Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 11.06.2017
Scan Time: 20:30
Logfile: 
Administrator: Yes

Version: 2.2.0.1024
Malware Database: v2017.06.11.02
Rootkit Database: v2017.05.27.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 10
CPU: x64
File System: NTFS
User: User

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 306975
Time Elapsed: 51 min, 28 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 1
Adware.Agent, C:\Users\User\Downloads\php_echo_get_the_titleID_.exe, Quarantined, [fbf3ac914f5ac76f03b5aa4b35cc07f9], 

Physical Sectors: 0
(No malicious items detected)

(end)

 

# AdwCleaner v6.047 - Дневникът е създаден 11/06/2017 в 21:44:14
# Обновен на 19/05/2017 от Malwarebytes
# База данни : 2017-06-10.1 [Сървърна]
# Операционна Система : Windows 10 Pro  (X64)
# Потребителско име : User - PC
# Изпълнява се от : C:\Users\User\Desktop\adwcleaner_6.047.exe
# Режим: Почистване
# Поддръжка : https://www.malwarebytes.com/support

***** [ Услуги ] *****

***** [ Папки ] *****

***** [ Файлове ] *****

[-] Файлът е изтрит: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\g06kujs8.default\invalidprefs.js

***** [ DLL ] *****

***** [ WMI ] *****

***** [ Преки пътища ] *****

***** [ Планирани Задачи ] *****

***** [ Регистър ] *****

***** [ Интернет Браузъри ] *****

[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default] [extension] Изтрит: jmaonnnpghchicaphlacpogbdgpcokgf
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default] [extension] Изтрит: jmfdniemoeflbhlmcnammemhdahpcjni
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default] [extension] Изтрит: mooidppbbblaanccjoeepbebmfohiecp
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default] [homepage] Изтрит: hxxp://websearch.mocaflix.com/

*************************

:: "Tracing" ключовете бяха изтрити
:: Winsock настройките бяха изчистени

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [19320 Байта] - [13/05/2017 23:54:03]
C:\AdwCleaner\AdwCleaner[C2].txt - [1928 Байта] - [14/05/2017 22:17:29]
C:\AdwCleaner\AdwCleaner[C3].txt - [1810 Байта] - [11/06/2017 21:44:14]
C:\AdwCleaner\AdwCleaner[S0].txt - [17767 Байта] - [13/05/2017 23:51:14]
C:\AdwCleaner\AdwCleaner[S1].txt - [2636 Байта] - [14/05/2017 22:16:52]
C:\AdwCleaner\AdwCleaner[S2].txt - [3071 Байта] - [11/06/2017 21:43:31]

########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [2123 Байта] ##########
 

 

Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.3 (04.10.2017)
Operating System: Windows 10 Pro x64 
Ran by User (Administrator) on 11.06.2017 at 21:51:55,04
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 0 

