Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-10-2016 Ran by dkgod (administrator) on DESKTOP-V1AL9M5 (03-11-2016 16:30:57) Running from C:\Users\dkgod\Downloads Loaded Profiles: dkgod (Available Profiles: dkgod) Platform: Microsoft Windows 10 Pro Version 1607 (X86) Language: Angielski (Stany Zjednoczone) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe () C:\Users\dkgod\AppData\Roaming\HPRewriter2\HPWriterSrv3.exe (Intel(R) Corporation) C:\Program Files\Intel\BCA\pabeSvc.exe (McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe (Digital Wave Ltd.) C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe (DEVGURU Co., LTD.) E:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe (Google Inc.) C:\Program Files\Google\Update\1.3.31.5\GoogleCrashHandler.exe () C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe (McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe () C:\Program Files\InterHop\InterHop.exe () C:\ProgramData\NetworkPacketManitor\Nettrans.exe () C:\Program Files\ktip\ktip.exe () C:\ProgramData\Logic Handler\set.exe () C:\Program Files\03000200-1477419828-0500-0006-000700080009\knsA1DE.tmp () C:\Program Files\03000200-1478039395-0500-0006-000700080009\knsEC19.tmp (AMD) C:\Windows\System32\atieclxx.exe () C:\ProgramData\awna\awna.exe () C:\Users\dkgod\AppData\Roaming\Hemkajdoa\Sejheb.exe (PR6) C:\Users\dkgod\AppData\Local\Temp\MP89NODUJD.exe (PR6) C:\Users\dkgod\AppData\Local\Temp\D922SHT2B6.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe () C:\Program Files\wanttoxiamen\uc.exe (Innovative Digital Technologies) C:\Users\dkgod\AppData\Roaming\ACEStream\engine\ace_engine.exe (Innovative Digital Technologies) C:\Users\dkgod\AppData\Roaming\ACEStream\engine\ace_engine.exe (ALLPlayer Group Ltd.) C:\Program Files\ALLPlayer Remote\ALLPlayerRemoteControl.exe (Spotify Ltd) C:\Users\dkgod\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Spotify Ltd) C:\Users\dkgod\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\dkgod\AppData\Roaming\Spotify\SpotifyCrashService.exe (Spotify Ltd) C:\Users\dkgod\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\dkgod\AppData\Roaming\Spotify\Spotify.exe () C:\Program Files\wanttoxiamen\uc.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe () C:\Users\dkgod\AppData\Local\Temp\3SR49Q0ABC.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe () C:\Program Files\7I42TMEFWD\7I42TMEFW.exe () C:\Program Files\OE22JC6BVC\OE22JC6BV.exe () C:\Users\dkgod\AppData\Local\Temp\QFFHUXVXD\QFFHUXVXD.exe () C:\Users\dkgod\AppData\Local\Temp\4FSB8NT65\4FSB8NT65.exe () C:\Users\dkgod\AppData\Local\Temp\CNTJM3GM5\CNTJM3GM5.exe () C:\Users\dkgod\AppData\Local\Temp\91LLK0S72\91LLK0S72.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.427\SSScheduler.exe () C:\Users\dkgod\AppData\Roaming\ACEStream\updater\ace_update.exe () C:\Program Files\21DQ8I80YT\21DQ8I80Y.exe ( ) C:\Users\dkgod\AppData\Local\Temp\IYLBPQGYM\IYLBPQGYM.exe () C:\Users\dkgod\AppData\Local\Temp\is-L9DGU.tmp\IYLBPQGYM.tmp (0MOO) C:\Users\dkgod\AppData\Local\Temp\is-OV3HT.tmp\installer.exe () C:\Users\dkgod\AppData\Local\Temp\H93DJ8PP4\H93DJ8PP4.exe (Microsoft® Windows® Operating System) C:\Windows\System32\Taskmgr.exe () C:\Users\dkgod\AppData\Roaming\Hemkajdoa\Hemkajdoa.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (ALLPlayer Group Ltd.) C:\Program Files\ALLPlayer\ALLPlayer.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ==================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12214528 2015-07-31] (Realtek Semiconductor) HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [7175560 2016-09-16] (Advanced Micro Devices, Inc.) HKLM\...\Run: [PlaysTV] => C:\Program Files\Raptr Inc\PlaysTV\playstv_launcher.exe [71440 2016-08-24] (Plays.tv, LLC) HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [483840 2016-07-16] (Microsoft Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM\...\Run: [apphide] => C:\Program Files\badu\uc.exe [221264 2016-10-24] () HKLM\...\Run: [WINCOM4XL] => "C:\Program Files\mpck\wincom_4XL.exe" HKLM\...\Run: [WINCOMXUK] => "C:\Program Files\sunnyday\wincom_XUK.exe" HKLM\...\Run: [app] => C:\Program Files\wanttoxiamen\uc.exe [213065 2016-11-01] () HKLM\...\Run: [sun21] => [X] HKLM\...\Run: [WINCOMIBX] => "C:\Program Files\sunnyday\wincom_IBX.exe" HKLM\...\Run: [WINCOMCTO] => "C:\Program Files\sunnyday\wincom_CTO.exe" HKLM\...\RunOnce: [OTUTPRODUCT_JUCJQ] => "C:\Program Files\sunnyday\o_network.exe" HKLM\...\RunOnce: [OMEWPRODUCT_HTJSY] => C:\Users\dkgod\AppData\Local\Temp\MP89NODUJD.exe [582144 2016-11-01] (PR6) <===== ATTENTION HKLM\...\RunOnce: [OMEWPRODUCT_HDMET] => C:\Users\dkgod\AppData\Local\Temp\D922SHT2B6.exe [582144 2016-11-01] (PR6) <===== ATTENTION HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [GoogleChromeAutoLaunch_2DDFA9A5FA3D4178D77ACB600C206E00] => C:\Program Files\Google\Chrome\Application\chrome.exe [921192 2016-10-31] (Google Inc.) HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [Steam] => E:\Program Files\Steam\steam.exe [2860832 2016-10-13] (Valve Corporation) HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [AceStream] => C:\Users\dkgod\AppData\Roaming\ACEStream\engine\ace_engine.exe [28024 2016-10-20] (Innovative Digital Technologies) HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [ALLUpdate] => C:\Program Files\ALLPlayer\ALLUpdate.exe [3670472 2015-07-28] (ALLPlayer Group Ltd.) HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [Napisy24Update] => C:\Program Files\Napisy24\Napisy24Update.exe [3709896 2015-11-04] (Napisy24.pl) HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [ALLPlayer WiFi Remote] => C:\Program Files\ALLPlayer Remote\ALLPlayerRemoteControl.exe [5975264 2016-03-14] (ALLPlayer Group Ltd.) HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [Spotify Web Helper] => C:\Users\dkgod\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1431664 2016-10-30] (Spotify Ltd) HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [Spotify] => C:\Users\dkgod\AppData\Roaming\Spotify\Spotify.exe [7039088 2016-10-30] (Spotify Ltd) HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [svchost0] => C:\Program Files\wanttoxiamen\uc.exe [213065 2016-11-01] () HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6889176 2016-09-28] (Piriform Ltd) HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [ZHM1FRD5NO] => C:\Users\dkgod\AppData\Local\Temp\3SR49Q0ABC.exe [369664 2016-11-01] () <===== ATTENTION HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [V1LV3CIZYC] => C:\Program Files\7I42TMEFWD\7I42TMEFW.exe [369664 2016-11-01] () HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [K07HS66FSR] => C:\Program Files\OE22JC6BVC\OE22JC6BV.exe [369664 2016-11-02] () HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [TM5W96Y2I5] => C:\Users\dkgod\AppData\Local\Temp\QFFHUXVXD\QFFHUXVXD.exe [369664 2016-11-02] () <===== ATTENTION HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [OVE8B16HWV] => C:\Users\dkgod\AppData\Local\Temp\4FSB8NT65\4FSB8NT65.exe [369664 2016-11-02] () <===== ATTENTION HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [FZGOMVHKXK] => C:\Users\dkgod\AppData\Local\Temp\CNTJM3GM5\CNTJM3GM5.exe [369664 2016-11-02] () <===== ATTENTION HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [MN711H07ZM] => C:\Users\dkgod\AppData\Local\Temp\91LLK0S72\91LLK0S72.exe [369664 2016-11-02] () <===== ATTENTION HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [4R6RHE4NPO] => C:\Program Files\21DQ8I80YT\21DQ8I80Y.exe [369664 2016-11-03] () HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Run: [5JH8DLP2BT] => C:\Users\dkgod\AppData\Local\Temp\H93DJ8PP4\H93DJ8PP4.exe [369664 2016-11-03] () <===== ATTENTION Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter ShellExecuteHooks: - {26A24762-9CE0-11E6-AD1A-64006A5CFC23} - C:\Users\dkgod\AppData\Roaming\Rearerpyverdose\Tatulesrertion.dll No File [ ] ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\dkgod\AppData\Local\MEGAsync\ShellExtX32.dll [2016-07-21] () ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\dkgod\AppData\Local\MEGAsync\ShellExtX32.dll [2016-07-21] () ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\dkgod\AppData\Local\MEGAsync\ShellExtX32.dll [2016-07-21] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2016-11-02] ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.427\SSScheduler.exe (McAfee, Inc.) GroupPolicy: Restriction - Chrome <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1 Tcpip\..\Interfaces\{68f439ec-ae4c-417a-adf5-ca219e01f327}: [NameServer] 104.197.191.4 Tcpip\..