OTL logfile created on: 2014-04-14 14:20:23 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\JOHN\Desktop\Bezpieczeństwo\Diagnostyka 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17031) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 7,50 Gb Total Physical Memory | 6,24 Gb Available Physical Memory | 83,18% Memory free 8,68 Gb Paging File | 7,39 Gb Available in Paging File | 85,14% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 175,78 Gb Total Space | 133,14 Gb Free Space | 75,74% Space Free | Partition Type: NTFS Drive D: | 97,66 Gb Total Space | 62,40 Gb Free Space | 63,89% Space Free | Partition Type: NTFS Drive E: | 126,95 Gb Total Space | 126,69 Gb Free Space | 99,79% Space Free | Partition Type: NTFS Drive F: | 244,14 Gb Total Space | 243,71 Gb Free Space | 99,83% Space Free | Partition Type: NTFS Drive G: | 244,14 Gb Total Space | 243,71 Gb Free Space | 99,83% Space Free | Partition Type: NTFS Drive H: | 244,14 Gb Total Space | 243,71 Gb Free Space | 99,83% Space Free | Partition Type: NTFS Drive I: | 72,14 Gb Total Space | 35,96 Gb Free Space | 49,85% Space Free | Partition Type: NTFS Drive J: | 488,28 Gb Total Space | 316,36 Gb Free Space | 64,79% Space Free | Partition Type: NTFS Drive K: | 488,28 Gb Total Space | 272,62 Gb Free Space | 55,83% Space Free | Partition Type: NTFS Drive L: | 488,28 Gb Total Space | 284,86 Gb Free Space | 58,34% Space Free | Partition Type: NTFS Drive M: | 488,28 Gb Total Space | 119,99 Gb Free Space | 24,57% Space Free | Partition Type: NTFS Drive N: | 841,27 Gb Total Space | 400,97 Gb Free Space | 47,66% Space Free | Partition Type: NTFS Drive O: | 192,32 Gb Total Space | 72,90 Gb Free Space | 37,91% Space Free | Partition Type: NTFS Computer Name: JANMATUSZ | User Name: JOHN | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-04-11 16:46:40 | 003,854,640 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2014-04-11 16:46:40 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2014-03-30 11:20:57 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\JOHN\Desktop\Bezpieczeństwo\Diagnostyka\OTL.exe PRC - [2013-12-21 08:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2012-09-17 07:39:30 | 000,171,600 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe PRC - [2012-07-13 17:27:00 | 000,769,432 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe PRC - [2012-02-02 17:16:56 | 002,671,936 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\Daemon Tools Pro\DTShellHlp.exe PRC - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe PRC - [2009-05-14 18:07:14 | 000,759,048 | ---- | M] (ABBYY) -- C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-12-01 14:08:39 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2014-04-11 16:46:40 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2014-02-22 17:53:10 | 003,394,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService) SRV:[b]64bit:[/b] - [2014-02-22 11:57:16 | 000,710,656 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM) SRV:[b]64bit:[/b] - [2014-02-22 11:26:58 | 000,366,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc) SRV:[b]64bit:[/b] - [2014-02-22 11:25:39 | 000,399,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService) SRV:[b]64bit:[/b] - [2014-02-22 11:25:14 | 000,269,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure) SRV:[b]64bit:[/b] - [2014-02-22 11:23:58 | 001,576,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc) SRV:[b]64bit:[/b] - [2014-02-22 11:23:49 | 000,201,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV:[b]64bit:[/b] - [2014-02-22 10:32:18 | 001,306,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc) SRV:[b]64bit:[/b] - [2014-02-06 14:15:50 | 001,069,248 | ---- | M] () [Auto | Stopped] -- C:\Program Files\KMSpico\Service_KMS.exe -- (Service KMSELDI) SRV:[b]64bit:[/b] - [2014-01-27 17:38:59 | 001,584,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc) SRV:[b]64bit:[/b] - [2013-12-13 11:23:32 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2013-12-10 09:35:18 | 000,530,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness) SRV:[b]64bit:[/b] - [2013-12-06 17:06:06 | 000,344,064 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service) SRV:[b]64bit:[/b] - [2013-11-23 06:50:00 | 000,282,112 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV:[b]64bit:[/b] - [2013-10-31 02:29:53 | 000,348,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc) SRV:[b]64bit:[/b] - [2013-10-31 02:29:53 | 000,023,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend) SRV:[b]64bit:[/b] - [2013-10-19 07:37:49 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:[b]64bit:[/b] - [2013-08-31 12:00:10 | 000,491,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc) SRV:[b]64bit:[/b] - [2013-08-23 01:14:35 | 000,183,296 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2013-08-23 01:14:34 | 000,090,464 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\KeyboardFilterSvc.dll -- (MsKeyboardFilter) SRV:[b]64bit:[/b] - [2013-08-22 14:31:56 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV:[b]64bit:[/b] - [2013-08-22 13:32:02 | 000,024,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC) SRV:[b]64bit:[/b] - [2013-08-22 13:31:43 | 000,040,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS) SRV:[b]64bit:[/b] - [2013-08-22 13:22:45 | 000,066,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc) SRV:[b]64bit:[/b] - [2013-08-22 13:21:15 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc) SRV:[b]64bit:[/b] - [2013-08-22 13:16:57 | 000,118,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc) SRV:[b]64bit:[/b] - [2013-08-22 12:25:28 | 000,164,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface) SRV:[b]64bit:[/b] - [2013-08-22 12:02:47 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost) SRV:[b]64bit:[/b] - [2013-08-22 11:59:26 | 000,832,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon) SRV:[b]64bit:[/b] - [2013-08-22 11:57:25 | 000,130,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum) SRV:[b]64bit:[/b] - [2013-08-22 11:54:59 | 000,059,392 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso) SRV:[b]64bit:[/b] - [2013-08-22 11:50:59 | 000,245,760 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker) SRV:[b]64bit:[/b] - [2013-08-22 11:50:00 | 000,525,312 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm) SRV:[b]64bit:[/b] - [2013-08-22 11:45:59 | 000,151,040 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService) SRV:[b]64bit:[/b] - [2013-08-22 11:40:49 | 000,248,832 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc) SRV:[b]64bit:[/b] - [2013-08-22 11:31:03 | 000,201,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc) SRV:[b]64bit:[/b] - [2013-08-22 11:15:54 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup) SRV - [2014-03-27 21:19:15 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013-12-21 08:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013-11-15 19:35:04 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\srvany.exe -- (KMService) SRV - [2013-08-31 11:25:30 | 000,357,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc) SRV - [2013-08-22 14:31:56 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV - [2013-08-22 05:55:35 | 000,018,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc) SRV - [2013-08-22 04:53:34 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost) SRV - [2012-09-17 07:39:30 | 000,171,600 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor11.0) SRV - [2012-07-13 17:27:00 | 000,769,432 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2012-01-05 17:42:34 | 000,075,624 | ---- | M] (Alcohol Soft Development Team) [Auto | Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe -- (AxAutoMntSrv) SRV - [2010-02-19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2009-05-14 18:07:14 | 000,759,048 | ---- | M] (ABBYY) [Auto | Running] -- C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Sprint.9.0) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2014-04-11 16:46:45 | 001,039,096 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx) DRV:[b]64bit:[/b] - [2014-04-11 16:46:45 | 000,423,240 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP) DRV:[b]64bit:[/b] - [2014-04-11 16:46:45 | 000,208,928 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm) DRV:[b]64bit:[/b] - [2014-04-11 16:46:45 | 000,093,568 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr) DRV:[b]64bit:[/b] - [2014-04-11 16:46:45 | 000,084,816 | ---- | M] (AVAST Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\aswStm.sys -- (aswStm) DRV:[b]64bit:[/b] - [2014-04-11 16:46:45 | 000,079,184 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2014-04-11 16:46:45 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt) DRV:[b]64bit:[/b] - [2014-03-04 12:35:30 | 000,372,568 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS) DRV:[b]64bit:[/b] - [2014-02-22 18:00:26 | 000,157,528 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\wof.sys -- (Wof) DRV:[b]64bit:[/b] - [2014-02-22 18:00:25 | 000,236,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2014-02-22 17:50:31 | 000,054,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr) DRV:[b]64bit:[/b] - [2014-02-22 17:49:51 | 000,325,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI) DRV:[b]64bit:[/b] - [2014-02-22 17:49:50 | 000,467,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3) DRV:[b]64bit:[/b] - [2014-02-22 17:49:49 | 000,384,856 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport) DRV:[b]64bit:[/b] - [2014-02-22 17:49:49 | 000,189,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000) DRV:[b]64bit:[/b] - [2014-02-22 17:49:49 | 000,079,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor) DRV:[b]64bit:[/b] - [2014-02-22 17:49:47 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101) DRV:[b]64bit:[/b] - [2014-02-22 17:44:13 | 000,924,504 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\refs.sys -- (ReFS) DRV:[b]64bit:[/b] - [2014-02-22 14:14:02 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender) DRV:[b]64bit:[/b] - [2013-12-13 11:23:36 | 013,207,552 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2013-12-13 11:23:36 | 000,626,176 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2013-11-15 21:25:17 | 000,293,888 | ---- | M] (Alcohol Soft Development Team) [Kernel | On_Demand | Unknown] -- C:\Windows\SysNative\drivers\axscsidrv.sys -- (axscsidrv) DRV:[b]64bit:[/b] - [2013-11-15 21:21:02 | 000,381,440 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2013-11-15 20:57:10 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:[b]64bit:[/b] - [2013-11-15 17:09:00 | 000,700,680 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\uim_im.sys -- (Uim_IM) DRV:[b]64bit:[/b] - [2013-11-15 17:09:00 | 000,102,664 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\UimBus.sys -- (UimBus) DRV:[b]64bit:[/b] - [2013-11-15 17:09:00 | 000,025,992 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\uim_devim.sys -- (Uim_DEVIM) DRV:[b]64bit:[/b] - [2013-11-11 04:48:41 | 000,039,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep) DRV:[b]64bit:[/b] - [2013-11-01 13:39:53 | 000,086,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc) DRV:[b]64bit:[/b] - [2013-10-31 02:29:36 | 000,236,888 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter) DRV:[b]64bit:[/b] - [2013-10-31 02:29:36 | 000,124,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv) DRV:[b]64bit:[/b] - [2013-10-31 02:28:47 | 000,035,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot) DRV:[b]64bit:[/b] - [2013-10-26 03:54:32 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2) DRV:[b]64bit:[/b] - [2013-10-13 04:48:34 | 000,136,536 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS) DRV:[b]64bit:[/b] - [2013-10-05 17:25:54 | 000,057,176 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme) DRV:[b]64bit:[/b] - [2013-09-20 00:05:02 | 000,059,648 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.2.0) DRV:[b]64bit:[/b] - [2013-09-14 16:06:57 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt) DRV:[b]64bit:[/b] - [2013-08-23 01:14:37 | 000,022,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\kbldfltr.sys -- (kbldfltr) DRV:[b]64bit:[/b] - [2013-08-23 01:14:35 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2013-08-23 01:14:26 | 000,220,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Vid.sys -- (Vid) DRV:[b]64bit:[/b] - [2013-08-23 01:14:26 | 000,129,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbusr.sys -- (vmbusr) DRV:[b]64bit:[/b] - [2013-08-23 01:14:26 