Registry: 1 

Successfully deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_BCEA24321E5E4F1401136BBEDFB545FE (Registry Value) 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 11.06.2017 at 21:54:27,82
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-06-2017
Ran by User (administrator) on PC (11-06-2017 21:58:12)
Running from C:\Users\User\Desktop
Loaded Profiles: User (Available Profiles: User)
Platform: Windows 10 Pro Version 1511 (X64) Language: Български (България)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
(AMD) C:\WINDOWS\System32\atiesrxx.exe
(Intel Corporation) C:\WINDOWS\System32\igfxCUIService.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(Conexant Systems Inc.) C:\WINDOWS\System32\CxAudMsg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
() C:\Program Files (x86)\T-Mobile\ConnectionManager\BackgroundService\ServiceManager.exe
(ABBYY InfoPoisk LLC) C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [935104 2014-11-25] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc.)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17111056 2014-09-16] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [193008 2014-09-16] (Lenovo(beijing) Limited)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-06-03] (Synaptics Incorporated)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [8027016 2016-11-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2012-06-28] (Nullsoft, Inc.)
HKLM-x32\...\Run: [Bonus.SSR.FR11] => C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [1364496 2013-06-28] (ABBYY Production LLC)
HKLM-x32\...\Run: [T-Mobile ModemListener] => C:\Program Files (x86)\T-Mobile\ConnectionManager\Background\ModemListener.exe [114552 2012-12-05] ()
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare)
HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\Run: [uTorrent] => C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe [2144448 2017-04-12] (BitTorrent Inc.)
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\Run: [Dropbox Update] => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.)
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\Run: [BingSvc] => C:\Users\User\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\Run: [Akamai NetSession Interface] => C:\Users\User\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\Run: [Spotify Web Helper] => C:\Users\User\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-04-19] (Spotify Ltd)
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\Run: [Spotify] => C:\Users\User\AppData\Roaming\Spotify\Spotify.exe [7064176 2017-04-19] (Spotify Ltd)
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9364696 2017-03-03] (Piriform Ltd)
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\Run: [GoogleChromeAutoLaunch_BCEA24321E5E4F1401136BBEDFB545FE] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1143640 2017-05-09] (Google Inc.)
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [31744 2015-10-30] (Microsoft Corporation)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-05-19]
ShortcutTarget: Dropbox.lnk -> C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{53061d4b-3353-4621-81cb-822dfaa395db}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SK2M&ocid=SK2MDHP&osmkt=en-us
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=SK2MDF&PC=SK2M&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=SK2MDF&PC=SK2M&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-24] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2016-11-15] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-24] (Oracle Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  No File
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\g06kujs8.default [2017-06-11]
FF SearchEngineOrder.3: Mozilla\Firefox\Profiles\g06kujs8.default -> Bing 
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\g06kujs8.default -> Bing 
FF Extension: (Bing Search) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\g06kujs8.default\Extensions\[email protected] [2017-06-07] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-10] ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-10] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-24] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-02] (Google Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin HKU\S-1-5-21-2749757513-2474199141-1410865342-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-08] (Unity Technologies ApS)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://websearch.mocaflix.com/
CHR StartupUrls: Default -> "hxxps://www.google.bg/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8"
CHR NewTab: Default ->  Not-active:"chrome-extension://edlnojcclfhfnjegbdkcdigjnlmjkfnn/index.html", Not-active:"chrome-extension://poiapofmfcplmniafohaldhfddbacheo/newtab/newtab.html"
CHR DefaultSearchURL: Default -> hxxp://search.mysearch.com/web?q={searchTerms}
CHR DefaultSearchKeyword: Default -> hxxp://search.mysearch.com
CHR DefaultSuggestURL: Default -> hxxp://search.mysearch.com/ss?sstype=prefix&li=ff&q={searchTerms}
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2017-06-11]
CHR Extension: (Stylish - Custom themes for any website) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2017-06-07]
CHR Extension: (softorama) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfdniemoeflbhlmcnammemhdahpcjni [2017-06-11]
CHR Extension: (Bradley Simpson) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\kaapdadfkamkplbbfpdoggdeinccicdi [2016-05-30]
CHR Extension: (FB Dislike) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpekolbadenjphaaapbgdienjjpgbali [2017-06-07]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-06-07]
CHR Extension: (Моята тема за Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2017-06-07]
CHR Extension: (Clone Pointer) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfemnmdfeaddbflekhkfjahlepdjfmjm [2017-06-07]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [821048 2013-06-17] (ABBYY InfoPoisk LLC)
R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [155016 2016-11-21] ()
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [400656 2017-01-19] (EasyAntiCheat Ltd)
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [330136 2015-08-27] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 Modem Device Helper; C:\Program Files (x86)\T-Mobile\ConnectionManager\BackgroundService\ServiceManager.exe [51576 2012-12-04] () [File not signed]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [249032 2015-06-03] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2016-10-25] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24856 2017-03-04] (Microsoft Corporation)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [656664 2014-08-19] (Wacom Technology, Corp.)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ALCATELUSB; C:\WINDOWS\System32\Drivers\AlcatelUsb.sys [25088 2012-12-04] (Windows (R) Codename Longhorn DDK provider)
R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [36096 2014-07-21] (Advanced Micro Devices, Inc.)
R1 dtsoftbus01; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [283064 2014-09-16] (Disc Soft Ltd)
S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [46136 2014-11-03] (LogMeIn Inc.)
S3 jrdusbser; C:\WINDOWS\system32\DRIVERS\jrdusbser.sys [120832 2012-12-04] (TCT International Mobile Ltd)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2015-10-30] (Intel Corporation)
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [402960 2015-05-14] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-06-03] (Synaptics Incorporated)
S3 ssudobex; C:\WINDOWS\system32\DRIVERS\ssudobex.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S2 WCMVCAM; C:\WINDOWS\system32\DRIVERS\wcmvcam64.sys [1071032 2012-04-16] (Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-11 21:58 - 2017-06-11 21:59 - 00018085 _____ C:\Users\User\Desktop\FRST.txt
2017-06-11 21:54 - 2017-06-11 21:54 - 00000694 _____ C:\Users\User\Desktop\JRT.txt
2017-06-11 21:47 - 2017-06-11 21:47 - 00001905 _____ C:\Users\User\Desktop\AdwCleaner.txt
2017-06-11 21:38 - 2017-06-11 21:39 - 00001117 _____ C:\Users\User\Desktop\MBAM.txt
2017-06-11 20:59 - 2017-06-11 21:57 - 02438656 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2017-06-11 20:57 - 2017-06-11 21:51 - 01663672 _____ (Malwarebytes) C:\Users\User\Desktop\JRT (1).exe
2017-06-11 20:44 - 2017-06-11 21:40 - 04110280 _____ C:\Users\User\Desktop\adwcleaner_6.047.exe
2017-06-09 23:23 - 2017-06-09 23:23 - 00000132 _____ C:\Users\User\AppData\Roaming\Adobe GIF Format CS5 Prefs
2017-06-09 22:12 - 2017-06-09 22:12 - 14378312 _____ (Kaspersky Lab ZAO) C:\Users\User\Downloads\kavremvr.exe
2017-06-09 21:50 - 2017-06-09 21:50 - 00001191 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2017-06-09 21:50 - 2017-06-09 21:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2017-06-09 21:50 - 2017-06-09 21:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2017-06-09 21:50 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2017-06-09 21:50 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2017-06-09 21:50 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-06-09 21:33 - 2017-06-09 21:45 - 22908888 _____ (Malwarebytes ) C:\Users\User\Downloads\mbam-setup-2.2.0.1024.exe
2017-06-09 21:03 - 2017-06-09 21:03 - 00016039 _____ C:\Users\User\Downloads\imageproxy.php
2017-06-09 20:27 - 2017-06-09 20:27 - 00000000 ____D C:\Users\User\Desktop\FRST-OlderVersion
2017-06-08 23:02 - 2017-03-04 09:33 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-06-08 23:02 - 2017-03-04 09:29 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-06-08 23:02 - 2017-03-04 08:19 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2017-06-08 23:02 - 2017-03-04 08:16 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-06-08 23:02 - 2017-03-04 08:16 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-06-08 23:02 - 2017-03-04 08:15 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole2.tlb
2017-06-08 23:02 - 2017-03-04 08:06 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallButtons.dll
2017-06-08 23:02 - 2017-03-04 08:06 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2017-06-08 23:02 - 2017-03-04 08:03 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2017-06-08 23:02 - 2017-03-04 08:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll
2017-06-08 23:02 - 2017-03-04 07:57 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2017-06-08 23:02 - 2017-03-04 07:57 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\feclient.dll
2017-06-08 23:02 - 2017-03-04 07:56 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oemlicense.dll
2017-06-08 23:02 - 2017-03-04 07:51 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
2017-06-08 23:02 - 2017-03-04 07:49 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icm32.dll
2017-06-08 23:02 - 2017-03-04 07:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-06-08 23:02 - 2017-03-04 07:46 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2017-06-08 23:02 - 2017-03-04 07:45 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2017-06-08 23:02 - 2017-03-04 07:42 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2017-06-08 23:02 - 2017-03-04 07:33 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2017-06-08 23:02 - 2017-03-04 07:32 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2017-06-08 23:02 - 2017-03-04 07:31 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2017-06-08 23:02 - 2017-03-04 07:29 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2017-06-08 23:02 - 2017-03-04 07:29 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2017-06-08 23:02 - 2017-03-04 07:28 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2017-06-08 23:02 - 2017-03-04 07:25 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-06-08 23:02 - 2017-03-04 07:24 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2017-06-08 23:02 - 2017-03-04 07:21 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licensingdiag.exe
2017-06-08 23:01 - 2017-03-04 10:39 - 01862008 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-06-08 23:01 - 2017-03-04 10:39 - 00602256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-06-08 23:01 - 2017-03-04 10:29 - 00535088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2017-06-08 23:01 - 2017-03-04 09:29 - 00569752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2017-06-08 23:01 - 2017-03-04 09:25 - 00268040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2017-06-08 23:01 - 2017-03-04 08:57 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-06-08 23:01 - 2017-03-04 08:55 - 01370224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2017-06-08 23:01 - 2017-03-04 08:27 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-06-08 23:01 - 2017-03-04 08:06 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2017-06-08 23:01 - 2017-03-04 07:48 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apds.dll
2017-06-08 23:01 - 2017-03-04 07:47 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-06-08 23:01 - 2017-03-04 07:45 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-06-08 23:01 - 2017-03-04 07:42 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2017-06-08 23:01 - 2017-03-04 07:36 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-06-08 23:01 - 2017-03-04 07:32 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2017-06-08 23:01 - 2017-03-04 07:30 - 00501760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-06-08 23:01 - 2017-03-04 07:26 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2017-06-08 23:01 - 2017-03-04 07:26 - 01497088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2017-06-08 23:01 - 2017-03-04 07:26 - 01467904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2017-06-08 23:01 - 2017-03-04 07:24 - 00885248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2017-06-08 23:01 - 2017-03-04 07:18 - 00778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2017-06-08 23:01 - 2017-03-04 07:15 - 01986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2017-06-08 23:01 - 2017-03-04 07:13 - 00246784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qwave.dll
2017-06-08 23:01 - 2017-03-04 07:03 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rshx32.dll
2017-06-08 23:01 - 2017-03-04 06:59 - 01626112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-06-08 23:01 - 2017-03-04 06:58 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2017-06-08 23:01 - 2017-03-04 06:03 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-06-08 23:00 - 2017-03-04 10:27 - 00922432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2017-06-08 23:00 - 2017-03-04 10:12 - 00987488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-06-08 23:00 - 2017-03-04 09:43 - 00306832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2017-06-08 23:00 - 2017-03-04 09:33 - 02942536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-06-08 23:00 - 2017-03-04 08:06 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2017-06-08 23:00 - 2017-03-04 08:04 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2017-06-08 23:00 - 2017-03-04 07:55 - 00302080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2017-06-08 23:00 - 2017-03-04 07:45 - 00395776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2017-06-08 23:00 - 2017-03-04 07:37 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-06-08 23:00 - 2017-03-04 07:33 - 00616960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2017-06-08 23:00 - 2017-03-04 07:33 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2017-06-08 23:00 - 2017-03-04 07:22 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2017-06-08 23:00 - 2017-03-04 07:21 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-06-08 23:00 - 2017-03-04 07:19 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-06-08 23:00 - 2017-03-04 07:14 - 00581632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2017-06-08 23:00 - 2017-03-04 07:08 - 01185280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFramework.dll
2017-06-08 23:00 - 2017-03-04 07:05 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Proximity.dll