\Interfaces\{805b744d-a7ba-45c0-8f03-3890bc42b851}: [NameServer] 208.67.222.222,208.67.220.220 Tcpip\..\Interfaces\{805b744d-a7ba-45c0-8f03-3890bc42b851}: [DhcpNameServer] 192.168.1.1 192.168.1.1 Internet Explorer: ================== HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBSiA1rEAocN4PQUDpRKkKqLhA2_PeB599lfVoUSe9LGKRXZcv8YlsZAe20gYzUK1aF0PrR_SU3EEhggJWCArCZnYq7jOf4BX51phFX-CWWRKCTOum5kJq13kxOtss25LRd4Jdn-fm28kkqvL3ra06pytamo0VlqouxDiXEZfJ5rWjc6_nrZfTIulty&q={searchTerms} HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBSiA1rEAocN4PQUDpRKkKqLhA2_PeB599lfVoUSe9LGKRXZcv8YlsZAe20gYzUK1aF0PrR_SU3EEhggJWCArCZnYq7jOf0HGEEDJ_HUdZB9nwjBZjL-vILhnjAXVef7e-Hyf5uPA95jlvT_-11E64gOWuZIHR-DmL5U09SfRJ5qoqa0AaxcuhUI9Vi HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=pl-PL&Src=WD8&Tid=0003446E&OHP=http%3A%2F%2Fwww.istartsurf.com%2F%3Ftype%3Dhppp%26ts%3D1434466724%26from%3Dxtab%26uid%3DE470064DA3E64b67A91E9FF9C620B4A6&OSP= HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBSiA1rEAocN4PQUDpRKkKqLhA2_PeB599lfVoUSe9LGKRXZcv8YlsZAe20gYzUK1aF0PrR_SU3EEhggJWCArCZnYq7jOf4BX51phFX-CWWRKCTOum5kJq13kxOtss25LRd4Jdn-fm28kkqvL3ra06pytamo0VlqouxDiXEZfJ5rWjc6_nrZfTIulty&q={searchTerms} HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBSiA1rEAocN4PQUDpRKkKqLhA2_PeB599lfVoUSe9LGKRXZcv8YlsZAe20gYzUK1aF0PrR_SU3EEhggJWCArCZnYq7jOf4BX51phFX-CWWRKCTOum5kJq13kxOtss25LRd4Jdn-fm28kkqvL3ra06pytamo0VlqouxDiXEZfJ5rWjc6_nrZfTIulty&q={searchTerms} SearchScopes: HKLM -> DefaultScope {ielnksrch} URL = SearchScopes: HKLM -> ielnksrch URL = hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBSiA1rEAocN4PQUDpRKkKqLhA2_PeB599lfVoUSe9LGKRXZcv8YlsZAe20gYzUK1aF0PrR_SU3EEhggJWCArCZnYq7jOf4BX51phFX-CWWRKCTOum5kJq13kxOtss25LRd4Jdn-fm28kkqvL3ra06pytamo0VlqouxDiXEZfJ5rWjc6_nrZfTIulty&q={searchTerms} SearchScopes: HKU\S-1-5-21-2147580673-1131091785-3466399999-1001 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBSiA1rEAocN4PQUDpRKkKqLhA2_PeB599lfVoUSe9LGKRXZcv8YlsZAe20gYzUK1aF0PrR_SU3EEhggJWCArCZnYq7jOf4BX51phFX-CWWRKCTOum5kJq13kxOtss25LRd4Jdn-fm28kkqvL3ra06pytamo0VlqouxDiXEZfJ5rWjc6_nrZfTIulty&q={searchTerms} SearchScopes: HKU\S-1-5-21-2147580673-1131091785-3466399999-1001 -> {ielnksrch} URL = hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBSiA1rEAocN4PQUDpRKkKqLhA2_PeB599lfVoUSe9LGKRXZcv8YlsZAe20gYzUK1aF0PrR_SU3EEhggJWCArCZnYq7jOf4BX51phFX-CWWRKCTOum5kJq13kxOtss25LRd4Jdn-fm28kkqvL3ra06pytamo0VlqouxDiXEZfJ5rWjc6_nrZfTIulty&q={searchTerms} BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-07-15] (Intel Security) BHO: Youtube AdBlock -> {95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B} -> C:\Program Files\Youtube AdBlock\IEEF\O2tmFgO.dll [2016-11-03] () BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2016-01-19] (DVDVideoSoft Ltd.) Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-07-15] (Intel Security) FireFox: ======== FF HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\dkgod\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi FF Extension: (Ace Stream Web Extension) - C:\Users\dkgod\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi [2015-12-18] FF Plugin: @ganymede/GanymedeNetPlugin,version=1.0 -> C:\Program Files\Ganymede\Plugins\npganymedenet.dll [2015-07-15] ( ) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.) FF Plugin HKU\S-1-5-21-2147580673-1131091785-3466399999-1001: @acestream.net/acestreamplugin,version=3.1.2 -> C:\Users\dkgod\AppData\Roaming\ACEStream\player\npace_plugin.dll [2015-08-06] (Innovative Digital Technologies) Chrome: ======= CHR DefaultProfile: ChromeDefaultData2 CHR HomePage: ChromeDefaultData2 -> hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBSiA1rEAocN4PQUDpRKkKqLhA2_PfUoGHrrosDmDNaiXKFzsBRCYr6TnX16CZtIyDh1fGrTXENx0p0nAKbFpnVvnF_xuSeGyFTGItD4reIqvkPGrtzL_YH934E1gg7_2bYKsSp3PQPkIe_4xgajkCadQXZmYseINx8HLQkK0D0GELtHvPGTnr-ytE, CHR StartupUrls: ChromeDefaultData2 -> "hxxp://www.youndoo.com/?z=b8d568229b1f739fef0380cg5zfm3b7e9z0c2q6odw&from=amz&uid=ST31000528AS_9VP8WXQCXXXX9VP8WXQC&type=hp" CHR DefaultSearchURL: ChromeDefaultData2 -> hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBSiA1rEAocN4PQUDpRKkKqLhA2_PfUoGHrrosDmDNaiXKFzsBRCYr6TnX16CZtIyDh1fGrTXENx0p0nAKbFpnVvnF_xuSeFxMG0_EhFed8R6TK3J0FoWD2feGaSxbWNZBVXdUH5baNfOE_3W5dvLGGj8OMIfUY65MiUUd1EkJ3XkQ5a-nziFAiLqo,&q={searchTerms} CHR DefaultSearchKeyword: ChromeDefaultData2 -> feed.sonic-search.com CHR DefaultSuggestURL: ChromeDefaultData2 -> hxxps://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command={searchTerms} CHR Profile: C:\Users\dkgod\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2 [2016-11-03] <==== ATTENTION CHR Extension: (Prezentacje Google) - C:\Users\dkgod\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-31] CHR Extension: (Dokumenty Google) - C:\Users\dkgod\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-31] CHR Extension: (Dysk Google) - C:\Users\dkgod\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22] CHR Extension: (YouTube) - C:\Users\dkgod\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24] CHR Extension: (Adblock Plus) - C:\Users\dkgod\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-28] CHR Extension: (Google Search) - C:\Users\dkgod\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Adblocker for Youtube™) - C:\Users\dkgod\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\dkgcomhcmhlbdokplmbpkejkojkmjglg [2016-11-03] CHR Extension: (Arkusze Google) - C:\Users\dkgod\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-31] CHR Extension: (Dokumenty Google offline) - C:\Users\dkgod\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15] CHR Extension: (Dingit Infinite HD App) - C:\Users\dkgod\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\llnhnfikffkjbdnfallfpgikamegbbag [2016-01-31] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\dkgod\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-01] CHR Extension: (Gmail) - C:\Users\dkgod\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-31] CHR Extension: (Chrome Media Router) - C:\Users\dkgod\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-26] CHR HKU\S-1-5-21-2147580673-1131091785-3466399999-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx Opera: ======= OPR Extension: (__MSG_appName__) - C:\Users\dkgod\AppData\Roaming\Opera Software\Opera Stable\Extensions\nhcombnfcfkgnammoobfmfiokobfpokb [2016-11-03] ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [137608 2016-09-16] () S2 amdacpusrsvc; C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe [113152 2016-07-18] (Advanced Micro Devices) [File not signed] R2 Archer; C:\Program Files\WinArcher\Archer.dll [385536 2016-10-27] () [File not signed] R2 awna; C:\ProgramData\\awna\\awna.exe [400896 2016-11-03] () [File not signed] R2 backlh; C:\ProgramData\Logic Handler\set.exe [3786752 2016-10-31] () [File not signed] R2 DigitalWave.Update.Service; C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe [388968 2016-01-19] (Digital Wave Ltd.) R2 dixuxoqe; C:\Program Files\03000200-1477419828-0500-0006-000700080009\knsA1DE.tmp [647680 2016-11-02] () [File not signed] R2 HPWriter Service; C:\Users\dkgod\AppData\Roaming\HPRewriter2\HPWriterSrv3.exe [5175296 2016-10-18] () [File not signed] R2 IntelBCAsvc; C:\Program Files\Intel\BCA\pabeSvc.exe [2377368 2016-05-06] (Intel(R) Corporation) R2 InterHop; C:\Program Files\InterHop\InterHop.exe [430592 2016-10-31] () [File not signed] <==== ATTENTION R2 ktip; C:\Program Files\ktip\ktip.exe [312320 2016-11-01] () [File not signed] <==== ATTENTION R2 kufuwive; C:\Program Files\03000200-1478039395-0500-0006-000700080009\knsEC19.tmp [676352 2016-11-02] () [File not signed] S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.427\McCHSvc.exe [272136 2016-10-13] (McAfee, Inc.) R2 Nettrans; C:\ProgramData\NetworkPacketManitor\Nettrans.exe [57856 2016-09-28] () [File not signed] S2 PlaysService; C:\Program Files\Raptr Inc\PlaysTV\plays_service.exe [32528 2016-08-24] (Plays.tv, LLC) R2 Prikadom; C:\Program Files\Ckerdesp\thavuywifiiedReports.dll [277504 2016-10-25] () [File not signed] S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [1887272 2016-09-15] (Microsoft Corporation) R2 ss_conn_service; E:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.) S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [908792 2016-07-22] (McAfee, Inc.) R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16792 2016-07-22] (McAfee, Inc.) S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [73968 2016-07-22] (McAfee, Inc.) R2 Viokdojvaf; C:\Users\dkgod\AppData\Roaming\Hemkajdoa\Hemkajdoa.exe [170496 2016-08-11] () [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [271496 2016-07-16] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [84928 2016-07-16] (Microsoft Corporation) R2 WinSAPSvc; C:\ProgramData\WinSAPSvc\WinSAP.dll [219648 2016-11-01] () [File not signed] ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [35088 2015-07-28] (Advanced Micro Devices, Inc.) R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\ct307259.inf_x86_5817e51a35dcdf20\atikmdag.sys [24400024 2016-10-26] (Advanced Micro Devices, Inc.) R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\ct307259.inf_x86_5817e51a35dcdf20\atikmpag.sys [420880 2016-10-26] (Advanced Micro Devices, Inc.) S3 athur; C:\WINDOWS\System32\drivers\athur.sys [1500160 2010-01-05] (Atheros Communications, Inc.) R1 cherimoya; C:\WINDOWS\System32\drivers\cherimoya.sys [56128 2016-10-29] (Windows (R) Win 7 DDK provider) <==== ATTENTION R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [23840 2016-10-20] (REALiX(tm)) S0 megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [56672 2016-10-05] (Avago Technologies) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [62976 2016-07-16] () R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [789248 2016-10-20] (Realtek ) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [37912 2016-07-16] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [244576 2016-07-16] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [100192 2016-07-16] (Microsoft Corporation) S2 amdacpksd; \??\C:\WINDOWS\system32\drivers\amdacpksd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-11-03 16:31 - 2016-11-03 16:31 - 00380928 _____ C:\Users\dkgod\Downloads\qcp30qgf.exe 2016-11-03 16:30 - 2016-11-03 16:31 - 00025190 _____ C:\Users\dkgod\Downloads\FRST.txt 2016-11-03 16:30 - 2016-11-03 16:30 - 01758208 _____ (Farbar) C:\Users\dkgod\Downloads\FRST.exe 2016-11-03 16:30 - 2016-11-03 16:30 - 00000000 ____D C:\FRST 2016-11-03 16:24 - 2016-11-03 16:24 - 01231872 _____ C:\Users\dkgod\Downloads\RepairDNS.exe 2016-11-03 16:24 - 2016-11-03 16:24 - 00003818 _____ C:\Users\dkgod\Desktop\RepairDNS.txt 2016-11-03 16:22 - 2016-11-03 16:22 - 00000000 ____D C:\Program Files\jwl1ate6 2016-11-03 16:21 - 2016-11-03 16:21 - 00069976 _____ C:\Users\dkgod\Downloads\Shortcut.txt 2016-11-03 16:21 - 2016-11-03 16:21 - 00034090 _____ C:\Users\dkgod\Desktop\fixlist.txt 2016-11-03 16:19 - 2016-11-03 16:19 - 00000000 _____ C:\Users\dkgod\Desktop\Nowy dokument tekstowy (4).txt 2016-11-03 16:14 - 2016-11-03 16:14 - 00000000 ____D C:\Program Files\21DQ8I80YT 2016-11-03 15:13 - 2016-11-03 15:13 - 00000000 ____D C:\Program Files\wqd7angm 2016-11-03 15:12 - 2016-11-03 15:12 - 00000000 ____D C:\ProgramData\awnas 2016-11-03 15:10 - 2016-11-03 15:12 - 00000000 ____D C:\ProgramData\awna 2016-11-02 22:29 - 2016-11-02 22:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus 2016-11-02 20:52 - 2016-11-02 20:52 - 00000000 ____D C:\Program Files\yiahiass 2016-11-02 00:40 - 2016-11-03 16:26 - 00000000 ____D C:\Users\dkgod\AppData\Local\Drerdach 2016-11-02 00:40 - 2016-11-03 16:22 - 00000000 ____D C:\Program Files\Sacing 2016-11-02 00:40 - 2016-11-03 16:17 - 00000000 ____D C:\Users\dkgod\AppData\Roaming\Rearerpyverdose 2016-11-02 00:40 - 2016-11-02 00:40 - 00182784 _____ C:\Program Files\Common Files\4lggmu.dll 2016-11-02 00:40 - 2016-11-02 00:40 - 00000000 ____D C:\Program Files\OE22JC6BVC 2016-11-02 00:22 - 2016-11-02 00:40 - 00000000 ____D C:\Program Files\cs3ei1y2 2016-11-01 23:40 - 2016-11-02 00:40 - 00000000 ____D C:\Program Files\7I42TMEFWD 2016-11-01 23:36 - 2016-11-03 15:12 - 00002394 _____ C:\WINDOWS\system32\findit.xml 2016-11-01 23:36 - 2016-11-03 15:10 - 00000000 ____D C:\Program Files\ktip 2016-11-01 23:36 - 2016-11-01 23:36 - 07294976 _____ C:\Users\dkgod\AppData\Roaming\agent.dat 2016-11-01 23:36 - 2016-11-01 23:36 - 01903931 _____ C:\Users\dkgod\AppData\Roaming\Singleing.tst 2016-11-01 23:36 - 2016-11-01 23:36 - 01897571 _____ C:\Users\dkgod\AppData\Roaming\Phystrax.bin 2016-11-01 23:36 - 2016-11-01 23:36 - 00710656 _____ C:\Users\dkgod\AppData\Roaming\Singleing.exe 2016-11-01 23:36 - 2016-11-01 23:36 - 00190394 _____ C:\Users\dkgod\AppData\Roaming\Truetop.bin 2016-11-01 23:36 - 2016-11-01 23:36 - 00188578 _____ () C:\Users\dkgod\AppData\Roaming\Zumlamsoft.bin 2016-11-01 23:36 - 2016-11-01 23:36 - 00140288 _____ C:\Users\dkgod\AppData\Roaming\Installer.dat 2016-11-01 23:36 - 2016-11-01 23:36 - 00126464 _____ C:\Users\dkgod\AppData\Roaming\noah.dat 2016-11-01 23:36 - 2016-11-01 23:36 - 00070704 _____ C:\Users\dkgod\AppData\Roaming\Config.xml 2016-11-01 23:36 - 2016-11-01 23:36 - 00018432 _____ C:\Users\dkgod\AppData\Roaming\Main.dat 2016-11-01 23:36 - 2016-11-01 23:36 - 00018144 _____ C:\Users\dkgod\AppData\Roaming\InstallationConfiguration.xml 2016-11-01 23:36 - 2016-11-01 23:36 - 00005568 _____ C:\Users\dkgod\AppData\Roaming\md.xml 2016-11-01 23:36 - 2016-11-01 23:36 - 00000000 ____D C:\ProgramData\NetworkPacketManitor 2016-11-01 23:36 - 2016-11-01 23:36 - 00000000 ____D C:\ProgramData\Logic Handler 2016-11-01 23:36 - 2016-11-01 23:36 - 00000000 ____D C:\ProgramData\Konksolexs 2016-11-01 23:29 - 2016-11-03 15:10 - 00000000 ____D C:\Program Files\03000200-1478039395-0500-0006-000700080009 2016-11-01 23:29 - 2016-11-01 23:29 - 00000000 ____D C:\Users\dkgod\AppData\Roaming\ASPackage 2016-11-01 23:29 - 2016-11-01 23:29 - 00000000 ____D C:\Users\dkgod\AppData\Local\tuto_monetize_120161101 2016-11-01 23:29 - 2016-11-01 23:29 - 00000000 ____D C:\Program Files\wanttoxiamen 2016-11-01 23:28 - 2016-11-03 16:16 - 00000000 ____D C:\Program Files\sunnyday 2016-11-01 22:42 - 2016-11-01 23:08 - 00004996 _____ C:\Users\dkgod\Documents\startup.txt 2016-11-01 22:41 - 2016-11-01 22:41 - 00004922 _____ C:\Users\dkgod\Documents\cc_20161101_224148.reg 2016-11-01 20:30 - 2016-11-01 20:30 - 00000052 _____ C:\Users\dkgod\Desktop\Nowy dokument tekstowy (3).txt 2016-11-01 20:29 - 2016-11-01 20:29 - 00002140 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ореrа.lnk 2016-11-01 20:29 - 2016-11-01 20:29 - 00002110 _____ C:\Users\Public\Desktop\Ореrа.lnk 2016-11-01 20:27 - 2016-11-01 20:27 - 00000000 ____D C:\Users\dkgod\AppData\Roaming\Opera Software 2016-11-01 20:27 - 2016-11-01 20:27 - 00000000 ____D C:\Users\dkgod\AppData\Local\Opera Software 2016-11-01 20:26 - 2016-11-03 15:57 - 00000000 ____D C:\Program Files\f09er35s 2016-11-01 20:23 - 2016-11-02 00:40 - 00000000 ____D C:\Program Files\Opera 2016-11-01 20:22 - 2016-11-02 00:40 - 00000000 ____D C:\Program Files\jdbtv8cz 2016-11-01 20:22 - 2016-11-01 20:23 - 01132144 _____ (Opera Software) C:\Users\dkgod\Downloads\OperaSetup.exe 2016-11-01 16:26 - 2016-11-02 00:40 - 00000000 ____D C:\Program Files\5ipkcte3 2016-11-01 16:22 - 2016-11-02 00:40 - 00000000 ____D C:\Program Files\4bvr43ha 2016-11-01 14:27 - 2016-11-02 00:40 - 00000000 ____D C:\Program Files\InterHop 2016-11-01 14:26 - 2016-11-03 16:22 - 00000000 ____D C:\ProgramData\ChelfNotify 2016-11-01 14:26 - 2016-11-02 00:41 - 00000000 ____D C:\Program Files\WinArcher 2016-11-01 14:26 - 2016-11-02 00:41 - 00000000 ____D C:\Program Files\l2rx3pfc 2016-11-01 14:26 - 2016-11-01 14:26 - 00000000 ____D C:\ProgramData\WinSAPSvc 2016-11-01 14:23 - 2016-11-03 16:13 - 00000352 _____ C:\WINDOWS\Tasks\Update Service for Youtube AdBlock2.job 2016-10-30 11:46 - 2016-10-30 11:46 - 00000000 ____D C:\WINDOWS\system32\cod 2016-10-29 20:45 - 2016-11-01 23:05 - 00000000 ____D C:\Users\dkgod\AppData\Roaming\Hemkajdoa 2016-10-29 20:45 - 2016-10-29 20:45 - 00032576 _____ C:\WINDOWS\system32\Drivers\bsdp32.sys 2016-10-29 20:45 - 2016-10-29 20:45 - 00000000 ____D C:\Users\dkgod\AppData\LocalLow0072FDB8 2016-10-29 20:45 - 2016-10-29 20:45 - 00000000 ____D C:\Users\dkgod\AppData\LocalLow\Company 2016-10-29 20:45 - 2016-10-29 20:45 - 00000000 ____D C:\Users\dkgod\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A} 2016-10-29 20:45 - 2016-10-29 20:45 - 00000000 ____D C:\Users\dkgod\AppData\Local\tuto_monetize_120161029 2016-10-29 20:45 - 2016-10-29 20:45 - 00000000 ____D C:\Users\dkgod\AppData\Local\Tempfolder 2016-10-29 20:45 - 2016-10-29 20:45 - 00000000 ____D C:\uninst 2016-10-29 20:44 - 2016-11-02 00:40 - 00000000 ____D C:\Program Files\mpck 2016-10-29 20:44 - 2016-10-29 20:44 - 00000000 _____ C:\WINDOWS\system32\Number of results 2016-10-29 10:38 - 2016-10-29 10:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Radeon Settings 2016-10-29 10:37 - 2016-10-29 10:37 - 00000000 ____D C:\Users\dkgod\AppData\LocalLow\AMD 2016-10-29 06:54 - 2016-10-15 05:40 - 