09 19:01 - 2015-11-10 02:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-12-09 19:01 - 2015-11-10 02:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-12-09 19:01 - 2015-11-10 01:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-12-09 19:01 - 2015-11-10 01:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-12-09 19:01 - 2015-11-10 01:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-12-09 19:01 - 2015-11-10 01:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2015-12-09 19:01 - 2015-11-10 01:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2015-12-09 19:01 - 2015-11-10 01:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-12-09 19:01 - 2015-11-10 01:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-12-09 19:01 - 2015-11-10 01:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-12-09 19:01 - 2015-11-10 01:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-12-09 19:01 - 2015-11-10 01:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-12-09 19:01 - 2015-11-10 01:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-12-09 19:01 - 2015-11-09 00:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-12-09 19:01 - 2015-11-09 00:32 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-12-09 19:01 - 2015-11-09 00:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-12-09 19:01 - 2015-11-09 00:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-12-09 19:01 - 2015-11-09 00:15 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-12-09 19:01 - 2015-11-09 00:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-12-09 19:01 - 2015-11-09 00:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-12-09 19:01 - 2015-11-09 00:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-12-09 19:01 - 2015-11-09 00:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-12-09 19:01 - 2015-11-09 00:06 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-12-09 19:01 - 2015-11-09 00:04 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-12-09 19:01 - 2015-11-09 00:02 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-12-09 19:01 - 2015-11-09 00:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-12-09 19:01 - 2015-11-09 00:01 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-12-09 19:01 - 2015-11-09 00:01 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-12-09 19:01 - 2015-11-09 00:01 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-12-09 19:01 - 2015-11-08 23:52 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-12-09 19:01 - 2015-11-08 23:48 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-12-09 19:01 - 2015-11-08 23:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-12-09 19:01 - 2015-11-08 23:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-12-09 19:01 - 2015-11-08 23:32 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-12-09 19:01 - 2015-11-08 23:29 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2015-12-09 19:01 - 2015-11-08 23:18 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2015-12-09 19:01 - 2015-11-08 23:15 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-12-09 19:01 - 2015-11-08 23:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-12-09 19:01 - 2015-11-08 23:14 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-12-09 19:01 - 2015-11-08 23:14 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-12-09 19:01 - 2015-11-08 23:13 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-12-09 19:01 - 2015-11-08 22:53 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-12-09 19:01 - 2015-11-08 22:41 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-12-09 19:01 - 2015-11-08 22:30 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-12-09 19:01 - 2015-11-05 21:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll

2015-12-09 19:01 - 2015-11-05 21:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll

2015-12-09 19:01 - 2015-11-05 11:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys

2015-12-09 19:01 - 2015-11-03 21:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2015-12-09 19:01 - 2015-11-03 20:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll

2015-12-09 19:00 - 2015-11-03 21:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll

2015-12-09 19:00 - 2015-11-03 20:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll

2015-12-08 19:48 - 2015-12-08 19:48 - 00386096 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2015-12-08 19:48 - 2015-12-08 19:48 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr

2015-12-06 17:20 - 2015-12-06 17:20 - 00000000 ____D C:\Users\Dell\AppData\Roaming\GameHouse

2015-12-06 17:12 - 2015-12-06 17:12 - 00001137 _____ C:\Users\Dell\Desktop\Delicious - Emilys Home Sweet Home Collectors Edition.lnk

2015-12-06 17:12 - 2015-12-06 17:12 - 00000000 ____D C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Delicious - Emilys Home Sweet Home Collectors Edition

2015-12-06 17:10 - 2015-12-06 17:10 - 00016378 _____ C:\Users\Dell\Downloads\Sparkling_Amber_FiNAL.exe.torrent

2015-12-05 15:10 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2015-12-05 15:10 - 2013-11-23 00:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2015-12-05 10:42 - 2015-12-27 14:43 - 00000000 ____D C:\Users\Dell\AppData\LocalLow\uTorrent

2015-12-05 09:57 - 2015-12-05 09:57 - 00000000 ____D C:\Users\Default\AppData\Roaming\AVAST Software

2015-12-05 09:57 - 2015-12-05 09:57 - 00000000 ____D C:\Users\Default User\AppData\Roaming\AVAST Software

2015-12-04 21:14 - 2015-07-30 20:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2015-12-04 21:14 - 2015-07-30 19:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2015-12-04 21:14 - 2015-02-03 05:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-12-04 21:14 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-12-04 21:13 - 2015-02-04 05:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2015-12-04 21:13 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2015-12-04 20:56 - 2015-12-04 20:56 - 00001417 _____ C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-12-04 20:25 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE

2015-12-04 20:21 - 2015-12-04 20:21 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2015-12-04 20:21 - 2015-12-04 20:21 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2015-12-04 20:21 - 2015-12-04 20:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2015-12-04 20:21 - 2015-12-04 20:21 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2015-12-04 20:21 - 2015-12-04 20:21 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2015-12-04 20:21 - 2015-12-04 20:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2015-12-04 20:21 - 2015-12-04 20:21 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2015-12-04 20:21 - 2015-12-04 20:21 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2015-12-04 20:21 - 2015-12-04 20:21 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2015-12-04 20:21 - 2015-12-04 20:21 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2015-12-04 20:21 - 2015-12-04 20:21 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2015-12-04 20:21 - 2015-12-04 20:21 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2015-12-04 20:21 - 2015-12-04 20:21 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2015-12-04 20:21 - 2015-12-04 20:21 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2015-12-04 20:21 - 2015-12-04 20:21 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2015-12-04 20:21 - 2015-12-04 20:21 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2015-12-04 20:21 - 2015-12-04 20:21 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2015-12-04 20:20 - 2015-12-04 20:20 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2015-12-04 20:20 - 2015-12-04 20:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2015-12-04 20:20 - 2015-12-04 20:20 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2015-12-04 20:20 - 2015-12-04 20:20 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll

2015-12-04 02:45 - 2015-07-30 15:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2015-12-04 02:45 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll

2015-12-04 02:34 - 2015-12-04 02:34 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll

2015-12-04 02:31 - 2015-12-04 02:31 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll

2015-12-04 02:31 - 2015-12-04 02:31 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll

2015-12-04 00:44 - 2015-12-04 00:44 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help

2015-12-04 00:44 - 2015-12-04 00:44 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help

2015-12-04 00:41 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys

2015-12-04 00:41 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll

2015-12-04 00:41 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll

2015-12-04 00:33 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll

2015-12-04 00:33 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll

2015-12-04 00:33 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2015-12-04 00:33 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2015-12-04 00:33 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe

2015-12-04 00:33 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll

2015-12-04 00:33 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe

2015-12-04 00:33 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll

2015-12-03 20:07 - 2015-12-03 20:08 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software

2015-12-03 20:07 - 2015-12-03 20:07 - 00000000 ____D C:\Program Files\Common Files\AV

2015-12-03 15:45 - 2015-08-06 20:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-12-03 15:45 - 2015-08-06 20:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll

2015-12-03 15:45 - 2015-08-06 19:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-12-03 15:45 - 2015-08-06 19:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll

2015-12-03 15:45 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2015-12-03 15:45 - 2015-07-10 19:51 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2015-12-03 15:45 - 2015-07-10 19:51 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll

2015-12-03 15:45 - 2015-07-10 19:51 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2015-12-03 15:45 - 2015-07-10 19:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2015-12-03 15:45 - 2015-07-10 19:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2015-12-03 15:45 - 2015-07-10 19:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll

2015-12-03 15:45 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2015-12-03 15:45 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll

2015-12-03 15:45 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx

2015-12-03 15:45 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll

2015-12-03 15:45 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2015-12-03 15:45 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2015-12-03 15:45 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll

2015-12-03 15:45 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx

2015-12-03 15:45 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll

2015-12-03 15:45 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2015-12-03 15:45 - 2015-04-13 05:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe

2015-12-03 15:44 - 2015-07-15 05:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2015-12-03 15:44 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2015-12-03 15:44 - 2015-02-03 05:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2015-12-03 15:44 - 2015-02-03 05:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2015-12-03 15:44 - 2015-02-03 05:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll

2015-12-03 15:44 - 2015-02-03 05:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll

2015-12-03 15:44 - 2015-02-03 05:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2015-12-03 15:44 - 2015-02-03 05:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2015-12-03 15:44 - 2015-02-03 05:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2015-12-03 15:44 - 2015-02-03 05:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll

2015-12-03 15:44 - 2015-02-03 05:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2015-12-03 15:44 - 2015-02-03 05:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2015-12-03 15:44 - 2015-02-03 05:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll

2015-12-03 15:44 - 2015-02-03 05:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll

2015-12-03 15:44 - 2015-02-03 05:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2015-12-03 15:44 - 2015-02-03 05:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll

2015-12-03 15:44 - 2015-02-03 05:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll

2015-12-03 15:44 - 2015-02-03 05:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll

2015-12-03 15:44 - 2015-02-03 05:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-12-03 15:44 - 2015-02-03 05:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2015-12-03 15:44 - 2015-02-03 05:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll

2015-12-03 15:44 - 2015-02-03 05:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-12-03 15:44 - 2015-02-03 05:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2015-12-03 15:44 - 2015-02-03 05:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2015-12-03 15:44 - 2015-02-03 05:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2015-12-03 15:44 - 2015-02-03 05:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2015-12-03 15:44 - 2015-02-03 05:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2015-12-03 15:44 - 2015-02-03 05:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll

2015-12-03 15:44 - 2015-02-03 05:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2015-12-03 15:44 - 2015-02-03 05:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2015-12-03 15:44 - 2015-02-03 05:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe

2015-12-03 15:44 - 2015-02-03 05:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe

2015-12-03 15:44 - 2015-02-03 05:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll

2015-12-03 15:44 - 2015-02-03 05:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2015-12-03 15:44 - 2015-02-03 05:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys

2015-12-03 15:44 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll

2015-12-03 15:44 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll

2015-12-03 15:44 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe

2015-12-03 15:44 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe

2015-12-03 15:44 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll

2015-12-03 15:44 - 2014-12-19 05:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-12-03 15:44 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2015-12-03 15:44 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2015-12-03 15:44 - 2013-11-26 13:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2015-12-03 15:44 - 2013-10-19 04:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2015-12-03 15:44 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2015-12-03 15:44 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2015-12-03 15:43 - 2015-07-15 05:19 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2015-12-03 15:43 - 2015-07-15 05:19 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-12-03 15:43 - 2015-07-15 05:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll

2015-12-03 15:43 - 2015-07-15 05:14 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll

2015-12-03 15:43 - 2015-07-15 05:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-12-03 15:43 - 2015-07-15 04:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll

2015-12-03 15:43 - 2015-07-15 04:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-12-03 15:43 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll

2015-12-03 15:43 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-12-03 15:43 - 2015-07-01 22:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2015-12-03 15:43 - 2015-07-01 22:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2015-12-03 15:43 - 2015-07-01 22:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2015-12-03 15:43 - 2015-07-01 22:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2015-12-03 15:43 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-12-03 15:43 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-12-03 15:43 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll

2015-12-03 15:43 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll

2015-12-03 15:43 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll

2015-12-03 15:43 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll

2015-12-03 15:43 - 2015-04-18 05:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2015-12-03 15:43 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2015-12-03 15:43 - 2015-02-03 05:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll

2015-12-03 15:43 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll

2015-12-03 15:43 - 2014-12-06 06:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2015-12-03 15:43 - 2014-12-06 05:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll

2015-12-03 15:43 - 2014-12-06 05:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

2015-12-03 15:43 - 2014-10-14 04:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2015-12-03 15:43 - 2014-06-19 00:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll

2015-12-03 15:43 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll

2015-12-03 15:43 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll

2015-12-03 15:43 - 2014-06-19 00:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll

2015-12-03 15:43 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll

2015-12-03 15:43 - 2014-06-19 00:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll

2015-12-03 15:43 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2015-12-03 15:43 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2015-12-03 15:43 - 2013-11-27 03:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2015-12-03 15:43 - 2013-11-27 03:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2015-12-03 15:43 - 2013-11-27 03:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2015-12-03 15:43 - 2013-11-27 03:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2015-12-03 15:43 - 2013-11-27 03:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2015-12-03 15:43 - 2013-10-04 04:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2015-12-03 15:43 - 2013-10-04 03:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2015-12-03 15:43 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2015-12-03 15:43 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys

2015-12-03 15:43 - 2012-11-29 00:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys

2015-12-03 15:43 - 2012-11-29 00:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll

2015-12-03 15:43 - 2012-11-29 00:56 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

2015-12-03 15:43 - 2012-10-03 19:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll

2015-12-03 15:43 - 2012-10-03 19:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll

2015-12-03 15:42 - 2015-07-15 20:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2015-12-03 15:42 - 2015-07-15 20:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll

2015-12-03 15:42 - 2015-07-15 20:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll

2015-12-03 15:42 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2015-12-03 15:42 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2015-12-03 15:42 - 2014-12-11 19:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2015-12-03 15:42 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2015-12-03 15:42 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2015-12-03 15:41 - 2015-10-20 03:12 - 05570496 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-12-03 15:41 - 2015-10-20 03:12 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-12-03 15:41 - 2015-10-20 03:12 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-12-03 15:41 - 2015-10-20 03:09 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-12-03 15:41 - 2015-10-20 03:06 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2015-12-03 15:41 - 2015-10-20 03:06 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-12-03 15:41 - 2015-10-20 03:06 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-12-03 15:41 - 2015-10-20 03:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-12-03 15:41 - 2015-10-20 03:05 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-12-03 15:41 - 2015-10-20 03:05 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-12-03 15:41 - 2015-10-20 03:05 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-12-03 15:41 - 2015-10-20 03:04 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-12-03 15:41 - 2015-10-20 03:04 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-12-03 15:41 - 2015-10-20 03:04 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-12-03 15:41 - 2015-10-20 03:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-12-03 15:41 - 2015-10-20 02:59 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:52 - 03991488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-12-03 15:41 - 2015-10-20 02:52 - 03935680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-12-03 15:41 - 2015-10-20 02:48 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-12-03 15:41 - 2015-10-20 02:45 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-12-03 15:41 - 2015-10-20 02:45 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-12-03 15:41 - 2015-10-20 02:45 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-12-03 15:41 - 2015-10-20 02:45 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-12-03 15:41 - 2015-10-20 02:45 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-12-03 15:41 - 2015-10-20 02:45 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-12-03 15:41 - 2015-10-20 02:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-12-03 15:41 - 2015-10-20 02:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2015-12-03 15:41 - 2015-10-20 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-12-03 15:41 - 2015-10-20 02:45 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-12-03 15:41 - 2015-10-20 02:45 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-12-03 15:41 - 2015-10-20 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-12-03 15:41 - 2015-10-20 02:44 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-12-03 15:41 - 2015-10-20 02:44 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2015-12-03 15:41 - 2015-10-20 02:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-12-03 15:41 - 2015-10-20 02:44 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-12-03 15:41 - 2015-10-20 02:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-12-03 15:41 - 2015-10-20 02:44 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-12-03 15:41 - 2015-10-20 02:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-12-03 15:41 - 2015-10-20 02:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 02:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 01:41 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2015-12-03 15:41 - 2015-10-20 01:40 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2015-12-03 15:41 - 2015-10-20 01:40 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2015-12-03 15:41 - 2015-10-20 01:29 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-12-03 15:41 - 2015-10-20 01:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-12-03 15:41 - 2015-10-20 01:27 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 01:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 01:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-12-03 15:41 - 2015-10-20 01:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-12-03 15:41 - 2015-10-01 20:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2015-12-03 15:41 - 2015-10-01 20:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2015-12-03 15:41 - 2015-10-01 20:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2015-12-03 15:41 - 2015-10-01 20:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2015-12-03 15:41 - 2015-10-01 20:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-12-03 15:41 - 2015-10-01 20:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-12-03 15:41 - 2015-10-01 20:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2015-12-03 15:41 - 2015-10-01 19:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2015-12-03 15:41 - 2015-10-01 19:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2015-12-03 15:41 - 2015-09-23 15:15 - 00460776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-12-03 15:41 - 2015-09-23 15:15 - 00299632 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll

2015-12-03 15:41 - 2015-09-23 15:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll

2015-12-03 15:41 - 2015-06-03 22:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2015-12-03 15:41 - 2015-06-03 22:16 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2015-12-03 15:41 - 2015-06-03 22:16 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2015-12-03 15:41 - 2014-12-19 03:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2015-12-03 15:41 - 2014-08-12 04:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

2015-12-03 15:41 - 2014-08-12 03:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL

2015-12-03 15:41 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll

2015-12-03 15:41 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll

2015-12-03 15:41 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2015-12-03 15:41 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2015-12-03 15:41 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys

2015-12-03 15:41 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys

2015-12-03 15:41 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys

2015-12-03 15:41 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys

2015-12-03 15:41 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll

2015-12-03 15:41 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll

2015-12-03 15:41 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll

2015-12-03 15:41 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll

2015-12-03 15:40 - 2015-10-13 18:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2015-12-03 15:40 - 2015-10-13 18:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2015-12-03 15:40 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe

2015-12-03 15:40 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe

2015-12-03 15:40 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

2015-12-03 15:40 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2015-12-03 15:40 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2015-12-03 15:40 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-12-03 15:40 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2015-12-03 15:40 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2015-12-03 15:40 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe

2015-12-03 15:40 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2015-12-03 15:40 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2015-12-03 15:40 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2015-12-03 15:40 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe

2015-12-03 15:40 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll

2015-12-03 15:40 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll

2015-12-03 15:40 - 2015-06-11 19:56 - 01112576 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2015-12-03 15:40 - 2015-06-11 19:16 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2015-12-03 15:40 - 2015-06-11 19:15 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2015-12-03 15:40 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2015-12-03 15:40 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2015-12-03 15:40 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2015-12-03 15:39 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll

2015-12-03 15:39 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll

2015-12-03 15:39 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll

2015-12-03 15:39 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll

2015-12-03 15:39 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll

2015-12-03 15:39 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll

2015-12-03 15:39 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2015-12-03 15:39 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll

2015-12-03 15:39 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll

2015-12-03 15:39 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll

2015-12-03 15:39 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll

2015-12-03 15:39 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll

2015-12-03 15:39 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll

2015-12-03 15:39 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll

2015-12-03 15:38 - 2015-10-13 06:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2015-12-03 15:38 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

2015-12-03 15:38 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2015-12-03 15:38 - 2015-02-18 09:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2015-12-03 15:38 - 2015-01-17 04:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2015-12-03 15:38 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2015-12-03 15:38 - 2014-11-11 05:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

2015-12-03 15:38 - 2014-11-11 04:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll

2015-12-03 15:38 - 2014-10-25 03:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2015-12-03 15:38 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2015-12-03 15:38 - 2014-09-04 07:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2015-12-03 15:38 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2015-12-03 15:38 - 2014-07-17 04:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2015-12-03 15:38 - 2014-07-17 04:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2015-12-03 15:38 - 2014-07-17 04:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll

2015-12-03 15:38 - 2014-07-17 04:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll

2015-12-03 15:38 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll

2015-12-03 15:38 - 2014-07-17 03:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2015-12-03 15:38 - 2014-07-17 03:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys