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcivsp.sys -- (vpcivsp) DRV:[b]64bit:[/b] - [2013-08-23 01:14:26 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2013-08-23 01:14:25 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsp.sys -- (storvsp) DRV:[b]64bit:[/b] - [2013-08-22 15:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv) DRV:[b]64bit:[/b] - [2013-08-22 15:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2013-08-22 14:50:19 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam) DRV:[b]64bit:[/b] - [2013-08-22 14:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex) DRV:[b]64bit:[/b] - [2013-08-22 14:49:33 | 000,159,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM) DRV:[b]64bit:[/b] - [2013-08-22 14:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis) DRV:[b]64bit:[/b] - [2013-08-22 14:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2013-08-22 14:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2013-08-22 14:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV:[b]64bit:[/b] - [2013-08-22 14:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass) DRV:[b]64bit:[/b] - [2013-08-22 14:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2013-08-22 14:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID) DRV:[b]64bit:[/b] - [2013-08-22 14:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor) DRV:[b]64bit:[/b] - [2013-08-22 14:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2013-08-22 14:43:31 | 000,107,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci) DRV:[b]64bit:[/b] - [2013-08-22 14:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx) DRV:[b]64bit:[/b] - [2013-08-22 14:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx) DRV:[b]64bit:[/b] - [2013-08-22 14:39:15 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI) DRV:[b]64bit:[/b] - [2013-08-22 14:37:27 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci) DRV:[b]64bit:[/b] - [2013-08-22 14:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV:[b]64bit:[/b] - [2013-08-22 13:39:54 | 000,076,800 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache) DRV:[b]64bit:[/b] - [2013-08-22 13:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay) DRV:[b]64bit:[/b] - [2013-08-22 13:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo) DRV:[b]64bit:[/b] - [2013-08-22 13:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf) DRV:[b]64bit:[/b] - [2013-08-22 13:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime) DRV:[b]64bit:[/b] - [2013-08-22 13:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr) DRV:[b]64bit:[/b] - [2013-08-22 13:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg) DRV:[b]64bit:[/b] - [2013-08-22 13:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic) DRV:[b]64bit:[/b] - [2013-08-22 13:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter) DRV:[b]64bit:[/b] - [2013-08-22 13:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig) DRV:[b]64bit:[/b] - [2013-08-22 13:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid) DRV:[b]64bit:[/b] - [2013-08-22 13:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd) DRV:[b]64bit:[/b] - [2013-08-22 13:37:46 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2013-08-22 13:37:42 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum) DRV:[b]64bit:[/b] - [2013-08-22 13:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2013-08-22 13:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c) DRV:[b]64bit:[/b] - [2013-08-22 13:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2013-08-22 13:36:43 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc) DRV:[b]64bit:[/b] - [2013-08-22 13:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus) DRV:[b]64bit:[/b] - [2013-08-22 13:36:17 | 000,124,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform) DRV:[b]64bit:[/b] - [2013-08-22 13:36:07 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp) DRV:[b]64bit:[/b] - [2013-08-22 13:35:42 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu) DRV:[b]64bit:[/b] - [2013-08-22 10:46:33 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM) DRV:[b]64bit:[/b] - [2013-08-13 01:25:46 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2) DRV:[b]64bit:[/b] - [2013-08-10 02:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV) DRV:[b]64bit:[/b] - [2013-07-30 20:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO) DRV:[b]64bit:[/b] - [2013-07-25 21:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C) DRV:[b]64bit:[/b] - [2013-06-18 16:46:17 | 000,591,360 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt630x64.sys -- (RTL8168) DRV:[b]64bit:[/b] - [2013-06-18 16:45:05 | 003,680,256 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athwnx.sys -- (athr) DRV:[b]64bit:[/b] - [2012-08-10 04:01:00 | 000,056,336 | ---- | M] (Corel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64) DRV:[b]64bit:[/b] - [2012-06-14 23:23:14 | 000,031,216 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd) DRV:[b]64bit:[/b] - [2011-05-31 22:18:34 | 001,627,520 | ---- | M] (NXP Semiconductors) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Ph3xIB64.sys -- (Ph3xIB64) DRV:[b]64bit:[/b] - [2010-07-01 19:11:24 | 000,012,352 | ---- | M] () [Kernel | "Start" not found. | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5) DRV:[b]64bit:[/b] - [2009-08-24 11:14:30 | 000,054,784 | ---- | M] (AzureWave Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\azvusb.sys -- (azvusb) DRV:[b]64bit:[/b] - [2006-12-11 18:20:54 | 001,413,592 | ---- | M] (Philips Semiconductors GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\3xHybr64.sys -- (3xHybr64) DRV - [2011-03-02 19:17:20 | 000,013,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-3324180727-1194246938-4127817598-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE - HKU\S-1-5-21-3324180727-1194246938-4127817598-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ IE - HKU\S-1-5-21-3324180727-1194246938-4127817598-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = BA EA 73 AD 06 0B CF 01 [binary data] IE - HKU\S-1-5-21-3324180727-1194246938-4127817598-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3324180727-1194246938-4127817598-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR IE - HKU\S-1-5-21-3324180727-1194246938-4127817598-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.google.com" FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:28.0 FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeExManDetect: C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@Nero.com/KM: C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.0: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeExManDetect: C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-11 16:46:46 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 28.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 28.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 28.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 28.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013-11-15 17:47:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\JOHN\AppData\Roaming\mozilla\Extensions [2014-01-28 18:51:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\JOHN\AppData\Roaming\mozilla\Firefox\Profiles\q9l9zueg.default\extensions [2014-01-27 22:21:24 | 000,000,000 | ---D | M] (Extension_Protected) -- C:\Users\JOHN\AppData\Roaming\mozilla\Firefox\Profiles\q9l9zueg.default\extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack [2014-01-27 22:21:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\JOHN\AppData\Roaming\mozilla\Firefox\Profiles\q9l9zueg.default\extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack\resources\extension_protected [2014-01-27 22:21:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\JOHN\AppData\Roaming\mozilla\Firefox\Profiles\q9l9zueg.default\extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack\resources\extension_protected\data [2014-01-27 22:21:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\JOHN\AppData\Roaming\mozilla\Firefox\Profiles\q9l9zueg.default\extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack\resources\extension_protected\lib [2014-03-27 21:19:11 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions [2014-03-27 21:19:15 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - plugin: Error reading preferences file CHR - Extension: Dokumenty Google = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\ CHR - Extension: Dokumenty Google = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\ CHR - Extension: Dokumenty Google = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_1\ CHR - Extension: Dysk Google = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\ CHR - Extension: Dysk Google = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: Dysk Google = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1\ CHR - Extension: YouTube = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: YouTube = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: YouTube = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1\ CHR - Extension: Szukaj w Google = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: Szukaj w Google = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: Szukaj w Google = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1\ CHR - Extension: Google Wallet = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\ CHR - Extension: Google Wallet = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\ CHR - Extension: Gmail = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ CHR - Extension: Gmail = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\ CHR - Extension: Gmail = C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2\ O1 HOSTS File: ([2013-11-22 19:40:29 | 000,000,966 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 sams.nikonimaging.com O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 secure.tune-up.com O1 - Hosts: 127.0.0.1 activation.cloud.techsmith.co O2:[b]64bit:[/b] - BHO: (ExplorerBHO Class) - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O2:[b]64bit:[/b] - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION) O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2:[b]64bit:[/b] - BHO: (ClassicIEBHO Class) - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft) O2 - BHO: (ExplorerBHO Class) - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (ClassicIEBHO Class) - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Classic Explorer Bar) - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No CLSID value found. O3 - HKLM\..\Toolbar: (Classic Explorer Bar) - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) O4:[b]64bit:[/b] - HKLM..\Run: [ACPW06EN] C:\Program Files\ACD Systems\ACDSee Pro\6.0\ACDSeePro6InTouch2.exe (ACD Systems) O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4:[b]64bit:[/b] - HKLM..\Run: [Classic Start Menu] C:\Program Files\Classic Shell\ClassicStartMenu.exe (IvoSoft) O4 - HKLM..\Run: [AdobeCEPServiceManager] C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software) O4 - HKLM..\Run: [EEventManager] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [FUFAXRCV] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [FUFAXSTM] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [Nikon Message Center 2] C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe (Nikon Corporation) O4 - HKLM..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" File not found O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [YouCam Mirage] C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (CyberLink) O4 - HKLM..\Run: [YouCam Tray] C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe (CyberLink Corp.) O4 - HKU\S-1-5-21-3324180727-1194246938-4127817598-1001..\Run: [EPSON PX830 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHOE.EXE /FU "C:\Users\JOHN\AppData\Local\Temp\E_SA65.tmp" /EF "HKCU" File not found O4 - Startup: C:\Users\JOHN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk = File not found F3:[b]64bit:[/b] - HKU\S-1-5-21-3324180727-1194246938-4127817598-1001 WinNT: Load - (C:\ProgramData\NTKernel\nt32.exe) - C:\ProgramData\NTKernel\nt32.exe () F3 - HKU\S-1-5-21-3324180727-1194246938-4127817598-1001 WinNT: Load - (C:\ProgramData\NTKernel\nt32.exe) - C:\ProgramData\NTKernel\nt32.