01126496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2016-10-29 06:54 - 2016-10-15 05:36 - 04970224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2016-10-29 06:54 - 2016-10-15 05:35 - 00890984 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2016-10-29 06:54 - 2016-10-15 05:35 - 00784064 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2016-10-29 06:54 - 2016-10-15 05:33 - 01073816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2016-10-29 06:54 - 2016-10-15 05:33 - 00945760 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2016-10-29 06:54 - 2016-10-15 05:32 - 01583112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2016-10-29 06:54 - 2016-10-15 05:20 - 01898336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-10-29 06:54 - 2016-10-15 05:20 - 00550752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-10-29 06:54 - 2016-10-15 05:20 - 00342880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2016-10-29 06:54 - 2016-10-15 05:19 - 02256592 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-10-29 06:54 - 2016-10-15 05:19 - 00272720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2016-10-29 06:54 - 2016-10-15 05:14 - 01384704 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2016-10-29 06:54 - 2016-10-15 05:14 - 00802600 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll 2016-10-29 06:54 - 2016-10-15 05:14 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2016-10-29 06:54 - 2016-10-15 05:11 - 01263848 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2016-10-29 06:54 - 2016-10-15 04:58 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsext.dll 2016-10-29 06:54 - 2016-10-15 04:56 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2016-10-29 06:54 - 2016-10-15 04:56 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2016-10-29 06:54 - 2016-10-15 04:55 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll 2016-10-29 06:54 - 2016-10-15 04:54 - 00394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2016-10-29 06:54 - 2016-10-15 04:54 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll 2016-10-29 06:54 - 2016-10-15 04:50 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2016-10-29 06:54 - 2016-10-15 04:49 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll 2016-10-29 06:54 - 2016-10-15 04:49 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe 2016-10-29 06:54 - 2016-10-15 04:48 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2016-10-29 06:54 - 2016-10-15 04:48 - 00797696 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll 2016-10-29 06:54 - 2016-10-15 04:48 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll 2016-10-29 06:54 - 2016-10-15 04:46 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys 2016-10-29 06:54 - 2016-10-15 04:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe 2016-10-29 06:54 - 2016-10-15 04:38 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll 2016-10-29 06:54 - 2016-10-15 04:37 - 02256896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-10-29 06:54 - 2016-10-15 04:37 - 01485312 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2016-10-29 06:54 - 2016-10-15 04:37 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2016-10-29 06:54 - 2016-10-15 04:36 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-10-29 06:54 - 2016-10-15 04:36 - 01234944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-10-29 06:53 - 2016-10-15 06:11 - 01415520 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-10-29 06:53 - 2016-10-15 06:11 - 01026400 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-10-29 06:53 - 2016-10-15 06:11 - 00496992 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-10-29 06:53 - 2016-10-15 06:11 - 00486752 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-10-29 06:53 - 2016-10-15 06:11 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2016-10-29 06:53 - 2016-10-15 06:11 - 00277344 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-10-29 06:53 - 2016-10-15 06:11 - 00224608 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2016-10-29 06:53 - 2016-10-15 06:11 - 00192864 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2016-10-29 06:53 - 2016-10-15 06:11 - 00115552 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-10-29 06:53 - 2016-10-15 06:11 - 00069472 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2016-10-29 06:53 - 2016-10-15 05:34 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll 2016-10-29 06:53 - 2016-10-15 05:33 - 06020448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-10-29 06:53 - 2016-10-15 05:33 - 00455040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2016-10-29 06:53 - 2016-10-15 05:32 - 00601712 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2016-10-29 06:53 - 2016-10-15 05:31 - 00570720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys 2016-10-29 06:53 - 2016-10-15 05:27 - 00421216 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2016-10-29 06:53 - 2016-10-15 05:26 - 00055136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys 2016-10-29 06:53 - 2016-10-15 05:20 - 02276736 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2016-10-29 06:53 - 2016-10-15 05:18 - 02166232 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2016-10-29 06:53 - 2016-10-15 05:18 - 01556712 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2016-10-29 06:53 - 2016-10-15 05:18 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2016-10-29 06:53 - 2016-10-15 05:18 - 00749920 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll 2016-10-29 06:53 - 2016-10-15 05:18 - 00576400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2016-10-29 06:53 - 2016-10-15 05:18 - 00458592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2016-10-29 06:53 - 2016-10-15 05:18 - 00454496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2016-10-29 06:53 - 2016-10-15 05:18 - 00261984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2016-10-29 06:53 - 2016-10-15 05:18 - 00186424 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll 2016-10-29 06:53 - 2016-10-15 05:18 - 00067424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys 2016-10-29 06:53 - 2016-10-15 05:15 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-10-29 06:53 - 2016-10-15 05:15 - 03892352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2016-10-29 06:53 - 2016-10-15 05:15 - 01853776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2016-10-29 06:53 - 2016-10-15 05:15 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2016-10-29 06:53 - 2016-10-15 05:15 - 01123368 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2016-10-29 06:53 - 2016-10-15 05:15 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2016-10-29 06:53 - 2016-10-15 05:15 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2016-10-29 06:53 - 2016-10-15 05:15 - 00687936 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2016-10-29 06:53 - 2016-10-15 05:14 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2016-10-29 06:53 - 2016-10-15 05:11 - 01424488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2016-10-29 06:53 - 2016-10-15 05:11 - 01345504 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2016-10-29 06:53 - 2016-10-15 05:11 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2016-10-29 06:53 - 2016-10-15 05:10 - 01968992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2016-10-29 06:53 - 2016-10-15 05:10 - 00781664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2016-10-29 06:53 - 2016-10-15 05:10 - 00482656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2016-10-29 06:53 - 2016-10-15 05:10 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll 2016-10-29 06:53 - 2016-10-15 05:06 - 05685760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2016-10-29 06:53 - 2016-10-15 05:00 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2016-10-29 06:53 - 2016-10-15 05:00 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2016-10-29 06:53 - 2016-10-15 05:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb 2016-10-29 06:53 - 2016-10-15 04:59 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys 2016-10-29 06:53 - 2016-10-15 04:59 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll 2016-10-29 06:53 - 2016-10-15 04:58 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2016-10-29 06:53 - 2016-10-15 04:58 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe 2016-10-29 06:53 - 2016-10-15 04:57 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll 2016-10-29 06:53 - 2016-10-15 04:57 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2016-10-29 06:53 - 2016-10-15 04:56 