2017-06-08 23:00 - 2017-03-04 07:00 - 01501184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-06-08 23:00 - 2017-03-04 06:57 - 02878976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-06-08 23:00 - 2017-03-04 06:57 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2017-06-08 23:00 - 2017-03-04 06:55 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2017-06-08 23:00 - 2017-03-04 06:31 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2017-06-08 22:59 - 2017-03-04 09:41 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-06-08 22:59 - 2017-03-04 09:41 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-06-08 22:59 - 2017-03-04 09:41 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-06-08 22:59 - 2017-03-04 09:41 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2017-06-08 22:59 - 2017-03-04 09:41 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-06-08 22:59 - 2017-03-04 09:40 - 01349640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-06-08 22:59 - 2017-03-04 09:40 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-06-08 22:59 - 2017-03-04 09:40 - 00713824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-06-08 22:59 - 2017-03-04 09:34 - 01824272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-06-08 22:59 - 2017-03-04 09:29 - 05240960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-06-08 22:59 - 2017-03-04 09:29 - 04075184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-06-08 22:59 - 2017-03-04 09:29 - 00836752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2017-06-08 22:59 - 2017-03-04 08:58 - 02186864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-06-08 22:59 - 2017-03-04 08:41 - 02448752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-06-08 22:59 - 2017-03-04 08:41 - 00882208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2017-06-08 22:59 - 2017-03-04 08:40 - 00473616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2017-06-08 22:59 - 2017-03-04 08:40 - 00467440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2017-06-08 22:59 - 2017-03-04 07:57 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-06-08 22:59 - 2017-03-04 07:33 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2017-06-08 22:59 - 2017-03-04 07:33 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2017-06-08 22:59 - 2017-03-04 07:27 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2017-06-08 22:59 - 2017-03-04 07:25 - 01117184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2017-06-08 22:59 - 2017-03-04 07:24 - 02578432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2017-06-08 22:59 - 2017-03-04 07:24 - 00760320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2017-06-08 22:59 - 2017-03-04 07:23 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-06-08 22:59 - 2017-03-04 07:22 - 03695104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-06-08 22:59 - 2017-03-04 07:07 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-06-08 22:59 - 2017-03-04 07:07 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2017-06-08 22:59 - 2017-03-04 07:01 - 00724480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanpref.dll
2017-06-08 22:59 - 2017-03-04 06:54 - 06296064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-06-08 22:59 - 2017-03-04 06:54 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-06-08 22:59 - 2017-03-04 06:52 - 02000896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2017-06-08 22:59 - 2017-03-04 06:44 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-06-08 22:59 - 2017-03-04 06:38 - 02519552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2017-06-08 22:59 - 2017-03-04 06:36 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-06-08 22:59 - 2017-03-04 06:35 - 05326336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-06-08 22:59 - 2017-03-04 06:35 - 02798080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-06-08 22:59 - 2017-03-04 06:33 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2017-06-08 22:59 - 2017-03-04 06:31 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2017-06-08 22:59 - 2017-03-04 06:31 - 02062336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-06-08 22:59 - 2017-03-04 06:30 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-06-08 22:59 - 2017-03-04 06:29 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2017-06-08 22:58 - 2017-03-04 09:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-06-08 22:58 - 2017-03-04 07:31 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2017-06-08 22:58 - 2017-03-04 07:07 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2017-06-08 22:58 - 2017-03-04 06:57 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-06-08 22:58 - 2017-03-04 06:52 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-06-08 22:58 - 2017-03-04 06:51 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-06-08 22:58 - 2017-03-04 06:51 - 09921024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-06-08 22:58 - 2017-03-04 06:41 - 04404736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-06-08 22:56 - 2017-03-04 10:54 - 00989528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2017-06-08 22:56 - 2017-03-04 09:00 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-06-08 22:56 - 2017-03-04 08:59 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2017-06-08 22:56 - 2017-03-04 08:19 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2017-06-08 22:56 - 2017-03-04 08:11 - 00556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2017-06-08 22:56 - 2017-03-04 07:57 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-06-08 22:55 - 2017-03-04 10:12 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-06-08 22:55 - 2017-03-04 10:06 - 06536248 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2017-06-08 22:55 - 2017-03-04 08:37 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdechangepin.exe
2017-06-08 22:55 - 2017-03-04 08:10 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-06-08 22:55 - 2017-03-04 07:55 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-06-08 22:55 - 2017-03-04 06:20 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2017-06-08 22:54 - 2017-03-04 11:01 - 00994760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2017-06-08 22:54 - 2017-03-04 10:18 - 01554152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2017-06-08 22:54 - 2017-03-04 10:18 - 01552104 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-06-08 22:54 - 2017-03-04 10:07 - 01040792 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-06-08 22:54 - 2017-03-04 08:37 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-06-08 22:54 - 2017-03-04 08:35 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-06-08 22:54 - 2017-03-04 08:04 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2017-06-08 22:54 - 2017-03-04 07:53 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-06-08 22:54 - 2017-03-04 07:41 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2017-06-08 22:54 - 2017-03-04 07:23 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-06-08 22:54 - 2017-03-04 06:31 - 02911744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2017-06-08 22:54 - 2017-03-04 06:19 - 01487872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2017-06-08 22:53 - 2017-03-04 07:49 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2P.dll
2017-06-08 22:52 - 2017-03-04 08:29 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll
2017-06-08 22:52 - 2017-03-04 08:11 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2017-06-08 22:52 - 2017-03-04 08:09 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2017-06-08 22:52 - 2017-03-04 07:35 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2017-06-08 22:51 - 2017-03-04 11:13 - 00800080 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-06-08 22:51 - 2017-03-04 10:48 - 01297760 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-06-08 22:51 - 2017-03-04 10:08 - 22560744 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-06-08 22:51 - 2017-03-04 09:09 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2017-06-08 22:51 - 2017-03-04 09:03 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2017-06-08 22:51 - 2017-03-04 08:59 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb
2017-06-08 22:51 - 2017-03-04 08:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2017-06-08 22:51 - 2017-03-04 08:49 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2017-06-08 22:51 - 2017-03-04 08:47 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2017-06-08 22:51 - 2017-03-04 08:44 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2017-06-08 22:51 - 2017-03-04 08:41 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2017-06-08 22:51 - 2017-03-04 08:34 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2017-06-08 22:51 - 2017-03-04 08:31 - 00185856 _____ C:\WINDOWS\system32\ism32k.dll
2017-06-08 22:51 - 2017-03-04 08:29 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\icm32.dll
2017-06-08 22:51 - 2017-03-04 08:25 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-06-08 22:51 - 2017-03-04 08:25 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2017-06-08 22:51 - 2017-03-04 08:20 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2017-06-08 22:51 - 2017-03-04 08:08 - 00852992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2017-06-08 22:51 - 2017-03-04 08:03 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2017-06-08 22:51 - 2017-03-04 08:02 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2017-06-08 22:51 - 2017-03-04 07:41 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\qwave.dll
2017-06-08 22:51 - 2017-03-04 07:24 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2017-06-08 22:50 - 2017-03-04 11:13 - 01997832 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-06-08 22:50 - 2017-03-04 10:19 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2017-06-08 22:50 - 2017-03-04 09:16 - 00388896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-06-08 22:50 - 2017-03-04 09:09 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-06-08 22:50 - 2017-03-04 08:27 - 00531968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-06-08 22:50 - 2017-03-04 08:17 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2017-06-08 22:50 - 2017-03-04 08:15 - 00695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-06-08 22:50 - 2017-03-04 08:04 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2017-06-08 22:50 - 2017-03-04 08:00 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-06-08 22:50 - 2017-03-04 06:36 - 01385472 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-06-08 22:49 - 2017-03-04 10:19 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-06-08 22:49 - 2017-03-04 10:19 - 00498952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2017-06-08 22:49 - 2017-03-04 10:18 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-06-08 22:49 - 2017-03-04 10:18 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-06-08 22:49 - 2017-03-04 10:18 - 01092464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-06-08 22:49 - 2017-03-04 10:18 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-06-08 22:49 - 2017-03-04 10:18 - 01017032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2017-06-08 22:49 - 2017-03-04 10:18 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-06-08 22:49 - 2017-03-04 10:18 - 00819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-06-08 22:49 - 2017-03-04 10:08 - 06605544 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-06-08 22:49 - 2017-03-04 09:01 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-06-08 22:49 - 2017-03-04 08:33 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LegacyNetUXHost.exe
2017-06-08 22:49 - 2017-03-04 08:25 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2017-06-08 22:49 - 2017-03-04 08:23 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2017-06-08 22:49 - 2017-03-04 08:19 - 00510464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2017-06-08 22:49 - 2017-03-04 08:19 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2017-06-08 22:49 - 2017-03-04 08:17 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-06-08 22:49 - 2017-03-04 08:16 - 00619520 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-06-08 22:49 - 2017-03-04 08:13 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-06-08 22:49 - 2017-03-04 08:08 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2017-06-08 22:49 - 2017-03-04 08:08 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2017-06-08 22:49 - 2017-03-04 08:08 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2017-06-08 22:49 - 2017-03-04 08:03 - 01001472 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2017-06-08 22:49 - 2017-03-04 08:02 - 00817152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll
2017-06-08 22:49 - 2017-03-04 07:53 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-06-08 22:49 - 2017-03-04 07:32 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-06-08 22:49 - 2017-03-04 07:25 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanpref.dll
2017-06-08 22:49 - 2017-03-04 07:00 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-06-08 22:49 - 2017-03-04 06:59 - 00882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2017-06-08 22:49 - 2017-03-04 06:52 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2017-06-08 22:49 - 2017-03-04 06:36 - 03428352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-06-08 22:49 - 2017-03-04 06:34 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-06-08 22:49 - 2017-03-04 06:28 - 14258688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-06-08 22:49 - 2017-03-04 06:26 - 12590080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-06-08 22:48 - 2017-03-04 07:18 - 07977984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-06-08 22:47 - 2017-03-04 11:09 - 00610632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-06-08 22:47 - 2017-03-04 09:29 - 00216416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-06-08 22:47 - 2017-03-04 08:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-06-08 22:47 - 2017-03-04 08:58 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2017-06-08 22:47 - 2017-03-04 08:57 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpreference.exe
2017-06-08 22:47 - 2017-03-04 08:45 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2017-06-08 22:47 - 2017-03-04 08:39 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2017-06-08 22:47 - 2017-03-04 08:39 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabbtnEx.dll
2017-06-08 22:47 - 2017-03-04 08:29 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-06-08 22:47 - 2017-03-04 08:27 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2017-06-08 22:47 - 2017-03-04 08:26 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2017-06-08 22:47 - 2017-03-04 08:08 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2017-06-08 22:47 - 2017-03-04 08:03 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2017-06-08 22:47 - 2017-03-04 07:58 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-06-08 22:47 - 2017-03-04 07:58 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll
2017-06-08 22:47 - 2017-03-04 07:49 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-06-08 22:47 - 2017-03-04 07:25 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-06-08 22:47 - 2017-03-04 07:03 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Tabbtn.dll
2017-06-08 22:46 - 2017-03-04 11:13 - 01098648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2017-06-08 22:46 - 2017-03-04 11:04 - 00687496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-06-08 22:46 - 2017-03-04 10:20 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2017-06-08 22:46 - 2017-03-04 09:17 - 00315232 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-06-08 22:46 - 2017-03-04 09:17 - 00038240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-06-08 22:46 - 2017-03-04 09:16 - 02831488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-06-08 22:46 - 2017-03-04 09:16 - 01062992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2017-06-08 22:46 - 2017-03-04 09:15 - 00549088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2017-06-08 22:46 - 2017-03-04 09:15 - 00521192 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2017-06-08 22:46 - 2017-03-04 08:49 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2017-06-08 22:46 - 2017-03-04 08:42 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2017-06-08 22:46 - 2017-03-04 08:28 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\apds.dll
2017-06-08 22:46 - 2017-03-04 08:26 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2017-06-08 22:46 - 2017-03-04 08:19 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2017-06-08 22:46 - 2017-03-04 08:10 - 00509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll
2017-06-08 22:46 - 2017-03-04 08:08 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2017-06-08 22:46 - 2017-03-04 08:08 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmIndexer.dll
2017-06-08 22:46 - 2017-03-04 08:08 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2017-06-08 22:46 - 2017-03-04 07:59 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-06-08 22:46 - 2017-03-04 07:56 - 00961536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2017-06-08 22:46 - 2017-03-04 07:54 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2017-06-08 22:46 - 2017-03-04 07:46 - 00283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-06-08 22:46 - 2017-03-04 07:24 - 01097728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-06-08 22:46 - 2017-03-04 07:22 - 00995328 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2017-06-08 22:46 - 2017-03-04 07:10 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2017-06-08 22:46 - 2017-03-04 07:04 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-06-08 22:46 - 2017-03-04 06:55 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-06-08 22:46 - 2017-01-24 05:22 - 00447095 _____ C:\WINDOWS\system32\ApnDatabase.xml
2017-06-08 22:45 - 2017-03-04 11:13 - 07467872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-06-08 22:45 - 2017-03-04 11:12 - 02656952 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-06-08 22:45 - 2017-03-04 10:56 - 01637216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-06-08 22:45 - 2017-03-04 10:49 - 03449168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2017-06-08 22:45 - 2017-03-04 10:12 - 03695152 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-06-08 22:45 - 2017-03-04 10:12 - 02607336 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-06-08 22:45 - 2017-03-04 09:27 - 00431456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2017-06-08 22:45 - 2017-03-04 09:24 - 00420704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-06-08 22:45 - 2017-03-04 08:25 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinFax.dll