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - Reg Error: Value error. File not found O8 - Extra context menu item: Add to Google Photos Screensa&ver - Reg Error: Value error. File not found O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Classic IE Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe (IvoSoft) O9 - Extra 'Tools' menuitem : Classic IE Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe (IvoSoft) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CE99E682-5666-4E53-B3BA-9CE238A2A0D7}: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\ms-help - No CLSID value found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKU\S-1-5-21-3324180727-1194246938-4127817598-1001 Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKU\S-1-5-21-3324180727-1194246938-4127817598-1001 Winlogon: Shell - ("C:\ProgramData\load32.exe") - C:\ProgramData\load32.exe () O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2014-01-28 19:55:12 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2013-01-07 20:29:28 | 000,000,000 | ---D | M] - O:\Autodesk -- [ NTFS ] O32 - AutoRun File - [2013-09-29 11:48:42 | 000,000,000 | ---- | M] () - O:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{6fa3d44d-4e27-11e3-8254-50e549523f6c}\Shell - "" = AutoRun O33 - MountPoints2\{c5aba00d-5a7f-11e3-825c-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{c5aba00d-5a7f-11e3-825c-806e6f6e6963}\Shell\AutoRun\command - "" = "P:\startuj.exe" O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (sdnclean64.exe) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-04-14 14:12:31 | 000,000,000 | ---D | C] -- C:\FRST [2014-04-14 11:37:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell [2014-04-14 11:37:48 | 000,000,000 | ---D | C] -- C:\Program Files\Classic Shell [2014-04-14 06:05:16 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt [2014-04-13 20:42:57 | 000,000,000 | ---D | C] -- C:\Users\JOHN\Documents\Notesy programu OneNote [2014-04-13 19:57:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner [2014-04-13 19:57:49 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2014-04-11 19:02:29 | 000,119,512 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys [2014-04-11 19:02:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware [2014-04-11 19:02:11 | 000,088,280 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys [2014-04-11 19:02:11 | 000,063,192 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys [2014-04-11 19:02:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware [2014-04-11 19:01:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2014-04-11 19:01:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2014-04-11 16:52:04 | 000,000,000 | ---D | C] -- C:\Users\JOHN\AppData\Roaming\Dropbox [2014-04-11 16:46:44 | 000,043,152 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr [2014-04-05 11:47:11 | 000,000,000 | ---D | C] -- C:\MyAudio [2014-04-03 22:45:27 | 000,000,000 | ---D | C] -- C:\Users\JOHN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker [2014-04-03 22:45:27 | 000,000,000 | ---D | C] -- C:\Program Files\Unlocker [2014-04-03 22:34:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Odkurzacz [2014-04-03 22:34:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Odkurzacz [2014-04-03 21:36:27 | 000,000,000 | -HSD | C] -- C:\Users\JOHN\AppData\Local\EmieUserList [2014-04-03 21:36:27 | 000,000,000 | -HSD | C] -- C:\Users\JOHN\AppData\Local\EmieSiteList [2014-04-03 21:30:33 | 000,000,000 | ---D | C] -- C:\Users\JOHN\AppData\Local\GHISLER [2014-04-03 21:28:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unlocker [2014-04-03 21:28:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Unlocker [2014-04-03 21:24:20 | 000,000,000 | ---D | C] -- C:\NST [2014-04-03 21:00:15 | 000,000,000 | -HSD | C] -- C:\Boot [2014-03-29 17:17:08 | 002,678,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingsHandlers.dll [2014-03-29 17:17:08 | 001,843,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Display.dll [2014-03-29 17:17:08 | 001,816,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Display.dll [2014-03-29 17:17:07 | 000,918,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MrmCoreR.dll [2014-03-29 17:17:07 | 000,629,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MrmCoreR.dll [2014-03-29 16:12:02 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SkyDriveShell.dll [2014-03-29 16:12:02 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SkyDriveShell.dll [2014-03-29 16:11:51 | 000,388,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ninput.dll [2014-03-29 16:11:51 | 000,292,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ninput.dll [2014-03-29 16:11:50 | 000,635,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WWAHost.exe [2014-03-29 16:11:50 | 000,610,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sud.dll [2014-03-29 16:11:50 | 000,592,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sud.dll [2014-03-29 16:11:50 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WWAHost.exe [2014-03-29 16:11:43 | 000,531,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ci.dll [2014-03-29 16:11:39 | 000,432,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\zipfldr.dll [2014-03-29 16:11:39 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cleanmgr.exe [2014-03-29 16:11:39 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cleanmgr.exe [2014-03-29 16:11:38 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\thumbcache.dll [2014-03-29 16:11:23 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StorageContextHandler.dll [2014-03-29 16:11:21 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll [2014-03-29 16:11:17 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthBroker.dll [2014-03-29 16:11:17 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuthBroker.dll [2014-03-29 16:11:17 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\StorageContextHandler.dll [2014-03-29 16:11:11 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll [2014-03-29 16:11:10 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SSShim.dll [2014-03-29 16:11:00 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpnprv.dll [2014-03-29 16:10:47 | 000,183,808 | ---- | C] (Microsoft Corp.) -- C:\Windows\SysNative\Defrag.exe [2014-03-29 16:10:47 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AltTab.dll [2014-03-29 16:10:47 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WofUtil.dll [2014-03-29 16:10:46 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\migisol.dll [2014-03-29 16:10:46 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\migisol.dll [2014-03-29 16:10:38 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wcmcsp.dll [2014-03-29 16:10:37 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\timedate.cpl [2014-03-29 16:10:37 | 000,470,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\timedate.cpl [2014-03-29 16:10:36 | 000,272,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\portcls.sys [2014-03-29 16:10:35 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LockScreenContentHost.dll [2014-03-29 16:10:32 | 001,129,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFolder.dll [2014-03-29 16:10:26 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskpart.exe [2014-03-29 16:10:22 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slc.dll [2014-03-29 16:10:21 | 000,615,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdbui.dll [2014-03-29 16:10:21 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\f3ahvoas.dll [2014-03-29 16:10:21 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\f3ahvoas.dll [2014-03-29 16:10:13 | 000,366,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wcmsvc.dll [2014-03-29 16:10:10 | 000,027,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SysResetErr.exe [2014-03-29 16:10:08 | 000,038,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LockScreenContentServer.exe [2014-03-29 16:10:03 | 000,424,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hal.dll [2014-03-29 16:10:03 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netid.dll [2014-03-29 16:10:01 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhcpl.dll [2014-03-29 16:09:58 | 000,269,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bisrv.dll [2014-03-29 16:09:53 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\InputSwitch.dll [2014-03-29 16:09:53 | 000,203,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PlayToDevice.dll [2014-03-29 16:09:53 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\InputSwitch.dll [2014-03-29 16:09:53 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskpart.exe [2014-03-29 16:09:53 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sxproxy.dll [2014-03-29 16:09:51 | 000,379,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys [2014-03-29 16:09:47 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msshooks.dll [2014-03-29 16:09:42 | 000,201,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReInfo.dll [2014-03-29 16:09:40 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3mm.dll [2014-03-29 16:09:37 | 000,364,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AUDIOKSE.dll [2014-03-29 16:09:37 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepic.dll [2014-03-29 16:09:37 | 000,032,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ploptin.dll [2014-03-29 16:09:34 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pnpclean.dll [2014-03-29 16:09:29 | 000,079,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sdstor.sys [2014-03-29 16:09:26 | 000,305,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AUDIOKSE.dll [2014-03-29 16:09:26 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WiFiDisplay.dll [2014-03-29 16:09:24 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netid.dll [2014-03-29 16:09:24 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhevents.dll [2014-03-29 16:09:24 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhsvcctl.dll [2014-03-29 16:09:20 | 001,132,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Globalization.dll [2014-03-29 16:09:20 | 000,792,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Globalization.dll [2014-03-29 16:09:19 | 000,628,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2014-03-29 16:09:18 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfp.exe [2014-03-29 16:09:09 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PlayToManager.dll [2014-03-29 16:09:08 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\watchdog.sys [2014-03-29 16:09:07 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsbas.dll [2014-03-29 16:09:05 | 000,275,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powrprof.dll [2014-03-29 16:09:05 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.ocx [2014-03-29 16:09:05 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxmasf.dll [2014-03-29 16:09:04 | 000,716,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntshrui.dll [2014-03-29 16:09:03 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aitagent.exe [2014-03-29 16:09:02 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll [2014-03-29 16:08:57 | 000,584,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll [2014-03-29 16:08:57 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVolSSO.dll [2014-03-29 16:08:57 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVolSSO.dll [2014-03-29 16:08:57 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msshooks.dll [2014-03-29 16:08:54 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReInfo.dll [2014-03-29 16:08:54 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LockScreenContent.dll [2014-03-29 16:08:54 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clrhost.dll [2014-03-29 16:08:53 | 000,467,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\energy.dll [2014-03-29 16:08:53 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WofTasks.dll [2014-03-29 16:08:53 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\energytask.dll [2014-03-29 16:08:52 | 000,609,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pnidui.dll [2014-03-29 16:08:51 | 000,142,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe [2014-03-29 16:08:50 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll [2014-03-29 16:08:50 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReAgentc.exe [2014-03-29 16:08:50 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgentc.exe [2014-03-29 16:08:46 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2014-03-29 16:08:46 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ConfigureExpandedStorage.dll [2014-03-29 16:08:46 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AepRoam.dll [2014-03-29 16:08:45 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2014-03-29 