2015-12-03 15:38 - 2014-07-17 03:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2015-12-03 15:38 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2015-12-03 15:38 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2015-12-03 15:38 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2015-12-03 15:38 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2015-12-03 15:38 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe

2015-12-03 15:38 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll

2015-12-03 15:38 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll

2015-12-03 15:38 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll

2015-12-03 15:38 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe

2015-12-03 15:38 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys

2015-12-03 15:37 - 2015-10-01 20:00 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll

2015-12-03 15:37 - 2015-10-01 20:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll

2015-12-03 15:37 - 2015-10-01 19:50 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll

2015-12-03 15:37 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2015-12-03 15:37 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2015-12-03 15:37 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll

2015-12-03 15:37 - 2014-12-08 05:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2015-12-03 15:37 - 2014-12-08 04:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll

2015-12-03 15:37 - 2014-10-18 04:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2015-12-03 15:37 - 2014-10-18 03:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2015-12-03 15:37 - 2013-10-12 04:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2015-12-03 15:37 - 2013-10-12 04:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2015-12-03 15:37 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx

2015-12-03 15:37 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2015-12-03 15:37 - 2013-10-12 03:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2015-12-03 15:37 - 2013-10-12 03:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2015-12-03 15:37 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe

2015-12-03 15:37 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2015-12-03 15:37 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll

2015-12-03 15:37 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe

2015-12-03 15:37 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe

2015-12-03 15:37 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll

2015-12-03 15:37 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll

2015-12-03 15:37 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll

2015-12-03 15:37 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll

2015-12-03 15:37 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll

2015-12-03 15:37 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll

2015-12-03 15:37 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll

2015-12-03 15:37 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll

2015-12-03 15:37 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2015-12-03 15:37 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll

2015-12-03 15:37 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll

2015-12-03 15:37 - 2011-10-15 08:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll

2015-12-03 15:37 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll

2015-12-03 15:36 - 2015-09-02 05:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-12-03 15:36 - 2015-09-02 05:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-12-03 15:36 - 2015-09-02 05:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-12-03 15:36 - 2015-09-02 05:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-12-03 15:36 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2015-12-03 15:36 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-12-03 15:36 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2015-12-03 15:36 - 2015-09-02 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2015-12-03 15:36 - 2015-09-02 03:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-12-03 15:36 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-12-03 15:36 - 2013-10-12 04:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll

2015-12-03 15:36 - 2013-10-12 04:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2015-12-03 15:36 - 2013-10-12 04:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL

2015-12-03 15:36 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll

2015-12-03 15:36 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL

2015-12-03 15:13 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll

2015-12-03 15:13 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll

2015-12-03 15:13 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-02 18:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows

2016-01-02 17:57 - 2015-11-20 18:40 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2016-01-02 17:56 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-01-02 17:56 - 2009-07-14 06:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2016-01-02 17:56 - 2009-07-14 06:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2016-01-02 17:56 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Media

2016-01-02 17:51 - 2015-11-20 18:40 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2016-01-02 16:27 - 2009-07-14 07:13 - 00713888 _____ C:\Windows\system32\PerfStringBackup.INI

2016-01-02 16:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf

2016-01-02 16:23 - 2015-11-20 18:57 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2016-01-02 15:19 - 2015-11-20 18:42 - 00000000 ____D C:\Users\Dell\AppData\Local\Google

2016-01-02 11:27 - 2015-11-20 18:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2016-01-01 23:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\GroupPolicy

2015-12-30 01:01 - 2015-11-20 18:12 - 00000000 ____D C:\Users\Dell\AppData\Roaming\uTorrent

2015-12-18 19:59 - 2015-11-20 18:56 - 00451040 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys

2015-12-18 19:59 - 2015-11-20 18:56 - 00097648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys

2015-12-17 19:53 - 2015-11-20 18:42 - 00002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2015-12-13 14:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2015-12-11 22:58 - 2009-07-14 06:45 - 00409520 _____ C:\Windows\system32\FNTCACHE.DAT

2015-12-11 22:55 - 2015-11-20 18:12 - 00000000 ____D C:\ProgramData\Microsoft Help

2015-12-11 22:50 - 2015-11-20 18:42 - 00000000 ____D C:\Users\Dell\AppData\Roaming\Skype

2015-12-09 19:09 - 2015-11-20 18:42 - 00000000 ____D C:\ProgramData\Skype

2015-12-08 19:48 - 2015-11-20 18:56 - 01055560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys

2015-12-08 19:48 - 2015-11-20 18:56 - 00273784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys

2015-12-08 19:48 - 2015-11-20 18:56 - 00155304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys

2015-12-08 19:48 - 2015-11-20 18:56 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys

2015-12-08 19:48 - 2015-11-20 18:56 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys

2015-12-08 19:48 - 2015-11-20 18:56 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys

2015-12-06 14:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2015-12-04 21:46 - 2015-11-20 18:40 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-12-04 21:46 - 2015-11-20 18:40 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-12-04 20:57 - 2015-11-20 18:08 - 00108840 _____ C:\Users\Dell\AppData\Local\GDIPFONTCACHEV1.DAT

2015-12-04 20:14 - 2015-11-20 18:14 - 00000000 ____D C:\Program Files (x86)\Microsoft Works

2015-12-04 20:13 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini

2015-12-04 10:15 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2015-12-04 10:08 - 2011-04-12 10:28 - 00000000 ____D C:\Program Files\Windows Journal

2015-12-04 10:08 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender

2015-12-04 10:08 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender

2015-12-04 10:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism

2015-12-04 10:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism

2015-12-03 14:17 - 2015-11-21 23:25 - 00001213 _____ C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk

2015-12-03 14:17 - 2015-11-21 23:25 - 00001189 _____ C:\Users\Public\Desktop\GOM Player.lnk

Some files in TEMP:

====================

C:\Users\Dell\AppData\Local\Temp\ExPromo.exe

C:\Users\Dell\AppData\Local\Temp\ose00000.exe

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-12-30 14:02

==================== End of FRST.txt ============================

Много ще се радвам и ще съм благодарна, ако успеете да ми помогнете.

Addition.txt

B-boy/StyLe/ · Януари 3, 2016

Здравейте,

Изтеглете http://www.lersus.de/img/icons/tutorial/edit-text.giffixlist.txt и го запазете на десктопа.
Стартирайте FRST.exe и натиснете бутона Fix веднъж!
След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.

Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

След това задайте ръчно DNS-ите на Google: (както са на снимката):

8.8.8.8

8.8.4.4

http://i.imgur.com/K1zEE2t.jpg

При вас единия вече е 8.8.8.8, т.е. трябва да замените другия 4.2.2.1 с 8.8.4.4.

Кликнете с десен бутон върху иконата на мрежовия адаптер в системния трей => Open network and sharing center => change adapter settings (линка вляво) => десен бутон върху мрежовия адаптер => properties => плъзнете плъзгача до Internet protocol version 4 (TCP/IPv4) => Properties и ще ги видите.

След това рестартирайте системата и вижте дали проблема остава.

Поздрави!

Христина Николова · Януари 3, 2016

Здравейте,

Направих всичко, но продължавам да имам същия проблем. Прилагам файла.

Fixlog.txt

B-boy/StyLe/ · Януари 3, 2016

Интересно. В кой браузър се появява проблема?

СТЪПКА 1

Изтеглете и стартирайтe http://i.imgur.com/6sv1DN9.jpgAdwCleaner.exe.
Натиснете бутона Scan.
AdwCleaner ще започне да проверява компютъра.
След като проверката приключи натиснете бутона Clean.
Програмата ще затвори всички излишни процеси и след почистването ще иска да рестартира машината. Съгласете се.
Ще се появи автоматично лог файл с името (AdwCleaner[C1].txt) в C:\Adwcleaner
Публикувайте съдържанието му в следващия си коментар.

СТЪПКА 2

Моля изтеглете http://www.bleepstatic.com/download/product-logos/2015/11/20/icon1448041809.pngJunkware Removal Tool на вашия десктоп.

Спрете временно работата на защитните програми.
Стартирайте инструмента JRT.exe
Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата.
Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши.
Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt).
Моля копирайте съдържанието на лог файла в следващия си пост.

СТЪПКА 3

http://i1214.photobucket.com/albums/cc497/olgun52/icon_zps423a0d9f.jpgМоля изтеглете ZHPcleaner и я запазете на вашия десктоп.

Стартирайте ZHPCleaner с десен клик върху файла и изберете от контекстното меню "Run as administrator"
Кликнете върху http://i1214.photobucket.com/albums/cc497/olgun52/Ashampoo_Snap_20140819_13h09m50s_001__zps96d58678.png за да се съгласите с лицензионното споразумение.
Изберете бутона http://i.imgur.com/y3pI4LR.png.
Браузърите ще бъдат затворени автоматично.
Ще се отвори лог файл след приключването на проверката (ако не се появи такъв, натиснете бутона Report).
Публикувайте лог файла в следващия си коментар.
Засега не натискайте бутона Repair в инструмента!

Поздрави!

Христина Николова · Януари 3, 2016

Вчера имах проблем и с Google chrome и Mozilla Firefox. Преди малко проверих дали се е оправил проблема с Chrome-a и не беше. Сега като попита за браузъра проверих и Mozilla Firefox и там вече нямам проблем.

В такъв случай дали проблема ще се реши просто като деинсталирам Chrome-a и го инсталирам отново? Или да си работя с Мозилата?