2017-06-08 22:45 - 2017-03-04 08:23 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2017-06-08 22:45 - 2017-03-04 08:22 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2017-06-08 22:45 - 2017-03-04 08:16 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2017-06-08 22:45 - 2017-03-04 08:09 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-06-08 22:45 - 2017-03-04 08:05 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-06-08 22:45 - 2017-03-04 08:05 - 00602624 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-06-08 22:45 - 2017-03-04 08:05 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2017-06-08 22:45 - 2017-03-04 08:03 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-06-08 22:45 - 2017-03-04 08:00 - 01239552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2017-06-08 22:45 - 2017-03-04 08:00 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-06-08 22:45 - 2017-03-04 08:00 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-06-08 22:45 - 2017-03-04 07:59 - 01900544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2017-06-08 22:45 - 2017-03-04 07:59 - 01847808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2017-06-08 22:45 - 2017-03-04 07:57 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2017-06-08 22:45 - 2017-03-04 07:56 - 01648128 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2017-06-08 22:45 - 2017-03-04 07:55 - 01319424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2017-06-08 22:45 - 2017-03-04 07:54 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2017-06-08 22:45 - 2017-03-04 07:50 - 02054144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2017-06-08 22:45 - 2017-03-04 07:48 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-06-08 22:45 - 2017-03-04 07:46 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinFax.dll
2017-06-08 22:45 - 2017-03-04 07:42 - 02436096 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-06-08 22:45 - 2017-03-04 07:33 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2017-06-08 22:45 - 2017-03-04 07:31 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2017-06-08 22:45 - 2017-03-04 07:30 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-06-08 22:45 - 2017-03-04 07:29 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-06-08 22:45 - 2017-03-04 07:24 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-06-08 22:45 - 2017-03-04 07:24 - 01729024 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-06-08 22:45 - 2017-03-04 07:19 - 03404800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-06-08 22:45 - 2017-03-04 07:13 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2017-06-08 22:45 - 2017-03-04 07:11 - 02444800 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2017-06-08 22:45 - 2017-03-04 06:58 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-06-08 22:45 - 2017-03-04 06:50 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-06-08 22:45 - 2017-03-04 06:43 - 22375424 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-06-08 22:45 - 2017-03-04 06:34 - 06312448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-06-08 22:45 - 2017-03-04 06:33 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-06-08 22:45 - 2017-03-04 06:31 - 13392384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-06-08 22:44 - 2017-03-04 11:10 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-06-08 22:44 - 2017-03-04 10:03 - 00341944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2017-06-08 22:44 - 2017-03-04 09:17 - 00343904 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-06-08 22:44 - 2017-03-04 09:17 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-06-08 22:44 - 2017-03-04 09:17 - 00086368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-06-08 22:44 - 2017-03-04 08:50 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-06-08 22:44 - 2017-03-04 08:49 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcdAutoSetup.dll
2017-06-08 22:44 - 2017-03-04 08:48 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scfilter.sys
2017-06-08 22:44 - 2017-03-04 08:40 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2017-06-08 22:44 - 2017-03-04 08:36 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2017-06-08 22:44 - 2017-03-04 08:31 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2017-06-08 22:44 - 2017-03-04 08:28 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-06-08 22:44 - 2017-03-04 08:28 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-06-08 22:44 - 2017-03-04 08:26 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-06-08 22:44 - 2017-03-04 08:24 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2017-06-08 22:44 - 2017-03-04 08:24 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-06-08 22:44 - 2017-03-04 08:22 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\APHostService.dll
2017-06-08 22:44 - 2017-03-04 08:20 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-06-08 22:44 - 2017-03-04 08:07 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-06-08 22:44 - 2017-03-04 07:58 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-06-08 22:44 - 2017-03-04 07:52 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\licensingdiag.exe
2017-06-08 22:44 - 2017-03-04 07:27 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2017-06-08 22:44 - 2017-03-04 07:27 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
2017-06-08 22:44 - 2017-03-04 07:08 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2017-06-08 22:44 - 2017-03-04 06:48 - 04895744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-06-08 22:44 - 2017-03-04 06:39 - 18672128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-06-08 22:44 - 2017-03-04 06:37 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-06-08 22:44 - 2017-03-04 06:36 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-06-08 22:44 - 2017-03-04 06:36 - 12134912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-06-08 22:44 - 2017-03-04 06:21 - 05671424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-06-08 22:44 - 2017-03-04 06:19 - 07855616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-06-08 22:43 - 2017-03-04 11:15 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-06-08 22:43 - 2017-03-04 11:15 - 00875480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-06-08 22:43 - 2017-03-04 10:09 - 00230752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-06-08 22:43 - 2017-03-04 10:08 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2017-06-08 22:43 - 2017-03-04 10:08 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-06-08 22:43 - 2017-03-04 09:32 - 02773096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-06-08 22:43 - 2017-03-04 09:32 - 01987424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-06-08 22:43 - 2017-03-04 09:31 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2017-06-08 22:43 - 2017-03-04 09:17 - 01617760 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-06-08 22:43 - 2017-03-04 09:17 - 01294688 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-06-08 22:43 - 2017-03-04 09:17 - 00655200 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-06-08 22:43 - 2017-03-04 09:17 - 00565088 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-06-08 22:43 - 2017-03-04 09:17 - 00242528 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-06-08 22:43 - 2017-03-04 08:38 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oemlicense.dll
2017-06-08 22:43 - 2017-03-04 08:38 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\feclient.dll
2017-06-08 22:43 - 2017-03-04 08:26 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-06-08 22:43 - 2017-03-04 08:21 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2017-06-08 22:43 - 2017-03-04 08:16 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2017-06-08 22:43 - 2017-03-04 08:15 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2017-06-08 22:43 - 2017-03-04 08:14 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-06-08 22:43 - 2017-03-04 08:13 - 00602112 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-06-08 22:43 - 2017-03-04 08:09 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2017-06-08 22:43 - 2017-03-04 08:07 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2017-06-08 22:43 - 2017-03-04 08:07 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-06-08 22:43 - 2017-03-04 08:07 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-06-08 22:43 - 2017-03-04 08:05 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-06-08 22:43 - 2017-03-04 08:03 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2017-06-08 22:43 - 2017-03-04 08:02 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-06-08 22:43 - 2017-03-04 08:02 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-06-08 22:43 - 2017-03-04 08:02 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-06-08 22:43 - 2017-03-04 07:57 - 02731008 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2017-06-08 22:43 - 2017-03-04 07:55 - 01661952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-06-08 22:43 - 2017-03-04 07:53 - 04456448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-06-08 22:43 - 2017-03-04 07:47 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-06-08 22:43 - 2017-03-04 07:47 - 01052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2017-06-08 22:43 - 2017-03-04 07:39 - 01297408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
2017-06-08 22:43 - 2017-03-04 07:35 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-06-08 22:43 - 2017-03-04 07:30 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Proximity.dll
2017-06-08 22:43 - 2017-03-04 07:27 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-06-08 22:43 - 2017-03-04 07:24 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2017-06-08 22:43 - 2017-03-04 07:20 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-06-08 22:43 - 2017-03-04 07:19 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2017-06-08 22:43 - 2017-03-04 07:08 - 00984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-06-08 22:43 - 2017-03-04 06:43 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2017-06-08 22:43 - 2017-03-04 06:42 - 00651776 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2017-06-08 22:43 - 2017-03-04 06:34 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2017-06-08 22:42 - 2017-03-04 10:55 - 01038176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-06-08 22:42 - 2017-03-04 10:09 - 00730352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-06-08 22:42 - 2017-03-04 10:08 - 04516800 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-06-08 22:42 - 2017-03-04 10:07 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-06-08 22:42 - 2017-03-04 10:06 - 00742192 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2017-06-08 22:42 - 2017-03-04 10:06 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-06-08 22:42 - 2017-03-04 10:04 - 01128104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-06-08 22:42 - 2017-03-04 10:04 - 00625000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-06-08 22:42 - 2017-03-04 08:29 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-06-08 22:42 - 2017-03-04 08:21 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack_win.dll
2017-06-08 22:42 - 2017-03-04 08:11 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2017-06-08 22:42 - 2017-03-04 08:08 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2017-06-08 22:42 - 2017-03-04 08:06 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2017-06-08 22:42 - 2017-03-04 08:02 - 01159168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2017-06-08 22:42 - 2017-03-04 08:02 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-06-08 22:42 - 2017-03-04 08:02 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2017-06-08 22:42 - 2017-03-04 07:58 - 01575936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-06-08 22:42 - 2017-03-04 07:53 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-06-08 22:42 - 2017-03-04 07:41 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2017-06-08 22:42 - 2017-03-04 07:34 - 02610176 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-06-08 22:42 - 2017-03-04 07:31 - 01755648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2017-06-08 22:42 - 2017-03-04 07:31 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2017-06-08 22:42 - 2017-03-04 07:18 - 04826624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-06-08 22:42 - 2017-03-04 07:12 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-06-08 22:42 - 2017-03-04 07:08 - 03585536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-06-08 22:42 - 2017-03-04 07:03 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-06-08 22:42 - 2017-03-04 06:56 - 02563584 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2017-06-08 22:42 - 2017-03-04 06:52 - 01797120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-06-08 22:42 - 2017-03-04 06:41 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-06-08 22:42 - 2017-03-04 06:35 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2017-06-08 22:42 - 2017-03-04 06:31 - 06976512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-06-08 22:42 - 2017-03-04 06:31 - 03994112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-06-08 22:42 - 2017-03-04 06:13 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-06-08 22:30 - 2017-06-08 22:45 - 161985532 _____ C:\Users\User\Downloads\windows10.0-kb4013198-x64_7b16621bdc40cb512b7a3a51dd0d30592ab02f08 (1).msu.crdownload
2017-06-08 21:18 - 2017-06-08 21:38 - 1132391933 _____ C:\Users\User\Downloads\windows10.0-kb4013198-x64_7b16621bdc40cb512b7a3a51dd0d30592ab02f08.msu
2017-06-08 20:38 - 2017-06-08 20:38 - 00000000 ____D C:\SecurityCheck
2017-06-08 20:34 - 2017-06-08 20:38 - 00513726 _____ (glax24 (safezone.cc)) C:\Users\User\Desktop\SecurityCheck.exe
2017-06-07 18:45 - 2017-06-07 18:45 - 00064315 _____ C:\Users\User\Downloads\FRST.txt
2017-06-07 18:26 - 2017-06-07 18:26 - 00000003 _____ C:\WINDOWS\SysWOW64\HRUPPROG.TXT
2017-06-07 18:23 - 2017-06-07 18:24 - 00062806 _____ C:\Users\User\Downloads\Addition.txt
2017-06-07 18:20 - 2017-06-11 21:58 - 00000000 ____D C:\FRST
2017-06-07 17:43 - 2017-06-07 17:43 - 06754944 _____ (ESET spol. s r.o.) C:\Users\User\Downloads\esetonlinescanner_enu (1).exe
2017-06-07 17:42 - 2017-06-07 17:42 - 06754944 _____ (ESET spol. s r.o.) C:\Users\User\Downloads\esetonlinescanner_enu.exe
2017-06-01 08:25 - 2017-06-01 08:25 - 00168810 _____ C:\Users\User\Downloads\invoice_details_new.pdf
2017-06-01 08:10 - 2017-06-01 08:10 - 00064835 _____ C:\Users\User\Downloads\300007035266_0221041105_20170430.pdf
2017-05-25 20:25 - 2017-05-25 20:25 - 00297862 _____ C:\Users\User\Downloads\Akt-epharm.pdf
2017-05-20 13:13 - 2017-05-20 13:13 - 00000000 ____D C:\Users\User\AppData\LocalLow\uTorrent
2017-05-19 22:38 - 2017-06-07 09:18 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-05-16 09:42 - 2017-05-16 09:42 - 00195346 _____ C:\Users\User\Downloads\wu170509 (2).diagcab
2017-05-16 09:20 - 2017-05-16 09:20 - 00195346 _____ C:\Users\User\Downloads\wu170509 (1).diagcab
2017-05-16 08:58 - 2017-05-16 08:58 - 00195346 _____ C:\Users\User\Downloads\wu170509.diagcab
2017-05-16 08:10 - 2017-06-09 20:28 - 00000000 ____D C:\Users\User\AppData\LocalLow\Temp
2017-05-15 20:55 - 2017-05-15 20:55 - 00003628 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2017-05-15 20:28 - 2017-05-15 20:28 - 00000207 _____ C:\WINDOWS\tweaking.com-regbackup-PC-Windows-10-Pro-(64-bit).dat
2017-05-15 20:28 - 2017-05-15 20:28 - 00000000 ____D C:\RegBackup
2017-05-15 07:46 - 2017-06-07 07:51 - 00000000 ____D C:\Program Files (x86)\Tweaking.com
2017-05-15 07:26 - 2017-06-07 09:18 - 00000000 ____D C:\ProgramData\HitmanPro
2017-05-14 22:39 - 2017-05-15 07:46 - 33398384 _____ (Tweaking.com) C:\Users\User\Downloads\tweaking.com_windows_repair_aio_setup.exe
2017-05-14 22:34 - 2017-05-15 07:26 - 11583584 _____ (SurfRight B.V.) C:\Users\User\Downloads\hitmanpro_x64.exe
2017-05-14 14:26 - 2017-05-14 14:26 - 00015815 _____ C:\Users\User\Downloads\Moana.2016.DVDScr.XVID.AC3.BGAudio-DSC.torrent
2017-05-14 08:56 - 2017-05-14 08:56 - 02422448 _____ (Kaspersky Lab) C:\Users\User\Downloads\kis17.0.0.611abcden_12053.exe
2017-05-14 08:56 - 2017-05-14 08:56 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2017-05-14 08:22 - 2017-06-07 09:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-05-14 08:22 - 2017-06-07 09:18 - 00000000 ____D C:\Program Files\CCleaner
2017-05-14 08:22 - 2017-05-14 21:02 - 00002220 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-05-14 08:22 - 2017-05-14 08:22 - 00000865 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-05-14 08:21 - 2017-05-14 08:21 - 09274608 _____ (Piriform Ltd) C:\Users\User\Downloads\ccsetup528.exe
2017-05-14 08:08 - 2017-05-14 08:08 - 01663672 _____ (Malwarebytes) C:\Users\User\Downloads\JRT.exe
2017-05-13 23:45 - 2017-06-11 21:44 - 00000000 ____D C:\AdwCleaner
2017-05-13 22:16 - 2017-05-13 23:45 - 04102600 _____ C:\Users\User\Downloads\adwcleaner_6.046.exe
2017-05-13 22:14 - 2017-05-13 22:42 - 22851472 _____ (Malwarebytes ) C:\Users\User\Downloads\mbam-setup-2.2.1.1043.exe
2017-05-13 17:58 - 2017-05-13 17:58 - 00000000 ____D C:\ProgramData\SWCUTemp