16:08:44 | 000,376,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsqmcons.exe [2014-03-29 16:08:43 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveapi.dll [2014-03-29 16:08:43 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveapibase.dll [2014-03-29 16:08:42 | 000,323,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\GlobCollationHost.dll [2014-03-29 16:08:42 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\GlobCollationHost.dll [2014-03-29 16:08:42 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwm.exe [2014-03-29 16:08:40 | 000,321,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\stobject.dll [2014-03-29 16:08:37 | 000,467,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioSes.dll [2014-03-29 16:08:37 | 000,463,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioEng.dll [2014-03-29 16:08:37 | 000,391,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MMDevAPI.dll [2014-03-29 16:08:37 | 000,244,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\audiodg.exe [2014-03-29 16:08:37 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BulkOperationHost.exe [2014-03-29 16:08:37 | 000,028,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfpmp.exe [2014-03-29 16:08:36 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppxAllUserStore.dll [2014-03-29 16:08:36 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AppxAllUserStore.dll [2014-03-29 16:08:34 | 000,203,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netiohlp.dll [2014-03-29 16:08:34 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netiohlp.dll [2014-03-29 16:08:34 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSyncPolicy.dll [2014-03-29 16:08:33 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\acppage.dll [2014-03-29 16:08:33 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winbrand.dll [2014-03-29 16:08:32 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\syncui.dll [2014-03-29 16:08:32 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acppage.dll [2014-03-29 16:08:32 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shimeng.dll [2014-03-29 16:08:26 | 000,390,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DfpCommon.dll [2014-03-29 16:08:23 | 000,441,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssph.dll [2014-03-29 16:08:18 | 000,367,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssph.dll [2014-03-29 16:08:18 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrobj.dll [2014-03-29 16:08:18 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrobj.dll [2014-03-29 16:08:17 | 000,372,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys [2014-03-29 16:08:17 | 000,236,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sdbus.sys [2014-03-29 16:08:17 | 000,151,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dumpsd.sys [2014-03-29 16:08:16 | 001,445,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webservices.dll [2014-03-29 16:08:16 | 001,077,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webservices.dll [2014-03-29 16:08:16 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wbadmin.exe [2014-03-29 16:08:16 | 000,152,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcrypt.dll [2014-03-29 16:08:16 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PlayToManager.dll [2014-03-29 16:08:15 | 000,589,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsdyn.dll [2014-03-29 16:08:15 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll [2014-03-29 16:08:15 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpchttp.dll [2014-03-29 16:08:15 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rpchttp.dll [2014-03-29 16:08:15 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsutil.dll [2014-03-29 16:08:14 | 000,761,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iuilp.dll [2014-03-29 16:08:14 | 000,453,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll [2014-03-29 16:08:14 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\offreg.dll [2014-03-29 16:08:14 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Shell.Search.UriHandler.dll [2014-03-29 16:08:14 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sxshared.dll [2014-03-29 16:08:13 | 000,188,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\systemreset.exe [2014-03-29 16:08:13 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dafWfdProvider.dll [2014-03-29 16:08:13 | 000,170,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll [2014-03-29 16:08:13 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscinterop.dll [2014-03-29 16:08:13 | 000,140,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll [2014-03-29 16:08:13 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscinterop.dll [2014-03-29 16:08:13 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winbrand.dll [2014-03-29 16:08:13 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll [2014-03-29 16:08:12 | 000,592,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll [2014-03-29 16:08:08 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IdCtrls.dll [2014-03-29 16:08:08 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IdCtrls.dll [2014-03-29 16:08:07 | 000,432,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanconn.dll [2014-03-29 16:08:07 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DAConn.dll [2014-03-29 16:08:06 | 000,569,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpncore.dll [2014-03-29 16:08:06 | 000,273,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dmdskmgr.dll [2014-03-29 16:08:06 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmdskmgr.dll [2014-03-29 16:08:06 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slpts.dll [2014-03-29 16:08:05 | 001,791,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMALFXGFXDSP.dll [2014-03-29 16:08:05 | 001,258,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RacEngn.dll [2014-03-29 16:08:05 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\storewuauth.dll [2014-03-29 16:08:02 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\korwbrkr.dll [2014-03-29 16:08:02 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\korwbrkr.dll [2014-03-29 16:08:01 | 000,295,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanapi.dll [2014-03-29 16:08:01 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanapi.dll [2014-03-29 16:08:01 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanhlp.dll [2014-03-29 16:08:01 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanhlp.dll [2014-03-29 16:08:00 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RelPost.exe [2014-03-29 16:08:00 | 000,036,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WerFaultSecure.exe [2014-03-29 16:07:59 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clrhost.dll [2014-03-29 16:07:57 | 000,791,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uDWM.dll [2014-03-29 16:07:56 | 000,557,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PrintDialogs.dll [2014-03-29 16:07:56 | 000,492,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PrintDialogs.dll [2014-03-29 16:07:56 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmredir.dll [2014-03-29 16:07:56 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\deviceaccess.dll [2014-03-29 16:07:56 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dasHost.exe [2014-03-29 16:07:56 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\deviceassociation.dll [2014-03-29 16:07:56 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\deviceassociation.dll [2014-03-29 16:07:53 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll [2014-03-29 16:07:52 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dmvdsitf.dll [2014-03-29 16:07:51 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppnp.dll [2014-03-29 16:07:51 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ConfigureExpandedStorage.dll [2014-03-29 16:07:45 | 000,336,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MbaeApiPublic.dll [2014-03-29 16:07:45 | 000,269,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PlayToDevice.dll [2014-03-29 16:07:45 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveskybackup.dll [2014-03-29 16:07:44 | 000,621,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MDMAgent.exe [2014-03-29 16:07:44 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mdmregistration.dll [2014-03-29 16:07:44 | 000,242,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mdmregistration.dll [2014-03-29 16:07:44 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\microsoft-windows-kernel-power-events.dll [2014-03-29 16:07:44 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winbici.dll [2014-03-29 16:07:43 | 000,201,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioEndpointBuilder.dll [2014-03-29 16:07:41 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ext-ms-win-session-winsta-l1-1-0.dll [2014-03-29 16:07:41 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ext-ms-win-session-winsta-l1-1-0.dll [2014-03-29 16:07:40 | 000,123,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmapi.dll [2014-03-29 16:07:40 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samlib.dll [2014-03-29 16:07:40 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.Sockets.PushEnabledApplication.dll [2014-03-29 16:07:40 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Networking.Sockets.PushEnabledApplication.dll [2014-03-29 16:07:39 | 000,505,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VAN.dll [2014-03-29 16:07:39 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WLanConn.dll [2014-03-29 16:07:39 | 000,448,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VAN.dll [2014-03-29 16:07:39 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WLanConn.dll [2014-03-29 16:07:38 | 000,586,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll [2014-03-29 16:07:38 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll [2014-03-29 16:07:38 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmrdvcore.dll [2014-03-29 16:07:38 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\BasicRender.sys [2014-03-29 16:07:37 | 001,163,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll [2014-03-29 16:07:37 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srchadmin.dll [2014-03-29 16:07:37 | 000,320,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchProtocolHost.exe [2014-03-29 16:07:37 | 000,308,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srchadmin.dll [2014-03-29 16:07:37 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFilterHost.exe [2014-03-29 16:07:37 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdboot.exe [2014-03-29 16:07:37 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UXInit.dll [2014-03-29 16:07:37 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UXInit.dll [2014-03-29 16:07:35 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netplwiz.dll [2014-03-29 16:07:35 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netplwiz.dll [2014-03-29 16:07:34 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\microsoft-windows-system-events.dll [2014-03-29 16:07:33 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wincorlib.dll [2014-03-29 16:07:33 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wincorlib.dll [2014-03-29 16:07:33 | 000,032,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UserAccountBroker.exe [2014-03-29 16:07:33 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSyncPolicy.dll [2014-03-29 16:07:29 | 000,745,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll [2014-03-29 16:07:29 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionQueue.dll [2014-03-29 16:07:28 | 000,468,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemSettings.Handlers.dll [2014-03-29 16:07:28 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf3216.dll [2014-03-29 16:07:26 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingMonitor.dll [2014-03-29 16:07:26 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dataclen.dll [2014-03-29 16:07:25 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpdxm.dll [2014-03-29 16:07:22 | 005,784,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2014-03-29 16:07:22 | 000,548,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2014-03-29 16:07:22 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrrun.dll [2014-03-29 16:07:22 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrrun.dll [2014-03-29 16:07:22 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscript.exe [2014-03-29 16:07:22 