B-boy/StyLe/ · Януари 3, 2016

В Мозила имаше остатък от Yontoo (пропуснат от Malwarebytes), който изчистих, но специално в Google Chrome не забелязах нито една от известните към момента зарази, които пачват файловете на браузъра. Все пак можете да го преинсталирате разбира се, но по-добре да е по следния начин:

Преди това обаче направете бекъп на паролите и любимите страници:

Експортиране на отметки от Chrome:

В горния десен ъгъл на прозореца на браузъра кликнете върху менюто на Chrome.
Изберете Отметки > Диспечер на отметките.
Кликнете върху менюто „Организиране“ в диспечера.
Сега изберете Export bookmarks to HTML file.

Тук са даден инструкции след това как да ги импортнете обратно след преинсталацията на браузъра:

https://support.google.com/chrome/answer/96816?hl=bg

http://www.wikihow.com/Export-Bookmarks-from-Chrome

За паролите използвайте следния инструмент:

http://www.intowindo...chrome-browser/

Забележка: Засичането на инструмента от антивирусните програми е нормално, защото те не знаят дали вие или зловреден софтуер се опитва да достигне паролите в браузъра. Просто игнорирайте засичането.

След това задължително спрете синхронизацията на акаунта си, защото ако имате такава и тя е заразена, след новата преинсталация на браузъра, заразата отново ще се прехвърли на машината ви:

https://support.google.com/chrome/answer/2390059?hl=bg

Сега вече изтеглете програмата GeekUninstaller и я запазете на десктопа.

Разархивирайте я и стартирайте файла geek.exe http://i.imgur.com/IxXO5oO.jpg
От списъка намерете Google Chrome (примера е за Mozilla Firefox, но това е просто за показно).

Кликнете с десен бутон върху програмата и изберете Uninstall

http://i.imgur.com/XhV2QLa.png

След края на инсталацията ще се отвори прозорец подканващ ви да премахнете всички остатъци от програмата (ако има такива, ако няма този прозорец няма да се появи):

Пример за Mozilla браузъра:

Натиснете бутона Finish за да изтриете останките от програмата.

Сега вече можете да изтеглите и инсталирате последната СТАБИЛНА версия на Google Chrome оттук.

Изтеглете, разархивирайте архива и стартирайте следния файл (delete.bat) с десен бутон => Run as administrator за да изтрием една папка от заразата, която съм пропуснал => delete.zip

Очаквам и логовете от програмите от предишния ми коментар.

Поздрави!

Христина Николова · Януари 4, 2016

Здравейте,

Преинсталирах Google chrome и вече няма проблем. Стартирах и файла в края на последния пост.

След това изпълних трите стъпки:

СТЪПКА 1

# AdwCleaner v5.027 - Logfile created 04/01/2016 at 00:19:43
# Updated 30/12/2015 by Xplode
# Database : 2015-12-30.1 [server]
# Operating system : Windows 7 Ultimate Service Pack 1 (x64)
# Username : Dell - DELL-PC
# Running from : C:\Users\Dell\Downloads\adwcleaner_5.027.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

***** [ Files ] *****

***** [ DLLs ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\undefined

***** [ Web browsers ] *****

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [718 bytes] ##########

СТЪПКА 2

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.1 (11.24.2015)
Operating System: Windows 7 Ultimate x64
Ran by Dell (Administrator) on Ї® 04.01.2016 Ј. at 20:33:29,75
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 0

Registry: 0

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Ї® 04.01.2016 Ј. at 20:35:48,88
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

СТЪПКА 3

~ ZHPCleaner v2016.1.3.2 by Nicolas Coolman (2016/01/03)
~ Run by Dell (Administrator) (04/01/2016 20:38:14)
~ Site : http://www.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Scan
~ Report : C:\Users\Dell\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Dell\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Deactivate
~ Boot Mode : Normal (Normal boot)
Windows 7 Ultimate, 64-bit Service Pack 1 (Build 7601)

---\\ Services (0)
~ No malicious or unnecessary items found.

---\\ Browser internet (0)
~ No malicious or unnecessary items found.

---\\ Hosts file (1)
~ The hosts file is legitimate (1)

---\\ Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.

---\\ Explorer ( File, Folder) (0)
~ No malicious or unnecessary items found.

---\\ Registry ( Key, Value, Data) (0)
~ No malicious or unnecessary items found.

---\\ Result of repair
~ Any repair made
~ Browser not found (Opera Software)

---\\ Statistics
~ Items scanned : 66900
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 0

~ End of search in 00h04mn01s
===================
ZHPCleaner--04012016-20_42_15.txt

B-boy/StyLe/ · Януари 5, 2016

Супер. Мисля, че сме готови тогава.

Ето и няколко финални препоръки:

1. Проверете за стари приложения с помощта на PatchMyPC или с програмата Secunia Personal Software Inspector.

2. Инсталирайте Unchecky за да се предпазите от адуер по време на инсталацията на даден софтуер.

3. За да почистим използваните от нас инструменти направете следното:

Изтеглете Delfix.exe и го стартирайте. Сложете отметка пред Remove disinfection tools и Purge system restore (трябва да има такава по-подразбиране, но все пак да си кажа) => натиснете бутона Run. Инструмента ще се самоизтрие след като приключи своята задача! Ако има папки, които не са се изтрили след гореспоменатите процедури пишете и ще ги премахнем ръчно.