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-11 21:46 - 2014-09-16 15:39 - 00000000 __SHD C:\Users\User\IntelGraphicsProfiles
2017-06-11 21:45 - 2016-02-11 05:18 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-06-11 21:44 - 2015-10-30 09:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI
2017-06-11 21:34 - 2015-01-15 23:02 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-06-11 20:58 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-06-11 20:19 - 2015-10-30 10:24 - 00000000 ___HD C:\Program Files\WindowsApps
2017-06-10 21:52 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\rescache
2017-06-09 23:26 - 2015-04-19 15:22 - 00001456 _____ C:\Users\User\AppData\Local\Adobe Save for Web 12.0 Prefs
2017-06-09 23:15 - 2014-09-23 00:37 - 00000132 _____ C:\Users\User\AppData\Roaming\Adobe PNG Format CS5 Prefs
2017-06-09 20:28 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-06-09 20:28 - 2013-08-22 18:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-06-08 23:52 - 2015-10-30 10:21 - 00000000 ____D C:\WINDOWS\INF
2017-06-08 23:51 - 2017-03-03 11:39 - 00000000 ____D C:\Program Files\Common Files\AV
2017-06-08 23:51 - 2015-10-30 10:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2017-06-08 23:51 - 2015-10-30 09:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2017-06-08 23:47 - 2015-09-05 13:48 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-06-08 23:43 - 2016-02-11 04:53 - 00268352 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-06-08 23:41 - 2015-10-30 10:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-06-08 23:41 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-06-08 23:41 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-06-08 23:41 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-06-08 23:41 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\Provisioning
2017-06-08 23:41 - 2015-10-30 09:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-06-08 23:40 - 2015-10-30 10:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2017-06-08 23:40 - 2015-10-30 10:24 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-06-08 23:40 - 2015-10-30 10:24 - 00000000 ____D C:\Program Files\Windows Defender
2017-06-08 23:40 - 2015-10-30 10:24 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-06-08 23:40 - 2015-10-30 10:24 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-06-08 23:31 - 2015-10-30 10:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-06-07 18:44 - 2015-09-08 15:01 - 00000000 ____D C:\ProgramData\Hi-Rez Studios
2017-06-07 18:44 - 2015-09-08 15:01 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2017-06-07 18:44 - 2014-09-16 17:36 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-06-07 18:17 - 2015-02-02 22:34 - 00000444 _____ C:\Users\User\Desktop\Този компютър - Пряк път.lnk
2017-06-07 09:18 - 2017-04-30 13:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\by.xatab
2017-06-07 09:18 - 2017-03-15 20:23 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-06-07 09:18 - 2017-03-15 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-06-07 09:18 - 2017-01-26 16:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2017-06-07 09:18 - 2016-12-24 21:17 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom
2017-06-07 09:18 - 2016-12-24 21:17 - 00000000 ____D C:\Program Files\TabletPlugins
2017-06-07 09:18 - 2016-12-24 21:17 - 00000000 ____D C:\Program Files (x86)\TabletPlugins
2017-06-07 09:18 - 2016-12-24 21:15 - 00000000 ____D C:\Program Files\Tablet
2017-06-07 09:18 - 2016-12-08 16:37 - 00000000 ____D C:\Users\User\AppData\Roaming\dvdcss
2017-06-07 09:18 - 2016-11-11 15:55 - 00000000 ____D C:\Users\User\Documents\Wondershare Filmora
2017-06-07 09:18 - 2016-08-16 08:35 - 00000000 ___RD C:\Users\User\Desktop\Tanya
2017-06-07 09:18 - 2016-08-02 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Connection Manager
2017-06-07 09:18 - 2016-07-14 20:09 - 00000000 ____D C:\Users\User\AppData\Local\Akamai
2017-06-07 09:18 - 2016-03-30 12:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6 LH 2013
2017-06-07 09:18 - 2016-02-11 12:31 - 00000000 ___RD C:\Users\User\3D Objects
2017-06-07 09:18 - 2016-02-04 16:47 - 00000000 ____D C:\Program Files (x86)\SADictionPro
2017-06-07 09:18 - 2016-02-04 16:46 - 00000000 ____D C:\Program Files (x86)\SADiction
2017-06-07 09:18 - 2016-02-04 16:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Software Informer
2017-06-07 09:18 - 2016-02-04 16:16 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WebTrance2
2017-06-07 09:18 - 2015-11-27 17:28 - 00000000 ____D C:\Users\User\AppData\Roaming\Spotify
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 __RSD C:\WINDOWS\Media
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ___SD C:\WINDOWS\system32\Nui
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ___RD C:\WINDOWS\Offline Web Pages
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\setup
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\migwiz
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\icsxml
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\L2Schemas
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\IME
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\Program Files\Windows Portable Devices
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2017-06-07 09:18 - 2015-10-30 10:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2017-06-07 09:18 - 2015-10-30 09:31 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2017-06-07 09:18 - 2015-10-30 09:31 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2017-06-07 09:18 - 2015-10-30 09:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-06-07 09:18 - 2015-05-10 23:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Momento Express
2017-06-07 09:18 - 2015-05-10 23:09 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2017-06-07 09:18 - 2015-05-10 23:09 - 00000000 ____D C:\WINDOWS\bg
2017-06-07 09:18 - 2015-02-02 23:05 - 00000000 ____D C:\Program Files (x86)\Mortimer Beckett and the Time Paradox
2017-06-07 09:18 - 2015-01-18 00:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinDjView
2017-06-07 09:18 - 2015-01-18 00:19 - 00000000 ____D C:\Program Files\WinDjView
2017-06-07 09:18 - 2014-12-08 20:19 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Subway Surfers 1.0
2017-06-07 09:18 - 2014-12-01 17:39 - 00000000 ___RD C:\Users\User\Dropbox
2017-06-07 09:18 - 2014-11-29 15:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\New Super Mario Forever
2017-06-07 09:18 - 2014-10-25 19:13 - 00000000 ____D C:\WINDOWS\SysWOW64\QuickTime
2017-06-07 09:18 - 2014-09-17 13:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-06-07 09:18 - 2014-09-16 21:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 11
2017-06-07 09:18 - 2014-09-16 18:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2017-06-07 09:18 - 2014-09-16 18:06 - 00000000 ____D C:\Users\User\AppData\Local\Microsoft Help
2017-06-07 09:18 - 2014-09-16 18:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2017-06-07 09:18 - 2014-09-16 18:01 - 00000000 ____D C:\Users\User\AppData\Roaming\uTorrent
2017-06-07 09:18 - 2014-09-16 18:01 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-06-07 09:18 - 2014-09-16 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-06-07 09:18 - 2014-09-16 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-06-07 09:18 - 2014-09-16 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2017-06-07 09:18 - 2014-09-16 18:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2017-06-07 09:18 - 2014-09-16 18:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-06-07 09:17 - 2015-10-30 21:23 - 00000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ___SD C:\WINDOWS\system32\dsc
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\ras
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\es-MX
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Com
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\WinMetadata
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\ras
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\ias
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\et-EE
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\es-MX
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\en-GB
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\Com
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\Bthprops
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\Cursors
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\addins
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\Program Files\Common Files\System
2017-06-07 09:17 - 2015-10-30 10:24 - 00000000 ____D C:\Program Files\Common Files\Services
2017-06-07 09:17 - 2015-10-30 09:28 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel
2017-06-07 09:17 - 2015-10-30 09:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-06-07 09:17 - 2015-10-30 09:28 - 00000000 ____D C:\WINDOWS\system32\downlevel
2017-06-07 09:17 - 2015-10-30 09:28 - 00000000 ____D C:\WINDOWS\servicing
2017-06-07 09:13 - 2016-11-10 00:51 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2017-06-07 09:13 - 2015-10-30 21:11 - 00000000 ____D C:\WINDOWS\SKB
2017-06-07 09:13 - 2015-10-30 21:11 - 00000000 ____D C:\WINDOWS\OCR
2017-06-07 09:13 - 2015-10-30 21:10 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-06-07 09:13 - 2015-10-30 21:10 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-06-07 09:13 - 2015-10-30 21:10 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-06-07 09:13 - 2015-10-30 21:10 - 00000000 ____D C:\WINDOWS\system32\winrm
2017-06-07 09:13 - 2015-10-30 21:10 - 00000000 ____D C:\WINDOWS\system32\slmgr
2017-06-07 09:13 - 2015-10-30 21:10 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-06-07 09:13 - 2015-10-30 10:26 - 00000000 ____D C:\WINDOWS\Setup
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Licenses
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SystemApps
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\spool
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\PointOfService
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\Licenses
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\IME
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\System
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\security
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\schemas
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\Resources
2017-06-07 09:13 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\PLA
2017-06-07 09:13 - 2015-10-30 09:28 - 00000000 ____D C:\WINDOWS\system32\SMI
2017-06-07 09:13 - 2014-09-16 15:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2017-06-07 09:12 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\InputMethod
2017-06-07 09:12 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\InfusedApps
2017-06-07 09:12 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\Globalization
2017-06-07 09:12 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\Branding
2017-06-07 09:12 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\appcompat
2017-06-07 09:12 - 2015-09-05 13:48 - 00000000 ____D C:\Users\User\AppData\Local\TileDataLayer
2017-06-07 09:12 - 2014-12-01 17:36 - 00000000 ____D C:\Users\User\AppData\Roaming\Dropbox
2017-06-07 09:12 - 2014-12-01 16:06 - 00000000 ____D C:\WINDOWS\ERUNT
2017-06-07 09:12 - 2014-11-16 11:35 - 00000000 ____D C:\Users\User\AppData\Roaming\rmi
2017-06-07 09:12 - 2014-11-11 22:11 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ElcomSoft
2017-06-07 09:12 - 2014-10-20 14:36 - 00000000 ____D C:\Users\User\AppData\Roaming\WebcamMax
2017-06-07 09:12 - 2014-10-12 20:07 - 00000000 ____D C:\Users\User\AppData\Local\Unity
2017-06-07 09:12 - 2014-10-06 14:58 - 00000000 ___RD C:\Users\User\Documents\Notes
2017-06-07 09:12 - 2014-09-16 18:02 - 00000000 ____D C:\Users\User\AppData\Roaming\Winamp
2017-06-07 09:12 - 2014-09-16 18:01 - 00000000 ____D C:\Users\User\AppData\Roaming\vlc
2017-06-07 09:12 - 2014-09-16 18:00 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2017-06-07 09:11 - 2017-01-26 16:52 - 00000000 ____D C:\Program Files\ATI Technologies
2017-06-07 09:11 - 2016-11-11 15:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2017-06-07 09:11 - 2016-07-13 23:37 - 00000000 ____D C:\Program Files\CMAK