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshom.ocx [2014-03-29 16:07:22 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscript.exe [2014-03-29 16:07:21 | 000,413,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll [2014-03-29 16:07:21 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\finger.exe [2014-03-29 16:07:19 | 001,466,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\propsys.dll [2014-03-29 16:07:19 | 000,545,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\untfs.dll [2014-03-29 16:07:19 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\untfs.dll [2014-03-29 16:07:19 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssprxy.dll [2014-03-29 16:07:18 | 000,477,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SHCore.dll [2014-03-29 16:07:18 | 000,162,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthHost.exe [2014-03-29 16:07:18 | 000,157,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wof.sys [2014-03-29 16:07:18 | 000,071,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dumpfve.sys [2014-03-29 16:07:18 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpksetupproxyserv.dll [2014-03-29 16:07:17 | 000,388,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcryptprimitives.dll [2014-03-29 16:07:17 | 000,336,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bcryptprimitives.dll [2014-03-29 16:07:17 | 000,331,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\newdev.dll [2014-03-29 16:07:17 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\newdev.dll [2014-03-29 16:07:17 | 000,105,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncryptsslp.dll [2014-03-29 16:07:17 | 000,089,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncryptsslp.dll [2014-03-29 16:07:15 | 000,586,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2014-03-29 16:07:14 | 000,957,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFMediaEngine.dll [2014-03-29 16:07:14 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2014-03-29 16:07:14 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFMediaEngine.dll [2014-03-29 16:07:14 | 000,709,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msctfuimanager.dll [2014-03-29 16:07:14 | 000,704,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2014-03-29 16:07:14 | 000,054,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wpcfltr.sys [2014-03-29 16:07:13 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msctfuimanager.dll [2014-03-29 16:07:12 | 000,834,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\osk.exe [2014-03-29 16:07:12 | 000,779,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\osk.exe [2014-03-29 16:07:12 | 000,655,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscui.dll [2014-03-29 16:07:12 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll [2014-03-29 16:07:12 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll [2014-03-29 16:07:12 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\offreg.dll [2014-03-29 16:07:10 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Shell.Search.UriHandler.dll [2014-03-29 16:07:08 | 002,825,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll [2014-03-29 16:07:08 | 002,428,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll [2014-03-29 16:07:07 | 001,185,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\printui.dll [2014-03-29 16:07:07 | 001,057,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\printui.dll [2014-03-29 16:07:07 | 001,026,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll [2014-03-29 16:07:07 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comdlg32.dll [2014-03-29 16:07:07 | 000,488,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winspool.drv [2014-03-29 16:07:07 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scavengeui.dll [2014-03-29 16:07:07 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sxproxy.dll [2014-03-29 16:07:07 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll [2014-03-29 16:07:06 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2014-03-29 16:07:04 | 000,490,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfsvr.dll [2014-03-29 16:07:04 | 000,486,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcfgx.dll [2014-03-29 16:07:04 | 000,389,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcfgx.dll [2014-03-29 16:07:04 | 000,083,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe [2014-03-29 16:07:04 | 000,080,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhostex.exe [2014-03-29 16:07:04 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppxSysprep.dll [2014-03-29 16:07:03 | 000,384,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\spaceport.sys [2014-03-29 16:07:03 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2014-03-29 16:07:03 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bthprops.cpl [2014-03-29 16:07:03 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dafBth.dll [2014-03-29 16:07:02 | 000,372,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvproc.dll [2014-03-29 16:07:01 | 000,317,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvproc.dll [2014-03-29 16:07:00 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSClient.dll [2014-03-29 16:07:00 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSClient.dll [2014-03-29 16:07:00 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppc.dll [2014-03-29 16:07:00 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppc.dll [2014-03-29 16:07:00 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slpts.dll [2014-03-29 16:06:59 | 001,144,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanmm.dll [2014-03-29 16:06:59 | 001,008,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WlanMM.dll [2014-03-29 16:06:59 | 000,943,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WlanMM.dll [2014-03-29 16:06:59 | 000,463,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RASMM.dll [2014-03-29 16:06:59 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rascustom.dll [2014-03-29 16:06:59 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\easwrt.dll [2014-03-29 16:06:59 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\easwrt.dll [2014-03-29 16:06:59 | 000,131,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\easinvoker.exe [2014-03-29 16:06:59 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DAMM.dll [2014-03-29 16:06:58 | 000,275,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authz.dll [2014-03-29 16:06:58 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psmsrv.dll [2014-03-29 16:06:55 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MrmIndexer.dll [2014-03-29 16:06:55 | 000,518,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MrmIndexer.dll [2014-03-29 16:06:55 | 000,033,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WerFaultSecure.exe [2014-03-29 16:06:53 | 000,546,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppxPackaging.dll [2014-03-29 16:06:53 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AppxPackaging.dll [2014-03-29 16:06:53 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWWIN.EXE [2014-03-29 16:06:53 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DWWIN.EXE [2014-03-29 16:06:47 | 001,339,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll [2014-03-29 16:06:47 | 000,356,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe [2014-03-29 16:06:47 | 000,356,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dcomp.dll [2014-03-29 16:06:47 | 000,222,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dcomp.dll [2014-03-29 16:06:47 | 000,209,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imm32.dll [2014-03-29 16:06:47 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll [2014-03-29 16:06:47 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmvdsitf.dll [2014-03-29 16:06:46 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll [2014-03-29 16:06:46 | 000,675,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll [2014-03-29 16:06:46 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll [2014-03-29 16:06:46 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll [2014-03-29 16:06:46 | 000,054,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe [2014-03-29 16:06:46 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe [2014-03-29 16:06:46 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe [2014-03-29 16:06:44 | 001,653,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll [2014-03-29 16:06:44 | 000,710,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsm.dll [2014-03-29 16:06:42 | 002,133,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmcore.dll [2014-03-29 16:06:42 | 001,764,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dwmcore.dll [2014-03-29 16:06:41 | 000,693,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhcfg.dll [2014-03-29 16:06:40 | 000,251,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MbaeApiPublic.dll [2014-03-29 16:06:40 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.Vpn.dll [2014-03-29 16:06:40 | 000,244,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppwinob.dll [2014-03-29 16:06:38 | 000,008,192 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ext-ms-win-ntuser-private-l1-1-1.dll [2014-03-29 16:06:38 | 000,008,192 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ext-ms-win-ntuser-private-l1-1-1.dll [2014-03-29 16:06:38 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ext-ms-win-ntuser-private-l1-1-0.dll [2014-03-29 16:06:38 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ext-ms-win-ntuser-private-l1-1-0.dll [2014-03-29 16:06:38 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ext-ms-win-networking-wcmapi-l1-1-0.dll [2014-03-29 16:06:37 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ext-ms-win-kernel32-package-l1-1-1.dll [2014-03-29 16:06:37 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ext-ms-win-kernel32-package-l1-1-1.dll [2014-03-29 16:06:35 | 000,825,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samsrv.dll [2014-03-29 16:06:34 | 000,669,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll [2014-03-29 16:06:32 | 000,349,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdedit.exe [2014-03-29 16:06:32 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Sensors.dll [2014-03-29 16:06:32 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe [2014-03-29 16:06:32 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Sensors.dll [2014-03-29 16:06:32 | 000,146,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\msgpioclx.sys [2014-03-29 16:06:32 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BootMenuUX.dll [2014-03-29 16:06:32 | 000,094,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcd.dll [2014-03-29 16:06:32 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spbcd.dll [2014-03-29 16:06:32 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll [2014-03-29 16:06:31 | 000,897,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdclt.exe [2014-03-29 16:06:31 | 000,506,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinTypes.dll [2014-03-29 16:06:31 | 000,467,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll [2014-03-29 16:06:31 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spp.dll [2014-03-29 16:06:31 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srrstr.dll [2014-03-29 16:06:31 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shsetup.dll [2014-03-29 16:06:31 | 000,079,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bcd.dll [2014-03-29 16:06:31 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll [2014-03-29 16:06:31 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spbcd.dll [2014-03-29 16:06:31 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SrTasks.exe [2014-03-29 16:06:30 | 000,444,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizeng.dll [2014-03-29 16:06:30 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwizeng.dll [2014-03-29 16:06:29 | 000,307,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2014-03-29 16:06:29 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppXDeploymentClient.dll [2014-03-29 16:06:29 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AppXDeploymentClient.dll [2014-03-29 16:06:26 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupugc.exe [2014-03-29 16:06:24 | 002,862,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll [2014-03-29 16:06:24 | 002,811,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themeui.dll [2014-03-29 16:06:24 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recimg.exe [2014-03-29 16:06:24 | 000,575,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfrgui.exe [2014-03-29 16:06:24 | 000,561,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfrgui.exe [2014-03-29 16:06:21 | 001,290,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msctf.dll [2014-03-29 16:06:21 | 000,386,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfsvr.dll [2014-03-29 16:06:21 | 000,210,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVol.exe [2014-03-29 16:06:21 | 000,180,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVol.exe [2014-03-29 16:06:21 | 000,043,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CloudNotifications.exe [2014-03-29 16:06:21 | 000,041,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CloudNotifications.exe [2014-03-29 16:06:21 | 000,029,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UserAccountBroker.exe [2014-03-29 16:06:18 | 000,555,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinapi.appcore.dll [2014-03-29 16:06:17 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\deviceaccess.dll [2014-03-29 16:06:15 | 000,881,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfplat.dll [2014-03-29 16:06:15 | 000,707,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfplat.dll [2014-03-29 16:06:15 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UserLanguagesCpl.dll [2014-03-29 16:06:15 | 000,591,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll [2014-03-29 16:06:15 | 000,559,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UserLanguagesCpl.dll [2014-03-29 16:06:15 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devinv.dll [2014-03-29 16:06:15 | 000,360,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll [2014-03-29 16:06:15 | 000,354,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll [2014-03-29 16:06:15 | 000,324,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFCaptureEngine.dll [2014-03-29 16:06:15 | 000,285,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFCaptureEngine.dll [2014-03-29 16:06:15 | 000,258,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemSettingsAdminFlows.exe [2014-03-29 16:06:15 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Media.Renewal.dll [2014-03-29 16:06:14 | 002,373,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2014-03-29 16:06:14 | 002,088,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe [2014-03-29 16:06:14 | 000,526,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wer.dll [2014-03-29 16:06:14 | 000,422,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wer.dll [2014-03-29 16:06:14 | 000,232,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqmapi.dll [2014-03-29 16:06:12 | 000,443,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlansec.dll [2014-03-29 16:06:12 | 000,370,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanmsm.dll [2014-03-29 16:06:12 | 000,300,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanmsm.dll [2014-03-29 16:06:11 | 001,416,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2014-03-29 16:06:11 | 000,854,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSShared.dll [2014-03-29 16:06:11 | 000,698,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSShared.dll [2014-03-29 16:06:11 | 000,562,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe [2014-03-29 16:06:11 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingMonitor.dll [2014-03-29 16:06:11 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dataclen.dll [2014-03-29 16:06:07 | 000,467,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBHUB3.SYS [2014-03-29 16:06:07 | 000,325,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBXHCI.SYS [2014-03-29 16:06:07 | 000,189,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\UCX01000.SYS [2014-03-29 16:06:05 | 001,054,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinui.appcore.dll [2014-03-29 16:06:01 | 000,530,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppReadiness.dll [2014-03-29 16:06:00 | 002,395,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\storagewmi.dll [2014-03-29 16:06:00 | 001,403,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\storagewmi.dll [2014-03-29 16:06:00 | 001,287,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mispace.dll [2014-03-29 16:06:00 | 001,029,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mispace.dll [2014-03-29 16:06:00 | 000,512,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wimserv.exe [2014-03-29 16:06:00 | 000,459,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSync.dll [2014-03-29 16:06:00 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fsutil.exe [2014-03-29 16:06:00 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CloudStorageWizard.exe [2014-03-29 16:06:00 | 000,101,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RestoreOptIn.exe [2014-03-29 16:06:00 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercfg.exe [2014-03-29 16:06:00 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercfg.exe [2014-03-29 16:05:59 | 001,206,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Taskmgr.exe [2014-03-29 16:05:59 | 001,063,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Taskmgr.exe [2014-03-29 16:05:59 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wimgapi.dll [2014-03-29 16:05:59 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CloudStorageWizard.exe [2014-03-29 16:05:59 | 000,089,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RestoreOptIn.exe [2014-03-29 16:05:58 | 000,777,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSyncCore.dll [2014-03-29 16:05:58 | 000,647,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSyncHost.exe [2014-03-29 16:05:58 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSyncCore.dll [2014-03-29 16:05:58 | 000,576,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSync.dll [2014-03-29 16:05:58 | 000,517,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSyncHost.exe [2014-03-29 16:05:58 | 000,469,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe [2014-03-29 16:05:58 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fsutil.exe [2014-03-29 16:05:58 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\finger.exe [2014-03-29 16:05:57 | 000,721,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SkyDriveTelemetry.dll [2014-03-29 16:05:56 | 001,374,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\combase.dll [2014-03-29 16:05:56 | 001,356,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe [2014-03-29 16:05:56 | 000,902,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autoconv.exe [2014-03-29 16:05:56 | 000,890,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autochk.exe [2014-03-29 16:05:56 | 000,874,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autofmt.exe [2014-03-29 16:05:56 | 000,800,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autoconv.exe [2014-03-29 16:05:56 | 000,792,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autochk.exe [2014-03-29 16:05:56 | 000,780,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autofmt.exe [2014-03-29 16:05:56 | 000,518,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll [2014-03-29 16:05:55 | 002,141,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll [2014-03-29 16:05:55 | 001,779,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll [2014-03-29 16:05:55 | 001,727,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2014-03-29 16:05:54 | 000,924,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\refs.sys [2014-03-29 16:05:52 | 001,659,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi [2014-03-29 16:05:52 | 001,519,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe [2014-03-29 16:05:52 | 001,487,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi [2014-03-29 16:05:52 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdh.dll [2014-03-29 16:05:51 | 000,968,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdh.dll [2014-03-29 16:05:51 | 000,912,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nettrace.dll [2014-03-29 16:05:51 | 000,307,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wusa.exe [2014-03-29 16:05:51 | 000,304,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wusa.exe [2014-03-29 16:05:51 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PkgMgr.exe [2014-03-29 16:05:51 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PkgMgr.exe [2014-03-29 16:05:51 | 000,163,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ocsetapi.dll [2014-03-29 16:05:51 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ocsetapi.dll [2014-03-29 16:05:50 | 000,275,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Dism.exe [2014-03-29 16:05:50 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe [2014-03-29 16:05:49 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DismApi.dll [2014-03-29 16:05:49 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Dism.exe [2014-03-29 16:05:48 | 000,949,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReAgent.dll [2014-03-29 16:05:48 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgent.dll [2014-03-29 16:05:48 | 000,797,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PurchaseWindowsLicense.dll [2014-03-29 16:05:48 | 000,653,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DismApi.dll [2014-03-29 16:05:48 | 000,551,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wimgapi.dll [2014-03-29 16:05:48 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winsku.dll [2014-03-29 16:05:47 | 001,929,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupapi.dll [2014-03-29 16:05:47 | 001,428,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RecoveryDrive.exe [2014-03-29 16:05:47 | 000,935,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasgcw.dll [2014-03-29 16:05:47 | 000,872,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SkyDrive.exe [2014-03-29 16:05:47 | 000,835,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasgcw.dll [2014-03-29 16:05:47 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OobeFldr.dll [2014-03-29 16:05:47 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OobeFldr.dll [2014-03-29 16:05:47 | 000,316,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsku.dll [2014-03-29 16:05:46 | 001,584,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\workfolderssvc.dll [2014-03-29 16:05:46 | 001,015,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aclui.dll [2014-03-29 16:05:46 | 000,887,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aclui.dll [2014-03-29 16:05:46 | 000,824,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll [2014-03-29 16:05:46 | 000,761,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WorkfoldersControl.dll [2014-03-29 16:05:46 | 000,662,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll [2014-03-29 16:05:45 | 003,394,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSService.dll [2014-03-29 16:05:45 | 000,997,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\reseteng.dll [2014-03-29 16:05:45 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll [2014-03-29 16:05:44 | 001,435,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppobjs.dll [2014-03-29 16:05:44 | 000,399,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\das.dll [2014-03-29 16:05:43 | 007,425,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2014-03-29 16:05:43 | 000,504,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevicePairing.dll [2014-03-29 16:05:43 | 000,381,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUSettingsProvider.dll [2014-03-29 16:05:43 | 000,137,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll [2014-03-29 16:05:39 | 000,461,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WerFault.exe [2014-03-29 16:05:39 | 000,410,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WerFault.exe [2014-03-29 16:05:39 | 000,407,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Faultrep.dll [2014-03-29 16:05:39 | 000,369,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Faultrep.dll [2014-03-29 16:05:39 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werui.dll [2014-03-29 16:05:39 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\werui.dll [2014-03-29 16:05:39 | 000,139,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wermgr.exe [2014-03-29 16:05:39 | 000,137,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wermgr.exe [2014-03-29 16:05:29 | 002,643,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll [2014-03-29 16:05:29 | 002,368,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll [2014-03-29 16:05:29 | 001,716,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll [2014-03-29 16:05:29 | 000,628,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msTextPrediction.dll [2014-03-29 16:05:28 | 003,494,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll [2014-03-29 16:05:28 | 000,439,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Bluetooth.dll [2014-03-29 16:05:28 | 000,208,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.ApplicationModel.Store.dll [2014-03-29 16:05:28 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll [2014-03-29 16:05:28 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.HumanInterfaceDevice.dll [2014-03-29 16:05:27 | 000,419,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinapi.appcore.dll [2014-03-29 16:05:27 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Networking.Connectivity.dll [2014-03-29 16:05:26 | 001,576,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlidsvc.dll [2014-03-29 16:05:26 | 000,828,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinui.appcore.dll [2014-03-29 16:05:26 | 000,704,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Security.Authentication.OnlineId.dll [2014-03-29 16:05:26 | 000,553,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Security.Authentication.OnlineId.dll [2014-03-29 16:05:26 | 000,511,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlidprov.dll [2014-03-29 16:05:26 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlidprov.dll [2014-03-29 16:05:26 | 000,316,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BioCredProv.dll [2014-03-29 16:05:26 | 000,286,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlidcredprov.dll [2014-03-29 16:05:26 | 000,260,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\BioCredProv.dll [2014-03-29 16:05:26 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlidcredprov.dll [2014-03-29 16:05:26 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MicrosoftAccountTokenProvider.dll [2014-03-29 16:05:26 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MicrosoftAccountTokenProvider.dll [2014-03-29 16:05:25 | 001,057,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdvidcrl.dll [2014-03-29 16:05:25 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdvidcrl.dll [2014-03-29 16:05:25 | 000,747,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlidcli.dll [2014-03-29 16:05:25 | 000,544,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlidcli.dll [2014-03-29 16:05:20 | 004,268,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SyncEngine.dll [2014-03-29 16:05:19 | 001,306,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppXDeploymentServer.dll [2014-03-29 16:05:19 | 000,924,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppXDeploymentExtensions.dll [2014-03-29 16:05:19 | 000,645,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SHCore.dll [2014-03-29 16:05:19 | 000,559,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.Connectivity.dll [2014-03-29 16:05:19 | 000,249,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll [2014-03-29 16:05:18 | 001,967,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2014-03-29 16:05:18 | 000,660,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Bluetooth.dll [2014-03-29 16:05:18 | 000,299,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.ApplicationModel.Store.dll [2014-03-29 16:05:18 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.HumanInterfaceDevice.dll [2014-03-29 16:05:17 | 002,843,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\actxprxy.dll [2014-03-29 16:05:17 | 002,043,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2014-03-29 16:05:17 | 001,728,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dui70.dll [2014-03-29 16:05:16 | 001,927,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\combase.dll [2014-03-29 16:05:16 | 001,542,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll [2014-03-29 16:05:16 | 001,341,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dui70.dll [2014-03-29 16:05:16 | 001,224,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werconcpl.dll [2014-03-29 16:05:16 | 001,000,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinTypes.dll [2014-03-29 16:05:16 | 000,878,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionCenter.dll [2014-03-29 16:05:16 | 000,832,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ActionCenter.dll [2014-03-29 16:05:15 | 002,574,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL [2014-03-29 16:05:15 | 002,410,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL [2014-03-29 16:05:15 | 001,705,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll [2014-03-29 16:05:15 | 001,227,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usercpl.dll [2014-03-29 16:05:15 | 001,217,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Media.Streaming.dll [2014-03-29 16:05:15 | 001,162,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\usercpl.dll [2014-03-29 16:05:15 | 001,152,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscui.cpl [2014-03-29 16:05:15 | 001,136,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscui.cpl [2014-03-29 16:05:15 | 000,978,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Media.Streaming.dll [2014-03-29 16:05:15 | 000,887,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Media.dll [2014-03-29 16:05:15 | 000,609,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll [2014-03-29 16:05:15 | 000,289,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqmapi.dll [2014-03-29 16:05:14 | 002,100,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemSettingsAdminFlowUI.dll [2014-03-29 16:05:14 | 001,229,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Media.dll [2014-03-29 16:05:14 | 000,518,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll [2014-03-29 16:05:10 | 002,943,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wpc.dll [2014-03-29 16:05:10 | 002,220,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Wpc.dll [2014-03-29 16:05:10 | 001,757,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPDMC.exe [2014-03-29 16:05:10 | 001,392,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPDMC.exe [2014-03-29 16:05:10 | 001,011,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfnetsrc.dll [2014-03-29 16:05:10 | 000,650,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfnetcore.dll [2014-03-29 16:05:10 | 000,397,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sharemediacpl.dll [2014-03-29 16:05:09 | 012,027,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Data.Pdf.dll [2014-03-29 16:05:09 | 002,760,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpccpl.dll [2014-03-29 16:05:09 | 002,648,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WpcWebSync.dll [2014-03-29 16:05:09 | 002,588,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WpcMon.exe [2014-03-29 16:05:08 | 011,742,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\glcndFilter.dll [2014-03-29 16:05:08 | 008,946,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\glcndFilter.dll [2014-03-29 16:05:07 | 008,874,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Data.Pdf.dll [2014-03-29 16:05:07 | 008,654,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.Search.dll [2014-03-29 16:05:07 | 005,834,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.Search.dll [2014-03-29 16:05:07 | 002,544,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themecpl.dll [2014-03-29 16:05:06 | 002,566,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themecpl.dll [2014-03-29 16:05:06 | 002,144,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfcore.dll [2014-03-29 16:05:06 | 002,142,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfcore.dll [2014-03-29 16:05:06 | 001,374,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll [2014-03-29 16:05:06 | 001,215,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfnetsrc.dll [2014-03-29 16:05:06 | 001,206,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winmde.dll [2014-03-29 16:05:06 | 000,800,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfnetcore.dll [2014-03-29 16:05:05 | 002,270,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msftedit.dll [2014-03-29 16:05:05 | 001,399,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winmde.dll [2014-03-29 16:05:05 | 001,396,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcmde.dll [2014-03-29 16:05:03 | 002,900,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msftedit.dll [2014-03-29 16:05:02 | 016,881,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.Xaml.dll [2014-03-29 16:05:02 | 012,736,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.Xaml.dll [2014-03-29 16:05:02 | 002,315,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll [2014-03-29 16:05:01 | 002,639,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll [2014-03-29 16:05:01 | 001,640,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.Immersive.dll [2014-03-29 16:05:01 | 001,496,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.Immersive.dll [2014-03-29 16:05:00 | 005,770,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll [2014-03-29 16:05:00 | 003,596,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll [2014-03-29 16:05:00 | 003,085,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll [2014-03-29 16:04:59 | 006,640,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll [2014-03-29 16:04:59 | 001,621,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RacEngn.dll [2014-03-29 16:04:59 | 001,107,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perftrack.dll [2014-03-29 16:04:59 | 000,556,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinapi.dll [2014-03-29 16:04:59 | 000,527,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll [2014-03-29 16:04:58 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gameux.dll [2014-03-29 16:04:58 | 002,537,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gameux.dll [2014-03-29 16:04:58 | 002,288,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SyncCenter.dll [2014-03-29 16:04:58 | 002,165,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SyncCenter.dll [2014-03-29 16:04:58 | 001,519,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\user32.dll [2014-03-29 16:04:58 | 000,721,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinapi.dll [2014-03-29 16:04:58 | 000,545,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apphelp.dll [2014-03-29 16:04:58 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spcompat.dll [2014-03-29 16:04:57 | 013,933,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll [2014-03-29 16:04:56 | 011,776,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll [2014-03-29 16:04:55 | 001,290,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll [2014-03-29 16:04:55 | 001,116,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll [2014-03-29 16:04:53 | 003,312,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bootux.dll [2014-03-29 16:04:51 | 013,286,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinui.dll [2014-03-29 16:04:51 | 011,790,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinui.dll [2014-03-29 15:43:05 | 000,372,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\clfs.sys [2014-03-29 15:42:18 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe [2014-03-29 15:42:18 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe [2014-03-27 21:19:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2014-03-27 21:03:15 | 000,461,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll [2014-03-27 21:03:14 | 000,842,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.dll [2014-03-27 21:03:14 | 000,336,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll [2014-03-27 21:03:12 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MsSpellCheckingFacility.dll [2014-03-27 21:03:12 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sti.dll [2014-03-27 21:03:10 | 000,000,000 | -HSD | C] -- C:\ProgramData\Windows Manager [2014-03-27 21:03:10 | 000,000,000 | ---D | C] -- C:\Users\JOHN\AppData\Roaming\evkFv [2014-03-27 21:01:36 | 000,000,000 | RHSD | C] -- C:\Users\JOHN\a819wyi7i9 [2014-03-27 21:01:33 | 000,000,000 | ---D | C] -- C:\Users\JOHN\AppData\Roaming\uZNiY [2014-03-27 21:01:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico [2014-03-27 21:01:20 | 004,175,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbgeng.dll [2014-03-27 21:01:20 | 002,873,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbgeng.dll [2014-03-27 21:01:20 | 