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe 2016-10-29 06:53 - 2016-10-15 04:56 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2016-10-29 06:53 - 2016-10-15 04:56 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll 2016-10-29 06:53 - 2016-10-15 04:56 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll 2016-10-29 06:53 - 2016-10-15 04:55 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll 2016-10-29 06:53 - 2016-10-15 04:55 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll 2016-10-29 06:53 - 2016-10-15 04:55 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll 2016-10-29 06:53 - 2016-10-15 04:55 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2016-10-29 06:53 - 2016-10-15 04:55 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2016-10-29 06:53 - 2016-10-15 04:54 - 00555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2016-10-29 06:53 - 2016-10-15 04:54 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll 2016-10-29 06:53 - 2016-10-15 04:54 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2016-10-29 06:53 - 2016-10-15 04:54 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2016-10-29 06:53 - 2016-10-15 04:54 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll 2016-10-29 06:53 - 2016-10-15 04:54 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoplay.dll 2016-10-29 06:53 - 2016-10-15 04:54 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll 2016-10-29 06:53 - 2016-10-15 04:54 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll 2016-10-29 06:53 - 2016-10-15 04:53 - 00705024 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskbarcpl.dll 2016-10-29 06:53 - 2016-10-15 04:53 - 00549376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenterCPL.dll 2016-10-29 06:53 - 2016-10-15 04:53 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2016-10-29 06:53 - 2016-10-15 04:53 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2016-10-29 06:53 - 2016-10-15 04:53 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll 2016-10-29 06:53 - 2016-10-15 04:52 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll 2016-10-29 06:53 - 2016-10-15 04:52 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll 2016-10-29 06:53 - 2016-10-15 04:52 - 00322560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll 2016-10-29 06:53 - 2016-10-15 04:52 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2016-10-29 06:53 - 2016-10-15 04:52 - 00293888 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2016-10-29 06:53 - 2016-10-15 04:52 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemcpl.dll 2016-10-29 06:53 - 2016-10-15 04:51 - 13868544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-10-29 06:53 - 2016-10-15 04:51 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2016-10-29 06:53 - 2016-10-15 04:51 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll 2016-10-29 06:53 - 2016-10-15 04:51 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2016-10-29 06:53 - 2016-10-15 04:51 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContent.dll 2016-10-29 06:53 - 2016-10-15 04:51 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2016-10-29 06:53 - 2016-10-15 04:50 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2016-10-29 06:53 - 2016-10-15 04:50 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll 2016-10-29 06:53 - 2016-10-15 04:50 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2016-10-29 06:53 - 2016-10-15 04:50 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll 2016-10-29 06:53 - 2016-10-15 04:50 - 00353792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll 2016-10-29 06:53 - 2016-10-15 04:50 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2016-10-29 06:53 - 2016-10-15 04:50 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll 2016-10-29 06:53 - 2016-10-15 04:49 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2016-10-29 06:53 - 2016-10-15 04:49 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2016-10-29 06:53 - 2016-10-15 04:49 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2016-10-29 06:53 - 2016-10-15 04:48 - 01323008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll 2016-10-29 06:53 - 2016-10-15 04:48 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2016-10-29 06:53 - 2016-10-15 04:47 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-10-29 06:53 - 2016-10-15 04:47 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2016-10-29 06:53 - 2016-10-15 04:47 - 01113600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll 2016-10-29 06:53 - 2016-10-15 04:47 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll 2016-10-29 06:53 - 2016-10-15 04:46 - 19418112 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-10-29 06:53 - 2016-10-15 04:46 - 19416576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-10-29 06:53 - 2016-10-15 04:46 - 01375232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2016-10-29 06:53 - 2016-10-15 04:46 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll 2016-10-29 06:53 - 2016-10-15 04:46 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe 2016-10-29 06:53 - 2016-10-15 04:44 - 03307520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2016-10-29 06:53 - 2016-10-15 04:44 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll 2016-10-29 06:53 - 2016-10-15 04:44 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2016-10-29 06:53 - 2016-10-15 04:44 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll 2016-10-29 06:53 - 2016-10-15 04:44 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2016-10-29 06:53 - 2016-10-15 04:43 - 02748928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2016-10-29 06:53 - 2016-10-15 04:43 - 01406976 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll 2016-10-29 06:53 - 2016-10-15 04:43 - 00786432 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2016-10-29 06:53 - 2016-10-15 04:43 - 00500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2016-10-29 06:53 - 2016-10-15 04:42 - 12349440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2016-10-29 06:53 - 2016-10-15 04:42 - 06108672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2016-10-29 06:53 - 2016-10-15 04:42 - 03776000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2016-10-29 06:53 - 2016-10-15 04:42 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll 2016-10-29 06:53 - 2016-10-15 04:42 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\olepro32.dll 2016-10-29 06:53 - 2016-10-15 04:41 - 12174848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-10-29 06:53 - 2016-10-15 04:41 - 05376000 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2016-10-29 06:53 - 2016-10-15 04:41 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll 2016-10-29 06:53 - 2016-10-15 04:41 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll 2016-10-29 06:53 - 2016-10-15 04:40 - 01135616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2016-10-29 06:53 - 2016-10-15 04:40 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll 2016-10-29 06:53 - 2016-10-15 04:39 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll 2016-10-29 06:53 - 2016-10-15 04:39 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll 2016-10-29 06:53 - 2016-10-15 04:39 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll 2016-10-29 06:53 - 2016-10-15 04:39 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\chartv.dll 2016-10-29 06:53 - 2016-10-15 04:39 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2016-10-29 06:53 - 2016-10-15 04:38 - 07468032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2016-10-29 06:53 - 2016-10-15 04:38 - 02458112 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll 2016-10-29 06:53 - 2016-10-15 04:38 - 01993216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2016-10-29 06:53 - 2016-10-15 04:37 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2016-10-29 06:53 - 2016-10-15 04:37 - 01940992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2016-10-29 06:53 - 2016-10-15 04:37 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2016-10-29 06:53 - 2016-10-15 04:37 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2016-10-29 06:53 - 2016-10-15 04:37 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2016-10-29 06:53 - 2016-10-15 04:37 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2016-10-29 06:53 - 2016-10-15 04:37 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2016-10-29 06:53 - 2016-10-15 04:36 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2016-10-29 06:53 - 2016-10-15 04:36 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll 2016-10-29 06:53 - 2016-10-15 04:36 - 01880576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2016-10-29 06:53 - 2016-10-15 04:36 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2016-10-29 06:53 - 2016-10-15 04:36 - 01523712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2016-10-29 06:53 - 2016-10-15 04:36 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2016-10-29 06:53 - 2016-10-15 04:36 - 01123328 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-10-29 06:53 - 2016-10-15 04:36 - 00580608 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll 2016-10-29 06:53 - 2016-10-15 04:36 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll 2016-10-29 06:53 - 2016-10-15 04:36 - 00528384 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe 2016-10-29 06:53 - 2016-10-15 04:36 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll 2016-10-29 06:53 - 2016-10-15 04:36 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmifw.dll 2016-10-29 06:53 - 2016-10-15 04:35 - 02999808 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-10-29 06:53 - 2016-10-15 04:35 - 02708992 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2016-10-29 06:53 - 2016-10-15 04:35 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2016-10-29 06:53 - 2016-10-15 04:35 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2016-10-29 06:53 - 2016-10-15 04:35 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2016-10-29 06:53 - 2016-10-15 04:35 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2016-10-29 06:53 - 2016-10-15 04:35 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll 2016-10-29 06:53 - 2016-10-15 04:33 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys 2016-10-28 17:27 - 2016-10-28 17:27 - 00152686 _____ C:\Users\dkgod\Documents\cc_20161028_182741.reg 2016-10-28 17:26 - 2016-11-02 00:40 - 00000000 ____D C:\Program Files\CCleaner 2016-10-28 17:26 - 2016-10-28 17:26 - 00001038 _____ C:\Users\Public\Desktop\CCleaner.lnk 2016-10-28 17:26 - 2016-10-28 17:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2016-10-28 17:25 - 2016-10-28 17:25 - 08270712 _____ (Piriform Ltd) C:\Users\dkgod\Downloads\ccsetup523.exe 2016-10-28 17:25 - 2016-10-28 17:25 - 01166208 _____ ( ) C:\Users\dkgod\Downloads\CCleaner-13061-dp.exe 2016-10-26 00:02 - 2016-10-26 00:02 - 00712216 _____ (AMD) C:\WINDOWS\system32\coinst_16.40.dll 2016-10-26 00:02 - 2016-10-26 00:02 - 00077848 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll 2016-10-26 00:02 - 2016-10-26 00:02 - 00038416 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll 2016-10-25 19:24 - 2016-11-02 00:40 - 00000000 ____D C:\Program Files\badu 2016-10-25 19:23 - 2016-11-03 15:10 - 00000000 ____D C:\Program Files\03000200-1477419828-0500-0006-000700080009 2016-10-25 19:23 - 2016-11-01 23:30 - 00000000 _____ C:\TOSTACK 2016-10-25 19:22 - 2016-10-25 19:22 - 00000000 ____D C:\ProgramData\Avira 2016-10-25 19:22 - 2016-10-25 19:22 - 00000000 ____D C:\ProgramData\AVAST Software 2016-10-25 19:21 - 2016-11-02 00:40 - 00000000 ____D C:\Program Files\Ckerdesp 2016-10-25 19:21 - 2016-10-28 16:58 - 00000000 ____D C:\Users\dkgod\AppData\Roaming\Atigupy 2016-10-25 19:21 - 2016-10-25 19:22 - 00000000 ____D C:\Users\dkgod\AppData\Local\Bubispaberge 2016-10-25 19:20 - 2016-10-25 19:20 - 00000000 ____D C:\Users\dkgod\AppData\Local\GeoLocator 2016-10-20 20:46 - 2016-10-20 20:46 - 00000266 __RSH C:\Users\dkgod\ntuser.pol 2016-10-20 15:27 - 2016-10-20 15:27 - 00000000 ____D C:\Users\dkgod\AppData\LocalLow\Adobe 2016-10-20 15:23 - 2016-10-20 15:23 - 00001242 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk 2016-10-20 15:23 - 2016-10-20 15:23 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe 2016-10-20 15:22 - 2016-10-20 15:22 - 00001204 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk 2016-10-20 15:21 - 2016-11-02 00:40 - 00000000 ____D C:\Program Files\Adobe 2016-10-20 15:21 - 2016-10-20 15:21 - 00001558 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk 2016-10-20 15:21 - 2016-10-20 15:21 - 00001388 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk 2016-10-20 15:20 - 2016-10-20 15:22 - 00000000 ____D C:\Program Files\Common Files\Adobe 2016-10-20 15:19 - 2016-10-21 09:10 - 00000000 ____D C:\ProgramData\Adobe 2016-10-20 15:18 - 2016-11-01 14:24 - 00000000 ____D C:\Users\dkgod\AppData\Local\Adobe 2016-10-20 13:11 - 2016-10-20 13:11 - 00789248 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x86.sys 2016-10-20 13:11 - 2016-10-20 13:11 - 00085616 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp32.dll 2016-10-20 13:10 - 2016-10-20 15:13 - 00000000 ____D C:\ProgramData\ProductData 2016-10-20 13:10 - 2016-10-20 13:10 - 00023840 _____ (REALiX(tm)) C:\WINDOWS\system32\Drivers\HWiNFO32.SYS 2016-10-20 13:10 - 2016-10-20 13:10 - 00000000 ____D C:\WINDOWS\IObit 2016-10-20 13:10 - 2016-10-20 13:10 - 00000000 ____D C:\Users\dkgod\AppData\Roaming\IObit 2016-10-20 13:10 - 2016-10-20 13:10 - 00000000 ____D C:\Users\dkgod\AppData\LocalLow\IObit 2016-10-20 13:10 - 2016-10-20 13:10 - 00000000 ____D C:\ProgramData\IObit 2016-10-20 13:09 - 2016-11-03 16:14 - 00000000 ____D C:\Users\dkgod\AppData\LocalLow\Youtube AdBlock 2016-10-20 13:09 - 2016-10-20 13:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlaysTV 2016-10-20 13:06 - 2016-10-20 13:06 - 00000000 ____D C:\Users\dkgod\AppData\Local\UCBrowser 2016-10-20 13:05 - 2016-10-25 19:20 - 00000000 ____D C:\Users\dkgod\ReportSender 2016-10-20 13:04 - 2016-11-03 16:13 - 00000352 _____ C:\WINDOWS\Tasks\Update Service for Youtube AdBlock.job 2016-10-20 13:04 - 2016-11-03 16:13 - 00000000 ____D C:\Program Files\Youtube AdBlock 2016-10-20 13:04 - 2016-11-03 16:12 - 00002318 __RSH C:\ProgramData\ntuser.pol 2016-10-20 13:04 - 2016-10-20 13:04 - 00002142 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk 2016-10-20 13:04 - 2016-10-20 13:04 - 00002112 _____ C:\Users\Public\Desktop\Gооglе Сhrоmе.lnk 2016-10-20 13:04 - 2016-10-20 13:04 - 00000000 ____D C:\Users\dkgod\AppData\Roaming\HPRewriter2 2016-10-20 12:55 - 2016-10-20 12:55 - 05778103 _____ C:\WINDOWS\windowdowngrade.exe 2016-10-15 08:13 - 2016-10-05 11:10 - 00231776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2016-10-15 08:13 - 2016-10-05 11:05 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2016-10-15 08:13 - 2016-10-05 11:03 - 01724584 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2016-10-15 08:13 - 2016-10-05 10:59 - 00949600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2016-10-15 08:13 - 2016-10-05 10:54 - 01097568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2016-10-15 08:13 - 2016-10-05 10:53 - 00154976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2016-10-15 08:13 - 2016-10-05 10:51 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2016-10-15 08:13 - 2016-10-05 10:50 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll 2016-10-15 08:13 - 2016-10-05 10:49 - 01980768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2016-10-15 08:13 - 2016-10-05 10:48 - 01022304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll 2016-10-15 08:13 - 2016-10-05 10:46 - 01360456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2016-10-15 08:13 - 2016-10-05 10:46 - 00980824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2016-10-15 08:13 - 2016-10-05 10:46 - 00056672 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys 2016-10-15 08:13 - 2016-10-05 10:45 - 00198496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll 2016-10-15 08:13 - 2016-10-05 10:31 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConfigureExpandedStorage.dll 2016-10-15 08:13 - 2016-10-05 10:28 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2016-10-15 08:13 - 2016-10-05 10:28 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll 2016-10-15 08:13 - 2016-10-05 10:28 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll 2016-10-15 08:13 - 2016-10-05 10:27 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll 2016-10-15 08:13 - 2016-10-05 10:27 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll 2016-10-15 08:13 - 2016-10-05 10:26 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2016-10-15 08:13 - 2016-10-05 10:26 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll 2016-10-15 08:13 - 2016-10-05 10:26 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll 2016-10-15 08:13 - 2016-10-05 10:25 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-10-15 08:13 - 2016-10-05 10:25 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll 2016-10-15 08:13 - 2016-10-05 10:25 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll 2016-10-15 08:13 - 2016-10-05 10:25 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2016-10-15 08:13 - 2016-10-05 10:25 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2016-10-15 08:13 - 2016-10-05 10:25 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll 2016-10-15 08:13 - 2016-10-05 10:24 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll 2016-10-15 08:13 - 2016-10-05 10:24 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2016-10-15 08:13 - 2016-10-05 10:23 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll 2016-10-15 08:13 - 2016-10-05 10:23 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll 2016-10-15 08:13 - 2016-10-05 10:23 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2016-10-15 08:13 - 2016-10-05 10:23 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll 2016-10-15 08:13 - 2016-10-05 10:23 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs3D.dll 2016-10-15 08:13 - 2016-10-05 10:23 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll 2016-10-15 08:13 - 2016-10-05 10:22 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2016-10-15 08:13 - 2016-10-05 10:21 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2016-10-15 08:13 - 2016-10-05 10:21 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll 2016-10-15 08:13 - 2016-10-05 10:21 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2016-10-15 08:13 - 2016-10-05 10:20 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2016-10-15 08:13 - 2016-10-05 10:20 - 00303104 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2016-10-15 08:13 - 2016-10-05 10:18 - 01283584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll 2016-10-15 08:13 - 2016-10-05 10:18 - 00858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll 2016-10-15 08:13 - 2016-10-05 10:17 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll 2016-10-15 08:13 - 2016-10-05 10:16 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll 2016-10-15 08:13 - 2016-10-05 10:16 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-10-15 08:13 - 2016-10-05 10:15 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll 2016-10-15 08:13 - 2016-10-05 10:14 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2016-10-15 08:13 - 2016-10-05 10:14 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2016-10-15 08:13 - 2016-10-05 10:13 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2016-10-15 08:13 - 2016-10-05 10:11 - 06043136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-10-15 08:13 - 2016-10-05 10:11 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2016-10-15 08:13 - 2016-10-05 10:10 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe 2016-10-15 08:13 - 2016-10-05 10:10 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2016-10-15 08:13 - 2016-10-05 10:09 - 03369984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2016-10-15 08:13 - 2016-10-05 10:09 - 01700864 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe 2016-10-15 08:13 - 2016-10-05 10:09 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll 2016-10-15 08:13 - 2016-10-05 10:09 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-10-15 08:13 - 2016-10-05 10:09 - 00608256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2016-10-15 08:13 - 2016-10-05 10:08 - 02356736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll 2016-10-15 08:13 - 2016-10-05 10:08 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2016-10-15 08:13 - 2016-10-05 10:08 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll 2016-10-15 08:13 - 2016-10-05 10:07 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-10-15 08:13 - 2016-10-05 10:07 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll 2016-10-15 08:13 - 2016-10-05 10:07 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll 2016-10-15 08:13 - 2016-10-05 10:07 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2016-10-15 08:13 - 2016-10-05 10:07 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll 2016-10-15 08:13 - 2016-10-05 10:06 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll 2016-10-15 08:13 - 2016-10-05 10:06 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll 2016-10-15 08:13 - 2016-10-05 10:05 - 03105792 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe 2016-10-15 08:13 - 2016-10-05 10:05 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll 2016-10-15 08:13 - 2016-09-23 04:59 - 00446124 _____ C:\WINDOWS\system32\ApnDatabase.xml 2016-10-15 08:13 - 2016-09-07 06:18 - 00290264 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2016-10-14 09:20 - 2016-10-14 09:20 - 00000000 ____D C:\WINDOWS\system32\config\s ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-11-03 16:19 - 2016-08-25 09:37 - 00000000 ____D C:\Users\dkgod\AppData\Roaming\uTorrent 2016-11-03 16:19 - 2016-07-16 09:28 - 00000000 ____D C:\WINDOWS\INF 2016-11-03 16:17 - 2015-10-29 00:55 - 00000000 ____D C:\Program Files\Ganymede 2016-11-03 16:13 - 2016-09-30 19:59 - 00000000 ____D C:\Users\dkgod\AppData\Local\Spotify 2016-11-03 16:13 - 2016-09-30 19:57 - 00000000 ____D C:\Users\dkgod\AppData\Roaming\Spotify 2016-11-03 16:12 - 2016-09-29 02:49 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2016-11-02 22:36 - 2016-07-16 09:29 - 00000000 ___HD C:\Program Files\WindowsApps 2016-11-02 22:36 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-11-02 22:30 - 2015-07-31 10:20 - 00000000 ____D C:\Users\dkgod\AppData\Local\Google 2016-11-02 22:29 - 2016-06-29 13:24 - 00002118 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2016-11-02 22:29 - 2016-06-25 13:06 - 00000000 ____D C:\Program Files\McAfee Security Scan 2016-11-02 00:41 - 2016-09-29 12:39 - 00000000 ____D C:\Program Files\Reference Assemblies 2016-11-02 00:41 - 2015-07-31 10:20 - 00000000 ____D C:\Program Files\Google 2016-11-02 00:40 - 2016-09-29 12:39 - 00000000 ____D C:\Program Files\MSBuild 2016-11-02 00:40 - 2016-09-29 02:50 - 00000000 ____D C:\Program Files\Realtek 2016-11-02 00:40 - 2016-09-29 02:50 - 00000000 ____D C:\Program Files\ATI Technologies 2016-11-02 00:40 - 2016-09-29 02:50 - 00000000 ____D C:\Program Files\AMD 2016-11-02 00:40 - 2016-08-25 22:15 - 00000000 ____D C:\Program Files\Napisy24 2016-11-02 00:40 - 2016-08-25 22:15 - 00000000 ____D C:\Program Files\ALLPlayer Remote 2016-11-02 00:40 - 2016-08-25 22:15 - 00000000 ____D C:\Program Files\ALLPlayer 2016-11-02 00:40 - 2016-07-16 11:18 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2016-11-02 00:40 - 2016-07-16 09:29 - 00000000 __SHD C:\Program Files\Windows Sidebar 2016-11-02 00:40 - 2016-07-16 09:29 - 00000000 ___RD C:\Program Files\Windows Defender 2016-11-02 00:40 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows Portable Devices 2016-11-02 00:40 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2016-11-02 00:40 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows NT 2016-11-02 00:40 - 2016-07-16 09:29 - 00000000 ____D C:\Program Files\Windows Multimedia Platform 2016-11-02 00:40 - 2016-06-25 13:16 - 00000000 ____D C:\Program Files\Intel Security 2016-11-02 00:40 - 2016-06-25 13:16 - 00000000 ____D C:\Program Files\Intel 2016-11-02 00:40 - 2016-06-25 13:15 - 00000000 ____D C:\Program Files\McAfee 2016-11-02 00:40 - 2016-06-25 13:06 - 00000000 ____D C:\Program Files\TrueKey 2016-11-02 00:40 - 2016-03-17 00:04 - 00000000 ____D C:\Program Files\Raptr Inc 2016-11-02 00:40 - 2016-02-24 14:30 - 00000000 ____D C:\Program Files\DVDVideoSoft 2016-11-02 00:40 - 2015-12-16 13:05 - 00000000 ____D C:\Program Files\Battle.net 2016-11-02 00:40 - 2015-12-09 12:58 - 00000000 ____D C:\Program Files\Mozilla Firefox 2016-11-02 00:40 - 2015-08-21 12:05 - 00000000 ____D C:\Program Files\FreeCodecPack 2016-11-02 00:40 - 2015-08-21 12:05 - 00000000 ____D C:\Program Files\AVG 2016-11-02 00:40 - 2015-07-31 14:47 - 00000000 ____D C:\Program Files\InstallShield Installation Information 2016-11-01 23:36 - 2016-02-29 18:48 - 00000000 ____D C:\Users\dkgod\AppData\Roaming\Mozilla 2016-11-01 23:28 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2016-11-01 22:42 - 2016-04-26 20:05 - 00000000 ____D C:\Users\dkgod\AppData\Roaming\.ACEStream 2016-10-31 01:05 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\system32\Macromed 2016-10-31 01:05 - 2016-06-25 13:06 - 00000992 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job 2016-10-31 01:05 - 2016-06-25 13:06 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-10-30 23:21 - 2016-07-16 09:19 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-10-30 23:11 - 2016-09-29 12:43 - 00475758 _____ C:\WINDOWS\system32\perfh015.dat 2016-10-30 23:11 - 2016-09-29 12:43 - 00083332 _____ C:\WINDOWS\system32\perfc015.dat 2016-10-30 23:11 - 2015-07-31 07:58 - 01488356 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-10-30 23:06 - 2015-07-31 07:53 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-10-30 23:04 - 2016-09-29 02:56 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-10-30 23:04 - 2016-09-29 02:49 - 03592864 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-10-30 11:46 - 2016-09-29 02:50 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin 2016-10-30 11:46 - 2016-07-16 09:30 - 00015425 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2016-10-30 11:46 - 2016-07-16 09:29 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2016-10-30 11:46 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2016-10-30 11:46 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\system32\oobe 2016-10-30 11:46 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-10-30 11:46 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2016-10-30 11:46 - 2016-07-16 03:22 - 00786432 _____ C:\WINDOWS\system32\config\BBI 2016-10-30 11:37 - 2015-12-16 13:06 - 00000000 ____D C:\Users\dkgod\AppData\Local\Battle.net 2016-10-29 20:45 - 2016-08-11 14:47 - 00056128 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\cherimoya.sys 2016-10-29 14:11 - 2016-09-29 02:51 - 00000000 ____D C:\Users\dkgod 2016-10-29 10:37 - 2016-09-29 02:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings 2016-10-29 10:37 - 2015-12-15 03:46 - 00000000 ____D C:\ProgramData\AMD 2016-10-29 10:37 - 2015-08-01 09:09 - 00000000 ____D C:\Users\dkgod\AppData\Local\AMD 2016-10-29 10:37 - 2014-06-12 22:19 - 00000000 ____D C:\AMD 2016-10-28 17:37 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\system32\NDF 2016-10-28 17:27 - 2016-09-29 12:49 - 00000000 ___DC C:\WINDOWS\Panther 2016-10-28 16:55 - 2016-05-03 18:53 - 00000000 ____D C:\Users\dkgod\AppData\Local\ElevatedDiagnostics 2016-10-26 00:03 - 2016-09-13 21:00 - 00403112 _____ C:\WINDOWS\system32\amdmiracast.dll 2016-10-26 00:03 - 2016-09-13 21:00 - 00145864 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp32.dll 2016-10-26 00:03 - 2016-09-13 21:00 - 00145360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave32.dll 2016-10-26 00:03 - 2016-09-13 21:00 - 00112336 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc32.dll 2016-10-26 00:03 - 2016-09-13 21:00 - 00112328 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom32.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 07589400 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk32.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 02150928 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt32.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 01015824 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 00643088 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr32.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 00476696 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 00458264 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe 2016-10-26 00:02 - 2016-09-13 21:00 - 00420368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe 2016-10-26 00:02 - 2016-09-13 21:00 - 00277008 _____ C:\WINDOWS\system32\dgtrayicon.exe 2016-10-26 00:02 - 2016-09-13 21:00 - 00271376 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe 2016-10-26 00:02 - 2016-09-13 21:00 - 00258064 _____ C:\WINDOWS\system32\GameManager32.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 00251408 _____ C:\WINDOWS\system32\hsa-thunk.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 00239128 _____ C:\WINDOWS\system32\amdgfxinfo32.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 00226320 _____ C:\WINDOWS\system32\atieah32.exe 2016-10-26 00:02 - 2016-09-13 21:00 - 00193552 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atigktxx.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 00153112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle32.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 00145952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx32.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 00135696 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu32.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 00128024 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 00126480 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl32.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 00107536 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx32.dll 2016-10-26 00:02 - 2016-09-13 21:00 - 00084504 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl32.dll 2016-10-25 19:22 - 2015-08-21 12:05 - 00000000 ____D C:\ProgramData\AVG 2016-10-25 00:30 - 2016-07-16 09:31 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2016-10-25 00:30 - 2016-07-16 09:31 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2016-10-20 15:24 - 2015-07-31 07:53 - 00000000 ____D C:\Users\dkgod\AppData\Roaming\Adobe 2016-10-20 13:09 - 2016-02-24 10:01 - 00000000 ____D C:\Users\dkgod\AppData\Roaming\Raptr 2016-10-20 13:04 - 2015-09-16 15:54 - 00000000 ____D C:\Users\dkgod\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome 2016-10-20 13:04 - 2015-07-10 09:28 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy 2016-10-20 10:17 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\rescache 2016-10-18 17:18 - 2015-08-21 12:04 - 00000000 ____D C:\Users\dkgod\AppData\Roaming\DVDVideoSoft 2016-10-17 17:09 - 2016-07-16 09:29 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2016-10-17 17:09 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\system32\migwiz 2016-10-17 17:09 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\ShellExperiences 2016-10-16 06:42 - 2015-07-31 10:24 - 00000000 ____D C:\Program Files\Common Files\Steam 2016-10-15 13:30 - 2015-08-12 16:58 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-10-15 13:26 - 2015-08-12 16:58 - 141042968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-10-15 08:04 - 2016-07-16 09:25 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll ==================== Files in the root of some directories ======= 2016-11-02 00:40 - 2016-11-02 00:40 - 0182784 _____ () C:\Program Files\Common Files\4lggmu.dll 2016-11-01 23:36 - 2016-11-01 23:36 - 7294976 _____ () C:\Users\dkgod\AppData\Roaming\agent.dat 2016-11-01 23:36 - 2016-11-01 23:36 - 0070704 _____ () C:\Users\dkgod\AppData\Roaming\Config.xml 2016-11-01 23:36 - 2016-11-01 23:36 - 0018144 _____ () C:\Users\dkgod\AppData\Roaming\InstallationConfiguration.xml 2016-11-01 23:36 - 2016-11-01 23:36 - 0140288 _____ () C:\Users\dkgod\AppData\Roaming\Installer.dat 2016-11-01 23:36 - 2016-11-01 23:36 - 0018432 _____ () C:\Users\dkgod\AppData\Roaming\Main.dat 2016-11-01 23:36 - 2016-11-01 23:36 - 0005568 _____ () C:\Users\dkgod\AppData\Roaming\md.xml 2016-11-01 23:36 - 2016-11-01 23:36 - 0126464 _____ () C:\Users\dkgod\AppData\Roaming\noah.dat 2016-11-01 23:36 - 2016-11-01 23:36 - 1897571 _____ () C:\Users\dkgod\AppData\Roaming\Phystrax.bin 2016-01-20 20:01 - 2016-01-20 20:01 - 0022328 _____ () C:\Users\dkgod\AppData\Roaming\PnkBstrK.sys 2016-11-01 23:36 - 2016-11-01 23:36 - 0710656 _____ () C:\Users\dkgod\AppData\Roaming\Singleing.exe 2016-11-01 23:36 - 2016-11-01 23:36 - 1903931 _____ () C:\Users\dkgod\AppData\Roaming\Singleing.tst 2016-11-01 23:36 - 2016-11-01 23:36 - 0190394 _____ () C:\Users\dkgod\AppData\Roaming\Truetop.bin 2016-11-01 23:36 - 2016-11-01 23:36 - 0032038 _____ () C:\Users\dkgod\AppData\Roaming\uninstall_temp.ico 2016-11-01 23:36 - 2016-11-01 23:36 - 0188578 _____ () C:\Users\dkgod\AppData\Roaming\Zumlamsoft.bin Files to move or delete: ==================== C:\Users\dkgod\AppData\Local\Temp\MP89NODUJD.exe C:\Users\dkgod\AppData\Local\Temp\D922SHT2B6.exe C:\Users\dkgod\AppData\Local\Temp\3SR49Q0ABC.exe C:\Users\dkgod\AppData\Local\Temp\QFFHUXVXD\QFFHUXVXD.exe C:\Users\dkgod\AppData\Local\Temp\4FSB8NT65\4FSB8NT65.exe C:\Users\dkgod\AppData\Local\Temp\CNTJM3GM5\CNTJM3GM5.exe C:\Users\dkgod\AppData\Local\Temp\91LLK0S72\91LLK0S72.exe C:\Users\dkgod\AppData\Local\Temp\H93DJ8PP4\H93DJ8PP4.exe Some files in TEMP: ==================== C:\Users\dkgod\AppData\Local\Temp\3SR49Q0ABC.exe C:\Users\dkgod\AppData\Local\Temp\ALLRemote.exe C:\Users\dkgod\AppData\Local\Temp\D922SHT2B6.exe C:\Users\dkgod\AppData\Local\Temp\dnsapi.dll C:\Users\dkgod\AppData\Local\Temp\MP89NODUJD.exe C:\Users\dkgod\AppData\Local\Temp\Napisy24.exe C:\Users\dkgod\AppData\Local\Temp\uninstaller.exe ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2016-10-20 09:51 ==================== End of FRST.txt ============================