4. За защита от криптовирусите, освен обновяване на ОС и антивирусната програма е добре да имунизирате системата си с CryptoPrevent и профила Maximum Protection: (Не използвайте последната опция, защото още е бъгава и не работи коректно).

Можете да погледнете и новата програма CryptoMonitor .Безплатната версия е доста орязана, но в момента пълната версия е достъпна безплатно, защото скоро се очаква нова версия на програмата, която пак ще е платена.

Не забравяйте да изключите и Autorun в Windows, защото криптовирусите могат да се настанят и на външните дискове и флашки и да заразят информацията на тези носители при свързването им с инфектирана система и след това да заразят и други системи при свързването им към други компютри (и така да предадете заразата и на тях). Microsoft са създали автоматичен инструмент за целта => MSFixIt. Добре е също така след като вкарате външния диск дори и при спрян Autorun просто да сканирате буквата на устройството с обновена антивирусна програма преди да започнете да прехвърляте данни от и към външния диск.

Има и други програми, но са главно за напреднали потребители и няма да се спирам много задълбочено на тях, защото са сравнително по-сложни за употреба от средностатистическите потребители.. Затова ще ги пропусна. Добре е да не се спира System Restore (и File History в Windows 8), да не се спира UAC - User Account Control (даже да се направи на максималното ниво на сигурност), да не се спира SmartScreen (наличен само в Windows 8), да се внимава с прикачените файлове към електронната поща.

Добра идея е и да забраните скриптовете, ако не използвате такива с помощта на инструмента - Noscript.exe. Стартирайте го и изберете Disable. Ако ви потрябва да стартирате някога (js или vbs файлове, просто стартирайте инструмента и го направете на Enable).

Добре е да се внимава и с PDF файловете (повечето програми позволяват да се изключи java script в PDF четците, да се забрани на PDF файловете да стартират външни програми и да комуникират с интернет и прочие).

Добре е да се внимава с офис файловете за макрос вируси и експлоити. Може да се затегне сигурността от настройките на офис пакетите.

Добре е да се внимава за файлове с двойни разширения (например ако в My Computer => Tools => Folder Options => не е премахната отметката пред "Hide extensions for known file types" ако свалите даден файл от интернет с името image.exe.jpg, вие ще го видите като image.jpg, но всъщност файла ще е image.exe и щом го стартирате това ще задейства и вируса). Така че е добре да премахнете тази отметка за да виждате винаги разширенията на файловете.

Добра идея е да инсталирате Malwarebytes Anti-Exploit за да си осигурите спокойствие при сърфиране. Трудничко е, но просто няма как. Потребителите трябва да се научат да проявяват бдителност и хигиена при сърфиране.

5. За подобряване на производителността (ако системата ви се вижда мудна) вижте следните няколко теми:

Оптимизиране на Windows с цел по-добра производителност

Ръководство за поддръжка на Windows (XP, Vista и 7) [Revision 2.0]

6. Проверете системата си актуални драйвери от сайтовете на производителите на компонентите ако ви се занимава (не използвайте програми за автоматично обновяване на драйверите за да си спестите главоболията после) и направете пълна проверка за гадини с наличната ви антивирусна програма за всеки случай.

7. Винаги правете бекъп на важните си документи на външни носители и за не толкова ценните неща на cloud (облачни) услуги като SkyDrive, Google Drive, Dropbox и т.н.. Научете се да не инсталирате програми от съмнителни източници. Добра идея е да се научите да си създавате огледални образи на текущото работещо състояние на дяла на който се намира Операционната Система. Възстановяването на такъв образ при нужда в пъти по-лесен и бърз начин за връщане на работещото състояние на системата от преинсталация или опит за ръчно премахване на даден проблем. Такъв образ може да се създаде с външна програма като Macrium Reflect Free.

Поздрави и усмихната седмица! Ще маркирам случая като РЕШЕН!

Христина Николова · Януари 5, 2016

Много, много благодаря за съдействието и бързият отговор! Вече всичко си работи нормално и мога спокойно да сърфирам в интернет.

Малко ми дойде много информацията от последния пост , но ще се постарая да изпълня по-голямата част от препоръките, за да не си създавам пак подобни главоболия.

Много здраве и успехи през новата година!

Влез

РЕШЕН Зловреден код показващ ми множество реклами

Препоръчан пост

Христина Николова

Link to comment

Сподели другаде

B-boy/StyLe/

Link to comment

Сподели другаде

Христина Николова

Link to comment

Сподели другаде

B-boy/StyLe/

Link to comment

Сподели другаде

Христина Николова

Link to comment

Сподели другаде

B-boy/StyLe/

Link to comment

Сподели другаде

Христина Николова

Link to comment

Сподели другаде

B-boy/StyLe/

Link to comment

Сподели другаде

Христина Николова

Link to comment

Сподели другаде

Join the conversation

Разгледай

Какво ново?