001,486,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbghelp.dll [2014-03-27 21:01:20 | 000,764,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfmpeg2srcsnk.dll [2014-03-27 21:01:20 | 000,669,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfmpeg2srcsnk.dll [2014-03-27 21:01:20 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpencom.dll [2014-03-27 21:01:20 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpencom.dll [2014-03-27 21:01:19 | 001,238,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbghelp.dll [2014-03-27 21:01:19 | 000,447,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppcomapi.dll [2014-03-27 21:01:14 | 000,236,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdFilter.sys [2014-03-27 21:01:13 | 000,124,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdNisDrv.sys [2014-03-27 21:01:13 | 000,035,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdBoot.sys [2014-03-27 21:01:01 | 000,000,000 | -H-D | C] -- C:\ProgramData\NTKernel [2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-04-14 11:52:35 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2014-04-14 11:50:32 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2014-04-14 11:50:32 | 2145,169,407 | -HS- | M] () -- C:\hiberfil.sys [2014-04-13 20:43:02 | 000,001,322 | ---- | M] () -- C:\Users\JOHN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk [2014-04-13 12:33:18 | 000,119,512 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys [2014-04-11 19:20:36 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_LocationProvider_01_11_00.Wdf [2014-04-11 16:54:15 | 001,825,074 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2014-04-11 16:54:15 | 000,805,918 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2014-04-11 16:54:15 | 000,722,278 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2014-04-11 16:54:15 | 000,163,272 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2014-04-11 16:54:15 | 000,135,394 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2014-04-11 16:46:50 | 000,000,350 | -H-- | M] () -- C:\Windows\tasks\avast! Emergency Update.job [2014-04-11 16:46:45 | 001,039,096 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys [2014-04-11 16:46:45 | 000,423,240 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys [2014-04-11 16:46:45 | 000,334,648 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe [2014-04-11 16:46:45 | 000,208,928 | ---- | M] () -- C:\Windows\SysNative\drivers\aswVmm.sys [2014-04-11 16:46:45 | 000,093,568 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys [2014-04-11 16:46:45 | 000,084,816 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswStm.sys [2014-04-11 16:46:45 | 000,079,184 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys [2014-04-11 16:46:45 | 000,065,776 | ---- | M] () -- C:\Windows\SysNative\drivers\aswRvrt.sys [2014-04-11 16:46:44 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr [2014-04-11 16:46:27 | 000,001,072 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf5594d19f1ce4.job [2014-04-03 21:34:11 | 000,000,332 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{A9940739-9971-4EF3-9F03-2F8197CA0BA2}.job [2014-04-03 21:25:39 | 000,297,072 | RHS- | M] () -- C:\NTLDR [2014-04-03 21:25:39 | 000,047,772 | RHS- | M] () -- C:\ntdetect.com [2014-04-03 21:25:38 | 000,000,345 | RHS- | M] () -- C:\Boot.ini [2014-04-03 09:51:22 | 000,063,192 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys [2014-04-03 09:51:04 | 000,088,280 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys [2014-04-03 09:50:58 | 000,025,816 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2014-03-31 23:23:52 | 000,693,240 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2014-03-31 23:23:52 | 000,105,464 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2014-03-29 16:28:50 | 006,816,200 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-04-13 20:43:02 | 000,001,322 | ---- | C] () -- C:\Users\JOHN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk [2014-04-11 19:20:36 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_LocationProvider_01_11_00.Wdf [2014-04-11 16:46:50 | 000,000,350 | -H-- | C] () -- C:\Windows\tasks\avast! Emergency Update.job [2014-04-11 16:46:27 | 000,001,072 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf5594d19f1ce4.job [2014-04-03 21:34:11 | 000,000,332 | -H-- | C] () -- C:\Windows\tasks\User_Feed_Synchronization-{A9940739-9971-4EF3-9F03-2F8197CA0BA2}.job [2014-04-03 21:24:21 | 000,297,072 | RHS- | C] () -- C:\NTLDR [2014-04-03 21:24:21 | 000,047,772 | RHS- | C] () -- C:\ntdetect.com [2014-04-03 21:24:20 | 000,000,345 | RHS- | C] () -- C:\Boot.ini [2014-03-29 16:10:22 | 000,139,600 | ---- | C] () -- C:\Windows\SysNative\systemsf.ebd [2014-03-29 16:10:11 | 000,100,197 | ---- | C] () -- C:\Windows\SysNative\RacRules.xml [2014-03-29 16:09:34 | 000,100,197 | ---- | C] () -- C:\Windows\SysWow64\RacRules.xml [2014-03-29 16:09:16 | 000,011,109 | ---- | C] () -- C:\Windows\SysWow64\connectedsearch-results.searchconnector-ms [2014-03-29 16:09:16 | 000,011,109 | ---- | C] () -- C:\Windows\SysNative\connectedsearch-results.searchconnector-ms [2014-03-29 16:09:16 | 000,007,762 | ---- | C] () -- C:\Windows\SysWow64\connectedsearch-suggestions.searchconnector-ms [2014-03-29 16:09:16 | 000,007,762 | ---- | C] () -- C:\Windows\SysNative\connectedsearch-suggestions.searchconnector-ms [2014-03-29 16:09:16 | 000,007,130 | ---- | C] () -- C:\Windows\SysWow64\connectedsearch-zeroinput.searchconnector-ms [2014-03-29 16:09:16 | 000,007,130 | ---- | C] () -- C:\Windows\SysNative\connectedsearch-zeroinput.searchconnector-ms [2014-03-29 16:07:30 | 000,002,255 | ---- | C] () -- C:\Windows\SysWow64\WimBootCompress.ini [2014-03-29 16:07:30 | 000,002,255 | ---- | C] () -- C:\Windows\SysNative\WimBootCompress.ini [2014-03-29 16:07:26 | 000,262,335 | ---- | C] () -- C:\Windows\SysNative\dfpinc.dat [2014-03-29 16:06:08 | 000,050,053 | ---- | C] () -- C:\Windows\SysNative\srms.dat [2014-03-29 16:05:36 | 000,002,440 | R-S- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileManager.lnk [2014-03-27 21:03:11 | 000,138,240 | ---- | C] () -- C:\Windows\SysNative\OEMLicense.dll [2014-03-27 21:03:11 | 000,103,936 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll [2014-03-27 21:01:19 | 000,386,722 | ---- | C] () -- C:\Windows\SysNative\ApnDatabase.xml [2014-03-27 21:01:11 | 006,673,920 | RHS- | C] () -- C:\ProgramData\load32.exe [2013-12-13 11:23:14 | 000,123,392 | ---- | C] () -- C:\Windows\SysWow64\amdhdl32.dll [2013-12-01 16:41:13 | 000,000,000 | ---- | C] () -- C:\Windows\lgfwup.ini [2013-11-22 20:54:49 | 000,000,000 | ---- | C] () -- C:\Windows\EEventManager.INI [2013-11-22 19:42:55 | 000,000,000 | ---- | C] () -- C:\ProgramData\Channel [2013-11-22 19:26:35 | 000,000,268 | RH-- | C] () -- C:\ProgramData\Clean Electric Guitar [2013-11-22 19:26:35 | 000,000,268 | RH-- | C] () -- C:\Users\JOHN\AppData\Roaming\Chiller [2013-11-22 19:26:35 | 000,000,012 | RH-- | C] () -- C:\ProgramData\Horn Section [2013-11-22 19:22:27 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLbx.DAT [2013-11-22 19:19:59 | 000,000,268 | RH-- | C] () -- C:\ProgramData\User Loops [2013-11-22 19:19:59 | 000,000,268 | RH-- | C] () -- C:\Users\JOHN\AppData\Roaming\Tribal Masks [2013-11-22 19:19:59 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLes.DAT [2013-11-22 19:19:33 | 000,000,268 | RH-- | C] () -- C:\ProgramData\User Pictures [2013-11-22 19:19:33 | 000,000,268 | RH-- | C] () -- C:\ProgramData\URLs [2013-11-22 19:19:33 | 000,000,268 | RH-- | C] () -- C:\Users\JOHN\AppData\Roaming\Trumpet Section [2013-11-22 19:19:33 | 000,000,268 | RH-- | C] () -- C:\Users\JOHN\AppData\Roaming\Tremolo [2013-11-22 19:19:33 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLev.DAT [2013-11-22 19:19:33 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLet.DAT [2013-11-22 19:19:22 | 000,000,268 | RH-- | C] () -- C:\Users\JOHN\AppData\Roaming\Woodwinds [2013-11-22 19:19:22 | 000,000,268 | RH-- | C] () -- C:\ProgramData\designjet [2013-11-22 19:19:22 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLeo.DAT [2013-11-22 19:19:22 | 000,000,012 | RH-- | C] () -- C:\ProgramData\Application Support [2013-11-22 19:19:10 | 000,000,000 | ---- | C] () -- C:\ProgramData\Techno Kit [2013-11-22 19:19:10 | 000,000,000 | ---- | C] () -- C:\ProgramData\Synth Leads [2013-11-22 19:07:56 | 000,000,000 | -H-- | C] () -- C:\ProgramData\PKP_DLdu.DAT [2013-11-22 19:07:56 | 000,000,000 | ---- | C] () -- C:\Users\JOHN\AppData\Roaming\Templates [2013-11-15 19:35:35 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\srvany.exe [2013-11-12 22:55:20 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2013-09-26 20:02:38 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat [2013-09-26 20:02:38 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat [2013-09-26 20:02:36 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2013-09-26 20:02:18 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe [2013-09-26 20:02:18 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe [2013-08-22 17:36:43 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2013-08-22 17:36:42 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2013-08-22 16:46:23 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2013-08-22 09:01:23 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2013-08-22 05:32:36 | 000,046,080 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2013-08-22 01:55:20 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2013-08-22 01:52:39 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [2012-06-22 13:01:32 | 000,019,984 | ---- | C] () -- C:\Windows\SysWow64\ESGScanner.sys [color=#E56717]========== ZeroAccess Check ==========[/color] [2014-01-28 09:04:06 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2014-02-22 17:50:34 | 021,230,744 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2014-02-22 16:18:27 | 018,682,288 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2013-08-22 11:49:49 | 000,921,088 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2013-08-22 04:45:10 | 000,691,712 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2013-08-22 11:45:17 | 000,483,840 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2014-01-28 18:44:51 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\AVAST Software [2014-04-03 20:13:30 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\ClassicShell [2013-11-22 19:34:14 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\DAEMON Tools Pro [2013-11-22 19:34:08 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Epson [2013-11-22 21:09:31 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\ACD Systems [2013-11-22 18:59:34 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\Ashampoo [2013-12-01 14:14:49 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\AVAST Software [2014-03-30 18:52:06 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\Azureus [2013-11-22 18:56:18 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\Canneverbe Limited [2014-04-14 13:38:28 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\ClassicShell [2014-04-13 19:58:45 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\DAEMON Tools Pro [2014-04-11 16:55:04 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\Dropbox [2013-11-15 19:53:47 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\Epson [2014-03-30 17:44:59 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\evkFv [2013-11-22 18:45:51 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\foobar2000 [2013-11-22 18:47:28 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\GHISLER [2013-11-16 15:19:06 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\MSPWNOUP2006 [2014-02-26 12:09:26 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\Nikon [2013-11-15 18:16:31 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\Opera Software [2013-11-15 20:37:44 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\PhotoScape [2013-12-06 20:46:46 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 [2013-12-01 16:01:51 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\TransEngPol4 [2014-03-30 17:44:59 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\uZNiY [2014-03-30 18:52:06 | 000,000,000 | ---D | M] -- C:\Users\JOHN\AppData\Roaming\VideoReDo-TVSuite4 [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 174 bytes -> C:\ProgramData\TEMP:3440EB47 @Alternate Data Stream - 136 bytes -> C:\ProgramData\TEMP:66633281 @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:0888F409 < End of report >