2017-06-07 09:11 - 2016-07-13 23:37 - 00000000 ____D C:\Program Files (x86)\CMAK
2017-06-07 09:11 - 2016-06-06 21:53 - 00000000 ____D C:\Users\User\AppData\Local\FacebookGames
2017-06-07 09:11 - 2016-02-11 04:58 - 00000000 ____D C:\Program Files\AMD
2017-06-07 09:11 - 2016-02-11 04:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Conexant
2017-06-07 09:11 - 2016-02-11 04:57 - 00000000 ____D C:\Program Files\Dolby Digital Plus
2017-06-07 09:11 - 2016-02-11 04:56 - 00000000 ____D C:\Program Files\CONEXANT
2017-06-07 09:11 - 2016-02-11 04:44 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-06-07 09:11 - 2016-02-11 04:44 - 00000000 ____D C:\Program Files\MSBuild
2017-06-07 09:11 - 2016-02-11 04:44 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-06-07 09:11 - 2015-10-30 10:24 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2017-06-07 09:11 - 2015-10-30 10:24 - 00000000 ____D C:\Program Files\Windows NT
2017-06-07 09:11 - 2015-10-30 10:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-06-07 09:11 - 2015-10-30 10:24 - 00000000 ____D C:\Program Files (x86)\Windows NT
2017-06-07 09:11 - 2015-05-10 23:08 - 00000000 ____D C:\Program Files\Windows Live
2017-06-07 09:11 - 2015-05-10 23:08 - 00000000 ____D C:\Program Files (x86)\Windows Live
2017-06-07 09:11 - 2015-05-10 23:06 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2017-06-07 09:11 - 2015-01-15 22:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-06-07 09:11 - 2014-12-12 20:46 - 00000000 ____D C:\ProgramData\InstallShield
2017-06-07 09:11 - 2014-11-29 15:15 - 00000000 ____D C:\Program Files (x86)\New Super Mario Bros 2012
2017-06-07 09:11 - 2014-11-16 11:36 - 00000000 ____D C:\Users\User\AppData\Local\LogMeIn Hamachi
2017-06-07 09:11 - 2014-11-16 11:31 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2017-06-07 09:11 - 2014-10-20 14:35 - 00000000 ____D C:\Program Files (x86)\WebcamMax
2017-06-07 09:11 - 2014-09-19 08:13 - 00000000 ____D C:\Program Files (x86)\Photoshop
2017-06-07 09:11 - 2014-09-16 21:17 - 00000000 ____D C:\Program Files (x86)\ABBYY FineReader 11
2017-06-07 09:11 - 2014-09-16 18:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2017-06-07 09:11 - 2014-09-16 18:09 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2017-06-07 09:11 - 2014-09-16 18:08 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2017-06-07 09:11 - 2014-09-16 18:08 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2017-06-07 09:11 - 2014-09-16 18:02 - 00000000 ____D C:\Program Files (x86)\Winamp
2017-06-07 09:11 - 2014-09-16 18:01 - 00000000 ____D C:\Program Files\WinRAR
2017-06-07 09:11 - 2014-09-16 18:00 - 00000000 ____D C:\ProgramData\Skype
2017-06-07 09:11 - 2014-09-16 18:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-06-07 09:11 - 2014-09-16 18:00 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2017-06-07 09:11 - 2014-09-16 18:00 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
2017-06-07 09:11 - 2014-09-16 17:58 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2017-06-07 09:11 - 2014-09-16 17:58 - 00000000 ____D C:\Program Files (x86)\Google
2017-06-07 09:11 - 2014-09-16 17:37 - 00000000 ____D C:\ProgramData\Downloaded Installations
2017-06-07 08:55 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\registration
2017-06-07 08:40 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\Web
2017-06-07 08:40 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\Vss
2017-06-07 08:38 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-06-07 08:37 - 2016-11-10 00:51 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2017-06-07 08:37 - 2015-10-30 10:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2017-06-07 08:37 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\SystemResources
2017-06-07 08:33 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\MsDtc
2017-06-07 08:33 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-06-07 08:28 - 2015-10-30 10:24 - 00000000 ___SD C:\WINDOWS\system32\Configuration
2017-06-07 08:21 - 2015-10-30 21:34 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2017-06-07 08:21 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\Performance
2017-06-07 08:04 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\Help
2017-06-07 08:01 - 2017-04-30 14:25 - 00000000 ____D C:\Users\User\Documents\Electronic Arts
2017-06-07 08:01 - 2017-02-05 17:07 - 00000000 ____D C:\Users\User\Documents\My Games
2017-06-07 08:01 - 2015-11-27 17:29 - 00000000 ____D C:\Users\User\AppData\Local\Spotify
2017-06-07 08:01 - 2015-09-05 14:01 - 00000000 ____D C:\Users\User\AppData\Local\Publishers
2017-06-07 08:01 - 2015-03-07 11:35 - 00000000 ____D C:\Users\User\AppData\Roaming\.minecraft
2017-06-07 08:01 - 2014-09-21 11:42 - 00000000 ____D C:\Users\User\AppData\LocalLow\Unity
2017-06-07 08:01 - 2014-09-17 13:30 - 00000000 ____D C:\Users\User\AppData\LocalLow\Sun
2017-06-07 08:01 - 2014-09-16 18:00 - 00000000 ____D C:\Users\User\AppData\Roaming\Mozilla
2017-06-07 08:01 - 2014-09-16 18:00 - 00000000 ____D C:\Users\User\AppData\Roaming\DAEMON Tools Lite
2017-06-07 08:01 - 2014-09-16 15:19 - 00000000 ____D C:\Users\User\AppData\Roaming\Adobe
2017-06-07 08:01 - 2014-09-16 15:19 - 00000000 ____D C:\Users\User\AppData\Local\VirtualStore
2017-06-07 08:00 - 2014-09-16 15:19 - 00000000 ____D C:\Users\User\AppData\Local\Packages
2017-06-07 07:55 - 2016-11-11 15:55 - 00000000 ____D C:\ProgramData\Wondershare Video Editor
2017-06-07 07:55 - 2015-11-26 11:48 - 00000000 ____D C:\ProgramData\New SunWare
2017-06-07 07:55 - 2015-11-01 12:01 - 00000000 ____D C:\Users\User\AppData\Local\CEF
2017-06-07 07:55 - 2015-10-13 21:47 - 00000000 ____D C:\Users\User\AppData\Local\AMD
2017-06-07 07:55 - 2015-06-16 07:50 - 00000000 ____D C:\Users\User\AppData\Local\Dropbox
2017-06-07 07:55 - 2014-09-17 13:31 - 00000000 ____D C:\ProgramData\Oracle
2017-06-07 07:55 - 2014-09-16 17:58 - 00000000 ____D C:\Users\User\AppData\Local\Google
2017-06-07 07:54 - 2017-01-15 23:13 - 00000000 ____D C:\ProgramData\Big Fish
2017-06-07 07:54 - 2016-07-14 20:09 - 00000000 ____D C:\ProgramData\Applications
2017-06-07 07:54 - 2014-09-16 21:17 - 00000000 ____D C:\ProgramData\ABBYY
2017-06-07 07:54 - 2014-09-16 17:58 - 00000000 ____D C:\ProgramData\Adobe
2017-06-07 07:53 - 2016-11-11 15:55 - 00000000 ____D C:\Program Files\Wondershare
2017-06-07 07:53 - 2016-02-11 04:55 - 00000000 ____D C:\Program Files\Synaptics
2017-06-07 07:53 - 2014-09-16 18:01 - 00000000 ____D C:\Program Files\VideoLAN
2017-06-07 07:52 - 2016-02-11 04:56 - 00000000 ____D C:\Program Files\Intel
2017-06-07 07:52 - 2014-09-16 18:06 - 00000000 ____D C:\Program Files\Microsoft Office
2017-06-07 07:52 - 2014-09-16 18:06 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2017-06-07 07:51 - 2016-08-02 21:24 - 00000000 ____D C:\Program Files (x86)\T-Mobile
2017-06-07 07:51 - 2016-02-11 04:44 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-06-07 07:51 - 2016-02-04 16:16 - 00000000 ____D C:\Program Files (x86)\SkyCode
2017-06-07 07:51 - 2014-09-16 17:36 - 00000000 ____D C:\Program Files (x86)\Realtek
2017-06-07 07:50 - 2017-05-01 19:27 - 00000000 ____D C:\Program Files (x86)\R.G. Mechanics
2017-06-07 07:50 - 2015-12-19 00:33 - 00000000 ____D C:\Program Files (x86)\LG Electronics
2017-06-07 07:50 - 2015-10-27 15:25 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE
2017-06-07 07:50 - 2015-05-10 23:09 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2017-06-07 07:50 - 2014-09-17 13:31 - 00000000 ____D C:\Program Files (x86)\Java
2017-06-07 07:50 - 2014-09-16 18:15 - 00000000 ____D C:\Program Files (x86)\Nero
2017-06-07 07:50 - 2014-09-16 18:06 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-06-07 07:50 - 2014-09-16 18:06 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2017-06-07 07:50 - 2014-09-16 17:37 - 00000000 ____D C:\Program Files (x86)\Lenovo
2017-06-07 07:49 - 2014-11-11 22:11 - 00000000 ____D C:\Program Files (x86)\ElcomSoft
2017-06-07 07:49 - 2014-09-16 15:27 - 00000000 ____D C:\Program Files (x86)\Intel
2017-06-07 07:48 - 2017-01-26 16:52 - 00000000 ____D C:\Program Files (x86)\AMD
2017-06-07 07:48 - 2015-11-01 09:59 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-06-07 06:35 - 2014-09-16 15:19 - 00000000 ____D C:\WINDOWS\CSC
2017-06-06 15:04 - 2017-01-15 23:12 - 00000000 ____D C:\BigFishCache
2017-05-30 23:45 - 2014-09-16 15:51 - 00565416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-05-30 09:12 - 2015-09-05 13:40 - 00005430 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-05-30 09:12 - 2014-09-16 18:05 - 00185392 _____ C:\WINDOWS\system32\perfh002.dat
2017-05-30 09:12 - 2014-09-16 18:05 - 00050290 _____ C:\WINDOWS\system32\perfc002.dat
2017-05-18 21:59 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-05-16 09:00 - 2015-10-01 21:15 - 00000000 ____D C:\Users\User\AppData\Local\ElevatedDiagnostics
2017-05-15 20:55 - 2015-01-30 18:22 - 00000000 ____D C:\Users\User\Documents\Bandicam
2017-05-14 21:28 - 2014-12-01 17:32 - 00000000 ____D C:\Program Files\AVAST Software
2017-05-14 21:10 - 2014-12-01 17:32 - 00000000 ____D C:\ProgramData\AVAST Software
2017-05-14 20:51 - 2015-06-16 07:50 - 00000920 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2749757513-2474199141-1410865342-1001UA.job
2017-05-14 20:51 - 2015-06-16 07:50 - 00000868 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2749757513-2474199141-1410865342-1001Core.job
2017-05-14 10:50 - 2015-05-03 00:00 - 00000000 ____D C:\Users\User\AppData\Roaming\bin
2017-05-14 10:50 - 2015-04-25 22:45 - 00000000 _RSHD C:\Win
2017-05-14 09:02 - 2016-09-19 14:07 - 00000000 _____ C:\WINDOWS\SysWOW64\last.dump
2017-05-14 08:58 - 2015-07-10 12:05 - 00000000 ____D C:\Users\Default.migrated
2017-05-14 08:54 - 2017-05-02 12:26 - 00002370 _____ C:\WINDOWS\System32\Tasks\{B554382F-9E70-41AC-A29A-53EFCFBBD717}
2017-05-14 08:54 - 2017-04-14 20:37 - 00002832 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-05-14 08:54 - 2017-03-09 20:58 - 00002310 _____ C:\WINDOWS\System32\Tasks\{EFABECDE-CD20-469D-8BB1-05DE6D3E8F67}
2017-05-14 08:54 - 2016-02-04 16:31 - 00002588 _____ C:\WINDOWS\System32\Tasks\SoftwareInformerService
2017-05-14 08:54 - 2015-10-26 21:47 - 00002246 _____ C:\WINDOWS\System32\Tasks\{F07288F4-1BDE-4C49-ABBC-8E64D514E59C}
2017-05-14 08:54 - 2015-06-15 12:53 - 00002322 _____ C:\WINDOWS\System32\Tasks\{809A2729-3D0A-4775-B8E2-6AA09846CC26}
2017-05-14 08:54 - 2015-06-15 12:53 - 00002322 _____ C:\WINDOWS\System32\Tasks\{63F165AF-DD3C-499A-A3A1-300702131ED8}
2017-05-14 08:54 - 2015-04-20 10:51 - 00002322 _____ C:\WINDOWS\System32\Tasks\{8DBF7D03-94BD-4D81-8AB9-F8CC5306A194}
2017-05-14 08:54 - 2015-03-03 00:55 - 00002322 _____ C:\WINDOWS\System32\Tasks\{EC34CB12-979C-4B1A-B0CD-61950B4D1759}
2017-05-14 08:54 - 2014-11-16 11:34 - 00003340 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1416126846
2017-05-14 08:53 - 2017-05-05 20:23 - 00003542 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-05-14 08:53 - 2017-05-02 09:25 - 00003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-05-14 08:53 - 2017-05-02 09:25 - 00003280 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-05-14 08:53 - 2015-06-16 07:50 - 00003660 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2749757513-2474199141-1410865342-1001UA
2017-05-14 08:53 - 2015-06-16 07:50 - 00003392 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2749757513-2474199141-1410865342-1001Core
2017-05-14 08:53 - 2014-09-16 18:04 - 00003382 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-05-14 08:53 - 2014-09-16 16:07 - 00002612 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2017-05-14 08:44 - 2015-03-21 00:27 - 00000000 ____D C:\Users\User\Tracing
2017-05-14 08:44 - 2014-10-12 16:44 - 00000000 ____D C:\Users\User\AppData\Roaming\MPC-HC
2017-05-14 08:39 - 2016-02-11 04:52 - 00000000 ___DC C:\WINDOWS\Panther
2017-05-14 08:39 - 2016-02-08 19:59 - 00000000 ____D C:\Users\User\AppData\Local\CrashDumps
2017-05-14 08:39 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\ModemLogs
2017-05-14 08:39 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-05-13 23:52 - 2014-12-01 16:50 - 00000000 ____D C:\Users\User\AppData\Roaming\IObit
2017-05-12 07:42 - 2017-05-02 09:26 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-12 07:42 - 2017-05-02 09:26 - 00002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk

==================== Files in the root of some directories =======

2011-01-01 01:00 - 2011-01-01 01:00 - 0377470 _____ () C:\Program Files (x86)\advbg.ico
2015-02-02 22:49 - 2015-02-02 22:49 - 0034852 _____ () C:\Program Files (x86)\Uninstall.ini
2011-01-01 01:00 - 2011-01-01 01:00 - 0000103 _____ () C:\Program Files (x86)\Още Игри на Български.URL
2017-06-09 23:23 - 2017-06-09 23:23 - 0000132 _____ () C:\Users\User\AppData\Roaming\Adobe GIF Format CS5 Prefs
2014-09-23 00:37 - 2017-06-09 23:15 - 0000132 _____ () C:\Users\User\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-04-19 15:22 - 2017-06-09 23:26 - 0001456 _____ () C:\Users\User\AppData\Local\Adobe Save for Web 12.0 Prefs
2014-10-25 19:16 - 2015-01-26 17:34 - 0007680 _____ () C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-06-30 11:40 - 2015-08-21 21:27 - 0828671 _____ () C:\Users\User\AppData\Local\Tempmusic.ogg
2016-02-11 04:56 - 2016-02-11 04:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-06-11 08:28

==================== End of FRST.txt ============================

 

 

Addition.txt

преди 11 часа, Kremi73 написа:

Addition.txt

Addition.txt - прикачен е стария дневник..! 

 

преди 10 часа, icotonev написа:

 - прикачен е стария дневник..! 

Съжалявам, моя грешка....реагирам късно т.к. съм на работа до 19:30ч. Утре почивам, ще бъда целия ден на линия.

Addition.txt

Редактирано 12 юни 20179 г. от Kremi73 (преглед на промените)

А в момента наблюдавате ли някакви нередности...? Първоначалните проблеми има ли ги все още..?

Страниците с реклами продължават да излизат.

с всички браузъри или само с определен..?

преди 3 минути, icotonev написа:

с всички браузъри или само с определен..?

Ползвам само Google  chrome

Направете резервно копие на вашите Favourites/Bookmarks  и други данни, следвайки инструкциите защото при ресета ще изчезнат а така можете да ги възстановите (естествено ако имате такива и държите да ги възстановите)..!

 

• Backup Chrome Bookmarks

 

След това ресетнете настройките на Chrome

 

• Chrome: Chrome - Reset browser settings

 

Спрете синхронизацията на Chome с облака:

Нулиране на синхронизирането в Chrome

 

Моля, изтеглете  Zemana AntiMalware и го запишете на вашия работен плот.

• Инсталирайте програмата и след като инсталацията приключи, тя ще се стартира автоматично.
• Без да промените каквито и опции, натиснете Scan, за да започне проверката
• След кратко сканирането приключи, ако са открити заплахи натиснете Next за да ги премахнете.

Забележка: Ако се изиска рестартиране, за да завършите процеса на почистване, трябва да щракнете върху Reboot . Ако не се изисква рестартиране, моля рестартирайте компютъра ръчно.

• Отворете  Zemana AntiMalware отново.
• Кликнете върху икона и кликнете два пъти върху последния доклад.
• Сега кликнете File > Save As  и изберете своя Desktop преди да натиснете Save.
• Моля копирайте съдържанието на лог файла в следващия си пост.

 

 

 Дневници
 
В следващия си отговор, моля да включите (като копирате целите съдържания ) следните дневници:

• Дневник от Zemana AntiMalware

Zemana AntiMalware 2.72.2.388 (инсталираната версия)

-------------------------------------------------------
Scan Result            : Завършено
Scan Date              : 2017.6.12
Operating System       : Windows 10 64-bit
Processor              : 2X Intel(R) Pentium(R) CPU 2030M @ 2.50GHz
BIOS Mode              : UEFI
CUID                   : 12D3C1A3A6EDA84492AB80
Scan Type              : Проверка на системата
Duration               : 15m 27s
Scanned Objects        : 89042
Detected Objects       : 13
Excluded Objects       : 0
Read Level             : SCSI
Auto Upload            : Включен
Detect All Extensions  : Изключен
Scan Documents         : Изключен
Domain Info            : WORKGROUP,0,2

Detected Objects
-------------------------------------------------------

Security Center Disabled
Status             : Проверено
Object             : HKLM\SYSTEM\CurrentControlSet\services\wscsvc\DelayedAutoStart
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Подозрителна настройка
Cleaning Action    : Поправи
Related Objects    :
                Ключ на регистъра - HKLM\SYSTEM\CurrentControlSet\services\wscsvc\DelayedAutoStart = disabled

Firefox Search
Status             : Проверено
Object             : РџРѕРёСЃРє@Mail.Ru - http://go.mail.ru
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Подозрителна настройка на браузъра
Cleaning Action    : Поправи
Related Objects    :
                Настройка на браузъра - Firefox Search

Firefox Search
Status             : Проверено
Object             : РџРѕРёСЃРє@Mail.Ru - http://suggests.go.mail.ru
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Подозрителна настройка на браузъра
Cleaning Action    : Поправи
Related Objects    :
                Настройка на браузъра - Firefox Search

Firefox Search
Status             : Проверено
Object             : Речник РЅР° Portal.BG - http://portal.bg
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Подозрителна настройка на браузъра
Cleaning Action    : Поправи
Related Objects    :
                Настройка на браузъра - Firefox Search

Firefox Search
Status             : Проверено
Object             : Дири.Р±Рі - http://diri.bg
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Подозрителна настройка на браузъра
Cleaning Action    : Поправи
Related Objects    :
                Настройка на браузъра - Firefox Search

Chrome Homepage
Status             : Проверено
Object             : http://websearch.mocaflix.com/
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Подозрителна настройка на браузъра
Cleaning Action    : Поправи
Related Objects    :
                Настройка на браузъра - Chrome Homepage

Movie Search
Status             : Проверено
Object             : %localappdata%\google\chrome\user data\default\extensions\jmfdniemoeflbhlmcnammemhdahpcjni
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : PUA.ChromeExt!Gr
Cleaning Action    : Поправи
Related Objects    :
                Разширение на браузъра - Movie Search

wcmvcam64.sys
Status             : Проверено
Object             : %systemroot%\system32\drivers\wcmvcam64.sys
MD5                : 8F105ADE434064ADFBBFBE198513B84F
Publisher          : Tenki Technology Co., Ltd.
Size               : 1071032
Version            : 6.1.7600.16385
Detection          : Adware:Win32/OutBrowse!Ep
Cleaning Action    : Карантина
Related Objects    :
                Файл - %systemroot%\system32\drivers\wcmvcam64.sys
                Ключ на регистъра - HKLM\System\CurrentControlSet\Services\WCMVCAM\ImagePath = \SystemRoot\system32\DRIVERS\wcmvcam64.sys

{63f165af-dd3c-499a-a3a1-300702131ed8}
Status             : Проверено
Object             : NE->c:\windows\system32\tasks\{63f165af-dd3c-499a-a3a1-300702131ed8}
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Adware:Win32/CHR.TASKSCHD.GEN.A!Neng
Cleaning Action    : Карантина
Related Objects    :
                (null) - (null)

{809a2729-3d0a-4775-b8e2-6aa09846cc26}
Status             : Проверено
Object             : NE->c:\windows\system32\tasks\{809a2729-3d0a-4775-b8e2-6aa09846cc26}
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Adware:Win32/CHR.TASKSCHD.GEN.A!Neng
Cleaning Action    : Карантина
Related Objects    :
                (null) - (null)

{8dbf7d03-94bd-4d81-8ab9-f8cc5306a194}
Status             : Проверено
Object             : NE->c:\windows\system32\tasks\{8dbf7d03-94bd-4d81-8ab9-f8cc5306a194}
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Adware:Win32/CHR.TASKSCHD.GEN.A!Neng
Cleaning Action    : Карантина
Related Objects    :
                (null) - (null)

{ec34cb12-979c-4b1a-b0cd-61950b4d1759}
Status             : Проверено
Object             : NE->c:\windows\system32\tasks\{ec34cb12-979c-4b1a-b0cd-61950b4d1759}
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Adware:Win32/CHR.TASKSCHD.GEN.A!Neng
Cleaning Action    : Карантина
Related Objects    :
                (null) - (null)

{efabecde-cd20-469d-8bb1-05de6d3e8f67}
Status             : Проверено
Object             : NE->c:\windows\system32\tasks\{efabecde-cd20-469d-8bb1-05de6d3e8f67}
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Adware:Win32/CHR.TASKSCHD.GEN.A!Neng
Cleaning Action    : Карантина
Related Objects    :
                (null) - (null)

Cleaning Result
-------------------------------------------------------
Cleaned               : 13
Reported as safe      : 0
Failed                : 0
 

Как е системата след последните процедури..? 

преди 2 минути, icotonev написа:

Как е системата след последните процедури..? 

Смятам че е наред, благодаря!

преди 18 часа, Kremi73 написа:

Страниците с реклами продължават да излизат.

т.е вече всичко е наред...Прекрасно..! Радвам се..!

Довечера ще напиша някои допълнителни неща и приключваме..! А до тогава можете да направите това:

Обновете си следния софтуер:

Цитат

Java 7 Update 67 v.7.0.670 Внимание! Този софтуер вече не се поддържа. Моля, деинсталирайте го и използвайте Java SE 8 (jre-8u131-windows-i586.exe).
Java 8 Update 31 v.8.0.310 Warning! Download Update
Деинсталирайте старата версия и инсталирайте новата (jre-8u131-windows-i586.exe).

Google Chrome v.58.0.3029.110 Warning! Download Update
Mozilla Firefox 47.0.2 (x86 bg) v.47.0.2 Warning! Download Update

VLC media player v.2.1.5 Warning! Download Update
WinRAR 4.20 (64-битова версия) v.4.20.0 Warning! Download Update

Препоръчително е да деинсталирате следния софтуер:

Цитат

Windows Live Mail v.16.4.3528.0331 Внимание! Този софтуер вече не се поддържа.

Unity Web Player v.4.6.2f1 Внимание!  Препоръчително е деинсталирането. Може да станете жертва на измами.
Skype Click to Call v.8.5.0.9167 Внимание! Лентата с инструменти на браузъра. Това може да забави работата на браузъра ви и да доведе до нарушаване на поверителността.

 

Да премахнем програмите които използвахме:

 Изтеглете DelFix и го стартирайте. Сложете отметка пред:

• Remove disinfection tools <----- това ще премахне инструментите които сме използвали
• Create registry backup <----- тази опция ще създадете резервно копие от регистъра на Windows
• Purge system restore <---  това ще премахне всички предишни точки за възстановяване, ще бъде създадена нова точка  на състоянието на системата в момента.
• Reset system settings <--- това ще нулира всички настройки на системата и по подразбиране, които са били променени или от нас по време на почистването или от зловреден софтуер / инфекция

..и след това натиснете бутона Run

• След като операцията е завърши,ще се създаде дневник
• Копирате го и го поставите в следващия си отговор

Инструмента ще се самоизтрие след като приключи своята задача!

Ако има нещо което използвахме в лечението до тук и не се е премахнало след последните инструкции го премахнете ръчно ,по стандартните методи..!

 

 Деинсатлирайте Zemana AntiMalware по стандартния метод...!

 

  Дневници
 
В следващия си отговор, моля да включите следните дневници:

• DelFix

Готово, но не ми е ясно в момента имам ли антивирусна програма или не?

 

# DelFix v1.013 - Logfile created 13/06/2017 at 16:50:54
# Updated 17/04/2016 by Xplode
# Username : User - PC
# Operating System : Windows 10 Pro  (64 bits)

~ Removing disinfection tools ...

Deleted : C:\FRST
Deleted : C:\AdwCleaner
Deleted : C:\SecurityCheck
Deleted : C:\RegBackup
Deleted : C:\Users\User\Desktop\FRST-OlderVersion
Deleted : C:\Users\User\Desktop\Addition.txt
Deleted : C:\Users\User\Desktop\AdwCleaner.txt
Deleted : C:\Users\User\Desktop\adwcleaner_6.047.exe
Deleted : C:\Users\User\Desktop\FRST.txt
Deleted : C:\Users\User\Desktop\FRST64.exe
Deleted : C:\Users\User\Desktop\JRT (1).exe
Deleted : C:\Users\User\Desktop\JRT.txt
Deleted : C:\Users\User\Desktop\SecurityCheck.exe
Deleted : C:\Users\User\Downloads\Addition (1).txt
Deleted : C:\Users\User\Downloads\Addition (2).txt
Deleted : C:\Users\User\Downloads\Addition (3).txt
Deleted : C:\Users\User\Downloads\Addition.txt
Deleted : C:\Users\User\Downloads\adwcleaner_6.046.exe
Deleted : C:\Users\User\Downloads\FRST.txt
Deleted : C:\Users\User\Downloads\JRT.exe

~ Creating registry backup ... OK

~ Cleaning system restore ...

Deleted : RP #123 [JRT Pre-Junkware Removal | 06/11/2017 18:51:57]

New restore point created !

~ Resetting system settings ... OK

########## - EOF - ##########
 

 

на 7.06.2017 г. в 18:42, Kremi73 написа:

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

В момента сте с активен Windows Defender 

https://support.microsoft.com/bg-bg/help/17464/windows-defender-help-protect-computer

преди 9 минути, icotonev написа:

В момента сте с активен Windows Defender 

https://support.microsoft.com/bg-bg/help/17464/windows-defender-help-protect-computer

Благодаря!!!

 Малко превенции:

 Едно от важните неща е винаги да актуализирате вашата система с MICROSOFT UPDATES  . Чрез тях можете да получите всички критични актуализации за вашата операционна система и Internet Explorer. Поддържането на вашата операционна система и браузър с актуални ъпдейти, ще помогне да  направи системата по-малко податлива на атаки от зловреден софтуер. Той, зловредния софтуер, се създава почти всеки ден. Много от тези заплахи, са насочени към уязвими места във вашия  софтуер. Софтуерните компании редовно публикуват актуализации, които определят тези уязвимости.

Цитат

Повечето проблеми със сигурността, са свързани с уязвимости в операционната система. Както се откриват тези недостатъци софтуерни компании създарват кръпки и обновления, за да ви предпазят от зловредния софтуер. 

 

 Златно правило е да имате винаги  резервно копие на вашата система. По този начин възстановяването на системата при нужда е в пъти по-лесен и бърз начин за връщане на работещото състояние на системата от преинсталация или опит за ръчно премахване на даден проблем. Такъв образ може да се създаде с външна програма като Macrium Reflect Free. Можете да видите и тази тема 

  Винаги  поддържайте антивирусната си програма  с актуални дефиниции и  сканирайте с нея редовно.Само ще добавя никога да не разчитате само на  AV програма (ако си изберете безплатен вариант) ,добавете задължително и качествен HIPS базиран софтуер... COMODO, PrivateFirewall, ...What is Host Intrusion Prevention System (HIPS) and how does it work? .Справка: Сигурност и антивирусна защита
 
Забележка: Трябва да имате само една антивирусна инсталиран в даден момент. Ако имате повече от една антивирусна програма е вероятно да предизвика конфликти и може да намали общата защита, както и нарушаване на работата на вашия компютър.

 В допълнение към антивирусен софтуер, който дава  защита в реално време, трябва да имаме On-demand скенер (антивирусни скенери  по заявка).Препоръчвам такава програма Malwarebytes' Anti-Malware като  периодично да сканирате системата си с нея (поне един -два пъти в седмицата),като не забравяйте да обновите дефинициите и преди всяко сканиране..  Напомням че това не е антивирусна програма а едно изключително добро допълнение към нея..!

Как да изберем най-добрата антивирусна програма..?

 

 Още няколко програмки по мое мнение задължителни за всеки компютър:

За защита от така нашумялите криптовируси можете да използвате  Kaspersky Anti-Ransomware tool for business. Това е важно допълнение към антивирусната ви програма (особено ако тя не разполага с такъв модул за защита). Можете да добавите и Malwarebytes Anti-Exploit към защитния слой на системата. CryptoPrevent също е добро допълнение към Kaspersky Anti-Ransomware tool for business и Malwarebytes Anti-Exploit (защото представлява пасивна защита на базата на правила)
 
- CryptoPrevent - за защита срещу CryptoLocker и подобни заплахи Имайте предвид, че ако изберете високо ниво на защита в CryptoPrevent след това можете да срещнете някои проблеми с инсталираните приложения. Може да се наложи да се намали нивото на защита, ако се натъкнете на подобни проблеми или да добавите вписванията към белия списък:
 

 

- Malwarebytes Anti-Exploit - за информация  MBAE (Malwarebytes Anti-Exploit) vs All EKs (Exploit Kits)
 

 

- McShield - за предотвратяване на инфекции, разпространявани чрез сменяеми носители

 

Съвети за сигурност - силно препоръчително четене:

• Simple and easy ways to keep your computer safe and secure on the Internet

 

За да останете защитени, трябва да актуализирате редовно целия  си софтуер. Прверявайте вашата система за актуални обновления и уязвимости с помощта на следните програми:

• PatchMyPC 
• Secunia Personal Software Inspector

Основно внимание на следните програми:

• Adobe Reader;
• Adobe Flash Player;
• Sun Java;
• Apple QuickTime;
• Базите и модулите на антивирусните програми
• наличните браузъри  - обновени и с със задължителни следните аддони:

- За Firefox, използвайте  HTTPS Everywhere, NoScript , uBlock Origin 
- За Chrome използвайте  HTTPS Everywhere за Chrome, ScriptSafe, uBlock Origin

 

Ако нямате други проблеми да приключваме...Маркирам случая за "Решен"...! Пожелавам лек ден и безопасен интернет..! 

Благодаря за труда, ще взема под внимание препоръките.Успехи в борбата с "гадинките" и всичко добро!